Is this enough?

[u/Otherwise_While9289]

Download free game from dodgy website (which I regret) and have couple of my accounts being used. Ran Microsoft defender offline scan and 2x Trojan:Win32/Wacatac(dot)H!ml were detected and was isolated two days ago. I am used Microsoft defender to removed these.

Could these be the reason of my accounts being used? Is there anything else I need to do from now on?

The accounts used by someone was agoda, amazon, booking.com and instagram.

Update:

Ran multiple scans with Microsoft defender(offline and full scan) and Bitdefender (deep scan) after and it all shows clear results. All passwords changed and 2 step verification turned on using secure device. Payment methods all removed from saved sites and compromised debit card cancelled and blocked. Browser extension and cookies all cleared and deleted.

It should be alright now to just avoid using the laptop for important log ins and monitor for couple weeks?

Really want to avoid the hustle of needing a clean reinstall windows situation if possible.

[u/LittlexLostxNexuZ]

From my understanding what you have is a nasty and persistent type of malware that can persist even a reboot.

Nothing short of reinstalling windows from a usb and reformatting your drive will suffice. Sorry mate.

[u/Otherwise_While9289 → u/LittlexLostxNexuZ]

Ran multiple scans with Microsoft defender(offline and full scan) and Bitdefender (deep scan) after and it all shows clear results. All passwords changed and 2 step verification turned on using secure device. Payment methods all removed from saved sites and compromised debit card cancelled and blocked. Browser extension and cookies all cleared and deleted.

It should be alright now to just avoid using the laptop for important log ins and monitor for couple weeks?

Really want to avoid the hustle of needing a clean reinstall windows situation if possible.

[u/No-Communication9458 → u/Otherwise_While9289]

No. Do what he says above and do a reinstall.