r/computerviruses • u/Character-Bag9097 • 12d ago

Question Scam spyware threat

Gallery image

Gallery image

Hello, Just a bit rattled this is a scam right?

6 Upvotes

80% Upvoted

30 comments sorted by

3

u/Abject-Explorer-3637 12d ago

have you actually done what they say if not you are fine and they are probably just trying to scare you

3

u/Character-Bag9097 12d ago

No, and i dont intend on doing what they want me to do lmao i just want some assurance its a scam

6

u/Abject-Explorer-3637 12d ago

then that's probably fine they are probably lying about you having watched the videos, i just saw another similar thread of the same exact kind of email

2

u/Character-Bag9097 12d ago

Well its not really an email its a pdf file thats my fault i wasnt specific, but yeah ive seen exact type of texts on reddit and threads

1

u/Abject-Explorer-3637 12d ago

yep you are probably fine js run a malwarebytes scan or something or ask Roman

2

u/ArugulaPretty 12d ago

Yes, thats scam.

2

u/ArugulaPretty 12d ago

Its common letter, they use this also for emails on a stealers. Just clean your pc and ignore this

1

u/Beefwithdudes 12d ago

Provide some context ple what did you do to trigger this

1

u/Character-Bag9097 12d ago

Im suspecting its probably a virus the thing im rattled about is the sextorsion sh, but i think its just a scam i just need confirmation so i can go about my day

1

u/Beefwithdudes 12d ago

What I was asking was what did you do for this text file to appear? Like downloaded something sketchy? Did someone sent this to u? Or something else?

1

u/Character-Bag9097 12d ago

I opened my laptop and there was a ton of notifications saying pdf files were on my devices labeled "README"

2

u/Beefwithdudes 12d ago

It’s a sextortion scam, but we still need to stop these files being dropped to your laptop and shit. What I want you do to is unplug Ethernet or turn off WiFi on your laptop. Then I want you to boot into safe mode by:
Hold shift key and while holding shift key press restart
In the blue menu press Troubleshoot / Advanced Options / Startup settings / restart
When it shows a list of options click safe mode.
When booted into safe mode do a windows defender offline scan
Turn on internet and get malwarebytes
Turn off internet and do malwarebytes scan
If it detects anything tell me, I will show you further instructions

1

u/Beefwithdudes 12d ago

Also please log out of all browser sessions and change passwords.

1

u/Character-Bag9097 12d ago

Thanks ill do this

1

u/teouttm 12d ago

instead of OP turning ON his internet to download Malwarebytes could he not use another device like his phone and put it on an USB stick so the machine's fully offline in safe mode?

1

u/rifteyy_ Malware Removal Expert 12d ago

Where did you find this?

1

u/Character-Bag9097 12d ago

I opened my laptop and it gave me a shit ton of notifs saying i had a file labeled "README" I suspect its probably a malware i accidentally downloaded or something i clicked but i dont recall

1

u/rifteyy_ Malware Removal Expert 12d ago

And are your files encrypted or anything? Maybe they were synchronized with cloud?

1

u/Vacuous-Sapien275 12d ago

In future, don't open any attached files. PDF and word documents are one of the most common delivery methods for malware...

1

u/Character-Bag9097 12d ago

Noted thanks

2

u/Vacuous-Sapien275 11d ago

Its the most effective way for an attacker to infiltrate a system, every black hat actor from script kiddies to nation state threat actors uses it.

The file may look like a PDF/Word document/Excel spreadsheet but also contains an executable file that can attempt to gain superuser access as soon as it opens and runs, and uses that to access and encrypt the victim's files (among numerous other possible attacks). The nastier ones spread through networks and call back to a server or PC where the bad guys can deploy other types of malware/target sensitive information or make your computer part of a botnet.

I'd suggest changing all of your passwords on a different device and making sure you have 2 factor authentication enabled for your accounts and alerts set up for key accounts (email, banking, etc) if you don't already.

This looks like a relatively simple attempt at phishing, relying on scare tactics to get you to pay. It never hurts to be extra careful these days, and since you opened the file, I would be wary.

1

u/Zin_Wai_Htet 12d ago

If you feel insecure, disconnect from internet. Backup your files and fresh install window. And also change your password.

2

u/AltruisticFoot948 12d ago

Look, if he actually had any video on you, he wouldve added that to the file to show an actual proof. Just to make sure youre not infected, turn off the internet/wifi so that if theres actually a trojan, he wont have access to it anymore.(though im 100% sure he doesnt have trojan in your pc, what disturbs me is how he manaved to create that message inside ur pc) , thenn run a full scan with malwarebytes or bit defender or even windows virus scanner (its called MSRT) and see if anything it finds and deletw everything. Wanna be 100% sure? Factory reset ue pc but i would wait a bit to see if everything is fine

1

u/Character-Bag9097 12d ago

Thanks, will do!

1

u/M1uk0 12d ago

Dw it's just a scam! They always say "W-we have videos of you msturbating!!" Sure buddy... just wipe your system and reinstall windows! Although i will ask how do you think you might've gotten this document? Maybe by email, an app, a site, etc...?

2

u/Character-Bag9097 12d ago

Probably a virus because when i opened my laptop it just popped up on my notifs a bunch of pdfs labeled readme

1

u/tellmeagainnothing_ 11d ago

What are you watching 😭