Hijack Pack.

I've archived a few useful tools in the fight against malware.
The pack includes:


BHOList - A front end for Tony Kleins BHO collection. Download the latest lists.
CWShredder - A tool for the removal of CoolWebSearch and it's variants.
EndItAll 2 - A modified three finger salute!
HijackThis! - Lists running processes, startups and more.
Startup CPL XP - A very useful full featured startup logger.
StartupList - Displays a list of all startup entries in Notepad.
BHO Demon - Lists all installed BHO's.
LSP-FIX - Winsock 2 repair utility.
Process Viewer - Allows you to view what's actually running.
Process Explorer XP-NT - Provides detailed information about running processes.
Spybot S&D 1.3 - Anti spyware utility.
AboutBuster 1.26 - Removes about:blank hijacks.

The archive is about 5.9M in size, it's in the "Zip" portable format and it's available here.


I'll try to keep this list up to date, but if anyone has ideas for additional utilities etc, let me know.

As the size of this file is growing, dialup users should consider using a download manager such as Flashget, which will resume interrupted downloads.


**** EDIT ****
As many will have noted, this pack is no longer available. I shall soon be updating this to reflect more recent releases of malware and anti malware tools.

Spectacular,"H"er0 2004!

Have downloaded and added it to my artillery!

Much appreciated,and thank you for taking the time to do it.:kiss:

Thanks Zer0 2004,

Another great contribution from you.

Regards

Dave

have made the thread sticky :)

just to add - spybot s+d from http://www.safer-networking.org/ is free and quite simple to use - install it + run the update thing then scan - it will remove a lot of nasties w/o trouble :)

Sil

I'd just like to add a very useful url regarding the use of HJT! and similar programs. It's a very informative site and is run by an expert in the field of spyware and other malware:

http://www.thespykiller.co.uk

Another site:

www.spywareinfo.com (SWI)

Is probably (in my opinion) the leading site on the net for anti-browser hijack, spy/adware removal support and defence.

So effective is the site, that it was the subject of a prolonged and severe DDoS attack, along with sister sites (tomcoyote.org and Merijn.org (creator of HijackThis) and Net-integration.com), being dragged in when SWI began to rally.

All is now well, and SWI is up and running and if your interested, actively recruiting helpers to assist people with problems. There is a 'Boot Camp' for those who wish to learn the 'art' of spy/adware removal, if anyone is interested, pop along.

If this was the wrong place to say that, my apologies and any Mod please delete any innapropriate text.

That said, love The Scream (what I have seen so far). :)



:rollin:

Hi Freebird,

Yep, posting that is fine :)

I subscribe to the newsletter at spywareinfo sometimes has some useful info :)

Sil

PS, welcome to TS! :)

silver......thnx for the welcome. :)

I didn't want it to sound as though I was on a 'recruitment' drive.....lol


:rollin:

Does anyone know where I can look up the results of the Hijackthis printout. It would be nice to learn some of this stuff for myself.

Regards

Originally posted by Dave Smith
Does anyone know where I can look up the results of the Hijackthis printout. It would be nice to learn some of this stuff for myself.

Regards

Hi Dave, as always, remember that Google, or even better, Copernic is your friend! :D
There are quite a few sites of interest to watch out for with regards to this kind of infection although the lines between spyware etc and viruses, trojans etc have become very blurred.

Some of the various sites that I use for checking filename validity/origination are, in no particular order:

http://www.windowsstartup.com/wso/search.php
http://www.answersthatwork.com/Taskl...s/tasklist.htm
http://www.liutilities.com/products/.../allprocesses/

http://www.kephyr.com/filedb/index.p...rce=bottomlink


There are now many forums dedicated to removing these parasites. A few are listed below, again in no particular order:

http://www.security-forums.com/index.php
http://www.computercops.biz/index.php
http://www.spywareinfo.com/
http://www.experts-exchange.com/
/
http://www.lavasoftsupport.com/

Others:

http://www.thespykiller.co.uk
http://www.wilderssecurity.com
http://www.doxdesk.com
http://cexx.org
http://www.pestpatrol.com


These lists are by no means exhaustive but they should keep you busy for a while. :D

Thanks Zer0 2004.
I will work my way through these sites.

Best regards

Hi everyone. Found this link to the "Hijachthis" how to file.

Maybe it will take some of the pressure off of our experts.

Hope it helps

Regards

http://www.majorgeeks.com/vb/showthread.php?t=35407

I though that I'd already posted the definitive HJT! guide but reading back through I obviously hadn't.
Better late than never: :D

http://www.spywareinfo.com/~merijn/htlogtutorial.html