Hitman Pro Support and Discussion Thread

Discussion in 'other anti-malware software' started by yashau, Mar 20, 2009.

  1. Page42

    Page42 Registered Member

    Joined:
    Jun 18, 2007
    Posts:
    6,970
    Location:
    USA
    Re: Anyone tried out Hitman Pro?

    And that is fine for you. I stated that I don't think it is so great. I got a reply from ericloman that asked, "What's wrong with it?", so I told him, "Around here I have to ask the same question more than once before I get an answer."

    Meanwhile, several posts above that, I have asked the same question two times, and even with that third heads up from me, I'm still not hearing any answer.

    That's fine. He can't please everyone.
     
  2. erikloman

    erikloman Developer

    Joined:
    Jun 4, 2009
    Posts:
    3,152
    Location:
    Hengelo, The Netherlands
    Re: Anyone tried out Hitman Pro?

    They are 0 bytes so I assume deleting them is quite save. Also rather peculiar that drivers are 0 bytes in size ...

    The false positive option only appears on files that are identified as malicious by the cloud. The option does not appear on files that are 0-bytes in size. This as the report function requires a 256-bit hash. Hashing a file with no size does not produce a hash.

    We could add an ignore function based on file and its path, but why keep automatically starting files like drivers that are 0 bytes?

    Is the reported driver file actually 0 bytes in size?
     
  3. dlimanov

    dlimanov Registered Member

    Joined:
    Jun 10, 2009
    Posts:
    204
    Re: Anyone tried out Hitman Pro?

    One more question along the lines of what I've asked above: in which order are engines scanning files? Quite often I will get a file identified as infected using Prevx engine in Hitman, and it will be the only engine that is listed as the one that identified it, while in reality, all others identified the file as well (either manually or via VS/Jotti).
    Is there a hierarchy in which detection is using engines? I.e., use PrevX first, and if the file is detected as malicious, stop right there and warn user, without running it further down the engine list?
    Thanks!
     
  4. erikloman

    erikloman Developer

    Joined:
    Jun 4, 2009
    Posts:
    3,152
    Location:
    Hengelo, The Netherlands
    Re: Anyone tried out Hitman Pro?

    There is no order in the engines scanning the files. We have multiple servers in our Scan Cloud that scan a file. A file is picked up by all scanners simultaneously. It is Prevx that is usually the quickest with the determination. The weighted final result requires all vendors to come up with a determination.

    So all engines are consulted for each file. And also that file is rescanned with all engines for 2 months so that vendors can fix their false negatives/positives so the Hitman Pro database reflects this.
     
  5. dlimanov

    dlimanov Registered Member

    Joined:
    Jun 10, 2009
    Posts:
    204
    Re: Anyone tried out Hitman Pro?

    Erik,
    Thanks for your reply. Would Hitman display all engines that found file as malicious, or only the one that picked it up first? The reason I'm asking is because I've tested few files that were all detected with A-squared, PrevX and G-Data, however in Hitman's scan, only PrevX was listed as detecting engine.
    Also, can you answer this question here?
    Thanks again!
     
  6. dlimanov

    dlimanov Registered Member

    Joined:
    Jun 10, 2009
    Posts:
    204
    Re: Anyone tried out Hitman Pro?

    Bump to the top. This thread could use an update.
    ;)
     
  7. erikloman

    erikloman Developer

    Joined:
    Jun 4, 2009
    Posts:
    3,152
    Location:
    Hengelo, The Netherlands
    Scan Cloud updated

    You are absolutely right.

    Yesterday we finally updated the Scan Cloud so it now uses the majority rule (2 against 1). Also false positives are handled more quickly and the rescan period has been increased from 1 month to 2 months. This means a lot more files are rescanned.

    Also, previously when a determination was made by 2 scanners, that file was no longer rescanned. This is now 3 scanners.

    Furthermore, when a user submits a false positive and the file is available in the cloud, it is immediately rescanned. When the file is no longer available in the cloud, the file is scheduled for re-upload and rescan (user needs to restart Hitman Pro in order for the file to be actually uploaded and rescanned).

    A new build of Hitman Pro is scheduled for release on October November 3rd (both x86 and x64):
    • Fixed a problem in handling the $MFT bitmaps
    • Added alternate disk access mode when the default mode (kernel driver) is blocked by a rootkit (some variants of TDSS/Alureon).
    • Improved scan speed on files that have an authenticode certificate
    • Improved detection and removal of fake/rogue anti-malwares (scareware)
    • Improved removal of fake/rogue anti-malwares collaterals
    • Used a different counter to determine the total scan time (more accurate)
    • Added a timer on the scan window that indicates the scan time
    • Small improvements in screen updates
    • Fixed several translation typos
    • Added Catalan language

    Also Hitman Pro build 78 was last week submitted to Microsoft and earned the Compatible with Windows 7 logo after successfully completing Microsoft’s testing regime to prove it can be readily installed and run reliably on Windows 7.
     
    Last edited: Oct 31, 2009
  8. firzen771

    firzen771 Registered Member

    Joined:
    Oct 29, 2007
    Posts:
    4,815
    Location:
    Canada
    Re: Scan Cloud updated

    sounds great, but i think u have a small typo ther, u wrote October 3rd wen i think u meant November 3rd?
     
  9. markloman

    markloman Developer

    Joined:
    Jan 25, 2005
    Posts:
    581
    Location:
    Hengelo
    Re: Anyone tried out Hitman Pro?

    A day early but we have just released Hitman Pro 3.5.3 Build 78. In addition to the previously mentioned changes, we have also added detection and removal of malicious autorun files on removable drives.
    Here are the full release notes:

    • Version 3.5.3
    • Added the Compatible with Windows 7 logo. Hitman Pro 3.5 successfully completed Microsoft's testing regime to prove it can be readily installed and run reliably on Windows 7.
    • Fixed a problem in handling the $MFT bitmaps.
    • Added alternate disk access mode when the default mode (kernel driver) is blocked by a rootkit (some variants of TDSS/Alureon).
    • Added detection and removal of malicious autorun files on removable drives.
    • Improved scan speed on files that have an authenticode certificate.
    • Improved detection and removal of fake/rogue anti-malwares (scareware).
    • Improved removal of fake/rogue anti-malware collaterals.
    • Used a different counter to determine the total scan time (more accurate).
    • Added a timer on the scan window that indicates the scan time.
    • Small improvements in screen updates.
    • Fixed several translation typos.
    • Added Catalan language.
     
  10. firzen771

    firzen771 Registered Member

    Joined:
    Oct 29, 2007
    Posts:
    4,815
    Location:
    Canada
    Re: Anyone tried out Hitman Pro?

    installed and so far so good :thumb:
     
  11. Sjoeii

    Sjoeii Registered Member

    Joined:
    Aug 26, 2006
    Posts:
    1,240
    Location:
    52?18'51.59"N + 4?56'32.13"O
    Re: Anyone tried out Hitman Pro?

    Yep running smooth here. Well done
     
  12. erikloman

    erikloman Developer

    Joined:
    Jun 4, 2009
    Posts:
    3,152
    Location:
    Hengelo, The Netherlands
    Re: Anyone tried out Hitman Pro?

    Hi ssj100. What exactly do you mean by 'doesn't run properly sandboxed'? I need a little bit more info.
     
  13. firzen771

    firzen771 Registered Member

    Joined:
    Oct 29, 2007
    Posts:
    4,815
    Location:
    Canada
    Re: Anyone tried out Hitman Pro?

    why on earth wuld u put a system scanner into a sandbox, thers no way it can do its job properly if its confined to the sandbox so i dont really see this as a problem in any way shape or form...
     
  14. tuatara

    tuatara Registered Member

    Joined:
    Apr 7, 2004
    Posts:
    778
    Re: Anyone tried out Hitman Pro?

    And not a good way to test a antimalware product.
    Since lots of malware will detect that they are in a sandbox or virtualisation environment and will act differently.
     
  15. sbwhiteman

    sbwhiteman Registered Member

    Joined:
    Jul 20, 2009
    Posts:
    88
    Re: Anyone tried out Hitman Pro?

    Hello Mr. Loman,

    First, I'm a big fan of Hitman Pro.

    I have just installed version 3.5.3 build 78. I copied the icon to the quick launch bar and deleted the one from the desktop, and unchecked the boot scan option.

    I believe there are two bugs in the right-click scan function. After a right-click scan the Hitman icon is again placed on the desktop, and the boot scan is set (according to WinPatrol, which I have block it). Neither of these happens with a regular scan.

    Also, on a regular scan I too have the Hitman driver identified as "suspicious," with "0 bytes." In fact it is 12KB.

    Regards,
    Steve
     
    Last edited: Nov 3, 2009
  16. erikloman

    erikloman Developer

    Joined:
    Jun 4, 2009
    Posts:
    3,152
    Location:
    Hengelo, The Netherlands
    Re: Anyone tried out Hitman Pro?

    Ssj100, if you run Hitman Pro outside the sandbox, does it still complete in 2 seconds? If so, the problem could be related to the raw NTFS-reader in Hitman Pro.
     
  17. erikloman

    erikloman Developer

    Joined:
    Jun 4, 2009
    Posts:
    3,152
    Location:
    Hengelo, The Netherlands
    Re: Anyone tried out Hitman Pro?

    That's quite interesting. I will look at it tomorrow morning. See if I can reproduce this odd behavior. It still might be related to the raw NTFS-reader though...

    Do you know whether sandboxie virtualizes the hard drive at the raw NTFS level?
     
  18. arjunned

    arjunned Registered Member

    Joined:
    Apr 1, 2008
    Posts:
    191
    Re: Anyone tried out Hitman Pro?

    Is there a way to stop the Hitman Pro desktop icon from appearing everytime i run a scan manually (i mean explorer context menu)?
    Cheers.
     
    Last edited: Nov 4, 2009
  19. Cherub

    Cherub Registered Member

    Joined:
    Oct 13, 2006
    Posts:
    183
    Location:
    Kentucky
    Re: Anyone tried out Hitman Pro?

    Will this update be automatic or do you need to go and download the new build?
     
  20. rolarocka

    rolarocka Guest

    Re: Anyone tried out Hitman Pro?

    It updates automatic when you start HitmanPro. Cant be easier.
     
  21. Cherub

    Cherub Registered Member

    Joined:
    Oct 13, 2006
    Posts:
    183
    Location:
    Kentucky
    Re: Anyone tried out Hitman Pro?

    Thanks, rolarocka.
     
  22. Dark_Hanzo

    Dark_Hanzo Registered Member

    Joined:
    Jan 9, 2009
    Posts:
    204
    Location:
    CA
  23. Saraceno

    Saraceno Registered Member

    Joined:
    Mar 24, 2008
    Posts:
    2,405
    Re: Anyone tried out Hitman Pro?

    For its speed of scanning, and simplicity, I find it to be a solid program. :thumb:

    Although Matt is representing one person/machine, he does a great job explaining the program to new users.
     
  24. trjam

    trjam Registered Member

    Joined:
    Aug 18, 2006
    Posts:
    9,102
    Location:
    North Carolina USA
    Re: Anyone tried out Hitman Pro?

    I totally agree.:thumb:
     
  25. trjam

    trjam Registered Member

    Joined:
    Aug 18, 2006
    Posts:
    9,102
    Location:
    North Carolina USA
    Re: Anyone tried out Hitman Pro?

    I dont think so?
     

    Attached Files:

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.