Thread Rating:
  • 1 Vote(s) - 5 Average
  • 1
  • 2
  • 3
  • 4
  • 5
Think I have a RAT on my comp
#15
  • Step 10

    We need to unregister certain services in your system.
    • Open Notepad.
    • Copy and paste the content below.

      Code:
      @echo off
      sc stop EagleXNt
      sc delete EagleXNt
      sc stop McNaiAnn
      sc delete McNaiAnn
      sc stop IlvMoneyDRIVER53
      sc delete IlvMoneyDRIVER53
      sc stop npggsvc
      sc delete npggsvc
      del %0
    • Save it as Fix.bat.
    • Run the file as Administrator.
    • Reboot.
  • Step 11

    Please set Windows XP to show both hidden and system files and folders so that you can find specific files to delete.
    1. Click Start and navigate to My Computer.
    2. On the Tools menu, click on Folder Options.
    3. On the View tab, uncheck the following:
      • Hide file extensions for known file types
      • Hide protected operating system files (Recommended)
    4. Click Yes on the warning message.
    5. Under Hidden files and folders, check Show hidden files and folders.
    6. Click Apply to All Folders.
    7. Click OK and close My Computer.
    Note: I will give you instructions for hiding them again once your system seems clean.
  • Step 12

    We need to do a quick check.
    • Go to 'VirusTotal'.
    • Click Choose File.
    • Copy and paste the exact file name(s) in bold (if there are more than one file listed, please open multiple tabs):
      • c:\windows\Kkexeceweweciqu.bin
    • Click Send.
    • Copy and paste back the link(s) to the result(s) once VirusTotal has finished scanning the file.
  • Step 13

    Download SUPERAntiSpyware.
    • Install it and let it check for updates.
    • Perform a complete scan and let it remove everything it finds.
    • Once done, post the log here and provide the link to this thread.
  • In your next post, please provide the following:
    • A Fresh HijackThis (HJT) Log
    • Deckard's System Scanner (DDS) Logs
      • DDS.txt
      • Attach.txt
    • SUPERAntiSpyware Log
    • VirusTotal Results
  • Format of Response

    Code:
    [color=#00BFFF][b]Step #[/b][/color]
    [color=#FFD700][b]Problems Encountered:[/b][/color]

    [color=#00BFFF][b]Step #[/b][/color]
    [color=#FFD700][b]Problems Encountered:[/b][/color]

    [color=#00BFFF][b]Step #[/b][/color]
    [color=#FFD700][b]Problems Encountered:[/b][/color]

    [color=#00BFFF][b]Link To Requested Logs:[/b][/color]
  • Comments:
    • Update your ESET Smart Security 4.2.
    • Please check whether you have the following installed, and if you do, please uninstall them.
      • McAfee VirusScan
      • McAfee Personal Firewall


Messages In This Thread
Think I have a RAT on my comp - by Brandenx781 - 03-31-2011, 09:10 PM
RE: Think I have a RAT on my comp - by Aridity - 03-31-2011, 10:30 PM
RE: Think I have a RAT on my comp - by Endless™ - 04-01-2011, 06:22 AM
RE: Think I have a RAT on my comp - by r0yaL - 04-01-2011, 06:25 AM
RE: Think I have a RAT on my comp - by Endless™ - 04-01-2011, 06:33 AM
RE: Think I have a RAT on my comp - by Quintus - 04-01-2011, 08:28 AM
RE: Think I have a RAT on my comp - by Quintus - 04-01-2011, 06:05 PM
RE: Think I have a RAT on my comp - by Quintus - 04-01-2011, 08:44 PM
RE: Think I have a RAT on my comp - by Quintus - 04-02-2011, 08:16 AM
RE: Think I have a RAT on my comp - by Quintus - 04-03-2011, 02:54 AM
RE: Think I have a RAT on my comp - by Quintus - 04-03-2011, 10:15 AM
RE: Think I have a RAT on my comp - by Quintus - 04-03-2011, 10:28 AM
RE: Think I have a RAT on my comp - by Quintus - 04-04-2011, 07:42 AM
RE: Think I have a RAT on my comp - by Quintus - 04-05-2011, 03:54 AM
RE: Think I have a RAT on my comp - by Quintus - 04-05-2011, 04:44 AM
RE: Think I have a RAT on my comp - by John* - 04-06-2011, 05:02 AM
RE: Think I have a RAT on my comp - by Quintus - 04-06-2011, 07:48 AM
RE: Think I have a RAT on my comp - by Justin - 04-06-2011, 12:29 PM
RE: Think I have a RAT on my comp - by Deltron - 04-06-2011, 03:41 PM
RE: Think I have a RAT on my comp - by Quintus - 04-08-2011, 03:38 AM
RE: Think I have a RAT on my comp - by codevade - 06-07-2011, 02:07 AM
RE: Think I have a RAT on my comp - by Quintus - 06-07-2011, 06:17 AM

Possibly Related Threads…
Thread Author Replies Views Last Post
  Suspected RAT. TheGeniusism 6 1,913 08-05-2011, 04:39 AM
Last Post: Vexna
  im being told im rat'd? ๖ۣۜDunsparth 20 8,910 07-17-2011, 07:02 PM
Last Post: Pedo bear

Forum Jump:


Users browsing this thread: 2 Guest(s)