Tenaxiums RAT Remover
With the growing threat of RATS getting in to your system you need a light weight simple tool that will tell you if you are infected. %100 Guaranteed. No RAT can protect from Tenaxiums method of detection and deleting RAT software.
Now remember, this does NOT substitute for a antivirus. It is a simple tool that DOES NOT even scan files, people need to relies that many RATS are FUD, scanning then scanning WILL NOT help.
Im not afraid to share what this tool does, because before you run anything you should always know what it does. This tool simply scans the computers connected to yours. Its that simple. If it finds anything suspicious it will tie the suspicious connection to a program you have or have not download with your consent. It will promt you with the file and a Y/N answer to delete it or not. Its simple huh?
With a program like this their is bound to be false positives, Something like uTorrent for example, if your sharing files, your connected to other computers. Another example of this is Spotify. You can saftly ignore this.
So all that's left is the GUI. To be completely honest im not a GUI person and the GUI sucks. Now to all the skids that cant read a post before downloading a tool the next line message is for you..
=-=-=-=-
IF YOU ARE NOT INFECTED IT WILL IMMEDIATLY CLOSE AND NOT PROMT YOU WITH ANYTHING!!!
=-=-=-=-
That's just the way this program works, sorry.
INFO:
MD5:67611342b33ba8593e4e2156c6cb1d06
SHA1:52b082d6731af805b9c782a8328ec270cffda6cb
Size:416768 bytes
Name:rat-remover-exe
This is very good if it works. I have a feeling I might be RATed.
Will wait for some comments first though.
(Apr 18, 2013 01:02 PM)The Conjurer Wrote: You only have 18 posts and it just seems sketchy to me. I'm uploading it to Anubis to get a scan; will post the results when I get them.
I hate it when people judge me by my posts... you gotta start somewhere right?
(Apr 18, 2013 01:05 PM)Tenaxium Wrote: I hate it when people judge me by my posts... you gotta start somewhere right?
Yes, I know, however we just need to be sure your not just some new guy trying to infect us. Many people is like that. I'm sure you understand.
It seems clean to me, however I would run this in sandboxie first.
http://elementscanner.com//?RE=90a4fc5cc...a32486ffec
(Apr 18, 2013 01:06 PM)Im gone brah Wrote: I will wait until conjurer, tells us if this is legit. Your new.
Btw upload it to Virustotal instead, it got a bigger av list ;)
I tried uploading it to VT, but it gave me an error? I think they got a new update or something because it was bugging out, but ill try again :)
(Apr 18, 2013 01:11 PM)Mrubernub Wrote: ![[Image: efece9ea9b5051f5ce2e2236dc5d0a04.png?1366315851]](https://gyazo.com/efece9ea9b5051f5ce2e2236dc5d0a04.png?1366315851)
safe. Nice, thanks for this.
Off topic: Jeg vil ingenting.
Added virustotal scan because it has more AV's <3
hey nice mrubernub :)
great work and good analysis
thanks for sharing it with us
best regards
(Apr 18, 2013 01:17 PM)/MsfConsole Wrote: hey nice mrubernub :)
great work and good analysis
thanks for sharing it with us
best regards
Thanks, always happy to help the community!
I will try it now. Vouch if this works!
(Apr 18, 2013 01:24 PM)booby Wrote: Virus scan is down? Please fix that.
And here's the virus scan, until he fixes it.
https://www.virustotal.com/en/file/3894d.../analysis/
Ah sorry noobish me, entered the wrong URL, 1 sec ill fix it.
(Apr 18, 2013 01:35 PM)JustCreate Wrote: Its instantly closes for me. Any help please?
Do you know how to read sir? In captital letters on the thread it states:
Quote:Now to all the skids that cant read a post before downloading a tool the next line message is for you..
=-=-=-=-
IF YOU ARE NOT INFECTED IT WILL IMMEDIATLY CLOSE AND NOT PROMT YOU WITH ANYTHING!!!
=-=-=-=-
(Apr 18, 2013 01:39 PM)JustCreate Wrote: I did not read. I apologize for that mistake!
Yeah, its ok happens to a lot of people.
(Apr 18, 2013 01:02 PM)booby Wrote: This is very good if it works. I have a feeling I might be RATed.
Will wait for some comments first though.
The proof is out their now, don't worry.
Ok guys, You can probably trust me now because I am l33t, I hope that's better!
Will this mess up DarkComet that I have up and running or mess up any of the slaves that I have?
|
