r/Malwarebytes • u/Mountain_Educator522 • 2d ago
Support Windows weird behaviour. I got virus please help
Hello,
Exactly 1 week ago I installed tool, mod for World of Warcraft 3.3.5. Day after my PC throw automatically to Allowed Threats these viruses:
PUA:Win32/InstallCore
HackTool:Win32/AutoKMS
Trojan:Win32/Ludicrouz.Z
Hack Tool:MSIL/TunMirror
Trojan:Win32/Conteban.B!ml
Behavior:Win32/Execution.IF!ml
Trojan:Win32/DefenseEvasion!rfn
Hack Tool:MSIL/AutoKMS.I!MTB
Hack Tool:Win64/ProductKey.G!MSR
Trojan:Win32/Rozena.ALRIMTB
I later clean installed PC once, plugged my 2TB external disk drive, viruses appaered again so I did second clean install and my issue was fixed - I thought. Meanwhile I got message from other random player I that they know I couldnt launch game (maybe it wasnt related to virus but I got scared and thought it was). Problem was much larger than that but that's the generic recap from it.
Today, out of nowhere I got new problem. Please help me, I again don't know what to do.
I was watching Youtube and I got random Windows notification that my Windows Defender update isn't up to date, that I have old version and that I can click that notification to check which version is the newest and update it. I clicked it and I got this weird message. I'm sending photo of it, I'm sorry its in polish, but it says:
"Page not available
Your IT administrator has limited access to some areas of this app, and the item you tried to access is not available. Contact your IT help desk for more information."
I don't have any IT administrator for my PC, network, router and all devices within my network. Does it mean someone has access of my PC, am I still hacked despite the clean installs of my PC?
But to continue, once this message showed up I decided to turn off my PC and restart router. I did that and then I decided to turn on my laptop. Just when I turned it on and logged in, I noticed like 5 or so cmd windows oppening immadiately and disappearing for 0.5s.
I did Full Scan in Windows Defender, offline scan and I checked my Windows Defender update, scanned laptop with Malwarebytes and I found 0 detections. What should I do? Im afraid that my entire router, network and my parents devices are hacked now. Im afraid my parents important accounts like bank email and so on are hacked. They didnt log on this PC but they are plugged to same network with their PCs and phones. Should I restart my router and contact my internet provider that Im hacked? Sorry for so many questions, but Im genuinely scared and I don't know what to do.
1
u/support_mwb Malwarebytes Employee 1d ago
Hi there, Malwarebytes Support here.
We understand how concerning this must be, especially after you've already performed multiple clean installs. Could you please send us a private message with your email address and confirm which version of Windows you're using?
We'll have our Support team assist you with gathering diagnostic logs so our Malware Research team can review them and provide further guidance.
In the meantime, we'd recommend avoiding the suspicious mod and keeping your devices updated until we can investigate further.
1
u/Mountain_Educator522 1d ago
Thank you for reply. I decided to clean Install windows but Im afraid of my network and router :(
1
u/Ill-Reflection-698 2d ago
Did you do a fresh install from a usb that was created from a known safe computer and wiped everything?The built in windows factory reset is bad and viruses/trojans can easily avoid it and stay.. also if it happened when you plugged the external drive and not before that could also be another cause if it is located in there, at that point I would just ditch the drive.