(Apr 6, 2020 08:07 AM)Yseurk Wrote:  Check the running processes in the taskmanager, run Malwarebytes

(Apr 6, 2020 08:09 AM)InfamousalGT Wrote:  I've already done both. Processes look pretty normal to me and Malwarebytes found nothing.

(Apr 6, 2020 10:59 PM)Knautschtabak Wrote:  You already know the culprit that may have cause an infection. So what you can do is upload said program to a scanner service like Virustotal. Check which AV engine detects it. Use one of those engines to scan your system. The chance getting rid of the infection (if there is any by that file) is higher that way.

(Apr 7, 2020 03:48 AM)Yseurk Wrote:  You intentionally ran a malware on your computer and then you come here to ask help ?

You are looking for help in the white hat section while you are attempting for black hat activities ?!!

May your computer die because of your stupidity

(Apr 7, 2020 08:49 AM)killmenow Wrote:  Looks to me like you actually are infected and that you may have malicious files on your system but maybe not. This is what happens when you executed whatever it was

https://imgur.com/a/MubO6EX

Might want to double check your system friend unless you are aware that these things have happened

P.s > depends who you downloaded limeRat from. If its from nyancats' github page then its clean, if you downloaded from someone else it is most definitely NOT. I dont see why this has created a firewall exclusion or what its for so I doubt you have the legitimate version

(Apr 7, 2020 09:04 AM)InfamousalGT Wrote:  How do you know this was intended for blackhat activities? Think before you post something

---

I did download it from nyan cats github page and did click on a button to add an exclusion to my firewall.

(Apr 8, 2020 02:35 PM)Luffy-_- Wrote:  I'm not an expert or something but i have a small suggestion for you, i don't know if Bastille agree with me , everytime you download a suspicious file try to run it on a virtual machine first

(Apr 7, 2020 12:28 AM)InfamousalGT Wrote:  Virus Total scan
Virus total scan of some kind of program it opened
Its a open source rat. Anything suspicious in there?

(Apr 8, 2020 02:35 PM)Luffy-_- Wrote:  I'm not an expert or something but i have a small suggestion for you, i don't know if Bastille agree with me , everytime you download a suspicious file try to run it on a virtual machine first

(Apr 8, 2020 11:19 PM)Knautschtabak Wrote:  Well, you can weaken security of your system by running it, even if there is no backdoor in the code.
For this one the install locations depend on the settings:
--> installation routine is here: https://github.com/NYAN-x-CAT/Lime-RAT/blob/master/Project/Client/C_Installation.vb
--> default settings for the client: https://github.com/NYAN-x-CAT/Lime-RAT/blob/master/Project/Client/C_Settings.vb

The default path of the malware in DEBUG mode is %TEMP%\Lime\Client.exe. Depending on what your settings were, you need to delete the file, then run Sysinternals Autoruns to remove the run entry (Software\Microsoft\Windows\CurrentVersion\Run\) or the task that references that file. The task is named LimeRAT-Admin no matter the settings.