Overclock.net › Forums › Software, Programming and Coding › Operating Systems › Windows › Can't remove RAT, please help!
New Posts  All Forums:Forum Nav:

Can't remove RAT, please help!

post #1 of 6
Thread Starter 
Ok so my friend got a RAT and i said she could test it out on me so i downloaded it and ran it, everything worked fine so she removed me from it but now i cant kill the task and remove the file without getting a BSOD.

504

that is the RAT but if i click it i get an instant BSOD. The RAT was blackshades.

Please help someone frown.gif I need to remove it because it keeps trying to close my Firefox and keeps opening Internet Explorer.
Keith.
(15 items)
 
Janet.
(13 items)
 
My PC.
(4 photos)
CPUMotherboardGraphicsRAM
Intel Core i7 2600K [5.0GHz@1.45v] Asus Maximus IV Extreme EVGA GTX 680 Classified 16GB Corsair Vengeance Red 1600Mhz 9-9-9-24 
Hard DriveHard DriveHard DriveCooling
60GB Corsair Force Series 3 SSD 160GB Samsung 7200RPM 1TB Samsung 7200RPM Corsair H100 
OSMonitorMonitorKeyboard
Windows 7 Professional 64Bit 27" Acer S273HLAbmii 19" Samsung SyncMaster 943SN Logitech diNovo Edge 
PowerCaseMouse
Antec High Current Gamer 900W Coolermaster HAF 932 Logitech G300 
CPUMotherboardGraphicsRAM
AMD Phenom II X4 965 @ 4.21Ghz ASUS M4A87TD/USB3 NVIDIA GeForce GTX 460 768MB Corsair 4x2GB DDR3 1333Mhz 
Hard DriveOSMonitorPower
Samsung 160GB, Samsung 1TB Windows 7 Ultimate 64Bit Samsung SyncMaster 943SN Corsair TX650W 
  hide details  
Reply
Keith.
(15 items)
 
Janet.
(13 items)
 
My PC.
(4 photos)
CPUMotherboardGraphicsRAM
Intel Core i7 2600K [5.0GHz@1.45v] Asus Maximus IV Extreme EVGA GTX 680 Classified 16GB Corsair Vengeance Red 1600Mhz 9-9-9-24 
Hard DriveHard DriveHard DriveCooling
60GB Corsair Force Series 3 SSD 160GB Samsung 7200RPM 1TB Samsung 7200RPM Corsair H100 
OSMonitorMonitorKeyboard
Windows 7 Professional 64Bit 27" Acer S273HLAbmii 19" Samsung SyncMaster 943SN Logitech diNovo Edge 
PowerCaseMouse
Antec High Current Gamer 900W Coolermaster HAF 932 Logitech G300 
CPUMotherboardGraphicsRAM
AMD Phenom II X4 965 @ 4.21Ghz ASUS M4A87TD/USB3 NVIDIA GeForce GTX 460 768MB Corsair 4x2GB DDR3 1333Mhz 
Hard DriveOSMonitorPower
Samsung 160GB, Samsung 1TB Windows 7 Ultimate 64Bit Samsung SyncMaster 943SN Corsair TX650W 
  hide details  
Reply
post #2 of 6
Check MSCONFIG, startup folder to see if its in there.

Plus, is "She" your friend or someone you met online? You do realize what a proper RAT would do?
Tiny Iron
(14 items)
 
  
CPUMotherboardGraphicsRAM
Core i5 2500k @ 4.95 1.35v MSI P67A G45 B3 Palit Jetstream GTX 680 4GB Crucial Ballistix Sport 1600MHz 2x4GB 
Hard DriveCoolingOSMonitor
Corsair Force 3 120GB Corsair H100 Windows 7 Ultimate x64 Asus VE278 1920x1080 27" LED 
KeyboardPowerCaseMouse
Logitech G11 Antec Trupower 650W Corsair Carbide 500r Logitech MX518 
Mouse PadAudio
OCZ Behemoth X-Fi Fatal1ty W/ Logitech 5.1 
  hide details  
Reply
Tiny Iron
(14 items)
 
  
CPUMotherboardGraphicsRAM
Core i5 2500k @ 4.95 1.35v MSI P67A G45 B3 Palit Jetstream GTX 680 4GB Crucial Ballistix Sport 1600MHz 2x4GB 
Hard DriveCoolingOSMonitor
Corsair Force 3 120GB Corsair H100 Windows 7 Ultimate x64 Asus VE278 1920x1080 27" LED 
KeyboardPowerCaseMouse
Logitech G11 Antec Trupower 650W Corsair Carbide 500r Logitech MX518 
Mouse PadAudio
OCZ Behemoth X-Fi Fatal1ty W/ Logitech 5.1 
  hide details  
Reply
post #3 of 6
Thread Starter 
It wasn't there frown.gif

And yea she is i trust her and i do because we had a play about with it, its pretty scary stuff.
Keith.
(15 items)
 
Janet.
(13 items)
 
My PC.
(4 photos)
CPUMotherboardGraphicsRAM
Intel Core i7 2600K [5.0GHz@1.45v] Asus Maximus IV Extreme EVGA GTX 680 Classified 16GB Corsair Vengeance Red 1600Mhz 9-9-9-24 
Hard DriveHard DriveHard DriveCooling
60GB Corsair Force Series 3 SSD 160GB Samsung 7200RPM 1TB Samsung 7200RPM Corsair H100 
OSMonitorMonitorKeyboard
Windows 7 Professional 64Bit 27" Acer S273HLAbmii 19" Samsung SyncMaster 943SN Logitech diNovo Edge 
PowerCaseMouse
Antec High Current Gamer 900W Coolermaster HAF 932 Logitech G300 
CPUMotherboardGraphicsRAM
AMD Phenom II X4 965 @ 4.21Ghz ASUS M4A87TD/USB3 NVIDIA GeForce GTX 460 768MB Corsair 4x2GB DDR3 1333Mhz 
Hard DriveOSMonitorPower
Samsung 160GB, Samsung 1TB Windows 7 Ultimate 64Bit Samsung SyncMaster 943SN Corsair TX650W 
  hide details  
Reply
Keith.
(15 items)
 
Janet.
(13 items)
 
My PC.
(4 photos)
CPUMotherboardGraphicsRAM
Intel Core i7 2600K [5.0GHz@1.45v] Asus Maximus IV Extreme EVGA GTX 680 Classified 16GB Corsair Vengeance Red 1600Mhz 9-9-9-24 
Hard DriveHard DriveHard DriveCooling
60GB Corsair Force Series 3 SSD 160GB Samsung 7200RPM 1TB Samsung 7200RPM Corsair H100 
OSMonitorMonitorKeyboard
Windows 7 Professional 64Bit 27" Acer S273HLAbmii 19" Samsung SyncMaster 943SN Logitech diNovo Edge 
PowerCaseMouse
Antec High Current Gamer 900W Coolermaster HAF 932 Logitech G300 
CPUMotherboardGraphicsRAM
AMD Phenom II X4 965 @ 4.21Ghz ASUS M4A87TD/USB3 NVIDIA GeForce GTX 460 768MB Corsair 4x2GB DDR3 1333Mhz 
Hard DriveOSMonitorPower
Samsung 160GB, Samsung 1TB Windows 7 Ultimate 64Bit Samsung SyncMaster 943SN Corsair TX650W 
  hide details  
Reply
post #4 of 6
Hmm, does it run of you log into the computer with another account?

Can you check your appdata folder to see if anything is in there? Check this for all users and your profile.

can you system restore to before it was installed?
Tiny Iron
(14 items)
 
  
CPUMotherboardGraphicsRAM
Core i5 2500k @ 4.95 1.35v MSI P67A G45 B3 Palit Jetstream GTX 680 4GB Crucial Ballistix Sport 1600MHz 2x4GB 
Hard DriveCoolingOSMonitor
Corsair Force 3 120GB Corsair H100 Windows 7 Ultimate x64 Asus VE278 1920x1080 27" LED 
KeyboardPowerCaseMouse
Logitech G11 Antec Trupower 650W Corsair Carbide 500r Logitech MX518 
Mouse PadAudio
OCZ Behemoth X-Fi Fatal1ty W/ Logitech 5.1 
  hide details  
Reply
Tiny Iron
(14 items)
 
  
CPUMotherboardGraphicsRAM
Core i5 2500k @ 4.95 1.35v MSI P67A G45 B3 Palit Jetstream GTX 680 4GB Crucial Ballistix Sport 1600MHz 2x4GB 
Hard DriveCoolingOSMonitor
Corsair Force 3 120GB Corsair H100 Windows 7 Ultimate x64 Asus VE278 1920x1080 27" LED 
KeyboardPowerCaseMouse
Logitech G11 Antec Trupower 650W Corsair Carbide 500r Logitech MX518 
Mouse PadAudio
OCZ Behemoth X-Fi Fatal1ty W/ Logitech 5.1 
  hide details  
Reply
post #5 of 6
Quote:
Originally Posted by Sonics View Post

It wasn't there frown.gif
And yea she is i trust her and i do because we had a play about with it, its pretty scary stuff.

Nice friend applaud.gif

Anyway, try this. It lists all the files (.exe, .dll, etc.) and possible locations and reg entries.

If still having no luck finding, try this or this. Good luck.
post #6 of 6
Thread Starter 
No, i said she could do it and also i know where it is it was in the roaming folder but i cant delete it because its running and if i end the process it gives me a BSOD. frown.gif
Keith.
(15 items)
 
Janet.
(13 items)
 
My PC.
(4 photos)
CPUMotherboardGraphicsRAM
Intel Core i7 2600K [5.0GHz@1.45v] Asus Maximus IV Extreme EVGA GTX 680 Classified 16GB Corsair Vengeance Red 1600Mhz 9-9-9-24 
Hard DriveHard DriveHard DriveCooling
60GB Corsair Force Series 3 SSD 160GB Samsung 7200RPM 1TB Samsung 7200RPM Corsair H100 
OSMonitorMonitorKeyboard
Windows 7 Professional 64Bit 27" Acer S273HLAbmii 19" Samsung SyncMaster 943SN Logitech diNovo Edge 
PowerCaseMouse
Antec High Current Gamer 900W Coolermaster HAF 932 Logitech G300 
CPUMotherboardGraphicsRAM
AMD Phenom II X4 965 @ 4.21Ghz ASUS M4A87TD/USB3 NVIDIA GeForce GTX 460 768MB Corsair 4x2GB DDR3 1333Mhz 
Hard DriveOSMonitorPower
Samsung 160GB, Samsung 1TB Windows 7 Ultimate 64Bit Samsung SyncMaster 943SN Corsair TX650W 
  hide details  
Reply
Keith.
(15 items)
 
Janet.
(13 items)
 
My PC.
(4 photos)
CPUMotherboardGraphicsRAM
Intel Core i7 2600K [5.0GHz@1.45v] Asus Maximus IV Extreme EVGA GTX 680 Classified 16GB Corsair Vengeance Red 1600Mhz 9-9-9-24 
Hard DriveHard DriveHard DriveCooling
60GB Corsair Force Series 3 SSD 160GB Samsung 7200RPM 1TB Samsung 7200RPM Corsair H100 
OSMonitorMonitorKeyboard
Windows 7 Professional 64Bit 27" Acer S273HLAbmii 19" Samsung SyncMaster 943SN Logitech diNovo Edge 
PowerCaseMouse
Antec High Current Gamer 900W Coolermaster HAF 932 Logitech G300 
CPUMotherboardGraphicsRAM
AMD Phenom II X4 965 @ 4.21Ghz ASUS M4A87TD/USB3 NVIDIA GeForce GTX 460 768MB Corsair 4x2GB DDR3 1333Mhz 
Hard DriveOSMonitorPower
Samsung 160GB, Samsung 1TB Windows 7 Ultimate 64Bit Samsung SyncMaster 943SN Corsair TX650W 
  hide details  
Reply
New Posts  All Forums:Forum Nav:
  Return Home
  Back to Forum: Windows
Overclock.net › Forums › Software, Programming and Coding › Operating Systems › Windows › Can't remove RAT, please help!