Author Topic: Hitman Pro 3.5 FP  (Read 2978 times)

0 Members and 1 Guest are viewing this topic.

ibell63

  • Guest
Hitman Pro 3.5 FP
« on: December 14, 2010, 11:41:14 PM »
Hi all,

I have hitman pro installed on my machine as well as avast 5.0.677.

Today I was doing a scan with hitman pro and avast issued an alert that said a rootkit was found and pointed out hitman pro's driver as a hidden system driver.

The driver is located at C:\Windows\system32\drivers\hitmanpro35.sys

Hitman pro can be found for download at surfright.nl

This happened on 32 bit Windows 7 ultimate.

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37532
  • Not a avast user
Re: Hitman Pro 3.5 FP
« Reply #1 on: December 15, 2010, 12:07:53 AM »
you can try this and submit as False Positive see the video  http://public.avast.com/supp/submit/submit.htm

there is also a place on the avast web but can`t find it now.....

Found it, thanks to spgSCOTT   
http://www.avast.com/contact-form.php?loadStyles    you can select False Positive in the dropp down menu
« Last Edit: December 15, 2010, 12:18:58 AM by Pondus »

ibell63

  • Guest
Re: Hitman Pro 3.5 FP
« Reply #2 on: December 15, 2010, 12:54:45 AM »
Maybe I shouldn't have used the words False Positive to describe this.

The Avast engine does not detect this file as malicious.  There is nothing in the chest to send.  Sending in the file to virustotal does not show a detection by any antivirus.

When I scan the file with Avast, it doesn't detect anything.  This was a behavioral false positive.

It was not the normal notification that shows up when avast has a detection.  Instead, it was an alert in the center of the screen that said rootkit detected.  I should have taken a screen shot.
« Last Edit: December 15, 2010, 01:03:24 AM by ibell63 »