HiJackThis+ is a free utility for Microsoft Windows that scans your computer for settings changed by adware, spyware, malware and other unwanted programs. Shortly, consider it like Sysinternals Autoruns.
HiJackThis+ by Alex Dragokas is a continuation of Trend Micro HiJackThis development, based on v.2.0.6 branch and 100% rewritten at the moment. HiJackThis+ was initially supported by Trend Micro, but they have since refused support and closed its GitHub repository. HiJackThis+ is distributed under the initial GPLv2 license. It also includes several tools and plugins available as freeware.
New in version 3:
- Detects several new hijacking methods
- Fully supports new Windows versions
- New and updated supplementary tools
- Improved interface, security and backups
HiJackThis+ includes handy tools for manual malware removal:
- StartupList 2 (*new*)
- Process Manager
- Uninstall Manager
- Hosts File Manager
- Alternative Data Spy
- Services Removing Tool
- Batch Digital Signature Checker (*new*)
- Registry Key Type Analyzer (*new*)
- Registry Key Unlocker (*new*)
- Files Unlocker (*new*)
- Check Browsers" LNK & ClearLNK (as downloadable components) (*new*)
The difference from classical antiviruses is the ability to function without constant database updates, because HiJackThis+ primarily detects hijacking methods rather than comparing items against a pre-built database (signatures). This allows it to detect new or previously unknown malware - but it also makes no distinction between safe and unsafe items. Users are expected to research all scanned items manually, and only remove items from their PC when absolutely appropriate.
Therefore, FALSE POSITIVES ARE LIKELY. If you are ever unsure, you should consult with a knowledgeable expert BEFORE deleting anything.
HiJackThis+ is not a replacement of a classical antivirus. It doesn"t provide a real-time protection, because it is a passive scanner only. Consider it as an addition. However, you can use it in form of boot-up automatical scanner in the following way:
- Run the scanning by clicking "Do a system scan only"
- Add all items in the ignore-list
- Set up boot-up scan in menu "File" - "Settings" - "Add HiJackThis to startup"
- Next time when user logged in, HiJackThis will silently scan your OS and display UI if only new records in your system has been found.
HiJackThis+ 3.3.0.5 Alpha changelog:
- All UI elements have been replaced with Unicode counterparts (thanks to Krool and VanGoghGaming).
- Fixed out-of-buffer writing in rare cases with incorrect registry keys.
- Fixed insufficient control with an attempt to check the digital signature of a folder, which could lead to a crash due to the redirector being disabled (thanks to Sandor for the support).
- Fixed Kaspersky false positive on the fix behavior. To prevent this from happening, unpack all utility files from the archive (thanks to akok for the notification).
- Comprehensive cleaning and code "obfuscation" from primitive checks of antiviruses and sandboxes to prevent their suspicions (thanks to akok for the help).
- Refactoring of the program initialization stage.
- Loading of the main menu has been accelerated.
- Hosts Manager: reset is standardized to the default hashes of the vanilla OS hosts file; fixed "Open in editor" button.
- List of OS editions has been updated.
- Improved compatibility with Windows XP and Vista.
- Changed the settings storage key. The previous settings will be moved automatically.
- Unnecessary databases are removed.
- Dead links are removed.
- Dependency on Microsoft MSCOMCTL32 is removed.
- Temporary: dependency on the apps\VBCCR17.OCX component
HiJackThis+ works on Windows 11, 10, 8.1, 8, 7, Vista, XP, and 2000 (32/64-bit, desktop, and server).
IMPORTANT: HiJackThis+ does not distinguish between good and bad items. Avoid altering your computer settings unless you"re an expert.
Download: HiJackThis+ 3.3.0.5 Alpha | 4.0 MB (Open Source)
Links: HiJackThis+ Homepage | Screenshot
