Hack Forums
[BHCPU] Malware Analysis/Removal Resources - Printable Version

+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Blackhat • Red Team • Offensive Security (https://hackforums.net/forumdisplay.php?fid=447)
+---- Forum: Keyloggers (https://hackforums.net/forumdisplay.php?fid=113)
+---- Thread: [BHCPU] Malware Analysis/Removal Resources (/showthread.php?tid=4261360)

Pages: Pages 1 2

[BHCPU] Malware Analysis/Removal Resources - -Hyperion - Jun 1, 2014

[Image: 2xNRisW.png]

Hey guys it's -Hyperion ✌

This is a toolkit I put together for analyzing and removing malware.
I will give a brief description of each tool and a link to the developers page. There is also a set of bookmarks of useful online services. A few do the same thing and are just a personal preference.
This toolkit will be updated as time goes on and suggestions will be taken.
It is recommended that you download these and put them on a USB checking for updates at least once a month.

WARNING SOME OF THESE TOOL MAY HARM YOUR COMPUTER WITH IMPROPER USE E.G COMBOFIX/OTL DO NOT RUN THESE OUTSIDE OF YOUR VIRTUAL BOX

Analysis
  • Autoruns- Shows what programs run during boot and login Here

  • BlueScreenView- Used to view BSOD messages Here

  • Comodo Kill Switch- Lets you identify and monitor processes Here

  • CrowdInspect- Scans active programs for malware Here

  • Moo0 File Monitor- Displays file changes in real time Here

  • ollydbg- Reverse engineering program Here

  • PMD- Process Memory Dumper for applications Here

  • Process Hacker- More advanced system monitor Here

  • Procmon- Advanced logging and monitoring Here

  • RegShot- Lets your compare 2 snapshots of a registry Here

  • Wireshark- Network analyzer Here

  • Fakenet- Allows you to full malware into thinking it is not in a VM and is on a network.

  • REMnux- A Linux distribution made specially for analyzing malware and decompiling it.


Removal
  • Adwcleaner- Removes adware, toolbars and hijackers Here

  • Combofix- A very dangerous malware removal tool Here

  • Eset Online Scanner- An excellent online virus scanner Here

  • HxD- A very fast hex editor Here

  • Junkware Removal Tool- removes common adware, toolbars, and PuPs Here

  • Malwarebytes-An excellent Anti-Malware and PuP remover Here

  • OTL- Advanced system diagnostics as dangerous as Combofix Here

  • tdsskiller- anti root-kit utility by Kaspersky Here

  • RKill- terminates known malware processes so you can run your programs Here

  • RogueKiller- Removes ZeroAccess, rogue anti-spyware programs, and Ransomwares Here



This library was last updated 11-29-2014 4:30pm

* - desynk - Jun 1, 2014

Looks good but I would also suggest adding autoruns.

* - Roger Waters - Jun 1, 2014

Nice tool kit, although I already have most of these programs on my flash drive, lol.

* - Aura - Jun 1, 2014

Why is my name still being used ? 🤣
I'm a nobody now.

* - NarwhalTusks - Jun 1, 2014

(Jun 1, 2014 04:34 PM)Aurа Wrote:  Why is my name still being used ? 🤣
I'm a nobody now.

"I'm a nobody now." says the guy that has helped me with 2 computers in the past month and helped tens of hundreds of people with theirs. 🤣 Aura, you're great man. No where near nobody.

* - Jagster™ - Jun 1, 2014

(Jun 1, 2014 04:34 PM)Aurа Wrote:  Why is my name still being used ? 🤣
I'm a nobody now.

Where? I do not see it at all in this thread 🤫

* - Roger Waters - Jun 1, 2014

(Jun 1, 2014 04:34 PM)Aurа Wrote:  Why is my name still being used ? 🤣
I'm a nobody now.

Aura, are you drunk right now? You aren't a nobody.

* - Aura - Jun 1, 2014

(Jun 1, 2014 04:40 PM)Jagster™ Wrote:  Where? I do not see it at all in this thread 🤫

Hint : Look at one of the spoilers.

(Jun 1, 2014 04:42 PM)Roger Waters Wrote:  Aura, are you drunk right now? You aren't a nobody.

Well as of this summer I'll become one as I'll be too busy with work and GTG training.

ALSO NICE TUTORIAL HYP. GLAD TO SEE IT WON'T BE DELETED 😎

* - Roger Waters - Jun 1, 2014

(Jun 1, 2014 04:49 PM)Aurа Wrote:  Well as of this summer I'll become one as I'll be too busy with work and GTG training.

I better take the name of Aura Jr. before it is taken then. 😎

* - Aura - Jun 1, 2014

(Jun 1, 2014 04:50 PM)Roger Waters Wrote:  I better take the name of Aura Jr. before it is taken then. 😎

Like Phyber and Phyber Jr and Phyber Jr Jr ? 🤣

* - Jagster™ - Jun 1, 2014

rofl password is Aura lol

GG fanboy much OP! <3

* - rxki - Jun 1, 2014

The file was removed - any idea on why it was removed?

* - -Hyperion - Jun 1, 2014

(Jun 1, 2014 05:49 PM)Lоki Wrote:  The file was removed - any idea on why it was removed?

Try now just uploaded a new version with 5 new tools. 👍

* - Null Byte - Jun 1, 2014

Really legit looking toolkit. Good work Hype.

* - Cyber Saint - Jun 1, 2014

Might take a look later but the tools that you listed look useful and I don't already have some that I might require, so thank you.