Removing a RAT

[Sniper]

My mom got a RAT on her computer which deleted her system32, and set all her files to read only. Wanting people who know what they are doing, contact me on Discord Sniper#8752. Will mostly likely be able to pay.

 

[Hassan R.]

http://guides.uufix.com/remote-access-trojan-rat-how-to-detect-and-remove-it/
Read this guide and you won't need to pay anyone.

 

[IOJustin]

Is she able to access the internet? And if she downloads a file does it directly turn the file into read-only access?

 

[MTG]

that's not a RAT it's a virus p much[DOUBLEPOST=1528178444][/DOUBLEPOST]also if system32 was deleted you wouldnt be able to boot into windows lol

 

[Sniper]

if it deleted system32 she wouldn't be able to access Windows UI lol

She can only access the area where it's like System Restore etc. and all I can do is p much open CMD. I'm thinking of reflashing windows

 

[FourBitPixel]

you're fucked. you have to do a factory reset since, all files are locked unless you can open a normal text document.
see if you can work around opening a normal text doc and change the properties around. If you can't, you will have to do a fresh install but, if you can, get a hard drive and back up all your files and what ever you have on your machine.[DOUBLEPOST=1528180361][/DOUBLEPOST]FYI, A RAT is a remote Access Trojan which allows an attacker to remotely access the computer stealing credentials, files. It's like a human at a computer machine that has access to everything you have on your computer.

 

[Sniper]

I'm aware.

Isn't the purpose of a RAT to log keys and record data? I wouldn't think a RAT would stop you using your system

After I detected it and starting removing it yes

 

[Sniper]

My mom literally has years of work on it. I think we're going to take it to a techinicis

 

[FourBitPixel]

My mom literally has years of work on it. I think we're going to take it to a techinicis

Coming from a technician, they will come back with the same response. The other option they will try to do is do some anti-malware ONLY if you can keep your computer alive till that time. Once you turn it off, the computer is fucked. They may try using a hard drive dock to get that data but, just comes down to what is the best solution.

FYI, if the data gets lost, that's your mums fault for not backing it up. this might just be a lesson to back data up.

 

[Sniper]

Coming from a technician, they will come back with the same response. The other option they will try to do is do some anti-malware ONLY if you can keep your computer alive till that time. Once you turn it off, the computer is fucked. They may try using a hard drive dock to get that data but, just comes down to what is the best solution.

FYI, if the data gets lost, that's your mums fault for not backing it up. this might just be a lesson to back data up.

computer was turned off. Honestly, I feel like calling the fake tech support number that was always popping up and ask

 

[Scare]

Factory reset

 

[Mooselk]

Worst comes to work use DBan's boot and nuke, and just reinstall windows. https://dban.org/

 

[MarkFreak]

Worst comes to work use DBan's boot and nuke, and just reinstall windows. https://dban.org/

I used DBan myself when I got ratted to Kim Jong Un my harddrive, it took like 15 hours but it was worth it.