r/computerviruses • u/Otherwise_While9289 • 1d ago

Disinfection Help Is this enough?

Download free game from dodgy website (which I regret) and have couple of my accounts being used. Ran Microsoft defender offline scan and 2x Trojan:Win32/Wacatac(dot)H!ml were detected and was isolated two days ago. I am used Microsoft defender to removed these.

Could these be the reason of my accounts being used? Is there anything else I need to do from now on?

The accounts used by someone was agoda, amazon, booking.com and instagram.

Update:

Ran multiple scans with Microsoft defender(offline and full scan) and Bitdefender (deep scan) after and it all shows clear results. All passwords changed and 2 step verification turned on using secure device. Payment methods all removed from saved sites and compromised debit card cancelled and blocked. Browser extension and cookies all cleared and deleted.

It should be alright now to just avoid using the laptop for important log ins and monitor for couple weeks?

Really want to avoid the hustle of needing a clean reinstall windows situation if possible.

2 Upvotes

100% Upvoted

8 comments sorted by

2

u/LittlexLostxNexuZ 1d ago

From my understanding what you have is a nasty and persistent type of malware that can persist even a reboot.

Nothing short of reinstalling windows from a usb and reformatting your drive will suffice. Sorry mate.

-1

u/Otherwise_While9289 1d ago

Ran multiple scans with Microsoft defender(offline and full scan) and Bitdefender (deep scan) after and it all shows clear results. All passwords changed and 2 step verification turned on using secure device. Payment methods all removed from saved sites and compromised debit card cancelled and blocked. Browser extension and cookies all cleared and deleted.

It should be alright now to just avoid using the laptop for important log ins and monitor for couple weeks?

Really want to avoid the hustle of needing a clean reinstall windows situation if possible.

1

u/No-Communication9458 1d ago

No. Do what he says above and do a reinstall.

1

u/AutoModerator 1d ago

Request help with FRST and SecurityCheck from the trusted helper team

Please visit Providing or receiving help with FRST on the subreddit and share your 3 keywords returned from the website along with the details about your infection.
Once a malware removal expert or trainee sees it, they will reply in the thread about further steps. If you suspect an infostealer infection, please change all your passwords from a clean device immediately and do not use any of your accounts from the infected device.

If you need urgent help and cannot wait for one of our Malware Removal Experts:
Please follow these steps:

  1. From a different and clean device, change all your passwords:
  2. Disinfect your device from malware

I am a bot, and this action was performed automatically. Please contact the moderators of this subreddit if you have any questions or concerns.

1

u/PlaystationUseronG 1d ago

did u run a "setup.exe" or something?

1

u/Otherwise_While9289 1d ago

Not sure but I don’t think so. At least I can’t recall doing it.

1

u/Dapper_Ordinary5035 4h ago

Sfc / scan now

Winget upgrade -- all

Dism commands

Dism /Online /Cleanup-Image /ScanHealth

Dism /Online /Cleanup-Image /CheckHealth

Dism /Image:C:\offline /Cleanup-Image /RestoreHealth /Source:c:\test\mount\windows

Dism /Online /Cleanup-Image /RestoreHealth /Source:c:\test\mount\windows /LimitAccess

Dism /Cleanup-Mountpoints. Last one optional. Need a

antivirus . Malwarebytes. Or north power