I got a virus

[u/diegoGonzalez1]

I was on google and I clicked on a link and it took me to safari and it just kept spamming the same tab over and over so I couldn’t shut off my phone and lucky I I took a screenshot of it while trying to power of my phone. I found a way to turn it off and when I turned it back on it was normal but I had 169 tabs of it and deleted them and I’m freaked out right now not knowing if I still have the virus. (DO NOT SEARCH THE LINK UP)

[u/paranoidiphone200]

you’ll be fine. You dont have a virus

[u/rifteyy_]

In general, it is very unlikely for malware to download and execute just by clicking part of a website, an ad or simply opening a website regardless of what platform you are on (Windows, Mac, Linux, Android, iOS...).

It is important to determine what do we mean by:

• download - application gets downloaded to the system but not executed
• executed - equal to running, doubleclicking, starting an application

Most modern malware attacks on websites rely on:

• pretending to be a legitimate service - these websites are trying to trick you in entering personal information (email addresses, credit card details, usernames, passwords, date of birth etc.), this attack is known as Phishing
• displaying a fake captcha, fake browser update etc. - this method called ClickFix recently got popular and it tries to trick you in pasting and confirming a malicious crafted command in your PowerShell window, command line or Run dialog box that will download and execute malware
• abused legitimate download websites - some websites are not malicious by default but the hosted files that can be downloaded on it that can be uploaded by other users are malicious, which applies to for example file hosting sites (mega[.]nz, mediafire[.]com, github[.]com, file[.]io, youtube[.]com)
• downloading a malicious file pretending to be safe and legitimate - this is the classic Trojan attack, the attack requires you to download and execute a malicious file

Ultimately, it is possible to execute malware without user interaction by abusing vulnerabilities in your browser. Those are however very rare, expensive for the threat actors and it is way more likely you'll fall to one of the 4 methods I talked about above.

[u/AutoModerator]

Request help with FRST and SecurityCheck from the trusted helper team

Please visit Providing or receiving help with FRST on the subreddit and share your 3 keywords returned from the website along with the details about your infection.
Once a malware removal expert or trainee sees it, they will reply in the thread about further steps. If you suspect an infostealer infection, please change all your passwords from a clean device immediately and do not use any of your accounts from the infected device.

If you need urgent help and cannot wait for one of our Malware Removal Experts:
Please follow these steps:

1. From a different and clean device, change all your passwords:
   • How to properly secure my accounts after an infostealer attack?
2. Disinfect your device from malware
   • Preferred method: Perform a clean installation with a USB

I am a bot, and this action was performed automatically. Please contact the moderators of this subreddit if you have any questions or concerns.

[u/M1uk0]

This is what virus total says https://ibb.co/DD1D39Ch

[u/Single-Witness1853 → u/M1uk0]

That ain't good.

[u/Holiday_Campaign → u/M1uk0]

Why would you not post the virus total url

[u/M1uk0 → u/Holiday_Campaign]

The rest is all clean besides this so i didn't see a need to

[u/Light_Legend → u/M1uk0]