HiJack This

[+Karl]

Hijack this is an very useful tool aimed towards finding unnecessary/harmful processes running on your computer. The program scans your computer for processes which are running and outputs them in to a text file, which can then be analysed to find different types of viruses, keyloggers, etc.

 

To begin download the file from here:

http://www.download.com/Trend-Micro-HijackThis/3000-8022_4-10227353.html

 

Then install.

 

 

Next run the program and click "Do a system scan and save the log file".

This will scan your PC for processes then open a text file.

 

 

In the text file go to Edit > Select all, then copy everything in there.

 

Next go to

http://www.hijackthis.de/

 

Paste your log file into the box provided and click "analyze".

 

This will then take you to a page telling you which processes are good and which are bad. By using the data there you can figure out which processes you must remove.

 

Hope this helps :)

[penguinz0]

Thanks but Im sticking my virus and cleaner programs. :)

[Coz]

Thats interesting, I might look into this. TY Man!

[`JvYv]

Over complicated but when i have time i will try it out thanks.

[Tyler]

Don't over look this because it seems complicated, this **** is VERY helpful.

[Anthoni]

Seems like a good idea, I'll maybe use it when I get back onto my own computer.

[Toby]

Thanks Karl, i'll look into it.

[Ieat]

Seems confusing lol

[Brian]

Looks good, should be helpful

[Martin]

Over complicated but when i have time i will try it out thanks.

its actually way to easy to understand everything

[holo]

ok guys i have virus this is my notepad file for you to analyse.

 

Logfile of Trend Micro HijackThis v2.0.2Scan saved at 3:57:50 AM, on 8/13/2009Platform: Windows XP SP3 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 (6.00.2900.2180)Boot mode: NormalRunning processes:C:\Program Files\Trend Micro\HijackThis\HijackThis.exeC:\windows\system32\services.exeC:\windows\system32\winedevice.exeC:\windows\system32\explorer.exeC:\windows\system32\rpcss.exeR0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = F2 - REG:system.ini: Shell=F2 - REG:system.ini: UserInit=O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dllO23 - Service: Terminal Services (TermService) - Unknown owner - C:\windows\system32\termsv.exe (file missing)--End of file - 1162 bytes

[Martin]

ok guys i have virus this is my notepad file for you to analyse.

 

Logfile of Trend Micro HijackThis v2.0.2Scan saved at 3:57:50 AM, on 8/13/2009Platform: Windows XP SP3 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 (6.00.2900.2180)Boot mode: NormalRunning processes:C:\Program Files\Trend Micro\HijackThis\HijackThis.exeC:\windows\system32\services.exeC:\windows\system32\winedevice.exeC:\windows\system32\explorer.exeC:\windows\system32\rpcss.exeR0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = F2 - REG:system.ini: Shell=F2 - REG:system.ini: UserInit=O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dllO23 - Service: Terminal Services (TermService) - Unknown owner - C:\windows\system32\termsv.exe (file missing)--End of file - 1162 bytes

 

try to terminate the process explorer.exe using task manager, report back when you're done