Hitman Pro Support and Discussion Thread

Gotta love the speedy customer support concerning possible malware.

 

Hmmm

New and fresh Win 7 Install (First Standard Account Administrator).
Hitmanpro runs fine but does not the Quick Scan on Boot.Desktop is
loading after System Boot,but hmp not start the scan after Booting
.I check the Settings and the scan is activated.UAC on of or put it
on minimal settings it does not matters after all.Hitman Pro will not
perform the Quick Scan after Systembooting.-

I dont know whats wrong,maybe i'am a fool or stupid-.

Please help a helpless

Greets Lucien

 

Another reason why I am having problems with scheduled scans. From one of the crashes I have these files from Win7.

Code:

Report  .wer  7310 10/12/2014 15:53
WERACF1.tmp.appcompat.txt  6544 10/12/2014 15:53
WERAD8E.tmp.WERInternalMetadata.xml  3466 10/12/2014 15:53
WERAD9E.tmp.hdmp  534718 10/12/2014 15:53
WERB35A.tmp.mdmp  246596 10/12/2014 15:53

Let me know if you want them.

 

Hi Erik and Hi Mark

Can you check my 1 File and whitlist the 1 File please

With best Regards
Mops21

 

Hi Erik and Hi Mark

Can you check my 5 Files and whitlist the 5 Files please

With best Regards
Mops21

 

Hi I use hitman pro for almost 2 weeks now. I did not install it and I'm only testing it for 30days but I notice something weird. Today when I boot up my PC a "Hitman PRO" text appear after windows 7 loading logo (just before the log in screen) Honestly I don't like it and it's really creepy. Please tell me what's going on? PLease.

 

Hi all

HitmanPro 3.7.9.230 Beta

Added detection and removal of file-less registry-based Poweliks trojan. Both Run and CLSID variants.
Added integration of Department Of Justice ransomware user32.dll decrypter
Fixed false positive on user32.dll on Windows 10 Technical Preview.
Improved detection of local proxy servers
Improved removal engine to handle malformed file/folder names
Improved detection of malformed registry values
Improved removal of specific ZeroAccess variants

http://www.surfright.nl/en/whatsnew

http://www.surfright.nl/en/downloads/beta

 

This is the boot time deleter. When malware is being removed, some files are locked (in use). By deleting the files before Windows has booted the malware files can be deleted since they are not yet in use.

You should only see the boot time deleter once when HitmanPro has removed files.

Hope this helps.

 

Hi Erik

Any Infos about my posts 6230 + 6229 + 6205 + 6206

With Best Regards
Mops21

 

No issues with 230.
No (false) detections.
Win7 (64)

 

Fine on vista 32 bit and windows 7 64 bit

 

Jst finished running build 230 beta...but the attached log says 229 build. Also, I keep ignoring these detections.

Code:

[code]
HitmanPro 3.7.9.229
www.hitmanpro.com

   Computer name . . . . : XXXX_YYYYYYYYYY
   Windows . . . . . . . : 5.1.3.2600.X86/4
   User name . . . . . . : XXXX_YYYYYYYYYY\<My Name>
   License . . . . . . . : Paid (398 days left)

   Scan date . . . . . . : 2014-10-29 08:40:24
   Scan mode . . . . . . : Normal
   Scan duration . . . . : 9m 39s
   Disk access mode  . . : Direct disk access (SRB)
   Cloud . . . . . . . . : Internet
   Reboot  . . . . . . . : No

   Threats . . . . . . . : 0
   Traces  . . . . . . . : 11

   Objects scanned . . . : 2,057,326
   Files scanned . . . . : 44,021
   Remnants scanned  . . : 1,416,480 files / 596,825 keys

Potential Unwanted Programs _________________________________________________

   HKLM\SOFTWARE\Classes\AniGIFCtrl.AniGIF\ (YTDownloader)
   HKLM\SOFTWARE\Classes\AniGIFPpg.AniGIFPpg.1\ (YTDownloader)
   HKLM\SOFTWARE\Classes\AniGIFPpg.AniGIFPpg\ (YTDownloader)
   HKLM\SOFTWARE\Classes\AniGIFPpg2.AniGIFPpg2.1\ (YTDownloader)
   HKLM\SOFTWARE\Classes\AniGIFPpg2.AniGIFPpg2\ (YTDownloader)
   HKLM\SOFTWARE\Classes\CLSID\{61AB12E1-A5FF-11D1-B2E9-444553540000}\ (YTDownloader)
   HKLM\SOFTWARE\Classes\CLSID\{6DC82D15-92F2-11D1-A255-00A0C932C7DF}\ (YTDownloader)
   HKLM\SOFTWARE\Classes\CLSID\{82351441-9094-11D1-A24B-00A0C932C7DF}\ (YTDownloader)
   HKLM\SOFTWARE\Classes\Interface\{5252AC41-94BB-11D1-B2E7-444553540000}\ (YTDownloader)
   HKLM\SOFTWARE\Classes\Interface\{82351440-9094-11D1-A24B-00A0C932C7DF}\ (YTDownloader)
   HKLM\SOFTWARE\Classes\TypeLib\{82351433-9094-11D1-A24B-00A0C932C7DF}\ (YTDownloader)

[/CODE]

 

Just like to give a thanks to the HitmanPro team. HitmanPro Kickstart got rid of the Homeland Security ransomware from my stepdad's computer with no trouble at all.

I think he may buy a license after the trial expires, yet he was disappointed when I told him it was a renewable license, not lifetime.

 

You can save it until you're infected again I believe. Just don't activate the license right away. I'd buy one if my computer was saved like that.

 

Both W7 64 bits and Vista 32 run fine with beta 230.

 

Whitelisted the Suspicious listed items.

 

Build 231 (2014-10-29)
•ADDED: Detection and removal of file-less registry-based Poweliks trojan. Both Run and CLSID variants.
•ADDED: Integration of Department Of Justice ransomware user32.dll decrypter
•IMPROVED: Detection of local proxy servers
•IMPROVED: Removal engine to handle malformed file/folder names
•IMPROVED: Detection of malformed registry values
•IMPROVED: Removal of specific ZeroAccess variants
•FIXED: False positive on user32.dll on Windows 10 Technical Preview
•FIXED: Rare crash when user clicked on Activate Free License on machines with specific NVIDIA GeForce driver

Remark:
HMP auto updated today (from 225 to 231).
In download page still remains the v.3.7.9.225

 

Build 231: user32.dll trojan, but after completion scan nothing found (Vista 32 bits).

Code:

HitmanPro 3.7.9.231
www.hitmanpro.com
  Computer name . . . . : xxxxxx
  Windows . . . . . . . : 6.0.2.6002.X86/4
  User name . . . . . . : xxxxxx
  UAC . . . . . . . . . : Enabled
  License . . . . . . . : Paid (252 days left)
  Scan date . . . . . . : 2014-10-29 11:22:14
  Scan mode . . . . . . : Normal
  Scan duration . . . . : 4m 16s
  Disk access mode  . . : Direct disk access (SRB)
  Cloud . . . . . . . . : Internet
  Reboot  . . . . . . . : No
  Threats . . . . . . . : 0
  Traces  . . . . . . . : 0
  Objects scanned . . . : 2.106.202
  Files scanned . . . . : 12.426
  Remnants scanned  . . : 210.217 files / 1.883.559 keys
 

 

They have fixed the download links now

 

Hi Erik

Thank you for your Information

With Best Regards
Mops21

 

Hi Erik

Can you check this 1 File please and whitelist that File

I have Windows Vista Home Premium 32 Bit and HitmanPro detect user32.dll why here are 2 Screenshots for you

SHA256: d9f989669eb0aaf384aa5462dd632999bf9c5a6bdb75c4f8857a6e9bdbe82b64
Dateiname: user32.dll
Erkennungsrate: 0 / 54
Analyse-Datum: 2014-10-29 12:46:05 UTC ( vor 1 Minute

With best Regards
Mops21

 

We are preparing an update. It occurs on Vista 32-bit. Stay tuned.

 

Hi Erik

Thank you for your Information

With Best Regards
Mops21

 

HitmanPro 3.7.9 Build 232

Changelog

• FIXED: False positive on user32.dll on Windows Vista 32-bit
• FIXED: Activate Free License focus issue

Existing users are automatically updated.

 

Fixed with build 232. Thanks.