Tsetsen Posted June 25 ID:1645135 Share Posted June 25 I tried to dowload pirate elden ring then i deleted the said programm later in the night my facebook and instagram account password and gmail were changed and now my discord is spamming random files idk whats happening can anyone help Link to post Share on other sites More sharing options...
David H. Lipman Posted June 25 ID:1645136 Share Posted June 25 I'm sorry to hear that. Games are the ultimate trojan to deliver malware and what you experienced is a very common occurrence lately A Forum Helper will come along later. In the mean time, do you have the URL and maybe a password associated with this fake game password stealer? Link to post Share on other sites More sharing options...
Tsetsen Posted June 25 Author ID:1645137 Share Posted June 25 (edited) https://fitgirl-repacks.site/elden-ring/ I am embarrassed for downloading from this I was just hyped Edited June 25 by AdvancedSetup Disabled hyperlinks Link to post Share on other sites More sharing options...
Tsetsen Posted June 25 Author ID:1645138 Share Posted June 25 I have a question does hard reseting fix the problem and do I need to change all my passwords? Link to post Share on other sites More sharing options...
David H. Lipman Posted June 25 ID:1645139 Share Posted June 25 Yes - you do have to change all your passwords. Original Size: 66.4 GB Repack Size: from 47.4 GB [Selective Download] That's what you downloaded ? Link to post Share on other sites More sharing options...
Tsetsen Posted June 25 Author ID:1645140 Share Posted June 25 Yes Link to post Share on other sites More sharing options...
MKDB Posted June 25 ID:1645201 Share Posted June 25 (edited) Hello @Tsetsen and My name is MKDB and I will assist you. We can check your system if malware is still there. As David H. Lipman already said, you have to change all passwords from a clean system. Moreover, I suggest to remove every kind of illegal software from your system before we start the cleaning process here. Let's keep these principles as we proceed. Make sure to read the entire post below first. Please follow the steps in the given order and post back the log files. Please attach all log files into your post. Before we start, please make sure that you have an external backup, not connected to this system, of all private data. Only run the tools I guide you to. Please don't run any other scans, download, install or uninstall any programs while I'm working with you. As English is not my native language, please do not use slang or idioms. It may be hard for me to understand. If you do not respond within 4 days, your topic will be closed. Cracked or hacked or pirated programs are not only illegal, but also will make a computer a malware victim. Having such programs installed, is the easiest way to get infected. It is the leading cause of ransomware encryptions. It is at times also a big source of current trojan infections. If you are running any kin of illegal software on your system, please uninstall them now, before we start the cleaning procedure. Let's get the info to get the process started. Be aware it will take many steps and scans to fully remove malware. Please respond to all future instructions from your helper in a timely manner. Let's go ahead and run a couple of scans and get some updated logs from your system. Please read the entire post below before starting so that you're more familiar with the process Then follow each step in the order provided. Unless otherwise asked, please attach all logs Please make the following system changes: Please pay close attention the the instructions in all of the following links. If you have not done so already - Enable System Protection and create a NEW System Restore Point <<<<< Important. Temporarily disable your antivirus real-time protection or other security software first only if it blocks or interferes with the scans or downloads.. Make sure to turn it back on once the scans are completed Temporarily disable Microsoft SmartScreen to download software below only if needed. Make sure to turn it back on once the downloads are completed Disable-Fast-Startup <<<<< Important. Show-Hidden-Folders-Files-Extensions Please run the following scans: Please pay close attention the the instructions in all of the following links. Click the following link and run a Scan with AdwCleaner Click the following link and run a Scan with Malwarebytes If you have issues with the installation of Malwarebytes, use this link instead. https://downloads.malwarebytes.com/file/mb5_offline RESTART the computer <<<<< Important. Click the following link and run a Scan with Farbar Recovery Scan Tool Example image of where to click to attach files when posting your reply Thank you Edited June 25 by MKDB 1 1 Link to post Share on other sites More sharing options...
Tsetsen Posted June 25 Author ID:1645209 Share Posted June 25 Hello I factory reset my PC and ran scans and for now I have not found issues I'm 17 so I don't really have that much important files .I just don't want my socials passwords to be not changed. So do I need to run these scans? Link to post Share on other sites More sharing options...
Root Admin AdvancedSetup Posted June 25 Root Admin ID:1645235 Share Posted June 25 I would still highly suggest running them so you know for sure the system is clean. THEN use a password manager such as 1Password or Bitwarden and change all of your passwords and use a strong password of at least 16 characters but 20 would be better. Link to post Share on other sites More sharing options...
Tsetsen Posted June 26 Author ID:1645324 Share Posted June 26 FRST.txthello i did the scans and here are the logs FRST.txt AdwCleaner[S00].txt 1 Link to post Share on other sites More sharing options...
Root Admin AdvancedSetup Posted June 26 Root Admin ID:1645425 Share Posted June 26 Do you have the Malwarebytes scan log and the ADDITIONS.TXT log? Thank you @Tsetsen 1 Link to post Share on other sites More sharing options...
Tsetsen Posted June 26 Author ID:1645428 Share Posted June 26 @AdvancedSetup Addition.txt Malwarebytes Scan Report 2024-06-26 180713.txt 1 Link to post Share on other sites More sharing options...
MKDB Posted June 26 ID:1645429 Share Posted June 26 @Tsetsen Thanks for those logfiles. Everything seems to be fine now. I suggest to change ALL passwords like suggested by @AdvancedSetup. Not much more we can do here. Thank you for your cooperation. You can use KpRm to remove FRST and other tools. Please download KpRm by kernel-panik and save it to your desktop. Right-click kprm_(version).exe and select Run as Administrator. Read and accept the disclaimer. When the tool opens, select Delete Tools under Actions. Under Delete Quarantines select Delete Now, then click Run. Once complete, click OK. A log may open in Notepad titled kprm-(date).txt. I do not need it. Just close Notepad if it shows up. A few final recommendations can be found here: Further reading if you like to keep up on the malware threat scene: Malwarebytes Blog https://blog.malwarebytes.com/ Hopefully, we've been able to assist you with correcting your system issues. Thank you for using Malwarebytes. 1 Link to post Share on other sites More sharing options...
Tsetsen Posted June 26 Author ID:1645432 Share Posted June 26 Thank you for everything! 1 Link to post Share on other sites More sharing options...
Solution MKDB Posted June 26 Solution ID:1645434 Share Posted June 26 Glad we could help. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this topic with your request. This applies only to the originator of this thread. Other members who need assistance please start your own topic in a new thread. Please review the following for Tips to help protect from infection. Thank you. As this topic seems to be solved, I do not follow it any longer. Take care! 1 Link to post Share on other sites More sharing options...
Recommended Posts