+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Blackhat • Red Team • Offensive Security (https://hackforums.net/forumdisplay.php?fid=447)
+---- Forum: Remote Administration Tools (https://hackforums.net/forumdisplay.php?fid=114)
+---- Thread: Uninstall RAT off victim's computer without traces? (/showthread.php?tid=5180605)
Uninstall RAT off victim's computer without traces? - Cryptium - Feb 22, 2016
So I'm looking for a way to uninstall my RAT remotely off my victim's computer and leave no traces. Maybe burn the location of the rat using a cmd command with a timeout? I'd like to hear your ideas, I've got some of my own but maybe some of you could lighten me and show me a better alternative.
* - NoodleBot™ - Feb 22, 2016
Even after using the uninstall option, traces will be left behind such as the original files metadata, registry paths if it used or modified any, etc.
None of these rats would do that properly IMO.
* - DingusMonster - Feb 22, 2016
What I would do is go into the file manager first try to delete any saved startup rats in the Appdata and temp folders. But yeah as NoodleBot said, there's still going to be little permanent marks, but I wouldn't worry unless you get in trouble
* - CRT - Feb 22, 2016
If you used a VPN you wouldnt have anything to worry about.
* - DingusMonster - Feb 22, 2016
(Feb 22, 2016 05:56 PM)Curt. Wrote: If you used a VPN you wouldnt have anything to worry about.This is true as well
* - netspro - Feb 22, 2016
(Feb 22, 2016 05:56 PM)Curt. Wrote: If you used a VPN you wouldnt have anything to worry about.
what if the vpn has dns and leaks
op just bsod the pc no trace :)
* - talal33 - Feb 23, 2016
use no logs vpn 'ra4w,143vpn' and in the network card of ur vpn and ur default network adapter, go to ipv4 => dns.
Use this one, it's yandex dns 'russia'. because russia dsn't leak informations to other authorities.
* YANDEX DNS '77.88.8.88,77.88.8.2'
Don't use the same services as the country u're hacking.
And test ur dns in this website: 'https://ipleak.net/ , https://www.dnsleaktest.com/'