I've been Ratted (need advice) (being keylogged as we speak)

[Jkaay]

Hey guys,
I'm pretty sure my pc has been infected with some virus or rat because a few minutes ago i heard some sound through my headset which was loud and lasted about 2 seconds which sounded like some kid yelling into his mic. (no tabs were open playing audio and no programs that play audio other than after effects and skype were open (of course they weren't making the sound).

I'm not sure how this happened but now I can't open windows defender and my wifi was cut off for about 5 minutes and then went back on. I downloaded an antivirus but I doubt that'll be enough so should I factory reset and put my important files on a flash drive? Or is there a better method. please help, thanks.

(I get really paranoid when I drink a lot of caffeine lmao.)

 

[Wvisoecj]

Restart into safe mode with no networking. Uninstall anything that you think is suspicious.

 

[Samuel]

Restart into safe mode with no networking. Uninstall anything that you think is suspicious.

Had to do this with one of my client's Windows servers (they had a shit group policy, one of their users managed to install a virus on their client machine, and due to some weird ass backup thing they had, the server executed the exe). Restarting w/o networking in safe mode is great.

 

[Playboy]

Did you download something from a someone ..?

 

[Paradise]

Type out all your passwords, log into every mail you have. And your paypal/credit card info. youll be more than safe

 

[Jkaay]

Thanks for the advice guys. Currently on my laptop and I went into safe mode from my PC and took all the important programs/files onto an external drive. Couldn't find anything out of the ordinary before I did that, so just to be safe I'm factory resetting.

 

[Tracer]

Thanks for the advice guys. Currently on my laptop and I went into safe mode from my PC and took all the important programs/files onto an external drive. Couldn't find anything out of the ordinary before I did that, so just to be safe I'm factory resetting.

Great, but not great. If it was something like Darkcomet RAT it might have installed on your computer's EFI, meaning that even if you reinstall the OS you're still fucked. Hopefully that didn't happen.

Godspeed.