Hitman Pro Support and Discussion Thread

Keep the hashes coming

 

Hi Erik

Can you explain me what did you mean with your answer please

 

He meant that you should keep posting the files that are false positives if you need to! He'll take care of it!

 

Hi Erik

I have another one File for you for checking and whitelist


Properties

Name NPSWF32_13_0_0_214.dll
Location C:\Windows\system32\Macromed\Flash
Size 15.6 MB
Time 0.0 days ago (2014-05-16 16:48:52)
Authenticode Valid
Entropy 7.0
RSA Key Size 2048
SHA-256 564E2982F9C43C6BFB7450DA5CBE651DAE7A5C51CE2539A8CC27BA4C0B5DE0F8

Scoring (6.0)

Entropy (or randomness) indicates the program is encrypted, compressed or obfuscated. This is not typical for most programs.
Authors name is missing in version info. This is not common to most programs.
Version control is missing. This file is probably created by an individual. This is not typical for most programs.
Program starts automatically without user intervention.
Time indicates that the file appeared recently on this computer.

Program is code signed with a valid Authenticode certificate.

Startup

HKLM\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer\

References

C:\Windows\system32\Macromed\Flash\flashplayer.xpt

Forensic Cluster

* C:\Windows\System32\Macromed\Flash\NPSWF32_13_0_0_214.dll
0.3s C:\Windows\System32\Macromed\Flash\FlashUtil32_13_0_0_214_Plugin.exe
0.5s C:\Windows\System32\Macromed\Flash\FlashPlayerPlugin_13_0_0_214.exe
2.9s C:\Windows\Prefetch\FLASHPLAYERUPDATESERVICE.EXE-0CF170F4.pf
3.2s C:\Windows\Prefetch\INSTALL_FLASH_PLAYER.EXE-F60B424E.pf

　
SHA256: 564e2982f9c43c6bfb7450da5cbe651dae7a5c51ce2539a8cc27ba4c0b5de0f8
Dateiname: NPSWF32_13_0_0_214.dll
Erkennungsrate: 0 / 52
Analyse-Datum: 2014-05-16 16:07:21 UTC ( vor 1 Minute )

 

Hi

Okay thank you for your answer

 

I think he also meant HitmanPro should mainly be used for "default scanning". Early Warning Scoring should not normally be used to whitelist files as it will find many "suspicious" files even though they obviously are clean.

 

So 1 Year License renew via Shop-surfright done.

 

Hi

Thank you very much for your answer

 

Hi.

I can't see the "renew" option in the shop page.

I like to renew a 3Year Subscrition for 3PCs. (4 if possible.)

 

sorry i mean i buy a 1 Year licens so you can buy a 3 Year Licens an so far
of course there is no renewel Plan in the Surfright Shop.But maybe a good
idea in the Future for Surfright to include Plan Options in the Online Shop.

 

I'm having an issue with intermittent. blocking of https: sites, most significantly https://www.google.com, but intermittently other https sites.
Started when I was using MBAM latest, KIS 2014 and latest HitmanPro.alert suddenly. Uninstalling MBAM and KIS did not seem to fix the problem. Affects IE11 and chrome on win 7 64bit, but not firefox. Sometimes restarting the browser will allow me to get one or a few https requests, then suddenly I cannot use google or https://forums.malwarebytes.org and any https sites. Have cleared Chrome CertificateRevocatonList have cleared IE SSL state and bunch of other things. Just uninstalled HitmanPro.Alert, things seem to work ok for the moment but time will tell.

 

I'm having the same thing on Windows 8. Especially IE11 with the 1st tab seems buggy lately. I am *not* running with Alert.

 

Posted issue to MBAM forums and now to MBAM paid support. Suddenly started two weeks ago when I was googling with chrome. I just uninstalled HitmanPro.Alert, and rebooted and things look ok for the moment, but time will tell. Is there anyway to see a list of what HitmanPro.Alert might have been blocking?

 

I spoke too soon, it just started occurring on IE and Chrome again.
Oddly https://www.donationcoder works.
I am using Microsoft EMET 4.1

 

I think this is caused by a lingering Internet Explorer browser.
Close Internet Explorer. Go to Task Manager and kill all IEXPLORE.EXE processes.
Then go to some HTTPS site again.
It did the trick on my end.

UPDATE: Spoke too soon. Broken again.

UPDATE 2: Uninstalled Java 7u55. Seems to work better now.

 

Sorry if this may not be the right forum, but I just ran into something renewing my license for HitmanPro. Noticed that I had just six days left and decided to renew. Went through the renewal process, received a new registration unlock code, and entered it. The renewed license starts the day I purchased the renewal. The six days I had left just disappeared. Not that big a deal, but had I renewed a month ahead of time, I would have lost a month. What I ended up doing was re-entering my old unlock code and the six days are back. Just wondering if anyone knows how this really works. If I enter my new code once my old license expires, will the clock start on that day, or does it always default to the day you purchased the renewal? Just curious.

 

when is a new beta will come out

 

when is topic is silent now?

 

Man, is that English you speak in USA?

 

Hitman 3.7.9 64 Build 216 is still not able to boot from USB.

Win 8.1 64. No UEFI Setup-with all 3 boot options windows goes into repair mode. when i switch hitman usb stick off , all is fine. other computers are booting in. Some dont and only go to repair mode. discovered that with win7 64 too..

 

HitmanPro.Kickstart can not yet boot a Windows 8 machine (BIOS or UEFI). But you can use a Windows 8 machine to created a Kickstart USB stick.
Windows 7 should be able to boot, unless it is a multi-boot computer. Then it _might_ work. But if you have multi-boot, you don't really need the kickstart solution, just boot the other system.

 

HitmanPro 3.7.9 218 beta working fine on XP Pro SP3.

 

Hello,

Where are you seeing and getting that beta (21. The stable version on the site is 216 and the beta is 215. Did I miss a post and/or an announcement somewhere?

Edit: Never-mind as I downloaded the beta 215 as stated on their site and it is actually 218....

 

http://hitmanpro.wordpress.com/2014/06/13/ransomware-infecting-user32-dll/

 

HitmanPro 3.7.9 218 beta no problems runs fine