GithubStar/hijackthis
1
0
Fork 0
mirror of https://github.com/dragokas/hijackthis.git synced 2026-10-28 20:11:58 +08:00
Code Issues Packages Projects Releases Wiki Activity

Commit Graph

  • 4bc233f4b7 2.7.0.23 - Dec 10, 2017 O22 - Task: Added parsing of .job files O7 - Policy: [Untrusted Certificate] - added verification of the list of untrusted digital signature certificates and their analysis. dragokas 2017-12-10 22:41:28 +02:00
  • e7ea111884 2.7.0.22 Updated whitelists. O17 - Removed ControlSet[x], referenced by the CurrentControlSet. dragokas 2017-12-09 00:46:17 +02:00
  • ccd3ef58cc 2.7.0.21 Updated whitelists. Added horizontal scrollbar to the ignore list window. O4 - HKLM\..\FileRenameOperations: disabled output of entries, related to delayed deletion ( -> DELETE marks). O22 - Task: added mark "(telemetry)" for entries, related to collection of statistics and tranferring to Microsoft server. O22 - Task: removed marks "(Microsoft)" in tasks, that executes via host-process (cmd.exe, schtasks.exe e.t.c.) Switch /ihatewhitelists - fixed. Added switch /default - to load default settings (useful together with /silentautolog in case user changed settings himself). It is not affect ignore list. Added switch /skipIgnoreList - do not load ignore list. Added switch /timeout:sec, where 'sec' is a number of seconds allowed for HiJackThis to be run in /silentautolog mode until emergency shutdown (180 sec. by default); 0 - to disable. Added output of time zone. Correcting errors in the backup module. dragokas 2017-12-08 00:09:40 +02:00
  • 2a373ca869 2.7.0.20 /silentautolog - fixed error, when logfile cannot be created O22 - Task: Reworked. Removed dependency from task scheduler service. O22 - Task: Added support of output of several actions for 1 job. O22 - Task: Added checking of legitimacy of ComHandler-jobs. O22 - Task: The output of the job status (Running / Ready / Queued) is abolished, only the status "Disabled" is left. O22 - Task: Added ability to remove damaged jobs. Removed section O4 - Autorun.inf: Removed section O4 - MountPoints2: dragokas 2017-12-05 00:03:02 +02:00
  • 3ea187b11c Delete REGTLIB.EXE Stanislav Polshyn 2017-12-04 23:24:36 +02:00
  • 77d87a3d0f Delete modRegistry.bas Stanislav Polshyn 2017-12-04 23:22:30 +02:00
  • 16b089c170 2.7.0.19 Added new Microsoft root certificate's hash. . 2.7.0.18 Added cheking of registry type virtualization. No more double records for keys in log, if key has 'Shared' type. Added universal iteration of registry hives. Now all hives: HKLM / HKCU / HKU (default, SID of services and other logged users) will be checked in every section. Added O4 - Win9x BAT: C:\Windows\System32\Batinit.bat Added O4 - Win9x BAT: C:\Windows\WinStart.bat Added O4 - Win9x BAT: C:\Windows\DosStart.bat Added O4 - Win9x BAT: C:\AutoExec.bat Added O4 - WinNT BAT: C:\Windows\System32\AutoExec.nt Added O4 - WinNT BAT: C:\Windows\System32\Config.nt Added O4 - AlternateShell (SafeBoot): Added O4 - ScreenSaver: Added O4 - RunOnceEx: Added O4 - RunServicesOnceEx: Added O4 - Autorun.inf: Added O4 - MountPoints2: Added O7 - Taskbar policy: O16 - Trusted Zone and Trusted IP range: added checking of https protocol. O16 - ProtocolDefaults: added cheking of ldap, news, nntp, oecmd, snews, knownfolder protocols. Added O21 - ShellExecuteHooks: Introduces a new postfix "(folder missing)". Added selection of menu item in scan results window by right mouse button click. . 2.7.0.17 Added opportunity to download and launch programs for checking and cure shortcuts (Check Browsers' LNK & ClearLNK) via the menu Tools -> Shortcuts. Accelerated creating of huge and debugging logs (optimized class of strings concatenation StringBuilder). Accelerated creating of huge logs in /silentautolog mode (records are no longer added to ListBox). Fixed crash due to the ListBox overflow in /silentautolog mode. . 2.7.0.16 O17 - DHCP DNS: fixed error when DNS is not displayed (curve code from Microsoft ^). . 2.7.0.15 All windows from 'tools' section will no longer lost the focus when you move mouse to the some items of main window. F0, F1 didn't work after 2.7.0.1 (fixed). F0, F1 is now show full path to file. O1 - accelerated fix. R1 - for ProxyServer: added displaying of status (enabled / disabled) R1 fix for ProxyServer: added disabling of proxy. O3 fix: added fix of WebBrowser and ShellBrowser keys. . 2.7.0.14 R3 - Default URLSearchHook is missing: added CLSID fix R3 - fixed error with redirector. O2 - added checking of HKCU keys O3 - added checking of HKCU keys O3 - removed some white lists O3 - added cheking of \Software\Microsoft\Internet Explorer\Explorer Bars O8 - added checking of HKLM keys Improved compatibility with Windows 2k. . 2.7.0.13 Added animation of progressbar in task bar when scanning processed. Fixed work of ignore list. Added O4 - HKLM\..\BootExecute Added O4 - HKLM\..\FileRenameOperations Cheking of launching from %temp% is now ignored for the switch /silentautolog and other switches. Added possibility to install HiJackThis in folder 'Program Files' and menu 'Start' (File -> Install HJT). Restored function of automatic HJT scanning at system startup. Added button "Add ALL to ignore list" in context menu. Added command line switch /install - to install HJT. Added command line switch /autostart - to set HiJackThis for automatical scanning at system startup (use with /install) Added warning if system has outdated Service Pack. Added jumping to file or registry record via the result scanning window (look to right mouse click, Context menu => Jump to Registry / File). . 2.7.0.12 Added detection of OS Revision. . 2.7.0.11 EDS: fixed critical error in caching mechanism. Now program will always run from the main menu, if not setted mark "Do not show this menu after starting the program". Earlier 2-nd program execution led to transition to the scan results window. . 2.7.0.3 - 2.7.0.10 v Added full registry backup: (!) called by pressing "Fix Checked" button, not more than once a week (!) saved to a folder C:\Windows\ABR\<Date> (!) used utility ABR by Dmitriy Kuznetsov, so backups are compatible with UVs. (!) recovering from backup is available with several ways: - via HiJackThis: Main Menu => List of Backups => select item "<Date>: REGISTRY BACKUP" => Restore. - run file C:\Windows\ABR\<Date>\restore.exe - via UVs v.4.0.8+ => Menu "File" => Restore registry from catalogue ... => select backup you need => Recover. - via Windows RE: In command line of recovery environment enter <disk>:\Windows\ABR\<Date>\restore <disk>: (!) recovery from backup will call system rebooting without warnings. (!) Uninstallation of HJT will lead to removing of backups from the folder C:\Windows\ABR, if only they was create via HJT. (!) All backups that is older than 28 days are removed automatically when new backup is created. (!) If system drive contains less than 1 GB of free disk space backups will not be created (!). You will see a warning in the section O7 - TroubleShoot: Free disk space on C: is too low = NNN MB. . 2.7.0.10 Accelerated work of the program on highly loaded systems on the CPU (due to the miners, etc.) Fixed crash (clsStringBuilder) . 2.7.0.9 Menu has been reorganized, added icons. Added output of OS version from NTDLL.dll file if it is different from the version obtained in the standard way. Added output of Uptime (OS operating time). Added output of "FirstRun" sign ("yes", if the scanning executed first time after system rebooting). Added output of message, whether integrity of program is corrupted (e.g. due to the infection by file virus or due to the downloading of HiJackThis from non-official source). O7 - TroubleShoot: added cheking of availability at least 1 GB of free disk space on system drive. Fix will call execution of Microsoft CleanMgr utility. O7 - TroubleShoot: [Network] added checking whether computer name has empty name. It can lead to network problems. Batch digital signature checker: added "Has internal signature?" field to the CSV report. . 2.7.0.4 Added displaying of default browser (for http protocol) . 2.7.0.3 O25 - WMI: fixed white lists. O7 - IPSEC: reworked. O17 - Added white list of good known DNS. R4 - detalization of parameter names; checking is appended. EDS: fixed cheking on Win 7 SP0. Safe obtaining of environment variables. . 2.7.0.1 The program is transferred to the Pre-Alpha status. The code is significantly reorganized (refactoring). Removed backup module due to the process of its full replacing. . v Added checking for updates avaliability via Internet. (!) called from menu "Help" or "Misc Tools" (!) available new option "Check updates automatically when program is starting". . v Ignore list: earlier you was unable to add entry with Russian or unicode characters. . v Added ASLR, DEP protection. . v Accelerated: - EDS checking. - saving huge reports. - O1 - Hosts: if there are more than 40 records, the log will contain all of them, and results window will contain only first 20 and last 20 records + item "Reset contents to default". - inteface navigation. . v Batch digital signature checker: added new fields to CSV report: - is PE (whether the file is PE EXE format) - Signer name - Signer email - Catalog path (path to the security catalogue, in which hash of the file was found) - PE hash - Algorithm of certificate hash - Algorithm of signature digest - Time Stamp (time when file was signed) . v Changed encryption: - Program settings is now stored in HKLM\Software\TrendMicro\HiJackThisFork . v O26 - Image File Execution Options: - added detection of AVRF Hook/DoubleAgent - added checking of HKCU и Wow64. . v Compatibility impovements: - Windows Server with Terminal services. - Cheking OS version. . v Security improvements: - Blocked removing of Microsoft services. (!) Now system services can be removed only via menu "Tools" => "Delete Service". (!) "Tools" => "Delete Service" is now allows to enter display name of the service. (!) HTTP links have been replaced by HTTPS. . v Hyperlinks have been replaced and devided by languages for: - "Analyze report" button - sending error messages - list of updates - Online Guide in main menu - Help => Support . v Added menu: - Help => Support - Help => Users' Manual => Sections' description - Help => Users' Manual => Command line keys . v Updated GitHub Wiki pages: https://github.com/dragokas/hijackthis/wiki v Opened common topic for discussing by English-speaking users: https://github.com/dragokas/hijackthis/issues/4 . v Size of program: - HiJackThis.exe is now not packed by UPX due to the fact that UPX brokes binary compatibility when analyzing Crash-dumps. dragokas 2017-12-03 02:12:36 +02:00
  • adc9877c33 Delete readme - Sections.txt Stanislav Polshyn 2017-08-22 00:18:57 +03:00
  • 5704017d11 Delete readme - Keys.txt Stanislav Polshyn 2017-08-22 00:18:45 +03:00
  • cee433af78 Delete readme - Authors.txt Stanislav Polshyn 2017-08-22 00:18:28 +03:00
  • 8c77c66083 Delete readme - About.txt Stanislav Polshyn 2017-08-22 00:18:17 +03:00
  • 968096ce4c Update README.md Stanislav Polshyn 2017-08-20 17:38:04 +03:00
  • bb3c46e617 Update README.md Stanislav Polshyn 2017-08-13 00:33:16 +03:00
  • c1c37e3216 2.6.4.24 - source files reorganization dragokas 2017-08-13 00:19:14 +03:00
  • 1f76d32d72 2.6.4.24 - source files reorganization dragokas 2017-08-12 23:48:40 +03:00
  • 83bff22fe2 Update README.md Stanislav Polshyn 2017-08-12 22:29:15 +03:00
  • b756d6a346 Update README.md Stanislav Polshyn 2017-08-12 19:47:08 +03:00
  • 89cd2cba4d Update README.md Stanislav Polshyn 2017-08-12 18:35:48 +03:00
  • a6288a254f Update README.md Stanislav Polshyn 2017-08-12 14:24:49 +03:00
  • 458f2e60ac Update README.md Stanislav Polshyn 2017-08-12 14:14:14 +03:00
  • fcfc2861c9 Create CONTRIBUTING.md Stanislav Polshyn 2017-08-10 19:46:02 +03:00
  • 50b8d72e09 Set theme jekyll-theme-leap-day master Stanislav Polshyn 2017-08-10 19:23:45 +03:00
  • 36d4799dfa Add files via upload Stanislav Polshyn 2017-06-21 21:53:55 +03:00
  • d379a54ab6 Delete HiJackThis_dbg.exe Stanislav Polshyn 2017-05-23 21:51:57 +03:00
  • 95cb623b93 2.6.4.24 dragokas 2017-04-24 22:52:13 +03:00
  • 9f2a8e1b69 Delete VB9B0F.tmp Stanislav Polshyn 2017-04-24 22:49:44 +03:00
  • a4d3c33219 Delete VB9382.tmp Stanislav Polshyn 2017-04-24 22:49:37 +03:00
  • 4c79453bda Delete VB8280.tmp Stanislav Polshyn 2017-04-24 22:49:30 +03:00
  • c620831cd1 Delete VB6AB5.tmp Stanislav Polshyn 2017-04-24 22:49:18 +03:00
  • b4c8aff141 Delete VB684C.tmp Stanislav Polshyn 2017-04-24 22:49:11 +03:00
  • 0edfd9850e Delete VB56A1.tmp Stanislav Polshyn 2017-04-24 22:49:04 +03:00
  • d57b487e1b Delete VB4AD5.tmp Stanislav Polshyn 2017-04-24 22:48:57 +03:00
  • a0478ea8b6 Delete HiJackThis_debug.exe Stanislav Polshyn 2017-04-24 22:48:20 +03:00
  • 4cf9c984b0 2.6.4.21 dragokas 2017-04-17 22:43:22 +03:00
  • 9e293266d2 2.6.4.17 dragokas 2017-04-05 22:36:53 +03:00
  • 45f2ad623b 2.6.4.16 dragokas 2017-03-27 22:47:21 +03:00
  • 40392a816f 2.6.4.15 dragokas 2017-03-26 12:17:40 +03:00
  • bed3f318c4 2.6.4.14 dragokas 2017-03-26 12:03:15 +03:00
  • 5c5833602e Update README.md Stanislav Polshyn 2017-03-20 19:15:40 +02:00
  • 8a77a3a928 2.6.4.14 dragokas 2017-03-20 18:51:33 +02:00
  • 581c3a5663 2.6.4.9 dragokas 2017-03-04 00:52:42 +02:00
  • 9412379578 2.6.4.8 Stanislav Polshyn 2017-02-27 00:47:43 +02:00
  • 4e9b03bc43 Set theme jekyll-theme-cayman Stanislav Polshyn 2017-02-27 00:07:45 +02:00
  • 4c4ef22b50 Update code to v2.6.41 from @dragokas Fernando Mercês 2016-10-25 10:48:55 -02:00
  • 09fed0e689 Remove .exe files from the repo Fernando Mercês 2016-10-25 10:43:32 -02:00
  • a6d6b45d6c Overview Stanislav Polshyn 2016-06-27 19:34:32 +03:00
  • 489331fa8c GNU GPL v2 Stanislav Polshyn 2016-06-27 18:46:46 +03:00
  • d10a236570 Add files via upload Stanislav Polshyn 2016-06-27 18:45:24 +03:00
  • 988a745482 Delete gpl-2.0.txt Stanislav Polshyn 2016-06-27 18:44:49 +03:00
  • 457fce4e49 Delete startuplist.txt Stanislav Polshyn 2016-06-27 18:42:09 +03:00
  • d71deebca0 Delete HiJackThis_test.exe Stanislav Polshyn 2016-06-27 18:41:12 +03:00
  • 3f10581fa6 Delete MSSCCPRJ.SCC Stanislav Polshyn 2016-06-27 18:40:45 +03:00
  • 47155e41e1 2.6.1.25 Stanislav Polshyn 2016-06-18 01:39:37 +03:00
  • 2e8aab5b68 v2.0.6 Fernando Mercês 2016-06-15 16:26:24 -03:00
  • 991d606ec7 2.0.5 version v2.0.5 Fernando Mercês 2016-06-15 16:18:06 -03:00
  • 4f242f6b0c Code reorganization for v2.0.6 branch devel-2.0.6 Fernando Mercês 2015-11-24 06:22:37 -02:00
  • d1661580da Code reorganization for v2.0.5 branch devel-2.0.5 Fernando Mercês 2015-11-24 06:20:51 -02:00
  • c65aa7278e Create master branch with current stable 2.0.4 code v2.0.4 Fernando Mercês 2015-11-24 06:14:59 -02:00
  • b399f71011 loucifk 2014-04-14 01:52:52 +00:00
  • 4fcb69cb64 loucifk 2014-04-14 01:52:11 +00:00
  • d68b5584f4 loucifk 2014-04-14 01:49:01 +00:00
  • 1f5d2fa767 loucifk 2014-02-06 20:07:57 +00:00
  • c4806a4a78 loucifk 2013-07-10 13:09:54 +00:00
  • 500e5c9d3a loucifk 2013-05-22 21:36:22 +00:00
  • 1013a0614e loucifk 2013-05-22 21:27:06 +00:00
  • 57ea3c2451 loucifk 2013-05-19 02:33:48 +00:00
  • 86073e94a6 loucifk 2013-05-19 01:13:36 +00:00
  • 7078e33f83 loucifk 2013-05-19 01:13:24 +00:00
  • 849fc1101c loucifk 2013-05-19 01:13:18 +00:00
  • 7172175811 loucifk 2013-05-19 01:13:10 +00:00
  • 93147d5752 loucifk 2013-05-19 01:13:01 +00:00
  • 3033e33435 loucifk 2013-05-19 01:12:50 +00:00
  • 8b8301a5ee loucifk 2013-05-19 01:12:38 +00:00
  • 20efcbd2df loucifk 2013-05-19 01:11:37 +00:00
  • a8f2f94e08 not needed loucifk 2013-05-17 23:20:46 +00:00
  • 36cf7c3708 loucifk 2013-05-17 23:17:17 +00:00
  • 70dac631eb loucifk 2013-05-17 21:51:59 +00:00
  • 35a86850c2 loucifk 2013-05-17 17:07:33 +00:00
  • 0501e0e7fe loucifk 2013-05-17 14:51:57 +00:00
  • 64b9321e8f loucifk 2013-05-17 12:29:37 +00:00
  • e2f304e55b loucifk 2013-05-16 16:56:39 +00:00
  • 57eda141ee loucifk 2013-05-15 23:09:23 +00:00
  • 75b1a11c42 loucifk 2013-05-15 21:12:10 +00:00
  • ab6d4dcf54 loucifk 2013-05-15 21:11:47 +00:00
  • 9157209e89 loucifk 2013-05-15 21:10:49 +00:00
  • e8e9f196c6 loucifk 2013-05-15 21:09:58 +00:00
  • fa0dc349fa loucifk 2013-05-14 18:08:14 +00:00
  • bd98bc82fa loucifk 2013-05-09 16:28:47 +00:00
  • 494e708cff loucifk 2013-05-09 16:27:26 +00:00
  • b7f4c4b193 loucifk 2013-05-09 16:25:35 +00:00
  • 6791f836d7 loucifk 2013-05-08 22:52:03 +00:00
  • 0f7015198e loucifk 2012-02-21 05:14:06 +00:00
  • 8c5544c861 loucifk 2012-02-17 19:59:49 +00:00
  • ac44209731 loucifk 2011-12-29 02:53:51 +00:00
  • f826a1fa18 loucifk 2011-12-29 02:46:36 +00:00
  • db29b463b1 loucifk 2011-12-29 02:42:57 +00:00
  • fe9e94215e loucifk 2011-12-29 02:38:40 +00:00