I have a RAT

Discussion in 'macOS' started by Aezurhvin, Oct 4, 2017.

  1. Aezurhvin macrumors newbie

    Aezurhvin

    Joined:
    Oct 4, 2017
    Location:
    Denmark
    #1
    So my Macbook pro was hacked with a RAT.
    I was advised to boot it with a usb containing a clean install, format the HD and reinstall.
    So I did.

    Now when I booted after a couple of days, a guest account was suddenly created and visible in the login menu.
    The same happened when the RAT was in there (for some reason they/he think its funny)

    I did not activate any guest accounts.

    How the heck do you get a RAT out of your system?
     
  2. Lexi_Hayes macrumors newbie

    Lexi_Hayes

    Joined:
    Sep 4, 2017
    Location:
    London
  3. Aezurhvin thread starter macrumors newbie

    Aezurhvin

    Joined:
    Oct 4, 2017
    Location:
    Denmark
    #3
    Doesn't help. Its a cowardly RAT, with absolutely no life. Its staying put. Maybe 'cause it knows when I catch it, it will be exterminated ;)
     
  4. darngooddesign macrumors G3

    Joined:
    Jul 4, 2007
    Location:
    Atlanta, GA
  5. Aezurhvin thread starter macrumors newbie

    Aezurhvin

    Joined:
    Oct 4, 2017
    Location:
    Denmark
    #5
    What should that help?
     
  6. flyinmac macrumors 68040

    flyinmac

    Joined:
    Sep 2, 2006
    Location:
    United States
    #6
    Think it was a Cat joke.
     
  7. Aezurhvin thread starter macrumors newbie

    Aezurhvin

    Joined:
    Oct 4, 2017
    Location:
    Denmark
    #7
    But if the RAT won’t come out. What good is a CAT?
     
  8. flyinmac macrumors 68040

    flyinmac

    Joined:
    Sep 2, 2006
    Location:
    United States
    #8
    There is always extermination. A little dynamite goes a long way. Recommend putting the computer outside somewhere first.
     
  9. jameshenderson macrumors newbie

    jameshenderson

    Joined:
    Aug 20, 2011
    Location:
    Oxford
    #9
    The guest account seems to be always enabled by default.

    To remove it, go to System preferences" then "Users and groups".

    From there, click on the padlock and enter your password. Then select "Guest user" and remove the checkmark by "allow guests to log in to this computer". ...you will need to be an admin to do this.

    James.
     

Share This Page

8 October 4, 2017