I recently discovered that my PC has been compromised by a RAT (Remote Access Trojan) that started typing threats and insults on my screen. After realizing the issue, I immediately shut it down and performed a factory reset. I even unplugged my Ethernet connection. However, when I restarted my PC and opened the command prompt to bypass network setup, the RAT continued to send more insults and threats. Is there a reliable way to completely remove this RAT so I can game worry-free?
Update: I've managed to fix the issue! It turned out that someone had hacked my keyboard and mouse drivers. I unplugged my keyboard, uninstalled the drivers, and then reinstalled them. Now everything is working fine again!
6 Answers
It's hard to believe someone can still control your PC if you’ve disconnected the internet. It's more likely that someone in your vicinity has a wireless keyboard and is just messing with you, or perhaps you misjudged the situation.
Make sure to inspect any USB cables you have plugged in. If your keyboard or mouse has removable cables, check those too. Be wary of any USB cables that could give someone wireless access—they're sneaky and can be dropped near your workspace.
For complete peace of mind, think about physically removing the hard drive (unless it's soldered) and replacing it with a new one. You could destroy the old one—drill through it or soak it in water for a week; that way, you’re sure any remnants are gone.
Don’t forget to check for any Bluetooth devices connected to your system, as the RAT could be using those too. If you see any, it’s a good idea to turn off Bluetooth to cut off any rogue connections.
If a RAT is still present after a factory reset, the best move is to use a second computer to create a Windows installation media on a USB drive. Then, format and reinstall Windows on your system. Also, make sure there's nothing suspicious plugged into your computer, especially inside the case—check for any internal USB ports with unidentified devices.
I just did that—hope it works! Let me know if you find any other helpful steps.