Zemana detects the running process as well. It basically lists it double. Zemana and HitmanPro both see the actual malware file: atibi.exe. If you let it clean by HitmanPro and reboot the threat is gone.
