Hack Forums
[Infected] Downloaded a "Skype Tool" from an infected account - Printable Version

+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Whitehat • Blue Team • Defensive Security (https://hackforums.net/forumdisplay.php?fid=448)
+---- Forum: Malware, Rat, and Virus Removal (https://hackforums.net/forumdisplay.php?fid=110)
+---- Thread: [Infected] Downloaded a "Skype Tool" from an infected account (/showthread.php?tid=5327752)



Downloaded a "Skype Tool" from an infected account - Mr Meeseeks - Jul 4, 2016

My dumb ass downloaded this "skype tool" from https://hackforums.net/showthread.php?tid=5327735, later the poster said that he was hacked and to not download it, is there any way I can get help removing this tool, I am assuming it is a RAT.


Update: Link to tool has been removed, if you need the link for the download to test/decompile it, PM me please.


* - ProtectNull™ - Jul 4, 2016

Hello I am here to assist you,

Please read these before we start with the procedures,
  • Please do not follow any other instructions other than mine, as they can cause conflict between my fixes.

  • Please be patient, as you can see I have other people to assist.

  • Please consider backing up any important files incase, (usually I will create System Restore Points if needed)

  • Please read the instructions carefully, as it can help a lot.

  • Do not login to valuable sites such as banking etc.

  • It is important that you do the instructions in order. (Up to Down)



[img]http://nilights.info/wp-content/uploads/2014/05/divider.png[/img]

  • Please download Junkware Removal Tool to your desktop.

  • Shut down your protection software now to avoid potential conflicts.

  • Run the tool by double-clicking it. If you are using Windows Vista, 7, or 8; instead of double-clicking, right-mouse click JRT.exe and select "Run as Administrator".

  • The tool will open and start scanning your system.

  • Please be patient as this can take a while to complete depending on your system's specifications.

  • On completion, a log (JRT.txt) is saved to your desktop and will automatically open.

  • Post the contents of JRT.txt into your next message.


[img]http://nilights.info/wp-content/uploads/2014/05/divider.png[/img]

Download this here AdwCleaner
  • Double click on AdwCleaner.exe to run the tool.

  • Click on the Scan button.

  • When it's done you'll see: Pending: Please uncheck elements you don't want removed.

  • Now click on the Report button...a logfile (AdwCleaner[R0].txt) will open in Notepad for review.

  • Look over the log especially under Files/Folders for any program you want to save.

  • If there's a program you may want to save, just uncheck it from AdwCleaner.

  • If you're not sure, post the log for review in pastebin.com and paste link in next reply.

  • If you're ready to clean it all up, click the Clean button.

  • After rebooting, a logfile report (AdwCleaner[S0].txt) will open automatically.

  • Copy and paste the contents of that logfile in your next reply.

  • A copy of that logfile will also be saved in the C:\AdwCleaner folder.


[img]http://nilights.info/wp-content/uploads/2014/05/divider.png[/img]
  • Please download RogueKiller and save the file to your Desktop.

  • Right-Click RogueKiller.exe and select Run as Administrator

  • Click Scan. Do not use the computer during the scan.

  • A log will be created and saved to the root directory. Paste the file contents to pastebin.com and post the link in your next reply.





* - Mr Meeseeks - Jul 5, 2016

The site's spamblocker stopped me from posting all of the logs, I will just post them in pastebin and give you the links:

JRT
http://pastebin.com/F3LsK55n

AdwCleaner
http://pastebin.com/Q6cj3mp2

RogueKiller
http://pastebin.com/SxnuXcV2


* - Codeful - Jul 5, 2016

DELETED_DELETED_DELETED_DELETED_DELETED


* - ProtectNull™ - Jul 6, 2016

(Jul 5, 2016 02:44 AM)Gir_ Wrote:  The site's spamblocker stopped me from posting all of the logs, I will just post them in pastebin and give you the links:

JRT
http://pastebin.com/F3LsK55n

AdwCleaner
http://pastebin.com/Q6cj3mp2

RogueKiller
http://pastebin.com/SxnuXcV2

Download this here ESET Online Scanner
  • Turn off the real time scanner of any existing antivirus program while performing the online scan.

  • Tick the box next to YES, I accept the Terms of Use.

  • Click Start

  • Make sure that the option Remove found threats is unticked

  • Click on Advanced Settings and ensure these options are ticked

  • 1) Scan for potentially unwanted applications

  • 2) Scan for potentially unsafe applications

  • 3) Enable Anti-Stealth Technology

  • Click Scan

  • Wait for the scan to finish

  • If any threats were found, click the 'List of found threats' , then click Export to text file....

  • Save it to your desktop, then please copy and paste that log to pastebin and paste the pastebin link to your next reply.