Jump to content

HijackThis! Tutorial


Lite

Recommended Posts

  • Administrator

HijackThis! is a specialised tool that can used to clear a system of malware. It is intended for use of intermediate- advanced users. If you aren't familiar with the tool, here is perhaps the best tutorial around.

The information being presented is meant for those wishing to learn more about what HijackThis! is showing you and how to analyse logs yourself. It is not really meant for novices. It is meant to be more educational for intermediate to advanced PC users.

Each line in a HijackThis log starts with a section name, for example;

R0, R1, R2, R3 - Internet Explorer Start/Search pages URLs

F0, F1, F2, F3 - Autoloading programs

N1, N2, N3, N4 - Netscape/Mozilla Start/Search pages URLs

O1 - Hosts file redirection

O2 - Browser Helper Objects

O3 - Internet Explorer toolbars

O4 - Autoloading programs from Registry

O5 - IE Options icon not visible in Control Panel

O6 - IE Options access restricted by Administrator

O7 - Regedit access restricted by Administrator

O8 - Extra items in IE right-click menu

O9 - Extra buttons on main IE button toolbar, or extra items in IE 'Tools' menu

O10 - Winsock hijacker

O11 - Extra group in IE 'Advanced Options' window

O12 - IE plugins

O13 - IE DefaultPrefix hijack

O14 - 'Reset Web Settings' hijack

O15 - Unwanted site in Trusted Zone

O16 - ActiveX Objects (aka Downloaded Program Files)

O17 - Lop.com domain hijackers

O18 - Extra protocols and protocol hijackers

O19 - User style sheet hijack

O20 - AppInit_DLLs Registry value autorun

O21 - ShellServiceObjectDelayLoad Registry key autorun

O22 - SharedTaskScheduler Registry key autorun

O23 - Windows NT Services

O24 - Windows Active Desktop Components

The full article continues at source.

Source

Link to comment
Share on other sites


  • Replies 10
  • Views 2k
  • Created
  • Last Reply
  • Administrator

Really useful info. I would say that this thread should be in "sticky". :)

Link to comment
Share on other sites


  • 1 month later...
  • 2 weeks later...
  • Administrator

Please do be careful with those "automated scanners" - they are known to throw up some false detections and even rate malware as "legit" in cases.

Link to comment
Share on other sites


Please do be careful with those "automated scanners" - they are known to throw up some false detections and even rate malware as "legit" in cases.

True, I keep warning people for it. You can use it as a guideline.. but never trust is 100%

Link to comment
Share on other sites


Archived

This topic is now archived and is closed to further replies.

  • Recently Browsing   0 members

    • No registered users viewing this page.
×
×
  • Create New...