HitmanPro is a lightweight, cloud-based anti-malware scanner developed by Sophos that specializes in detecting and removing malware that traditional antivirus software may miss. It uses behavioral analysis and connects to cloud-based engines to identify threats. HitmanPro is designed as a "second opinion" scanner and works alongside your existing antivirus software without conflicts. The program can run without installation, making it ideal for scanning potentially infected systems.

Key Features of HitmanPro

• Cloud-based scanning: Leverages multiple antivirus engines without requiring large signature databases on your computer.
• Behavioral analysis: Detects malware by analyzing suspicious behaviors rather than just signatures.
• Portable operation: Can run directly from a USB drive without installation.
• Fast scanning: Typically completes scans in 1-5 minutes.
• Rootkit detection: Specialized tools for finding deeply hidden threats.
• Kickstart option: Removes persistent malware that loads before Windows starts.
• Free trial: 30-day trial allows full malware removal; after trial, free scanning continues but removal requires license.

Downloading HitmanPro

HitmanPro does not require pre-installation to scan your system.

1. Visit the official Sophos HitmanPro website at www.hitmanpro.com.
2. Click the Downloads button.
3. Choose either the 32-bit or 64-bit version:
   • For most modern computers (2010 or newer), select the 64-bit version.
   • If unsure, the 32-bit version works on all systems but may be slower.
4. Save the file to an easily accessible location such as your Desktop or Downloads folder.
5. The downloaded file (HitmanPro.exe or HitmanPro_x64.exe) is ready to run immediately without installation.

Note: For scanning an infected computer that cannot access the internet, download HitmanPro on a clean computer and transfer it via USB drive.

Running Your First Scan

HitmanPro can scan your system immediately without a traditional installation process.

1. Locate the HitmanPro file you downloaded.
2. Double-click the HitmanPro executable file to launch it.
3. If prompted by User Account Control, click Yes to allow the program to run.
4. The HitmanPro welcome screen appears. Click Next to continue.
5. You will be asked if you want to install HitmanPro or perform a one-time scan:
   • Select "No, I only want to perform a one-time scan" if you just need to check for malware.
   • Select "Yes, I want to install HitmanPro" to keep the program on your computer for regular use.
6. Click Next to proceed.
7. Review and accept the license agreement by clicking Next.
8. HitmanPro will automatically begin scanning your computer.

Understanding the Scanning Process

HitmanPro performs a multi-phase scan that typically takes 1-5 minutes.

Scan Phases

During the scan, you will see progress through these stages:

1. Initializing: Prepares the scanning environment and connects to cloud services.
2. Scanning running processes: Examines all active programs and services in memory.
3. Scanning files: Checks critical system files and common malware locations.
4. Scanning registry: Examines Windows registry for malicious entries.
5. Scanning cookies: Checks for tracking cookies and privacy threats.
6. Behavioral analysis: Analyzes suspicious behaviors and patterns.

The scan progress bar shows the current phase and percentage complete. You can continue using your computer during the scan, though this may slow the process slightly.

Reviewing Scan Results

After the scan completes, HitmanPro displays its findings.

If Threats Are Found

1. HitmanPro displays a list of detected threats with the following information:
   • Threat name and classification
   • File location or registry key
   • Risk rating (displayed as colored indicators)
   • Detection source (which cloud engine identified it)
2. All detected items are checked by default for removal.
3. To view more details about a specific threat, click on it to expand the information panel.
4. If you believe an item is a false positive, uncheck the box next to it to exclude it from removal.
5. Click Next to proceed with removal.
6. If you are within the 30-day trial period or have a license, HitmanPro will remove the threats immediately.
7. If your trial has expired, you will be prompted to activate a license to remove threats. Free scanning will continue, but removal requires activation.

Threat Classification Colors

• Red: Confirmed malware requiring immediate removal.
• Orange: Suspicious files that may be malware or potentially unwanted programs (PUPs).
• Yellow: Tracking cookies or minor privacy concerns.

If No Threats Are Found

If HitmanPro finds no threats, you will see a "No suspicious files found" message with a green checkmark. Click Close to exit the program.

Removing Detected Threats

HitmanPro provides different removal methods depending on the threat type.

1. After reviewing scan results, click Next to begin removal.
2. HitmanPro will attempt to remove or quarantine threats using the most appropriate method:
   • Delete: Permanently removes the malicious file.
   • Quarantine: Isolates the file in a secure location.
   • Registry repair: Removes or repairs malicious registry entries.
   • Restore: Returns modified system files to clean versions.
3. For persistent threats, HitmanPro may require a system restart. If prompted, click Reboot to restart immediately or Reboot later to restart at your convenience.
4. After removal, HitmanPro displays a summary of actions taken.
5. Click Close to exit the program.

Important: Some malware removal may require a restart to complete. Do not skip the reboot if HitmanPro recommends it.

Installing HitmanPro Permanently

If you chose to install HitmanPro during your first scan, or want to install it later for regular use:

1. Double-click the HitmanPro executable.
2. On the welcome screen, click Next.
3. Select "Yes, I want to install HitmanPro on this computer."
4. Click Next to proceed.
5. Accept the license agreement and click Next.
6. Choose your installation preferences:
   • Check "Create desktop shortcut" if you want quick access.
   • Check "Scan for malware during installation" to perform an immediate scan.
7. Click Install to complete the installation.
8. Once installed, HitmanPro can be accessed from your Start menu or desktop shortcut.

Activating HitmanPro License

To continue removing threats after the 30-day trial expires, you need to activate a license.

1. Open HitmanPro from your Start menu or desktop shortcut.
2. If prompted about license expiration, click Activate.
3. Enter your license key in the provided field.
4. Click Activate to validate the license.
5. If activation succeeds, you will see a confirmation message.
6. Click OK to return to the main screen.

Alternatively, you can activate through Settings > Activate at any time.

Using HitmanPro Kickstart

Kickstart is a specialized tool for removing persistent rootkits and malware that prevents normal Windows startup or removal tools from running.

When to Use Kickstart

• Your computer won't boot into Windows normally.
• Malware blocks HitmanPro or other security tools from running.
• Standard scans cannot remove deeply rooted infections.
• You suspect a rootkit infection.

Creating a Kickstart USB Drive

1. On a clean, working computer, download HitmanPro.
2. Insert a USB flash drive (minimum 1 GB) into the computer. Warning: All data on the USB will be erased.
3. Run HitmanPro and click the settings icon (gear icon) in the bottom-right corner.
4. Select "Create Kickstart USB drive."
5. Select your USB drive from the list.
6. Click OK to create the bootable USB drive.
7. Wait for the process to complete (typically 2-5 minutes).
8. Safely eject the USB drive when finished.

Using the Kickstart USB

1. Insert the Kickstart USB drive into the infected computer.
2. Restart the computer and access the boot menu:
   • Common keys: F12, F2, F10, ESC, or DEL (varies by manufacturer)
   • Press the appropriate key repeatedly during startup
3. Select the USB drive from the boot menu.
4. HitmanPro Kickstart will load a minimal Windows environment.
5. Once loaded, HitmanPro will automatically begin scanning.
6. Review and remove detected threats following the normal process.
7. When complete, remove the USB drive and restart the computer normally.

Running HitmanPro from Safe Mode

If malware prevents HitmanPro from running normally, try Safe Mode.

1. Restart your computer into Safe Mode with Networking:
   • Windows 11/10: Hold Shift while clicking Restart, then select Troubleshoot > Advanced options > Startup Settings > Restart, and press 5 or F5 for Safe Mode with Networking.
   • Windows 7: Restart and press F8 repeatedly, then select "Safe Mode with Networking."
2. Once in Safe Mode, run HitmanPro normally.
3. Perform a scan and remove detected threats.
4. Restart your computer normally when finished.

Configuring HitmanPro Settings

After installation, you can customize HitmanPro's behavior.

1. Open HitmanPro.
2. Click the settings icon (gear icon) in the bottom-right corner.
3. Available settings include:
   • Scan settings: Configure what HitmanPro scans (cookies, registry, files)
   • Scheduled scans: Set up automatic daily or weekly scans
   • Quarantine management: View and restore quarantined items
   • Updates: Configure automatic update settings
   • Proxy settings: Configure network connection settings if needed
4. Make your desired changes and click Save.

Managing Quarantined Items

HitmanPro stores removed threats in quarantine where you can review or restore them if needed.

1. Open HitmanPro.
2. Click the settings icon (gear icon).
3. Select Quarantine from the menu.
4. View the list of quarantined items with:
   • Threat name
   • Original file location
   • Date quarantined
5. To restore an item (only if you're certain it's safe), select it and click Restore.
6. To permanently delete quarantined items, select them and click Delete.
7. Click Close when finished.

Viewing Scan Logs

Review detailed information about previous scans.

1. Open HitmanPro.
2. Click the settings icon (gear icon).
3. Select History to view scan logs.
4. Each log shows:
   • Scan date and time
   • Number of items scanned
   • Threats detected
   • Actions taken
5. Click on any log entry to view detailed results.
6. You can export logs by clicking Save report.

Using HitmanPro Portably

One of HitmanPro's advantages is the ability to run without installation, making it ideal for USB-based scanning.

Creating a Portable Version

1. Download HitmanPro to a USB flash drive instead of your hard drive.
2. The executable can run directly from the USB on any computer.
3. No installation is required; just double-click to scan.
4. This is particularly useful for scanning multiple computers or infected systems that prevent software installation.

Benefits of Portable Use

• Scan computers without leaving traces or requiring installation.
• Clean infected systems that block traditional installation.
• Quickly check multiple computers using one USB drive.
• Useful for IT professionals managing multiple systems.

Scheduling Automatic Scans

If you have HitmanPro installed permanently, you can schedule regular scans.

1. Open HitmanPro.
2. Click the settings icon (gear icon).
3. Select Scheduled scans.
4. Check "Enable scheduled scanning."
5. Configure the schedule:
   • Frequency: Daily, Weekly, or Monthly
   • Time: Select when to run the scan
   • Day: For weekly scans, choose the day
6. Select whether to automatically remove threats or prompt for action.
7. Click Save to activate scheduled scanning.

Updating HitmanPro

HitmanPro automatically updates when connected to the internet, but you can manually check for updates.

1. Open HitmanPro.
2. Click the settings icon (gear icon).
3. Select About.
4. View the current version information.
5. Click Check for updates to manually download the latest version.
6. If an update is available, click Download to install it.
7. Restart HitmanPro after updating.

Using HitmanPro with Other Security Software

HitmanPro is specifically designed to complement existing antivirus software.

• HitmanPro does not provide real-time protection; it is a specialized scanning tool.
• It works alongside any antivirus program without conflicts.
• Use your primary antivirus for real-time protection and HitmanPro for periodic deep scans.
• Do not run multiple scans simultaneously from different programs, as this degrades performance.

Troubleshooting Common Issues

HitmanPro Won't Run

• Some malware blocks security tools. Try renaming HitmanPro.exe to a different name like "explorer.exe" or "iexplore.exe."
• Run HitmanPro from Safe Mode with Networking.
• Use HitmanPro Kickstart to bypass malware interference.
• Temporarily disable other security software during the scan to avoid conflicts.

Cannot Connect to Cloud Services

• Check your internet connection.
• Malware may be blocking network access. Try running from Safe Mode with Networking.
• Configure proxy settings if your network requires a proxy: Settings > Proxy settings.
• Temporarily disable your firewall and test again (re-enable after scanning).

Scan Freezes or Crashes

• Some severely infected systems may cause scanning issues. Use Kickstart mode instead.
• Ensure you have enough free disk space (at least 1 GB).
• Try running HitmanPro from Safe Mode.
• If scanning a specific file causes freezing, note the file location and exclude it temporarily.

False Positives

• HitmanPro uses multiple detection engines, reducing false positives.
• If you believe a detection is incorrect, research the threat name online before restoring.
• Submit false positives to Sophos through their support website.
• You can restore items from quarantine if you're certain they're safe.

Cannot Remove Threats After Trial Expires

• After the 30-day trial, scanning remains free but removal requires a license.
• Purchase a license to continue removing threats.
• Alternatively, use other free removal tools like Malwarebytes Free in combination with HitmanPro's detection.

System Requirements

• Operating System: Windows 7, 8, 8.1, 10, 11 (both 32-bit and 64-bit)
• RAM: Minimum 512 MB (1 GB recommended)
• Disk Space: 10 MB for program, plus space for quarantine
• Internet Connection: Required for cloud scanning functionality
• Administrator Rights: Required to run scans and remove threats

Uninstalling HitmanPro

If you installed HitmanPro permanently and want to remove it:

1. Open Settings in Windows.
2. Go to Apps > Installed apps (Windows 11) or Apps > Apps & features (Windows 10).
3. Search for "HitmanPro" in the app list.
4. Click the three-dot menu next to HitmanPro and select Uninstall.
5. Follow the uninstallation wizard prompts.
6. Confirm that you want to remove HitmanPro.
7. The program will be removed from your system.

Note: If you only ran HitmanPro without installing it, simply delete the executable file from wherever you saved it. No uninstallation is necessary.

Need Additional Support?

This guide aims to provide useful information, but as technology changes, interfaces or steps might vary. Please use the Comment button to let us know if anything differs from your experience. Your feedback helps us keep this information accurate. Thank you!