Great video,I would like to add a small note. When uploading files to Virustotal they are made public meaning everyone can download them. So don't upload files that contain potentially sensitive information/credentials.
@@Hikari_Sakurai "By submitting data below, you are agreeing to our Terms of Service and Privacy Policy, and to the sharing of your Sample submission with the security community. Please do not submit any personal information; VirusTotal is not responsible for the contents of your submission. Learn more.". That's the first thing you read when entering the site, what else they can do?
Just registered at interzer. I have to say I am impressed by it's capabilites. This does give me a much better feeling when using community fixes to ancient games, that don't run on Windows 10 otherwise. I only wish they would offer the upload of bigger file sizes with the free version, even if one were only be able to upload one big file a month. The installers for some mods tend to be multiple gigabites in size.
@@Unknown_Genius you just have to find the right community, others will usually do scans and scan each file uploaded in their domain but one can never be too careful
Yeah somehow I just have a bad feeling about mod community even if it trustworthy there can be still bad guy among them right? I use bitdefender as a AV, right now I am safe but still have a bad feeling about mod in my PC anyway (I download mod from Nexus and steam community I always hate game dev that not fix bug because I have to download fixed patch from modder(which is stranger) instead😞)
@@Klara988 its possible yes, more likely wah ti think is to happen is say oen th emodders themselves is infected and dosent know and it speads to the file when its thir turn to work on it. althugh sitse like nexus mods seem to do a virus scan im not sure how good it is.
I remember becoming infected with Malware quite awhile back. Using some of these techniques I began eliminating certain files with a specific date. When my system failed to restart and the BIOS(?) gave me missing file names, I was luckily able to find, copy to 3.5"disk, and transfer to the affected system these missing files (which I had deleted). Eventually I was able to get my system running. I made a copy of all the files I wanted to save, and then reformatted the system and reinstalled Windows. WHEW! You live and learn . . . . .
A.K.A. What you should do if you waited for the tierlist to choose your AV. I really like this new content! Our ignorance of computer inner workings is the highest vulnerability so teaching us things like that is gold! thank you!
One of my best "antiviruses" is being very aware of my computer, most of the times I found viruses or rootkits just because my fans worked harder than I was used to.
By the time you notice that it's already too late. Be proactive and *prevent!* A good antivirus (NOT Windows Defender) safe(r) browsing practices, oh - and change all your passwords right now! Who knows if you've had a snooper or keyloggers (those don't consume much resources at all).
Yeah, and barely proper AdBlock, having people accidentally click on a miniscule x to close it but actually open up a page that might install something. Thankfully, Russian hackers are kind of occupied now, one less problem.
you know maleware can inject into system processes. It's called a runtime exploit and this is used to bypass anti-viruses when running. Best way to find maleware on your computer is to monitor network activity. it is much more effective than looking at processes.
@@kolbymonroe5569 Who says one can only do one or the other? Run all the anti-malware you want sure, so are you saying it's not worth also getting familiar with your running processes?? I gave a tip that you or anyone can take or leave, but I'm sharing it because it has served me well for over 40 years on computers so far. I can open up my Processes now and know right away what they are and which are new and look suspect. It's not definitive but it really does help.
Another great video . Have seen and read many videos and articles on this topic but yours seem crisp, content and straight to the point with clear explanations. Thank you
Senior support engineer at a middle sized European university here: Step one is a bit useless. The standard user really is not gonna be able to distinguish the good from the bad, unless the process is named with "trojan" in it or something like that, which is ofcourse highly unlikely. It will probably cause more concern, because the user will see a lot of "unknown" processes that are perfectly fine and necessary.
@@PaulTietjens one of the very first things I do on a fresh system install is take a good long look through the processes. certain programs I straight-up know all of their process names (FAH_Core being one that comes to mind because I run fold@home, but there are several that spawn when you open various game-clients, too.)
Great work Leo as always. Question I also check network activity and traffic as means to check data transferring. I know this was a basic intro into Digital Forensics but this could also used as another tool in the toolbox to detect malicious activity? thanks
This isn't Digital Forensics. It's Cyber Security. The chap who is doing this, has got mixed up. DF deals with criminals using triage, hard drive analytics etc etc.
@@eeurr1306 You use the resource monitor, and each tab has a set of processes related to the tab e.g. disk tab process with disk usage. Though it's less readable than the task manager, which is why he said it takes a while to master
1:55 "Restart your computer - turn it off and on again" I wanna budge in there real quick because thats not how this works. Windows 10 and 11 both dont shut down if you shut down the PC or press the power button on your case. they go in deep sleep. they page all RAM and go into hibernation until you press the power button again. A real reset happens if you RESTART the machine. thats why drivers and windows ask for a RESTART and not a shutdown. if you would just calmly shut down and reboot, you'd end up with mostly the same services running again.
That's true. I found that out when i disabled a service in the registry (it was greyed out in services), yet despite the fact that in services the service now said "Disabled", it was still running! Even though id turned the machine off and on more than twice! Only when i did a restart did it disable, and finally stop launching fully.
Excellent stuff, as a previous I.T. person this video has helped me review over some stuff I have forgotten about just in these past few minutes. Well drawn out and put together.
Doesn't anyone ever wonder why the more we get protected the more we need protection. After millions of security updates and many many protection programs VPN and so on everyday we hear that we need to protect ourselves more and more, seems we need to ask questions as to why?
Because things are constantly changing. Each component has other components that it depends on. A part of windows might update, and include updated dependencies, and one of those dependencies could have added a new feature. One small oversight in any part of the chain and a new vulnerability is introduced. An application may depend on 100 different libraries, and each of those libraries could depend on another library to function. You end up with tons of links in the chain and if one of those links have a vulnerability, it can be exploited by bad actors. Nothing will EVER be 100% secure. Never. There will always be vulnerabilities being introduced and patched in a cycle. It's impossible to have the foresight to know that your code can never be exploited. The battle will go on forever, and it only gets more complex. There could be thousands of untapped vulnerabilities in the software on your PC, just waiting to be discovered. Sometimes, vulnerabilities are found in decade old software/libraries. The issue was always there, it's just nobody had found it yet.
The people creating the malware are constantly having to improve. So the market is pretty crowded which means developers are gonna go above and beyond to be better. A good example is the cold war or just any arms race. Plus they work 24/7 on finding exploits, the same goes for white hats who are also looking to find those exploits first and close them. Luckily platforms offer cash rewards to find these exploits thus the war goes on.
Thank you so much. I often get real weird wifi connectivity/disconnects at times or my laptop will suddenly start running the fans really fast and it will at the same time slow down everything.. and it happens in weird cycles-- and im not srue if thats normal, so I thought maybe I was being hacked.. This video and software help quite a bit. Idk if you mentioned the PID thing in task manager but I think thats important too
The title of the video reminds me of some of the banner-ads I used to see (haven't recently): "Is your PC infected with steathware? Download our special detection utility to find out, and get rid of the viruses" :P
What should i say about this, most people won't notice malware until they get some problems. But if the malware is intelligent it won't show itself and just steal your information or whatever it's suppose to do. It will hook itself in to a windows system file or some popular program file, and uploading this file to a website will only show that a part of the file has been encrypted. Obviously most of that blob will contain the malicious code. Windows Defender or any other scanner won't ever find it. If you're lucky you might see some suspicious traffic but that all depends. All the methods shown sofar won't reveal this kind of malware. So i hope you have something better coming up.
There's a saying "Malware can hide but it must run". Everything will unencrypt itself to run in memory, by then hopefully AV can flag something. For really advanced threats, it's gonna be more about noticing abnormal behavioral and execution. But this is good and relevant stuff for intro.
I have this process called Sink to receive asynchronous callbacks for WMI client application and it has incredibly high memory. More than CHROME. should i be worried this is always running?
Off topic but I'm curious as to why are you using Camtasia to record videos instead of let's say OBS or Shadowplay? I'm just curious. Good video as always!
OMG this would be a giant project! If ever in doubt, I will just copy my (non-executable) documents off and wipe the HD clean. Actually, I already keep such documents backed up, so I can just skip to the wipe. :)
would a simple pi-hole be sufficient to capture potential c2 servers, and how would we identify them? Or is it mandatory for the malware to keep track of dynamic dns', and therefore it's tracable?
Τhats a very good vid, or better a very good series of vids, as it seems. Are u planning to do vids about other OS, like MacOS and Android? I think that would have been interesting, too. Anyway, thumps up for your always useful vids! 💯
This is a bit basic, most hackers are much more advanced than this. They will install a DLL which is hooked by a system process, running everytime something such as the explorer shell is opened. It will never show up in the task manager because it is a subprocess.
They do use Kaspersky for signatures, most modern day solutions use multiple means to determine if a file is malicious. Signatures is just a list of known malicious software, it isn't capable of determining if a file is malicious if it's not on the list. Signatures are half the battle really a second line of defense, it's propriety software which is the front line. ZoneAlarm has their own, they do not use Kaspersky for this, just the signatures. Signatures do help speed up scans, and they are handy to have for sure, but signatures mean absolutely nothing at all the first time malware is encountered (zero day), as Kaspersky will have no signature for it. This than falls on their proprietary software to determine if it is safe or not, but once Kaspersky has determined if it is safe or not the signature is added to their list.
I have a Lenovo laptop and every time I get a bios update from Lenovo the laptop slows and becomes choppy for a week, it has been that way since I bought it new.
Looks like the Discord link has expired.. Will anyone provide an updated invite link to the server? Or was that a temporary server for the workshop alone?
the equivalant on Linux is 'ps' in the terminal if memory serves. Linux (and Mac, they're both UNIX-based) work differently, so you've got less to worry about, but there are some things to look for. You can go into your list of repositories (what that's called varies by distribution, think Mint calls it Software Sources? something like that, haven't touched it in months) and look for anything that's suspicious. you can run ps and go looking around. lspci and looking for loaded modules in GRUB can be another place to have a peek. But since it's tricker to get malware onto a Unix based system in the first place, most linux malware tends to be pretty well hidden overall and will require a certain level of expertise (or booting into a liveCD to have a look at the drive that way) to track down.
You'd need Root access for that unfortunately. It's really hard to access an exhaustive task manager on mobile. On the flip side it also means it's very hard for mobile malwares to actually need root access to be detected and removed. Most mobile malware come embedded into some apps, which are installed through user permissions and cannot be hidden.
@@taupi5246 Actually, Dr. Web for Android scans also system files without necessarily needing root access, it found a malware like Triada hidden in my phone. If anything, root access is needed to remove them (and, at least in my case, flashing the phone with another firmware).
great video, I do need some help as something is stealing my passwords as I am getting log in requests from all over the world and password changes. The discord link is not working and need the workshop help please.
This is useful, but it's too basic. Any "decent" malware will have some kind of survival mechanism, that re-registers itself on the system and prevents basic things like these.
Can anyone help me please, I am facing a big problem with my wifi, when I run a game my wifi is disconnected and when I try to reconnect it says"can't connect to this network", I have tried everything including updating drivers, reinstalling the network adapter, network reset, etc. I only happens when I play games, please any help is appreciated.
Good video but don't forget the router as not every hacker wants to get inside your PC. Some just want free untraceable Internet access. So if your WiFi password is only eight characters long and is the same one that came installed by default, then you might want to change it... along with the internal Admin Password. Occasionally you'll also come across folk still using the WEP encryption settings, it's getting rarer thankfully but it still happens. Be kind to them.
hello sir i have an serious issue pls reply!!! my window quick scan is stuck My task manager is collapsing as soonn as i open it and the when i did cleanmgr >>c drive>>delete file>> it also collapsed pls sir reply and let me know anything if i can do
Can you provide a link to system internal because when I try to go to the website it wants download a Firefox extension and redirect me to a different site then system internal.
More advanced version of the video, going through RAM forensics with Volatility: th-cam.com/video/VK3fvNFGAzE/w-d-xo.html
Great video,I would like to add a small note.
When uploading files to Virustotal they are made public meaning everyone can download them.
So don't upload files that contain potentially sensitive information/credentials.
Yeah I almost did something similar, so I'm going to push this up
They should clearly state it as a warning message before uploading.
They get hashed??
@@amogus7 The full file can be downloaded from the API
@@Hikari_Sakurai "By submitting data below, you are agreeing to our Terms of Service and Privacy Policy, and to the sharing of your Sample submission with the security community. Please do not submit any personal information; VirusTotal is not responsible for the contents of your submission. Learn more.". That's the first thing you read when entering the site, what else they can do?
Just registered at interzer. I have to say I am impressed by it's capabilites. This does give me a much better feeling when using community fixes to ancient games, that don't run on Windows 10 otherwise. I only wish they would offer the upload of bigger file sizes with the free version, even if one were only be able to upload one big file a month. The installers for some mods tend to be multiple gigabites in size.
@@Unknown_Genius you just have to find the right community, others will usually do scans and scan each file uploaded in their domain but one can never be too careful
Yeah somehow I just have a bad feeling about mod community even if it trustworthy there can be still bad guy among them right? I use bitdefender as a AV, right now I am safe but still have a bad feeling about mod in my PC anyway (I download mod from Nexus and steam community I always hate game dev that not fix bug because I have to download fixed patch from modder(which is stranger) instead😞)
@@Klara988 its possible yes, more likely wah ti think is to happen is say oen th emodders themselves is infected and dosent know and it speads to the file when its thir turn to work on it. althugh sitse like nexus mods seem to do a virus scan im not sure how good it is.
I remember becoming infected with Malware quite awhile back. Using some of these techniques I began eliminating certain files with a specific date. When my system failed to restart and the BIOS(?) gave me missing file names, I was luckily able to find, copy to 3.5"disk, and transfer to the affected system these missing files (which I had deleted). Eventually I was able to get my system running. I made a copy of all the files I wanted to save, and then reformatted the system and reinstalled Windows. WHEW! You live and learn . . . . .
@@apdkfjei Did the word 3.5" disk pass you by? They didn't have USB then, but thanks . . . .
A.K.A. What you should do if you waited for the tierlist to choose your AV.
I really like this new content! Our ignorance of computer inner workings is the highest vulnerability so teaching us things like that is gold! thank you!
One of my best "antiviruses" is being very aware of my computer, most of the times I found viruses or rootkits just because my fans worked harder than I was used to.
By the time you notice that it's already too late. Be proactive and *prevent!* A good antivirus (NOT Windows Defender) safe(r) browsing practices, oh - and change all your passwords right now! Who knows if you've had a snooper or keyloggers (those don't consume much resources at all).
you could zoom more to the programs, my eyes hurts.
Get a bigger phone 😂 just kidding
Your phone zooms
Would love to see something like this for phones, they are pretty much hand held computers with all kinds of sensitive data that needs protection.
I agree
Yeah, and barely proper AdBlock, having people accidentally click on a miniscule x to close it but actually open up a page that might install something. Thankfully, Russian hackers are kind of occupied now, one less problem.
Followed the link, so sad it premieres right before I go to work. Excited to see this video though. I love this channel! ❤️ Yay~
You can join the discord anyway for future events. Mostly we plan on doing these during the weekends.
@@pcsecuritychannel I am part of the discord, I appreciate your response~
A tip to share: Often look at your Tasks regardless. This will eventually make you very familiar with what should be there and what looks not right.
you know maleware can inject into system processes. It's called a runtime exploit and this is used to bypass anti-viruses when running. Best way to find maleware on your computer is to monitor network activity. it is much more effective than looking at processes.
runtime exploits are very common and are easy to code for someone who has some schooling.
@@Unknown_Genius please speak english
@@kolbymonroe5569 Who says one can only do one or the other? Run all the anti-malware you want sure, so are you saying it's not worth also getting familiar with your running processes?? I gave a tip that you or anyone can take or leave, but I'm sharing it because it has served me well for over 40 years on computers so far. I can open up my Processes now and know right away what they are and which are new and look suspect. It's not definitive but it really does help.
Yeah that’s what I do. Any outright weird task will be spotted immediately
Great idea for future videos. Very interested and looking forward to them! Thanks for the great content.
Keep this series going please!!!! Cyber sec student studying windows workstation RN and learning a lot from you
Another great video . Have seen and read many videos and articles on this topic but yours seem crisp, content and straight to the point with clear explanations. Thank you
Senior support engineer at a middle sized European university here:
Step one is a bit useless. The standard user really is not gonna be able to distinguish the good from the bad, unless the process is named with "trojan" in it or something like that, which is ofcourse highly unlikely.
It will probably cause more concern, because the user will see a lot of "unknown" processes that are perfectly fine and necessary.
So wich step of this video is for "standard users"? I mean... this channel is focused on "technical users"
@@mcasillasr This video is supposed to be for beginners
@@mcasillasr Alu has already said it, but yes... this video is for beginners. It is literally said in the introduction...
@@PaulTietjens one of the very first things I do on a fresh system install is take a good long look through the processes. certain programs I straight-up know all of their process names (FAH_Core being one that comes to mind because I run fold@home, but there are several that spawn when you open various game-clients, too.)
@@Unknown_Genius Your Phone is literally the displayname of the app... I don't see your point in this regard. It is the way it should be.
Very interesting video, Leo. Sysinternals AutoRun and Process Explorer are also very helpful.
What r those if I may ask, kind sir~
Something delicious to eat 😋
@@shinjironaosuke7920 Ara Ara~ may I step on you, darling…
My FBI agent and I really enjoyed this video, thanks mate!!
😬😂
Love these tutorials
or else
I love you The PC Security Channel, please never go away
Great work Leo as always. Question I also check network activity and traffic as means to check data transferring. I know this was a basic intro into Digital Forensics but this could also used as another tool in the toolbox to detect malicious activity? thanks
thanx?
Process Hacker 2 does this. If something is sus, block it with a Firewall and test whether it's working
This isn't Digital Forensics. It's Cyber Security. The chap who is doing this, has got mixed up. DF deals with criminals using triage, hard drive analytics etc etc.
I'm so excited for this series. It's just what ive been looking for
I like the way your taskbar icons are centered.
could you show how that is done?
i believe that is the default layout on windows 11
Malwares can be "Stealth" , meaning that if you run Task Manager the malware will stop until you close task manager. Any idea how to get rid of that ?
using resmon in run is another alternative but takes a a while to master
well, always open task manager, malware doesnt work *taps head*
@@srimanproductions8396 What does using resmon in run mean?
@@eeurr1306 You use the resource monitor, and each tab has a set of processes related to the tab e.g. disk tab process with disk usage. Though it's less readable than the task manager, which is why he said it takes a while to master
1:55 "Restart your computer - turn it off and on again" I wanna budge in there real quick because thats not how this works. Windows 10 and 11 both dont shut down if you shut down the PC or press the power button on your case. they go in deep sleep. they page all RAM and go into hibernation until you press the power button again.
A real reset happens if you RESTART the machine. thats why drivers and windows ask for a RESTART and not a shutdown. if you would just calmly shut down and reboot, you'd end up with mostly the same services running again.
That's true. I found that out when i disabled a service in the registry (it was greyed out in services), yet despite the fact that in services the service now said "Disabled", it was still running! Even though id turned the machine off and on more than twice! Only when i did a restart did it disable, and finally stop launching fully.
Thank you for posting this video. This has helped me a lot. Have a great 2022 New Year!!!
The service that you provide humanity Deserves more recognition
Great Video. Look forward to gaining more knowledge from this Channel
There will be a live discord workshop on Discord right after this video premiers! Join here: discord.com/invite/nxCtSMaP?event=925373517367742496
ok
Discord wants my mobile number to join, never had that request before
kinda wild that i've actually walked on the bridge in your desktop wallpaper
Minor suggestion, the text is difficult to read, you should lower the display resolution when recording these videos
Fabulous, Helpful & Informative🔥🔥
Excellent stuff, as a previous I.T. person this video has helped me review over some stuff I have forgotten about just in these past few minutes. Well drawn out and put together.
Just a random observation: your wallpaper is the Elizabeth Quay pedestrian bridge from the city where I live, Perth!
Doesn't anyone ever wonder why the more we get protected the more we need protection. After millions of security updates and many many protection programs VPN and so on everyday we hear that we need to protect ourselves more and more, seems we need to ask questions as to why?
Because things are constantly changing. Each component has other components that it depends on. A part of windows might update, and include updated dependencies, and one of those dependencies could have added a new feature. One small oversight in any part of the chain and a new vulnerability is introduced.
An application may depend on 100 different libraries, and each of those libraries could depend on another library to function. You end up with tons of links in the chain and if one of those links have a vulnerability, it can be exploited by bad actors.
Nothing will EVER be 100% secure. Never. There will always be vulnerabilities being introduced and patched in a cycle. It's impossible to have the foresight to know that your code can never be exploited. The battle will go on forever, and it only gets more complex. There could be thousands of untapped vulnerabilities in the software on your PC, just waiting to be discovered. Sometimes, vulnerabilities are found in decade old software/libraries. The issue was always there, it's just nobody had found it yet.
The more complicated technology and programs become, the easier they get to disrupt.
The people creating the malware are constantly having to improve. So the market is pretty crowded which means developers are gonna go above and beyond to be better. A good example is the cold war or just any arms race. Plus they work 24/7 on finding exploits, the same goes for white hats who are also looking to find those exploits first and close them. Luckily platforms offer cash rewards to find these exploits thus the war goes on.
Thank you so much. I often get real weird wifi connectivity/disconnects at times or my laptop will suddenly start running the fans really fast and it will at the same time slow down everything.. and it happens in weird cycles-- and im not srue if thats normal, so I thought maybe I was being hacked.. This video and software help quite a bit. Idk if you mentioned the PID thing in task manager but I think thats important too
Text on screen is really small. Even at 1080p in full screen it is hard to read.
I usually do basic cross reference from Task Manager and netstat -no on the command prompt.
The title of the video reminds me of some of the banner-ads I used to see (haven't recently):
"Is your PC infected with steathware? Download our special detection utility to find out, and get rid of the viruses" :P
great video please make more and also make some of these videos for people that have been in tech for a while.
What should i say about this, most people won't notice malware until they get some problems. But if the malware is intelligent it won't show itself and just steal your information or whatever it's suppose to do. It will hook itself in to a windows system file or some popular program file, and uploading this file to a website will only show that a part of the file has been encrypted. Obviously most of that blob will contain the malicious code. Windows Defender or any other scanner won't ever find it. If you're lucky you might see some
suspicious traffic but that all depends. All the methods shown sofar won't reveal this kind of malware. So i hope you have something better coming up.
There's a saying "Malware can hide but it must run". Everything will unencrypt itself to run in memory, by then hopefully AV can flag something. For really advanced threats, it's gonna be more about noticing abnormal behavioral and execution. But this is good and relevant stuff for intro.
would love to see more videos on this topic including taking memory dumps and reverse engineering etc.
ok you showed were the places are to look for suspicious stuff but i still dont know what suspicious stuff looks like
Will you also cover port scanning?
I have this process called Sink to receive asynchronous callbacks for WMI client application and it has incredibly high memory. More than CHROME. should i be worried this is always running?
Plese make video on how to set up antivirus on pc , you can start from kaspersky both free and paid. Plze
How do I recover my Facebook business page that was hacked?
The hackers removed me from admin on my own page.
I need help desperately
Leo haven't done any K7 nor quick heal test ...pls do a video on those 2 product... thanks in advance
Off topic but I'm curious as to why are you using Camtasia to record videos instead of let's say OBS or Shadowplay? I'm just curious. Good video as always!
OBS is trash, That’s about all you really need too know
I’ll leave the actual detailed reason out
As there’s many lol
@@whocares7078 Is it actually trash or you just don't know how to use it? Been my Shadowplay replacement for the past 6 years.
@@IIlIIlIIlII
He quite literally did the
"It's bad, just trust me bro"
No explanation no nothing. Nice
OBS is great "IF" you know how to use it
Is there any way to screen record natively from within Windows using a built in tool?
OMG this would be a giant project! If ever in doubt, I will just copy my (non-executable) documents off and wipe the HD clean. Actually, I already keep such documents backed up, so I can just skip to the wipe. :)
would a simple pi-hole be sufficient to capture potential c2 servers, and how would we identify them? Or is it mandatory for the malware to keep track of dynamic dns', and therefore it's tracable?
I've found that using pfSense as a virtual firewall and web proxy catches a lot of malware
It does take some configuration though
i immediately recognise the elizabeth quay bridge
What about Process injection where malware could replace a legitimate Process?
Great video.. keep running
Τhats a very good vid, or better a very good series of vids, as it seems. Are u planning to do vids about other OS, like MacOS and Android? I think that would have been interesting, too. Anyway, thumps up for your always useful vids! 💯
is the software that runs in thee background that can do/monitor all this (or close to it)? or does something like kapersky do it already?
and also check for task scheduler if there's malicious task and check for startup
Thanks for the video =)
Had a bitcoin miner and didn't even know! thank you so much!
TH-cam seems to enjoy deleting my comments about this. Just please thoroughly check your computer. Could be more than you think.
Had to stop a third of the way through - I have Win 7 and it doesn't show a startup tab in task manager.
This is a bit basic, most hackers are much more advanced than this. They will install a DLL which is hooked by a system process, running everytime something such as the explorer shell is opened. It will never show up in the task manager because it is a subprocess.
This is a beginners video, my guy. It's meant as an introduction
This Is Better Than A murder Mystery :)
Great video!
awesome video! :)
can't wait for the ZoneAlarm Free Antivirus vs Kaspersky test to see if they behave the same since ZoneAlarm uses Kaspersky ... Doesn't it?
They do use Kaspersky for signatures, most modern day solutions use multiple means to determine if a file is malicious. Signatures is just a list of known malicious software, it isn't capable of determining if a file is malicious if it's not on the list.
Signatures are half the battle really a second line of defense, it's propriety software which is the front line. ZoneAlarm has their own, they do not use Kaspersky for this, just the signatures. Signatures do help speed up scans, and they are handy to have for sure, but signatures mean absolutely nothing at all the first time malware is encountered (zero day), as Kaspersky will have no signature for it.
This than falls on their proprietary software to determine if it is safe or not, but once Kaspersky has determined if it is safe or not the signature is added to their list.
Zone alarm is ok if you use it's firewall or if it comes with it, but Kaspersky has always had exploits in it from what I've gathered.
I have a Lenovo laptop and every time I get a bios update from Lenovo the laptop slows and becomes choppy for a week, it has been that way since I bought it new.
Alright going to check it out later today my laptop & desktop all in one been acting suspicious
I got a question can you check big files before installing it? There's files total virus can't scan due to max size.
even if my pc is hacked. will it help if I reinstall windows deleting everything from my drives?
Great info thanks 👍
I have another question. How do you make your windows taskbar look like that...😲😲😲
Is windows 11 safer or the same as 10 ? And is the Mac M1 chip safer than Intel chips ?
Could this be used to boost performance on your pc?
For example, disabling discord/steam/epic/chrome/edge/oneNote
Yes.
Looks like the Discord link has expired.. Will anyone provide an updated invite link to the server? Or was that a temporary server for the workshop alone?
How would you tell on Linux or Mac? What if is masked like regular service or program?
the equivalant on Linux is 'ps' in the terminal if memory serves. Linux (and Mac, they're both UNIX-based) work differently, so you've got less to worry about, but there are some things to look for.
You can go into your list of repositories (what that's called varies by distribution, think Mint calls it Software Sources? something like that, haven't touched it in months) and look for anything that's suspicious.
you can run ps and go looking around. lspci and looking for loaded modules in GRUB can be another place to have a peek. But since it's tricker to get malware onto a Unix based system in the first place, most linux malware tends to be pretty well hidden overall and will require a certain level of expertise (or booting into a liveCD to have a look at the drive that way) to track down.
@@DFX2KX Very good explanation. Thanks a lot!
i wonder if we install malicious files from website with windows device encryption/ bitlocker on, can hacker still pass the bitlocker?
How do you know when your PC is hacked? It's when Indian call center calls you !
good series idea , def make more!
I wonder if there is a way to do this on a mobile device.
a lot of anti malware programs just scan apps and spare files but they don't dig any deeper.
You'd need Root access for that unfortunately. It's really hard to access an exhaustive task manager on mobile.
On the flip side it also means it's very hard for mobile malwares to actually need root access to be detected and removed. Most mobile malware come embedded into some apps, which are installed through user permissions and cannot be hidden.
@@taupi5246 Actually, Dr. Web for Android scans also system files without necessarily needing root access, it found a malware like Triada hidden in my phone. If anything, root access is needed to remove them (and, at least in my case, flashing the phone with another firmware).
Great video. , I think you could go even further and check packets activity throught a packet sniffer.
Moral of this story is, stay off of janky sites.
What AV do you use?
So im rly scared bc for some reason there has been multiple unkown deviced connected to my wifi and i dont know what to do..
what about rootkits ? can they really compromise a windows system ?
@@VioFax *paranoia kicks in*
great video, I do need some help as something is stealing my passwords as I am getting log in requests from all over the world and password changes. The discord link is not working and need the workshop help please.
I’ve seen some more advanced malware which terminates itself when task manager is open
This is useful, but it's too basic. Any "decent" malware will have some kind of survival mechanism, that re-registers itself on the system and prevents basic things like these.
Can anyone help me please, I am facing a big problem with my wifi, when I run a game my wifi is disconnected and when I try to reconnect it says"can't connect to this network", I have tried everything including updating drivers, reinstalling the network adapter, network reset, etc. I only happens when I play games, please any help is appreciated.
Found a solution?
@@doomsday7699 I found out that Microsoft's games were causing this problem, had to uninstall them games and reinstall the network adapter drivers.
@@spartanbhagwa7066 ah I see. Thanks!
Q. Hey is there any website like virus total which enables us to scan huge sized games/apps?
Where do I look on a linux Mint system for these issues?
I have an entry in Autoruns called totally-not-a-virus.exe. Should I delete that?
Good video but don't forget the router as not every hacker wants to get inside your PC. Some just want free untraceable Internet access. So if your WiFi password is only eight characters long and is the same one that came installed by default, then you might want to change it... along with the internal Admin Password. Occasionally you'll also come across folk still using the WEP encryption settings, it's getting rarer thankfully but it still happens. Be kind to them.
Bless you, lad!
Someone I was friends with on discord got hacked and sent me a virus, could I send it to you to look at it?
Just don't donwload it lol
Are you from Perth ?
You should do a video about different task managers. Like anvir task manager. Etc
Thanks this is a great check list
hello sir i have an serious issue pls reply!!!
my window quick scan is stuck
My task manager is collapsing as soonn as i open it
and the when i did cleanmgr >>c drive>>delete file>> it also collapsed
pls sir reply and let me know anything if i can do
CTRL-Shift-Esc doesn't work on my PC but I use Arch Linux...
Can you provide a link to system internal because when I try to go to the website it wants download a Firefox extension and redirect me to a different site then system internal.
All my files in PC are converted to voom file ... How I can retrieve my data
Discord link please the one in description is expired