HJTS Reference Data

This page preserves the reference signature lists originally compiled for HijackThis Scanalyser (HJTS) by Angoid, a tool widely used by this community's helpers to identify malware signatures in diagnostic logs (HijackThis, DDS, and OTL output).

The interactive lookup tool itself is not reproduced here — only the underlying static reference data, kept for historical and research value. We attempted to identify a current contact for Angoid and were unable to locate one; the community members originally associated with this tool are no longer active here. If you are Angoid, or represent their interests, and would like this content modified or removed, please contact us and we'll act on it promptly.

The files

• cwsdomains.txt — domains associated with CoolWebSearch and related browser-hijacker variants.
• dpflist.txt — reference entries for Downloaded Program Files (ActiveX) CLSIDs, marked legitimate or malicious.
• mlolist.txt — known-legitimate Windows startup/process entries, used to rule out false positives.
• o18etal.txt — reference entries for O18 protocol/namespace filter hijacks, with malware identifications.