Hitman Pro Support and Discussion Thread

HitmanPro 3.7.17 Build 283 BETA

Changelog

• IMPROVED: Activation mechanism
• IMPROVED: Cookie detection
• IMPROVED: Detection of Potentially Unwanted Programs (PUPs/PUAs).
• INFO: Several minor fixes and improvements

Download
32-bit http://dl.surfright.nl/HitmanProBeta.exe
64-bit http://dl.surfright.nl/HitmanProBeta_x64.exe

Please let us know how this version runs on your computer!

 

Working fine here on my primary machine.

 

HitmanPro 3.7.17 Build 283 BETA running without any issues here.

 

HitmanPro 3.7.17 Build 283 BETA & Windows 10 Pro x64 (Version 1607 - Build 14393.726),
no problems.

 

It's running fine.
Suggestion:
To see the "description" or "detection-results" of an entry, the user has to click on the entry. Is it possible to always show it? So it could look like this:

= now 3 lines are displayed instead of 2. And the user has a better overview of all detections.

 

HMP 3.7.17.283 runs well on my Windows 7 x64 system. No issues.

 

HitmanPro 3.7.17 Build 283 BETA on Windows 10 Home.
Default and EWS scan Threats detected 0 (what ever 0 means).

 

W7-x64 Professional:
Build 283 is running without issues!

 

You could try infecting your system with some nice malware, and see how well that is detected.
If then there's still 0 detections, something is wrong.

 

I hear ya'. Does 0 mean all scanned Objects, Files and Remnants are clean-safe-good-whitelisted-harmless or does 0 mean similar to VirusTotal 0/56.

 

It's the same as Petrovic posted on February 3? (md5/sha1 seem to match)

 

Yes, it's the same. Same checksum, digitally signed 2017-02-03, ...

 

Hi, Erikloman is it possible to have license for HitmanPro?

 

No problems so far here. Windows 7 Pro SP1 x64.

 

No problems build 283 beta.

Win10 1607 build 14393.726 x64/Norton Security v22.9.0.71

 

Oh, forgot to mention that that version works fine on my system.

 

Beta 283 works fine also

 

HitmanPro 3.7.18.284 Beta
https://www.hitmanpro.com/en-us/downloads.aspx#beta

 

Thanks.

Seems to be a "fresh" beta. It was digitally signed two days ago: (2017-03-02)
I guess a changelog for this beta will be posted here at a later time.

 

Erik or Mark,

Hopefully a False positive?

Code:

HitmanPro 3.7.15.281
www.hitmanpro.com

   Computer name . . . . : DAVE-PC
   Windows . . . . . . . : 10.0.0.14393.X64/4
   User name . . . . . . : DAVE-PC\Dave
   UAC . . . . . . . . . : Enabled
   License . . . . . . . : Paid (1026 days left)

   Scan date . . . . . . : 2017-03-08 16:59:13
   Scan mode . . . . . . : Quick
   Scan duration . . . . : 1m 12s
   Disk access mode  . . : Direct disk access (SRB)
   Cloud . . . . . . . . : Internet
   Reboot  . . . . . . . : No

   Threats . . . . . . . : 1
   Traces  . . . . . . . : 2

   Objects scanned . . . : 4,636
   Files scanned . . . . : 4,636
   Remnants scanned  . . : 0 files / 0 keys

Miniport ____________________________________________________________________

   Primary
      DriverObject . . . : FFFFE58F68FB4D60
      DriverName . . . . : \Driver\storahci
      DriverPath . . . . : \SystemRoot\System32\drivers\storahci.sys
      StartIo  . . . . . : 0000000000000000 +0
      IRP_MJ_SCSI  . . . : FFFFF800729F5410 \??\C:\Windows\system32\drivers\hmpalert.sys+152592
   Solution
      DriverObject . . . : FFFFE58F68FB4D60
      DriverName . . . . : \Driver\storahci
      DriverPath . . . . : \SystemRoot\System32\drivers\storahci.sys
      StartIo  . . . . . : 0000000000000000 +0
      IRP_MJ_SCSI  . . . : FFFFF80070FD3840 \SystemRoot\System32\drivers\storport.sys+14400

Malware _____________________________________________________________________

   C:\Program Files\HP\HP ENVY 4520 series\Bin\ScanToPCActivationApp.exe
      Size . . . . . . . : 3,651,080 bytes
      Age  . . . . . . . : 68.2 days (2016-12-30 12:25:19)
      Entropy  . . . . . : 4.9
      SHA-256  . . . . . : 4832257495F3366202411545986611FB785C5480BC13CAFBFB877F78FF0DE9F5
      Product  . . . . . : HP Digital Imaging
      Publisher  . . . . : Hewlett-Packard Development Company, LP
      Description  . . . : ScanToPCActivationApp
      Version  . . . . . : 36.0.72.54013
      Copyright  . . . . : Copyright (C) Hewlett-Packard Co. 2014
      RSA Key Size . . . : 2048
      LanguageID . . . . : 1033
      Authenticode . . . : Valid
    > HitmanPro  . . . . : Win64/Backdoor.Behavior
      Fuzzy  . . . . . . : 107.0
      Startup
         HKU\S-1-5-21-3589041741-2710325919-4001729340-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\HP ENVY 4520 series (NET)

I hope so anyway because I've reported it as such through the UI.

 

Hi Krusty,
I think you are right, I think it's a HMP false positive to HP Digital Imaging ScanToPCActivationApp.exe.
If you check the SHA-256 hash at VirusTotal, ScanToPCActivationApp.exe seems fine, according to 57 scanners.
Here's some information about ScanToPCActivationApp.exe:
http://www.file.net/process/scantopcactivationapp.exe.html
http://www.shouldiremoveit.com/HP-Driver-Diagnostics-14502-program.aspx
Seems a HMP false positive to me.

 

Hi Stupendous Man,

Yeah, I checked with VT before reporting it as a false positive through the UI.

Thanks.

 

That was what I assumed, Krusty.
I hope Erik or Mark will whitelist that ScanToPCActivationApp.exe.
I don't know whether reporting a file as safe in the HMP UI sends a whitelist request to SurfRight.
My experience is that reporting a file as safe in the HMP UI only whitelists the file for that single specific system. I don't have the idea that a whitelist request is sent to SurfRight. I hope I'm wrong.

 

A specific registry key is changed after reporting it as safe in the GUI. You are right, it should only affect your own system.

 

Beta 284 works fine 64 bit