Do not use Combofix on your own!!

[flashh4]

no thanks

 

[Jacee]

There are Anti-malware classrooms that school and train individuals to become "qualified" malware techs.

An individual must complete the full course and graduate with the voting of all classroom teachers, in the school attended. Just to note... being in a classroom for a while, but never graduating, does not really make someone "trained". What school did you graduate from?

Helpful suggestions are always welcome, tho'.

 

[ICIT2LOL]

Hum I must say up front Flash4 I was taken aback by your bold statement in your post #95 as I tend to think by and large such statements are to me just plain bragging being an old cynic that I am.

But it seems that you have expanded a bit on what you first stated and I hope by your actions and input that the forum does indeed have another string to it's bow.

Myself am NO expert in anything much apart from taking hardware and machines to pieces and fixing them by sometimes - unorthodox methods.

Having said that - welcome

 

[Layback Bear]

I learned a long time ago. Never toot your own horn. Do the good work and others will toot all the horns you will ever want to hear.

 

[Britton30]

Flash4 just go to System Security - Windows 7 Help Forums and post in threads that need help. Best way to show one's expertise.

 

[ICIT2LOL]

I learned a long time ago. Never toot your own horn. Do the good work and others will toot all the horns you will ever want to hear.

Yep so true Bear and over the years it gets paid back in kind in Karma - well I have always found that. Me I'd sooner a quiet word of thanks in the ear than fanfares

 

[COMPUTIAC]

What happened to flashh4, all his post are gone.

 

[ICIT2LOL]

What happened to flashh4, all his post are gone.

Looks like they have all been edited mate for whatever reason. Perhaps the welcome wasn't what was expected and there again it could have been a wind up. Anyway if he / she was so offended then it didn't take much and if it was a wind up then.....

 

[tom982]

flashh4,

I have the experience/training in analyzing logs from Combofix, OTL logs, DDS logs, HJT logs..

Ah!! So you are trained in this also. Some people are, and that is good to learn.

Jacee, tom982, myself, and I'm sure there are others, attended and graduated from one school or another.

Lots of work and analysis involved, though. Some of them even test you.

What school(s) did you get trained at, and graduate from?

They've still got me for a few more weeks yet!

 

[cottonball]

tom982,

You are well on your way, and you will graduate.

Are you attending Malware Removal University?

Do you need to take a test at the end of your training?

 

[Jacee]

tom982 is at G2G cottonball .. doing quite well, as I see.

 

[cottonball]

He will be working here pretty soon.

 

[ICIT2LOL]

So could someone tell me what this training is please? Does it for example require one to be involved in the IT business previously because I have spent the last 40+ years in nursing in both clinical and managerial positions.

Does it require an IQ of 200 or more because I just feel that most of the members in here are too cluey for words!

Does it necessarily require one to know how to be able to write software for example??

I am just curious.

 

[tom982]

tom982,

You are well on your way, and you will graduate.

Are you attending Malware Removal University?

Do you need to take a test at the end of your training?

As Jacee said, I'm over at G2G. Nope, there aren't any final exams that I'm aware of; instead, we are assessed throughout the training process.

tom982 is at G2G cottonball .. doing quite well, as I see.

Thanks Jacee!

So could someone tell me what this training is please? Does it for example require one to be involved in the IT business previously because I have spent the last 40+ years in nursing in both clinical and managerial positions.

Does it require an IQ of 200 or more because I just feel that most of the members in here are too cluey for words!

Does it necessarily require one to know how to be able to write software for example??

I am just curious.

Hi John,

A few forums run malware removal training programs where they teach anyone who is willing to identify and remove malware. There is a list of schools on the UNITE (Unified Network of Instructors and Trained Eliminators) website:

UNITE - Unified Network of Instructors and Trained Eliminators

The training process varies from school to school, but it essentially involves very experienced malware removal analysts and experts kindly volunteering to pass on their skills to another generation. I can talk you through the process at G2G which seems to be fairly standard now but things may vary at other schools. Here's a list of the UNITE teachers:

UNITE - Unified Network of Instructors and Trained Eliminators

You might recognise #2 on that list! ScHwErV is retired now so technically Jacee should be #1.

Anyone with a little bit of background knowledge of computers can apply to enrol in the malware removal school. The application process is a few simple questions just to confirm you know a thing or two, they are far from brain squeezing - if I remember correctly, the question on my application page was "Briefly describe what the registry is", you get the picture.

Once enrolled, you are given access to what G2G calls the UnderClass library. The training is split into four tiers - UnderClass, UpperClass, Live Logs, Check My Fix (CMF), but I'll come to that in a bit. The UnderClass library doesn't contain anything particularly juicy but it has some good background on older spyware infections and specific removal tools. The fun starts with the UnderClass Practice Logs (PLs). In UnderClass, there are 6 PLs to complete each with various challenges to teach you the skills you need to become an analyst. Here's a brief overview of what the UnderClass PLs taught:

PL1: Familiarising yourself with the forum rules.
PL2: Canned Speeches (post templates) - how to make them and store them.
PL3: A few HijackThis (HJT) log lines to analyse. Please note that HJT is no longer used however the log format (with registry items labelled O1-O38) is still very widely used.
PL4: More HJT log lines
PL5: More HJT and a few other diagnostic tools
PL6: A whole OTL log to work through

OTL is the tool of choice of G2G as the developer, OldTimer, is based at G2G. Other forums may use different tools, like BleepingComputer (BC) has more of a focus on DDS (sUBs) and Combofix (sUBs).

After you have finished UnderClass, you are promoted to UpperClass where you get access to so, so much information. They give you access to the proper tools as well, like the full Combofix tutorial.

In UpperClass, you have another set of 6 PLs to complete but these are a lot more difficult (it took me almost 12 months to complete this!). These put more of a focus on specific infections, rootkits and the like. They also introduce the usage of Combofix.

During UpperClass, you also have to complete 8 registry exercises which train you everything you need to know about the registry - I think they've missed out a few fun things though!

When you complete UpperClass you then move onto the Live Logs where an instructor badly infects either a test rig or a virtual machine with a lovely concoction of malware. You treat this as a live thread and talk the instructor through the removal process - they are told to play dumb

After the LLs comes Check My Fix (this is where I am at the moment). Here you can take on live threads, but under the supervision of an instructor who has to approve your posts prior to you posting them. I'm not sure how many threads you have to do before you graduate, they seem to err on the side of quality not quantity, but judging by past students, it seems to be less than 10; I'm on 3.

Then you're freeeeee

If you've got any more questions please feel free to fire away and I'll do my best to explain for you.

Tom

 

[cottonball]

Very well explained, tom982.

I was going to tell ICit2lol, in plain terms, that the schools are a place where you apply, and if accepted, you are taken to a spaceship.

Once there, your brain is modified to an "altered" state, and you are turned into an Android, rigorously trained to search for, and kill infections.

Then, you are dropped off the spaceship, and you seek forums that are Android friendly.
Your mission is to kill, kill, and kill viruses, rootkits, and such.
However, forum Administrators do not know you are an Android, because you act like a human. :roflmao:



All kidding aside, the schools are not an easy ride.

 

[Britton30]

tom982 is at G2G cottonball .. doing quite well, as I see.

That is Geeks to Go (G2G), if anyone else was wondering.

 

[ICIT2LOL]

Thanks Tom sounds a bit out of my league I am afraid and I don't like spaceships - I get spacesick you see

But I will take a look and see at those sites you referenced.

John

 

[tom982]

tom982 is at G2G cottonball .. doing quite well, as I see.

That is Geeks to Go (G2G), if anyone else was wondering.

Cheers Gary. I tried my best to define the acronyms (UNITE, PL, LL, CMF etc.) on their first use so I could use them again without people getting confused but it looks like I missed the key one

Thanks Tom sounds a bit out of my league I am afraid and I don't like spaceships - I get spacesick you see

But I will take a look and see at those sites you referenced.

John

lol, spacesick is a new one! No worries, it's quite a large commitment - larger than I first anticipated actually.

 

[ICIT2LOL]

Spacesick yep mate it is all that turbulence caused by big things flying by and the constant adjusting the craft to get out of the way of other spacecraft that are flying around up there - UFO's if you are not used to acronyms that means Undiscovered Flaming Obelisks

 

[macgig]

ive heard of combofix but never tried. almost scared to now. lol

is it just for malware removal and registry cleaning or does it do other things too? I have apps that do those things well... so why would a person need combofix?

where is the best (aka safest) place to download it? I have to take a peek at least. lol