+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Whitehat • Blue Team • Defensive Security (https://hackforums.net/forumdisplay.php?fid=448)
+---- Forum: Malware, Rat, and Virus Removal (https://hackforums.net/forumdisplay.php?fid=110)
+---- Thread: My mac is infected with jRAT! (/showthread.php?tid=3506318)
Pages: Pages
1
2
My mac is infected with jRAT! - Norrwen - May 26, 2013
I just found some wierd files when doing some scans on my MAC, and I tried deleting them but it says I can't because they are in use. They are both .jar files. I am positive I am infected with jRAT because I use it a lot and I know the symptoms. Please help me!
* - Inmodwetrust - May 26, 2013
(May 26, 2013 10:57 AM)Advisor Wrote: Being infected on mac is 0.00% the chances aren't even possible. If you happen to get infected on a MAC OS the infector has to be what i call a L33T SUP3R HA3KOR.I'm pretty sure it's possible, there's a rat being sold on here that supports Windows, Linux and Mac.
* - FantaŠec - May 26, 2013
(May 26, 2013 10:57 AM)Advisor Wrote: Being infected on mac is 0.00% the chances aren't even possible. If you happen to get infected on a MAC OS the infector has to be what i call a L33T SUP3R HA3KOR.
You are an idiot, people are so naive in mac hacking, there was a rat specific for mac hacking, not only that but you can still rat macs with other types of rats and bots. Just not with an exe, .jar or .dmg.
* - Gustav. - May 26, 2013
(May 26, 2013 10:58 AM)Inmodwetrust Wrote: I'm pretty sure it's possible, there's a rat being sold on here that supports Windows, Linux and Mac.
Wasn't sure about that. But thanks for informing me about JRAT.
(May 26, 2013 10:58 AM)Fanta Wrote: You are an idiot, people are so naive in mac hacking, there was a rat specific for mac hacking, not only that but you can still rat macs with other types of rats and bots. Just not with an exe, .jar or .dmg.
Mate, you are calling me an idiot for a simple mistake made by everyone on this forum.
* - Norrwen - May 26, 2013
So can anyone help me to disinefect my mac?
* - ItsATumor - May 26, 2013
I can help you out here, first off download avast! and ClamXav. Both are free. On avast!, do a full system scan and chose infections and warnings. This will take an hour. After that scan, run ClamXav and post both logs here. If it says the programs are running, I have a fix. What I learned is if you drag them into the trash bin, it will go in. But if you try to empty the trash, it denies it. After you are denied, drag the icon back onto the desktop and the file will get corrupted, which then can be deleted. PM me for other questions. I will continue to help. I would also recommend changing all important passwords, and looking over my security tutorial which is in my signature.
* - FantaŠec - May 26, 2013
(May 26, 2013 11:01 AM)Advisor Wrote: Wasn't sure about that. But thanks for informing me about JRAT.
Mate, you are calling me an idiot for a simple mistake made by everyone on this forum.
Sorry, just aggravates me when people assume things :/
* - Gustav. - May 26, 2013
(May 26, 2013 11:07 AM)Fanta Wrote: Sorry, just aggravates me when people assume things :/
I assumed that he was infected by malware, which isn't really popular on MAC os. But JRAT is another thing.
* - bbmayem - Jun 2, 2013
you can download jrat remover on the official site of jrat
* - Gold Medal - Jun 3, 2013
(Jun 2, 2013 11:46 PM)bbmayem Wrote: you can download jrat remover on the official site of jrat
http://redpois0n.com/download.php?proj=remover It's on the developers site not the site for jrat. There ya go dude!
* - Racr - Jun 3, 2013
(Jun 3, 2013 12:37 AM)Gold Medal Wrote: http://redpois0n.com/download.php?proj=remover It's on the developers site not the site for jrat. There ya go dude!
Yes OP, try the jRAT remover.
I'm not familiar with whether or not macs have something like task manager, but make sure you end all other java processes before using the remover.
* - ItsATumor - Jun 3, 2013
The user has PMed me and he managed to find and remove the infection, thanks for the suggestions.
* - Racr - Jun 3, 2013
(Jun 3, 2013 12:43 AM)ItsATumor Wrote: The user has PMed me and he managed to find and remove the infection, thanks for the suggestions.
Alright, thanks for letting us know.
I bet some people are still gonna reply though.
* - redpois0n - Jun 3, 2013
(May 26, 2013 10:58 AM)Inmodwetrust Wrote: I'm pretty sure it's possible, there's a rat being sold on here that supports Windows, Linux and Mac.
It's not sold. OP got this fixed? Really easy to fix.
* - Norrwen - Jun 4, 2013
Thanks everyone for helping me my computer is clean now.