Disk2vhd: Virtualize Existing Systems

Rebuilding a working system from scratch can be time consuming, because of that its a good idea to use P2V or Physical to Virtual tools that automate the process for you. One of them is Disk2vhd by Sysinternals created to ease the transition process from baremetal to virtual with a few clicks. This P2V tool works by creating a virtual image of the system its running on and the result is a VHD file(Virtual Hard Disk – Microsoft’s Virtual Machine disk format) which can be use in Microsoft Virtual PC or Microsoft Hyper-V .

Disk2vhd is easy to understand and use. You can download Disk2vhd free of charge from the Sysinternals site.

Note: Due to the hardware changes you may need to reactivate the operating system once again.

Links

Sysinternals Disk2vhd

RAMMap Memory Analysis Utility

Sysinternals has made another great tool available, RAMMap which is an advanced physical memory usage analysis utility for Windows. In simple terms you get more information about how the memory is being used in the system.

Use RAMMap to gain understanding of the way Windows manages memory, to analyze application memory usage, or to answer specific questions about how RAM is being allocated. RAMMap’s refresh feature enables you to update the display and it includes support for saving and loading memory snapshots.

RAMMap only supports the following operating systems: Vista, Windows 7, and Windows Server 2008.

Links

RAMMap v1.0

5 tools that should be part of any malware removal toolkit

Malware is an example of human generated wreck and at the same time proof of the ingenuity the same are capable of. For this reason part of my home laboratory is dedicated to a group of virtual machines which only have the job of tearing each other apart with malware.

The lab serves a double purpose which is to test the effectiveness of both proactive and reactive tools. On this occasion I am writing about reactive tools that have worked for me multiple times. Keep in mind that one tool alone will never do the job. It may take multiple tools to completely remove the infection.

Those who refuse to experiment will never know their true potential

After sacrificing multiple virtual machines I have generated a list of tools that work against malware.

Disclamer: Most of the software listed in this page is free for personal use only.

Toolkit

Malwarebytes Anti-Malware free version

malwarebytes

Malwarebytes Anti-Malware is one of my favorite tools to remove nasty malware of the likes of Antivirus XP which is particularly difficult to detect and remove. You have the option between a paid version with real time scanning or a free version which lacks real time scanning but still does the same job and has access to the same database of malware as the paid version.

BitDefender Rescue Disk

rescuecd

BitDefender Rescue Disk is a bootable antivirus live CD (based on Linux). BitDefender Rescue CD scans the operating system from the outside, another important feature is the ability to automatically update definitions from the BitDefender Internet servers.

Definition updates are important to keep up with the latest threats.

TrendMicro HijackThis

trendmicro

HijackThis is a some what complex tool that serves for reconnaissance by scanning and reporting back with a log file. The log simply reports on changes that may or may not be malicious. The user has to make the decision on what kind of action to take.

If you have no idea on how to read and interpret the log file you could end up damaging the system. Be cautious when using this tool.

CCleaner

ccleaner

Not exactly a security tool but CCleaner is useful because of the ability to fix problems found in the registry and other garbage left behind.

Sysinternals Process Explorer

Process_Explorer

Process Explorer is my favorite tool for tracking and solving problems on a Windows system that may not be evident or obscured by the OS. While not intended to be a security tool, Process Explorer can display all running process and information about the system is running on. As an exmaple the information displayed by Process Explorer can help the user inspect and stop unwanted malware from running on the system.

Do you know of any other tool that should be part of this list?