Steps to Take Before Posting your Hijack This Log

  • JrzyCrim
  • Mastermind
  • Mastermind
  • User avatar
  • Posts: 2062

Post 3+ Months Ago

Steps to Take Before Posting your Hijack This Log

Please follow these instructions carefully. We will be able to tell if you skip any steps. By following these steps, you wil aid us greatly in cleaning your system.

After following these instructions, please do not post your log in someone else's thread. Start a new topic. It becomes very confusing when different logs are posted in the same thread. If you decide to ignore this request, your post will be deleted. If you have already started a new thread and were referred to this post, then just continue on in that thread.

If you are not using the latest version of Hijack This, Version 2.0.2, please download it from:
  • http://tomcoyote.com/hjt/
  • http://www.download.com/3000-8022_4-10781312.html


Do not run Hijack This from a temporary folder. HJT makes backups for items that are fixed. Any backups saved in a temporary folder run the risk of being deleted. Backups are important in case a previous fix needs to be restored. It's best to make a permanent folder: C:\HJT this for example. Any place other than a temporary folder is fine.


If you have your own anti-virus program, please update it and do a complete scan.


Use Trend Micro's Online scanner
http://housecall.trendmicro.com/houseca ... t_corp.asp
Housecall often finds things that popular AV programs miss.

Select your location and click go. If you have never used Trend Micro's online scanner before, you will have to install their active X component. After that is finished installing, the update engine and pattern file will begin downloading. If you are on a dialup connection, this will take several minutes but it's well worth the wait.

To use Housecall, you need one of the following browsers:
Microsoft Internet Explorer (version 4.0 or above)
Netscape Navigator (version 3.01 or above)

Check 'Auto Clean' and 'My computer' and click 'Scan'.


Download these two programs
  • Spybot Search and Destroy
  • AdAware
Install and update both. Reboot into Safe Mode and use one then reboot again into safe mode and run the other.

Here are instructions on how to use both programs:
  • Using Spybot - Search & Destroy
  • Using Ad-Aware SE

Go to add/Remove programs and check and see if you have any of the following programs. Remove them if present. These programs are known to be packaged with or are adware/spyware/malware:

  • Alexa Toolbar
  • Bargain Buddy
  • Bonzi Buddy
  • Comet Cursor
  • Date Manager
  • Download Accelerator Plus (Free version)
  • Hotbar
  • Huntbar
  • Kazaa
  • Memory Meter
  • My Search Bar
  • New.Net or NewDotNet
  • SearchSquire
  • SideFind or IS Technologies SideFind
  • Smiley Central
  • Weatherbug
  • WebHancer or WEBHANCER AGENT
  • WebSearch Toolbar
  • WildTangent
  • Winad
  • Windows Adtools or Wind Updates
  • Windows SyncroAd or SyncroAd

If the folders for any of the above programs are still present, remove those as well. If you're not sure about a particular folder, ask about it in your post. More programs will be added in the future. Some programs on the list may not be removable via Add/Remove programs. Click on a specific entry for manual removal instructions or programs that will detect and remove these.

If you unsure about other programs on your computer, please search this database:
http://www.spywareguide.com/product_search.php

A partial search query generally works best: 'Bon' or 'Bud' will return Bonzi Buddy, for example. A full list can be viewed at this sight as well as different categories of adware/spyware/malware.


Finally, reboot normally. Run Hijack This, Scan and post the log. Make sure you post the complete log including the HJT version and Windows version information. Include a detailed description of the problems you are experiencing. When posting, use a descriptive topic title:

Hijack This Log - {Place Brief Description of the Problem Here}
(example: HijackThis Log - Problem with Pop-ups)

If the particular problem that prompted you to post a log goes away after following the above steps, please post a fresh log anyway. Sometimes a problem will return after a reboot if it was not removed successfully. Once it has been determined your system is clean, additional follow-up steps will be given. It is important to follow any steps given to ensure a good 'fix'.

After posting your log, someone will analyze it as soon as possible and give you further instructions.

Please be patient. The analysis can sometimes take awhile. The time will depend on the amount of spyware/malware which is on your system. Hopefully the above steps will fix most, if not all, of the problems.
  • Anonymous
  • Bot
  • No Avatar
  • Posts: ?
  • Loc: Ozzuland
  • Status: Online

Post 3+ Months Ago

  • JrzyCrim
  • Mastermind
  • Mastermind
  • User avatar
  • Posts: 2062

Post 3+ Months Ago

I just discovered on online Hijack This analysis tool. You can paste a copy of your HJT log into a text box or upload it and receive a detailed analysis.

http://hijackthis.de/en

It seems to work pretty well.

*note - If you use the online scanner, double check the results manually anyway. It doesn't always catch some "bad" items. - ATNO
  • ATNO/TW
  • Super Moderator
  • Super Moderator
  • User avatar
  • Posts: 23456
  • Loc: Woodbridge VA

Post 3+ Months Ago

Note above the HJT Version revision. I'll try to remember to keep this updated a little more regularly.

Post Information

  • Total Posts in this topic: 3 posts
  • Users browsing this forum: No registered users and 43 guests
  • You cannot post new topics in this forum
  • You cannot reply to topics in this forum
  • You cannot edit your posts in this forum
  • You cannot delete your posts in this forum
  • You cannot post attachments in this forum
 
 

© 1998-2014. Ozzu® is a registered trademark of Unmelted, LLC.