HiJackThis+ 3.2.0.2 Alpha

HiJackThis+ (Plus)

HiJackThis+ is a free utility for Microsoft Windows that scans your computer for settings changed by adware, spyware, malware and other unwanted programs. Shortly, consider it like Sysinternals Autoruns.

HiJackThis+ by Alex Dragokas is a continuation of Trend Micro HiJackThis development, based on v.2.0.6 branch and 100% rewritten at the moment. HiJackThis+ was initially supported by Trend Micro, but they have since refused support and closed its GitHub repository. HiJackThis+ is distributed under the initial GPLv2 license. It also includes several tools and plugins available as freeware.

New in version 3:

Detects several new hijacking methods
Fully supports new Windows versions
New and updated supplementary tools
Improved interface, security and backups

HiJackThis+ includes handy tools for manual malware removal:

StartupList 2 (*new*)
Process Manager
Uninstall Manager
Hosts File Manager
Alternative Data Spy
Services Removing Tool
Batch Digital Signature Checker (*new*)
Registry Key Type Analyzer (*new*)
Registry Key Unlocker (*new*)
Files Unlocker (*new*)
Check Browsers' LNK & ClearLNK (as downloadable components) (*new*)

The difference from classical antiviruses is the ability to function without constant database updates, because HiJackThis+ primarily detects hijacking methods rather than comparing items against a pre-built database (signatures). This allows it to detect new or previously unknown malware - but it also makes no distinction between safe and unsafe items. Users are expected to research all scanned items manually, and only remove items from their PC when absolutely appropriate.

Therefore, FALSE POSITIVES ARE LIKELY. If you are ever unsure, you should consult with a knowledgeable expert BEFORE deleting anything.

HiJackThis+ is not a replacement of a classical antivirus. It doesn't provide a real-time protection, because it is a passive scanner only. Consider it as an addition. However, you can use it in form of boot-up automatical scanner in the following way:

Run the scanning by clicking "Do a system scan only"
Add all items in the ignore-list
Set up boot-up scan in menu "File" - "Settings" - "Add HiJackThis to startup"
Next time when user logged in, HiJackThis will silently scan your OS and display UI if only new records in your system has been found.

HiJackThis+ 3.2.0.2 Alpha changelog:

Fixed a bug with displaying the user group name.
Fixed code looping on some interceptions.
The "Hosts file manager" module has been rewritten with more reliable code; added "Reset" and "Update" buttons; The "Open" button now launches the default editor.
The style of the main menu buttons has been replaced and unified to be identical in all OS versions. The buttons support themes, however so far only one theme has been drawn (dark).
Removed the "Misc Tools" button.
The "Online Guide" button has been renamed to "Tutorial & Support", and now opens a submenu with access to a choice of online/offline help and treatment forums.
Renamed the "List of Backup" button to "Backups".
Renamed the menu button "Help" - "Support" to "Report a bug".
The "Do a system scan..." buttons are no longer disabled when scanning; pressing again will switch you to the results window.
Fixed quality/cropped logo at DPI >= 150 (thanks to Eduardo and VanGoghGaming for help).
References to Dr.Web were deleted because the company no longer uses HiJackThis for the treatment on forum.
Minor corrections to the translation and the main project page.
Improved debugging mode.