and that seems to be it!!! the rest seem fine.... if you're unsure ry running a scan with counterspy www.tinyurl.com/4cuz6 <- this will give you a file download box for counterspy
i believe the "dis-service" that zbestwun was referring to was your advocating the particular automatic hijacklog scanner/analyzer that you did. while it's results might be "interesting" to look at and ponder... while it might be an interesting "starting point"... the simple fact of the matter is that this particular analysis site is 'faulty', in that it will generate both "false positives" and "false negatives"... that is to say, it will tell you some entries are bad when in fact they are really good, and conversely, it will overlook some really bad entries, indicating/implying that they are good. Consequently, by blindly accepting their analysis as if it were accurate, the average person can get into trouble. that being the case, it's better to leave the matter of HJT analysis to the experts in the HJT forum
Well ok then... I can fully understand and agree with that.... (I suppose I shouldn't have linked the log)
I agree with you that it does generate false results.. But it is a good, quick starting point in the sense that it lists them nicely and gives some info (speaking of that I missed an IE search page).... and you are right , you should never trust the results fully.... (hence the link for counterspy and housecall)
and it should always be reviewed by someone that knows....
I find the results from that analysis easier to read than just the straight log.....
So... again I agree that the log should be read by an expert.... but since I didn't know there was a hijackthis forum(and neither did he) and no one had answered him yet..... at least I got him started on something.
So then I apologize for linking a site that provides false negatives and positives (research is always a good thing to do with a program like hijackthis)
I just had to know what the CAPS and red was about .... I've been in this industry for a few years now and have been supporting spyware for over 9 months and have never been spoken to about my results.... Not like that... My fault for replying to a post first thing in the morning and not reviewing it...
Funkyfreak
30 Posts
0
April 25th, 2005 11:00
heres a breakdown of that from hijackthis.de:
http://hijackthis.de/logfiles/7f0eaf17b1ce43a0031c6e000e94c1f3.html
so far, get rid of:
R1 - HKLM\Software\Microsoft\Internet Explorer\Search,(Default) = http://www.crooder.com/search/
and that seems to be it!!! the rest seem fine.... if you're unsure ry running a scan with counterspy www.tinyurl.com/4cuz6 <- this will give you a file download box for counterspy
you should also run a scan from trendmicro - http://housecall.trendmicro.com
Message Edited by Funkyfreak on 04-25-2005 08:54 AM
zbestwun2001
3 Apprentice
•
8.8K Posts
0
April 25th, 2005 17:00
You at least have the Cool WebSearch trojan and you need a special program to clean this up.
We can't do this in this fourm, please go to the HJT forum next door.
Steve
zbestwun2001
3 Apprentice
•
8.8K Posts
0
April 25th, 2005 17:00
FUNKY FREAK YOU ARE DOING A DISSERVICE TO THESE PEOPLE WITH THIS ADVICE.
PLEASE CEASE AND DECIST GIVING OUT THIS ADVICE.
IF YOU WANT THIS LOG ANALYZED CORRECTLY PLEASE POST IT IN THE HIJACKTHIS FORUM.
Funkyfreak
30 Posts
0
April 25th, 2005 23:00
ky331
3 Apprentice
•
15.6K Posts
0
April 26th, 2005 02:00
Funky,
i believe the "dis-service" that zbestwun was referring to was your advocating the particular automatic hijacklog scanner/analyzer that you did. while it's results might be "interesting" to look at and ponder... while it might be an interesting "starting point"... the simple fact of the matter is that this particular analysis site is 'faulty', in that it will generate both "false positives" and "false negatives"... that is to say, it will tell you some entries are bad when in fact they are really good, and conversely, it will overlook some really bad entries, indicating/implying that they are good. Consequently, by blindly accepting their analysis as if it were accurate, the average person can get into trouble. that being the case, it's better to leave the matter of HJT analysis to the experts in the HJT forum
Funkyfreak
30 Posts
0
April 26th, 2005 12:00