Tracking the Hacks

[TeancumMemsochet]

After following the hacking threads and seeing how nobody is exactly sure what they got hit with, I think it's time we start tracking what's on people's systems when they get hacked. There is a program out there that will create a log of everything on your PC that's not the default Windows setup. It's called HijackThis. If we can get the word out for people to DL and run this, then copy the log to a secure location, then the tech guru's can pour over it and start finding patterns. With enough logs we can identify the trojans and help make sure we stem the tide of lost accounts.


DISCLAIMER: This program has the capabilities of totally jacking your system up if you do something you are unsure of what might happen. So please, unless you are trained in PC maintenance, DO NOT REMOVE ANYTHING. Just run it and save the log someplace you can find later when a secure place is setup.

[Odon]

Little late, read the announcement.

[TeancumMemsochet]

Little late, read the announcement.

OK, am I missing something? B/c as far as I know, people are still unsure of exactly what they are being hit with. The original 4 files are no longer being found on hacked PCs. While we might know how the exploits being used, people still don't know what exactly to look for to remove any trojans they might already have. That's the purpose of doing this.

[Spekkio]

it's possible that there are two threats and only one has been identified so far. by using hijack this, we can find out with more certainty if there is a second attack vector and seek to control that too.

[ronin sparthos]

I got hit with this trojan in my system32 folder:

C:\Windows\system32\CMCFG3.dll

RBO.abo was the name of the trojan iirc, i have no idea where it came from and it was hellish to remove.