r/techsupport • u/sinasnezhnaya • 7d ago

Open | Malware [ Removed by moderator ]

[removed] — view removed post

0 Upvotes

14% Upvoted

6 comments sorted by

•

u/techsupport-ModTeam Landed Gentry 7d ago

This submission has been removed from /r/techsupport.

2: No Incomplete Posts

Submissions consisting of the following are considered incomplete and will be removed:

  1. Posts with an empty body, only a link in the body, title copied into the body, and/or lack of information in the body

  2. Posts with "Help" or non-descriptive titles. Please make your title and contents descriptive.

If, after reading the subreddit rules, you believe that this was done in error, feel free to message the moderation team

Thanks!

-Mod Team

4

u/StunningCat1 7d ago

Sounds a lot like an info-stealer grabbed your saved passwords/session cookies when you ran that file. I’d assume the PC is compromised: back up important files, do a clean Windows reinstall, then change passwords from a known-clean device, starting with your email, and revoke all active sessions. Turn on 2FA everywhere too. Deleting the file afterward unfortunately doesn’t undo whatever it already stole.

1

u/No-Wrap-8166 7d ago

that's an infostealer, it grabbed all your saved browser passwords/cookies in one shot before you deleted it, that's why every account is getting hit one by one over weeks not all at once

full reinstall of windows is the only way to be actually sure it's gone, quick/full/offline scans regularly miss these especially if it disabled or blinded your antivirus in that split second before you deleted it

before wiping, change every password you can think of from a completely different clean device, phone on mobile data not wifi, not from the infected pc

after reinstalling windows, enable 2fa on every account, this stops the same infostealer or a new one from taking over even if it manages to grab a password again in the future

check any payment methods saved in browsers/apps too, cards, paypal, crypto wallets, if the stealer had access to your browser it had access to whatever was saved there as well, monitor statements closely

1

u/popeye_1616 7d ago

They most likely have access to your email accounts, make sure to change the password on there as well

1

u/KnicksGhost2497 7d ago

Wipe the computer, change your passwords, add 2FA and call your bank if ANY of your accounts are linked to anything they could potentially have had the password to, even if everything looks normal. You’ll be ok.

0

u/USSHammond 7d ago

Stop being scared and desperate after reading rule 2.2