Jump to content

Is this statement true, gurus?


Recommended Posts

  • Replies 9
  • Created
  • Last Reply
Guest Root Kit
Posted

On Wed, 7 Jan 2009 09:04:26 -0000, "~BD~" <BoaterDave@hotmail.co.uk>

wrote:

<span style="color:blue">

>"HijackThis just does not show enough information to allow swift and

>focused removal of modern malware."

>

>That statement was found languishing here:-

>http://forum.aumha.org/viewtopic.php?f=39&...b3c0db7a323dd9b

>

>I've kept a copy in case that post disappears!

>

>Thanks for any comment.</span>

 

I have not read the article you linked to, but the statement as quoted

is of course true. This doesn't mean that HJT is useless, though.

Depends on what you're looking for.

 

Anyway, when modern malware is allowed to run with administrative

privileges, above statement is true for any checking tool as well as

for removal tools.

Posted

Thanks for your comment, Root Kit.

 

Where have you been of late? style_emoticons/

 

Dave

 

 

"Root Kit" <b__nice@hotmail.com> wrote in message

news:tes8m4pts7coqni1vse8pcd5h7uh6o6put@4ax.com...<span style="color:blue">

> On Wed, 7 Jan 2009 09:04:26 -0000, "~BD~" <BoaterDave@hotmail.co.uk>

> wrote:

><span style="color:green">

>>"HijackThis just does not show enough information to allow swift and

>>focused removal of modern malware."

>>

>>That statement was found languishing here:-

>>http://forum.aumha.org/viewtopic.php?f=39&...b3c0db7a323dd9b

>>

>>I've kept a copy in case that post disappears!

>>

>>Thanks for any comment.</span>

>

> I have not read the article you linked to, but the statement as quoted

> is of course true. This doesn't mean that HJT is useless, though.

> Depends on what you're looking for.

>

> Anyway, when modern malware is allowed to run with administrative

> privileges, above statement is true for any checking tool as well as

> for removal tools. </span>

Guest Root Kit
Posted

On Wed, 7 Jan 2009 09:28:36 -0000, "~BD~" <BoaterDave@hotmail.co.uk>

wrote:

<span style="color:blue">

>Thanks for your comment, Root Kit.

>

>Where have you been of late? style_emoticons/</span>

 

I'm always around. Just not always commenting ;-)

Posted

A belated 'Happy New Year' to you!

 

D.

 

"Root Kit" <b__nice@hotmail.com> wrote in message

news:nqt8m4dgbqb7v0te3e2d8nkl1vgh7fuj47@4ax.com...<span style="color:blue">

> On Wed, 7 Jan 2009 09:28:36 -0000, "~BD~" <BoaterDave@hotmail.co.uk>

> wrote:

><span style="color:green">

>>Thanks for your comment, Root Kit.

>>

>>Where have you been of late? style_emoticons/</span>

>

> I'm always around. Just not always commenting ;-) </span>

Posted

See below:

 

"Root Kit" <b__nice@hotmail.com> wrote in message

news:tes8m4pts7coqni1vse8pcd5h7uh6o6put@4ax.com...<span style="color:blue">

> On Wed, 7 Jan 2009 09:04:26 -0000, "~BD~" <BoaterDave@hotmail.co.uk>

> wrote:

><span style="color:green">

>>"HijackThis just does not show enough information to allow swift and

>>focused removal of modern malware."

>>

>>That statement was found languishing here:-

>>http://forum.aumha.org/viewtopic.php?f=39&...b3c0db7a323dd9b

>>

>>I've kept a copy in case that post disappears!

>>

>>Thanks for any comment.</span>

>

> I have not read the article you linked to, but the statement as quoted

> is of course true. This doesn't mean that HJT is useless, though.

> Depends on what you're looking for.

>

> Anyway, when modern malware is allowed to run with administrative

> privileges, above statement is true for any checking tool as well as

> for removal tools.</span>

 

As I half-expected the detail mentioned regarding Aumha has now gone.

 

However, I've located an item showing that I raised this matter

previously .............. note the date!

 

Dave

 

 

 

----- Original Message -----

From: BoaterDave

Newsgroups: annexcafe.general.user2user

Sent: Wednesday, March 15, 2006 7:36 AM

Subject: HiJackThis - Infallible?

 

 

Winston - hello.

 

I'd very much like to get just one thing absolutely (that's not meant to

be another pun style_emoticons/) straight.

As I've said elsewhere, I am NOT a trained or competent software

engineer. You MAY well be

and I've already been told that "Peter" is - I would expect there to be

others here too.

 

Are you certain that it is impossible for malware to remain undetected

by a HiJackThis scan?

In other words, you know that it is foolproof - totally?

 

If you are, there must be a sound, technical, explanation for your

reasoning. Perhaps I would not

understand such an explanation, but I am willing to try. Please share

your superior knowledge with me.

 

In case of doubt, this is not a wind-up - it is a totally serious

request - I'd like to Know why it cannot fail.

 

TIA

 

Dave

 

 

"...winston" <merlin@#druid9.com> wrote in message

news:5kGEqgwRGHA.3972@GAMERA.annex.com...<span style="color:blue">

> Absolutely...

>

> The prime minister also said...

> "Never hold discussions with the monkey when the organ grinder is in

> the

> room"

>

> ...winston

>

> "BoaterDave" <BoaterDave@nospam.invalid> wrote in message

> news:3t7$O1nRGHA.2884@GAMERA.annex.com...

>

> "Left of field"? Certainly - but are you (and your colleagues)

> absolutely sure that I'm wrong?

>

> </span>

Posted

See below for another bit of history!

 

"Root Kit" <b__nice@hotmail.com> wrote in message

news:tes8m4pts7coqni1vse8pcd5h7uh6o6put@4ax.com...<span style="color:blue">

> On Wed, 7 Jan 2009 09:04:26 -0000, "~BD~" <BoaterDave@hotmail.co.uk>

> wrote:

><span style="color:green">

>>"HijackThis just does not show enough information to allow swift and

>>focused removal of modern malware."

>>

>>That statement was found languishing here:-

>>http://forum.aumha.org/viewtopic.php?f=39&...b3c0db7a323dd9b

>>

>>I've kept a copy in case that post disappears!

>>

>>Thanks for any comment.</span>

>

> I have not read the article you linked to, but the statement as quoted

> is of course true. This doesn't mean that HJT is useless, though.

> Depends on what you're looking for.

>

> Anyway, when modern malware is allowed to run with administrative

> privileges, above statement is true for any checking tool as well as

> for removal tools.</span>

 

Note the date, please!

 

----- Original Message -----

From: BoaterDave

Newsgroups: annexcafe.general.user2user

Sent: Wednesday, March 15, 2006 3:50 PM

Subject: Re: HiJackThis - Infallible?

 

 

Pierre - Thanks for that - I actually believe you! Something to do with

the greater consciousness of mankind that I believe in (even though your

English is far too good for any real Frenchman!) style_emoticons/)

 

Please take a look at the TomCoyote forum site I mentioned when I first

came here - dare you click on the link?

http://forums.tomcoyote.org/index.php?show...=0&gopid=261724

 

If you have a view, please let me know!

 

Dave

"Pierre Szwarc" <none@ofyour.biz> wrote in message

news:Ssk5quASGHA.1392@GAMERA.annex.com...

Dave, HijackThis is state of the art in startup software detection.

The only malwares that can defeat it are so-called rootkits, which can

be detected by System Internals' Rootkit Revealer

(http://www.sysinternals.com/Utilities/RootkitRevealer.html)

--

Pierre Szwarc

Paris, France

All original contents of this message are Copyright © 2002-2005 by

Pierre Szwarc and may not be reproduced outside of the Annex Café news

server without the author's explicit written permission. So there!

------------------------------------------------

If hot air rises, why isn't D.C. in orbit around Venus?

------------------------------------------------

Guest Larry Thomas
Posted

Show where you have written permission to post this.

 

"~BD~" <BoaterDave@hotmail.co.uk> wrote in message

news:eezPY$OdJHA.1860@TK2MSFTNGP04.phx.gbl...

--

Pierre Szwarc

Paris, France

All original contents of this message are Copyright © 2002-2005 by

Pierre Szwarc and may not be reproduced outside of the Annex Café news

server without the author's explicit written permission. So there!

------------------------------------------------

Guest Peter Foldes
Posted

> Pierre Szwarc<span style="color:blue">

> Paris, France

>All original contents of this message are Copyright © 2002-2005 by

>Pierre Szwarc and may not be reproduced outside of the Annex Café news

>server without the author's explicit written permission. So there!</span>

------------------------------------------------

 

 

Larry

 

The person above has already seen it just a few hrs ago . And let me tell you that

he is not a very happy camper

 

--

Peter

 

Please Reply to Newsgroup for the benefit of others

Requests for assistance by email can not and will not be acknowledged.

 

"Larry Thomas" <l_thom@(remove)interpl.co.uk> wrote in message

news:2pOdnXoLCpAoK_bUnZ2dnUVZ_rPinZ2d@trueband.net...<span style="color:blue">

> Show where you have written permission to post this.

>

> "~BD~" <BoaterDave@hotmail.co.uk> wrote in message

> news:eezPY$OdJHA.1860@TK2MSFTNGP04.phx.gbl...

> --

> Pierre Szwarc

> Paris, France

> All original contents of this message are Copyright © 2002-2005 by

> Pierre Szwarc and may not be reproduced outside of the Annex Café news

> server without the author's explicit written permission. So there!

> ------------------------------------------------

>

> </span>

Posted

"~BD~" <BoaterDave@hotmail.co.uk> wrote in message

news:O8hVpbKcJHA.1184@TK2MSFTNGP05.phx.gbl...<span style="color:blue">

> "HijackThis just does not show enough information to allow swift and

> focused removal of modern malware."

>

> That statement was found languishing here:-

> http://forum.aumha.org/viewtopic.php?f=39&...b3c0db7a323dd9b

>

> I've kept a copy in case that post disappears!

>

> Thanks for any comment.

>

> Dave

></span>

 

Quote:

 

"This Forum is not for questions or anything other then testing to see

if a system is capable of posting to the forums. Any other posts will be

considered misuse of the Test Forum"

http://forum.aumha.org/viewtopic.php?f=39&...ae11899b75f1781

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.


×
×
  • Create New...