[Pepponi Son]

Hello everyone, my laptop was recently infected with a keylogger/RAT so my friend told me to restore it to factory settings, I'm wondering if this really would work? Legitimate answers please, thank you.

[Advertisements]

I suggest you read the 'Start Here' topic found here. With these self-help tools you have a high chance of fixing the problems on your own. If you are still having problems after following Step 3 of the guide, continue with Step 4 and 5 and post in the Malware Forum. If you are unable to run any programs, Please create a topic stating what you have tried so far and that you are unable to run any programs. Also, Please do NOT post the logs in this thread.

If you are still having issues after the malware expert gives you a clean bill of health, Please return to THIS thread and we will pursue other options to help you solve your current problem(s).
Add a link to this topic so that malware tech can see what steps have been taken here

[rshaffer61]

I suggest you read the 'Start Here' topic found here. With these self-help tools you have a high chance of fixing the problems on your own. If you are still having problems after following Step 3 of the guide, continue with Step 4 and 5 and post in the Malware Forum. If you are unable to run any programs, Please create a topic stating what you have tried so far and that you are unable to run any programs. Also, Please do NOT post the logs in this thread.

If you are still having issues after the malware expert gives you a clean bill of health, Please return to THIS thread and we will pursue other options to help you solve your current problem(s).
Add a link to this topic so that malware tech can see what steps have been taken here

[Pepponi Son]

Before I start attempting to fix things on my own I was wondering if it was possible to fix the issue with a restore to factory settings, when I did it before it said


"Reformatting Windows partition of your Hard Drive"

"Installing original software"

I'm guessing it would resolve the issue correct?

[rshaffer61]

That all depends on what the infection you have does. I cannot assist with that as only the trained Malware techs can do that.
I can tell you there are some infections that a simple format and install will not clear up the problem.
You will not be fixing things on your own but have the precise instructions from a malware tech with specific programs to help you. If you need clarification feel free to ask them and they will do their best to explain the steps for you.

[Pepponi Son]

That all depends on what the infection you have does. I cannot assist with that as only the trained Malware techs can do that.
I can tell you there are some infections that a simple format and install will not clear up the problem.
You will not be fixing things on your own but have the precise instructions from a malware tech with specific programs to help you. If you need clarification feel free to ask them and they will do their best to explain the steps for you.

Would it take care of a keylogger or a RAT?

[rshaffer61]

It again depends on the type.
A RAT as you call it along with a keylogger can be handled with the malware techs normally.
The point is why go through a format and reinstall with the loss of your data if it is not needed.

[Pepponi Son]

It again depends on the type.
A RAT as you call it along with a keylogger can be handled with the malware techs normally.
The point is why go through a format and reinstall with the loss of your data if it is not needed.

I don't have much important on this laptop and what is I already put on a external hard drive, I just want to know if I can take care of it with a restore to factory settings rather than spending so much time attempting to find it and remove it.

[rshaffer61]

I can't guarantee a factory restore would resolve the issue but if it doesn't you can always then go the Malware direction.

[Pepponi Son]

I can't guarantee a factory restore would resolve the issue but if it doesn't you can always then go the Malware direction.

Alright, it's certain to wipe my computer completely, you're just unsure if the malicious content would remain?

[rshaffer61]

Correct restoring to factory settings will format and reinstall everything just as it was when you bought the system brand new.
By wiping completely it will wipe the OS drive normally the C drive. Using a hidden recovery partition it will then re-image the drive from a image file that was placed there from the factory with your original OS and all your drivers.
Now this means you will have to do all the Windows updates including but not limited to the SP upgrades. Also any programs you installed will have to be reinstalled. Any driver updates will also have to be redone.
I hope this answers the factory installation part of the issue. As i said worst case scenario if the infection does not clear you will have to go back to post 2 and follow the instructions there.

[Pepponi Son]

Correct restoring to factory settings will format and reinstall everything just as it was when you bought the system brand new.
By wiping completely it will wipe the OS drive normally the C drive. Using a hidden recovery partition it will then re-image the drive from a image file that was placed there from the factory with your original OS and all your drivers.
Now this means you will have to do all the Windows updates including but not limited to the SP upgrades. Also any programs you installed will have to be reinstalled. Any driver updates will also have to be redone.
I hope this answers the factory installation part of the issue. As i said worst case scenario if the infection does not clear you will have to go back to post 2 and follow the instructions there.

Alright thanks for all of the help mate.

[rshaffer61]

I will await your results before we call this topic closed just in case.

[Pepponi Son]

I will await your results before we call this topic closed just in case.

Alright I restored it and it said preparing your computer for first use, then made me reconfigure the internet to it and create a user. I'm guessing it is completely wiped as of now?

[rshaffer61]

Yep everything is now as it was when the system left the factory.
How is it running now and do you still see any signs of the issue?