7:11 / 1:26:38

Malware Hunting with the Sysinternals Tools

630,459 views
2.2K
91
Share
Save
TECHED
Published on Aug 30, 2012

Slides from this presentation are available online at:

http://northamerica.msteched.com/topi...

From Microsoft TechEd North America 2012:

This session provides an overview of several Sysinternals tools, including Process Monitor,
Process Explorer, and Autoruns, focusing on the features useful for malware analysis and
removal. These utilities enable deep inspection and control of processes, file system and registry
activity, and autostart execution points. Mark Russinovich demonstrates their malware-hunting
capabilities by presenting several real-world cases that used the tools to identify and clean
malware, and concludes by performing a live analysis of a Stuxnet infection's system impact.

Category
Science & Technology

=========================================================================

153 Comments

therealtweeter1
3 years ago
Bing is malware .

Trainer_Poke
3 years ago
+therealtweeter1 It is called PUP
3
MibMoot
MibMoot
2 years ago
+Trainer_Poke heh
PC Gamer
PC Gamer
1 year ago
thats a puppy derpy doo !
Sandy Grungerson
Sandy Grungerson
1 year ago
not as malware as google pointing to politico, WaPo and CNN exclusively
2
Jay Smith
Jay Smith
11 months ago
Trainer_Poke
Nick Miller
Nick Miller
4 months ago
O_O
Julie Christensen
Julie Christensen
1 month ago
What? Really?
Halojen
Halojen
1 year ago (edited)
Despite the rapid improvement of malware, this is still completely relevant 5 years later.
11
Alex & Erika
Alex & Erika
2 years ago
When do we get to the part that a normal person can understand?
30
Supernoobandpro
Supernoobandpro
2 years ago
You're on the wrong side of YouTube then my friend.
42
Alex & Erika
Alex & Erika
2 years ago
+Supernoobandpro I'm definitely on the wrong side!!!
4
AwesomeBlackDude
AwesomeBlackDude
2 years ago
HA!
1
James Ryan
James Ryan
8 months ago
you dont need to be here.
2
Lie-Various
Lie-Various
8 months ago
You're going to need to start reading a lot of material then. Maybe do a couple computer
courses.
1
DickPiano XD
DickPiano XD
7 months ago
It never comes my friend :(
T3MPL3GU4RD14N
T3MPL3GU4RD14N
6 months ago
You are assuming normal people understand things.
1
Billy Goat
Billy Goat
5 months ago
Go to a medical conference and say the same thing. Some things are way outside the "normal"
person's understanding.
1
Steve K
Steve K
5 months ago
If you (or anyone else who relates to your sentiment) want to fix a malware problem, and this
method isn't for you, then try the free ComboFix (www . bleepingcomputer . com / download /
combofix /). It does all the work for you. Just make sure that System Restore is enabled, and
then run the latest ComboFix, and wait a few minutes (or several minutes).

In the meantime, don't be alarmed by all the flashing lights, DOS-like screens, etc. Also, I don't
think you should be alarmed by the warnings it includes. (I'd just be cautious about using it if you
have any 3rd-party low-level programs running, like Rollback Rx, a System Restore replacement.
Otherwise, I think it's safe.)

I've used it with success a few times over the years, and my gf's mother used it to clean out a
HUGE list of malware & whatnot, and apparently, it got all of it, and left her w/ a nicely-working
Windows computer after a good 30 mins of automated detecting and cleaning.

* Note: If you do want to learn more about Windows, to the point that you can follow and use
this tutorial, then please don't let the buttheads here discourage you. Get what you can from
the tutorial, write down things you've not heard of, or don't understand, then google them.
Wikipedia can be very helpful, though sometimes too technical. The website HowToGeek .com
might be your best bet for helpful articles, without any misinformation or myths.
2
Billy Goat
Billy Goat
5 months ago
Steve K ... As one of the "buttheads", I can say they drew first blood by marginalizing a
profession.

If nothing else they should leave the discussion knowing most "geeks" have a certain razor sharp
wit and no filter. Those with thin skins should keep a safe distance.

Take your computer to Best Buy if it has issues.

sent4dc
sent4dc
2 years ago
1:02:46 Very nice StuxNet demo. Thanks, Mark!
2
Mohammed Al -Mudhafar
Mohammed Al -Mudhafar
4 years ago
Great information, very good presented
8
Paul Harper
Paul Harper
3 years ago
Great talk! Could the Microsoft marketing drones put the slides somewhere? The link no longer
works. It currently links to the Ignite conference.
11
Daniel Pedersen
Daniel Pedersen
1 year ago
Didn't know about Autoruns and Process Monitor until now. This is really helpful and i'd love to
see more like this! :)
5
lunarrob
lunarrob
2 years ago
is there a video that tells how to use this program for Dummy's
4
P Foster
P Foster
4 years ago
I always end up watching these when I'm looking for a quick answer to something!! I have
learned so much from Mark. Love sysinternals! I learn something new about them every time.
Thanks Mark!
6
Mike Ehrmantraut
Mike Ehrmantraut
1 year ago
This is a great talk.
3
dunxy
dunxy
2 years ago (edited)
Top presentation! Im only angry that i just found it now after i fell asleep on autoplay and woke
up a few hours to this,now im playing with process explorer (sleep is over rated anyway)and
cursing the time i could have saved had i known about it in the past! Yes there has been ways to
do these things, just more convoluted and painful.
1
WolfeFanged
WolfeFanged
2 years ago
Great video. It wasn't boring at all and the tips and tricks were pretty awesome.
I got kind of peeved with the lady at the end though; she could have handled the situation
better.
3
‫محمد يوسف اسلم‬
‫محمد يوسف اسلم‬
1 year ago
Can you please update the link of the slide presentation, this is a very useful and helpful
tutorial. Keep it up team!! :)
2
PC Gamer
PC Gamer
1 year ago
if he says proceCEES once more...
2
warriorprince101010
warriorprince101010
3 years ago
The reality is these anti malware and anti virus systems are nice but you are never 100% sure
they have removed the unwanted programs.

Formatting a Hard Drive and reinstalling your OS remains the only sensible way clean your PC.

Removing viruses/malware takes longer and there is no guarantee they can remove it.
3
Otto Laakkonen
Otto Laakkonen
3 years ago
http://money.cnn.com/2015/02/17/technology/security/malware-nsa/
Sev Meow
Sev Meow
3 years ago
+warriorprince101010 No, you can still push malware and rootkits into the BIOS.
1
Uragan5
Uragan5
2 years ago
+Sev Meow Impossible and very ignorant statement, virus and malware are stored and executed
on the HDD when Windows boots, not on the BIOS since the BIOS has no HDD activity.
Uragan5
Uragan5
2 years ago
+warriorprince101010 A good system restore also eliminates any virus or malware.
warriorprince101010
warriorprince101010
2 years ago
@ks22
Yes, I do this also.
EnduranceT
EnduranceT
1 year ago
warriorprince, they aren't just for removing malware on client PCs but also simply for us to
analyze malware and write malware/antivirus definitions and such as well.
Raiden TheKat
Raiden TheKat
1 year ago
ks22 http://www.tomshardware.com/news/bios-virus-rootkit-security-backdoor,7400.html
osearth esp
osearth esp
4 months ago
Equation group (NSA) can potentially remain even after a thousand low devil formats ;]
therealnightwriter
therealnightwriter
1 year ago
Best thing ever is an old product called Online Armor, it just blocks everything unless you allow
it.
1
hfasoihdi1ha4
hfasoihdi1ha4
3 years ago
1:16:08 LOL Kaspersky still the best AV on the market... It's funny how he doesn't say the name,
so people can still buy the MS Essentials crap.
3
WTE Media
WTE Media
3 years ago
@hfasoihdi1ha4 you don't have to buy MSE and Dr. Web is another Russian antivirus company
Trainer_Poke
Trainer_Poke
3 years ago
+hfasoihdi1ha4 Kaspersky is going downhill since
Uragan5
Uragan5
2 years ago
+hfasoihdi1ha4 you really dont need a heavy AV program, there are free and light alternatives or
even manual malware search and removal, as explained on this video.
1
geezupp
geezupp
6 months ago
Kaspersky is shit
Katie Gordon
Katie Gordon
4 years ago
reads url that says a suspicious url thats not suspicious
(Jk)

1
신영환
신영환
3 years ago
This. video came up on auto play for youtube.
1
Brendan Buckley
Brendan Buckley
2 years ago
+신영환 I just wanted to listen to tats. ;-;
Madalena Freitas
Madalena Freitas
3 years ago
traduzir en portugues muito bom
1
alice PESSOA
alice PESSOA
5 months ago
Desculpa a pergunta." Uso whatsApp apenas no celular, ocorre que após 3 hs comunicando-me
com um grupo. Postando fotos de familiares e viagens. Fecho esse contato e abro minha conta
gmail, no computador. Levo um susto!!! Na página do meu email, ela apresenta-se com todos os
diálogos deste grupo. Desde a sua criação. Como Não Bastasse a Surpresa, direcionada a uma
pessoa, com quem Eu estava efetuando uma compra. Isto deixou-me e Estou Assustada.
Porque não tenho acesso ao Whats pelo computador. depois histórico antigo ali escancarado,
os dados das pessoas e seus números de celular. Mais conteúdos familiares
particulares..........Tudo isso Direcionado a um Estranho E O TERRÍVEL NÃO SEI COMO ISSO
PODE TER OCORRIDO ..... Estou sem saber a quem devo procurar .... preocupada com a
Segurança dessas pessoas.....Pois É Claro que ALGUEM esta por trás disso tudo.......Boas
intenções não tem.........
POR FAVOR TERIAM COMO AUXILIAR-ME POR GENTILEZA
Julie Christensen
Julie Christensen
1 month ago
This is awesome!!!!!! Thank you.
Shane Paul
Shane Paul
3 months ago
Ew windows 8!!!
Gaurav Kaintura
Gaurav Kaintura
3 weeks ago
thanks , its was an techno. entertaining session.
luis bonerges portobanco salgado
luis bonerges portobanco salgado
5 months ago
oh my gad and mean ordenetig osd whih windows.es 10and sommenthing analilyty pc
excusseeme introduntion analysismy pc is ordeny compuction pliss great ,let``s meed soon
español necesito corregir el sistema operativo de la computadora losprograma que necesito
programa que hagan falta ylos sitio web en mi portátil ayuda
Ghulam Ali
Ghulam Ali
2 months ago
Wow really worked thx for uploading
sweety black
sweety black
6 months ago
sysinternals has been compromised,, they know when you are watching them and they (the
crooks ) minimize and stand in wait until you are not at your guard post at your computer,,, they
are better at snooping than we (me,I ) are ...You need a program that has its own dedicated
monitor and cannot be monitored itself that is a TSR program that runs connecting data streams
of what program is using what resources and when these new breed of hackers have the ability
to run unchecked through almost any system and they do it all the time,,,our machines are their
play grounds
shiva shankar
shiva shankar
4 months ago
Thanks for uploading useful video.we are able to used dedicated server from www.datasoft.ws
and learned configuration by using these video
Bonsaverh
Bonsaverh
4 months ago
Is there a more recent video on Sysinternals Tools? thx
osearth esp
osearth esp
4 months ago
Mark's a godd, he's my dawgg!
Christopher Sewell
Christopher Sewell
4 months ago
my phone has no sim card
Signage Man
Signage Man
7 months ago (edited)
how do you add time line can't see how you just click without explaining how to add
skybitscom
skybitscom
6 months ago
In Windows 10 many fields with the "Explore" button have "Access Denied" in them. Why is
this?
FryingFlyingBeeStudio
FryingFlyingBeeStudio
7 months ago
Great demos.. Really enjoyed the methods you showed.
Infiltrator2003
Infiltrator2003
2 years ago
stuxnet = government
pablo jaldo
pablo jaldo
7 months ago
puff so much
valentis13
valentis13
5 months ago (edited)
on 1:12:37...i swear i can hear here an F5 in any differences that Brock can do xD
Freakin Kat
Freakin Kat
6 months ago
Lol, that’s because I felt this was very old news... I feel like a nerd now. �
Yu Tu
Yu Tu
4 months ago
This shit is ONLY for those person that has 10gigs of PORNO and Illegally downloaded MOVIES

For the average person just reinstall windows (30 minutes give or take) Run Defender, create
restore point and DONE.
You Welcome.
Pentti Kantanen
Pentti Kantanen
1 month ago
I usually don't take advice from apparent idiots...
Ronan Connolly
Ronan Connolly
1 year ago
Does anybody have the slides?
Andy Patterson
Andy Patterson
7 months ago
Jus do it don't talk so much. Just do it and don't waste my time.
Ann Deery
Ann Deery
1 year ago
I guess this was live when this first done on
Anthony Hernandez
Anthony Hernandez
11 months ago
Subtitles in spanish please
Tornazod
Tornazod
9 months ago
41:58 Damn opera is back to attack.
JK FRT
JK FRT
9 months ago (edited)
Wish we had such a nice tool suite on GNU/Linux. :(
Butcher Bee
Butcher Bee
1 year ago
Oh your Mark. :)
Thank you for making that program and any others you have a hand in re-working/working on.

I hope there can be something exactly like this for a registry in windows; Yes?
I think that would really cover another great whole on windows OS.
Jeff Martin
Jeff Martin
4 years ago
and i thought when i downloaded this software it might be spyware!! LOL!!
FortintePlayz
FortintePlayz
2 years ago
Sysinternals Antivirus XD
Cedrick E. Moore
Cedrick E. Moore
2 years ago
Anti virus software sucks!
4
marc van den broeck
marc van den broeck
8 months ago
This is disk2vhd , so if you like believe an OS lying , while sysinternals has the best deep inside
analyzer , but if you look for IT targetted for "normal person" , why comment on sysprep? Since a
"normall person " get's protected by for us a deep inspect we TRUST , as they are Elite , or do ya
know the X86 architecture and the skills coding machine level? ,
Michael Chernik
Michael Chernik
4 years ago
Since google bought youtube it makes searching for solutions in video rather than reading....I
wish they used Popeye or Bugs Bunny to teach,,,,:0)
gabriel torres
gabriel torres
1 year ago
subtitules....
‫אורי אגמון‬
‫אורי אגמון‬
9 months ago
Thanks! I've really enjoyed listening!
nyrtzi
nyrtzi
2 years ago (edited)
So a buddy system is what it is called. I once cleaned a friend's infected machine manually using
only the standard Windows tools and that's exactly what I had to deal with. With the annoying
reboot straight away if buddy dies feature. I wish I had known about this video. The info would
have made things so much more easier.
# fudeiq
# fudeiq
1 year ago
Windows 8 btw
Eq Dior
Eq Dior
2 years ago
love the vid. The most useful portion for me was starting at around 33 mins
Iamthe0c3an kooldude_377
Iamthe0c3an kooldude_377
2 years ago
So where can I get this magical piece of software?
UiMVbJHjZepHhMFVyvjl hcCABJpadpDxCYqXUHnq
UiMVbJHjZepHhMFVyvjl hcCABJpadpDxCYqXUHnq
3 years ago
1 bit of protection worth Geopbytes of cleanup
Antonio Luaces
Antonio Luaces
2 years ago
Gracias compañero funciona perfecto
James 7176
James 7176
2 years ago
Well really Anti-malware programs are redundant as soon as they are released, if you check the
detected sigs you can easily bypass it with a spoof, so if you're upto date on your infected
systems you can quite easily push an update to your malware if the hosts are connected, before
they get the push from their anti-virus, therefore keep people infected before the sig dictionary
is even updated, even then you're sig might not even get detected.
ROv Ibot
ROv Ibot
11 months ago
Great to see this cleaning windows.
Bivens PC
Bivens PC
9 months ago
Great video. And I use process explorer all the time. It has so many uses.
Gail Wilcox
Gail Wilcox
2 years ago
free fun I used to do this........
Gisle Vanem
Gisle Vanem
2 years ago
Mark was telling about "Process Explorer" and it's feature to detect "leaking handles". Well, even
PEplorer leaks handles sometimes. Especially if you have a program with a .pdb-file and you'll try
to re-link your program; it sometimes won't work since "Process Explorer" is holding the handle
to that .pdb-file. You'll have to exit and restart PExplorer. Even in the latest version. But it's a
super program anyway.
ZloTip
ZloTip
2 years ago
+Gisle Vanem No program is perfect. Some of the better antiviruses have a high false positives.
This is not even an antivirus and we just infer from file behavior that it can be a potential virus
defob
defob
2 years ago
Pocess Explorer
Monkey Pink
Monkey Pink
3 years ago
this video came up on auto play for youtube and i just left it to hear in the back ground while i
worked on a project,and im glad i did, very helpful !
Jim & Tan Clark
Jim & Tan Clark
2 years ago
Hey are you doing today?
Carl Tuckerson
Carl Tuckerson
8 months ago
I've had SysInternals almost since it first was released back in the Windows XP days. Really
enjoyed this presentation and all the tips and tricks.
AmazeWebs Social
AmazeWebs Social
2 years ago
I can't get sigcheck to work... just keeps saying 'sigcheck' is not recognized as an... etc
zmbdog
zmbdog
2 years ago
Did you move the sigcheck file into the System32 folder? CMD can't launch it from other folders.
The Killbreath Family
The Killbreath Family
2 years ago
It can but you must update the %PATH% folder first.
H Powell
H Powell
3 years ago
I tried to run this program w\ cmd prompt but I got and message that stated 'sigcheck is not
recognized as an internal or external command or have I missed a step or two?
Buck Swope
Buck Swope
3 years ago
+H Powell these are 3rd party commands that don't come with the system. you have to install
sysinternal tools.
Lorelei Lambert
Lorelei Lambert
4 years ago
this would have saved me a lot of trouble. If I knew it was available.

1
Lorelei Lambert
Lorelei Lambert
4 years ago
Malwarebytes
Joe Darvish
Joe Darvish
2 years ago
Sales pitch.
Runtime Error
Runtime Error
2 years ago
+Joe Darvish Sales pitch for what? You know the software in this video is from Microsoft's
Sysinternals (which is free standard stuff from 1996) don't you? This is a useful informational
video.
5
The Doctor
The Doctor
3 years ago
When you say you're out of school what you really meant is you never leave school...
terry seale
terry seale
3 years ago
@Anonymous It is impossible for me to develop any respect for anyone who chooses the
imagery of a Catholic mass murder conspiracist, who would have killed all the Protestant
Parliamentarians in England, the entire Court of King James, and turned England into a province
of Spain under the rule of Papists and Jesuits. Guy Fawkes was the worst kind of traitor and his
defeat has been celebrated ever November 5th since 1605 with bonfires and his effigy burned
with glee. If you want to be associated with him, you are deranged.
The Doctor
The Doctor
3 years ago
Question what the fuck does this have to do with my comment please explain?
4
Anonymous Mystery
Anonymous Mystery
3 years ago
@The Doctor apparently you said something about this on another comment...
The Doctor
The Doctor
3 years ago
Might be a time loop then those crazy damn things. Now if you don't mind there is a Dalek trying
to take over the earth inside the empire state building and I gotta shove Hitler back in the closet.
Justin 3
Justin 3
2 years ago
Where is a good place to get virus,malware,etc samples?
yikes_kay
yikes_kay
2 years ago
gogle.com bonzi buddie, search up free toolbars, and free anti viruses
1
Alter Kater
Alter Kater
2 years ago
Russian porn pages
7
Joe Smith
Joe Smith
2 years ago
Bahaha!
B1N4RYGH0ST
B1N4RYGH0ST
1 year ago
Don't go near Bonzi Buddie
shadow run
shadow run
3 weeks ago
3 sec in stopped video. seminar..click bait!!!
Joe Smith
Joe Smith
1 year ago (edited)
Is there a power-shell or other script that can be run to combine all these checks into a report? If
not, I could write one and be famous!!! Of course, Mark would deserve most of the credit.
Mathew Phelps
Mathew Phelps
1 year ago
Kansa does exactly that. It's on Github.
DatBoiWhoNeedsUnderpants
DatBoiWhoNeedsUnderpants
1 year ago
#Malware
DatBoiWhoNeedsUnderpants
DatBoiWhoNeedsUnderpants
1 year ago
#BurgersfordaysxD
DatBoiWhoNeedsUnderpants
DatBoiWhoNeedsUnderpants
1 year ago
#MalwareInfectedAFreakinCamera_xD
John Mccauley
John Mccauley
2 years ago
how do I increase my resolition
AmirMemeZ_
AmirMemeZ_
2 years ago
lol
1
Robert Barth
Robert Barth
1 year ago
Drunkz HaNDz
Sam Remington
Sam Remington
4 years ago
to technical, this guy is running all over the place, talking to fast, 38 minutes haven't learned a
thing
Samuel Stow
Samuel Stow
4 years ago
You can replay this as many times as you want. You can pause and you can research the things he
is talking about...
12
Justine Virtue
Justine Virtue
4 years ago
Haha. I learned a lot. Remembering the details? This was great for me to get the big picture,
fascinating.
2
Garegin
Garegin
4 years ago
I respect Mark a lot and the guy obviously knows Windows OS design from inside and out , but I
don't understand the point of online cat and mouse games. Just hose the malware with an
offline scanner like defender offline (which is free, BTW) and then clean up the remainder of
registry boobytraps and whatnot.
For adware and browser highjacks but prefer adwclearer. If takes out lot of the manual work of
uninstalling toolbars and all kinds of junk
Michael Alt
Michael Alt
5 years ago
The link for the slides is dead. Anybody have a new location for these for reference?
moonoiuk
moonoiuk
5 years ago
What I would do for a brain swap of this guy. Thanks again Mark.
Кристиян Александров
Кристиян Александров
5 years ago
which books, his novels - zero-day, trojan horse or technical stuff?
Кристиян Александров
Кристиян Александров
5 years ago
win_key+t gets taskbar, win_key+x brings something which is wanna be start menu

Кристиян Александров
Кристиян Александров
5 years ago
Mark Russinovich made a great Video! Love it. Useful info, useful tools, and great job!
federico41ful
federico41ful
5 years ago
Thanks for video.
Jake Van Cleave
Jake Van Cleave
5 years ago
Okaaaay. I see we have a nut job among us. Also a racist. Keep dreaming bro.. lol.
Menino Indi
Menino Indi
5 years ago
I didn't know that. It looks simple....ipreciate it
donkrx
donkrx
5 years ago
Excellent video, thanks. Really liked the real-world examples too.

These are great tools and everyone should know how to use them.
flexairz
flexairz
5 years ago
LMAO when Mark asked how to get to the taskbar... Well, use W7 maybe?
Keith Garred
Keith Garred
5 years ago
BTW, I highly, HIGHLY recommend his books. If you are here watching this, you would most
certainly appreciate this kind of thriller. I did.

Keith Garred
Keith Garred
5 years ago
I've been in the technology industry for over 20 years but whenever I watch Mark's
presentations (and I've seen many in person) I feel retarded.

Up next
Autoplay
5:42
How-to: Use NETSTAT.EXE to detect spyware/malware
TechJunkie
569K views
15:26
How to Reset a Windows Password Through a Backdoor
Wesley David
4.5M views
1:20:18
Ten Deadly Sins of Administrators about Windows Security
TECHED
65K views
11:04
11 Cool Websites Everyone Should Know!
ThioJoe
941K views
37:05
How to Repair a DEAD Computer
CareyHolzman
951K views
1:03:56
Aalto Talk with Linus Torvalds [Full-length]
aaltouniversityace
1.2M views
15:33
Worth It S5 • E6
$6 Sandwich Vs. $180 Sandwich
BuzzFeedVideo
Recommended for you
New
19:56
New Tools from Microsoft for removing viruses and malware Part 1
Lowell Vanderpool
22K views
46:39
Don't Talk to the Police
Regent University School of Law
Recommended for you
2:49
Trace an IP Address To A Location
TheExpertSolutions
850K views
13:43
How easy is it to capture data on public free Wi-Fi? - Gary explains
Android Authority
1.6M views
25:09
Learning the Linux File System
Joe Collins
583K views
22:53
I've been hard on Microsoft ...was I wrong?
Bryan Lunduke
3.6K views
New
13:02
How To Log Into Windows 7 If You Forgot Your Password WITHOUT CD OR SOFTWARE!!
TipsNNTricks
567K views
40:46
Advanced NMap Techniques - Hak5 2415
Hak5
48K views
5:27
How to remove a computer virus / malware
The Computer Made Simple
3.2M views
18:21
Debugging an application using Sysinternals Procmon and Procexp
Scott Hanselman
32K views
10:38
How to trace a Trojan back to it's owner
JackkTutorials
155K views
8:36
We’re Close to a Universal Quantum Computer, Here’s Where We're At
Seeker
Recommended for you
2:29:05
Linux Tutorial for Beginners: Introduction to Linux Operating System
Guru99
206K views
8:10
MicroNugget: What are Tim's Favorite SysInternals Utilities?
CBT Nuggets
10K views
1:09:35
TCP/IP and Subnet Masking
Eli the Computer Guy
2.7M views
5:29
How To Identify Unknown Processes In Windows
wtntech
118K views
10:27
11 Chrome Settings You Should Change Now!
ThioJoe
1M views
15:18
Five Awesome Tools to perform Behavioural Analysis of Malware
Colin Hardy
19K views
1:42:32
SANS DFIR Webcast - APT Attacks Exposed: Network, Host, Memory, and Malware Analysis
SANS Digital Forensics and Incident Response
20K views
21:07
Malware Removal Tips and Tricks
Britec09
18K views
11:27
How to Setup an FTP Server in Windows 10 - AvoidErrors
AvoidErrors
351K views
36:34
How to find and remove virus from laptop registry manually. NEW
step @ a time
95K views
26:09
The Best All in One Windows Repair Tool
Britec09
114K views
23:37
SysInternals for Forensics
Rick Leinecker
2.3K views
21:11
Creating a Hidden Drive in VeraCrypt - Tutorial
Jim Parshall
8.4K views
36:05
How to Install & Configure printer, Network Printer
Rohit Sahu
98K views
17:36
Top 20 Windows 10 Tips and Tricks
Sele Training
68K views
15:00
How to remove a Trojan, Virus, Worm, or other Malware for FREE by Britec
Britec09
445K views
9:54
Recover Lost Data After Windows 10 Update
Britec09
3K views
New
8:32
Top 3 Best FREE Antivirus Softwares (2018-2019)
BenFromTheBay
1M views
17:21
Intruder Attack Types - Sniper vs Battering ram vs Pitchfork vs Cluster bomb
Hacks and Security - NEW channel
170 views
New
44:00
Removing Spyware and Malware from a Windows PC Using Spybot Search and Destroy
Eli the Computer Guy
246K views
49:06
Ochko123 - How the Feds Caught Russian Mega-Carder Roman Seleznev
Black Hat
226K views