[compfixing]

Hi there, and thanks for visiting this thread. Today I am going to show you how to check if you're infected with RAT using Netstat. This is a very simple trick to check if you're infected, but I can't guarantee you that this is 100% trusted .
Here we go

1st step - Using taskmanager

1. Open Task Manager by pressing at the same time CTRL+ALT+DEL
2. Then go to process column and click "View" > "Select columns" as the image below



3. Check the first one PID (Process Identifier)
4. Now we will organize Task Manager by "PID" This will make things easier to read for the next step .



That was end of using Task Manager

2nd step - Using Netstat

1. Now we need to open Command Prompt (CMD) by pressing "Windows Key"+R (The windows key is the logo of WINDOWS located in you're keyboard)

2. The "RUN" window will pop-up . Type in "CMD" and press ENTER . Now the Command Prompt will show up .
3. Type netstat -ano

(Only look for ESTABLISHED connections. It would be established if it's a RAT or malicious.) Read the PID and crosscheck into Task Manager.

(if it was in Appdata or Program Files and it is svchost.exe, then you may have a problem)


Credit goes to my friend, ImSecure

[Purkaja]

This is not so affective, like if the hacker was smart he would program it based off a official windows file, like Explorer.exe

[compfixing]

There are many ways to check. This is just one of the fastest ways to do without even having to use any kind of software. You can still use other method to check though.

[Purkaja]

That's very much true, and I really don't trust software that fixes viruses/malwares, unless I know the developer because most of the time it contains what your trying to get rid of in it lol xD

[compfixing]

Exactly, that's why I brought this tutorial here, not very efective though but it's definitely better! ;P

[compfixing]

Exactly, that's why I brought this tutorial here, not very efective though but it's definitely better! ;P

[Purkaja]

Rather safe than sorry lol

[Purkaja]

Rather safe than sorry lol

[soldi3r]

COMFIX nice tut man.. Thanks

[soldi3r]

COMFIX nice tut man.. Thanks