Knowing if you have RATs?

So was there a question in there?

Well nothing is impossible I suppose.

But I believe you have done all you can do to insure yourself you are fine in this regard, unlees you want to disconnect from the internet as a final step.

A RAT (remote access tool) is simply one kind of malware. There are also RATs that must be installed manually by someone with physical access to the machine... usually, these are legit apps to allow remote access, and some remote access capabilities are built into the system.

Now, if you are being appropriately cautious, keeping your system up-to-date and have not disabled any of the security features (such as Gatekeeper), then you'd be pretty hard-pressed to get infected with anything, unless someone malicious with physical access installed it. If you're actually running 10.7.5, as your profile indicates, you don't have Gatekeeper, so you're not quite as well protected, but still should be pretty safe.

However, the problem is that, as you say, there's really no way to be entirely sure that you don't have malware of some kind installed. It has to get there in the first place, but if you believe there has been some kind of breach in the security of your system (such as physical access by an untrusted individual or opening a suspicious application), you've got trouble. If there actually has been such a breach, only erasing the hard drive and reinstalling everything from scratch can guarantee your system is clean.

Note, though, that many people tend to get very paranoid and mis-interpret perfectly normal behavior as signs of malware. Don't fall into that trap. If you do, that can easily become a rabbit-hole that you'll never get out of.

For more info on this sort of thing, see my Mac Malware Guide.

Jaiteso wrote:

Hi Thomas, I would like to ask if the statement in your answer "...erasing the hard drive and reinstalling everything from scratch can guarantee your system is clean." still stays true today in 2015.

It really depends on the situation. If someone untrustworthy has had any kind of access to your computer, or if you have installed some types of malware, then yes, that is what would be necessary. On the other hand, if you've just got adware or certain more minor forms of malware, removal is pretty easy. Generally speaking, any malware that can be called a "RAT" would be something that would give the hacker remote access to your computer, and thus removal would require erasing the hard drive.

I used this tutorial on youtube: https://www.youtube.com/watch?v=CE05PY75mW0

and I was wondering if this is was the process you were describing in your answer.

Yes, that's the basic technique. Of course, you'll also want to know how to properly back up your data and then safely restore it to the new, clean system, without "dirtying" it again. See:

How to reinstall Mac OS X from scratch

(Fair disclosure: I may receive compensation from links to my sites, TheSafeMac.com and AdwareMedic.com.)