1 reply to this topic

[kittenfriedchick]

Hi All,

I am looking for  tools to check compromised computer post quarantine/malware removal.

 

Please share some downloadable detection tools which will help in diagnosing a compromised computer in a network.
 
The tool should be able to mark anomalies and future threats by showing compromised ports / backdoors / trojans placed by a malware / ransomware.
 
This will help in assuring me of a clean machine, after an attack is detected and harmful codes / scripts  are quarantined or cleaned by a conventional Antivirus like TrendMicro/McAfee etc.
 
This tool may / may not have a virus signature database link requring frequent updates and should be able to run from an external USB stick and not be agent based (standalone).
 

Edited by kittenfriedchick, 25 November 2014 - 04:32 PM.

[TheJoker]

Many of the tools we use don't automatically fix anything, they require training to interpret the logs and to know what actions to take. Other tools like Malwarebytes Anti-Malware will detect and clean items, but only what it's designed to detect, and it's not a replacement for a virus scanner. What's a compromised port? You can use a scanner like ShieldsUp to detect open ports, but whether that port should be open or not is up to the user. There are lots of tools, but there is no tool that detects everything, and much of what can be detected requires training to identify the threat.

 

Please see "The various helper groups here" at this link:
http://www.spywarein...er-groups-here/
Please join the team if you want to learn; we'd love to have you with us. You can sign up for Boot Camp at this thread:

The Boot Camp here, anti-malware training