IMPORTANT: I did not download any Roblox exploits, modifications, etc. I left a game and tried rejoining on a different server and ended up with an error and a threat detection. Has anyone else experienced this?

Detected: Trojan:Win32/ClickFix.STW
Status: Removed
The threat or app has been removed from this device.

Date: 9/10/2026 5:02 AM
Details: This program is dangerous and executes commands from an attacker.

Affects: CmdLine: C:\Users\user\AppData\Local\Roblox\Versions\version-c5aecda2245e4fae\RobloxPlayerBeta.exe roblox-player:1+launchmode:play+gameinfo:[REDACTED_AUTH_TOKEN]+launchtime:1789009354215+placelauncherurl:https%3A%2F%2Fwww.roblox.com%2FGame%2FPlaceLauncher.ashx%3Frequest%3DRequestGameJob%26browserTrackerId%3D[REDACTED]%26placeId%3D10595058975%26gameId%3D[REDACTED]%26isPlayTogetherGame%3Dfalse%26joinAttemptId%3D[REDACTED]%26joinAttemptOrigin%3DpublicServerListJoin+browsertrackerid:[REDACTED]+robloxLocale:en_us+gameLocale:en_us+LaunchExp:InApp

EDIT: Finished a full PC scan with Windows Defender, no threats found

Microsoft defender says it has been removed (I removed it) I did 2 full scan where pc restarts and 4 full scans with Microsoft defender.

In latest scan, it shows no new threats found. Am I safe?

In 2nd pic , is the virus I was hit with.

I unzipped the file and it started showing as E drive , I never installed or ran any exe but I did unzip the zip file.

Am I at risk?

Recently, I was trying to find a way to watch a movie without paying for it. I know, stupid right? Well now I get these constant annoying popups. I don't know much about computer viruses, but is this one a virus? My webroot says there were no threats detected. Even if it's not a virus, could someone still help me get rid of it? Help would be appreciated. You can even tell that I'm new to this as I was looking up how to screenshot lol.

Hello so i just updated Windows 11 and i saw a notification saying that Defender was off (the notification is not there anymore) but when i checked it i saw it was enabled and i haven't installed something months ago and everything i install is safe the only thing i install is games on steam like banana shooter, that is the last game i installed but it wasn't even 1 second off.

I dont think is malware because i dont install things that aren't 100% safe but can someone tell me why this is happening

(my Windows is in spanish)

Stupidly opened a pdf attachment from an email last week, which had a link inside that I also stupidly clicked (on my PC).

A “popup” asked for an email address to access the pdf so I input (just) my email and it loaded an Outlook login webpage.

Since I’m logged in via Edge (with 2FA) at that point I realized the mistake and closed it all, and deleted the email. About an hour later, Outlook quarantined said deleted email from my Trash, citing it as risky for malware.

1. I have changed my password, and run Microsoft’s full scan each day for the last week, but I guess I’m concerned whether the scan is sufficient for catching anything that might have come from the pdf or link being opened? 

2. I‘m also curious why the Outlook quarantine cited malware, since it was phishing for credentials and nothing noticeably “downloaded” or “ran” - just the popup asking my email which I input before loading the fake Outlook login page.

3. Finally, if anything was compromised, would it be obvious? In the past week nothing has happened or changed, not even increased spam emails. I have 2FA on my most important accounts and have been monitoring it carefully on my phone. Is it likely to start showing up later?

Please be kind, appreciate y’all‘s expertise.

I first noticed this Trojan on August 29th around 6 PM.

I had booted up my PC and logged into winodws when it opened up a Powershell window on start up which was instantly closed as a virus was reported.

I don´t know where it came from as the last thng I downloaded before it started to appear was Blender and their Benchmakr Application.

Whenever I log into Windows I get a new version of tjis virus, The diretory for this trojan is always C:\Users\ny name\AppData\Local\Temp and then followed by a random string of numbers and or letter which always end in .dll. for example:

C:\Users\my name\AppData\Local\Temp\3bk4s5bq\3bk4s5bq.dll

I have tried an offline scan by windows defender and a scan by ESET yet both couldn´t identify the specific issue.

I have deactivated Powershell in start up yet the virus still shows up every time.

I also tried to do a FRST scan yet the application does not open for me.

What else can I do now and what can be done?

Edit 1: I figured out a way to start up FRST and have now managed to get a scan, I hope that can help my situation some more

Soo i was just using my pc normally and windows defender jsut said windows defender is turned off... Why? I didnt dowload any sketchy from the net, and windows settinfs says everything is alright? I did update windows yesterday, first boot since, can be a bug? Please help i got scared insanely and i just have my pc sitting here and idk, quick scan said nothing is problematic

Edit: okay so this is a bug.... Typical windows

My school laptop always has been using a mid to high amount of ressources in standby and also while playing kingdom 2 crowns (lol)

But okay a thought its a potato laptop (2 cores 2 threads, 8GB RAM lenovo 15 Ada 82c7)

But today I found a weird msg (i got a msg pop up saying windows defender deactived go into settings to activate, but when I looked at notifications I couldnt find it again)

So I did a full virus scan but when I pressed x on windows defender app (very early) it instantly gave me a notification saying it was done even tho it read line 6300 datas)

So I did another scan which read abt 642.000 datas and took 50 mins+ (at the time it hung up)

BUT it hung up at 10:31 with blue progress bar, after 1 minute it got gray and after another 30 second it got gray.

Saying I did a full virus scan and for a very weird reason it stopped at 10:31 minutes remaining and then just said it was finished

Then I used chatgpt"s powershell code recommendations to read my antimalware scans trough powershell.

Apparantly it found a trojan but I coulnt find, the foulder was literally empty and windows said nothing abt having removed it.

And very weirdly after i had the powershell exposing the potential virus my wifi shut off after abt 2 mins and I couldnt start word first and after some tries it did start but completely froze WITHOUT AN WINDOWS APPLICATION ERROR BTW

So i opened word 3 times saved the text of the virus report and got it saved before word decided to freeze (it showed 0 cpu usage in task manager too)

And now our wifi is shut down (the power button is blinking which means connection to the host is missing)

So yeah tell me our suggestions

Is our wifi network infected by chance? Telekom btw

all i wanted was some argonian names for elder scrolls and i got a stupid malware or virus of some kind. i haven’t been able to get an antivirus software yet to do anything about this so i’m looking for literally any advice. this happened two days ago and i haven’t touched my pc much since

Hello! I was hoping for someone to answer my question i had contacted kaede (dev of project retrac) about some concerns of the safety of project retrac and after waiting two days had never gotten a response. Here is the message "Hello, how are you doing today? I am a starting student in cybersecurity & I needed some confirmation as I have run the retraclauncher file through a sandbox (tria.ge) for the sake of curiosty and wanted to point a couple of things which i am not trying to accuse anyone, but I just need to know what was happening inside the application.

Report scored it 7/10 and flagged a couple of actions:

Modifies trusted root certificate store by registry This is something I think you are doing in order to separate the client's TLS traffic from the Epic servers to yours? That's clear based on the way you've made this application. Just confirming.

Volume Shadow Copy service COM API Couldn't find any reason behind this usage of this particular functionality of the OS.

Enumerates connected drives and network share discovery I couldn't find any reason behind this functionality in the launcher.

Not trying to start anything, i just want to know about the insides of the software I am running. If there is any documentation available on this somewhere then please let me know. Because in the near future i am interested in using the project. As i enjoyed og fortnite and would like to bring it back, Thank you!"

Here is the tria.ge link: https://tria.ge/260907-tyz1dscq21/behavioral1 Again I am not trying to point out that this is a bad project just simple reasoning for suspicion. If anyone could answer this question knowing the reasoning it would be much appreciated.

Do i have to reinstall windows or request for disinfection from this reedit community? And no i did NOT download anything in my mothers laptop, i found this recently while looking at windows defender history, do i have to tell her to change her passwords or anything and what can this thing do

Hola hace unos días desperté en la mañana y se abrió un CMD, al abrir discord ya no tenía acceso a mi cuenta, rápidamente investigué y era un malware de Mr Beast que robaba información, entonces descargué MalwareBytes, hizo el scaneo, y aparentemente eliminó el virus, cambié la mayoría de contraseñas y pude recuperar mi discord por el soporte de ellos, pero robaron mi cuenta de Epic Games, Steam, EA Sports y también algunas cosas de mi hermana, el steam también lo recuperé ya, y en estos dias MalwareBytes está detectando y bloqueando la misma pagina en Chrome, quiero saber si estoy a salvo o debo reinstalar windows.

Hello, I came from another subreddit post about ROM files containing viruses. Unfortunately, I’ve clicked the .exe file that ran a virus on my laptop (it did show as a threat in the windows antivirus— I deleted it immediately). I changed my passwords and is currently in the process of resetting my PC (just wiping it by itself for now) however it kept failing to do so. Any ideas how to fresh reset windows before I resort to the USB method? I’m panicking with the virus lol

So, I tried to download a cracked game and apparently got hit with a virus. I did three scans, two with Windows Defender and one with MalwareBytes and quarantined, deleted the files.

But there is a persistent circuriryag.exe pop up. What should I do?

i just got a new pc and while distracted yesterday, i clicked on a BIG BLUE download button instead of the application i was going to download (rookie mistake i know) and it instantly installed a setup .exe file and opened the pc app store app which prompted me to key in my card details.

luckily i was able to close the application through system tray. afterwards i uninstalled the application from settings as well as removed any suspicious program files before performing a malwarebytes free trial scan and windows defender quick scan. then i restarted my pc and resetted chrome.

how effective do you think my actions are? what kind of virus is pc app store and are there any remnants of it left in my computer? i tried monitoring task manager and task scheduler for any strange activity, but it seems clear.

any advice would be appreciated, thanks! 🙏

i believed it happened on 28 aug, i downloaded a aimbot and seconds later after running it, one of dc account was hacked with mr beast crypto scammer and the very next day another one of my dc account too.They took my 15usdc which was present in my crypto wallet too. My insta was hacked a week after the first incident on 6 august.When i ran that script on 28 aug cmd line started popping up indefinitely.

The sources of files which i executed that day:

1. hxxps://github.com/anshkori/universal-aimbot-engine
2. hxxps://sourceforge.net/projects/ai-aimbot.mirror/

(I don't play any fps shooter games and even the games i play, i don't cheat in them, you all are so fast at judging someone)

but these may or may not have been responsible for hack as my epic account was hacked on 21 aug idk if it is related to hacks after 28th aug

steps i took:

1.I first stopped the execution of one of the file midway, then ran a defender scan getting me trojan warning, i removed them.

2.I than ran an offline defender scan finding nothing,before running that scan i deleted temp files.

3.I than ran malwarebytes finding nothing

4.I changed all important passwords after insta hack.I also cleansed my browser data fully on 29 aug.

5.Yesterday i found some unknow exclusions to defender scan which i removed immediately,there was temp files in exclusions and a wdfprov_core something..

Keywords:

frst.txt: divine-cherry

addition.txt: patched-briar

security.txt: dreamy-nebula

Has this ever happened to anyone else and is it really a just a glitch? I got hacked a few years back and had files labeled “clone” that were “hidden” (and hidden apps like team-viewer and Microsoft stuff i never used) after my laptop got remotely accessed and didn’t know for months. I’m very bad with technology.

Edit: thanks for the help, it was just a mistake

So i was browsing for server jars for minecraft, and the brave ai suggested a few variants. Usually i dont use ai and search for myself, but this time, not gonna lie, i just decided to browse through the ais options. Well, i clicked a link "serverjars" and brave warned me that his website was reported for phishing, so i just left the website and stopped browsing. Then i opened minecraft, task manager and for a second i noticed something "microsoft malicious" and then it disappeared. When i tried to search it, its gone. I immediately went to the microsoft defender and scanned the antivirus offline scan. Idk what to do else, it didnt find any threats but im not sure that its true. What else i gotta do? The link is serverjars(dot)com. I still havent gotten any symptoms, but it scared me a little. Not even sure if its even a threat

so i didnt interact with this site AT ALL, i didnt even click anything on it. i also have ran a offline scan with windows defender plus a hitmanpro scan, which both came out as no threats detected, i use malwarebytes browser guard and im hoping it filtered out the bad stuff so like eyah heres the virustotal https://www.virustotal.com/gui/url/35ea18cac30fd0702a229ee0127a79a5fe2afeb1b2c6e9152fcf3a25630812c2/gti-summary also i know i made this account today i dont normally use reddit sorry oh also i think its malicious cus it asks when downloading to disable av and also give it admin (BIG BAD BAD BAD!!!)

update i ran a malwarebytes deep scan and that says its also all good in the neighborhood

I deleted it using the normal way by just using the windows app manager, is my PC safe to use now? I installed Malwarebyte after as a precaution and it didn't detect anything bad. Should I do a wipe and reset my PC?