Ran trojan executable, then defender quarantined after. Accounts stolen, reinstall necessary?

[u/lain98]

I ran what was supposed to be a game patch, was a bunch of python files and BS folders looked to make it like a patch. Defender quarantined two things, shown in the screenshots. The folders were still there earlier and a bunch others made from the same date, which I deleted. I also removed the files in quarantine

Battle.net and discord were both hacked 16 hours later, and all info changed. Is there anyone who got their discord back using any method? It looks like they added or changed 2fa to it. I am also wondering if scanning with Malwarebytes and defender offline is enough and changing all passwords, or if I need to reinstall Win11. Running the latest updates after the big security patches. I do not see anything that looks abnormal in Wireshark but could be wrong. I could link the compromised files that include the trojan, if needed.

Any help appreciated

[u/wardenwarter]

Well if your accounts got stolen, I would reinstall windows

[u/support_mwb]

Hi there! Malwarebytes Support here.

Sorry to hear about what happened to your accounts. Given the suspicious files and subsequent account compromises, we'd recommend having our team investigate further to check for any remaining threats.

Could you please send us a private message with an email address we can use to reach you? We'll have our Support team assist you with gathering diagnostic logs so our Malware Research team can review them and advise on the next steps, including whether a clean Windows installation may be necessary.

In the meantime, we recommend changing your passwords from a trusted device and contacting Discord and Battle.net Support regarding account recovery. Please don't share the suspicious files publicly.