Downloaded a "Skype Tool" from an infected account - Mr Meeseeks - Jul 4, 2016
My dumb ass downloaded this "skype tool" from https://hackforums.net/showthread.php?tid=5327735, later the poster said that he was hacked and to not download it, is there any way I can get help removing this tool, I am assuming it is a RAT.
Update: Link to tool has been removed, if you need the link for the download to test/decompile it, PM me please.
* - ProtectNull™ - Jul 4, 2016
Hello I am here to assist you,
Please read these before we start with the procedures,
- Please do not follow any other instructions other than mine, as they can cause conflict between my fixes.
- Please be patient, as you can see I have other people to assist.
- Please consider backing up any important files incase, (usually I will create System Restore Points if needed)
- Please read the instructions carefully, as it can help a lot.
- Do not login to valuable sites such as banking etc.
- It is important that you do the instructions in order. (Up to Down)
[img]http://nilights.info/wp-content/uploads/2014/05/divider.png[/img]
- Please download Junkware Removal Tool to your desktop.
- Shut down your protection software now to avoid potential conflicts.
- Run the tool by double-clicking it. If you are using Windows Vista, 7, or 8; instead of double-clicking, right-mouse click JRT.exe and select "Run as Administrator".
- The tool will open and start scanning your system.
- Please be patient as this can take a while to complete depending on your system's specifications.
- On completion, a log (JRT.txt) is saved to your desktop and will automatically open.
- Post the contents of JRT.txt into your next message.
[img]http://nilights.info/wp-content/uploads/2014/05/divider.png[/img]
Download this here AdwCleaner- Double click on AdwCleaner.exe to run the tool.
- Click on the Scan button.
- When it's done you'll see: Pending: Please uncheck elements you don't want removed.
- Now click on the Report button...a logfile (AdwCleaner[R0].txt) will open in Notepad for review.
- Look over the log especially under Files/Folders for any program you want to save.
- If there's a program you may want to save, just uncheck it from AdwCleaner.
- If you're not sure, post the log for review in pastebin.com and paste link in next reply.
- If you're ready to clean it all up, click the Clean button.
- After rebooting, a logfile report (AdwCleaner[S0].txt) will open automatically.
- Copy and paste the contents of that logfile in your next reply.
- A copy of that logfile will also be saved in the C:\AdwCleaner folder.
[img]http://nilights.info/wp-content/uploads/2014/05/divider.png[/img] - Please download RogueKiller and save the file to your Desktop.
- Right-Click RogueKiller.exe and select Run as Administrator
- Click Scan. Do not use the computer during the scan.
- A log will be created and saved to the root directory. Paste the file contents to pastebin.com and post the link in your next reply.
* - Mr Meeseeks - Jul 5, 2016
The site's spamblocker stopped me from posting all of the logs, I will just post them in pastebin and give you the links:
JRT
http://pastebin.com/F3LsK55n
AdwCleaner
http://pastebin.com/Q6cj3mp2
RogueKiller
http://pastebin.com/SxnuXcV2
* - Codeful - Jul 5, 2016
DELETED_DELETED_DELETED_DELETED_DELETED
* - ProtectNull™ - Jul 6, 2016
(Jul 5, 2016 02:44 AM)Gir_ Wrote: The site's spamblocker stopped me from posting all of the logs, I will just post them in pastebin and give you the links:
JRT
http://pastebin.com/F3LsK55n
AdwCleaner
http://pastebin.com/Q6cj3mp2
RogueKiller
http://pastebin.com/SxnuXcV2
Download this here ESET Online Scanner
- Turn off the real time scanner of any existing antivirus program while performing the online scan.
- Tick the box next to YES, I accept the Terms of Use.
- Click Start
- Make sure that the option Remove found threats is unticked
- Click on Advanced Settings and ensure these options are ticked
- 1) Scan for potentially unwanted applications
- 2) Scan for potentially unsafe applications
- 3) Enable Anti-Stealth Technology
- Click Scan
- Wait for the scan to finish
- If any threats were found, click the 'List of found threats' , then click Export to text file....
- Save it to your desktop, then please copy and paste that log to pastebin and paste the pastebin link to your next reply.
|