Question The question about how to properly research and check programs for possible malware

[Tomoko]

Hello guys!
Today I want to learn how correct check and research possible malware without possible damage.
Here some questions to I want have a answer:
1: what program need use for this(like process hacker, simple unlocker and etc)
2: what a best VM for this?
3: how I must work with malware and what programs need use for what situations?
Thanks in advance, I will be happy with every answer.

 

[lokamoka820]

Do you ask as an average home user that want to check programs you install and use? Or you ask as a malware tester who want to make tests on real malware?

 

[Tomoko]

Do you ask as an average home user that want to check programs you install and use? Or you ask as a malware tester who want to make tests on real malware?

mainly for own use and possibly for general testing

 

[RoboMan]

Hello guys!
Today I want to learn how correct check and research possible malware without possible damage.
Here some questions to I want have a answer:
1: what program need use for this(like process hacker, simple unlocker and etc)
2: what a best VM for this?
3: how I must work with malware and what programs need use for what situations?
Thanks in advance, I will be happy with every answer.

If you're looking for extensive malware research and analysis, I suggest you take an online course. It will be far more helpful than what we can post here. You should start with the basics (system arquitecture and process structure).

 

[Tomoko]

If you're looking for extensive malware research and analysis, I suggest you take an online course. It will be far more helpful than what we can post here.

Okay I understand

 

[lokamoka820]

In general, for an average home user you need the following to be safe:

• Keep your system and software up to date.
• Have a good secure browser with a good ad blocker, a security extension.
• Download executables from their official websites and if you want you can check them on virustotal to be more sure they are safe.
• Check your startup locations with a startup manager to see if there are something added you don't recognize or leftover from previously removed software.
• Check your system with second opinion scanner in case your main security software miss something.

 

[harlan4096]

Here You are a bunch of resources about testing:

Serious Discussion - The Necessity of Simulating the Full Malware Infection Chain for Security Suite Testing

The escalating sophistication of malicious software presents a persistent and evolving threat to individuals and organizations alike. Security suites play a crucial role in defending against these threats, necessitating rigorous and accurate testing methodologies to ascertain their...

malwaretips.com

Some tips:

* VMWare WorkStation or VistualBox. Keep updated clean snapshots inside the virtual machine.

* Tools: install SysInternals Suite from Microsoft Store to use: TCPView, Process Explorer and AutoRuns (enable Virusotal column checking in these 2 last tools).

* As a Second Opinion Scanners: KVRT, NPE, EmsiSoft E.K., Eset Online Scanner, MalwareBytes Free.

* Configure Your Windows folder options to display system files, hidden files and file extensions.

* Install Adobe Reader, MsOffice, Java Runtime.

* Malware usually goes to these main folders (among many others):

C:\ProgramData\
C:\Users\
C:\Users\Public Access\
C:\Users\<Your account>\
C:\Users\<Your account>\AppData\Local\
C:\Users\<Your account>\AppData\Roaming\

 

[Tomoko]

In general, for an average home user you need the following to be safe:

• Keep your system and software up to date.
• Have a good secure browser with a good ad blocker, a security extension.
• Download executables from their official websites and if you want you can check them on virustotal to be more sure they are safe.
• Check your startup locations with a startup manager to see if there are something added you don't recognize or leftover from previously removed software.
• Check your system with second opinion scanner in case your main security software miss something.

Thanks

 

[Tomoko]

Here You are a bunch of resources about testing:

Serious Discussion - The Necessity of Simulating the Full Malware Infection Chain for Security Suite Testing

The escalating sophistication of malicious software presents a persistent and evolving threat to individuals and organizations alike. Security suites play a crucial role in defending against these threats, necessitating rigorous and accurate testing methodologies to ascertain their...

malwaretips.com

Some tips:

* VMWare WorkStation or VistualBox. Keep updated clean snapshots inside the virtual machine.

* Tools: install SysInternals Suite from Microsoft Store to use: TCPView, Process Explorer and AutoRuns (enable Virusotal column checking in these 2 last tools).

* As a Second Opinion Scanners: KVRT, NPE, EmsiSoft E.K., Eset Online Scanner, MalwareBytes Free.

* Configure Your Windows folder options to display system files, hidden files and file extensions.

* Install Adobe Reader, MsOffice, Java Runtime.

* Malware usually goes to these main folders (among many others):

Thanks too