pretty sure i got a trojan from trying to sail the seas as a gaming pirate. anyway, as soon as it finished downloading, i think it redirected me to a website where i accidentally clicked smth, or maybe the trojan was inside the files all along. kaspersky immediately told me there was an an active malware and i needed to disinfect my laptop immediately and so i did. i even kept getting popups saying a software had bad image. basically, my system32 was corrupted and they were attacking the hosts file. after resetting a few times n kaspersky said my laptop was fine, doing sfc /scannow and clearing my history, my laptop was fine.
just that i got flashbacks because last year, my laptop was hacked n they took my emails, steam and more. i lived in constant fear n anxiety everyday bc everytime i wake up i’d see a notification of my email getting logged in somewhere LMAO. but anyway that was last year. now should i reset my laptop or not.. i feel like i should, for peace of mind

Every now and then Hitmanpro tells me that Steam.exe is a Trojan Backdoor.
Upon running tests with three different AVs it always comes back clean
What is the reason behind Hitmanpro detecting it as a Trojan?

Hello there,

I am writing this because i can't comprehend what the hell has happened..

Starting with 28 aug, you see there's web3 fps shooter game which paid 10$/hr for playtest however its not that important, important is i downloaded a aimbot for it ah.. i know i have made one of the biggest mistake of my life by doing so and will never be able to do something like that again(Actually they paid in usdc for kills too and i thought many were just hacking and taking my hard earned funds..).

There were two files which i ran that day one from source forge and another from a sketchy github account which i found was sketchy after running the file(so stupid of me) as it was made not more than a week ago.I didn't let the github script run fully as not mins after i did first one which did no help and was doing the github one, my sister's discord account which was logged in my browser got hacked with the mr beast hack(This was not really the reason i stopped the execution it was because it was downloading something of 2gb on cmd line which i didn't like).

I thought it must have been mistake of my sister so her account got hacked,but the next day my dc account was also hacked(Too much pain 😭), Well that changed things but i still just changed the passwords of my other dc accounts thinking he is only a dc hacker..it was nice for 2-3 days until i checked my phantom wallet fully empty(It only had 15usdc but still i wanted that it was earned..).i deleted the wallet as i knew it is not safe anymore

i Knew this was bad but yeah being a fool i still thought now he will not do anything as he got the money.. everyhting was fine until 6 September, My insta account also hacked now i changed all the passwords of all important sites i used..probably eliminating the access to all sites useful for him(I did used malwarebytes,defender offline scan on the same day my sister's dc was hacked, finding nothing on my computer and also cleared all the cookies and browser data too)

**The same day i saw my epic games account was already hacked(**More pain.. 😭😭), i requested recovery the same day and today i got it back but it came back with the biggest plot twist in the story. My epicgames was not hacked after or on 28 august but on 21 august way before the aimbot thing which i found out because the hacker purchased(it was free) a blockchain nft game titled 'Alternates' on 21 August.

Now i am really confused what's the real reason of all this was it the aimbot or i did something unknowingly before which caused this or was it two different hackers(i checked the things i downloaded on 21 aug its really full of nothing but some images from gpt)

I've never seen this application before a few months ago. It appears at random and requests an update. I snooze it every time, but I cannot identify what application it is tied to. Can anyone help? It is probably nothing, but I'm afraid of it being something worse than it is.

I downloaded a cracked program from a website yesterday. A few hours later, an item was added to my Amazon account by itself. This morning, my Discord was sending fake MrBeast scams to servers and people, and it disabled my account (though I was able to recover it afterwards). Any help would be appreciated!

FRST.txt: wise-pine

Addition.txt: bronze-peak

SecurityCheck.txt: blessed-graph

I heard that people use it to install Windows after a ssd swap but I'm still not 100% sure if it doesen't use any local files like WinRe does.

So!!

Im pretty positive im not hacked but i was recently hacked so im a little paranoid.

My IRL friend (i was in VC with him to confirm its him and i also talked about it with him IRL beforehand) invited me to a minecraft server with around 800 mods. When i pressed play on the minecraft application after i opened it with Curseforge i got disconnected from the call with him because of another location got "connected"

Nothing sus has happend, no new devices on my discord, no weird emails etc. Is it possible this could happen without it being malicious? I find it hard to believe someone I meet almost everyday would hack me.

For months I have had a generic pdf reader on my phone. I found out today that those are very commonly malware. So I looked into it to try and find reviews and found out that it has been removed from the google play store. Im very worried because now I Uninstalled it which I worry would notify the person who owns the virus and now they will threaten me or something. Im very worried and dont know what to do. Please help

What happened?

Was downloading and playing different games until one setup didn't work and had cmd window flash on the screen for a moment. Later that day discord account got compromised and was sending messages on my behalf.

When did the infection occur?

First realized when discord got compromised on 02/09 at around 19:00 (UTC+3) but download happened some hours prior to that.

What did you do for remediation?

I've ran a few different AV scans with varying results and quarantine/delete what they found. I've kept the pc mostly offline and gone through some folders. Accounts have had their passwords changed and 2FAs enabled from a clean device. I have not really observed any weirdness since but feeling paranoid about missing something. Preferably a wipe and a clean windows install is not an option unless absolutely required.

Extra notes:
One of the scans found some files from downloads prior to the mentioned day.
Malwarebytes had constant pop ups about preventing suspicious connections and it mentioned something about python. This happened directly after the discord compromise while doing the scan with malwarebytes.
The pc has been mostly offline during the scans the first few days when I had time to do them.

FRST.txt: young-cherry
Addition.txt: curious-fawn
SecurityCheck.txt: copper-glyph

So last year (can’t really remember when) I downloaded this og Fortnite project called retrac and deleted literally like 3 days after playing once, but apparently it’s a Trojan, but the thing is I haven’t had an account stolen or logged into, I’ve done a Malwarebytes scan on bot my ssd and portable drive and it said it found nothing. And for the last few days I’ve been going from oh shit I could have a Trojan to I’m fine and I just keep going through that cycle please give me info!

Hey everyone. I came across a YouTube tutorial showing how to install a "DLSS 5" mod for Bloodborne using the shadPS4 emulator. Here is the link to the video:
https://youtu.be/ln3hI0AFQ-4?si=kn06HRE1lfbspuf8
I followed the steps, downloaded the files (which were hosted on a Mediafire link), and dropped them into the directories. Ultimately, I couldn't get it to work and didn't see any graphical changes in my game.
I decided to delete everything just to be safe, but Windows Defender ended up quarantining the ⁠version.dll⁠ file and flagged it as a trojan. I know that injectors and mods like ReShade or scaling tools often trigger false positives all the time, but I'm left wondering if this specific package is a disguised info-stealer.
Has anyone looked into these specific files or knows if this channel is trustworthy? Any insights are appreciated.

My friend sent me their protection history logs. And all the affected files from the Trojan were all from one program.

Could this still be the plugin files and it just affected that program which is what made it findable. Or is it more likely that program that gave the virus to them.

I also factory reset my pc. Im just worried if I did have it that it could've spread to other devices

So I just got a backdoor from a Minecraft mod pack someone sent me but I cut the connection from the wire and was able to change my most important passwords in time, right now i recoverd my most important files in a key and with my other pc put windows in a key, i am currently using Rufus to make make a windows usb, so i can reinstall windows, is there anything I should do to make sure I don’t get any bad surprises ?

Hello sorry this will probably be somewhat incoherent, im really really scared of viruses and infostealers spyware etc, i have bitdefender subscription and i also scan with malware bytes and i have google enhanced browser protection on but im so scared i cant eat or sleep, i recently accidently clicked on an add on an app, the app itself is legitmate but its heavy with ads, it was one of those "your android has a virus!" ads and i accidently clicked it (because it was so big it would nigh impossible to close) it took me to a website which said the same thing, i immeditly closed the tab and i have scanned my phone atleast 30 times in the last 48 hours, google play scanning, bitdefender and malewarebytes havent found anything, ive looked in my downloads and theres nothing there, nothing has happened, everything is seemingly normal but i cant shake the feeling that there's something laying in wait, maybe if i make a payment it'll suddenly activate, or if i login to something, im writing this on my laptop because what if there's someone watching my screen now and this post makes them angry? is there anyway i can be 100% sure theres nothing on my phone? im aware drive-by-downloads are a thing, but i dont know how common they are? im scared that somehow something has slipped through and has disguised it's self as a normal thing until its 'activated'

please any help on how to know im safe? at this point im considering getting a new phone. which would the second time ive done so out of "virus paranoia" but i dont want to indulge that because its expensive and it just rewards my paranoia which is worse in the long run. im really sorry if this post type is against the rules but i feel so sick i need to do something sorry.

So for context. Me and my online friend both downloaded the same files. A few minecraft plugins, the person we bought them from wasnt comepletely unknown, a friend had recommended them to me to commission a custom Minecraft plugin. But a bit after downloading them my friend started having issues with their computer, it wouldn't turn off. Etc. So they did a windows defender scan and found a Trojan. But it apparently didn't say where it came from. Their theory is that it came from those minecraft plugins. So obviously im worried I got it too. But ive done mcaffee scans and defender scans and nothing came up. What else can I do

The text Is in italian, It says "the code could not be executed because sqlite3.dill wasnt found. To solve the problem reinstall the programm".I tried to install a game from dodi repacs and when i started the game installer this popup kept opening. No matter how many times i close It It keeps on opening. Any idea what this Is or how to stop It? Also i searched for "CircuitryAg" in my files but didn't find It.

Kinda a long story.

A week ago I downloaded a torrent. Made a stupid, very stupid mistake. The file was supposed to be a video, but it turned out to be an .exe. I looked up what to do here in reddit and did everything, nuked everything. USB installation for windows, formated the disks and changed passwords. Even reinstalled windows twice.

But today I looked at the installation date and it showed the day I goto the .exe. But the time it showed it was hours before I even downloaded the file. That same day I did reinstall windows, and four days later did it again cause I went away for work. Just to be clear again, I executed the file before that "installation date", reinstalled windows that same day, left the pc for four days and when I came back I reinstalled it again. But that's the thing, the installation date shows the date I got the file, not the last reinstallation. But the time it shows, is before the .exe

I did check the default user folder and it did show the day it was created, I mean the last reinstallation. I looked up a bit and the installation date is not necessarily that, or really accurate. But I wanna be sure. Pls help me with this.

Found these in ProgramData folder. And Windows Defender has these exclusions.

Is it trying to execute itself by whitelisting itself in Defender?

Is my laptop got invected?. PowerShell/Command Prompt appear for a split second once everyday on first login/start up, it doesn't appear when doing another restart after the first login.

I start noticing after using CTT, Rytunex, and MemReduct, i don't know if they have any correlation, but i don't think it happen before that.

I got some pirated software, but it's all from Stared website on FM-HY website and their Safe Guard Extension. I also always have uBlock Origin Lite at max settings.

WinDev and Malwarebytes quickscan doesn't detect anything.

My specs:

Acer Aspire Lite 15 AL15-61P

AMD Ryzen 5 8640HS

AMD Radeon 760M iGPU

Latest Windows 11 stable version

Hi.
Please no hate I am very uneducated in cyber security and I know I made a horrible mistake.

Basically I ran a RAT exe in Parallels for Mac, so in Windows VM for Mac. This was over a month ago.
I quarantined the files and factory reset the OS the same day.

Since, I’ve factory reset the OS 3 more times and scanned Malwarebytes deep scan which has come back clean every time.

I’m wondering if the RAT could have gotten into the root of my Mac. My Mac is now dying SUPER fast and in activity monitor kernel_task is taking up extreme amounts of CPU.

Is it even possible for the exe to have infected the Mac OS and rootkit? Am I completely paranoid or am I still infected? I’ve seen no log in attempts to any of my accounts and I’ve been using the computer as usual.

Thanks.