Thema: Hitman Pro

[SiLæncer]

Whats new:>>

FIXED: Right click scan (Scan with HitmanPro)
FIXED: Vulnerability in HitmanPro driver (Kernel Pool Overflow, BSOD)
FIXED: Vulnerability in HitmanPro driver (Kernel Pool Overflow, Local Privilege Escalation)
FIXED: Vulnerability in HitmanPro driver (Out of bounds read)

http://www.hitmanpro.nl/

[SiLæncer]

Changelog

Added Real-Time Anti-Malware, which works with the HitmanPro cloud.
Added Credential Theft Protection, which prevents theft of authentication passwords and hash information. Prevents Mimikatz-style attacks.
Added Local Privilege Guard, which stops specific exploitation of the operating system kernel. Prevents an attacker from using the privilege information of another process.
Added Code Cave mitigation, which stops backdoors in trusted code. Prevents e.g. Backdoor Factory and Shellter-style attacks.
Added Sticky Keys mitigation, which prevents abuse of the Microsoft sticky key feature and is typically used by attackers to gain persistence.
Added Application Verifier mitigation, which prevents abuse of the Application Verifier feature of Windows (eg. Double Agent code-injection).
Improved Asynchronous Procedure Call (APC) mitigation to improve compatibility with third-party security solutions on Windows 10 version 1709 (Fall Creators Update).
Added protection against dropping shellcode straight into memory from VBA macro code. This mitigation is part of Load Library and triggers a Shellcode alert.
Added protection against compilation of arbitrary code straight into memory from an application under exploit mitigations, like Office. Such attacks can bypass whitelisting based protection like Windows Defender Device Guard.
Added automatic protection of Microsoft Outlook (under the Office category) to defend against e.g. DDE attacks embedded in the body of malicious emails or calendar invites.
Improved Hollow Process mitigation to block hijacking of a remote main thread to run arbitrary code.
Improved Import Address Table Address Filtering (IAF) exploit mitigation.
Improved code injection of the HitmanPro.Alert Support Library (DLL).
Improved upgrade when running in 'Anti-ransomware only' mode.
Improved DLL hijack mitigation which loaded an incorrect DLL on WoW64 processes.
Fixed Intruder alert in Firefox when Norton is installed (e.g. Norton Security).
Fixed a ROP technique detection on pidgenx.dll when trying to activate Microsoft Office.
Fixed a CallerCheck alert associated with Microsoft Power Query and CLR.DLL.
Fixed a DEP mitigation triggered in some Microsoft Excel macro's.
Fixed a compatibility issue with Microsoft Hyper-V on Windows 10 version 1709 (Fall Creators Update).
Fixed a minor memory leak originating from the CryptoGuard anti-ransomware mitigation.
Many other minor fixes and improvements.

[close]

https://www.hitmanpro.com/en-us/alert.aspx

[SiLæncer]

Whats new:>>

ADDED: Norwegian language
IMPROVED: Kovter (fileless malware) detection
IMPROVED: Cookie detection in Microsoft Edge and IE (for Windows 10 Fall Creators Update)
UPDATED: User interface, matching Sophos colors
UPDATED: HitmanPro icon, matching Sophos colors
FIXED: Vulnerability in zlib
FIXED: Vulnerability in libpng
INFO: Several minor fixes and improvements

http://www.hitmanpro.nl/

[SiLæncer]

Whats new:>>

FIXED: Uninstall of older HitmanPro version after upgrading to 3.8
FIXED: Scheduled Scan if user has no administrative rights
FIXED: False Positive on certain Microsoft files
FIXED: Force Breach not working on Windows 10
FIXED: Detecting PUPs as malware on certain files
FIXED: Potential DLL hijacking vulnerability
IMPROVED: Detection of Potentially Unwanted Programs (PUPs/PUAs)
INFO: Several minor fixes and improvements

http://www.hitmanpro.nl/

[SiLæncer]

Whats new:>>

FIXED: Removal of Chrome cookies on Windows 10
IMPROVED: Performance of the remnant scan

http://www.hitmanpro.nl/

[SiLæncer]

Whats new:>>

Fixed issue with cloud communication component.

https://www.hitmanpro.com/en-us/alert.aspx

[SiLæncer]

Changelog

Added Mitigation of local privilege escalation via Task Scheduler (CVE-2018-8440 / @SandboxEscaper)
Added Compatibility with Windows 10 Redstone 5
Improved WipeGuard mitigation handling VBR sectors
Improved Asynchronous Procedure Call (APC) Mitigation
Improved SEHOP mitigation performance improvement
Improved Compatibility with 3rd party products that use PUSH/RET in their API hooks
Improved Windows Vista code injection
Fixed Compatibility with Windows XP Embedded POSReady 2009
Fixed Compatibility with Microsoft Edge Application Guard (WDAG) failed to start
Fixed Compatibility with Microsoft Hyper-V failed to start
Fixed Compatibility with F-Secure DeepGuard
Fixed False positive ROP detection (stack-based) in Google Chrome 69 caused by (DRM) widevinecdm.dll
Fixed Security issue (CVE assigned)
Updated Botan 2.7.0
Updated Sqlite 3.24.0
Updated All code compiled with Visual Studio C++ 15.8.4
Disabled hardware-assisted ROP mitigation on Chrome 67 (or newer) due to their use of RETpoline
Removed Network Lockdown mitigation (deprecated) / hmpnet.sys

[close]

https://www.hitmanpro.com/en-us/alert.aspx

[SiLæncer]

Whats new:>>

Changed name for "Dynamic Shellcode Mitigation" to "Heap Heap Protect"
Improved Heap Heap Protect
Improved CodeCave
Fixed Trend Micro Intruder/Safe Browsing incompatibility

https://www.hitmanpro.com/en-us/alert.aspx

[SiLæncer]

Whats new:>>

FIXED: Issue that HitmanPro could not be updated on Windows Vista systems
FIXED: A problem that could cause GUI issues on certain Windows versions

http://www.hitmanpro.nl/

[SiLæncer]

Changelog

Build 304 (2019-05-17)

    ADDED: Removal of Chromium based Tracking Cookies on Opera Browser
    CHANGED: Tracking Cookie scan is now part of the "Quick scan" profile
    FIXED: Scheduler failing to start a scan in rare cases
    FIXED: Detection of Tracking Cookies on Brave Browser

Build 302 (2019-05-16)

    ADDED: Detection of Spelevo Malware
    ADDED: Removal of Chromium based Tracking Cookies on Edge Browser (Stable, Dev & Canary)
    ADDED: Removal of Chromium based Tracking Cookies on Brave, Dragon, Iridium and Vivaldi Browsers
    FIXED: Suspicious detections on Microsoft Update Files
    FIXED: Scheduler Service Registration

[close]

http://www.hitmanpro.nl/

[SiLæncer]

Changelog

    Fixed rare stack alignment issue on Windows 10 build 1903 (19H1) caused by recent Keystroke Encryption change
    Improved compatibility with Webroot security software, fixing application crashes
    Improved compatibility with Bitdefender security software, fixing application crashes
    Improved compatibility with Trend Micro security software, fixing application crashes
    Improved compatibility of CTFGuard with VMware ThinApp

[close]

https://www.hitmanpro.com/en-us/alert.aspx

[SiLæncer]

Whats new:>>

ADDED: Black certificate serial support to remnants
ADDED: Sophos AV icon to SurfRight vendor
ADDED: HitmanPro icon to HitmanPro vendor
FIXED: Freezing problem on Windows 10 while HitmanPro was scanning
FIXED: Rare BSOD in HitmanPro driver
FIXED: Blacklisted DNS lookups
IMPROVED: Hardening of HitmanPro driver

https://www.hitmanpro.com/en-us.aspx

[SiLæncer]

Whats new :>>

    Improved CryptoGuard 5 performance
    Improved suppress alert event user interface
    Fixed issue in CryptoGuard 5 causing BSOD when copying large files over SMB
    Fixed potential local privilege escalation (LPE)

https://www.hitmanpro.com/en-us/alert.aspx

[SiLæncer]

Whats new :>>

    Improved CryptoGuard 5 detection
    Improved minifilter performance
    Improved compatibility with VMware ThinApp applications
    Improved compatibility with BoxedApp applications
    Improved compatibility with Checkpoint
    Various minor improvements to alert reports
    Fixed CTF Guard false alarms on some computers
    Fixed RDP Guard showing a flyout on non-RDP sessions on Windows 7
    Fixed HeapHeapProtect false alarms on Visual FoxPro applications
    Fixed APC mitigation false alarms on some .NET 1.1 applications
    Fixed Generic.Ransom.E false alarms on LSASS.exe on 64-bit computers
    All binaries built with Visual C++ 16.4.3 with Spectre mitigations

https://www.hitmanpro.com/en-us/alert.aspx

[SiLæncer]

Whats new :>>

FIXED: Security Issue

https://www.hitmanpro.com/en-us/alert.aspx