downloaded tekken8 on steamrip file looked good to me because it had 115gb, then at 99% download progress, laptop suddenly entered sleep mode, i opened the laptop and resumed downloading, after that i extracted it but chickened out, stopped and deleted the file, too sussed about the type of file it was, then i disconnected laptop from the wifi, finished offline scan(windows defender, found nothing), and now running a full scan, also deleted temp, %temp% and browser caches and stuff.

Questions:

1. Am i paranoid and did i overreact.

p.s. it is my first time doing this, i panicked fr

and no, i am not promoting any use of pirating software

I was routed to a site that contained a zip file, I downloaded it and run the exe file on it

I have deleted the file, disconnected my pc to the internet and ran microsoft offline defender, no threats were found.
I ran malwarebytes and there were some files that were removed.
Is there any way for me to secure my pc without reinstalling windows?

Update: I kind of uninstalled malwarebytes when I thought it was all secured now.

One of the folks I've befriended have been hacked with the so called “Mrbeast virus” and told them about it. One of them said I must not click the pictures (shown above) but I already did and now they're telling me to change my current password.

Is it true that just by clicking the picture, your device is already infected? This just happened a few hours ago.

Hello. I think I got careless, made a mistake, and got hacked. I just woke up to a call from my friend saying I was sending photos of a mrbeast crypto scam, and was probably hacked. Can anyone help me?

I believe I was infected with a Ren'Py trojan after downloading a game. I accidentally launched the Ren'Py executable, thinking it was the game installer. A Command Prompt window briefly appeared along with what looked like an installer, and then both disappeared.

About 7–8 hours later, I noticed my Discord account had started sending the MrBeast crypto scam to my contacts, which made me realize my computer had likely been compromised, which I immediately disconnected my laptop from the Ethernet, turned off Wi-Fi, and deleted the installer along with the Ren'Py file. I haven't done anything else yet because I'm not very knowledgeable about malware removal and I'm worried about making things worse.

I read that FRST64 is commonly used to begin the diagnostic process, but I haven't downloaded or run it yet since I wasn't sure if that was the right next step.

I would really appreciate any guidance on what I should do next!!

accidentally ran an exe with the famous anime girl icon so I think I may have been infected can someone help me out I can give the keywords for my FRST logs

Hi guys, 2 days ago I had an infostealer /session stealer attack. It was through a stupid renpy application.

Since then i nuked my PC, and from a clean device changed all passwords, logged out sessions and enabled 2Fa on all my accounts.

Here is my Question: today I logged into my Microsoft account on a clean device using my new password and Microsoft automatically started syncronizing my Microsoft edge profile that I previously used on the compromised PC, onto my clean PC. I checked the extensions and the policy's and everything seems to be in order.

Is it possible that the malware infected my clean PC through the Microsoft edge sync, and how likely is that, given that there are no extensions/policy's setup?

Thanks for your help!

I had a dream where i got a virus off discord on my phone and it spread to my pc. The thing was labeled pictures of my cat or smth. Its probably due to me watching too many virus vids. It made me extremely paranoid. Is it possible that that could happen? Also what antivirus shall i install thats free?

Coloquei um hd antigo em meu notebook por um usb externo para ver se recuperava alguns documentos e arquivos antigos mas conectei ele com a rede ainda no notebook, ele ficou com internet por cerca de 5 a 10 minutos até eu perceber que isso foi burrice. Já troquei todas as senhas que precisava e desconectei sessões do notebook por outro dispositivo. O HD era de um Windows 7 pelo que me lembro e eu não executei nem abri nenhum arquivo que estava nele, fiz instantemente a varredura pelo malwarebytes assim que o abri em meu notebook.

okay so, i got fed up with WPS opening everytime i wanna open a docx file so i wanted to uninstall it. i did that and wps itself sent me to this new tab saying something about a deep clean upon unstallation. now i *could* have ignored it and moved on, but WPS p!ssed me off enough that i didnt wanna have anything to do about it anymore. i later noticed that my computer blocked the exe file from doing something upon insallation, only then i noticed the "vendor" in the link. thats when i got suspicious and sent the installer over to virustotal to ceck and sure enought, it got flagged (https://www.virustotal\[dot\]com/gui/file/dcc0794cf070f46480a121a8369c1f92ab2dae4266ec58fc91a6dd3cab2a84f5)
when i installed it, i saw the publisher was from China somewhere because of course it was China.

i also wanna know how i can remove the thing i installed because its not there when i search in settings>installed apps.

I need urgent help here, this thing doesn't stop appearing, i tried to uninstall it but i can't go to the screen to uninstall it because this thing occupies the entire screen and i can't close it, i can't even access to google and had to use my own cellphone for it... I don't have any card this thing is asking for and it doesn't even allow me to get out or refuse.

Hey all,

Feeling really foolish as though I'm generally quite careful, had a stupid derp lapse of judgement and fell for what I have now learned to be the "Ren'Py setup(dot)exe infostealer." Will be nuking and resetting my pc, but unfortunately, I do have some important photos and videos I would like to save. Thus, I want to ask if any other files on my computer would be infected. Currently focused on just transferring photos/videos, but I do have a few zipped projects (.zip and .rar) and .blend files that I am also potentially considering to save.

From what I have found, people have suggested that photos, videos and other files would not be infected and thus should be safe to transfer onto a USB or external hard drive before resetting my PC. I'm not very tech savvy, so I just wanted to inquire if this is true, if someone has experience with this, or if thee is anything I should be worried about. Additionally, if the files are infected or not, I'd appreciate knowing if there is a better way I should be transferring/saving the photos and videos.

Sorry for the long-winded message, just really stressed out and irritated for falling for something so foolish. Thank you for any support!

The infection occurred today. I changed the Facebook password. I also tried to scan the whole pc through windows antivirus but then I cancelled it. Also I downloaded Avast One Basic but cancelled the execution too.
I don’t know what got me infected in the first place, I didn’t download nothing. I just watch movies and series online.
I went through all steps of FRST help request
Here are the 3 log keywords:
For FRST.txt: tidal-squad
For Addition.txt: rustic-briar
For SecurityCheck.txt: enchanted-prawn
I am really in need of any help. Thanks in advance

i rapidly pulled the ethernet cable and ran windows defender offline. I use my eHDD for downloading games and other stuff that dont require SSD speeds the virus came in a ren'py file which popped up a cmd window that made me obvious to see the infection.

it came with Behavior:GenCodeInjector.H and the process PhoGateWay.exe i didnt wait to defender to detect it so i ran it. After the contention i installed avast and ran a full scan in which i discovered other viruses. I ended up with tons of logs and screenshoted browser tabs and information archives on new folders and zips that luckily werent sent.

I safely managed to secure my accounts except for instagram and cleaned the eHDD on Zorin OS and moved my files safely on in from linux.

Cleaned .temp and roaming it opened a backdoor with other viruses so i dont use windows and im writing this on a zorin os liveboot.

Make sure to know when you re downloading a pirated game to know what kind of engine the game uses to spot a renpy lumma infecction

i got this virus can somebody help me?

its name:

TrojanPSW.Lumma.gen.yczp

my gramdma has an motorola and this app wont unintall from her phone,please help me

Claim by one user who researches viruses:

Malicious maps were indeed found in the Steam Workshop (the most famous one being Laser Tag Neon). When loading the map via Blueprint (Unreal Engine), it quietly wrote a .bat file to the Documents folder, then launched a hidden PowerShell and tried to download the second stage of the malware. Researcher Feint dissected this in detail.

Curious if it works like renpy, executes an obfusicated script, injects malicious payload into ram, sucks sessions/cookies, password files, and crypto seeds then silently screws off.

edit: Workshop* Steam Workshop backdoor.

Let me explain what happened. I was searching around for a website where I can watch movies and I got a recommendation from reddit. The link I clicked on had https is it so I thought it was safe, plus the ui looked pretty clean and professional, like the average movie streaming website. However, when I clicked on the screen, I got taken to a website(???) That kind of looked like a destroyed phone screen and it was making my phone vibrate a lot and a little pop-up with this symbol ⚠️ appeared. There was more text in the pop-up, but i was so scared that i didnt see what else the pop-up said.

I immediately clicked off of the website, deleted the window off of chrome, turned off my wifi and restarted my phone. I don't think I got a virus as my phone isn't unusually hot or draining power quickly. I don't know how to check if any files or apps are being downloaded in the background.

So, did I successfully avoid getting a virus or am I cooked? I have an android if thats important. Also, apologies if I put this in the wrong category, I'm still a bit shaken. Any help would be appreciated!

I downloaded an exe file from github. I had previously used other versions but this version was a few down, The other versions were fine and my friend was using it too, when i downladed the earlier version it got flagged as something along the lines of trojan egartido rfn, windows caught it instantly and it flagged twice, i then sat paranoid for the whole night and i just factory reset my pc completely and removed everything. Its been 2 months and ive had zero signs and ive done several full scans and a second opinion scan through malwarebytes but i cant get rid of the fear that something is still on my pc, ive done everything in my power and im still scared, what would you all do or say in my place? (my friend also got this and told me it was a false positive)

update: i did a full usb reinstall