I got a link in my email that looked legit and clicked on the link. It sent me to a website but chrome said the website may be dangerous and asked if I wanted to continue or go back, I pressed go back. I look in my chrome downloads and it says nothing, just “files you download appear here” so I don’t think it downloaded anything. I don’t think I even entered the website. Do yall think I’m safe? (Just a anxiety question)

I tried to use bit defender and malware bytes but I did not see anything? the provider is Kernaim

Last night around midnight I was trying to update my Roblox launcher and got sent to a page to get a key. It had a "verify you're human" step that told me to paste a command into Run/CMD. I was sleepy and did it, three times. The command was a long obfuscated cmd /v:on string with a scrambled character table and a loop that rebuilt a hidden command and ran it. I realized it was malware after like 3 hours (I think it's the ClickFix technique).

(If you were wondering why there was a key and stuff, i was afking some random game for fun since it was so grindy that i got bored and i just wanted to script it ) this is 100% a lesson learned from me.

What happened:

- 3:56 AM: my Discord sent 2 messages with a MrBeast giveaway scam

- 4:00 AM: my Instagram posted 2 scam stories

- Facebook and others showed no activity

What I've done: - Ran Defender quick scan and Malwarebytes before the reset (both found nothing).

- Task Manager showed nothing unusual.

- Did Windows Settings > Reset this PC > Remove everything (no USB available for a clean install)

- Before the reset: Malwarebytes and Defender scans are clean

- After the Reset: I use Norton 360 and it found nothing

- Changed passwords on everything from a clean device, logged out of all sessions, turned on 2FA

Discord & Instagram Password's were not changed even after the story and the messages were sent. also i let this PC run online for like a while till i turned off the ethernet around 7:00 where i started troubleshooting it. i changed all passwords from my android, and the rest from my pc AFTER the reset.

reddit users please help me :(

(P.S i know i fell for a stupid trick, i was sleepy okay?)

ANOTHER THING TO NOTE: WHEN I MEAN RESET, I MEAN I USED THE RESET IN THE SETTINGS, I DELETED ALL FILES, SO NOTHING WAS BACKUP'D. BASICALLY A HARD RESET.

Started getting pop-up ads that I can't close about a week ago. I've stried running antimalware to get it removed and tried a full system wipe reset yet nothing. They show up in the bottom right hand corner of everything. On the MSI boot up screen before the oc turns on, the restart screen even after the wipe. I don't know what else to do, please help

.

I recently got a minecraft hack client for a video with my friends. About to start, I realized I had not figured out how to get it to work. I tried for a while, but eventually I went back to the video I had found it on to try to find a setup guide. I had the weird feeling to check the comments, so I did, and I found like 10 different people saying that it was a virus. (the channel wasn't popular) I immediately went to go delete the file off my downloads, it was a .zip with a whole bunch of things including an exe file in there. I tried to delete the folder I had extracted but it kept saying it was in use of another program. I checked task manager and nothing suspicious was there, and minecraft was not open. I looked in the file, and it seems like when I had opened the exe before, it dissapeared, because it was not there. I imediately reset my computer, finally was able to delete the folder, searched my whole computer for the name of the file, and ran microsoft defender. I thought it was all gone, but when I went back into minecraft, my keys were either late, or not even there. I had to hold down W, wait 2 seconds, and then I would move. Something is very wrong, and I don't even know what the virus's main purpose was! I know there might have been a better place to post this in, but I couldn't find anything that helps with this stuff, and I need help fast, depending on what this will do to my computer! I can't play minecraft! What is weird, is that my keys are spot on for every other game I play or when I type, it is just minecraft that has the delayed keys! Please, I really need all the help I can get!

Hii, I think I might have reluctantly completed a sketchy captcha through a pirate streaming website yesterday, but didn't think much of it until this morning, after being warned via email that there was some suspicious activity happening in my discord account.

Upon login, I realised it had been used to spread that Mr. Beast screenshot scam that has been happening a lot lately.

Shortly after, I was notified they got into my Epic Games account too, and later today they also got an old facebook account, all of them connected by the same email.

I disconnected my pc from internet connection as soon as I could and made sure to change passwords and log off of everything important using a safe device.

I can still run a scan using malwarebytes, however the access to windows security center has been limited "Your IT administrator has limited access to some areas"...

I'm currently backing up some documents into a USB driver in order to proceed with either a reset or whatever might be the best/only solution in this case.

Is there something else to be done to fix this? If someone could provide some guidance on what to do from now, that would be great.

Thank you so much!!

Hello everyone i bought new gaming pc i have changed it sinse 2023. So I installed amd graphics as usual and I got to check digital signature of the file just to be sure.

And from what I remember the correct digital signature is

Advanced Micro Devices. Inc

Bur the current one I have only says Advanced Micro devices. No Inc at the end and im getting worried didi they change the name ?

hello! i very recently made a post here where i asked about receiving an infostealer by simply visiting a suspicious website and possibly allowing notifications. i did not run anything and i did not download anything. i double checked my run commands and my powershell as well and nothing was there. malwarebytes standard scan caught nothing as well - all stuff i checked for paranoias sake.

this was several days ago. i was feeling fine because i did not do anything to cause incident.

however, at 1 am this morning apparently an instagram account i havent touched in ages had an attempted recovery. its not my main account and the instagram email seems very much so official, equipped with a random verification code. is this an insane coincidence of an unrelated incident of someone trying to get into my account?

i did not change the password to this instagram account in the middle of my panic a couple days ago since i had forgotten about it - if it was an infostealer, wouldnt they simply have this log in info for this account?

another thing is in my notifications i had my windows virus scan results. however, when i tried to click the notification it wouldn't let me view, stating that "your IT administrator has limited access to some areas of this app, and the item you tried to access is not available. contact IT helpdesk for more information." i am my administrator. i saw some things saying if you have a third-party antivirus, this can happen. is it because webroot is my primary antivirus?

sorry if any questions are a bit silly - this put me very on edge after i felt very assured.

thank you!

whenever i open either program, it closes within a second. this does not apply within safe mode, nor have i found any other utils it affects. does anyone recognise this or have any recommendations?

EDIT: ok so i updated windows and now it seems to be working fine so idk

so uhh i instaled a bunch of games from optiprojects, opened them all, half worked half didint, i opened an installer of plague inc and it installed and didnt open the game, i got warnings from microsoft about people trying to log in from malasia usa rusia and shi, i did a bunch of security stuff to the point i think im good..?

today midnight my Instagram got hacked and some dude started promoting a Mr Beast cripto casino and a free 2500$ gift, send it to ALL the people i follow and posted it to story, i also did a bunch of security shi and activated 2 step verification with autenticator, i didnt even see from where it was cause it looked like he logged of cause there were no active sesions but mine.

i know i walked straight into that shi with the games cause defender told me it was suspicions ( i remember it said suspicius cause if it had been a strong word like defender protected your PC or malware detected i woudnt have opened it) and i still opened them. ( im doing a lot of security shit with chat gpt btw i think im doing good)

I dont even use reddit but i came for yall knowledge cause i know theres a lot over here. What can i do or what can you tell me

reposting from another r/ smt i alredy forgot

Well, as the title says, I was infected by the infamous infostealer. Here's what happened in chronological order:

1. The infection happened after I tried downloading an honestly rather suspicious mod. I hate how I love Morrowind;
2. I noticed things were strange when my keyboard's accents were acting weird. I couldn't use characters like '~' or '´' as they double typed themselves;
3. I googled the issue and found some guy's video saying it was a virus. I then downloaded both Malwarebytes and Kaspersky to scan and fix it (according to the video). Both softwares did detect odd stuff;
4. The chaos began. I started getting banned and removed from most Discord servers I used to be a part of. My account was spamming everything and everyone;
5. Some people started sending me screenshots of weird posts on my Instagram account.
6. I immediately unplugged my PC from the internet and began changing my passwords through my phone;
7. Meanwhile, I knew a clean windows install would be ideal, but since I had no flash drive with me, all I could do was the other formatting/restoration method (I think it's called recovery? I did select the 'erase everything' option though);
8. A couple days after that, I got a message from a friend saying I had send them odd links on Steam. I also remembered I didn't change my steam password with all my other accounts, so I did it right after that;

The thing is...now I don't know if those Steam spams happened because I was still infected or because I didn't change my password. Do I still need to properly format my PC? Any advice?

Alguém sabe por que esses emails estranhos aparecem como contatos sugeridos?

I was at university when one of my classmates told me he wanted to experiment with something. He had a strange-looking device attached to a USB cable and wanted to plug it into my computer.

I refused because I didn't know what the device was or what it could do.

However, while I was distracted, he plugged it into my PC without my permission.

When he did, I noticed that an Instagram page opened in the browser, and he followed his own account from it.

For context, I don't have an Instagram account. The Facebook account on that computer isn't my real personal account either; it's just a test account I use for experiments.

I don't know what the device was, what exactly it did, or whether it could have accessed anything else on my computer.

My questions are:

What kind of USB device could do this?

Could it have executed commands or accessed files without me noticing?

Is there a risk to my other accounts, saved passwords, or personal data?

What should I check on my PC to make sure nothing malicious happened?

I'm especially interested in hearing from people with cybersecurity or digital forensics experience.

Hey everyone, was wondering if anyone here wouldn't mind taking a quick look at a github project for me? It's a mod that adds online multiplayer to a game, but honestly I'm a little paranoid about what's under the hood. Apparently it was made pretty fast with the help of newer AI tools like a few other recent mods, so I'm worried there might be some hidden security risks or bad practices baked in that I wouldn't spot myself. I'm not trying to throw shade at the creator or anything, I'd just feel way better getting a second opinion from someone who actually knows how to audit this kind of code.

phishing**

May you please help me determine if the following encounter was malicious. im on iPhone thankfully which I know is pretty safe but it’d be great if someone could do a full breakdown of the website please.

trying to figure out what this tiktok ad has taken me to. it was a post on TikTok where you go to swipe for the next photo but instead it opens a link, usually to a company’s website.

in my case, it took me to the website below. I’ve pasted the virus total and cloud flare links below. virus total has 1 hit for phishing.

the website didn’t do anything when it loaded. I used browserling to try through a windows environment given im on iPhone and nothing happened that I could see.

was the goal perhaps to steal cookies or something which would be pretty rare from just visiting a site based on my knowledge.

chatgpt was suspicious of the payload script on the summary in cloud flare and said it redirects you to another website although it could just be hallucinating. I cant get chatgpt to confirm the website again. unfortunately I closed the first chat I had with it where it said the redirection thing.

thanks so much for your help!!

https://www.virustotal.com/gui/url/777beb942bbdb5db0e50e87e71873d4dee3596f21a2b2cd0af5239b28cab8ba2/detection

https://radar.cloudflare.com/scan/cb1a62ff-ce59-4f54-9d2b-1a07971cbd5b/summary

shortened link: https://asu-drop-20260929[dot]pages[dot]dev/payload

tiktok ad link: https://asu-drop-20260929[dot]pages[dot]dev/?campidrd=902&sub1=771430e7&s1=771430e7&source=771430e7&ttclid=E_C_P_CuUB37u9hC0wUivifTgh42Ih4EPIempnaeoLH1dgVRNxXNiGlZigvqhClBVXPMt7UBmYINQ71j5fAgBTnBoZOT1Mx7YDcQ3Fvleh6WNvMS4iWkY2apRkhG_cdkEZ1N3CuB9x1jMlOV2sxb3er_iuM_uU2RMIp1DOO22MzZmfshltXnfP53QNq19fNDoBa2nYIxjKpnQph9jJfGcCR5dQtu4PMJoWZSuoRvzErw5PJSo3QX_pXperhnCRr9FaA6UZOiedteBTk7GsEzEdfLP1UVvlakY_F8-wykR2vtfWmY1IcLuuGPHtWBIEdjIuMA

So I got infected by a fake Windows key product but .. I didn't download it?? At all?

I deleted all files that were named or anything AActools I deleted in normal mode, safe mode and task scheduler.

I also know of AutoKMS or so but I didn't have any files named that (yes I also had show hidden files)

My windows say there's no activation key anymore and my windows security scans all came out clean (offline and quick) except I'm doing the long check rn.

I've logged out of all suspicious log ins to my accounts and changed all passwords.

I'm still paranoid and need advice.

aeeptos{.}sbs it is a government (UAE, Dubai) because thats where im living fake ransomware gonna share ts with Trainium

VirusTotal link:

https://www.virustotal.com/gui/url/410cce447a57c1fb809be6ac1f399b0975099f651d42abe70f6895daca8eb554

So, this has been a problem for a bit, and I'm not exactly planning on solving it, because, from what I understand, as long as I don't download any actual viruses, I should be fine, but still, I do want to know what I am capable of doing to solve this situation in case a time where I need to comes.

So, I have the winring0 thing on my laptop, from what I understand, it basically allows programs full access to my laptop. But you see, here's a thing, a program called Gigabyte Control Center relies on it to function from what I understand, or at least that's what I think the case is, I'm not entirely sure. The program basically allows you to change some fan settings and stuff, it isn't anything special.

Still, this winring0 thing does bring me some slight concern, and I would like to know what to do in case a time comes when I DO need to remove it.

NetShare is an app that bypasses hotspot sharing limits from your phone by providing your laptop with a VPN connection. My laptop detects the installer from the official website as a trojan, so it seems like a huge risk, but I only see positive reviews; is the app just built that way? I need an expert opinion from people who have used it before I decide, as I have struggled to find reliable feedback.

Completed a USB Windows redownload
Around 24h after original attack, no sign of hacker/damage yet

Steps I took:

1. Followed https://www.reddit.com/r/computerviruses/s/nqxFG2rinj
2. Removed rootkit in programs in settings, any files pertaining to virus to my best ability with malwarebytes, removed what i think was grabbing my info periodically on task scheduler
3. Changed passwords and logged out of important accounts on separate laptop
4. Ported everything over and important files (while connected to internet) to separate drive
5. USB redownload, following steps of https://www.reddit.com/r/computerviruses/s/CppM2SSNB4 except I did not reset my pc before the download (not sure if need to?)
6. Changed passwords again and logged out of all accounts including not so important accounts, including on phone and separate laptop used to change the passwords
7. Have yet to port over my data from the separate drive

Questions:

Does it infect external drives or just C: drive? I had an external SSD connected when attacked

Where is the virus truly located? I have files moved over onto my new Windows installation from AppData and I want to know if I have accidentally brought it over. From my own investigations, one of the scripts are located in C:\Users\User\AppData\Local\Microsoft\Windows\Caches\PaymentReconciler\analytics_aea4.cmd

If I was logged into my Whatsapp web and Telegram web during the attack, are they safe and how do I know if they are safe?

If I had card details saved on Steam, but not Google, is it also stolen?

I had sensitive information (ID photo, but not photo of my ID itself, a picture of my passport on my PC, and my address saved on Google Autofill) What steps do I take to stay safe?

I love emulation and downloading Roms but this is my consequence for not trusting my gut and listening to recommendations on where to find them. I downloaded and installed a RenPy virus after a quick installation of legends z-a and I couldn’t get my Eden emulator to recognize the game and after inspection of the files there was a setup .Exe link, you know how it goes.

After a quick search I found out about RenPy and quickly disconnected from internet ran the scans offline scans and what not but now what? I don’t really want to reinstall windows and if I have too I have no idea how to do that. I have changed my passwords and everything has 2fa that I can think of but I am not sure if I’ve ever used my credit cards and what not on this PC because it’s pretty new (5-6 months.)

Is there anyone who can guide me through some ease of mind for my setup so I don’t have to reinstall windows and if I do maybe give me a quick hand with that also?

Thanks y’all sorry for being a lurker all these years 🫣
(Also I was going to add pics to this but I don’t know how)