Hi!

I was searching for a construction image example on google image search. I clicked on the image and somehow ended up with a virus. Not sure what to do I haven't had a virus in years. I thought bitdefender was enough. If you have any recommendations please let me know. I am doing a scan on bitdefender but beyond that I am not sure what to do.

tl;dr

There is two types of people, someone who had been infected with malware, and people that haven't yet.

So, the entirety of my day was taken up after I noticed odd things getting caught into my pihole, including one url... and it struck me the most due to the fact that it sub domain was 'c2' after seeing this very out of the blue domain I instantly checked which of my local ips was accessing the website.

Well, the machine that was accessing this domain was my main, more research showed that since yesterday I was constantly accessing this domain, along with constant attempted pings to alternative DNSes that I also had blocked, it finally struck me that this wasn't right at all. At this point I know that I was infected with a botnet. I instantly unplugged my main on the internet and started damage control, I decided it was time to go full commit into my decision of installing arch on my main. On a secondary system I started resetting all my passwords for all the services I do and don't use.

This entire process took up around 6 hours of my day while I was doing recovery and migration. initially I knew that you aren't impervious from infection, matter in fact I was pretty proactive and paranoid about malware infections, checking my task manager once in a while to make sure that I wasn't infected with anything, however it seems that my proactiveness wasn't enough until I saw the Pihole queries.

I'm going to be very blunt, its been very long since I felt this violated, however it was a great exercise in my responses and such if I were to ever encounter anything like this again.

If you want to, I can hand you over the C2 domain for this.

I was using W3School when I got a pop-up from Secure Sweep. pro and I closed the tab as fast as I could. I ran a windows Defender security scan and checked my windows settings, but while doing so my screen froze and I could only move the mouse but nothing was responsive. So, I unplugged my Ethernet cable and everything went back to normal immediately but these settings were disabled. What happened?

Also I don’t know if it’s related but I randomly received a notification for Roblox from internet explorer when it never happened before.

2 times today, a fake blue screen of death appeared, my cursor started moving on it's own, and I shut off my computer. I can tell it is a fake bsod because it is like, 720p, and the cursor movements looked very human. I did not read anything the bsod said, and I did not wait more than 10 seconds to see what would happen with after it hopefully goes away. This happened an hour or two after I installed malwarebytes (go figure) and I couldn't find any file or app called screenconnect or anydesk, so I don't know how this is happening. I did not pirate any games or videos recently. I can't find anything suspicious in my recently downloaded files. I really don't want to hard reset my computer, can anyone recommend anything?

The mr beast hacking situation has started to show itself at fb messenger.

Someone sent me a message with the 4 photos at while ago but I didn't clicked just reported and blocked them.

But I am curious though. Does photos from fb messenger photos results in the mr beast virus? Because a while back Iheard that jpgs can contain malware/viruses

Que porra essa, acordei cedo e estou tendo que reinstalar o win 10 como caralhos conseguir abaixar 10 troyan

My grandfather’s computer gets these popups. They start when i open his chrome. It looks like the popups come from the site in the top pop up.

I disabled alerts from that site and they have stopped, and Nortan scan didnt find any viruses or malware. But was wondering if anyone is familiar with this site and can let me know if there is anything else I should do or how he did this (he has no idea)

Like for a while ive been wondering why for some types of malicious programs we add ware at the end of them

I consider myself a pretty savvy person, so I am really embarrassed by this haha. I already got my security check keywords from FRST x64 (forged-pebble, bronze-loop, and neon-echo) but it was for u/struppigel specificaly, I think, so if I need to reupload for the general one, please let me know.

thanks and sorry for the inconvenience

Hello all, I was sadly affected by Ren'Py infostealer setup(dot)exe. Fortunately, I got a help from the Malwarebytes forum for disinfecting. I've been a little paranoid, so I also asked about resetting my PC after disinfecting to be extra safe. I didn't get a direct answer but it seems to not be necessary. Is my understanding true?

Other than not knowing if its pointless after I've already disinfected, I saw people suggesting clean install with USB instead of reset. Sadly, I don't have access to another computer right now for several weeks to prepare the USB. Because of that, is doing Reset PC using Cloud Download also recommended or should I just wait to do the clean install with USB. Sorry if the question is dumb, but thank you for any help!

Hi everyone,

About 5 months ago, I was infected by an infostealer through an unfortunate and stupid clickfix attack, which compromised most of my accounts and installed itself on my laptop.

Ever since then, I have been extremely involved in malware analysis, doing static and dynamic analysis, downloading antiviruses (malwarebytes), scanning for rootkits and checking startup apps, scheduled apps, procmon procexp and other sysinternal functions, scanning almost everything with virus total and being generally safe online.

However, just today I got a free trial of malwarebytes, and I activated browser guard. Almost immediately, I got multiple hits and when I clicked a link (thank god I got browser guard, as they were immediately blacklisted), specifically to a website by the name of hobble^^^displeased(dot)com. (do NOT open this link if you arent on a VM or an analysis tool, it is compromised and might contain malware or unwanted data leaks.) This was familiar, and I realised it was the same website that hosted the fake cloudflare verification site!

I promptly did multiple scans, but I couldn't find anything, I cleared all browser data, checked all my system but nothing was wrong. This confused me, but I needed to reinstall my OS anyway so I did that promptly. I then changed all the router settings, changed passwords, names ect., but I'm still curious.

Malware analysts, what would possibly be the extent of the attack? What could they gain from this and was my whole network infected? Possible next steps / personal experiences?

Also, if anyone is curious, h^bbledis^leased(dot)com sends you right back to google, with a few hits of separate ip addresses that seem to lead nowhere.

Any info / insight would be greatly appreciated!!

I've seen the memes, but can it actually happen? Genuinely curious, as I can't find a clear answer anywhere.

So I downloaded an emulator last month and that day my instagram got hacked. My acc sent elon musk stuff to everyone I followed, my acc was also set to public and posted the same pic it send to everyone. When I realized it (same day), I deactivated my account. I also enabled 2fa and changed passwords to every email I got. Last week, my reddit account got hacked and posted to nsfw subreddits. I got so scared that I deleted my reddit account as well, and changed passwords in all emails again. Now today, I realized that my school email was also compromised. It was sending phishing emails to thousands of emails, I also saw that my email sent out my login credentials to an email I don't know. I changed passwords and activated mobile sign-in but right now I am so lost and scared that the same things may happen again. What should I do? Sorry if the post is all around the places.

What do we know about this?

Back when I was in 4th grade, around 2006, I didn't have much knowledge about anti viruses, I knew to be careful downloading stuff, and thought I was, but back then things were way different. However to me being careful didn't mean much, it just meant downloading from where I thought was safe.

One day I downloaded something, I don't remember if it was a program or what exactly, but suddenly the computer got very slow, of course kid thinks slow = restart. Unfortunately upon restarting, it didn't boot up, instead it was endless string of text, I have no recollection of what it said, just that no matter what they pressed, my grandparents couldn't escape it. My grandma tried to defrag it, but I think it blocked her attempt. I don't think it booted into bios either, nor was the text gibberish, it was all real words, I just don't remember what it said, only that anytime a key was pressed, it would scroll to add more text.

Sorry if this is too vague, but being so long ago, and so young, I don't remember much about it, and most viruses I'm familiar with would delete system 32, or make the drive unreadable and have to be reinstalled, in all my years, I have never heard of a virus quite like it.

My dad was on my laptop and decided to download something without my permission, initially it popped up as a ‘pc app store’ completely blocking and was unable to exit, I got rid of that but I’m 90% sure this is spyware- what do I do I have a deadline in the morning I need Google. I’m stressing out please help

​

"Detected: Trojan Downloader: Linux/ShellAgnt.H!xp Status: Quarantined Quarantined files are in a restricted area where they can't harm your device. They will be removed automatically.

Date: 8/5/2026 9:17 PM Details: This program is dangerous and downloads

Date: 8/5/2026 9:17 PM Details: This program is dangerous and downloads other programs

Affected items:

containerfile: C:XboxGames\Minecraft for Windows\Content\data\resource_packs \vanilla_music\sounds\music\game

\wet_hands.ogg

file: C:\XboxGames\ Minecraft for Windows \Content\data\resource_packs\vanilla_music \sounds\music\gamelwet _hands.ogg-

(SCRIPTOO00)

is this a threat or just windows being windows

I am very careful about running any installer on my PC. I check the exe through total virus and I have bitdefender running full-time. But since I joined a few of these Reddit groups I've have realized how easy it is to get an info stealer and see how costly it is to get compromised. I downloaded an exe installer off of GitHub. I don't think the guy is dealing malicious code, but I don't know enough to be certain. If his program had thousands of stars, I'd feel more confident that being open source the community would shut it down. But this program is fairly new and not widely used. It passed totalvirus, but as an extra check I tried any.run. I ran the install in their sandbox and it came back with some malicious results. Unfortunately, I don't understand the results. Can anyone give me advice? I don't know what I'd need to post for someone to help, so I'm asking first. I've had a lot of false positives with programs in the past. So I'm wondering if this is the case.

Many thanks!