+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Whitehat • Blue Team • Defensive Security (https://hackforums.net/forumdisplay.php?fid=448)
+---- Forum: Malware, Rat, and Virus Removal (https://hackforums.net/forumdisplay.php?fid=110)
+---- Thread: RAT on my PC, survived windows reset, any help? (/showthread.php?tid=6178869)
Pages: Pages
1
2
RAT on my PC, survived windows reset, any help? - Flaws. - Oct 29, 2021
Holla,
I've somehow managed to get infected with a RAT on one of my machines, the guys just moving my mouse about and keeps trying to go to different websites. Its pretty funny. But, this gets mad now because whatever RAT it is, I reset windows (But kept files), and the RAT is still there and hes still fucking around on my machine.
Oh, and ESET and Malwarebytes both cant detect anything.
Anything anyone can do to help?
RE: RAT on my PC, survived windows reset, any help? - Allelujah - Oct 29, 2021
What OS are you on? If there's an upgrade, like from macOS 10.14.6 to 11.6 you may have better chances of finding the RAT after upgrading. You could also try completely erasing everything as much as that sucks. If you have a back up you may be able to pull files from that rather than restoring everything.
RE: RAT on my PC, survived windows reset, any help? - Bastille - Oct 29, 2021
Hi buddy,
Could you save your files and try a full reinstall ?
RE: RAT on my PC, survived windows reset, any help? - spyglass - Oct 29, 2021
(Oct 29, 2021 04:42 AM)Flaws. Wrote: Holla,
I reset windows (But kept files), and the RAT is still there and hes still fugging around on my machine.
Oh, and ESET and Malwarebytes both cant detect anything.
Anything anyone can do to help?
Hi Flaws.,
This is your problem... (But kept files)
When you do a reinstall make sure to also format the drive you are installing windows on.
RE: RAT on my PC, survived windows reset, any help? - Sigma - Oct 29, 2021
(Oct 29, 2021 01:52 PM)Yseurk Wrote: Hi buddy,
Could you save your files and try a full reinstall ?
This would solve your issue.
I would love to see an FRST scan as well if you can provide that.
RE: RAT on my PC, survived windows reset, any help? - tripac - Oct 29, 2021
Im not expert at this but try running TRON script https://github.com/bmrf/tron
RE: RAT on my PC, survived windows reset, any help? - Flaws. - Oct 30, 2021
(Oct 29, 2021 03:04 PM)Sigma Wrote: This would solve your issue.
I would love to see an FRST scan as well if you can provide that.
Link me to whatever you want me to run or do on the machine and ill happily do it for you, really keen to see what it is
(Oct 29, 2021 08:02 AM)Allelujah Wrote: What OS are you on? If there's an upgrade, like from macOS 10.14.6 to 11.6 you may have better chances of finding the RAT after upgrading. You could also try completely erasing everything as much as that sucks. If you have a back up you may be able to pull files from that rather than restoring everything.
I'm running windows 10, latest build, cant upgrade to 11 sadly for the stupid reason of it not supporting an i7 6700k
(Oct 29, 2021 01:52 PM)Yseurk Wrote: Hi buddy,
Could you save your files and try a full reinstall ?
I can indeed, but first i think ill get scans out of the way and get some data on what it is
(Oct 29, 2021 02:01 PM)spyglass Wrote: Hi Flaws.,
This is your problem... (But kept files)
When you do a reinstall make sure to also format the drive you are installing windows on.
Clear and understood buddy, will do
RE: RAT on my PC, survived windows reset, any help? - Sigma - Oct 30, 2021
(Oct 30, 2021 03:15 AM)Flaws. Wrote: Link me to whatever you want me to run or do on the machine and ill happily do it for you, really keen to see what it is
I'm running windows 10, latest build, cant upgrade to 11 sadly for the stupid reason of it not supporting an i7 6700k
I can indeed, but first i think ill get scans out of the way and get some data on what it is
Clear and understood buddy, will do
https://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/
RE: RAT on my PC, survived windows reset, any help? - Flaws. - Oct 30, 2021
(Oct 30, 2021 06:04 AM)Sigma Wrote: https://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/
Understood, will run it on Monday
RE: RAT on my PC, survived windows reset, any help? - Jinu - Oct 30, 2021
A fresh install without old files will resolve your problems very easily.
RE: RAT on my PC, survived windows reset, any help? - Maadcat - Oct 30, 2021
Clean install and do not keep your files (restore), format HDD. Best, if you can, have OS install file in a boot usb key and format by zero your HD and (only after) boot with the key. Sometimes, malware can have trace on bios.
Is possible your file is corruped too, to be sure, dont save. But you can first try with save and you will see...
RE: RAT on my PC, survived windows reset, any help? - Flaws. - Nov 1, 2021
So, I’ve just done a full reset with a windows USB, didn’t choose to save any files what so ever, the cunt is still here moving my mouse around and typing random shit.
Luckily I have managed to get FRST scans of both before the reset, and after. Will be uploading shortly
RE: RAT on my PC, survived windows reset, any help? - Sigma - Nov 1, 2021
(Nov 1, 2021 04:54 AM)Flaws. Wrote: So, I’ve just done a full reset with a windows USB, didn’t choose to save any files what so ever, the cunt is still here moving my mouse around and typing random shit.
Luckily I have managed to get FRST scans of both before the reset, and after. Will be uploading shortly
That is strange, a full reset should have easily done the trick because it deletes all system files and restores them. Yes, let me check those ASAP!
RE: RAT on my PC, survived windows reset, any help? - Flaws. - Nov 1, 2021
(Nov 1, 2021 12:08 PM)lasski Wrote: You should try disconnecting from internet so he won't be able to acces to your PC. just a small tips so he won't be able to mess with you anymore.
That is what i have been doing my guy
(Nov 1, 2021 06:09 AM)Sigma Wrote: That is strange, a full reset should have easily done the trick because it deletes all system files and restores them. Yes, let me check those ASAP!
Here you go dude
http://www.filedropper.com/scans
I've included scans before and after the reset also
RE: RAT on my PC, survived windows reset, any help? - Cyber Rick - Nov 1, 2021
You obviously didn't remove all files and fully reset windows. If you did, then it would be a fresh install of windows and wouldn't have malware on it...
The only chance of that happening is if you did do a full reset but put the RAT back on ur PC from lets say a backup of your files.