When the download confirmation comes up, click save, then save it to your newly created folder.
3.) Right click on the zip file and click "Extract Here". The HijackThis .exe file will appear. Click on the .exe file to run the program.
If you do not have a file compression program on your computer, and don't want to download one, a link to an unzipped version of Hijack This is here.
4.) The HijackThis interface will pop up. Click the button that says "Do a system scan and save a logfile".
5.) You will see several lines of text appear, and after the scan completes, a notepad file will pop up.
6.) Copy and paste the contents of the notepad file to a post. Please make sure you post your Hijack This log in the default font, use notepad as the default text editor, and check to make sure wordwrap is unchecked in notepad's format options before you copy/paste it. If you are advised to fix entries with Hijack This, place a checkmark next to them in the scan interface and click the "Fix checked" button at the bottom left. At this point, the entire Hijack This screen will clear. This is normal.
If, during the process, you are advised to show hidden files and folders and boot into Safe Mode to delete files, see this tutorial: Safe Mode and Hidden Files/folders
To navigate to the files and folders, right click on the My Computer icon and select open. Right click on your primary hard drive (usually letter C) and select open. Locate the folder you need, find the suspect file and delete it. (For example, if the malware was located in C:\Windows\System 32 folder, you would right click on the Windows folder and select open, then right click on the System 32 folder within and select open. Then, you would look for the suspect file, right click on it and select delete.)
Site Navigation
