Member Avatar for OurNation

BAsicly i wnat to learn how to tell what is nasty in hijack this logs so i can help others? does any one know a tutorial or can tell me? :D

  • 4 Contributors
  • 3 Replies
  • 83 Views
  • 1 Day Discussion Span
  • Latest Post Latest Post by DMR

Dani AI

Generated

asked how to read HijackThis logs; that is a great place to start. As and noted, tutorials are useful for learning the layout, and moving the thread to the correct forum (thanks ) helps get focused answers. A HijackThis log is simply a snapshot of registry keys and file locations that programs (both legitimate and malicious) use to persist or hook into Internet Explorer and Windows. The key is learning which categories matter most: startup entries, Browser Helper Objects/toolbars, services and drivers, Winsock/LSP entries, hosts/proxy/DNS changes, and any unexpected executables or DLLs referenced by those entries.

Common practical checks and red flags:

  • Unknown executable or DLL names, especially in Temp, user profile folders, or unusual system paths.
  • Random-looking filenames or registry value names (long hex strings) with no vendor information.
  • System files referenced outside their normal directories (for example, a file named like a Windows component but located in a user folder).
  • Duplicate entries, recently changed timestamps, or entries that reference files that no longer exist.
  • Changes to Hosts, proxy settings, or DNS entries that redirect traffic.

A safe workflow:

  1. Save the HijackThis log and create a restore point/backup the registry.
  2. Use the checklist above to mark suspicious lines; do not use the HijackThis "Fix" option blindly.
  3. Verify filenames via reputable scanners/forums (check file properties and signatures).
  4. If removal is confirmed, remove in Safe Mode, delete files, clean registry entries, then rescan and monitor.

Caution: many legitimate utilities resemble suspect entries. Always confirm before deleting.

Recommended Answers

All 3 Replies

Member Avatar for caperjack

I like THIS One Cuz it got pictures.lol

Member Avatar for DMR

Moving to the proper forum...

Be a part of the DaniWeb community

We're a friendly, industry-focused community of developers, IT pros, digital marketers, and technology enthusiasts meeting, networking, learning, and sharing knowledge.