Hack Forums
Could this potentially mean a RAT? - Printable Version

+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Whitehat • Blue Team • Defensive Security (https://hackforums.net/forumdisplay.php?fid=448)
+---- Forum: Malware, Rat, and Virus Removal (https://hackforums.net/forumdisplay.php?fid=110)
+---- Thread: Could this potentially mean a RAT? (/showthread.php?tid=5662989)



Could this potentially mean a RAT? - Wαlrυѕ - Jul 5, 2017

About a week ago, I got a random folder on my desktop with a name that looks like the image below. If the full name matters, let me know. I am not sure where it came from but it looks kinda sketchy. It has some files from another user on my PC. I just noticed it a few mins before posting this.

Does anyone know if this is a RAT (possibly used like this for file transfer) or a windows/program feature that anyone is aware of? I did run a fishy looking file the other day, but it only had 3-4 no-named AV's plus nothing in sandboxie when I initially ran it.

[Image: nCn8Bes.png]


* - 5chn4pp - Jul 5, 2017

There is no way to know without logs, do this and I'll check your computer.

Please download Farbar Recovery Scan Tool and save it to your Desktop.

Note: You need to run the version compatible with your system. If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version.
  • Right click to run as administrator. When the tool opens click Yes to disclaimer.

  • Press Scan button.

  • It will produce logs called FRST.txt and Addition.txt in the same directory the tool is run from.

  • Please copy and paste the logs back here.





* - Wαlrυѕ - Jul 5, 2017

I sent it to you through PM. Let me know if anything looks suspicious.


* - bologama - Jul 10, 2017

This possibility of Malware, some malware make copy and duplicate of files and folder. Mostly excel, rar and zip files infected.


* - 5chn4pp - Jul 10, 2017

(Jul 10, 2017 04:52 AM)bologama Wrote:  This possibility of Malware, some malware make copy and duplicate of files and folder. Mostly excel, rar and zip files infected.

Based on what source?


* - d4rk_shadow - Jul 10, 2017

if that was malware that folder'd be hidden


* - Wαlrυѕ - Jul 10, 2017

alright this is dumb. closing the thread