| View previous topic :: View next topic |
| Author |
Message |
kltsin
Black Belt 2nd Degree
Joined: 29 Jun 2004
Posts: 2792
Location: St. Augustine, Fl
|
 Posted: Sun May 29, 2005 6:35 pm Post subject: Discipline/Protocol for HJT logs |
 |
|
From certain posts and the interaction of members I see that hijackthis has been abused.
Its just a tool to look at certain parts of a system but doesn't cover every aspect as the scumware is trying to overcome hjt and get deeper into the system every day.
Many of the scumware will crash the system if one part is removed making the desktop unavailable, or other adverse affects.
First a disclaimer/announcement with certain protocols be followed first.
Denouncement of automated HJT log analyze websites.
With most simple infections theres a better soution.
This isnt a forum devoted to scumware removal but if a post is made there must be a protocol for the mods to follow then the users will follow.
HJT is a great tool, shame to see it go to waste.
Once this protocol is met i will post canned fixes for mods alone or simply we should direct them to the few great sites that deal with this exclusively.
It is definetly a matter that needs to be fixed. |
|
| Back to top |
|
 |
Sabrewings
Mobo-fu Master
Joined: 15 Jan 2004
Posts: 18948
Location: Barksdale AFB, LA
|
| Posted: Sun May 29, 2005 6:39 pm Post subject: Re: Discipline/Protocol for HJT logs |
|
|
| kltsin wrote: | | Denouncement of automated HJT log analyze websites. |
I take it you're referring to something like this:
http://www.hijackthis.de/index.php?langselect=english
I see nothing wrong with it. It's made by the people who made HJT in the first place. Wouldn't they know the most about analyzing their own log? Also, it's just a guide to show you what may be out of order, and points out known high priority problems. I see no reason not to let people use it, and I fully endorse it.
_________________
 
RIAA vs The People |
|
| Back to top |
|
|
kltsin
Black Belt 2nd Degree
Joined: 29 Jun 2004
Posts: 2792
Location: St. Augustine, Fl
|
| Posted: Sun May 29, 2005 7:04 pm Post subject: Re: Discipline/Protocol for HJT logs |
|
|
| Sabrewings wrote: | | kltsin wrote: | | Denouncement of automated HJT log analyze websites. |
I take it you're referring to something like this:
http://www.hijackthis.de/index.php?langselect=english
I see nothing wrong with it. It's made by the people who made HJT in the first place. Wouldn't they know the most about analyzing their own log? Also, it's just a guide to show you what may be out of order, and points out known high priority problems. I see no reason not to let people use it, and I fully endorse it. |
I know this site wasnt made by merjin or he would ever endorse it or the many sites that deal with scumware ever link to it.
As you see nothing wrong with users taking dramatic risks with their systems and placing the blame on patricks hands then feel free.
Its bad advice, period.
If you or another mod is going to link to a hjt analisys site make it one run by people that can recognise infestations and deal with them correctly.
Putting the automated link up is not good advice.
Motherboards.org is not a virus/scumware removal site at least have an announcement on how to remove easy ones then link them to specialised sites.
I stand tall on this and wont back down, its in the best interest of this site and the mods. You must know how to deal with logs and infestations and protocol is needed. |
|
| Back to top |
|
|
Sabrewings
Mobo-fu Master
Joined: 15 Jan 2004
Posts: 18948
Location: Barksdale AFB, LA
|
| Posted: Sun May 29, 2005 7:11 pm Post subject: |
|
|
First, there's no liability to this site since every analysis it gives has this warning:
| Quote: | | Use these tips at your own risk! |
So, we couldn't be held responsible and if Patrick feels there's a risk a slight disclaimer is all that is needed.
| Quote: | | I know this site wasnt made by merjin |
You are correct here. I was thinking of something else as this site clearly says on the homepage that he didn't make HijackThis, but just this analysis. I'll have to find the one I was thinking of. 
Either way, I will bring this to all the other mods' attention and we'll see how it goes.
_________________
RIAA vs The People |
|
| Back to top |
|
|
kltsin
Black Belt 2nd Degree
Joined: 29 Jun 2004
Posts: 2792
Location: St. Augustine, Fl
|
| Posted: Sun May 29, 2005 7:15 pm Post subject: |
|
|
| let me put it this way, if all of the AV tools available didnt work what makes you think a crappy link will help? |
|
| Back to top |
|
|
kltsin
Black Belt 2nd Degree
Joined: 29 Jun 2004
Posts: 2792
Location: St. Augustine, Fl
|
| Posted: Sun May 29, 2005 7:29 pm Post subject: |
|
|
I take this very seriously, even though you have the disclaimer it should be a seperate disclaimer for infections and HJT logs or ban them altogether.
I am more than willing to create a protocol.
I am also willing to create a classroom for mods on scumware and their removal with canned fixes and canned speeches.
This site and the major powers are the users that frequent the forum have more control, just help guide them to proper decisions |
|
| Back to top |
|
|
Toby B.
Lead Mobo-fu Master
Joined: 16 Dec 2001
Posts: 13960
Location: Maine
|
| Posted: Sun May 29, 2005 8:14 pm Post subject: |
|
|
| Quote: | | You must know how to deal with logs and infestations and protocol is needed. |
We all have a verying degree of knowlege with PC's. There are some topics I wont touch as I dont know the first thing about it.... Same with the others.
| Quote: | | If you or another mod is going to link to a hjt analisys site make it one run by people that can recognise infestations and deal with them correctly. |
Due to the sheer volume of projects that we deal with, its going to be a tall order to ask that we review every singlt post/thread on this forum to be sure that only specific links are posts....
_________________
We Help You. You Can Help Us!
Read the rules prior to posting
Tell your newsgroup or mailing list
Link to us from your pages |
|
| Back to top |
|
|
kltsin
Black Belt 2nd Degree
Joined: 29 Jun 2004
Posts: 2792
Location: St. Augustine, Fl
|
| Posted: Sun May 29, 2005 8:29 pm Post subject: |
|
|
TY toby
That confirms my position.
This isnt a site to deal with scumware, set up a routine to deal wth it when it arises.
Im not asking for a pedastal for me to be placed on, let me simply link you to sites that do this all the time and check out their protocols and make your own mind up.
They all say the same thing. |
|
| Back to top |
|
|
kltsin
Black Belt 2nd Degree
Joined: 29 Jun 2004
Posts: 2792
Location: St. Augustine, Fl
|
|
| Back to top |
|
|
Toby B.
Lead Mobo-fu Master
Joined: 16 Dec 2001
Posts: 13960
Location: Maine
|
| Posted: Mon May 30, 2005 11:18 pm Post subject: |
|
|
Kind of a silly place to put something that should stick around a while... Going to move it to the General Forum for now...
_________________
We Help You. You Can Help Us!
Read the rules prior to posting
Tell your newsgroup or mailing list
Link to us from your pages |
|
| Back to top |
|
|
|
