Hitman Pro Support and Discussion Thread

Updating from build 202 to 203...

 

As has been said before, but i feel the need to say again, nice tray!

 

Thanks!

 

Scanning.... but why these detections? Takes forever to upload to server.

 

Finished....Phew!

 

After the last collapse of the PC he is back with the security crowd madness...

 

Maybe there is method in my madness.

 

My Dell 64 bit updated fine but my Acer 32 bit appeared to update and go back to version 201.Both are running Win7.

 

vista 32 bit home premium and windws 7 64 bit had no problems...

 

thanks mark

 

Hi




Did you need more help or more infos for the problem

Surfrights answer is

I just heard that the 203 version has been released. Maybe you can test that version and tell me if the problem still occurs? That would be much appreciated.

Thank you for your help and feedback.

 

No probs at all with 203 (and 202)

 

@Gerard less programs installed, less attack surface, less time checking startups ===> Less is more even with two cores

 

No that's a Photoshop.

 

Exactly, the method of madness.

 

Hello,

On-demand manual scans now run with no issues with version 203. However, scheduled scans with version 203 now lock up during the scan process. The entire system is no longer freezing/locking up forcing a hard reboot as with version 202, it is only the HMP process launched by the scheduler that freezes and locks up. I can manually kill the HMP process once it freezes, then launch a manual scan which runs just fine. On the next scheduled scan, the scan freezing/locking up issue returns...

 

fp
C:\Users\Ale x\Desktop\JRT.exe
Size . . . . . . . : 563.461 bytes
Age . . . . . . . : 0.0 days (2013-08-06 19:02:3
Entropy . . . . . : 8.0
SHA-256 . . . . . : D40C234C9DEBC0D1EC4F06D658518BB49A782352FC2BE4553D356D80F9DB8F28
Product . . . . . : 7ZSfxNew
Publisher . . . . : Oleg N. Scherbakov
Description . . . : 7z Setup SFX
Version . . . . . : 1.2.0.715
Copyright . . . . : Copyright © 2005-2007 Oleg N. Scherbakov
> Kaspersky . . . . : Trojan.Win32.Pasta.vxz
Fuzzy . . . . . . : 110.0
Forensic Cluster
-34.3s C:\Users\Ale x\AppData\Local\Mozilla\Firefox\Profiles\fx1q1aye.default\Cache\D\12\9DDACd01
-34.0s C:\Users\Ale x\AppData\Roaming\Mozilla\Firefox\Profiles\fx1q1aye.default\healthreport\state.json
-33.9s C:\Users\Ale x\AppData\Local\Mozilla\Firefox\Profiles\fx1q1aye.default\Cache\4\F9\2CC2Fd01
-25.2s C:\Users\Ale x\AppData\Local\Mozilla\Firefox\Profiles\fx1q1aye.default\Cache\7\4E\7FE0Bd01
-23.9s C:\Users\Ale x\AppData\Local\Mozilla\Firefox\Profiles\fx1q1aye.default\Cache\1\0D\1A47Ed01
-21.1s C:\Windows\Prefetch\ReadyBoot\Trace2.fx
-20.7s C:\Users\Ale x\AppData\Local\Mozilla\Firefox\Profiles\fx1q1aye.default\Cache\4\EC\6DA31d01
-19.6s C:\Users\Ale x\AppData\Local\Mozilla\Firefox\Profiles\fx1q1aye.default\Cache\1\97\EBF85d01
-16.0s C:\Users\Ale x\Desktop\adwcleaner.exe
-3.0s C:\Users\Ale x\Desktop\JRT.exe
0.8s C:\ProgramData\Microsoft\Microsoft Antimalware\Scans\History\Results\Resource\{95C44F69-DFD7-4113-BF8E-755BB8F277DE}
3.2s C:\ProgramData\Microsoft\Microsoft Antimalware\Scans\History\Results\Resource\{3C35A0EE-70F4-4540-BD86-D41D14D21536}

 

C:\windows\SysWOW64\FlashPlayerUpdateService.exe -> Quarantined
Size . . . . . . . : 163.328 bytes
Age . . . . . . . : 50.0 days (2013-06-18 18:23:00)
Entropy . . . . . : 6.4
SHA-256 . . . . . : B2CAD8322DB85F67DB6EA074D00C2ED56CE1FA92952D07B70BAAC249FA18236D
Product . . . . . : Adobe® Flash® Player Update Service
Publisher . . . . : Adobe Systems Incorporated
Description . . . : Adobe® Flash® Player Update Service 11.6 r602
Version . . . . . : 11,6,602,180
Copyright . . . . : Copyright © 1996 Adobe Systems Incorporated
> Kaspersky . . . . : Trojan-Downloader.Win32.MultiDL.c
Fuzzy . . . . . . : 102.0

C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe -> Quarantined
Size . . . . . . . : 163.328 bytes
Age . . . . . . . : 486.8 days (2012-04-07 23:26:27)
Entropy . . . . . : 6.4
SHA-256 . . . . . : B2CAD8322DB85F67DB6EA074D00C2ED56CE1FA92952D07B70BAAC249FA18236D
Product . . . . . : Adobe® Flash® Player Update Service
Publisher . . . . : Adobe Systems Incorporated
Description . . . : Adobe® Flash® Player Update Service 11.6 r602
Version . . . . . : 11,6,602,180
Copyright . . . . : Copyright © 1996 Adobe Systems Incorporated
Service . . . . . : AdobeFlashPlayerUpdateSvc
Parent Name . . . : C:\windows\system32\services.exe
Running processes : 2640
> Kaspersky . . . . : Trojan-Downloader.Win32.MultiDL.c
Fuzzy . . . . . . : 107.0
Startup
C:\windows\Tasks\Adobe Flash Player Updater.job
HKLM\SYSTEM\CurrentControlSet\Services\AdobeFlashPlayerUpdateSvc\

 

The Acer updated fine with v203

 

C:\Program Files\RADVideo\radvideo.exe -> Quarantined
Size . . . . . . . : 56.832 bytes
Age . . . . . . . : 100.4 days (2013-04-29 14:13:25)
Entropy . . . . . : 7.7
SHA-256 . . . . . : 18E7AE3783C96153E983FAE730A90B853B59BCEB81441CD4CFDF5122F5630547
Product . . . . . : Bink and Smacker
Publisher . . . . : RAD Game Tools, Inc.
Description . . . : RAD Video Tools
Version . . . . . : 2.1c/1.990c
Copyright . . . . : Copyright (C) 1994-2013, RAD Game Tools, Inc.
> Ikarus . . . . . . : Trojan.Crypt!IK
Fuzzy . . . . . . : 100.0
References
C:\Users\hp\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Bink and Smacker\RAD Video Tools.lnk
C:\Users\hp\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Bink and Smacker\RAD Video Tools.lnk

 

What are the latest vendor engines?

 

Kaspersky
Emsisoft
Bitdefender

Or do you mean which version of them?

 

the 3 mosquetieres

 

Going fully speculative, I'd say the most recent tech as those partners are for malware-identification-in-the-cloud.
It's not like traditional AV where an engine is licensed to another AV vendor, for detection and identification.

 

Unknow in EWS: BANTExt.sys (Belarc Advisor)
BANTExt.sys-19512.html