Active Malware Remediation: Getting Started

Jelan from Sophos Support goes over the initial steps to identify the malware infection you have and how to handle it.

---------------------------------------------------------------------------------------------------------

Skip ahead to these sections:

00:00 Overview
01:52 Ransomware
03:02 TrickBot & Emotet
03:54 Coin Miners
04:30 Shortcut LNK Infections
05:11 Additional Information

More info on Rapid Response: https://www.sophos.com/en-us/products/managed-threat-response/rapid-response.aspx

Sophos MTR self help guide document: https://docs.sophos.com/central/mtr/help/en-us/selfHelp/Overview/index.html

Ransomware remediation video: https://techvids.sophos.com/watch/5sxK1KLd4XZivXH7BLBZJH

Trickbot remediation video: https://techvids.sophos.com/watch/eDzyytnxgiZoAAxT87xGyC

Coin miners remediation video: https://techvids.sophos.com/watch/VPeH76SuNjCXW6KHn6aPD9

Shortcut LNK Worms remediation video: https://techvids.sophos.com/watch/qbf4Duc6QZ8b4fBYYTYTtv

Submit sample files to Sophos Labs: https://support.sophos.com/support/s/article/KB-000033301?language=en_US

Locate undetected malware with Autoruns(3rd party): https://support.sophos.com/support/s/article/KB-000035878?language=en_US&c__displayLanguage=en_US