Hello everyone,Happy Eid Kabir To all My Moslim brothers.



I'm going to make a quick tutorial on how to check if you are infected through the method of TCP connection viewing, basically you will be checking if there are any strange connections to your PC.

That which would be the hacker's connection to your PC via his RAT(The Remote Administration. Tools) or virus. So let's get started, you won't need to download anything for this Tutorial.




1. Open the Start Menu and do either of the options:


*.Windows XP and Lower: Open Run and type CMD and press OK.

*.Windows Vista, Windows 7 and Higher: Search CMD and open it.Once you are in CMD, you will want to type this in to your command prompt


Code: Netstat -nb

Now basically what you want to do is check for thesame IP multiple times and if it says Established, now this does not always mean you are infected.

Removing A RAT/Virus:


1. You will first want to run a full scan with any AV, I recommend MalwareBytes or BitDefender, this step is like the base, the coating before you start the full removal process.



2. Now you want to press your Startkey and search "%Appdata%" and click on "Roaming", once there you will want to scroll down and look for any suspicious files and delete them.


3. Hold CTRL+Shift+Esc to open Task Manager and look for any suspicious process's, right click them and click end process.

4. Try step two again but this time in "%Temp%", also note that you should only delete .Exe and Jar executable files, check suspicious named folders as some viruses can save themselves in directories too.



5. Open CCleaner, press "Analyze" and "Run Cleaner"



6. Go to Registry Tab, scan for issue and click Fix Selected Issues



7. Go to tool>uninstall andremove anything suspicious/unnecessary files.



8. Go to Startup and Disable, then Delete anything suspicious from it.


9. Now just restart your computer and do the netstat again and you should be good to go!