Hitman Pro Support and Discussion Thread

Re: Anyone tried out Hitman Pro?

that will disappear if u purchase a license.
Also that Ad

 

Re: Anyone tried out Hitman Pro?

http://rapidshare.com/files/333098606/New_Folder.rar.html

 

Re: Anyone tried out Hitman Pro?

The scenario is that the rogue is installed on a normal user's pc where the only security is a realtime AV which has been disabled by the rogue.

Anvir Task Manager can't be installed as it's killed as are all other exes except certain system exes.

 

Re: Anyone tried out Hitman Pro?

I had almost same rogue lately.
Safe mode + msconfig did the trick (disable rogue's autostart)

 

Re: Anyone tried out Hitman Pro?

Any news on the issues with Eaz-Fix/Rollback?

 

Re: Anyone tried out Hitman Pro?

No progress yet. Sorry.

 

Re: Anyone tried out Hitman Pro?

Thanks, can it be used for scanning only or is that the problem, meaning it sees things that have been long removed or previous flagged good items as questionable again?

 

Re: Anyone tried out Hitman Pro?

Yes, Hitman Pro will work just fine but you might get an occasional Suspicious as Hitman Pro sees files on the disk that are not available to the OS due to the extra layer that Rollback RX provides.

 

Re: Anyone tried out Hitman Pro?

How does one purchase a license?

Also, please can someone tell me how Hitman Pro updates to newer versions? I understand it is automatically done? If this is the case, will it still do so in a Limited User Account? Thanks.

Also, how come the right click scan does not scan within folders? I mean, it is able to scan within a folder, but it can't scan within a folder within a folder etc. I hope that makes sense. If it doesn't, for example, right click scanning "new folder1" (C:\documents and settings\user\new folder1\malware.exe) will be successful and Hitman Pro will detect it. But right click scanning "new folder1" C:\documents and settings\user\new folder1\new folder2\malware.exe will not be successful, as Hitman Pro fails to detect the malware. Thanks.

 

Re: Anyone tried out Hitman Pro?

This one is NASTY. It doesn't allow you running *any* EXEs but the ones it creates. I think it has some kind of hash-checking functionality because renaming Hitman (or anything else) to svchost.exe, userinit.exe or other system processes does not work; it knows and allows few system processes that are needed to operate but blocks everything else.
Can you PM me a link where you got it, I want to play around with it on my VM? I had it once and cleaned it via LiveCD, followed by Hitman. Would like to try a different approach now.

 

Re: Anyone tried out Hitman Pro?

Interesting, the one I had was loading in Safe Mode as well.

 

Re: Anyone tried out Hitman Pro?

Download link is probably long dead if I could find it and I do use Avira/Dr Web live cd's on occassion or hook the infected drive up as a slave to another machine that has a few removal tools and in Returnil mode.

Also have a docking station which I can use to access laptop hard drives from my pc.

And don't get me wrong as I think Hitman Pro is a great product which I use along with a few others.

 

Re: Anyone tried out Hitman Pro?

For me, I specify a file I know is a trojanish .exe which ikarus [1] flags as generic trojan and hitman ignores it every time. Wish there was a way to force it to upload files to the cloud, until then I still need to install a squared

[1] http://anubis.iseclab.org/?action=r...25499f54a939bdf64ed62bde&format=html#id195280

 

Re: Anyone tried out Hitman Pro?

The file was in our cloud on June 6 and for 2-months no partner detected it then as malware. I marked the file for rescan so that when you run Hitman Pro on the file it will probably be recognized. Can you confirm?

 

Re: Anyone tried out Hitman Pro?

Strange...
Then it's time for boot cd, isn't it?

 

Re: Anyone tried out Hitman Pro?

did any one tried to disable it it's services and or try to delete one of it's main registry component?to see it's behabiour?thanks

 

Re: Anyone tried out Hitman Pro?

Wow that was quick
The file is part of a trojan, ie it is loaded and makes sure the rest of the files (downloaded through BITS) can be run. Could PM you the source if interested. Eitherway, impressive.

I like the concept, single small exe file, unobtrusive.

 

Re: Anyone tried out Hitman Pro?

Just a follow up on that exe killing rogue.

I found that on my XP VM "Icesword" will still run and the rogue's process can be terminated then a scan can be initiated.

Unfortunately Icesword BSOD's on my Vista VM and won't run on my Win 7 install.

 

Re: Anyone tried out Hitman Pro?

Pre-release notes for build 85:

• Added removal of TDL3 rootkit version 3.2 (aka TDL3+).
  This rootkit infects the hard disk driver (usually atapi.sys or iaStor.sys) and redirects Google search results.
• Improved detection and removal of fake/rogue anti-malwares (scareware).
• Fixed a occasional crash on Windows 7.
• Fixed a crash related to DEP.
• Fixed a rare crash when user closes the window.
• Added a reminder panel when the removal license has expired.
• Added Portuguese-Brazilian language
• Updated several language strings

Release is scheduled for January 15, 2010.

 

Re: Anyone tried out Hitman Pro?

I was just ready to post that the internal updater wasn't working for me... then I read the last sentence of your post. Looking forward to it.

Will you be addressing this soon? Thank you.

 

Re: Anyone tried out Hitman Pro?

We have just released the 32-bit version of Hitman Pro 3.5 (build 85).
Hitman Pro is now the first and only antivirus program in the world capable of finding and removing the TDL3+ rootkit

Anyway, the release notes:

Build 85 (2010-01-15)

• Added removal of TDL3 rootkit version 3.2 (aka TDL3+).
  This rootkit infects the hard disk driver (usually atapi.sys or iaStor.sys) and redirects Google search results.
• Improved detection and removal of fake/rogue anti-malwares (scareware).
• Fixed a occasional crash while scanning on Windows 7.
• Fixed a crash related to DEP/NX.
• Fixed a rare crash when user closes the window.
• Added a reminder panel when the removal license has expired.
• Remembers Do Not Repair actions (thanks Page42).
• Added Destop Wallpaper policy repair.
• Added Portuguese-Brazilian language.
• Updated several language strings.
• Several minor bug fixes.

 

Re: Anyone tried out Hitman Pro?

isnt this the same thing?

http://news.drweb.com/show/?i=687&c=5&p=1&lng=en

dated Novemeber 2009.

i understand its probably a new version of it, but they were soo quick to find the originals, im sure they can probably already handle 3.2

btw - i think i have decided to go ahead and purchase a license with you guys just for a 'what if' type of situation, having a trial on my machine i just dont like, gonna route around for a coupon code or something first though.

 

Re: Anyone tried out Hitman Pro?

Unfortunately this is not the case. I ran the new build 3 times, but it still shows the Do Not Repair items.

 

Re: Anyone tried out Hitman Pro?

No it is not the same thing. Dr.Web and Hitman Pro are still the only AV programs to remove TDL3, but Dr.Web cannot remove TDL3.2.
Note that practically no AV product is capable of detecting the TDL3 rootkit let alone remove it. And we see many, many computers infected with TDL3+

 

Re: Anyone tried out Hitman Pro?

When you set a repair item to Do not repair, the item will still show up in subsequent scans. Only the default action is now set to Do not repair. This is by design.