How to check if you are ratted + how to delete rat (basic guide)

How to check if you are ratted + how to delete rat (basic guide) - Printable Version

+- Sinisterly (https://sinister.ly)
+-- Forum: Hacking (https://sinister.ly/Forum-Hacking)
+--- Forum: Remote Administration & Stress Testing (https://sinister.ly/Forum-Remote-Administration-Stress-Testing)
+--- Thread: How to check if you are ratted + how to delete rat (basic guide) (/Thread-How-to-check-if-you-are-ratted-how-to-delete-rat-basic-guide)

Pages: 1 2

How to check if you are ratted + how to delete rat (basic guide) - YP. - 12-05-2012

Here is a basic guide on how to check if you have been ratted!

]What is a rat and what can it do?
1) Rats give other people permission to control your pc, they can see everything you type including passwords, they have permission to delete files and transfer files onto your pc. They are usually used to hack people.

How to tell if you have been ratted:
1) You clicked run on a webclient and it did not work (could be a java drive by)
2) You accepted files through skype that may contain a dangerous file (even pictures can contain spreaders that will spread the rat to other parts of your computer).
3) Your webcam is randomly flashing on and off.
4) Files are being removed or changed.
5) Your computer's performance has been reduced and you will experience more lag.

Detecting the rat:
1) Most professional hackers will use "Crypters" which make rats un-detectable by an anti virus (unless you have a good paid one like kaspersky).

Removing the rat:
1) if your anti virus picks up a rat then that's an easy solution since you can just delete it. (usually anti viruses pick it up as a trojan.)

Steps to removing a rat manually:

Step 1: Open your start task bar.
[Image: optedl.png]

Step 2: Search for "msconfig". Note: you need to search the whole word "msconfig" or nothing will pop up.
[Image: fbahyt.png]

Step 3: Open up your services tab on the msconfig.
[Image: 21bmb94.png]

Step 4: Disable any connections that are not trusted / you don't know. Usually rats are in the form of .exe

Step 5: Open up the startup tab on the msconfig.
[Image: 2pr5xf8.png]

Step 6: End all the connections that you don't know / trust.

Step 7: Open your start.
[Image: optedl.png]

Step 8: Search for "task manager".
[Image: ibck5v.png]

Step 9: open up the task manager.

Step 10: Go to your process's tab.
[Image: ay64ow.png]

Step 11: End all processes that you have stopped connections to in the msconfig (for example if you stopped a connection to "name.exe" then stop the process called "name.exe" in the task manager.

Other method of removing a rat:

Step 1: Simply format your computer.

Thanks for reading, hope this helped out.
Note: this was a basic guide, i do not want to go into great detail.

PS: i did not create this guide, i asked permission to post it and he said 'idc'
But its a nice useful guide Smile

RE: How to check if you are ratted + how to delete rat (basic guide) - Xeronations - 12-05-2012

If you are willing to add to the guide, you should add Malwarebytes to the "Other methods" portion. It's very effective.

RE: How to check if you are ratted + how to delete rat (basic guide) - Adorapuff - 12-05-2012

RATs are so annoying to catch, but so fun to make :p
Thanks for the share.

RE: How to check if you are ratted + how to delete rat (basic guide) - YP. - 12-05-2012

(12-05-2012, 01:38 AM)Xeronations Wrote: If you are willing to add to the guide, you should add Malwarebytes to the "Other methods" portion. It's very effective.

Ill add it after school Smile

RE: How to check if you are ratted + how to delete rat (basic guide) - Anonymous - 12-05-2012

Honestly this should be posted in a gamer forum since all they tend to download programs to hack their game and such. They would get the most use out of this post! Thanks for sharing its still helpful information to others here.

RE: How to check if you are ratted + how to delete rat (basic guide) - kaiteisbait - 12-05-2012

Very good way Smile

RE: How to check if you are ratted + how to delete rat (basic guide) - Skill - 12-05-2012

Very detailed and simple, going to do this was infected by a rat a while ago, never made sure it was gone lol

RE: How to check if you are ratted + how to delete rat (basic guide) - Mustnabs - 12-05-2012

Thanks for this! I went through and thankfully, I don't have any rats.

RE: How to check if you are ratted + how to delete rat (basic guide) - Xeronations - 12-06-2012

An easy way of telling whether you have a RAT or not is to simply open up your task manager, and to look for a process with a fishy description. In addition to that, 2 common RAT process names are "SearchFilterHost.exe" and "AppLaunch.exe".

RE: How to check if you are ratted + how to delete rat (basic guide) - Ultimatum - 12-06-2012

MSCONFIG is no longer the place to go when you're ratted. Crypters now can hide their startups in neither the startup menu nor MSCONFIG. This guide is old, but well written.

Normally, these RATs are on startup via the registry system which can be checked by typing in "REGEDIT"