Hitman Pro Support and Discussion Thread

Re: Anyone tried out Hitman Pro?

See this post on when this was addressed.

Yes. It scans just as ANY other AV. If it doesn't then PM me.

 

Re: Anyone tried out Hitman Pro?

Yes it does, Thanks. I wonder why since the time(in last reply) that I thought it was OK to use HMP with Direct Disk Access, it seemed to work well?

 

Re: Anyone tried out Hitman Pro?

hi,

Small issue here:
I install most of my apps to my D partition, in a folder called "greatapps".
It currently has 51 EXE files (and 50 DLLs) in it. However, if I specifically scan this folder using HitMan Pro (through the right-click menu in Explorer), it only scans 2 objects!
Is this a bug, intentional, or am I missing something?

Thanks!

 

Re: Anyone tried out Hitman Pro?

We have been many before you who requested this feature (at least 5 of us in the latest month and it's as I know the most wanted feature). The developer does sadly not see the point behind implementing it. He said he might consider it on a later occasion if more people had interest in it. Personally, I think we already are 'a lot' who requested the feature. The people at Wilders are like what? 0.005% of all Hitman users... imagine how many more of us there are outside Wilders who want the feature added.

 

Re: Anyone tried out Hitman Pro?

Thanks Erik!! I tested and it's OK now. Waiting for fixing this in future versions for Direct Disk Access. Must pecify the "ghosts" files were only appearing when I ran Hitman Pro as an Administrator mode. I'm also always finding this cookie Adtm.txt I can't get rid off as it comes back each time I run a browser unsandboxed. No security software seems to immunize me of it!

 

Re: Anyone tried out Hitman Pro?

Hitman has changed their engines around at least once haven't they? What Av vendors engines are in current use? I had a quick look and didn't come across the info.

 

Re: Anyone tried out Hitman Pro?

hmm... that is a good question, id be curious to know as well.

 

Re: Anyone tried out Hitman Pro?

Doh! Look at the icons on the Welcome screen

 

Re: Anyone tried out Hitman Pro?

Yes. Removed were........
Avira
NOD32

Currently with 3.5.6 built 115.........
Ikarus
G Data
Emsisoft
Dr Web
Prevx

 

Re: Anyone tried out Hitman Pro?

I was wondering if it would be correct to say that Hitman Pro scans with 6 different engines...
Ikarus
G Data = avast! + Bit Defender
Emsisoft = Ikarus + A2
Dr Web
Prevx

Am i right?

 

Re: Anyone tried out Hitman Pro?

Yes, you are right!
But you can still see the results of Avira and ESET in some files.

 

Re: Anyone tried out Hitman Pro?

A couple of the current engines (Ikarus and Emisoft) are supposed to have FP issues aren't they?

 

Re: Anyone tried out Hitman Pro?

Time to remove for me.Used it for a long time but now too many FP.

 

Re: Anyone tried out Hitman Pro?

IME, Hitman Pro has gave FP's only when a file has been modified/patched by another program. On a clean install, and if I don't install/uninstall software on a daily basis, Hitman Pro always comes clean... I've been running it on this machine since around may... a clean WinXP Pro SP3 install after malware caused havoc in my home network... no complaints so far...

 

Re: Anyone tried out Hitman Pro?

hmm well with my statement i meant it differently, sorry i should have clarified, i meant i wonder what version number each vendors engine is?

 

Re: Anyone tried out Hitman Pro?

I reported a false positive to PREVX which they acknowledged and fixed.
How long does it usually take for HMP to receive the PREVX updates?

The reason for my question is that HMP is still showing the FP that I reported to PREVX.

Al

 

Re: Anyone tried out Hitman Pro?

How old is this file? Do you know its SHA1 or SHA256 hash? Have to you chosen in Hitman Pro "Report file as Safe" ? This way I can look it up in the cloud and see what is the problem.

 

Re: Anyone tried out Hitman Pro?

C:\Windows\System32\drivers\KOBCCEX.sys 23424 31.05.2010
SHA1: 865A2C4E23E90DB029313D5230EEBD97578E9595
SHA2 (256): 3D983640250EF15ED677E9608FC04B5129CCC2E4CA97FF1140D8D5E2AE2AE2A2

I previously reported it as safe, but I deleted all safe entries from the registry to see if they were still being flagged.

Al

 

Re: Anyone tried out Hitman Pro?

I would say so.

 

Re: Anyone tried out Hitman Pro?

I have seen FP's with most every signature based AV's/AM's, some just more then others.

 

Re: Anyone tried out Hitman Pro?

indeed

 

Re: Anyone tried out Hitman Pro?

In the cloud I can see that only 2 Hitman Pro users (we have millions of users) have this file and you are the only one that reported this file as safe. Since the file appeared in June in the cloud it was too old to trigger a rescan (we stop rescanning files after 2 months).

We receive on average 50GB of new potential malicious files EVERY day. We rescan files for two months so you can do the math on the number bytes we push around in our cloud.

Since only 2 people have this file and you are the only one that reported this file as safe, the file wasn't automatically resolved as actual FP.

So I manually resolved the FP. If you have more FPs please report the through the GUI or post them here if they are really old.

In the future me might offer an option in the GUI for the file to be resubmitted to the cloud for reanalysis.

 

Re: Anyone tried out Hitman Pro?

Very nice idea!

 

Re: Anyone tried out Hitman Pro?

Thanks, the kobccex.sys FP is now gone.

I was under the impression that 'Report that this file is safe' was a trigger to add a registry entry in the local system so that the file would be ignored in future scans. What else happens when this option is selected?

From reading your post, it sounds like SurfRight also gets this info and if enough reports come in, the FP is removed and if not, it stays and scanned for 2 months, during which time it is up to the vendor to remove the FP from their detection scheme. Is that correct?

I currently have 2 false positives left. I believe one is old (reported to you twice) and the other new.

Virus Total: 1/42 (Ikarus)
da18de13dc492d9c4274c85965da224e42b43996 ?SHA1*CPick.exe
5680121c202dc986549447f554b364e0b22fa213b43f9d7659a2b4df99f8476d ?SHA256*CPick.exe

Virus Total: 5/43 (AhnLab-V3, McAfee, McAfee-GW-Edition, nProtect, Prevx)
ddf444cc9671fbbe3c4ae4aed66466e3523d32bd ?SHA1*extractMHT.exe
57e9953710479bc50839b465f42fad5950c552bd2c5d765203efa6c7925fd9ce ?SHA256*extractMHT.exe

Al

 

Re: Anyone tried out Hitman Pro?

Both FPs are resolved now. Thanks for reporting them