Ran an obfuscated CMD command from a fake “key/CAPTCHA” page, Instagram and Discord got hijacked. Did a full reset, how do I make sure I’m clean?

[u/TheMemeCollegy]

Last night around midnight I was trying to update my Roblox launcher and got sent to a page to get a key. It had a "verify you're human" step that told me to paste a command into Run/CMD. I was sleepy and did it, three times. The command was a long obfuscated cmd /v:on string with a scrambled character table and a loop that rebuilt a hidden command and ran it. I realized it was malware after like 3 hours (I think it's the ClickFix technique).

(If you were wondering why there was a key and stuff, i was afking some random game for fun since it was so grindy that i got bored and i just wanted to script it ) this is 100% a lesson learned from me.

What happened:

- 3:56 AM: my Discord sent 2 messages with a MrBeast giveaway scam

- 4:00 AM: my Instagram posted 2 scam stories

- Facebook and others showed no activity

What I've done: - Ran Defender quick scan and Malwarebytes before the reset (both found nothing).

- Task Manager showed nothing unusual.

- Did Windows Settings > Reset this PC > Remove everything (no USB available for a clean install)

- Before the reset: Malwarebytes and Defender scans are clean

- After the Reset: I use Norton 360 and it found nothing

- Changed passwords on everything from a clean device, logged out of all sessions, turned on 2FA

Discord & Instagram Password's were not changed even after the story and the messages were sent. also i let this PC run online for like a while till i turned off the ethernet around 7:00 where i started troubleshooting it. i changed all passwords from my android, and the rest from my pc AFTER the reset.

reddit users please help me :(

(P.S i know i fell for a stupid trick, i was sleepy okay?)

ANOTHER THING TO NOTE: WHEN I MEAN RESET, I MEAN I USED THE RESET IN THE SETTINGS, I DELETED ALL FILES, SO NOTHING WAS BACKUP'D. BASICALLY A HARD RESET.