Hitman Pro Support and Discussion Thread

Discussion in 'other anti-malware software' started by yashau, Mar 20, 2009.

  1. HealingStargate

    HealingStargate Registered Member

    Joined:
    Jan 3, 2009
    Posts:
    160
    Location:
    USA
    Re: Anyone tried out Hitman Pro?

    Love this product. Looking forward to see what it will offer in the future.
     
  2. skism

    skism Registered Member

    Joined:
    May 7, 2009
    Posts:
    10
  3. erikloman

    erikloman Developer

    Joined:
    Jun 4, 2009
    Posts:
    3,152
    Location:
    Hengelo, The Netherlands
    Re: Anyone tried out Hitman Pro?

    I managed to get some of the malware used in the review by retrieving them from the same URLs in de video. But some were already gone :doubt: . So I can only reproduce some of the things the reviewer encountered.

    The reviewer states that "Hitman Pro didn't do so good". But its MBAM that lists entries that are not malware and the reviewer blames Hitman Pro for leaving stuff behind! :thumbd:

    In video 2 at 6:20 the reviewer says about MBAM: "this is from the heuristics, so that's pretty good". Well, the eight pfx*.dll files that MBAM finds are all 0 bytes in size. I also checked for Alternate Data Streams but there weren't any. MBAM detects 'malware' based on name instead of contents. How heuristic is that?

    The reviewer also said: "a couple of backdoors here" but MBAM lists 2 registry keys. I certainly would not go as far as calling two dangling registry keys as backdoors o_O

    Of course, I saw some room for improvement in the video but the end conclusion is not fair at all. Hitman Pro did remove all malware. There are 2 dangling registry keys and a couple of 0 byte files left ...
     
  4. markloman

    markloman Developer

    Joined:
    Jan 25, 2005
    Posts:
    581
    Location:
    Hengelo
    Re: Anyone tried out Hitman Pro?

    Since Hitman Pro 3.5 is a quick on demand second opinion malware remover, it is too bad the reviewer didn't test the program like it is used in the field (the other way around): active 0-day malware, other AV (or AV's) to scan and clean first, Hitman Pro as second opinion. That would result in a lot more interesting review ;)
     
  5. rdsu

    rdsu Registered Member

    Joined:
    Jun 28, 2003
    Posts:
    4,540
  6. firzen771

    firzen771 Registered Member

    Joined:
    Oct 29, 2007
    Posts:
    4,815
    Location:
    Canada
  7. erikloman

    erikloman Developer

    Joined:
    Jun 4, 2009
    Posts:
    3,152
    Location:
    Hengelo, The Netherlands
    Re: Anyone tried out Hitman Pro?

    I have resolved the G Data FP.
     
  8. erikloman

    erikloman Developer

    Joined:
    Jun 4, 2009
    Posts:
    3,152
    Location:
    Hengelo, The Netherlands
    Re: Anyone tried out Hitman Pro?

    Video reviews seem to be popular at the moment:

    Part 1:
    http://www.youtube.com/user/jamesste2k7#play/all/uploads-all/1/mNaLm8ApZkE

    Part 2:
    http://www.youtube.com/user/jamesste2k7#play/all/uploads-all/0/kmWfYqqdYwI

    Also this reviewer uses MBAM to see whether there are some left overs. Hitman Pro has no definitions and uses heuristics to find out which data files and registry keys belong to the threat.

    This reviewer has more knowledge of what is actually left on the machine while the review by LANGUY99 didn't interpret what MBAM actually reported.

    Funny to see that one reviewer says 'didn't do so good' while the other awards '10 out of 10'.
     
    Last edited: Sep 26, 2009
  9. nineine

    nineine Registered Member

    Joined:
    Sep 13, 2009
    Posts:
    140
    Re: Anyone tried out Hitman Pro?

    Ive downloaded build 75 and I can see the option in settings to add 'Scan with Hitman Pro' to the shell. However this option is grayed out and so I cannot actually integrate it into the shell.
     
  10. Saraceno

    Saraceno Registered Member

    Joined:
    Mar 24, 2008
    Posts:
    2,405
    Re: Anyone tried out Hitman Pro?

    Internet video reviews are particularly good in showing how a program is setup, and how it scans, but regarding malware removal, the sample size is generally very limited.

    So they aren't the definitive answer on whether a program is great or not.

    But with youtube, sometimes a person with a small number of malware samples, is getting all the youtube hits as no other videos exist on a security program/product. Best thing developers can do, while testing their program with many samples, hit the record button and upload it to youtube to show the program in action.
     
  11. jmonge

    jmonge Registered Member

    Joined:
    Mar 20, 2008
    Posts:
    13,744
    Location:
    Canada
    Re: Anyone tried out Hitman Pro?

    the best thing to do it is better to test it our self,i go malware hunting in the jungle dot com and load my machine with all type of malware and try the antimalware i want to use or buy;) then i decide to use it if it qualify;)
     
  12. acr1965

    acr1965 Registered Member

    Joined:
    Oct 12, 2006
    Posts:
    4,995
    Re: Anyone tried out Hitman Pro?

    I have build 75 and have the option available. Free version here.
     
  13. SammyJack

    SammyJack Registered Member

    Joined:
    Aug 19, 2009
    Posts:
    129
    Re: Anyone tried out Hitman Pro?


    Hi nineine.

    try to run the exe,complete a scan,then click on the shortcut that will be created on your desktop.
    from there when you open settings you should be able to check the option.
     
  14. LoneWolf

    LoneWolf Registered Member

    Joined:
    Jan 2, 2006
    Posts:
    3,818
    Re: Anyone tried out Hitman Pro?

    Where is the quarantine in HMP anyway?
    Is it in the trial version somewhere or just in the paid version?
     
  15. dlimanov

    dlimanov Registered Member

    Joined:
    Jun 10, 2009
    Posts:
    204
    Re: Anyone tried out Hitman Pro?

    Erik,
    Can you tell me how up-to-date are the Hitman's engines? I visited a website today that tried to load a PDF exploit. Saved it locally, scanned it with both Hitman and PrevX, no infections found.
    Uploaded it to ~ Snipped VirusTotal Link per Policy ~, and it's being detected by 14 engines, including A-squared, Antivir and G-Data, which Hitman uses. Why didn't the scan pick it up, if Virustotal's engines did? Are they using different, more up-to-date engines than those of Hitman?
    Thanks!

    P.S. PM me if you need a link to infecting site or malware sample.
    P.P.S. I am using Hitman 3.5.1, build 75.
     
    Last edited by a moderator: Sep 27, 2009
  16. erikloman

    erikloman Developer

    Joined:
    Jun 4, 2009
    Posts:
    3,152
    Location:
    Hengelo, The Netherlands
    Re: Anyone tried out Hitman Pro?

    There is currently no quarantine in Hitman Pro. This because restoring malware is quite difficult, although not impossible. It will be in a future version but it is not high on our wish list. If more people request this function it will get a higher priority.
     
  17. erikloman

    erikloman Developer

    Joined:
    Jun 4, 2009
    Posts:
    3,152
    Location:
    Hengelo, The Netherlands
    Re: Anyone tried out Hitman Pro?

    Hitman Pro is a cloud scanner. This means it uses scan engines that are located on the internet, much like VirusTotal. Using this approach requires a suspicious file to be uploaded to those servers. Due to privacy reasons, Hitman Pro and Prevx do not upload data files like office documents, images, music files or PDF documents. So Hitman Pro currently does not provide detection for PDF exploits.
     
    Last edited by a moderator: Sep 27, 2009
  18. dlimanov

    dlimanov Registered Member

    Joined:
    Jun 10, 2009
    Posts:
    204
    Re: Anyone tried out Hitman Pro?

    Erik,
    Thanks for your reply. While I understand and appreciate the privacy concerns, the lack of detection for PDF (and Word, Excel, etc.) exploits is a deal breaker for me. I know there have been rumors about Hitman's on-access engine; would the same limitations apply to it as well? Are there plans to circumvent the privacy/confidentially issues somehow to provide protection against these kinds of threats in the future?
    Thank you!
     
  19. Saraceno

    Saraceno Registered Member

    Joined:
    Mar 24, 2008
    Posts:
    2,405
    Re: Anyone tried out Hitman Pro?

    In my opinion, I think people would go 'nuts' if they watched a PDF of theirs being uploaded to the cloud, for example, with financial or personal information.

    As Erik mentioned, Hitman Pro is designed to run with another program to provide that additional layer of protection, to run with Avira, or Nod etc. To run at startup when the comp is rebooted.

    For PDF exploits, I think a user would be best installing something such as a-squared free to use on-demand. That way you can scan every file, and run Hitman Pro for additional checking.
     
  20. dlimanov

    dlimanov Registered Member

    Joined:
    Jun 10, 2009
    Posts:
    204
    Re: Anyone tried out Hitman Pro?

    Hi Saraceno,
    I do understand the logic and reasoning behind not scanning PDFs and other file types potentially containing private information. What I was wondering if there was something in the works along the lines of static detection for these file types that didn't require uploading the file to the cloud; or some kind of a "safe upload" where the file itself is not upload (maybe its signature/checksum is?) or only part of the file that is suspicious is uploaded for analysis. Again, I'm fishing here, but this is where I was coming from -- especially in the light of rumors of Hitman working on an on-access scanner as well.
     
  21. acr1965

    acr1965 Registered Member

    Joined:
    Oct 12, 2006
    Posts:
    4,995
    Re: Anyone tried out Hitman Pro?

    I have a pdf document sitting on my desktop and decided to right click it and scan with HMP. The HMP says it scans it and finds no "identified traces". The scan time says 0 seconds.

    I suspect the pdf file was not actually scanned because of the "0s" scan time. Is this correct?
     
  22. dlimanov

    dlimanov Registered Member

    Joined:
    Jun 10, 2009
    Posts:
    204
    Re: Anyone tried out Hitman Pro?

    Yep, it's exactly the same result I got. It didn't get scanned, I assume.
     
  23. acr1965

    acr1965 Registered Member

    Joined:
    Oct 12, 2006
    Posts:
    4,995
    Re: Anyone tried out Hitman Pro?

    If that is the case I think it would be more prudent to state on the HMP interface that it does not scan this type of file as opposed to-

    Number of files scanned- 1
    Number of identified traces- 0

    The above could give a person the assumption that the file was scanned and found to be clean as opposed to not scanned.
     
  24. Saraceno

    Saraceno Registered Member

    Joined:
    Mar 24, 2008
    Posts:
    2,405
    Re: Anyone tried out Hitman Pro?

    Regarding pdf exploits, if they install a backdoor trojan, change the wallpaper or install a password stealer, wouldn't a scanner such as Hitman Pro or a free AV then detect the running process?

    Also, isn't the recommendation to overcome pdf exploits to always keep adobe acrobat updated? eg. run http://secunia.com/vulnerability_scanning/
     
  25. LoneWolf

    LoneWolf Registered Member

    Joined:
    Jan 2, 2006
    Posts:
    3,818
    Re: Anyone tried out Hitman Pro?

    I was thinking more on the lines of restoring a FP, should that occur.
    I can't think of one blacklisting software that does not have a quarantine of some kind.

    That's good to hear.

    To bad, I believe it to be an important feature.
     
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.