05-08-2011, 03:01 PM
(05-08-2011, 02:51 PM)Carbon Nox Wrote: Since DarkComet provides MSConfig disable and other annoying features. If you are infected you would be unable to preform these tasks. The best way to remove a infection is prevention; for example moving to a new OS like Ubuntu. Or not visiting untrusted site and running downloads from strangers. If you do find yourself infected, disconnect from the internet boot into safe mode and run some scans. Then on a clean PC report to the HJT + Change your passwords. With a virtual keyboard if possible. Also remember to set recovery questions.
Well really thats why we have got safe mode, and yes, RATs can get detected by AVs and Anti-Spyware progs as well. This is one of these worst tutorials on how to fully remove a RAT