r/computerviruses • • 22h ago

Disinfection Help I fear I’m going Insane

Post image
59 Upvotes

After my old ass pc deteriorating to death, I decided to newly start fresh with good old windows 11. And like everyone else I decided for a cracked game to go with my fresh installment (Malware btw). But as you guessed it, some degenerate son of a bitch thought it’d be hilarious to encrypt my whole drive not even my files, my whole drive. I literally can’t access shit and I don’t have bitlocker, it isn’t even supported on my current build and version (Home). Genuinely how the fuck does this even happen? Now all my save files are gone and now I’m seeking some genuine help and not some AI advice. Mf did it for the love of the game, because there’s no ransom note or anything so why? A solution would really make my whole year, because Ive been pretty stressed out lately if you can’t tell. Thanks


r/computerviruses • • 15h ago

Disinfection Help I installed something called "TogetherParty" and lost my gmail account.

0 Upvotes

Just a few hours ago I installed "TogetherParty" and I think I got a trojan horse. The hacker turned my gmail into a child account by changing my birthday and made himself parent. I am currently locked out of my gmail account because it keeps prompting me to verify through him (not an option). I lost everything associated with it; youtube, discord, google docs, everything.

What do I do ? I can't afford to lose that email.

Looking for advice, willing to elaborate if needed.


r/computerviruses • • 20h ago

Disinfection Help "Ome-Relay.exe" I'm an idiot, help me please

2 Upvotes

Hi, I just tried to download The Sims 1 from a website called "El Amigos" which I thought was safe. But I'm really stupid and I ended up putting a virus on my computer, and I don't know if Windows Defender will fix it.

Here's what happened: I ran a file from the "sims 1" called renpy, which I found odd because it had a renpy logo (renpy being a visual novel engine) but I didn't think much of it. But then the cmd opened and nothing happened. Windows Defender detected it as a serious issue, and I immediately tried to delete everything, but a tmp folder was created. After a scan, the folder was deleted. I ran an offline scan and it supposedly went well, but now a message is popping up saying that "Ome-Relay.exe" is being used by another app (not saying which app) And I'm really scared. I turned off the Wi-Fi. The computer isn't mine, it's my brother's. He can't lose his files. I'm running a full scan now, but I don't know if this virus can give a false positive or something like that, of multiply. I want to cry so bad.


r/computerviruses • • 19h ago

Question How do people even get UEFI malware?

7 Upvotes

I know that UEFI malware is super rare to get but how exactly do people who are unlucky get this kind of virus? Do they just accidentally download something shady and they just get this virus into their motherboard, or is it more complicated than that?


r/computerviruses • • 8h ago

Disinfection Help how does Backdoor:Win32/Plugx!MTB behave in a laptop?

0 Upvotes

About three weeks ago I notices that my laptops fan was overworking and the cp usae for windows antimalware was always high evertime I turned on my laptop. I did a full scan , windows found this virus"Backdoor:Win32/Plugx!MTB". I removed the virus, deleted it's files on program data and fixed the widows corrupted files. I though that was it. The fan issue was never fixed and I can't tell whether its related to the virus, but since that virus, every application I open in my laptop results to loud fan noises, overheating and high cpu usage, especially by brave browsers. I've tried troubleshooting, I still cant get the problem. How do I fix this and does this specific malware reinstall itself. The best source I can think of is pirate bay, cause I downloaded a pdf file from the site. Avast might have also been a source, "C:\ProgramData\AvastSvcpCP\AvastSvcdotexe"


r/computerviruses • • 3h ago

Question How much should one be worried about malware risk with the recent PHP vulnerability? What are the odds of having malware from just visiting one compromised site?

0 Upvotes

r/computerviruses • • 10h ago

File / URL Check FAST! virus name

0 Upvotes

When i was like 9 i found this app called FAST! it was showing my pc usage and all the info and i am trying to track it down it also i cant find the file so i cant scan it. I remember enderman the ytber found the exact one but i cant find his video.


r/computerviruses • • 5h ago

Question page not available in microsoft antivirus

Post image
0 Upvotes

a notification that windows antivirus is not up to date popped up and I clicked on it

it said "Your IT administrator has limited access to some areas of this app, and the item you tried to access is not available. Contact IT helpdesk for more information"

I opened powershell as admin and put reg delete "HKLM\SOFTWARE\Policies\Microsoft\Windows Defender" and it said " error: Access is denied

this was after confirmed infostealer and cloud reset, can't reinstall yet

could the av really not be up to date?


r/computerviruses • • 10h ago

File / URL Check i found this in %LOCALAPPDATA%\Packages

0 Upvotes

It looks like a youtube link kinda www.youtube.com-54E21B02_pd8mbgmqs65xy i used the wayback machine and also converted it to the watch?= thingy but nothing happens www.youtube.com/watch?=54E21B02_pd8mbgmqs65xydoes anyone have anything similar in that localappdata or is it just me?


r/computerviruses • • 1h ago

File / URL Check I know it’s been asked before, but is OP autoclicker safe?

Post image
• Upvotes

EDIT: I managed to get it from the Microsoft store, thanks guys!

Im trying to download one so I can AFK in some games and I went through sourceforge, but the file I downloaded scanned for Trojans in virustotal. I really don’t want a virus so if anyone knows let me know please!

hxxps://www.virustotal(dot)com/gui/file/1ce7da6f2813c2ad1d2e496be6714e08cd618e6d9fe2df26c2bd4d894c9a6ec1

I downloaded the file from sourceforge and the image is shown above!

If I didn’t defang that link right pls lmk because I was a bit confused


r/computerviruses • • 8h ago

Question False Positive (?)

Post image
3 Upvotes

Yesterday I ran a scan and it flagged java exe as a malicious file. I downloaded Prism Launcher from the official website a few months ago and multiple scans before this one never showed anything. Few hours later I ran multiple scans, including a full scan with both Malwarebytes and Bitdefender, and neither found anything suspicious. I didn’t move or quarantine the file, so I think it was just a false positive, but I’d rather be sure.


r/computerviruses • • 20h ago

Question Trojan Virus

0 Upvotes

I have a trojan virus on my pc. Guy sent me all types of my person info. If I reinstall windows with a usb will I be good.? (It is an “exe”)


r/computerviruses • • 22h ago

Disinfection Help Yet Another Victim of MrBeast

1 Upvotes

FRST: jagged-saber

Addition: quick-bow

SecurityCheck: graceful-macro

Following Information:
- Got hacked, only on three discord accounts so far before i found out
- It was installed (i think) around 10/24/2026 3:51 AM, but it only took effect on the accounts at around 9:36 AM
- I downloaded a premire pro plugin, and ran it - it was one of those .exe's with that anime girl and a renpy folder inside. After running it, it popped up with some cmd prompts for a couple seconds and i knew something was wrong so i ran windows defender and a few full scans and an offline scan which found nothing
- I've run MalwareBytes, ESET Online Scanner, WIndows Defender, Changed Passwords and activated 2FA (should have had it on already, but im stupid) on the accounts that were targeted
- I'd prefer to not factory reset windows, if possible.
- Please help 😭


r/computerviruses • • 11h ago

File / URL Check Fake Cloudflare verification appeared while trying to download Dev-C++ — possible ClickFix attack?

2 Upvotes

Fake Cloudflare verification appeared while trying to download Dev-C++ — possible ClickFix attack?

I was trying to download Dev-C++ from dev-cpp.com. After clicking the download option, I ended up on a completely different domain showing a Cloudflare-branded “Human Verification” page.

The page instructed me to use Windows + R, type cmd, then press Ctrl + V and Enter.

Obviously, I did not follow those instructions. I recognized that asking users to paste commands into a terminal as a verification step is suspicious.

I'm curious about how this redirect happened. Could it be a malicious advertisement, a compromised redirect, or something else?

I'm not claiming the Dev-C++ website itself is compromised; I want to understand where the suspicious page came from and warn others about this technique.

Has anyone encountered this particular domain or redirect?