Hitman Pro Support and Discussion Thread

As Atomomega says, you can run without Internet connection if you scan with Early Warning Scan (EWS). Go to Settings -> Advanced -> EWS. Also if you don't have an Internet connection you don't need a license to remove the malware.

 

Hi Erik,

I'm aware of EWS, but novice users won't know how to use that feature.

My question is this: If HitmanPro uses behavioral scanning, why does it need Internet access in order to scan?

 

For 2 types of users: the average computer user and EWS for experts.
EWS will show zero-day and APT malware when AVs dont have signatures yet.

 

HitmanPro 3.6.1 build 164

I've uploaded a new beta version of HitmanPro on our primary download server.

Changelog

• IMPROVED: Made a minor change to the Behavioral Scan, regarding the detection of executable files that do not mention their disk location in memory.
• FIXED: A bug introduced in build 163 caused the reboot function not to work properly.

Downloads
32-bit: http://dl.surfright.nl/HitmanPro36beta.exe
64-bit: http://dl.surfright.nl/HitmanPro36beta_x64.exe

Please let us know if you find any bugs or problems. Thanks!

 

Is there a custom install option yet? I don't like anything in my OS partition except for my OS.

I apologize if it was already posted, but I don't have the patience to comb through every post in this thread to look for it, and don't feel like re-installing the program to find out.

If it hasn't been addressed... please, it's such a simple thing to do. And I know many feel the same way I do about keeping their OS partition isolated, especially in a place like this.

 

HitmanPro is in principle just one file. Just copy the HitmanPro36.exe (or HitmanPro36_x64.exe) to any partition you like. Create a shortcut to it and add the /noinstall switch. Example:

Code:

D:\Programs\HitmanPro36_x64.exe /noinstall

The drive letter could be a network drive as well.
But note that when enabling a Scheduled Scan, HitmanPro will install itself to '%SystemDrive%\Program Files\HitmanPro'. Also, Shell Integration will not be available.

Currently, due to other projects, we have no plans to update and add code which would allow a custom install of HitmanPro 3.x on a different partition then the Microsoft default. Sorry.

 

Ran new beta, no problems to report. Full scan was 2 min. 22 secs. Slightly faster then 163 release version.

 

Hi Erik
I'm testing now Windows 8 but since Windows 7,in time to time the blue screen appears its not all the time its like "random".

 

Hi Eric

Can you whitelisted the File please

SHA256: 72c6568ef71a7b90ee18f6b066198eb00199e56af7651186c2b59eacd3d8f865
SHA1: 14e79a75cd7f4290a49ac85922e06845ffdcb10a
MD5: 7ea21e28fcc7efbc5df9278eba5c52d3
File size: 568.5 KB ( 582144 bytes )
File name: C:\Users\Alexander Robrecht\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Crystal Security.exe
File type: Win32 EXE
Detection ratio: 1 / 42
Analysis date: 2012-08-07 16:30:57 UTC ( 0 Minuten ago )

 

I am getting the following Suspicious file warning with the Default Scan on my XP box. VirusTotal says all clean and Jotti shows only Clam AV calling it a PUA. I don't know what the file belongs to (I've Goggled it... Borland International does a lot of software) and would like suggestions as to what to do, if anything. It's been on that box forever, but HMP just started flagging it recently.

 

Hi

Any infos about it

 

The lines in red explain why. Whitelisted.

 

Whitelisted.

 

Does HitmanPro detects the new Trojan-Ransom.Win32.Dorifel virus?
I know that you can the decrypter from your site: http://www.surfright.nl/nl/support/dorifel-decrypter#changelog (read on tweakers.net )

 

Most certainly. Actually, HitmanPro is capable of detecting and removing the malware since August 7 (2 days ago).

 

Ok, thank you. That's good to know!

 

That's great news. I absolutely love HMP. And really appreciate what you guys do - hard work.

 

Yes, they do a lot of good work! And that for Dutch people!

 

Hi

Thank you very much for your informations

 

Hi Erik! I just wanna inform you that I've sent an e-mail with my translation, in case you missed it. Hope you enjoy the result.


Regards,
Raven

 

FWIW, stdvcl32.dll is still appearing in the default scan.

 

Can someone explain the "Private Cloud" at the bottom of the Proxy Tab in the new version 164? If checked, is it used in place of the standard cloud -- or in addition to the standard cloud? Also, what is supposed to go in the box directly to the right of the check box?

 

Ssst! Hush hush It's a secret feature. Do not enter any data in the input field and leave the box unchecked. We'll reveal more about it later...

 

This feature does not appear to be working for me on my XP box.
I entered my API key from VT and ran HMP 3.6.1 build 164 .
It once again flagged stdvcl32.dll (that was supposed to be whitelisted the other day), and although VirusTotal did appear as an option, when I clicked on it, nothing happened, and then HMP closed.

 

I've had this problem with VirusTotal as well on my XP machine. I've entered my API key too, but nothing happens.