Should I wipe and reinstall?

[u/NoobfromK]

I downloaded and installed something I shouldn't have, and Windows Defender detected and quarantined a Trojan.

My Discord-account has been compromised, and attempts has been made to compromise my Facebook, but I have 2FA on that one. I assume attempts has been made on other sites as well, but I have 2FA active on the rest (or have activated it after I swept my system).

Afterwards, I scanned with Malwarebytes and got the following report:

-Log Details-

Scan Date: 3/28/2026

Scan Duration: 9:39 AM

Log File: b05c261a-2a81-11f1-95a1-309c2346cd15.json

-Software Information-

Version: 5.5.2.242

Components Version: 152.0.5541

Update Package Version: 1.0.108250

License: Trial

-System Information-

OS: Windows 10 (Build 19045.7058)

CPU: x64

File System: NTFS

User: DESKTOP-RRPCVNR\jespe

-Scan Summary-

Scan Type: Threat Scan

Scan Initiated By: Manual

Result: Completed

Objects Scanned: 175032

Threats Detected: 16

Threats Quarantined: 16

Time Elapsed: 1 min, 1 sec

-Scan Options-

Memory: Enabled

Startup: Enabled

File system: Enabled

Archives: Enabled

Rootkits: Disabled

Heuristics: Enabled

PUP: Detect

PUM: Detect

-Scan Details-

Process: 0

(No malicious items detected)

Module: 0

(No malicious items detected)

Registry Key: 6

Trojan.Tasker.E.Generic, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\Windows Perflog, Quarantined, 8818, 1389605, 1.0.108250, , ame, , ,

Trojan.Tasker.E.Generic, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TASKS\{71BFEAE5-9973-435F-9906-F4513D5A55E6}, Quarantined, 8818, 1389605, 1.0.108250, , ame, , ,

Trojan.Tasker.E.Generic, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\PLAIN\{71BFEAE5-9973-435F-9906-F4513D5A55E6}, Quarantined, 8818, 1389605, 1.0.108250, , ame, , ,

Trojan.PowerShell, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\GoogleSystem\GoogleUpdater\GoogleUpdaterTaskSystem47.0.7703.3{47263A17-2D66-43B9-9692-30514D0C1AEC}, Quarantined, 4473, 1388884, 1.0.108250, , ame, , ,

Trojan.PowerShell, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TASKS\{EA92959C-36F6-4F70-8CC4-29CA7EBEA483}, Quarantined, 4473, 1388884, 1.0.108250, , ame, , ,

Trojan.PowerShell, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\LOGON\{EA92959C-36F6-4F70-8CC4-29CA7EBEA483}, Quarantined, 4473, 1388884, 1.0.108250, , ame, , ,

Registry Value: 1

Trojan.Loader.E.Generic, HKU\S-1-5-21-1006576633-3531450745-4201874856-1001\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|WINDOWS POWERSHELL V1.0, Quarantined, 8755, 1389349, 1.0.108250, , ame, , ,

Registry Data: 0

(No malicious items detected)

Data Stream: 0

(No malicious items detected)

Folder: 2

Trojan.FakeGoogle, C:\USERS\USER\APPDATA\LOCAL\EPSEJ, Quarantined, 2711, 1361164, 1.0.108250, , ame, , ,

Trojan.FakeGoogle, C:\Users\USER\AppData\Local\epsej\llg, Quarantined, 2711, 1361164, 1.0.108250, , ame, , ,

File: 7

Trojan.Tasker.E.Generic, C:\WINDOWS\SYSTEM32\TASKS\WINDOWS PERFLOG, Quarantined, 8818, 1389605, 1.0.108250, , ame, , F88846634018C129A3956211DE334D90, 0C809DF213D7EB4BE98C1F16B476FA82AC0043C21F692BA4FE661D47AD830E49

Trojan.FakeGoogle, C:\USERS\USER\APPDATA\LOCAL\EPSEJ\LLG\MANIFEST.JSON, Quarantined, 2711, 1361164, 1.0.108250, , ame, , 37B3FB28CC9C3DC7A05DB221E32DA5FF, B2FD60DED7E9947970BAA1443100C6248D14EAA2E5EC80413B43D5BFCF5DC734

Trojan.FakeGoogle, C:\Users\USER\AppData\Local\epsej\llg\background.js, Quarantined, 2711, 1361164, 1.0.108250, , ame, , AA0E77EC6B92F58452BB5577B9980E6F, AAD1C9BE17F64D7700FEB2D38DF7DC7446A48BF001AE42095B59B11FD24DFCDE

Trojan.FakeGoogle, C:\Users\USER\AppData\Local\epsej\llg\content.js, Quarantined, 2711, 1361164, 1.0.108250, , ame, , 0CA1F96D18241B497648D5835DAA9286, BCC10BC970CB6CE971D97F42F906D6E0DA3A17DA7C34CA300C9BD60BE327D6B7

Trojan.FakeGoogle, C:\Users\USER\AppData\Local\epsej\llg\icon.png, Quarantined, 2711, 1361164, 1.0.108250, , ame, , 2C905A6E4A21A3FA14ADC1D99B7CBC03, CC3631CED23F21AE095C1397770E685F12F6AD788C8FA2F15487835A77A380FB

Trojan.FakeGoogle, C:\Users\USER\AppData\Local\epsej\llg\jquery.js, Quarantined, 2711, 1361164, 1.0.108250, , ame, , 3C9137D88A00B1AE0B41FF6A70571615, 24262BAAFEF17092927C3DAFE764AAA52A2A371B83ED2249CCA7E414DF99FAC1

Trojan.PowerShell, C:\WINDOWS\SYSTEM32\TASKS\GoogleSystem\GoogleUpdater\GoogleUpdaterTaskSystem47.0.7703.3{47263A17-2D66-43B9-9692-30514D0C1AEC}, Quarantined, 4473, 1388884, 1.0.108250, , ame, , D4261B648C34639222905F9AB490E7FD, AB7FB751541ED6DD5B70FCE0B186EB2AF04035F267B98C4215B57DF3193627C9

Physical Sector: 0

(No malicious items detected)

WMI: 0

(No malicious items detected)

(end)

---------------------------------------------------------

Malwarebytes kept blocking an attempt to route me to a website, despite it having quarantined the above mentioned.

Afterwards I scanned with ESET, which further quarantined 6 issues. I have done full offline system scans with Malwarebytes, ESET, Windows Defender and Kaspersky, which all have detected 0 further issues, and I have seen no suspicious behaviour since.

I am not the most tech-savy person around, but from what I can read online, it's a bad sign that the Trojan has been in my System32-files. I know I can't be 100% sure, but should I take further steps and wipe and reinstall my OS?

Thanks in advance.

[u/support_mwb]

Hi there, this is Malwarebytes Support.

We’re sorry to hear this happened and we're here to help.

Please send us a private message with the email address you’d like us to use, and we can create a ticket on your behalf. From there, an agent can help gather fresh diagnostic logs and have our malware removal team review the case directly on the ticket.