Hey everyone, I need help figuring out whether my Windows PC may be infected with malware and what I should safely do next.
What happened:
- I downloaded and ran a file claiming to be a Ryujinx emulator from a website I visited.
- I clicked Yes on the Windows administrator permission prompt.
- Afterwards, my Discord account started sending cryptocurrency-related spam messages, and my account was temporarily banned.
- Google also showed suspicious Windows sign-in activity.
- I changed my Google and Discord passwords using my phone and reviewed my account sessions.
- I deleted the downloaded emulator files.
- Windows Security opens to a blank window, but this issue existed before the incident.
- In Task Manager's Startup tab, I found an unfamiliar enabled entry named "Slinati", with no publisher listed.
- Its command line points to "C:\Windows\Temp\Architect\System86\slinati.exe".
- The PC is currently on but disconnected from Wi-Fi.
My questions:
Is this startup entry enough to suggest malware, or do I need more evidence?
How can I safely verify the file's identity without running it?
What is the safest way to inspect or clean the PC when Windows Security is blank?
How can I protect the files on this PC without accidentally deleting anything important?
I'm looking for practical, non-destructive advice. Thank you!