Cowboy Rusty
Dec 18 2008, 04:44 AM
Can Hijack This detect Rootkits? Just curious.
Nebon
Dec 20 2008, 08:49 PM
Rootkits are generally hide themselves within drivers and files. Hijackthis does not have the ability to check if those processes have been hooked or had code injected into. Therefore I would think not, however Hijackthis may give clues as to some rootkits as they may run a new process that may be identifyable in Hijackthis.
For this reason most of the Hijackthis analysts use a program called GMER or another secondary program to help them detect rookits.