Interpreting the HiJack This Log

"I was wondering if anyone knew why only "experts" can read, analyse, and give the go ahead as to what can be done away with in the results of the log. Surely it cannot have been written with this intention??"  I agree and have been collecting all I can find how to read the logs.  I have raised the issue twice, and have not gotten a satisfactiory answer, since then I have dropped it. 

msgale and possumall:

 Msgale typed these pixels of light:

>I have raised the issue twice, and have not gotten a satisfactory answer

I don't know if you look at my Hijackthis FAQ very often, but #16 is an aid to users who want to go their own way:

http://russelltexas.com/malware/faqhijackthis.htm

There was a big discussion among the braintrust as to whether this should be released to the public...as a teacher I guess you know (and see) how I felt. However, note I do say in that FAQ (for "advanced users"). Merijn and all of us are concerned that people will make mistakes that cost them serious grief...that is why we say get some assistance if you are a novice...or learn yourself if you're an advanced user.

possumall typed these pixels:

>I was wondering if anyone knew why only "experts" can read, analyse, and give the go ahead as to what can be done away with in the results of the log. Surely it cannot have been written with this intention??

I can't speak for Merijn (he's on a well-deserved bike-riding vacation BTW...ChrisRLG might answer this better...

But I do know that Merijn did write this in the preface to his own tutorial:

"This should in no way replace asking for help...."

All the best,

Texruss   (...the "expert" who can't clean them all, but by gum I will by my work deliver the malware folks a heavy body count of their dead software soldiers. *;-)

You might like to know that several of the main anti-malware forums are using the board software to restrict replies to topics, to just the topic starter and those who are 'authorised' on thier board to help. They have had too due to some bad advise that was being given by new members. Those include wilders and tomcoyote forums.

To those who feel that 'anybody' should be able to read hijackthis logs. Try the schools on the net.

Some people progress very quickly to posting help on forum's - others take a very long time - the knowledge of windows (and the registry in particular) is one leading factor in that.

You, msgale, I would expect to be out very quickly because of your prior knowledge.
Some that come to us have very little knowledge to start with, such that at BootCamp they even have a 'newbies' board for the 'silly' questions, and it is one of the most used boards.

With the way malware is going we can do with all the help we can get.
==================================
Have you thought of joining one of the anti-malware schools - two available with lots of people in training.

Classroom at TomCoyotes
http://forums.tomcoyote.com/index.php?showtopic=1421

Bootcamp at Spwareinfo
http://forums.spywareinfo.com/index.php?showtopic=34

With both you need to register first, then follow the directions in those posts above. I teach at Both, but more responcibility at Classroom.

ChrisRLG wrote:

"To those who feel that 'anybody' should be able to read hijackthis logs. Try the schools on the net."

    who might "those" people be?

ChrisRLG wrote:

"Some that come to us have very little knowledge to start with, such that at BootCamp they even have a 'newbies' board for the 'silly' questions, and it is one of the most used boards"

    HiJackThis Log-Deciphering Boot Camp?? Did I see the word 'silly' mentioned somewhere?