r/computerviruses 12h ago

Disinfection Help Windows Defender detects LummaC stealer in recycle bin

Post image
1 Upvotes

Hello everyone, tonight at 2am (as seen in the screenshot) windows defender detected a trojan on my computer. Recently I haven't downloaded anything except a replay file from my cs2 game personal data (.dem.bz2 zipped). I unzipped it got .dem file in csgo folder and then put the zipped file and an empty folder associated to that replay in the recycle bin which apparently made defender detect the virus 2 minutes after. I do not know how did that even happen and if this is defender giving a false positive but this type of detection is almost never a false positive. I had a false positive due to some rootcerts and Microsoft's error but this one doesn't look like it. What should I do (I changed all my credentials to important apps and services)?

edit:

I have some questions:

1: Can I know when did Lumma install and with what did I install it? Also, does it include a keylogger?

2: Could it be a false positive?

3: Why did Windows detect it just when I deleted the replay file and does that mean that Lumma came when it was found or it was hiding it self and came before?

4: Why is the detected file in the recycle bin and not somewhere like AppData?


r/computerviruses 11h ago

Other What The Font EXTENSION IS SHOWING ADS

Post image
2 Upvotes

Lately, I've been constantly seeing widget ads in Chrome. At first, I thought it was a virus, but when I right-clicked and looked at the code, I realized it was inside Chrome itself. So I deleted all the extensions, and the ads went away. For a few days, I checked all the extensions one by one and realized the extension was "what the font". I took the extension's URL and put it in CRX Viewer. And I found this in the code. If you are using "what the font", I recommend deleting it. ((((As pointed out in the comments, I completely missed that this is actually an optional feature disclosed in the extension's description. You don't have to delete it! You can simply disable the sponsored banner in the extension options (chrome://extensions/ -> What the Font Details -> Extension options -> Disable sponsored banner). I'm leaving this post up in case anyone else gets confused by the sudden ads like I did.))))


r/computerviruses 13h ago

Disinfection Help Guys i need some help

Post image
23 Upvotes

i wanted to update my game and i downloaded the update from a site. fitgirl website but i didn't suspect anything suspicious because i was so clueless. after i tried to install using the 'installer' this came up and black screen pop-ups came up too from time to time.

i quickly installed Malwarebytes into my PC and deep scanned everything. and i quarantined a lot of stuff. did this solve any issues regarding my PC security? I'm scared. please help. the apps said my PC is free from virus which i don't believe at all. something's not right. i think i need to reinstall my windows. is that right?


r/computerviruses 5h ago

Disinfection Help Video help for anyone struggling with rebooting their pc

Post image
9 Upvotes

I unfortunately was a victim of an info stealing virus. It got access to a few of my social media accounts hopefully. I hope this video can help anyone struggling with rebooting their computer it’s a really great video with in deep explanation of every step you need to make.

I used to be in denial thinking I didn’t need to reinstall windows on my pc but I HIGHLY recommend reinstalling it after changing all your passwords and backing up your stuff.

Good luck and stay low cortisol twin you got this !!!


r/computerviruses 2h ago

Question Found this while cleaning my laptop... is this a virus?

3 Upvotes

r/computerviruses 16h ago

Disinfection Help My friend got a virus?

Thumbnail gallery
9 Upvotes

Hi so my friend accidentally installed a virus and we went through getting rid of most of it with windows defender doing a lot of the work and malwarebytes to check the rest but theres a program that it keeps flagging. We found its activity in task manager and tracked the file down to the temp folder but every time the laptop boots up the program reappears and malwarebytes blocks whatever connection its trying to make. I covered the address in case it ends up being identifiable towards my friend.


r/computerviruses 4h ago

Question Malwarebytes detected some malware files

Post image
6 Upvotes

Hi, i did a deep malwarebytes scan and it detected some files as malware but i have them installed from a long time and i think they are from some cracked games i downloaded a while ago, should i be worried about these ?


r/computerviruses 6h ago

Disinfection Help Need help with how to go about wiping multiple drives.

2 Upvotes

I have a 10 year old laptop which although I am unsure if there is a virus on it, it's way higher than a non zero chance based on the things younger me got up to. The laptop has an SSD and an HDD as well. I want to fully wipe both drives and I'm going to install arch on the laptop. My question is how can I wipe both drives at the same time? I see the option to do one then the other but I am worried that if there is malware on here that it could be on both drives and then move between each other as the drives are getting wiped. Not sure if this a a valid concern but could definitely see it be possible. So am I able to wipe both drives at once? Should I take out the HDD and wipe them separately while they are both not connected? Additionally is there a way to wipe the drive and not have windows reinstall itself? Or do I just do the wipe with the new windows install and then just unallocate the drive after that? Any help would be appreciated thanks :).

Quick side question. I also have an SSD in an external enclosure that I want to wipe. Because it is in the external case when hooked up to the computer it is recognized as the enclosure itself and not the drive so the drive does not show up in WD software. Is the best option in this case just to use diskpart and hit `clean all` on the drive?

When initially looking up how to wipe a drive properly I thought it was going to be fully clear what the best steps are but it seems to be less than the case. Most of the advice I see just says that unallocating the drive is enough but I want the data to be written over as well. I don't need it to be perfect but I would like at least one pass to be done over the drives. Again any help is appreciated, thank you :)


r/computerviruses 8h ago

Question Am I safe after all?

2 Upvotes

I accidentally downloaded an infected renpy and ran the installer, but after a minute or two my antivirus suddenly quarantined the file and I backed out.

I found out about how quickly the virus can steal your info, how it can be nearly impossible to remove, etc. BUT I only just found this out, and the time I ran the exe was weeks before. And in that time I've had NO compromised accounts (obviously I'm going through and changing passwords just to be safe) and I've checked, no weird logins on Steam or elsewhere, no sus password resets, no email forwards, etc.

I've also ran deep scans with both AVG and Malwarebytes that turn up nothing, but here everyone seems to be REALLY cautious about these infostealers and how pernicious they are, did I get absurdly lucky with this?