reading the Hi jack Log

[ctjonb]

Hello
I was curious, what exactly is it you look for when reading the Hi jack logs ?
I have read some of them, and see certain ones I can Identify. But is there a certain way they are looked at in order to spot an issue, and then of course, one would download combo fix and extract it. just something I was interested in.
Thanks
John

[Gecko]

ctjonb,

Basically reading through a HJT log is a process of elimination for each entry.
I do use customized tools to help me rule out the most common entries but it's Google after that.
I also have a program for canned replies, ready to input the specific details for each type of reply.

Honestly HJT is so well known in the malware field that many new ones are able to hide themselves from HJT or stop HJT from loading.
I see the same thing with Combofix now also, they try and stop it from running, that's when you have to change the name to something other than Combofix to get it to run.

[ctjonb]

Thanks for the reply,

That's deffinatly some good info, I appriciate it. So with HJL and such is there another way to read the files running in your pc or No ?

[Gecko]

ctjonb,

There are a number of ways to "read" what's running on a system.
Sysinternals Process Explorer is one I use to see what is running and what program loads what dll file.

[ctjonb]

Thanks, thats a cool program,
can spyware and such hide itself from this program ?
say have you tried or do you use Security Task Manager at all.