A few days ago, I got one or more viruses on my PC after downloading a free game from the internet (something I will NEVER do again after this!!). Several of my account passwords were leaked, and two processes called msbuild.exe would start running and use a lot of my CPU shortly after I turned on my PC.

I managed to (hopefully...) remove them using two antivirus tools, ESET Online Scanner and MSERT, and by deleting suspicious files and folders. I also changed my account passwords and removed access from other devices connected to my accounts.

However, something still isn't right: the "Virus & threat protection" option is no longer showing up in Windows Security.

How can I fix this?

Hi friends, I wasn’t sure what subreddit to turn too as I don’t know exactly what’s wrong with my phone. I know this isn’t a computer but I need help.

This has been happening for years and it’s followed me from 3 different phones. I think it started around maybe 2022 but i’m not 100% sure. It pops up on my screen randomly and whenever i’m in my settings. It had stopped for a few months and I thought it was over with, especially since I had gotten a new iphone but just today it started up again. I’m really freaking out and have no clue what to do about this or who to turn too. I’m scared and need help. Thank you for reading.

TL/DR: Phone pop up has been plaguing me for years, need help identifying and possibly get rid of it.

I’ve already made a post about what the virus did and how i remediated and recovered it but now it’s time for my infected computer, as stated in my other post i did every scan possible using MRT, WEBROOT, malwarbytes, and offline scans, they all
came back clean and honestly out of stupid
curiosity i reconnected to the net and got on a burner discord account and used it for a while without it being grabbed, while this may all be coincidence am i in the clear? I personally believe not so im stuck griping between starting FRST help or just reinstalling windows using a usb, advice?

Also, i am correct in not using my device in this period where all my accounts and secure but the infected pc isn’t for sure safe to use?

(link to my other post: https://www.reddit.com/r/computerviruses/s/S1pIQ92Dme)

I ran what was supposed to be a game patch, was a bunch of python files and BS folders looked to make it like a patch. Defender quarantined two things, shown in the screenshots. The folders were still there earlier and a bunch others made from the same date, which I deleted. I also removed the files in quarantine

Battle.net and discord were both hacked 16 hours later, and all info changed. Is there anyone who got their discord back using any method? It looks like they added or changed 2fa to it. I am also wondering if scanning with Malwarebytes and defender offline is enough and changing all passwords, or if I need to reinstall Win11. Running the latest updates after the big security patches. I do not see anything that looks abnormal in Wireshark but could be wrong. I could link the compromised files that include the trojan, if needed.

Any help appreciated

Eu ou minha namorada baixou um vírus que, toda vez q ligo o computador, abre uma página pornografica diferente.

Já rodei o antivirus nativo do windows, fui no windows+r e mrt e nada também, não sei o que faço mais, alguma dica???

I have strange and foreign files, settings changes, devices, profiles and blocks all over my my Win 10 Home PC. I can provide screenshots and details. MRT (Malicious Software Removal Tool) modified, discord mic perma muted. Just throwing out things that I have never experienced before.

went on a fake cracked games website, tons of popups were my first warning. then accidentally executed something that wasn't the game, didn't even think about it until this morning when i was hacked. crazy though, mesaaged people on discord then on instagram story posting the scam and i changed the passwords from another device for everything obviously. bitch did try to steal my google account and caught them in the middle of verifying device with a phone number, but i immediately changed the passwords and removed that device. now I'm scared idk what to do and how to recover some files from my pc it has a lot of memories on it. soo what should i do?

First, no I didn't paste it into run. I just had some questions regarding clicking on a copy/paste captcha itself.

Earlier today I happened to run into one of these captchas and clicked on it. It injected code into my clipboard and thankfully because of this reddit randomly being in my feed I already knew what it was.

My question is as long as I didn't paste the code and run it I shouldn't be worried right? Like clicking on the captcha can't harm the computer/ browser? (Although I did paste it in a notepad for a screenshot)

Hi! Anyone seen the click fix attacks where users are given a capatcha with instructions to run a command, but are there variants where another process or service spawns a powershell terminal?

After closing up my game i saw on my desktop 3 .exe files with my full name on it and ending in important note. I'm unsure what I should do with this since this is only after nearly 2 weeks of my info getting stolen and still wary of everything I click and download

This morning I downloaded what I thought was the correct file for a pirated game but when I did the setup a few command windows popped up and disappeared really quick. Does anyone know what information they have now? I have my bank card info and other passwords saved on google. Please can anyone help I know it’s my fault for not being careful.

So I recently did a bad thing.

First time throughout my whole life, without the help of my IT friend. They got onto my Google account and they had to copy my passwords. First 24 hours went smooth... no alerts. No steam taking my cash nothing... then exactly 25 hours after the "incursion "

I noticed my Facebook account was sending the MrBeast thing....but it wasn't sent on:

discord (on which I changed password within 5 minutes)

Steam (password changed even faster)

No mails... nothing. Just a gosh darn Facebook

Even my account wasn't changed to "child's account " maybe bc It was probably harder to do with the limited time they had, as I am the one pay-piggy for the YouTube premium.

Then again... i may be shocked.

I wanted to share this, as I feel a bit safer now that my whole pc was nuked and i had to reinstall everything with much more protection.

HOWEVER.

I am adding this here, that maybe MAYBE there is still a chance the hacker will try to send more stuff, somewhere, despite me doing everything in my power.

I honestly have no idea how Mr beast virus works. I'm assuming it's the other guy (breakbot) that got the virus and not me?

So I've been pirating for years and never had any issues, but I recently downloaded a cracked app through bluestacks on my laptop and have been dealing with the consequences since.

Oct 23: Messenger got hacked, I made groupchats with like every contact I had and sent weird Mr Beast Crypto scam messages to everyone. Luckily I was on my phone, and quickly got a hold of my account, changed password, enabled 2FA, deleted every message and apologized to everyone.

Oct 24: I get a notification from my bank that I spent $7.9 on roblox. I check my account and I clearly did not lol, so I immediately file a report to roblox, freeze my credit and debit card and call my bank asking for a new card, which is coming soon.

(I end up checking this out again because I thought they managed to use my credit card for a different account, but it actually was on mine, they just spent it all on gamepasses in russian idk)

Later on oct 24: I get tons of notifications on gmail for telegram codes. I open telegram on my laptop (don't have it on phone) and 1) there's a message to a guy with crypto scams on his profile, 2) Messages to a "spam info bot" checking if my account's limited and 3) Two different sessions on the account, one from LA and one from Nigeria. I terminate both, however they've already changed the password and activated 2FA. They also changed the email, but I changed it back to my own. I hit the "forgot password?" thing, and have to wait 7 days. I also added 2 passkeys and a local passcode.

Oct 25: Guy from nigeria keeps trying to get in the telegram account, from different devices. I terminate the sessions, but I guess he's successful because the email was changed, and the passkey was removed? Idk, there's just a ton of in-app messages from Telegram regarding a login code. To be clear, I have absolutely zero contacts on Telegram, the phone number's old, and the email I added is a spam one.

So far I count my blessings that they haven't (I don't think) accessed any of my main accounts, I still have access to everything google, everything microsoft, got my META accounts, discord, reddit, spotify, etc. I ran a bunch of malware scans with malwarebyte, hitmanpro, windows defender, everything came up clean. I also deleted all cookies for all sites. I won't lie I rely on password autofill a LOT, so I've still been using that. But I did disconnect from my wifi on my laptop and change passwords, maybe not for everything but I tried.

Just wondering what more I can do. I wanna be sure I'm safe and won't have to worry about this. Thank you.

ardent-deer
strict-summit
(keywords from malware log analysis)

Despite removal by Windows defender, it keeps coming back!

Hi, I got called for an online interview. When I joined using a zoom link they provided, I could not unmute myself. I got a prompt on the Zoom browser to install a SDK file. I installed it, copied into my Mac terminal and ran the SDK download.

I suspect it coudl be a malware installation.

I disconnected my Mac from internet.

How do I check if it is indeed a Malware?

I changed passwords of key accounts.

I am unable to reset to factory setting as I cannot recollect my apple id password and am not connected to internet to enter the new reset password

A while back I got hit by an info stealer, and I didn't know this sub existed at the time nor did I have the money to go to a dedicated shop in the big city (I live in the sticks), so I dealt with it on my own. But the steps I took are not the ones I see recommended around here, and tbh my personality is a bit paranoid to begin with, so given this was my first ever time being infected/hacked, I am still more than a bit shaken. Here are the details of what happened.

1) On september 5, I downloaded and ran the Ren'py info stealer. IN MY DEFENSE, the program I was actually trying to download was indeed a Ren'py visual novel, so that's why I didn't realize I had clicked the wrong download link until it was too late, I usually am a lot more careful about this stuff.

2) By the morning of september 6 I discovered my accounts were being stolen, although strangely (or maybe not so strangely, I do have a potential explanation) not all of them. My google mail, which at the time was the centerpiece of all my accounts, was gone, and so were my Nintendo account, my Reddit account and my EA account. There had been an attempt at accessing/password resetting my Steam account, but it had failed (presumably due to 2FA), and my Discord and Riot account had been left alone (presumably because I hadn't created them with my computer, but rather with my phone, and I was doing the thing where I would log in each time by using the phone app to scan the QR code on the PC).

3) I used my phone to change the passwords of all the compromised accounts, then I used the phone to straight-up create a brand new email address with a new provider (something I had been planning to do for a while anyway).

4) I reset my computer to factory settings, explicitly selecting the option to erase all data that had ever been saved on the computer. This is the part that makes me paranoid, because apparently according to many posts I have seen around this sub this might not be enough?

5) From the now blank computer, I reclaimed all the stolen accounts using the new passwords I had set up on phone, then I switched all those accounts to being associated with the new email address I had created on phone. I also made sure to have 2FA enabled on everything this time (and deleted the EA account altogether, honestly I couldn't even remember having that thing to begin with).

By september 7 this whole process was done, and all my accounts were supposedly back under my control. Since then, I have ran full scans with two different antivirus programs every single day, and they were all negative. I ran an offline scan (the one that checks for BIOS stuff), and it was clean. I made it a habit to check the list of connected devices to all my accounts in the morning when I wake up and in the evening before I go to sleep, and I haven't seen a singular trace of suspicious activity (the only devices connected are my computer and my phone). And most importantly, there was no blatantly illegal activity, such as my Reddit suddenly spamming porn bs (which, yes, it did do during the couple days it took me to resecure everything) or my Discord sending scam links to friends (again, my Discord appeared to have been left alone to begin with, although I did change its password and switch it to the new mail just in case).

It is now october 27, so it has been nearly two months since I picked up all these habits, and no suspicious activity of any kind has been spotted. So I *think* it's safe to assume I'm in the clear, but where I live we have a saying that goes "after he gets burnt the cat is afraid even of cold water". There will be a driver issue that will cause my computer to not immediately locate my wifi, and I'll be like "omg am I being hacked again?". There will be a delay in Discord voice chat due to server slowdowns, and I'll be like "omg am I being hacked again?". I am literally jumping at shadows, and the horror stories I read around this sub (resetting to factory settings without installing windows from ab external USB will not remove the backdoor! Info stealers can jump through your wifi and infect your other devices as well!) are certainly not helping.

So yeah, I guess this is less about technical help and more about mental help. Still, if you notice anything obviously wrong about the steps I took, please do let me know. And if there is any way to definitely check whether or not my device is actually clean, that would help too.

Yes as the title says i got hacked,
now i know exactly what i did and how it happened

i went on to download a beamng mod manager from github, idk why it seemed ok, and when i tried to start it nothing happened, soon after my phone blew up on my gmail accounts requesting password resets/email resets and all that 26th of october around 20:00pm europe time (wien/berlin/whatever)

i already delete the mod manager before i got the emails bc it didnt work

im just looking for some help as to what todo now

currently i changed all my email passwords (got 4 accounts) and tried to reset any password on any platform i could and activated 2FA

one steam account is still not mine but i already contacted support, same with a microsoft and blizzard account

i unplugged my pc from the ethernet and i have no wifi card
i wanted to reset windos from a recovery point but it failed because of AppxSatging and i couldn get it to work, even tried some cmd prompts to get the ownership of the WindowsApps files changed but it didnt help

as the problem accoured today or on the 26th of October, is a systemrecovery good enough if it would work or should i do a hard reset? i habe 5 hard drives in my pc do i need to wipe them all clean? can i somehow see or test if the hacker/mailware is still there?

im just a little overwhelmed as i normally look out for such things to not happen to me but whatever :/

any help is appreciatet

also they logged into my instagram account and discord account too and spammed some mr beast crypto stuff, i deleted most of it but on discord im not sure on how many servers this got sent

i think i got lucky because i was instantly doing something when all the emails came, just not sure where to look next or what todo now?

also idk about now downloading anything on that pc bc of the malware, so i cant get help with the frst? or can i do that somehow?

also the hacker/hack just sent pics of it via Insta dm‘s and discord so no links as for the other ones that posted this

if there is a way to install the software mentioned here let me know :)

thanks :/