[bleep23]

Hey,my pc is infected with RAT (Remote administration tool) which remain after Windows 10 reinstallation.

I've tryed also to scan with few av and anti-spyware programs,but without success.

What to do?

[Advertisements]

Hello, and welcome to GTG Forums.
 
What makes you think that you are still infected?
 
In case of this kind of infection, make sure to do the following:
 
1. Reset your router
2. Change wi-fi password and passwords for all your accounts from a clean machine
3. Make a clean install of the operating system
 
So, if you didn't pass from these steps, you may consider to make another effort. 
 
After that,

Download Farbar Recovery Scan Tool and save it to your desktop. --> IMPORTANT

Note: You need to run the version compatible with your system. If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version.

If your antivirus software detects the tool as malicious, it’s safe to allow FRST to run. It is a false-positive detection.

If English is not your primary language, right click on FRST.exe/FRST64.exe and rename to FRSTEnglish.exe/FRST64English.exe

• Double-click the FRST icon to run the tool. When the tool opens click Yes to disclaimer.
• Press Scan button and wait for a while.
• The scanner will produced two logs on your Desktop: FRST.txt and Addition.txt.
• Please attach the content of these two logs in your next reply.

[DR M]

Hello, and welcome to GTG Forums.
 
What makes you think that you are still infected?
 
In case of this kind of infection, make sure to do the following:
 
1. Reset your router
2. Change wi-fi password and passwords for all your accounts from a clean machine
3. Make a clean install of the operating system
 
So, if you didn't pass from these steps, you may consider to make another effort. 
 
After that,

Download Farbar Recovery Scan Tool and save it to your desktop. --> IMPORTANT

Note: You need to run the version compatible with your system. If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version.

If your antivirus software detects the tool as malicious, it’s safe to allow FRST to run. It is a false-positive detection.

If English is not your primary language, right click on FRST.exe/FRST64.exe and rename to FRSTEnglish.exe/FRST64English.exe

• Double-click the FRST icon to run the tool. When the tool opens click Yes to disclaimer.
• Press Scan button and wait for a while.
• The scanner will produced two logs on your Desktop: FRST.txt and Addition.txt.
• Please attach the content of these two logs in your next reply.

[DR M]

Hello.
 
There are signs related to your Windows activation. Do you have a valid licensed copy of Windows?
 
Let's check that out first.

• Press Windows icon on your Desktop, together with the letter R.
• Type cmd, and press Ctrl + Shift + Enter to run Command Prompt as administrator.
• Copy and paste the following command and press Enter:

slmgr /dli

• After running the command, you will get a report. Please take a screenshot of what you got and attach it in your next reply. Here is an article where you can see how do you take a screenshot with the snipping tool, in case you need it.

[DR M]

This is a malware removal forum only for computers running Windows.

 

In your first post you said that your problem remains even after re-installing Windows. So how you are saying now that you installed Windows to provide logs?

 

If you installed Windows to provide logs, anyway, this won't help you solve your issues. You have to ask for help in a Linux Forum, after you uninstall Windows or activate it with a valid license. 

 

In addition, have in mind that we don't provide help if the operating system is not legally activated, with either OEM or Retail license. A not activated system consists a security risk, and it will give you many issues in the future. Making the long story short, it is a waste of time to clean a not activated operating system, since soon or later it will have issues. 

 

Let me know your thoughts.