+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Whitehat • Blue Team • Defensive Security (https://hackforums.net/forumdisplay.php?fid=448)
+---- Forum: Malware, Rat, and Virus Removal (https://hackforums.net/forumdisplay.php?fid=110)
+---- Thread: Got ratted. Majorly ratted. (/showthread.php?tid=1754614)
Got ratted. Majorly ratted. - xSploit™ - Sep 23, 2011
Well I played a runescape private server called "resistancepk" for a while, not realizing they had a rat binded into the cache that downloads onto your computer. They always made up stuff about why the site was detected on internet explorer. But I left the server and one of the owners taunts me, etc. Earlier today it has gotten to the limit, he's threatened to delete everything off my computer and access my facebook account. I backed up every file on my computer and tbh, yes I'm fucking scared.
He has a HF acc here https://hackforums.net/member.php?act...uid=678061
I know thats him. Can anybody help remove this or should I just wipe my computer and start fresh? I've already tried getting help from multiple people but no one can help, its completely FUD and its pretty damn well hidden.
* - ¤ Nick™ ¤ - Sep 23, 2011
If you know you are infected, then please post for help in this forum location: Hijack This Analyzer and Tutorials
* - Abuser™ - Sep 23, 2011
Best bet will be restoring your PC and reinstall windows to start fresh.
* - ¤ Nick™ ¤ - Sep 23, 2011
(Sep 23, 2011 04:37 PM)Abuser™ Wrote: Best bet will be restoring your PC and reinstall windows to start fresh.
Why are you telling him to format his PC and reinstall windows when he can just go to the HJT Team for assistance? I'm sure they can get rid of the infection. Very bad advice from you 😠
* - Abuser™ - Sep 23, 2011
(Sep 23, 2011 04:40 PM)¤ Nick™ ¤ Wrote: Why are you telling him to format his PC and reinstall windows when he can just go to the HJT Team for assistance? I'm sure they can get rid of the infection. Very bad advice from you 😠
And sometimes it takes a while from them but they are experienced.
OP PM me your TV and ill see if I can find it.
* - 04Ulquiorra1 - Sep 23, 2011
Well, here is what I would do, being it runescape; I would find a way to connect to his computer(enough to get his IP address(assuming he isn't "rolling") and then play around with him a little :). You have NO idea how vulnerable people are. Take advantage of it. Do your research and fight back. ;) If you have and questions PM me. Hope I could help in at LEAST giving you an idealistic/somewhat desirable defensive maneuver.
* - xSploit™ - Sep 23, 2011
(Sep 23, 2011 04:45 PM)04Ulquiorra1 Wrote: Well, here is what I would do, being it runescape; I would find a way to connect to his computer(enough to get his IP address(assuming he isn't "rolling") and then play around with him a little :). You have NO idea how vulnerable people are. Take advantage of it. Do your research and fight back. ;) If you have and questions PM me. Hope I could help in at LEAST giving you an idealistic/somewhat desirable defensive maneuver.I have no interest in this guy, he's a good hacker and I don't want to mess with him, all I want to do is get away from him.
* - AyyLmao0o - Sep 23, 2011
I can try to help you via TeamViewer if you'd like to try and get it off you. PM me if you would like me to take a crack at it.
* - Burdman - Sep 23, 2011
It is just a rat. Very easy to remove. The HJT team can assist you in removing it easily.
* - python453 - Sep 23, 2011
Yo dude, backing up every file on your pc backs up his server into those files too... just fyi.
Best bet is HJT
* - 04Ulquiorra1 - Oct 2, 2011
(Sep 23, 2011 05:19 PM)cнєrσkєє™ Wrote: I have no interest in this guy, he's a good hacker and I don't want to mess with him, all I want to do is get away from him.If you would like to hide, maybe consider using this software called-- "Hotspot Shield". It rolls your IP when desired. It helps conceil your ass. Hope this helps ^_^
* - `00Synch_ - Oct 2, 2011
(Sep 23, 2011 05:19 PM)cнєrσkєє™ Wrote: I have no interest in this guy, he's a good hacker and I don't want to mess with him, all I want to do is get away from him.A good hacker? He's using a RAT created by someone else infecting users of a rip-off online game with the main audience being twelve-year-olds. Based on that being the only thing I know about him, I stand by it. As to your infection, download things such as Malware Bytes, SUPERAntiSpyware, ESET Nod32, and CCleaner. Scan with MB,SAS,or ESET. Afterwards, run CCleaner to clear your computer cache's, as well as increase the overall performance to a certain degree. If you truly think that the user you're linking to is him, he has infected a member of HF, which is a no-no.
If all else fails, talk to the HJT Team, they'll fix you right up.
Also, after you get this infection sorted out, look into a program called "KeyScrambler". You won't have to worry about a novice blackhat messing with your passwords.
* - File - Oct 2, 2011
Use Malaware Bytes. It should help.
* - eiqht - Oct 2, 2011
Hi,
Please visit here and gather the requested logs, then create a thread and post them here.
Thanks,
eiqht.
* - Prominent - Oct 3, 2011
Read and follow the instructions of I am infected! What do I do?, gather up the requested logs and then make a new thread at the HijackThis Log Analyzer and Tutorials section. Please be patient and wait for a HJT Team member to assist you.
Or download Infested Cleaner by Infested Terran and run the Botkill (with advanced checked). Then restart your computer.