+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Beginner Hacking (https://hackforums.net/forumdisplay.php?fid=4)
+---- Thread: Accidentally opened crypted rat (/showthread.php?tid=4964526)
Accidentally opened crypted rat - Huntery - Aug 26, 2015
Hi guys,
i accidentally opended a rat crypted with BosonLight with strong persistence in my own VM, and now is all fu***** and laggy, here i have bot NanoCore and BosonLight License, i have no snapshot and backup, what should i do? Can i change VM or i just lose the lincense?
Sorry i'm a newbie 😭
* - ⒤⒞⒰⒭⒰⒪⒦ - Aug 26, 2015
why not just un-infect yourself..
Give that the RAT doesnt inject itself into a windows process your fine.
install a custom firewall to detect which program is trying to conenct to RAT server and stop it from doing so this will also allow you to get the files path and remove the file.
You could also check registry startup or msconfig and remove any startup programs that have been added.
* - code42695379 - Aug 26, 2015
Head over to this section and they will be able to get your VM cleaned.
Malware, Rat, and Virus Removal