aeeptos{.}sbs it is a government (UAE, Dubai) because thats where im living fake ransomware gonna share ts with Trainium

VirusTotal link:

https://www.virustotal.com/gui/url/410cce447a57c1fb809be6ac1f399b0975099f651d42abe70f6895daca8eb554

Last night around midnight I was trying to update my Roblox launcher and got sent to a page to get a key. It had a "verify you're human" step that told me to paste a command into Run/CMD. I was sleepy and did it, three times. The command was a long obfuscated cmd /v:on string with a scrambled character table and a loop that rebuilt a hidden command and ran it. I realized it was malware after like 3 hours (I think it's the ClickFix technique).

(If you were wondering why there was a key and stuff, i was afking some random game for fun since it was so grindy that i got bored and i just wanted to script it ) this is 100% a lesson learned from me.

What happened:

- 3:56 AM: my Discord sent 2 messages with a MrBeast giveaway scam

- 4:00 AM: my Instagram posted 2 scam stories

- Facebook and others showed no activity

What I've done: - Ran Defender quick scan and Malwarebytes before the reset (both found nothing).

- Task Manager showed nothing unusual.

- Did Windows Settings > Reset this PC > Remove everything (no USB available for a clean install)

- Before the reset: Malwarebytes and Defender scans are clean

- After the Reset: I use Norton 360 and it found nothing

- Changed passwords on everything from a clean device, logged out of all sessions, turned on 2FA

Discord & Instagram Password's were not changed even after the story and the messages were sent. also i let this PC run online for like a while till i turned off the ethernet around 7:00 where i started troubleshooting it. i changed all passwords from my android, and the rest from my pc AFTER the reset.

reddit users please help me :(

(P.S i know i fell for a stupid trick, i was sleepy okay?)

ANOTHER THING TO NOTE: WHEN I MEAN RESET, I MEAN I USED THE RESET IN THE SETTINGS, I DELETED ALL FILES, SO NOTHING WAS BACKUP'D. BASICALLY A HARD RESET.

Well, as the title says, I was infected by the infamous infostealer. Here's what happened in chronological order:

1. The infection happened after I tried downloading an honestly rather suspicious mod. I hate how I love Morrowind;
2. I noticed things were strange when my keyboard's accents were acting weird. I couldn't use characters like '~' or '´' as they double typed themselves;
3. I googled the issue and found some guy's video saying it was a virus. I then downloaded both Malwarebytes and Kaspersky to scan and fix it (according to the video). Both softwares did detect odd stuff;
4. The chaos began. I started getting banned and removed from most Discord servers I used to be a part of. My account was spamming everything and everyone;
5. Some people started sending me screenshots of weird posts on my Instagram account.
6. I immediately unplugged my PC from the internet and began changing my passwords through my phone;
7. Meanwhile, I knew a clean windows install would be ideal, but since I had no flash drive with me, all I could do was the other formatting/restoration method (I think it's called recovery? I did select the 'erase everything' option though);
8. A couple days after that, I got a message from a friend saying I had send them odd links on Steam. I also remembered I didn't change my steam password with all my other accounts, so I did it right after that;

The thing is...now I don't know if those Steam spams happened because I was still infected or because I didn't change my password. Do I still need to properly format my PC? Any advice?

So, this has been a problem for a bit, and I'm not exactly planning on solving it, because, from what I understand, as long as I don't download any actual viruses, I should be fine, but still, I do want to know what I am capable of doing to solve this situation in case a time where I need to comes.

So, I have the winring0 thing on my laptop, from what I understand, it basically allows programs full access to my laptop. But you see, here's a thing, a program called Gigabyte Control Center relies on it to function from what I understand, or at least that's what I think the case is, I'm not entirely sure. The program basically allows you to change some fan settings and stuff, it isn't anything special.

Still, this winring0 thing does bring me some slight concern, and I would like to know what to do in case a time comes when I DO need to remove it.

so uhh i instaled a bunch of games from optiprojects, opened them all, half worked half didint, i opened an installer of plague inc and it installed and didnt open the game, i got warnings from microsoft about people trying to log in from malasia usa rusia and shi, i did a bunch of security stuff to the point i think im good..?

today midnight my Instagram got hacked and some dude started promoting a Mr Beast cripto casino and a free 2500$ gift, send it to ALL the people i follow and posted it to story, i also did a bunch of security shi and activated 2 step verification with autenticator, i didnt even see from where it was cause it looked like he logged of cause there were no active sesions but mine.

i know i walked straight into that shi with the games cause defender told me it was suspicions ( i remember it said suspicius cause if it had been a strong word like defender protected your PC or malware detected i woudnt have opened it) and i still opened them. ( im doing a lot of security shit with chat gpt btw i think im doing good)

I dont even use reddit but i came for yall knowledge cause i know theres a lot over here. What can i do or what can you tell me

reposting from another r/ smt i alredy forgot

I tried to use bit defender and malware bytes but I did not see anything? the provider is Kernaim

Hello everyone i bought new gaming pc i have changed it sinse 2023. So I installed amd graphics as usual and I got to check digital signature of the file just to be sure.

And from what I remember the correct digital signature is

Advanced Micro Devices. Inc

Bur the current one I have only says Advanced Micro devices. No Inc at the end and im getting worried didi they change the name ?

So I got infected by a fake Windows key product but .. I didn't download it?? At all?

I deleted all files that were named or anything AActools I deleted in normal mode, safe mode and task scheduler.

I also know of AutoKMS or so but I didn't have any files named that (yes I also had show hidden files)

My windows say there's no activation key anymore and my windows security scans all came out clean (offline and quick) except I'm doing the long check rn.

I've logged out of all suspicious log ins to my accounts and changed all passwords.

I'm still paranoid and need advice.

Started getting pop-up ads that I can't close about a week ago. I've stried running antimalware to get it removed and tried a full system wipe reset yet nothing. They show up in the bottom right hand corner of everything. On the MSI boot up screen before the oc turns on, the restart screen even after the wipe. I don't know what else to do, please help