Wilders Security Forums  

Go Back   Wilders Security Forums > Other Security Topics > malware problems & news
User Name
Password
Register FAQ Members List Calendar Search Today's Posts Mark Forums Read

 
 
Thread Tools Search this Thread
  #1  
Old June 15th, 2008, 06:12 PM
truthseeker's Avatar
truthseeker truthseeker is offline
Former Poster
 
Join Date: Jan 2008
Posts: 977
Default If I have a virus, will HiJackThis show it?

If a person gets infected with a virus, trojan or spyware or keylogger, will HiJackThis show it?

I mean..... is my understanding correct that if I have a virus, trojan or spyware or keylogger on my PC that it will be running in memory, and HiJackThis would show something running when I do a HiJackThis scan?

Because why would a virus, trojan or spyware or keylogger not be active in the memory? If not active and running in memory, then what would it be doing? Just sitting on my HDD doing nothing?
  #2  
Old June 15th, 2008, 07:41 PM
TopperID's Avatar
TopperID TopperID is offline
Very Frequent Poster
 
Join Date: Oct 2004
Location: London
Posts: 1,527
Default Re: If I have a virus, will HiJackThis show it?

HJT was designed and intended to reveal the presence of browser hijackers. It was never intended to diagnose viruses/trojans in in general, though it may give useful clues.

HJT is looking at specific areas, usually in the Registry, where changes may occur. It is not looking for malware files and cannot distinguish good from bad in memory. It is not a file scanner.

In the era of rootkits, where system changes can be hidden, HJT may find nothing amiss even though you have rampant infection.
  #3  
Old June 15th, 2008, 07:56 PM
truthseeker's Avatar
truthseeker truthseeker is offline
Former Poster
 
Join Date: Jan 2008
Posts: 977
Default Re: If I have a virus, will HiJackThis show it?

Quote:
Originally Posted by TopperID
HJT was designed and intended to reveal the presence of browser hijackers. It was never intended to diagnose viruses/trojans in in general, though it may give useful clues.

HJT is looking at specific areas, usually in the Registry, where changes may occur. It is not looking for malware files and cannot distinguish good from bad in memory. It is not a file scanner.

In the era of rootkits, where system changes can be hidden, HJT may find nothing amiss even though you have rampant infection.

Please re-read my initial post. I never mentioned anything about HJT "diagnosing" viruses/trojans etc.

My question is this...... If a person has a virus/trojan/keylogger etc, doesn't the virus/trojan/keylogger etc run in RAM/Memory? If so, then is there a program that shows all memory resident programs running? I thought HJT does it, but is that not so?

If HJT doesn't show all current running memory programs, which would include any virus/trojan/keylogger etc, then what other program shows me everything that is running in RAM so I can look at it and see for myself?
  #4  
Old June 15th, 2008, 08:10 PM
TopperID's Avatar
TopperID TopperID is offline
Very Frequent Poster
 
Join Date: Oct 2004
Location: London
Posts: 1,527
Default Re: If I have a virus, will HiJackThis show it?

If you want to know what is running in memory you should look in TaskManager (or preferably Process Explorer) remembering that a rootkit can hide such info.

For more detailed system info there are so many progs that I hardly know what to suggest. Try this for starters:-

http://www.runscanner.net/
  #5  
Old June 15th, 2008, 08:47 PM
truthseeker's Avatar
truthseeker truthseeker is offline
Former Poster
 
Join Date: Jan 2008
Posts: 977
Default Re: If I have a virus, will HiJackThis show it?

Quote:
Originally Posted by TopperID
If you want to know what is running in memory you should look in TaskManager (or preferably Process Explorer) remembering that a rootkit can hide such info.

For more detailed system info there are so many progs that I hardly know what to suggest. Try this for starters:-

http://www.runscanner.net/

Ok thank you.
 

Wilders Security Forums > Other Security Topics > malware problems & news « Previous Thread | Next Thread »

Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Settings
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Forum Jump


All times are GMT -4. The time now is 01:40 PM.


Powered by vBulletin® Copyright ©2000 - 2013, Jelsoft Enterprises Ltd.
Copyright ©2002 - 2013, Wilders Security Forums