Spoof Call and Spoof SMS set any caller ◆ ProxiesFood: Unlimited Residential Proxy ◆ Cheap KYC Verifications & Openups ◆ Anvilpoint CyberOps - Hacker for Hire ◆
Home Upgrade Search Memberlist Extras Hacker Tools Award Goals Help Wiki Contact
Hack Forums Hacks, Exploits, and Various Discussions Whitehat • Blue Team • Defensive Security Malware, Rat, and Virus Removal › RAT on my PC, survived windows reset, any help?

New Reply 

RAT on my PC, survived windows reset, any help?
Flaws.
Flaws. Offline
Arte et Marte
**********
The Brotherhood
Posts:
2,101
Threads:
54
Credibility:
400
Popularity:
525
βytes:
β 27.73
Game XP:
0
Oct 29, 2021 04:42 AM (This post was last modified: Oct 29, 2021 04:43 AM by Flaws..)
Holla,


I've somehow managed to get infected with a RAT on one of my machines, the guys just moving my mouse about and keeps trying to go to different websites. Its pretty funny. But, this gets mad now because whatever RAT it is, I reset windows (But kept files), and the RAT is still there and hes still fucking around on my machine.

Oh, and ESET and Malwarebytes both cant detect anything.

Anything anyone can do to help?
evening chaps
Allelujah
Allelujah Offline
[closed@HF:]
Posts:
5,026
Threads:
331
DO NOT DEAL WITH THIS MEMBER
βytes:
β 0
Game XP:
415
Oct 29, 2021 08:02 AM
What OS are you on? If there's an upgrade, like from macOS 10.14.6 to 11.6 you may have better chances of finding the RAT after upgrading. You could also try completely erasing everything as much as that sucks. If you have a back up you may be able to pull files from that rather than restoring everything.
Bastille
Bastille Offline
🌙 Embrace the darkness 🌙
*****
Infamous
Posts:
14,195
Threads:
213
Credibility:
1300
Popularity:
2,931
βytes:
β 7,158.42
Game XP:
250,000
Oct 29, 2021 01:52 PM
Hi buddy,

Could you save your files and try a full reinstall ?
spyglass
spyglass Offline
Eggs Bacon and Malware
**********
Legends
Posts:
1,972
Threads:
3
Credibility:
3400
Popularity:
1,902
βytes:
β 1,019.35
Game XP:
179,711
Oct 29, 2021 02:01 PM (This post was last modified: Oct 29, 2021 02:33 PM by spyglass.)
(Oct 29, 2021 04:42 AM)Flaws. Wrote:  Holla,


I reset windows (But kept files), and the RAT is still there and hes still fugging around on my machine.

Oh, and ESET and Malwarebytes both cant detect anything.

Anything anyone can do to help?

Hi Flaws.,

This is your problem... (But kept files)
When you do a reinstall make sure to also format the drive you are installing windows on.
[Image: support-green.png]
Sigma
Sigma Away
View all of my HELPFUL THREADS!!
****
HF Ub3r
Posts:
6,724
Threads:
925
Credibility:
2600
Popularity:
1,052
βytes:
β 16.57
Game XP:
29,166
Oct 29, 2021 03:04 PM
(Oct 29, 2021 01:52 PM)Bastille Wrote:  Hi buddy,

Could you save your files and try a full reinstall ?

This would solve your issue.

I would love to see an FRST scan as well if you can provide that.
[Image: qMQpt9c.gif]
tripac
tripac Offline
[user@HF:]
**
HF l33t
Posts:
321
Threads:
30
Credibility:
400
Popularity:
218
βytes:
β 10.08
Game XP:
0
Oct 29, 2021 03:17 PM
Im not expert at this but try running TRON script https://github.com/bmrf/tron
Flaws.
Flaws. Offline
Arte et Marte
**********
The Brotherhood
Posts:
2,101
Threads:
54
Credibility:
400
Popularity:
525
βytes:
β 27.73
Game XP:
0
Oct 30, 2021 03:15 AM (This post was last modified: Oct 30, 2021 03:18 AM by Flaws..)
(Oct 29, 2021 03:04 PM)Sigma Wrote:  This would solve your issue.

I would love to see an FRST scan as well if you can provide that.

Link me to whatever you want me to run or do on the machine and ill happily do it for you, really keen to see what it is

(Oct 29, 2021 08:02 AM)Allelujah Wrote:  What OS are you on? If there's an upgrade, like from macOS 10.14.6 to 11.6 you may have better chances of finding the RAT after upgrading. You could also try completely erasing everything as much as that sucks. If you have a back up you may be able to pull files from that rather than restoring everything.

I'm running windows 10, latest build, cant upgrade to 11 sadly for the stupid reason of it not supporting an i7 6700k

(Oct 29, 2021 01:52 PM)Bastille Wrote:  Hi buddy,

Could you save your files and try a full reinstall ?

I can indeed, but first i think ill get scans out of the way and get some data on what it is

(Oct 29, 2021 02:01 PM)spyglass Wrote:  Hi Flaws.,

This is your problem... (But kept files)
When you do a reinstall make sure to also format the drive you are installing windows on.

Clear and understood buddy, will do
evening chaps
Sigma
Sigma Away
View all of my HELPFUL THREADS!!
****
HF Ub3r
Posts:
6,724
Threads:
925
Credibility:
2600
Popularity:
1,052
βytes:
β 16.57
Game XP:
29,166
Oct 30, 2021 06:04 AM
(Oct 30, 2021 03:15 AM)Flaws. Wrote:  Link me to whatever you want me to run or do on the machine and ill happily do it for you, really keen to see what it is


I'm running windows 10, latest build, cant upgrade to 11 sadly for the stupid reason of it not supporting an i7 6700k


I can indeed, but first i think ill get scans out of the way and get some data on what it is


Clear and understood buddy, will do

https://www.bleepingcomputer.com/downloa...scan-tool/
[Image: qMQpt9c.gif]
Flaws.
Flaws. Offline
Arte et Marte
**********
The Brotherhood
Posts:
2,101
Threads:
54
Credibility:
400
Popularity:
525
βytes:
β 27.73
Game XP:
0
Oct 30, 2021 06:41 AM
(Oct 30, 2021 06:04 AM)Sigma Wrote:  https://www.bleepingcomputer.com/downloa...scan-tool/

Understood, will run it on Monday
evening chaps
Jinu
Jinu Offline
❌⭕️❌⭕️
****
Lions League
Posts:
8,342
Threads:
377
Credibility:
1400
Popularity:
2,284
βytes:
β 46,228.52
Game XP:
29,178
Oct 30, 2021 01:17 PM
A fresh install without old files will resolve your problems very easily.
[Image: 192-BC15-A-BC6-F-43-EA-8-ED4-76-D5-A5847950.gif]
Maadcat
Maadcat Offline
[user@HF:]
**
HF Ub3r
Posts:
459
Threads:
11
Credibility:
300
Popularity:
744
βytes:
β 0
Game XP:
2,847
Oct 30, 2021 01:49 PM
Clean install and do not keep your files (restore), format HDD. Best, if you can, have OS install file in a boot usb key and format by zero your HD and (only after) boot with the key. Sometimes, malware can have trace on bios.

Is possible your file is corruped too, to be sure, dont save. But you can first try with save and you will see...
Flaws.
Flaws. Offline
Arte et Marte
**********
The Brotherhood
Posts:
2,101
Threads:
54
Credibility:
400
Popularity:
525
βytes:
β 27.73
Game XP:
0
Nov 1, 2021 04:54 AM
So, I’ve just done a full reset with a windows USB, didn’t choose to save any files what so ever, the cunt is still here moving my mouse around and typing random shit.

Luckily I have managed to get FRST scans of both before the reset, and after. Will be uploading shortly
evening chaps
Sigma
Sigma Away
View all of my HELPFUL THREADS!!
****
HF Ub3r
Posts:
6,724
Threads:
925
Credibility:
2600
Popularity:
1,052
βytes:
β 16.57
Game XP:
29,166
Nov 1, 2021 06:09 AM
(Nov 1, 2021 04:54 AM)Flaws. Wrote:  So, I’ve just done a full reset with a windows USB, didn’t choose to save any files what so ever, the cunt is still here moving my mouse around and typing random shit.

Luckily I have managed to get FRST scans of both before the reset, and after. Will be uploading shortly

That is strange, a full reset should have easily done the trick because it deletes all system files and restores them. Yes, let me check those ASAP!
[Image: qMQpt9c.gif]
Flaws.
Flaws. Offline
Arte et Marte
**********
The Brotherhood
Posts:
2,101
Threads:
54
Credibility:
400
Popularity:
525
βytes:
β 27.73
Game XP:
0
Nov 1, 2021 01:18 PM (This post was last modified: Nov 1, 2021 01:20 PM by Flaws..)
(Nov 1, 2021 12:08 PM)¹³³⁷ Wrote:  You should try disconnecting from internet so he won't be able to acces to your PC. just a small tips so he won't be able to mess with you anymore.

That is what i have been doing my guy

(Nov 1, 2021 06:09 AM)Sigma Wrote:  That is strange, a full reset should have easily done the trick because it deletes all system files and restores them. Yes, let me check those ASAP!

Here you go dude

http://www.filedropper.com/scans

I've included scans before and after the reset also
evening chaps
Cyber Rick
Cyber Rick Offline
Wubba Lubba Dub Dub!
***
HF V3ndors
Posts:
865
Threads:
40
Credibility:
5900
Popularity:
1,729
βytes:
β 2,196.24
Game XP:
777
Nov 1, 2021 01:20 PM (This post was last modified: Nov 1, 2021 01:21 PM by Cyber Rick.)
You obviously didn't remove all files and fully reset windows. If you did, then it would be a fresh install of windows and wouldn't have malware on it...

The only chance of that happening is if you did do a full reset but put the RAT back on ur PC from lets say a backup of your files.
Next Oldest | Next Newest
New Reply 


Possibly Related Threads...
Thread / Author Replies Views Last Post
by Lifer999May 7, 2025 10:48 PM 25 485 May 7, 2025 10:48 PM
Last Post: jambi117711
by Tha SneakFeb 17, 2025 12:28 AM 0 97 Feb 17, 2025 12:28 AM
Last Post: Tha Sneak
by Fresh KhalifaJan 18, 2018 03:34 PM 3 203 Jan 18, 2018 03:34 PM
Last Post: itzAdamYT