u/KingReginald3rd

I’m having a hard time getting rid of TrojanDownloader:MSIL/Heracles.MK!MTB.

This malware appears to have compromised my work email and hijacked my Google Ads account, which caused a lot of issues for my business.

Windows Defender is detecting and blocking it every time I start my computer.

So far, I’ve tried the following:

• Microsoft Defender Offline Scan
• Full Malwarebytes scan
• Full ESET Online Scanner scan
• Completely uninstalling all browsers using Geek Uninstaller and reinstalling them

Despite all of that, Windows Defender continues to flag the same threat at startup.

Has anyone dealt with this before or have any suggestions on what else I should check?

Any help would be greatly appreciated.

Bit of a panic post here.

One of my clients messaged me asking what’s going on with their Google Ads account because they got an email about changes to users/ownership. I went to check and it looks like I’ve been removed from a bunch of accounts I manage.

I run ads for a few clients (through a manager account), and now it seems like access is just… gone. I didn’t make any changes on my end.

Has anyone dealt with this before?

• What’s the fastest way to actually get in touch with Google for this?
• Is there a proper “account compromised” process?
• Were you able to get your accounts back?

I’ve already changed my password and turned on 2FA, but not sure what else I should be doing right now.

Pretty stressed about it since this is affecting clients too, so any advice would help a lot.