So I have come across a nifty program that may help some noobies out if they believe they are being ratted or put under some virus.
![[Image: NeO2sE2.png]](https://i.imgur.com/NeO2sE2.png)
Just look for any shady programs and especially using any unusual ports that the program should not be using. Also looking for default ports like 9003 (imminent) and others...
Here is a picture of a rat on my PC.
![[Image: n7AOtBm.png]](https://i.imgur.com/n7AOtBm.png)
yes.exe is obviously not legit and the port is being used by something shady, So lets locate the file (for startup)
![[Image: yp6OwZF.png]](https://i.imgur.com/yp6OwZF.png)
And there is the location for the rat.
This can be done through task manage, but I find this much more easier to manage and use more efficiently.
I hope I helped some newbies, fix there rat/keylogger related problems :)
note: this is not a full tutorial on removal of the rat, this just helps with a temporary solution, there may be startup and injection methods taking place.
Those who wants to download original TCPView program from Microsoft hosted website visit below website URL link.
Download TCPView:
https://technet.microsoft.com/en-us/sysi...s/bb897437
![[Image: NeO2sE2.png]](https://i.imgur.com/NeO2sE2.png)
Just look for any shady programs and especially using any unusual ports that the program should not be using. Also looking for default ports like 9003 (imminent) and others...
Here is a picture of a rat on my PC.
![[Image: n7AOtBm.png]](https://i.imgur.com/n7AOtBm.png)
yes.exe is obviously not legit and the port is being used by something shady, So lets locate the file (for startup)
![[Image: yp6OwZF.png]](https://i.imgur.com/yp6OwZF.png)
And there is the location for the rat.
This can be done through task manage, but I find this much more easier to manage and use more efficiently.
I hope I helped some newbies, fix there rat/keylogger related problems :)
note: this is not a full tutorial on removal of the rat, this just helps with a temporary solution, there may be startup and injection methods taking place.
Those who wants to download original TCPView program from Microsoft hosted website visit below website URL link.
Download TCPView:
https://technet.microsoft.com/en-us/sysi...s/bb897437


![[Image: T2TtNNn.png]](https://i.imgur.com/T2TtNNn.png)