+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Whitehat • Blue Team • Defensive Security (https://hackforums.net/forumdisplay.php?fid=448)
+---- Forum: Malware, Rat, and Virus Removal (https://hackforums.net/forumdisplay.php?fid=110)
+---- Thread: Things allowed to be requested and not requested (/showthread.php?tid=907656)
Things allowed to be requested and not requested - Agent Shark - Dec 18, 2010
Hello Reader,
I didn't find anything about this so I am making a little guide to what you can request and what you cannot request.
Table of Contents
- Introduction (What this thread is about)
- Tools allowed to be requested
- Tools NOT allowed to be requested
Introduction
I made this thread to describe the tools allowed to be used in the White Hat Section and the tools not allowed. If you are an undergraduate or up on the HJT Team, you can request any type of log/tool to be used.As for undergraduates,everything requested is analyzed by an expert. So for those of you who are NOT HJT members like myself, then I suggest reading this so you do not mess up or feel like a fool in the process of assisting a user.
Tools Allowed To Be Requested
In this next couple of sentences, I will describe and list some tools that are allowed for regular members to use and request others to download. So lets being.
- Malwarebytes Anti-Malware
- SUPERAntiSpyware
- ESET Online Scanner
- RKill
Note: If there are more tools please tell me via pm with a description of the tool.
Malwarebytes Anti-Malware
Spoiler (Click to View)
SUPERAntiSpyware
SUPERAntiSpyware is a program that specializes in the removal of spyware. It's database is constantly updated and contains tons of viruses/adware. When using this tool note that it looks mostly for Spyware and not as much for other viruses.
Features:
Spoiler (Click to View)
Taken From Here: http://superantispyware.com/
ESET Online Scanner
What is ESET?
ESET is an online scanner that allows you to scan your computer without doing an install and provides very high results. In that matter, it also locates suspicious files and so forth.
RKill.
Rkill is a program sued to kill malicious process. It doesn't delete programs or restore anything, it just terminates processes, and it is quite effective against rogues if they are being associated with running processes.
Tools Not Allowed to be Requested From Members
In this next group, these tools are NOT allowed to be requested. (No Download Links Will Be Provided)
ComboFix
- A tool used for very difficult malware removal and without expert assistance can damage your computer permanently. This tool is not recommended unless the HJT Team requests it for you. Otherwise if you see someone post it report it and ignore it.
System Restore/Format: Although this is not a tool, I see this NUMEROUS times and it's only a LAST resort to any log or infection. When reformatting you are loosing ALL files and everything valuable to you. When performing a System Restore, this brings your computer back to an earlier stage but this could bring the virus along to.
GMER RootKit Scan
- This is a scanner to detect Rootkits in the users computer. When using this, there are specific things needed to be checked for the right procedure. Using this on your own or requesting members to use it is very bad and can lead to severe computer problems and wasting of time.
OTL/HJT Logs
- These tools are used to identify running processes, services, toolbars , and so forth located in the users computer. Specialized people understand this and that is why Regular users cannot tell others to download this for the safety of the infected and the community. If people used this commonly, then accidents could occur and required services would be disabled/deleted.
Note: If there are more please tell me and give me a description.
Credits:
Peter Chao - Read over and gave me some pointers to place inside the thread
Epidemic - For giving info on RKill
Now that's all to my list if you have more feel free to pm them to me and I will give you credit for it towards the end of my topic.
Thank you for reading and I do hope this clears issues upon tools.
Regards,
Disruption
Please rate and comment to keep this thread alive!!!
* - Moralitas - Dec 18, 2010
This is a great thread, mostly new helpers ask to download things they shouldn't be asking. I've seen Paradoxum tell members several times to not instruct someone on using Combofix, but when do people listen right?
I would also like to point out that if a HJT member that isn't an undergraduate yet asks for these logs, the post should be reported. There's a very strict policy for this, if a HJT member is found doing logs before they are eligible too, they will be expelled from the program.
* - Agent Shark - Dec 18, 2010
(Dec 18, 2010 06:43 PM)Peter Chao Wrote: This is a great thread, mostly new helpers ask to download things they shouldn't be asking. I've seen Paradoxum tell members several times to not instruct someone on using Combofix, but when do people listen right?
I would also like to point out that if a HJT member that isn't an undergraduate yet asks for these log, the post should be reported as well. There's a very strict policy for this, if a HJT member is found doing logs before they are eligible too, they will be expelled from the program.
Thank you for your feedback and I am glad I put your input into my thread.
* - Xerotic - Dec 18, 2010
Thank you very much. Now I know if someone suggests other than recommended in the thread, to not use it, and get another opinion.
* - Xch4ng3 - Dec 18, 2010
Well done. Maybe people will learn not to recommend something like ComboxFix. Last thing we need is a bunch of unusable machines.
* - Agent Shark - Dec 18, 2010
Thank you all for your positive feedback and everyone please continue to post and rate if you could.
-Disruption
* - Minnesota Nice - Dec 18, 2010
This is great, I really like the thread.
I laughed at combo fix. :D
I sort of want to join the HJT team but I don't have time for it.
* - Agent Shark - Dec 18, 2010
(Dec 18, 2010 06:58 PM)Minnesota Nice Wrote: This is great, I really like the thread.
I laughed at combo fix. :D
I sort of want to join the HJT team but I don't have time for it.
Thank you for your feedback upon my thread.
I do hope some day I get in :)
* - Minnesota Nice - Dec 18, 2010
(Dec 18, 2010 07:01 PM)Disruption Wrote: Thank you for your feedback upon my thread.
I do hope some day I get in :)
It's quite a challenge! I bet you could get in!
* - Agent Shark - Dec 18, 2010
(Dec 18, 2010 07:02 PM)Minnesota Nice Wrote: It's quite a challenge! I bet you could get in!I have been trying :)
I applied 4mths Ago so I hope my app gets looked at soon :)
* - Mermaid - Dec 18, 2010
Good thread, I personally like Malwarebytes the best and use that the most
yet combofix comes in handy as a last resort malware removal program 👍
* - Agent Shark - Dec 18, 2010
(Dec 18, 2010 07:19 PM)Tyler8746 Wrote: Good thread, I personally like Malwarebytes the best and use that the most
yet combofix comes in handy as a last resort malware removal program 👍
Thank you for your feedback :)
* - Epidemic - Dec 18, 2010
I once ran Combofix on my old computer the next day it wouldn't turn on. Bad thing is I didn't have a virus. I was just testing it out. Wtf >.<
Good thing not to request using combofix if you don't know what your doing.
Its sucks though because after it didn't turn on, I continued to stomp it and slam it agasnt my bathtub hoping it would turn on but all it did was catch on fire.
But this is a great thread. I usually request a lot more than ESET,Malwarebytes and SuperAntispyware, its just those are the main ones I use. :p
* - DestinyOnly - Dec 18, 2010
(Dec 18, 2010 09:57 PM)Epidemic Wrote: I once ran Combofix on my old computer the next day it wouldn't turn on. Bad thing is I didn't have a virus. I was just testing it out. Wtf >.<
Good thing not to request using combofix if you don't know what your doing.
Its sucks though because after it didn't turn on, I continued to stomp it and slam it agasnt my bathtub hoping it would turn on but all it did was catch on fire.
But this is a great thread. I usually request a lot more than ESET,Malwarebytes and SuperAntispyware, its just those are the main ones I use. :p
That's strange. Every time I've tried the stomping and slamming approach it's fixed my computer.
* - MouseDesign - Dec 19, 2010
Good job, this should be a sticky imo.