HijackThis

From TSG Library of Knowledge

HijackThis, commonly referred to as HJT, is a specialized spyware removal tool that was originally developed by Merijn Bellekom who then sold it to Trend Micro in 2007. HijackThis creates logs (HJT Logs) that include information about areas that malware commonly modifies. Logs from HJT should be read and analyzed by qualified malware removal specialists, signified by gold shields beside their TSG member usernames (trainees have a blue shield).

Using HijackThis

If you suspect you have spyware or viruses on your system, follow these instructions to post a log to the TSG Malware Removal and HijackThis forum.

1. Download HijackThis and save it to your desktop (do not run it). (Alt.)
2. Double-click the file to install it.
3. Open HijackThis from the Start menu.
4. Select Do a system scan and save a logfile.
5. Make sure "word wrap" is turned off in Notepad.
6. Press Ctrl+A then Ctrl+C to copy the entire text file.
7. Paste (Ctrl+V) the log in a post in the Malware Removal section of the TSG forums.

DO NOT "FIX" ANY OF THE ENTRIES! Please wait for instructions from an authorized TSG member. Improper use may cause serious harm to your system.

Privacy when Posting Logs

Remember that anything you post on the Internet can be seen by anyone, and your HijackThis log is no different. If you're concerned about your privacy when posting your log, it may be a good idea to read through it and look for personally identifiable information (such as your real name). Be aware that changing or editing out details in the log will make it difficult for a helper to fix your malware. Make sure you tell the helper that you have amended personal details so he can instruct you what to alter in his fix

For example, you may want to change:

C:\Documents and Settings\Bill Gates\Local Settings

To instead read:

C:\Documents and Settings\John Doe\Local Settings

  techguy.org/w1303