+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Beginner Hacking (https://hackforums.net/forumdisplay.php?fid=4)
+---- Thread: [RAT] Slaves popping up constantly then disappearing (/showthread.php?tid=5113114)
[RAT] Slaves popping up constantly then disappearing - Dayna - Dec 29, 2015
So i use dark comet, and every 5-15 seconds the same slaves pop up, only i think its a bot because they then disappear, has any one else experienced this and if so, how do you stop it??
Thanks
* - Sheeple - Dec 29, 2015
It's a honey pot you got probably from scanning on VirusTotal
* - Kumara - Dec 29, 2015
Sounds like you got caught in a honeypot.
Usually happens when you/someone scans your virus on a virus scanning site, that redistributes.
The most known scanning site that redistributes is VirusTotal.
* - Dayna - Dec 29, 2015
What does it mean? can i get rid? I know better than to scan on VirusTotal
* - Kumara - Dec 29, 2015
(Dec 29, 2015 08:42 AM)Dayna Wrote: What does it mean? can i get rid? I know better than to scan on VirusTotal
Can't really get rid of it.
They have your stub.
It's connecting to you, on that port.
You can probably close the port and switch ports, but that's just about it, if you want to keep your IP address.
Supposing you're using DarkComet on your home connection.
* - Dayna - Dec 29, 2015
So if i change ports is should stop? Thanks ill try it
* - Kumara - Dec 29, 2015
(Dec 29, 2015 08:44 AM)Dayna Wrote: So if i change ports is should stop? Thanks ill try it
Be sure to close the port they're connecting on.