Anyone ever find RAT's on customer's machines?

[tankman1989]

I am wondering how many of you are finding Remote Access Trojans (RATS) on customers computers? Do you guys know how to tell if the customer is a RATS victim? I've been looking for some time and I can't find any manual way to do it. DO A/V/Malware programs protect against this?

 

[ATTech]

I have to admit, I went into this thread with a completely different thought as to what it was about...

 

[iisjman07]

I have to admit, I went into this thread with a completely different thought as to what it was about...

LOL. Most commercial and certainly most popular RAT's are detected by antiviruses usually as trojans. Good RAT's with thought and effort involved would probably involve rootkits hiding their presence, so they could well be almost invisible.

 

[BostonGeek1]

I discovered a program made by logmein, that is no longer in production, called logmein scout. It uses logon credentials to scan all pc's on the lan for known remote access products. Its no longer available for download but was VERY VERY useful for finding and removing old remote access software that previous support companies had left behind .

 

[Vicenarian]

One hit with combofix and that was all that was left of him.

 

[JAG Computers]

One hit with combofix and that was all that was left of him.

I laughed good at that!

 

[GreenCycleComputers]

I was just talking in another thread about some Sun Ultra 10's that were brought to us by a military client. They were stored in a warehouse and were so filthy from rats living in them that we were afraid the feces would make us sick. Cleaned it out with a air hose and breathing masks.

 

[tankman1989]

Besides the fact that the topic is pretty humorous, I haven't really heard anyone seriously answer the question. I would think that these trojans would be the most dangerous for clients, especially clients with children. I know a lot of RATs are detectable by AV's and malware detectors but I was reading an article that said there are millions upon millions of current victims.

I would think finding an active RAT on a clients PC would be a very beneficial service and removal could charge a high premium.