Jump to content

False Positive: Hitman Pro

Recommended Posts

Hitman Pro 3.7.14 build 263 64 bit was detected as ransomware. When it started to delete the tracking cookies etc. it found earlier, MBAM quarantined the .exe. Hitman Pro could be restored and added to the exclusions. It is a little strange this happenend, I used Hitman Pro before, without MBAM detecting it as ransomware.

Malwarebytes Anti-Ransomware.zip



Link to post
Share on other sites

Reference: https://www.virustotal.com/en/file/bba010f5c106a97a03a2fa02dfe6254df60bd7fbff7ad740cbd0f06bdcefb0c7/analysis/1462754885/ Signed

Hello ridevries and :welcome:

Available data strongly suggests a false positive, and since the following pathname has been entered in MBARW GUI -> Exclusions, and the binary has been uploaded to the developers, please allow the entry to remain until you are requested to remove it:

                      C:\Program Files\HitmanPro\HitmanPro.exe

At any time, a MBARW development team member, QA team member or Staffer may request the above temporary exclusion be altered/removed.

Thank you for beta testing MBARW and your valuable feedback.

Link to post
Share on other sites

  • Staff

Hi ridevries.

Thanks for your report. This file should no longer be detected. If you've added HitmanPro.exe to the exclusions in Malwarebytes Anti-Ransomware BETA, please do remove from exclusions and let us know if the issue returns. It should not.


Thank you for your participation!


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.