Looking for training in the area of Infection Removal

[Failedpixel]

I currently work for a computer repair shop and I often see infections come through the door. I generally never have an issue removing the infections using the tools I have cultivated over time doing research on forums and using Google. However, I know there are individuals who are skilled in using tools such as HijackThis and Combofix. I am looking for for someone to guide me down a path where I can learn how to use these tools and others. I am looking to learn how to read over logs and understand them so I can assist others and be better at my job.

Currently I use the following tools, not for every job, but they are in my "kit":

 

rkill

JRT

ADW

Hitman Pro

MBAM

Norton Power Eraser

TDSS Killer

Ccleaner

Tweaking Repair

 

With these tools I am able to handle pretty much every infection. The biggest problems I have are Browser Infections in IE.

 

Please let me know if you can assist me in going down the correct path. 

 

Thank you.

 

[David H. Lipman]

HijackThis and Combofix are tools for forum and trained Malware Removal helpers.

 

People who have access to infected computers should use low level tools such as Process Explorer, AutoRuns, TCPView and Process Monitor by the Sysinternals branch of Microsoft.  Other tools from NirSoft such as CPorts and BlueScreenView.

 

As for Browser related issues, they are caused when a Browser Helper Object ( BHO ) is used.  AutoRuns delineates them.

 

Someone in a service shop should get acquainted with and get experienced in actual technical tools. 

 

Of course I also suggest getting Malwarebytes TechBench as using MBAM in a shop to clean a customer's PC is a clear EULA violation.

Malwarebytes Techbench USB Tool Help

[noknojon]

Hello Failedpixel, and welcome to Malwarebytes forum.

 

This site is not able to provide full training for exactly what you want, but our list below covers most of those that can help you.

Note that there are times that these training schools have more applicants than spaces, so you are best to try a few and see if you can get accepted by one of them.

 

If you're interested in helping others with removal of Malware please visit one of the sites below to sign up for a training school.
 

Good Luck, and thank you for the enquiry. 

 

The following are general recognized websites who host training facilities: United Network of Instructors and Trained Eliminators

• Bleeping Computer
• Geeks to Go
• SpywareHammer
• Malware Removal
• What the Tech
• SpywareInfo Forum
• That Computer Guy
• Tech Support Forum

[AdvancedSetup]

If you're unable to get into one of the schools right away then the following can help you learn quite a bit about digging in deeper to find out what's going on and help to remove malware of fix other difficult to find computer issues.

 

Please download Microsoft Process Monitor from the following link.
https://technet.microsoft.com/en-us/Library/bb896645.aspx

The links below are videos that go into more detail on how to use and how to try to track down issues using the tool.

Case of the Unexplained: Troubleshooting with Mark Russinovich

Case of the Unexplained: Troubleshooting with Mark Russinovich

TWC: Malware Hunting with Mark Russinovich and the Sysinternals Tools

Mysteries of Memory Management Revealed (Part 1/2)

Mysteries of Memory Management Revealed (Part 2/2)

Windows Debugging and Troubleshooting

Process Monitor Filter Tips

 

[Failedpixel]

Thanks for all the links everyone, a starting point was exactly what I was looking for. 

 

I had no idea using MBAM on a customer's computer was a violation of the EULA. The shop owner is the one who told me about it. I will let her know about the tech version. 

 

Thank you everyone.