[LOBOT]

How does someone check if they have been ratted

[Sheeple]

I like to use Process hacker to check any network connections being made that aren't supposed to be there,however; you can check your outbount connections with Task Manager or run a anti virus scan with malwarebytes, or install an actual anti virus

[PerfectStorm]

I like to use Process hacker to check any network connections being made that aren't supposed to be there,however; you can check your outbount connections with Task Manager or run a anti virus scan with malwarebytes, or install an actual anti virus

I also like to do this as a quick check. Also doesn't hurt to do a shell:startup and check out your files in run. Think OP should change section though.

[LOBOT]

Is this all i can do to check

[5chn4pp]

Please download Farbar Recovery Scan Tool and save it to your Desktop.

Note: You need to run the version compatible with your system. If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version.

• Right click to run as administrator. When the tool opens click Yes to disclaimer.
  


• Press Scan button.
  


• It will produce logs called FRST.txt and Addition.txt in the same directory the tool is run from.
  


• Please copy and paste the logs back here.
  

[LOBOT]

Please download Farbar Recovery Scan Tool and save it to your Desktop.

Note: You need to run the version compatible with your system. If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version.

• Right click to run as administrator. When the tool opens click Yes to disclaimer.
  


• Press Scan button.
  


• It will produce logs called FRST.txt and Addition.txt in the same directory the tool is run from.
  


• Please copy and paste the logs back here.
  

Say I have things that my virus protector would remove if I scanned
How do I manually scan for a rat

[5chn4pp]

Say I have things that my virus protector would remove if I scanned
How do I manually scan for a rat

Are you saying that your antivirus removes the FRST program? If so, disable the real-time scanning and try again.

If you are asking for a manual rat scan, the FRST program is exactly that, a manual scan.

[Hackoo]

Hi ✌
You can also check your PC with AVZ Antiviral Toolkit 😉

[LOBOT]

Yeah but im looking to do a manual check so the virus scanner doesnt remove some files i need

[5chn4pp]

Yeah but im looking to do a manual check so the virus scanner doesnt remove some files i need

FRST scanner will not remove any files in scan mode, only in the fix mode.

[bomberis]

pm me, i could help you easy

[AdmiralHere]

1.) Farbar Scan & Recovery Tool, super easy to use. Youtube is avaliable. Try and disconnect if you believe it's a rat, and disable the adapter. Re-enable this when done. (This is just to make sure you don't reconnect automatically) Delete it with Farbar.

2.) An anti-virus could be helpful but it may be FUD, (fully undetectable).

3.) Check Task Manager / and startup programs. Try and disable anything if you're unsure of the program. After you've FARBARRED it.

4.) Double check everything.

Good luck. :)

[5chn4pp]

1.) Farbar Scan & Recovery Tool, super easy to use.

Wrong, FRST is one of the hardest tools to master and it should only be ran under supervision.

[Carbanak]

Check the connections to your machine and also the startup folder and msconfig. You can check th connections by using the NETSTAT -A command via the Command Prompt.