Spoof Call and Spoof SMS set any caller ◆ Cheap KYC Verifications & Openups ◆ Anvilpoint CyberOps - Hacker for Hire ◆ Traffic service & campaign optimization ◆
Home Upgrade Search Memberlist Extras Hacker Tools Award Goals Help Wiki Contact
Hack Forums Hacks, Exploits, and Various Discussions Blackhat • Red Team • Offensive Security Keyloggers › [BHCPU] Malware Analysis/Removal Resources

New Reply 

[BHCPU] Malware Analysis/Removal Resources
-Hyperion
-Hyperion Offline
Windows/Mac Malware Specialist
***
HF Ub3r
Posts:
3,945
Threads:
190
Credibility:
000
Popularity:
4
βytes:
β 0
Game XP:
0
Jun 1, 2014 12:26 PM (This post was last modified: Dec 21, 2015 04:38 PM by -Hyperion.)
[Image: 2xNRisW.png]
Hey guys it's -Hyperion ✌

This is a toolkit I put together for analyzing and removing malware.
I will give a brief description of each tool and a link to the developers page. There is also a set of bookmarks of useful online services. A few do the same thing and are just a personal preference.
This toolkit will be updated as time goes on and suggestions will be taken.
It is recommended that you download these and put them on a USB checking for updates at least once a month.

WARNING SOME OF THESE TOOL MAY HARM YOUR COMPUTER WITH IMPROPER USE E.G COMBOFIX/OTL DO NOT RUN THESE OUTSIDE OF YOUR VIRTUAL BOX

Analysis
  • Autoruns- Shows what programs run during boot and login Here
  • BlueScreenView- Used to view BSOD messages Here
  • Comodo Kill Switch- Lets you identify and monitor processes Here
  • CrowdInspect- Scans active programs for malware Here
  • Moo0 File Monitor- Displays file changes in real time Here
  • ollydbg- Reverse engineering program Here
  • PMD- Process Memory Dumper for applications Here
  • Process Hacker- More advanced system monitor Here
  • Procmon- Advanced logging and monitoring Here
  • RegShot- Lets your compare 2 snapshots of a registry Here
  • Wireshark- Network analyzer Here
  • Fakenet- Allows you to full malware into thinking it is not in a VM and is on a network.
  • REMnux- A Linux distribution made specially for analyzing malware and decompiling it.
Removal
  • Adwcleaner- Removes adware, toolbars and hijackers Here
  • Combofix- A very dangerous malware removal tool Here
  • Eset Online Scanner- An excellent online virus scanner Here
  • HxD- A very fast hex editor Here
  • Junkware Removal Tool- removes common adware, toolbars, and PuPs Here
  • Malwarebytes-An excellent Anti-Malware and PuP remover Here
  • OTL- Advanced system diagnostics as dangerous as Combofix Here
  • tdsskiller- anti root-kit utility by Kaspersky Here
  • RKill- terminates known malware processes so you can run your programs Here
  • RogueKiller- Removes ZeroAccess, rogue anti-spyware programs, and Ransomwares Here

This library was last updated 11-29-2014 4:30pm
[Image: T2TtNNn.png]
desynk
desynk Offline
Security Engineer
***
HF Ub3r
Posts:
520
Threads:
4
Credibility:
000
Popularity:
51
βytes:
β 25
Game XP:
11
Jun 1, 2014 12:40 PM
Looks good but I would also suggest adding autoruns.
Roger Waters
Roger Waters Away
See You Starside.
Posts:
9,968
Threads:
47
DO NOT DEAL WITH THIS MEMBER
βytes:
β 0
Game XP:
0
Jun 1, 2014 02:32 PM
Nice tool kit, although I already have most of these programs on my flash drive, lol.
Aura
Aura Offline
[g0d@HF:]
******
HF Ub3r
Posts:
33,920
Threads:
533
Credibility:
000
Popularity:
655
βytes:
β 568.2
Game XP:
11
Jun 1, 2014 04:34 PM
Why is my name still being used ? 🤣
I'm a nobody now.
Fiat justitia ruat cælum

My era of providing technical support and malware removal on HackForums is over, so you can stop PM'ing me about it. Sorry.
NarwhalTusks
NarwhalTusks Offline
[bin@HF:]
*
Registered
Posts:
978
Threads:
77
Credibility:
000
Popularity:
0
βytes:
β 0
Game XP:
0
Jun 1, 2014 04:40 PM
(Jun 1, 2014 04:34 PM)Aura Wrote:  Why is my name still being used ? 🤣
I'm a nobody now.

"I'm a nobody now." says the guy that has helped me with 2 computers in the past month and helped tens of hundreds of people with theirs. 🤣 Aura, you're great man. No where near nobody.
Jagster™
Jagster™ Offline
UCF Knight
***
HF Ub3r
Posts:
3,727
Threads:
92
Credibility:
000
Popularity:
0
βytes:
β 0
Game XP:
0
Jun 1, 2014 04:40 PM
(Jun 1, 2014 04:34 PM)Aura Wrote:  Why is my name still being used ? 🤣
I'm a nobody now.

Where? I do not see it at all in this thread 🤫
[Image: M7tJcZL.gif]
Roger Waters
Roger Waters Away
See You Starside.
Posts:
9,968
Threads:
47
DO NOT DEAL WITH THIS MEMBER
βytes:
β 0
Game XP:
0
Jun 1, 2014 04:42 PM
(Jun 1, 2014 04:34 PM)Aura Wrote:  Why is my name still being used ? 🤣
I'm a nobody now.

Aura, are you drunk right now? You aren't a nobody.
Aura
Aura Offline
[g0d@HF:]
******
HF Ub3r
Posts:
33,920
Threads:
533
Credibility:
000
Popularity:
655
βytes:
β 568.2
Game XP:
11
Jun 1, 2014 04:49 PM
(Jun 1, 2014 04:40 PM)Jagster™ Wrote:  Where? I do not see it at all in this thread 🤫

Hint : Look at one of the spoilers.

(Jun 1, 2014 04:42 PM)Roger Waters Wrote:  Aura, are you drunk right now? You aren't a nobody.

Well as of this summer I'll become one as I'll be too busy with work and GTG training.

ALSO NICE TUTORIAL HYP. GLAD TO SEE IT WON'T BE DELETED 😎
Fiat justitia ruat cælum

My era of providing technical support and malware removal on HackForums is over, so you can stop PM'ing me about it. Sorry.
Roger Waters
Roger Waters Away
See You Starside.
Posts:
9,968
Threads:
47
DO NOT DEAL WITH THIS MEMBER
βytes:
β 0
Game XP:
0
Jun 1, 2014 04:50 PM
(Jun 1, 2014 04:49 PM)Aura Wrote:  Well as of this summer I'll become one as I'll be too busy with work and GTG training.

I better take the name of Aura Jr. before it is taken then. 😎
Aura
Aura Offline
[g0d@HF:]
******
HF Ub3r
Posts:
33,920
Threads:
533
Credibility:
000
Popularity:
655
βytes:
β 568.2
Game XP:
11
Jun 1, 2014 04:52 PM
(Jun 1, 2014 04:50 PM)Roger Waters Wrote:  I better take the name of Aura Jr. before it is taken then. 😎

Like Phyber and Phyber Jr and Phyber Jr Jr ? 🤣
Fiat justitia ruat cælum

My era of providing technical support and malware removal on HackForums is over, so you can stop PM'ing me about it. Sorry.
Jagster™
Jagster™ Offline
UCF Knight
***
HF Ub3r
Posts:
3,727
Threads:
92
Credibility:
000
Popularity:
0
βytes:
β 0
Game XP:
0
Jun 1, 2014 05:08 PM
rofl password is Aura lol

GG fanboy much OP! <3
[Image: M7tJcZL.gif]
rxki
rxki Offline
Sentiment.
***
HF Ub3r
Posts:
1,742
Threads:
215
Credibility:
000
Popularity:
56
βytes:
β 8
Game XP:
0
Jun 1, 2014 05:49 PM
The file was removed - any idea on why it was removed?
btc: 35Hs72WMh15H2wnRA8niF3BYBZsiawEtSp
-Hyperion
-Hyperion Offline
Windows/Mac Malware Specialist
***
HF Ub3r
Posts:
3,945
Threads:
190
Credibility:
000
Popularity:
4
βytes:
β 0
Game XP:
0
Jun 1, 2014 05:57 PM
(Jun 1, 2014 05:49 PM)rxki Wrote:  The file was removed - any idea on why it was removed?

Try now just uploaded a new version with 5 new tools. 👍
[Image: T2TtNNn.png]
Null Byte
Guest
 
Jun 1, 2014 06:20 PM
Really legit looking toolkit. Good work Hype.
Cyber Saint
Guest
 
Jun 1, 2014 06:36 PM
Might take a look later but the tools that you listed look useful and I don't already have some that I might require, so thank you.
Next Oldest | Next Newest
New Reply 


Possibly Related Threads...
Thread / Author Replies Views Last Post
by InteNtJan 28, 2020 01:39 PM 2 120 Jan 28, 2020 01:39 PM
Last Post: rasio
by OMJenkeJun 16, 2016 06:12 PM 1 225 Jun 16, 2016 06:12 PM
Last Post: EliteTM
by DannToddAug 17, 2015 05:33 PM 13 539 Aug 17, 2015 05:33 PM
Last Post: Machiavellian101