malware removal with sysinternals

[altrenda]

I'm working on upgrading my manual removal skills and I ran across this from the August 2011 Black Hat Conference,
Mark Russinovich's presentation on removing malware with Sysinternals tools.

http://download.sysinternals.com/Files/SysinternalsMalwareCleaning.pdf

Sorry if this had been posted before, but I looked and couldn't find it.

 

[MBF]

D/L'd and opened for a quick peek. Will read at a later date, but it sure looks like a nice presentation...thanks

 

[angelxdlv]

Informative, and a good read, thanks!

 

[RedFoxComp]

Informative, and a good read, thanks!

Very useful, thanks.

Anyone that charges for virus removal should know how to identify and remove a virus manually.

 

[MobileTechie]

Looks good but mostly a bit of an update from his old lecture. Doesn't really seem to address the new rootkit threats. Plenty of times I come across malware with no processes visible from PExp.

Most of the "future threats" he lists have come true already.

 

[sapphire_blue]

Thanks for sharing. All in all a pretty good read.

 

[Encrypted Existence]

Looks good but mostly a bit of an update from his old lecture.

I agree. The first few slides are identical to his "Advanced Malware Cleaning" presentation. Still a good read though.

 

[fRequEnCy]

Thanks for the share. Was a good read.