well this doesnt say anything it just 1 report, we gotta wait for more reports to make sure is backdoored.
[njRat] [ALERT] I downloaded njRAT by the link on HF. HACKED. [UPDATED info] |
(May 20, 2015 03:34 AM)BahNahNah Wrote: Download autoruns and see if there is anything abnormal in your startup (check for things in Appdata/temp) i'm already proceeding as per MRT's instructions. (May 20, 2015 03:39 AM)Wiӏӏiam Wrote: So xVulnerable waited years of hard work to helping people just so he could move your cursor and refresh your pages. I am not here to pick a fight with You or xVulnerables or anybody else. I just posted whatever happened.
You can just use http://malwr.com should work on there to test it.
(May 20, 2015 03:47 AM)240sx Wrote: You can just use http://malwr.com should work on there to test it. What's this? I am supposed to upload the file here? (May 20, 2015 03:48 AM)Dafuq Wrote: What's this? I am supposed to upload the file here? Yes you are fucking supposed to upload file there.. ![]() Do the captcha and click big SELECT FILE button. It's is going to come out as malware probably because it's RAT so there is no point in even uploading it. 🤝 (May 20, 2015 03:45 AM)Dafuq Wrote: I am not here to pick a fight with You or xVulnerables or anybody else. I just posted whatever happened. Yes, I know that but I'm just saying isn't it very unlikely that is was his program? Maybe you were infected for a long time and he has just decided to mess with you now.
May 20, 2015 03:55 AM
(This post was last modified: May 20, 2015 03:56 AM by Dafuq.)
(May 20, 2015 03:50 AM)Wiӏӏiam Wrote: Yes, I know that but I'm just saying isn't it very unlikely that is was his program? I recently installed a new OS on my Laptop. like 3 days back. Since then I have installed just two programs on my system. Firenet VPN and njRAT. Both Today. As soon as I installed njRAT, my screen flickered a little, i thought its nothing. Then I was busy with my phone, and i noticed my mouse moving and HF page refreshing. We all know, spreading with a RAT tool is way easier than spreading with a VPN client. coz VPN means business. I am still considering the possibility that the Client from VPN might be infected. But testing it, showed 0/34 on nodistribute.com (May 20, 2015 03:50 AM)Meow Wrote: Yes you are fucking supposed to upload file there.. Yeah, it is a Malware, hence this is pointless.
May 20, 2015 03:59 AM
(This post was last modified: May 20, 2015 04:00 AM by Memzy135.)
(May 20, 2015 03:20 AM)Meow Wrote: "I want to download malware" 🤣🤣 THATs there because the hosting service that he uploaded it too will take it down if he dont put that...... send the same file that you have dafuq sned it to me ! (May 20, 2015 04:05 AM)Business Wrote: 1. If you post in the white hat section and ask for someone qualified, they will assist you. 1. I did post and I am currently following the steps. 2. yes the mouse was moving, my home page of HF was being refreshed, I was being shown that I am hacked.
wich one did you download 0.7 or 0.6 , i've been using 0.7 and it's clean
edit: njrat is fine theres no backdoor https://malwr.com/analysis/MWViNTA5NmI2N...llOGI2ZmQ/ |
|
|





![[Image: c4d475b470.png]](https://puu.sh/hU1O0/c4d475b470.png)
![[Image: uw2cCW1.gif]](https://i.imgur.com/uw2cCW1.gif)