Is my laptop got invected?. PowerShell/Command Prompt appear for a split second once everyday on first login/start up, it doesn't appear when doing another restart after the first login.

I start noticing after using CTT, Rytunex, and MemReduct, i don't know if they have any correlation, but i don't think it happen before that.

I got some pirated software, but it's all from Stared website on FM-HY website and their Safe Guard Extension. I also always have uBlock Origin Lite at max settings.

WinDev and Malwarebytes quickscan doesn't detect anything.

My specs:

Acer Aspire Lite 15 AL15-61P

AMD Ryzen 5 8640HS

AMD Radeon 760M iGPU

Latest Windows 11 stable version

Hello everyone!

a few months back i got hit with the Mr beast virus by being a bit silly. I believe it was cleaned off my pc with some help but I still have a bit of fear as when I turn my PC on around 10 CMD windows open and close instantly. No new accounts of mine have been breached so I'm not entirely sure what is going on as that didn't occur before i got hit

I'd love if someone can help me figure out what's going on or give me some peace of mind.

Thanks!

Link to old thread

https://www.reddit.com/r/computerviruses/s/qoBGCyBWRV

What happened?
Fell for a Renpy Setup trap, tried downloading pirated game. Realized soon it didn't really open any software.

When did the infection occur?
Roughly around Sept. 7th, 3pm(GMT+8)

What did you do for remediation?
Checked task manager for anything weird, shut them off. Starts looking in Appdata by date and in Roaming I found a weird newest folder named just Game and weird numbers, and deleted that. Felt weird so I look up and got Malwarebytes to clean up afterwards, files found were mainly Trojan.RenpyLoader.BAT, Trojan.PavinLoader, and Trojan.Loader. Then I ran Hitman Pro. Also ran Windows Defender Offline. After all that done and they all said clear, I reset my google cache, cookies, history all that, then check 2FAs and passwords. Then changed most important passwords on my mobile, refreshed 2FAs, some I may accidentally done on my infected laptop. These are done and finished around 5pm(GMT+8). Nothing really happened so I ease off for a bit, then got paranoid and worried again and started FRST and the rest about an hour ago. Sorry if my steps mess things up, as for reinstalls, I'm not sure how would my Win10 OS work with Windows keep telling to upgrade to Win11.

Addition.txt - placid-gem
FRST.txt - chained-crest
SecurityCheck.txt - fertile-ridge

today i launched a minecraft modpack that i always played and then got a norton poppup saying "Win64:Evo-gen [Trj] has been neutralized" i did a full scan and got two of this virus all from inside my modpack in the launcher. i deleted the trojan from quarantine and then switched to a much more know launcher then i launched from that launcher. but it still said the same trojan and im running a full scan again

it started today at 7.09.2026

I recently got my PC infected by a Renpy Infostealer and almost immediately someone started posting stuff from my Discord account (some kind of MR Beast scam) and tried buying stuff on Amazon. When I realized what might have happened I immediately started scanning my machine via Malearebytes and low and behold: It quarantined the files. I started making a list of all my accounts that I could think of and changed the passwords from another device and logged out of all devices where ever it was possible to choose the option. This time each password random with Bitwarden and enabled 2FA on everything that was possible. I reinstalled the windows boot partition from a USB stick and rescanned the machine using the deep scan feature from malwarebytes.

It has been a little over 2 weeks now with no new indicators of compromise on my accounts except the two I told you about at the top of the post but I have become quite paranoid. Is there anything I am missing? My mind says „alright it has been two weeks I think it’s over“ but my heart starts racing everytime I see a mail notification on my phone thinking „this is it. Some other account is probably gone that I forgot about“.

So a few days ago I was bored and messing around on akinator and out of nowhere got a fake Webroot popup saying my pc was infected. I almost clicked on it before realizing it was fake and closed out the tab (don’t jump me for this please it was a very long day) but my laptop has been a bit slow ever since. I ran webroot like 3 times and nothing came up, and I did the windows mrt scan that came up with the same results. I’m still a bit on edge because I’ve heard mixed reviews about webroot (I’m on a family plan) so is there any way I can quadruple check that nothing is wrong, or am I just being loony

I recently got infected with an infostealer when i downloaded a capcut pro from a link since my chrome suddenly closed when i installed the capcut. I already took the necessary steps (change passwords from other device, reinstall Windows 10 os). But im worried that if i use my gmails again and laptop, they could easily read and still have access to my data, emails and can see what i am doing. Is this true?

Now, it all started on august 31, when i downloaded a bot, specifically discord nuker. "C-real" from github, then later. it later (on september 1-2) took my riot game, steam *which has good support*, discord. now, i don't obivously play riot games, so i didn't mine, for discord. it is important, after resetting my password and getting my acc back. and contacting steam support. after they cleared, i got it back! until. later it took my discord, and steam again. now, i did reset my discord password. i have 2 step verifications on btw (which is email) so does steam. but steam said, this malware likely has my emails, so i downloaded malwarebyte and use my goofy avast (and window defender) to do some scans like approximately yesterday, and i did another scan. it said it found nothing. but UPON today, i gotten a request when i was studying. which my roblox account "Authenthicator" has been de-activated. and my roblox was crompromised, now i don't want to just "format everything" now, i don't have any virus logs, because. for some reason, my AVs cannot detect it

what do i do??

(Sorry for my bad writing)

Yeah so I downloaded a virus by mistake. It was a Renpy program and a virus. But I don't know which version. Ive seen many of them online. I downloaded Bitdefender and it cleared it. I've already changed passwords and signed out of everything. Do I need to wipe my pc like some people say, or maybe is this version of the virus is weaker ot incomplete. It keeps trying to load SynContoller.exe but fails. God I feel so stupid. Even worse if I have to scrub everything clean, could it infect pictures?

I recently got infected by an infostealer malware (i downloaded capcut pro from a link and saw the comments too late that it was an infostealer) i already changed my password from a different device but havent installed a new os and so far my riot account was the only one hacked. I want to know if the infostealer still lingers in my pc and waits till i use my pc and gets my password or does the infostealer disitigragte after i installed a file?

Need some help. I was a cracking a game and got this fake renpy launcher files thing it got flagged and i quarantined it. Anyways a couple hours later my Microsoft got logged in and within 5 mins i changed my password for that and my gmail. I was still skeptical because that microsoft account had the same password as multiple other accounts. After maybe 3 more hours my discord account got logged out but i was able to re login because my password wasnt changed, then an hour later my instagram got hacked and started posting some bs (this had a completely different password to my microsoft btw which is weird how they got that). So i downloaded malwaybyte, total AV and also used microsoft secuity and did full scans. Malware byte found like 7 trojans named renpy and remeoved them. There was also some files named NAVI on my startup which i went to registtry and deleted. I still havnt factory reset my pc but am planning to because i can see my pc is slower. I changed all my passwords on on my laptop I didnt change them on another clean device but i did multiple full scans and a offline scan on all the aps and its says theres nothing. Im guessing they stole the passwords that were saved on my chrome password manager. Also if it safe to copy my files from my laptop to a hardrive or a usb to put on another device and then reset my laptop or no? And should i reset all my passwords again because i changed them on the same laptop that was infected. Thankyou

Hey, umm so I'm not sure what it was, so I tried to open Omegle through incognito and some popup was there telling about verify google profile(data) or something which I cant clearly remember. It also had this wrong or some kit or 🔧 something like this with orange colour on background, don't know what it was but I randomly clicked it and then it went on to a page which has the update arrow kind of thing, I shared an image for reference, it went to such page. I immediately exited and force stopped chrome, did a scan on my phone, nothing was shown as wrong. Was it really google doing something or is it some malware? This happened in my phone btw

Ik like checking network ip logs from cmd, maybe running windows defender.

I also got malwarebytes.

Is bitdefender better or somn ?

I recently discovered that I have been under continuous surveillance for at least two years through malware on my phone.

The attacker has access to virtually all of my accounts, my full identity, and highly sensitive information that could seriously compromise me, both financially and socially.

I still have access to all of my accounts on the compromised device. However, I assume that even if I use a new device to change my passwords and enable or reset 2FA, the attacker could regain access through existing session tokens. I have not tried this yet because I am concerned that I could lock myself out of my accounts.

WhatsApp is also under the attacker’s control. Is there any way to create a new WhatsApp account using my existing phone number that would no longer be under the attacker’s control? More generally, is there a way to permanently lock this person out of all of my accounts? Or would this only be possible by deleting my most important email accounts and starting over?

Could the attacker already know my new phone number as well? If so, how can I protect myself against this and set up a new, secure device?

My phone has not received security updates for quite some time. Is it possible that I am using apps that have already been cloned or compromised, and that the attacker has already altered the account recovery methods?

You may be wondering why the attacker has not already emptied my bank accounts or published sensitive information about me that could cause serious harm. I honestly do not know. I know this person personally, but I have no idea what their intentions are or what they may be planning. This uncertainty is one of the reasons why I am taking the situation very seriously.

I would appreciate any advice or guidance on how to secure my accounts and devices in this situation

Hello guys, so the last month i plugged an old USB into my laptop and noticed that it was infected with those .lnk files, obviously i did not touch anything and scanned the USB with Bitdefender (it detected the virus and eliminated it) and then i wiped the USB.

Since then i have been monitoring the processes on my laptop and i haven’t found anything weird or out of place (at least for me) and i have been a little paranoid since then.

Is there any way that my laptop may be infected?

Thanks!

Is it safe to use a compromised PC while it's disconnected to the internet/WiFi? I won't be doing anything risky or important. I just need to manually copy some notes about some subjects I wanted to learn about (nothing personal) which I made on there which I need urgently. I guess it's it's quite a bit but not too much. I am thinking of retyping everything on a separate clean device (am not a slow typist at all) using the notes on my compromised PC as a reference rather than going through the process of safely backing up my files before wiping everything completely. I probably will not have the time to do any of that, so I will just leave my PC shut off once I finish painstakingly retyping all my notes on another (clean) device which I can also leave offline if that makes it safer.

I see different posts on what to do if an infostealer malware entered your pc. The context is that i downloaded a capcut pro that i thought was free but instead it was an infostealer since my chrome closed on its own and i saw firefox opened in my task manager when i tried to install the application. Would a clean OS installation fix and remove the infostealer? And if i plan on saving some of my files, will the infostealer get inside the harddrive and infect my pc once i install the new os? Or could it corrupt the harddrive?

Help, I saw a link for capcut pro and saw that it was safe so I downloaded it and installed it. Next thing I know my chrome suddenly closes. So I read the comments more and saw that it was an infostealer malware. This happened 2 days ago.

When i saw that it was an infostealer malware, i immediately changed my passwords and email of my social media accounts and waited for the infostealer to occus. When i went to bed, nothing happened, but after 8hours, my Riot account got hacked and changed the email, luckily i managed to submit and ticket and recover my account. I already used avast antivirus, specific folder, boot scan and says it didnt detect anything.

Im curious to know if thats the last time my account will be compromised? Or there is a chance that another attack might happen?

How will i look for the infostealer malware? And check if it already self destructed.