You are viewing our Forum Archives. To view or take place in current topics click here.
How to remove RAT from computer
Posted:

How to remove RAT from computerPosted:

-Manga
  • Resident Elite
Status: Offline
Joined: May 23, 201310Year Member
Posts: 259
Reputation Power: 9
Status: Offline
Joined: May 23, 201310Year Member
Posts: 259
Reputation Power: 9
Norton found it it says. Threat name W32.shadesrat. How do i delete it now. When i try to delete it it comes back HELP1
#2. Posted:
Taurus
  • Wise One
Status: Offline
Joined: Apr 12, 201113Year Member
Posts: 544
Reputation Power: 22
Status: Offline
Joined: Apr 12, 201113Year Member
Posts: 544
Reputation Power: 22
if norton cant remove it, then you might be screwed. take it to geek squad, RAT's are a bad thing to have on your computer. if i was you i wouldnt even turn it on till you get it fixed
#3. Posted:
Dun
  • TTG Senior
Status: Offline
Joined: Aug 21, 201013Year Member
Posts: 1,635
Reputation Power: 86
Status: Offline
Joined: Aug 21, 201013Year Member
Posts: 1,635
Reputation Power: 86
This post seems to be very informative on RATs, https://www.thetechgame.com/Forums/t=6817348/what-is-an-rat-information.html.

Try following the steps to remove a RAT on that post and see if you have any luck.
#4. Posted:
Noivern
  • Resident Elite
Status: Offline
Joined: Sep 29, 201112Year Member
Posts: 215
Reputation Power: 11
Status: Offline
Joined: Sep 29, 201112Year Member
Posts: 215
Reputation Power: 11
RATs are very bad i had one on my computer before but if you cant get rid of it i wouldn't recommend turning it on and get assistance from a professional. But i would try looking at the post above from Dun first.
#5. Posted:
Jaxs
  • TTG Addict
Status: Offline
Joined: Feb 22, 201014Year Member
Posts: 2,221
Reputation Power: 88
Status: Offline
Joined: Feb 22, 201014Year Member
Posts: 2,221
Reputation Power: 88
Looks like my boy was hit by BlackShades, I highly suggest turning off webcams if you have them connected.

In order to remove a RAT, you'll have to inspect your startup entries, not only the ones via msconfig, but all of them with tools such as Autoruns from Sysinternals Suite. After that, you'll have to see what programs these startup entries call and if they look suspicious, you delete them. Basically, a good clean up of AppData\Local and Roaming (LocalLow too if you want) is needed when you're infected with a RAT. You have to make sure that every folder in these location are trustworthy. You will have to uncheck the folder option to "Hide system files and folders (recommended)" too in order to see system hidden files. On top of that, check the Start-Up location in the Start menu is a good idea too.
#6. Posted:
Taurus
  • Wise One
Status: Offline
Joined: Apr 12, 201113Year Member
Posts: 544
Reputation Power: 22
Status: Offline
Joined: Apr 12, 201113Year Member
Posts: 544
Reputation Power: 22
DrHung wrote if norton cant remove it, then you might be screwed. take it to geek squad, RAT's are a bad thing to have on your computer. if i was you i wouldnt even turn it on till you get it fixed


why did i get so much hate on my comment, you guys are mean. try to help and get three down votes, whats up with that
#7. Posted:
r00t
  • Administrator
Status: Offline
Joined: May 18, 201112Year Member
Posts: 16,357
Reputation Power: 24341
Status: Offline
Joined: May 18, 201112Year Member
Posts: 16,357
Reputation Power: 24341
DrHung wrote
DrHung wrote if norton cant remove it, then you might be screwed. take it to geek squad, RAT's are a bad thing to have on your computer. if i was you i wouldnt even turn it on till you get it fixed


why did i get so much hate on my comment, you guys are mean. try to help and get three down votes, whats up with that

Because "take it to Geek Squad" comments don't help and will probably lead to OP having to shell out for things he doesn't need. He's asking for help on a forum site so he can find out how to fix it himself. Norton is also an antivirus and is not able to address every problem.
Jump to:
You are viewing our Forum Archives. To view or take place in current topics click here.