HijackThis – Quick Start!

HijackThis Introduction

HijackThis examines certain key areas of the Registry and Hard Drive and lists their contents. These are areas which are used by both legitimate programmers and hijackers. Some items are perfectly fine. You should not remove them. Never remove everything. Doing that could leave you with missing items needed to run legitimate programs and add-ins. This Page will help you work with the Experts to clean up your system.

HijackThis – QuickStart

Many people download and run HijackThis after visiting a Computer Tech Help Forum. This section is designed to help you produce a log, post the log at that Forum and finally remove the items as directed by the Member helping you. This involves no analysis of the list contents by you. That will be done by the Help Forum Staff. It is a Quick Start.

If you have run any malware removal software (Ad-aware, AVG Antispyware, SuperAntiSpyware…), please reboot before scanning.
1. If you have not already done so download and install HijackThis from What the Tech:

If you downloaded the file here, it’s self-installing. Simply download to your desktop or other convenient location, and run HJTSetup.exe to install. Once installed open HijackThis by clicking Start -> Program Files -> HijackThis. This is how HijackThis looks when first opened: 1. Click the button labeled Do a system scan and save a logfile.

HijackThis Start

2. HijackThis will quickly scan your system, and then open two new windows. The results of the HijackThis scan, and hijackthis.log in Notepad. Save hijackthis.log. By default it will be saved to C:\HijackThis, or you can chose “Save As…”, and save to another location.

Save HijackThis log

If you’re receiving help online, hijackthis.log contains the info that’s required to receive analysis and assistance. It’s usually posted with your first topic on a forum, along with a description of your problem(s). Highlight the entire contents. Copy and paste the contents into your post. DO NOT fix anything. Wait for help.

3. AnalyzeThis is new to HijackThis. It’s completely optional. Clicking the AnalyzeThis button will submit the contents of your HJT log to TrendMicro. It’s not required, and will only show the popularity of items in your log, not analyze the contents. If an entry isn’t common, it does NOT mean it’s bad. TrendMicro uses the data you submit to improve their products. If you’d like to view the AnalyzeThis landing page without submitting your data, click here.

HijackThis AnalyzeThis

Note #1: It’s very important to post as much information as possible, and not just your HJT log. This will increase your chances of receiving a timely reply.

Note #2: The majority of infections can be removed using free tools, and don’t require a hijackthis log analysis. We have an excellent malware cleaning guide.

*Please, DO NOT post your log to more than one forum. Volunteer resources are limited, and that just creates more work for everyone.

How to Generate a StartupList log file:

Introduction

StartupList is a utility which creates a list of everything which starts up when you boot your computer plus a few other items. When run, it creates a file named StartupList.txt and immediately opens this text file in Notepad. A StartupList will not be needed with every forum posting, but if it is needed it will be asked for, so please refrain from posting one unless asked.

1. Open Hijackthis. Click the “Open the Misc Tools section” button:

HijackThis StartupList

2. Click the Generate StartupList log button. A confirmation box will pop up. Click Yes. The Startup list text file will now be generated and opened on the screen. If you are posting at a Forum, please highlight all, and then copy and paste the contents into your Reply in the same post where you originally asked your question.

HijakThis StartupList Log