Hitman Pro Support and Discussion Thread

Re: Anyone tried out Hitman Pro?

Here's the results of the beta scan:




Here's the results of build 92 scan:




The build 92 scan flagged additional files as suspicious, all of the flagged files on both scans have been deleted. I also deleted the directories the files were in. I also scanned with Prevx which found nothing. How is Hitman scanning directories that no longer exist?

 

Re: Anyone tried out Hitman Pro?

I see you are using AyRecovery? I think that software adds an additional layer to file system.

While you deleted the folder, the Trojans are actually still on disk. AyRecovery just isn't serving them to Windows.

Hitman Pro reads sectors directly from disk (RAW) and parses the NTFS records. So the Trojan is still on the disk, AyRecovery just let Windows think it isn't.

 

Re: Anyone tried out Hitman Pro?

We have just updated the latest beta to build 94 (x86). You can download it from the same url as previous beta: http://files.surfright.nl/HitmanPro35beta.exe

 

Re: Anyone tried out Hitman Pro?

The Sims 3 patches are not malware.

 

Re: Anyone tried out Hitman Pro?

Erik, it was an issue with AyRecovery. I uninstalled it and then scanned with both build 92 and the beta and got clean results. It's interesting that all of the other scanners I used (SAS, MBAM, and Prevx) showed nothing. Did you recently change the scanning method of Hitman? I remember using older builds of Hitman along with AyRecovery and never ran into this issue. Thanks for the assistance in resolving this for me.

 

Re: Anyone tried out Hitman Pro?

That's why they are listed as Suspicious (which isn't a malware classification).

The reason for it being listed as Suspicious is that Hitman Pro finds the file on disk (raw sector read/ntfs parsing) but it cannot find the file in Windows. This is typically a rootkit-like discrepancy.

Basically this means Hitman Pro is currently not compatible with AyRecovery (and also Rollback RX) due to Hitman's scanning methodology. But I'll see if I can sqeeze in a compatibility mode in 3.5.5 as we see a lot of Wilders members using this kind of software.

The compatibility mode means that the entire scan is done by talking to the Windows API. But this mode will be slower since on-access AV products will scan along with Hitman Pro. More important, this mode will not detect as many rootkits since Hitman Pro will no longer be able to detect any Windows versus what's-on-disk discrepancies.

 

Re: 64-bit Winsock Repair issue fixed

Hi Erik,

Will you have a new Vender Partner in the cloud with the release version coming out tomorrow or Saturday?

TIA,

TH

 

Re: 64-bit Winsock Repair issue fixed

Still nothing to report on the state of additional partners

 

Re: Anyone tried out Hitman Pro?

We just released an update of the beta. See our blog.

The layout of the Settings window was changed and ...

... we also managed to squeeze in the Compatible Disk Access into 3.5.5 !

You can choose this mode on the Advanced tab under Settings. Note though that you won't find complex rootkits using this mode. But if you suspect a rootkit you should rollback to your latest Rollback RX snapshot

Also we have improved the Scan-at-startup by postponing the scan until the hard disk is near idle. There are now also some additional Scan-at-startup settings.

Please let me know of any trouble you might find in this latest build.

 

Re: Anyone tried out Hitman Pro?

I tried the 64-bit beta again, haven't encountered any bugs/problems. Working flawless.
I like the layout of the settings tab. Also the scan speed improved over the build 94 beta for me.

Fast scan: was 30 sec, now 21 sec.
Normal: was 1 min 30 sec, now 1 min 21 sec.
EWS scan: was 1 min 30 sec, now 1 min 13 sec. Also this scan didn't point a NVIDIA driver as suspicious anymore.

Nice work, looking forward to the final (and Hitman Pro 3.6).

 

Re: Anyone tried out Hitman Pro?

I'm liking the new beta in that it doesn't install itself in the start menu as well as program files. Making it truly portable

 

Re: Anyone tried out Hitman Pro?

Just create a shortcut on the USB stick or CD with the command line switch /noinstall

 

Re: Anyone tried out Hitman Pro?

Haha true. Is there a place where all the command line switches are listed?

 

Re: Anyone tried out Hitman Pro?

Any update on the release version to go out?

TIA,

TH

 

Re: Anyone tried out Hitman Pro?

I guess they are really busy. But I think we can be sure it will be released early next week.

So, my final guess on the new partner in the cloud: a direct link to the Panda Cloud?

 

Re: Anyone tried out Hitman Pro?

We have been working around the clock finalizing version 3.5.5.

Beta of build 96 is out now (release notes here):

The bits can be downloaded from here:
32-bit: http://files.surfright.nl/HitmanPro35beta.exe
64-bit: http://files.surfright.nl/HitmanPro35beta_x64.exe

Please report problems asap.

If no problems arise then I will mark this build as final tonight/tomorrow so that everybody will get this update.

So the build 96 bits will be the same as the final

 

Re: Anyone tried out Hitman Pro?

I see it is the one from 16 april? On that one (64-bits) I didn't encounter any problems.

 

Re: Anyone tried out Hitman Pro?

The release notes are old but the download is of a few minutes ago as I just uploaded new binaries.

Please let me know if this version also works for you.

 

Re: Anyone tried out Hitman Pro?

For me it is working fine. I tried all the scan types and tried the startup scan. Didn't encounter anything unexpected.
I am not using proxy or harddisk snapshot software, so I can't tell you anything about that.

 

Re: Anyone tried out Hitman Pro?

No problems with current Beta here either. Not through a proxy though.

 

Re: Anyone tried out Hitman Pro?

Previous 3.5.5-Build 94 Beta, Number of scanned files was 45924 in 3 minutes.

This latest has shot up to 59483 in 3m 12s. See screenshot.

Looking good.

 

Re: Anyone tried out Hitman Pro?

I still have problems... There is a "conflict" with IDM's Advanced Browser Integration. When I choose to fix this, after reboot IDM asks me to enable the integration. Then, the above line in the scan results is shown again. Win7 Ultimate x64 here. No probs on Vista x32.
Previous stable versions of Hitman Pro had the same issue.

 

Re: Anyone tried out Hitman Pro?

Well, dunno, but... why are you "fixing" it then if you know it's a false positive?

 

Re: Anyone tried out Hitman Pro?

I can only fix this or leave it as it is. There's no option to report this as a false positive and hide this line.

 

Re: Anyone tried out Hitman Pro?

Yeah, so just leave it alone? I don't exactly see how's this a problem.