HiJackThis and CastleCops WEB Site

[allanc]

I found that that the CastleCops WEB site was extremely useful for researching most (if not all) of the output from HiJackThis.
Unfortunately, the site no longer exists.
Is there another site with comparable information on all of the sections of HiJackThis?

 

[14049752]

http://www.hijackthis.de

 

[allanc]

http://www.hijackthis.de

I was actually referring to the ability to look-up the various CLSID,etc - one comprehensive site to research everything.

 

[Pc Fixed Right]

umm you can run hijackthis and go to where 14049752 said and load the log file and enjoy

 

[Daifne]

http://www.bleepingcomputer.com/tutorials/tutorial42.html

 

[allanc]

http://www.bleepingcomputer.com/tutorials/tutorial42.html

Thank you.

 

[allanc]

umm you can run hijackthis and go to where 14049752 said and load the log file and enjoy

I thought I read something many months ago about the sites that automatically process these logs as not being 'official'.

 

[14049752]

Official as opposed to what? CastleCops certainly wasn't "official", it was ran by a group of volunteers. The sites aren't affiliated with Trend Micro, or anything like that, but that doesn't mean their data is less useful.

 

[allanc]

Official as opposed to what? CastleCops certainly wasn't "official", it was ran by a group of volunteers. The sites aren't affiliated with Trend Micro, or anything like that, but that doesn't mean their data is less useful.

A coupe of years ago I was in training to be a HiJackThis '1st responder'.
I asked my Mentor about the automatic processing of logs - in general - not that specific site.
I do not remember his exact words but it was something to the effect that those sites should not be used when researching the logs.

 

[Daifne]

Thank you.

You're very welcome. BleepingComputer is great for all sorts of malware removal information.

 

[Pc Fixed Right]

Although it may not be official it certainly has many uses and your tech skills is what comes in handy beyond its unofficalness.

 

[allanc]

Although it may not be official it certainly has many uses and your tech skills is what comes in handy beyond its unofficalness.

Actually, I wrote a program that parses the log file and categories the entries.
It uses a database of entries that *I* have encountered and categorized over time.

 

[Pc Fixed Right]

very nice =)

 

[mygeek]

I am a "Malware Expert" on the website Geeks-To-Go which is very similar to BleepingComputer. Since CastleCops is gone, efforts have been moved over to www.systemlookup.com

There are some programs out there that automatically parse HiJackThis logs, but HiJackThis is very outdated and is starting to fade away in the malware removal community. It is being replaced by better analysis tools.

 

[LunchBox]

I love using HijackThis. What is the replacement(s) tool to use?