Trend Micro acquires HijackThis antispyware tool

**Kalim** · 03-16-2007, 02:51 AM

Well you all know the tool thats used by all to troubleshoot spyware, developed by Merijn. Its now been acquired by Trend Micro, who already have a new version of it named " HijackThis 2.0 Beta" out there. The same happened with CWShredder by Merijn, which was finally bought over by Trend Micro too.

There's also a plugin, " TrendProtect Beta" which works just like McAfee SiteAdvisor for your browser, now available by Trend Micro.
Whereas McAfee provided a single rating for an entire site, TrendProtect analyzes individual pages separately. One example of its functioning is through the use of CallingID to look at the domain's owner and history to get a reputation score.
TrendProtect pre-scans links in search results from Google, MSN, and Yahoo. It flags each link as green (safe), red (dangerous), yellow (iffy) or grey (unknown). Hovering the mouse over a TrendProtect icon gets more information, as well as a link to launch TrendMicro's free HouseCall malware scanner/cleaner. It looks for how long the domain has been registered and how often it changes hosting sites, among other things. In addition to checking the URL against multiple databases, TrendProtect actually analyzes the content, like in social networking sites, for dangerous links and to catch any exploits or malicious code.

Both products are free to download, but be reminded they are yet in beta testing.

The full news report and the links to download are available here:
http://articles.techrepublic.com.com...ml?tag=nl.e019

From Trend Micro themselves in more depth:
http://www.trendmicro.com/en/about/n...6/pr031407.htm

tetonbob · 03-16-2007, 09:43 AM

To our members and visitors:

We've been aware of this for some time, and have held off reporting on this for the very reason it is in Beta.

We do NOT want logs from the Beta version to begin appearing in the HijackThis Log Help forum.

For those of you who may need assistance with malware removal, go here first and follow the procedures.

Geekgirl · 04-16-2007, 04:11 AM

It appears that Trend Micro has bought HijackThis.

http://www.trendsecure.com/portal/en...hijackthis.php

It's still free and they have added quite a bit of documentation.

**Glaswegian** · 04-16-2007, 02:16 PM

It's still a BETA version - users should continue to start with our 5 steps before posting a log.

http://www.techsupportforum.com/secu...sting-log.html

~~Girderman~~ · 04-19-2007, 08:34 AM

I don't think this is a good thing.

The "free" services offered by TrendMicro seem niggardly (meaning puny), and I wonder what elements of HJT they might cripple in order to create more profit.

**Kalim** · 04-19-2007, 04:32 PM

AFA I've seen, they've added to it rather than the converse yet.

The main visible feature being the "Analyze This" which uploads the log file and takes you to TrendMicro online analysis.

Its got a 1MB larger footprint, so something's been added.

tetonbob · 04-19-2007, 08:13 PM

Well, many of us in the malware removal community find the AnalyzeThis button one of the current problems.

Reason being, the AnalyzeThis button is an internal data collection tool only, specifically for aggregating data right now, but some users will see it as an analysis of their machine, and possibly delete things that are on only 0.8% of machines, or some such silliness. This is a potential disaster, and should be removed in the opinion of many malware removal specialists.

Quote:

This table below compares your HijackThis log file entries with others analyzed by Trend Micro. The column "per 10,000 PCs" indicates, on average, how many times this entry in your log was found on other PCs. Additional information will be provided as more HijackThis log files are added to the AnalyzeThis database.

This is one of the ongoing topics of discussion we're having with members of the TM HJT development team in private forums, and one reason why we (and other forums) won't use v 2.0 Beta for analysis work at this time.

It has potential, but there are things which need to be addressed still, which the TM HJT development team has been open to.

To our members:

Do NOT post logs here from v2.0 Beta. We'll just ask you to go the the 5 Step thread, as already indicated.

**Kalim** · 04-19-2007, 09:31 PM

I see, thanks.

Haven't had time to play around with it yet. Only started it up twice to compare both.

tetonbob: sometimes I get the feeling you're Kevin...

tetonbob · 04-19-2007, 10:01 PM

Quote:

tetonbob: sometimes I get the feeling you're Kevin...

**Kalim** · 04-20-2007, 12:18 AM

Oh, just some fella over at KRC.

tetonbob · 04-20-2007, 08:36 AM

LMAO....if only I were that fast. I thought that's who you might be referring to. Thanks for the compliment.

**Kalim** · 04-21-2007, 10:32 AM

My pleasure tetonbob. Kevin's a good guy. You have a lot of online similarities.

I just infected my PC and ran both of those HJT applications in Safe Mode; HJT 1.99.0.1 and TM HJT 2.0.0 (BETA). Here's some feedback.

The similarities existed in detection of everything including the new BHO, the toolbar and a startup entry.

The differences were appreciated as I had been tackling this in the older version. The fact that *some* of the 04 entries and services are missed.

In comparison to the approved HJT version 1.99.0.1:

The BETA version picked up 4 more 04 Run entries under the category of HKUS, that are actually existent.
The BETA version also picked out 2 022 Shared Task Scheduler entries.
The BETA version missed out 2 018 Protocol entries.

Speed was 3.99 seconds compared to 5.02 seconds for the BETA.

03-16-2007, 02:51 AM	#1 (permalink)
Kalim Roaming To Help Join Date: Nov 2006 Posts: 5,642 OS: Many	Trend Micro acquires HijackThis antispyware tool Well you all know the tool thats used by all to troubleshoot spyware, developed by Merijn. Its now been acquired by Trend Micro, who already have a new version of it named " HijackThis 2.0 Beta" out there. The same happened with CWShredder by Merijn, which was finally bought over by Trend Micro too. There's also a plugin, " TrendProtect Beta" which works just like McAfee SiteAdvisor for your browser, now available by Trend Micro. Whereas McAfee provided a single rating for an entire site, TrendProtect analyzes individual pages separately. One example of its functioning is through the use of CallingID to look at the domain's owner and history to get a reputation score. TrendProtect pre-scans links in search results from Google, MSN, and Yahoo. It flags each link as green (safe), red (dangerous), yellow (iffy) or grey (unknown). Hovering the mouse over a TrendProtect icon gets more information, as well as a link to launch TrendMicro's free HouseCall malware scanner/cleaner. It looks for how long the domain has been registered and how often it changes hosting sites, among other things. In addition to checking the URL against multiple databases, TrendProtect actually analyzes the content, like in social networking sites, for dangerous links and to catch any exploits or malicious code. Both products are free to download, but be reminded they are yet in beta testing. The full news report and the links to download are available here: http://articles.techrepublic.com.com...ml?tag=nl.e019 From Trend Micro themselves in more depth: http://www.trendmicro.com/en/about/n...6/pr031407.htm

03-16-2007, 09:43 AM	#2 (permalink)
tetonbob Manager, Security Center, TSF Academy; Analyst, Security Team Join Date: Jan 2005 Location: Transylvania County, North Carolina, USA Posts: 35,553 OS: 2000 Pro; XP Pro; XP Home	To our members and visitors: We've been aware of this for some time, and have held off reporting on this for the very reason it is in Beta. We do NOT want logs from the Beta version to begin appearing in the HijackThis Log Help forum. For those of you who may need assistance with malware removal, go here first and follow the procedures. __________________ Practice Safe Surfing PC Safety and Security--What Do I Need? Because what you don't know, CAN hurt you. Proud Member of ASAP since 2005 Proud Member of UNITE since 2006 Microsoft MVP - Consumer Security 2009

04-16-2007, 04:11 AM	#3 (permalink)
Geekgirl Assistant Manager, Microsoft Support Join Date: Jan 2005 Location: Six-burgh, Pennsylvania Posts: 14,164 OS: XP Home SP3/XP Pro SP3/Vista Ultimate SP2/Windows 7 Professional	Hjt It appears that Trend Micro has bought HijackThis. http://www.trendsecure.com/portal/en...hijackthis.php It's still free and they have added quite a bit of documentation. __________________ Compare NOD32 to your current antivirus and anti-spyware solution, HERE How to back up and restore the registry in Windows XP and Windows Vista Or Windows 7 How to back up and restore the registry in Windows 98/ ME / NT 4.0 / 2000 I DO NOT ACCEPT EMAILS AND WILL NOT REPLY TO THEM !!!!! TSF DOES NOT SUPPORT ASSISTANCE THROUGH EMAIL OR PRIVATE MESSAGES, PLEASE KEEP ALL QUESTIONS IN THE OPEN FORUM *The Pittsburgh Steelers - 6 X Superbowl Champions !!!!!!!* *The Pittsburgh Penguins - 2009 Stanley Cup Champions !!!!!!!*

04-16-2007, 02:16 PM	#4 (permalink)
Glaswegian Moderator/ Rangemaster TSF Academy; Analyst, Security Team; Oor Wullie; TSF Surgeon and Resident Comic Join Date: Sep 2005 Location: Glasgow Posts: 25,408 OS: Win XP Pro SP3 / Win 7 Pro My System Blog Entries: 10	Re: Trend Micro acquires HijackThis antispyware tool It's still a BETA version - users should continue to start with our 5 steps before posting a log. http://www.techsupportforum.com/secu...sting-log.html __________________ Iain - Defender of the Haggis and all things Scottish. I don't help by PM - post in the Forums. PC Safety & Security::PC running a bit slow?::Donate::Photographers Corner

04-19-2007, 08:34 AM	#5 (permalink)
~~Girderman~~ Troubled Join Date: Oct 2006 Posts: 2,096 OS: XP Pro	Re: Trend Micro acquires HijackThis antispyware tool I don't think this is a good thing. The "free" services offered by TrendMicro seem niggardly (meaning puny), and I wonder what elements of HJT they might cripple in order to create more profit.

04-19-2007, 04:32 PM	#6 (permalink)
Kalim Roaming To Help Join Date: Nov 2006 Posts: 5,642 OS: Many	AFA I've seen, they've added to it rather than the converse yet. The main visible feature being the "Analyze This" which uploads the log file and takes you to TrendMicro online analysis. Its got a 1MB larger footprint, so something's been added.

04-19-2007, 09:31 PM	#8 (permalink)
Kalim Roaming To Help Join Date: Nov 2006 Posts: 5,642 OS: Many	Re: Trend Micro acquires HijackThis antispyware tool I see, thanks. Haven't had time to play around with it yet. Only started it up twice to compare both. tetonbob: sometimes I get the feeling you're Kevin...

04-20-2007, 12:18 AM	#10 (permalink)
Kalim Roaming To Help Join Date: Nov 2006 Posts: 5,642 OS: Many	Oh, just some fella over at KRC.

04-20-2007, 08:36 AM	#11 (permalink)
tetonbob Manager, Security Center, TSF Academy; Analyst, Security Team Join Date: Jan 2005 Location: Transylvania County, North Carolina, USA Posts: 35,553 OS: 2000 Pro; XP Pro; XP Home	Re: Trend Micro acquires HijackThis antispyware tool LMAO....if only I were that fast. I thought that's who you might be referring to. Thanks for the compliment. __________________ Practice Safe Surfing PC Safety and Security--What Do I Need? Because what you don't know, CAN hurt you. Proud Member of ASAP since 2005 Proud Member of UNITE since 2006 Microsoft MVP - Consumer Security 2009

04-21-2007, 10:32 AM	#12 (permalink)
Kalim Roaming To Help Join Date: Nov 2006 Posts: 5,642 OS: Many	My pleasure tetonbob. Kevin's a good guy. You have a lot of online similarities. I just infected my PC and ran both of those HJT applications in Safe Mode; HJT 1.99.0.1 and TM HJT 2.0.0 (BETA). Here's some feedback. The similarities existed in detection of everything including the new BHO, the toolbar and a startup entry. The differences were appreciated as I had been tackling this in the older version. The fact that some of the 04 entries and services are missed. In comparison to the approved HJT version 1.99.0.1: The BETA version picked up 4 more 04 Run entries under the category of HKUS, that are actually existent. The BETA version also picked out 2 022 Shared Task Scheduler entries. The BETA version missed out 2 018 Protocol entries. Speed was 3.99 seconds compared to 5.02 seconds for the BETA.