+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Whitehat • Blue Team • Defensive Security (https://hackforums.net/forumdisplay.php?fid=448)
+---- Forum: Malware, Rat, and Virus Removal (https://hackforums.net/forumdisplay.php?fid=110)
+---- Thread: [Check-Up] Probably ratted. need assistance (/showthread.php?tid=5435601)
Probably ratted. need assistance - CULTSWEGMAFIA - Oct 16, 2016
I've been trying to do important shit for the past 30 minutes and things just keep randomly closing and things like that. I think im ratted. If someone could help me with a checkup i'd appreciate it.
* - ThatCoderX - Oct 16, 2016
Run diagnoses and from there determine what you need to do.
1. Remove any suspicious startup programs and suspicious processes in task manger if you can
2. Run scans from adwcleaner, malwarebytes, nortan power eraser, rouguekiller, Junkwareremovetool, ect. (Just pick one, maybe two)
3. If found, obviously remove the virus and reboot
4. Run Hitmanpro to check for anything else
You can check your outgoing/incoming connections with something like glasswire firewall and block them. You can also do this with command prompt and a bit of tweaking things but glasswire makes it easy. Find the suspicious program running to a suspicious IP and if not already blocked, block it.
Tell me if everything is better after all that.
* - Celph - Oct 16, 2016
Yeah what operating system are you using? Disable suspicious startup items and reboot.
* - r1ngr00t - Oct 19, 2016
If you cant kill a suspicious task, it's probably malicious unless its Windows signed. Use task hacker to find it and its location, then use superantispyware (SAS) to delete it.
* - Null Agent - Oct 22, 2016
Take a look at this tools above.
sevenforums[.]com/tutorials/345808-process-explorer-virustotal-check-all-processes-50-avs.html
technet.microsoft[.]com/en-us/sysinternals/bb896645
* - tobuscus5001 - Oct 26, 2016
Try to use darkcomet rat remover. If that doesn't work, use malwarebytes, kill suspicious tasks, check your appdata and temp folder (if there's a random exe in it, just scan it on virustotal)