How To Escape From RAT ( Remote Admin Tool)

If your computer is infected with a RAT (Remote admin tool – that gives full access to the hacker… e.g. you see your mouse moving automatically. LOL
Do this :

1. open CMD (Start > RUN > type: cmd )

2. Type in: netstat – ano (It shows all ur network accessing process with their PIC (Process Identification Codes)

3. if you see a Text like this > ESTABLISHED with a foreign IP, note down its PIC. It will also show the EXE accessing it.

4. Go to TASK MANAGER (CLTR + ALT + DEL) . Then go to VIEW > Tick PID

5. In the Proccess TAB > just click that PID process EXE file.

6. Now disconnect your internet & scan your whole Computer with SpyBot SD 1.6 & NOD32 v.4

7. Your are virus-free now.

NOTE: you will say why didnt i disconnected internet at Start !! thats cus the RAT virus will also get exit, will come again whn u access the net & netstat needs internet connection ON to show PID.