New Computer Hope tool

[Computer Hope Admin]

Update: vA7.0b

Haven't had much time the last few days to work on big updates so just fixed a few of the small issues.

- Corrected the date issue and will now take months such as "Dec" and convert to proper month integer. Thanks Chris for pointing out how / why Hijackthis displays date differently.

- Corrected issue with Folding@home not showing up properly. This was caused because of new domain filtering (on e-mail addresses)

[Computer Hope Admin]

Update: A8.0

• Things not found are now using a Google Custom search, which is only searching 16+ specific sites for processes. If you happen to know a site that's not indexed feel free to mention it.
• Corrected and added additional checking on the date stamps in Hijackthis logs
• Added better detection and visibility for OCX files found (usually with combofix logs)
• Added warning on ComboFix logs that do not go all the way to the end
• Added warnings to be displayed for unknown files in the %window%\system directory
• Corrected a few dozen of the Windows files that were showing as potential threats for Vista users
• Added several hundred new processes to database, now over 3,000
• Various other minor fixes

[Broni]

Could you list those 16+ sites?

[Computer Hope Admin]

Could you list those 16+ sites?

Sure since I guess it can't be seen through Google

http://www.filename.info
http://www.liutilities.com
http://www.programchecker.com
http://www.runscanner.net
http://www.spywaredata.com
http://processlist.com
http://www.what-is-exe.com
http://www.pcpitstop.com/libraries/process/
http://www.file.net/process
http://www.whatsrunning.net
http://www.neuber.com
http://www.computerhope.com
http://www.greatis.com
http://www.processlibrary.com
http://www.threatexpert.com
http://www.bleepingcomputer.com/filedb/
http://www.bleepingcomputer.com/startups/
http://www.systemlookup.com

[Broni]

Thanks.
I can see, one great startup site is missing: http://www.sysinfo.org/startuplist.php
This must be one of the oldest, and most comprehensive site.

[Computer Hope Admin]

Thanks.
I can see, one great startup site is missing: http://www.sysinfo.org/startuplist.php
This must be one of the oldest, and most comprehensive site.

Thanks added. I've also added a few others that I've recently stumbled across while working on next update.

[Computer Hope Admin]

Update A8.0a

• Added new feature that will save the reports generated so they can be referred to or looked at by other users or used as a reference. For example, here is an example of a saved log. Links and additional information about accessing saved files found at the bottom of each process report.
• A few hundred more processes added to database.
• A few other minor changes.

[Broni]

Is it possible to send you some updates about certain entries, which are listed as unknown, thus redirected to Google search?
If so, how would I do this?

[Computer Hope Admin]

Is it possible to send you some updates about certain entries, which are listed as unknown, thus redirected to Google search?
If so, how would I do this?

You can either the a PM here or on the webmaster submission. However, anything not found is logged and I'll eventually see it and if I can figure out what it is add it to the database. So probably really not required since I'll eventually add it.

[Broni]

OK.

[az_shyguy]

Hello!

      I was just browsing through computer hope today and came across your new utility and just outta curiosity thought I would try it.  well all I have to say is WOW! That is one fantastic tool you are working on there! I loved how I could click on the process and it took me to the definition and gives me an idea of what it does. I cannot believe the information it gives a simple person like me. I am not a expert on computers but have done my fair share of fixing them mainly as a hobby or just intrigues me I guess. I have had lots of help from your malware specialist in here and I can kinda see what they are looking at when they are looking at a hjt log from me now. I have never seen a utility like the one you are working on, but does not surprise me, due to the excellence of this forum. would just like to say you guy's are the best and look forward to your final phase of this project. sounds like computer hope has a great team!

     Ok with that all said:  The hjt said it didn't find any firewall  on my system and I know I should have a better one but was just wondering if you have it set to not recognize windows firewall. I do have windows firewall enabled and running so was just curious!  It had one thing for me to fix which I didn't just due to fact my comp is running good. I also haven't installed sp3 yet, just because I am updated on sp2 still and have heard sp3 can cause problems. that is the only 3 threats it found if you would like to see it here is where it say's a report was saved:
 
http://www.computerhope.com/cgi-bin/process.pl?o=24162240.htm

Just had to put my two cents worth in..   You are the best of the best out there in my book.  I have gained great knowledge from this forum... Thanks!

[evilfantasy]

Many tools will not detect the Windows firewall. If you do any online banking, eBay, PayPal etc then you should install a 3rd party firewall.

Remember only install ONE firewall

1) Comodo (Uncheck during installation "Install Comodo SafeSurf..", Make Comodo my default search provider" and "Make Comodo Search my homepage" if you choose this one)
2) Online Armor
3) Sunbelt/Kerio
4) Agnitum
5) PC Tools Firewall Plus

If you are using the built-in Windows XP firewall, it is not recommended as it does not block outgoing connections. This means that any malware on your computer is free to "phone home" for more instructions. Simply put, Windows XP contains a mediocre firewall. This firewall is NO replacement for a dedicated software solution. Remember to use only one firewall at the same time.

----------

Your Hijackthis log contains a missing file reference to: {7e853d72-626a-48ec-a868-ba8d5e23e045}. Although not a threat to the computer it may cause errors.

This is part of Windows Live Messenger and isn't dangerous and is actually safe. It won't hurt to fix it with HJT though.

----------

SP3 only caused a problem for a small number of people. While it isn't critical to update to SP3 like it was to update to SP2, it is still recommended.

[az_shyguy]

Thanks for the advice Evilfantasy! 

    Guess I best get a firewall installed then!  CBMatt suggested the same thing on my moms comp that he just helped me clean up.


    Would like to say again .."great tool that is being made here in computerhope"
Will be watching with great enthusiasm.  Looks like alot of work involved.  A Pat on the back to Computer Hope Admin for his efforts!!! 

[Computer Hope Admin]

Glad to hear you're enjoying the tool az_shyguy and thanks for the feedback.

[Computer Hope Admin]

Update 9.0

- Added a listing of R0 - R3 HijackThis lines. For those not that familiar with HJT these are the lines that list your Internet Explorer preferences, e.g. your home page.
- Checking and listing on O1 lines for potential host file changes.
- Added checking for 05 (Missing control panel icons)
- Added checking for 06 (Disabled IE settings)
- Added checking for 07 (Disabled regedit access)
- Added checking for O10 (Windows Winsock hijackers) and made suggestion to LSP-Fix.
- Added checking for O13 (IE prefix (http://) hijack)
- Added checking for O15 (IE trusted zones)
- Added checking for O17 (DNS / Domain hijacks)
- Added checking for O18 (Protocol hijacks)
- Added checking for O18 (CSS style sheet hijacks)
- If running HijackThis from Safe Mode will report it as a potential warning.
- Added a few dozen more processes.
- Added digg button (feel free to digg it if you like it)
- A few other minor changes and/or changes I forgot I made.