Jump to content
ridevries

False Positive: Hitman Pro

Recommended Posts

Hitman Pro 3.7.14 build 263 64 bit was detected as ransomware. When it started to delete the tracking cookies etc. it found earlier, MBAM quarantined the .exe. Hitman Pro could be restored and added to the exclusions. It is a little strange this happenend, I used Hitman Pro before, without MBAM detecting it as ransomware.

Malwarebytes Anti-Ransomware.zip

logs.zip

HitmanPro.zip

Share this post


Link to post
Share on other sites

Reference: https://www.virustotal.com/en/file/bba010f5c106a97a03a2fa02dfe6254df60bd7fbff7ad740cbd0f06bdcefb0c7/analysis/1462754885/ Signed

Hello ridevries and :welcome:

Available data strongly suggests a false positive, and since the following pathname has been entered in MBARW GUI -> Exclusions, and the binary has been uploaded to the developers, please allow the entry to remain until you are requested to remove it:

                      C:\Program Files\HitmanPro\HitmanPro.exe

At any time, a MBARW development team member, QA team member or Staffer may request the above temporary exclusion be altered/removed.

Thank you for beta testing MBARW and your valuable feedback.

Share this post


Link to post
Share on other sites

Hi ridevries.

Thanks for your report. This file should no longer be detected. If you've added HitmanPro.exe to the exclusions in Malwarebytes Anti-Ransomware BETA, please do remove from exclusions and let us know if the issue returns. It should not.

 

Thank you for your participation!

 

Share this post


Link to post
Share on other sites

HitmanPro and HitmanPro.Alert were also detected as malware and deleted by SEP, until I put in a whitelisting request.  It looks like malware the way HitManPRo works.

Share this post


Link to post
Share on other sites

Hi 1PW and tetonbob, thank you for your quick replies. After removing HitmanPro from the exclusions, running the program didn't cause detection anymore by MBARW :)

Share this post


Link to post
Share on other sites

Thank you for the good news feedback.

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now

  • Recently Browsing   0 members

    No registered users viewing this page.

×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.