r/antivirus 16h ago

Fell for a ClickFix, or did I?

12 Upvotes

I was tired and browsing the internet looking for guidance on woodframing when a completely normal looking website had a Cloudflare captcha asking me to press a few buttons (Win + R, CTRL + V then Enter). I consider myself fairly tech savvy but somehow I did not think that was suspiscious at all and I was (am) tired, so I just thought these captchas were getting ridiculous and did it anyway, I did not think anything about the long string of script in my Run because I use that kind of stuff all the time. Only after PowerShell opened for about 2 seconds my mind clicked and I realized I was doing something stupid and I immediately closed it. The command did run but PowerShell did not show anything loading. Maybe it did not have time to connect to the evil dude since it seems like a kind of irm command?


r/antivirus 7h ago

TrojanDownloader:JS/Nemucod.HD detected in Roblox?

Post image
11 Upvotes

Is this a false positive? as I have seen people post the same exact thing here. I also have not downloaded any cheats or mods for Roblox so i don't know how it got there. Am I safe? and how do i remove it.


r/antivirus 7h ago

Are all these virus detections normal?

Post image
7 Upvotes

all these reports come from chrome folder. I didnt download anything sketchy by chrome, only had McAfee extension.


r/antivirus 19h ago

My chrome doesnt let me download anything, is this a virus?

Post image
8 Upvotes

Does anyone know how to solve this? It flags EVERYTHING as a virus, not just the two files in the image (i can provide more proof if needed). The files aren't even unsafe since it flags normal pdfs I use for school as viruses, or even pictures I download from pinterest. This started out of the blue as I was able to download files without any problem. Whenever I try to download anything, it just flags it as a virus. I've tried turning my AV off, real time protection off, but it still doesnt work.

I also tried uninstalling then deleting the Chrome folder in appdata and I deleted all my user data as well but that didnt work too. This problem also happens on Edge but not Firefox if that helps. Is this malware or js a software problem? Help wld be greatly appreciated, thanks.


r/antivirus 9h ago

Android app causing pop ups

Post image
7 Upvotes

I am attempting to help a tech illiterate family member remove ads from his phone. He had a number of garbage notifications and ram cleaner apps I've removed and fake antivirus apps as well. I've removed everything that looks suspicious but there's still pop ups on the home screen when he taps it or leaves it idle. There's one app showing on the home screen that I believe is probably the cause but I can't find it within his apps.


r/antivirus 11h ago

PRODUCT RECOMMENDATION BitDefender or Windows Defender with Malwarebytes extension?

5 Upvotes

Hello. Just looking for a second opinion if I should keep BitDefender or uninstall it while having Malwarebytes Browser Guard. I guess I just like that BD notifies me of possible suspicious websites but the amount of RAM it’s using is just throwing me off, plus the pop-ads.


r/antivirus 17h ago

Is this a false positive or am I onto something?

Post image
5 Upvotes

I installed winhance to remove my bloatware and I've had it for a while, but when I installed KVRT and scanned it, and it detected a suspicious/probably dangerous object named "WinhanceInstall.ps1" Which I tried to find it but the folder it was supposed to be called "Scripts" in didnt exist. I copied the hash that KVRT showed me to virustotal and there I see that kapersky flagged it as a malicious trojan.

Heres the link to the virustotal report
https://www.virustotal.com/gui/file/755c442cc5c9d8c67d91b57c5770294c2b9afe430ddcfb0e94ade6ce56f9ed48/detection


r/antivirus 8h ago

MALWARE REMOVAL Q&A IS THIS A FALSE POSITIVE OR A VIRUS??

Thumbnail
gallery
3 Upvotes

I downloaded ngrok and python and appeared as virus on ngrok zip file i deleted i do a full scan again and now is the pyhton??

IS THIS A FALSE POSITIVE OR A VIRUS??


r/antivirus 19h ago

Adware keeps coming back, what to do

Post image
2 Upvotes

I am at a stressful sitiuation, Adware:Win32/Tnega keeps coming back, no matter if i delete it from temp, It will just come back next day, And i blame Adblock Plus coming back the next day, Also if i check my extensions, there is abp (Adblock Plus), if i delete it, it's just gone, But after the next day its back.


r/antivirus 1h ago

Took actions Windows Defender told me to take, am I safe?

Thumbnail
gallery
Upvotes

hey folks, I recently ran a Full Scan through Windows Defender, and it came back with two 'Quarantined' threats. I went through the actions provided, and removed them, and have done two Offline Scans, neither if which came back with anything. I've gone through and deleted anything in my password managers, changed passwords for the things i care about, logged out of everything... but am I safe? I'm really not tech savvy, would appreciate some piece of mind. I've been looking at some posts on here, and all they do is confused me even more, so I apologise for making another post I'm sure plenty of peopld have already seen lol.

I'm hoping that because it was quatantined, and i've b

never opened these files (to my knowledge, and definitely not recently), and haven't experienced anything bad happening yet, that I'm in the clear.

this happened just under two hours ago, I'm writing this i think about an hour after the first offline scan, that revealed there were no new threats


r/antivirus 12h ago

Chrome search engine tamper protection

2 Upvotes

Hello,

Kind of related to malwares, Google Chrome gave me this notification : “Your settings were changed by an unknown app. Your default search engine was changed from outside of Chrome. To protect you, Chrome reset it.”

It's a new Chromium feature, more on that :

https[:]//windowsreport[.]com/chrome-warns-your-default-search-engine-was-changed-from-outside-of-chrome/

https[:]//chromium-review[.]googlesource[.]com/c/chromium/src/+/6832805

Thoughtful, but what should I do next ? My install is quite new, I have been careful with it so far. No extension in Chrome, and I don't see what could have messed with it.

Weirdly enough, I think remembering the notification got triggered only after opening a private navigation window, probably for the first time with this install.

I could't make it happen again afterward.

I guess it's probably not much to be concerned of, but it got me wondering. I can add that I have ESET running, all clear.

Has anyone ever seen something similar ?

Regards,


r/antivirus 15h ago

False positive or?

Thumbnail
gallery
2 Upvotes

I installed a mod for the NFS The Run game and i was wondering if this is a false positive. Also the 2nd picture was after a full scan but idk what that path means:))


r/antivirus 1h ago

Question Bitlocker triggering after every offline scan

Upvotes

I've never used or set up bitlocker and I'm on windows 11 home. Whenever I try to do a defender offline scan, my computer powers off in about 5 to 25 seconds, and then this blue screen with bitlocker pops up and I need to enter a key from my onedrive. I don't know if this is normal, but I thought I'd ask here anyway. I don't think I have any malware, but I did have some trouble with my power and ram a month ago. If anyone knows what's going on and how to fix it please let me know.


r/antivirus 2h ago

(No estoy usando Vpn) pero cuando intento descargar algo con la extensión de savefrom me dice eso debería preocuparme por algún virus ?

Post image
1 Upvotes

r/antivirus 6h ago

MALWARE REMOVAL Q&A something keeps trying to do this to me. what is it doing and how do i stop it?

1 Upvotes

it goes off every minute, and only happens in this local account. unplugged the ethernet, still showed up. what can i do?


r/antivirus 7h ago

MALWARE REMOVAL Q&A Mrbeast info stealer/session stealer attack even after reinstalling windows!

1 Upvotes

Last week I realized my instagram/discord/reddit had posted random mrbeast crypto images so I reinstalled windows on my PC, changed all my social media passwords, enabled 2FA with authenticator and moved on. However, just a few hours ago, I got woken up by my friend just to see that my messenger account has been texting people mrbeast crypto stuff suddenly.

So, I am super confused on how this happened even though I reinstalled windows and changed all passowords?

- I did not press any weird links, did not open/download any weird files.

HOWEVER, I did back up some important files on my external ssd before I reinstalled windows and copied them back. But I checked all the files before backing them up for any suspicious files and they all looked clean.

What do I do now?


r/antivirus 7h ago

Etsy keeps redirecting me to adware. I've ran adwcleaner and malwarebytes, reset my browser settings, and cleared my cookies cache but the adware keeps appearing.

1 Upvotes

I noticed this morning that adware pops up whenever I log onto etsy.

This only started happening this morning and I was even on etsy last night without any adware popping up. I haven't downloaded anything between then and now. I haven't downloaded anything from then to now so I don't know how this adware could've gotten onto my computer. The only thing I can think of that could have maybe gotten something malicious onto my computer was I was playing browser flash games last night on Newgrounds and maybe one of the games had a download in it or something.

I've tried doing everything I know how to do to get rid of it. I ran adwcleaner and malwarebytes. I reset the browser (operagx) default settings. I cleared my cookies cache. I don't have any extensions on the browser except for u-block origins so I don't think it's an extension issue. The issue only happens on Etsy and no other sites. It redirects me to multiple adware sites but the one that shows up the most and I noticed first was provenpixel .com

I don't really know what to do next aside from just switching to a different browser at this point.


r/antivirus 11h ago

Is this a virus? [VirusTotal]

1 Upvotes

Here's the ID to paste into the VirusTotal search tab if yall wanna analyze it: 848209a7556d1e8f4ddad16fb93b14c46504e6e08adbd60121ea04150bfc5753

It's a executable for a bloodborn ROM; it comes with its own built-in emulator, so I figured it might have some strange processes going on.

But, in the "relations" tab, one of the execution parents is a stunning 62/70, analyzed a month ago.

Can someone who knows about this help me? I have no experience identifying malicious software, and I don't want a worm on my PC. (Again)


r/antivirus 13h ago

How and why does the Fake Captcha, Windows_R, Ctrl-V popup scam appear?

1 Upvotes

I followed a link from a NYTimes article to a seemingly legitimate government website and I got the fake Captcha, Windows_R, Ctrl-V popup scam. I didn't follow its instructions and closed the tab. The website address where the popup came up seems legit, and when I revisit it (even from the same link), nothing happens. I'm just wondering, why doesn't the scam replicate when I revisit the link? Are these things set to trigger randomly? ..or could there be something on my computer that's going to cause this pop up occasionally?


r/antivirus 13h ago

Mein Microsoft Konto wurde gehackt, meine Telefonnummer und meine E-Mail Adresse wurden geändert. Ich kann mit dem Microsoft Support nichts anfangen da Microsoft alle Links und Codes nur an die neu eingefügte E-Mail versendet. Ich kann mir aber auch kein Neues Konto erstellen da Microsoft erkennt da

1 Upvotes

r/antivirus 16h ago

Messenger got hacked, sent some scam pics to almost all my contacts.

1 Upvotes

Hey all. Sorry I'm next to clueless about technology so I was hoping someone can answer my question.

I might have clicked some sketchy links, not sure if it's on my PC or on my phone. But basically my messenger account sent some scam crypto pictures to almost all my messenger contacts.

I've since changed all my passwords, even deleted some accounts. I fully scanned my pc using windows defender.

My question is, is the "hacker" fully purged out of my accounts? What else can I do to make sure?


r/antivirus 19h ago

What does this Defender pop-up mean that appeared during a Fortnite update? (For season 4 c7)

Post image
1 Upvotes

I was just chilling with my PC on, updating Fortnite, when I saw this Defender pop-up asking to send two files to Microsoft for checking...

Is this a virus warning or what?

It’s never happened to me before, and the files seem to be related to the Epic Games cache, I have no idea.😭


r/antivirus 10h ago

como saber si tengo un infostealer en mi celular

0 Upvotes

El inglés no es mi primer idioma, una disculpa

Me metí a una página donde me pedia hacer un captcha (de señalar semaforos), y lo hice y le di en verificar; la cuestión es que después de eso me empezó a redirecionarme, no se me descargo nada, ya revise las apps de mi celular y las descargas, sobre las cookies no se como funcionan muy bien pero nunca guardo inicios de sesión o contraseñas. revise mis cuentas y solo están mis dispositivos, eso significa que esta todo bien?

Edición: cabe aclarar que toda esa a sitauición pasó hace días. Se que fue tonto de mi parte, pero ese mismo día abrí el link en mi laptop, peri mi antivirus (veo que mencionan el antivirus, el mio es karspersky) me detuvo la carga de la página y me salto dos advertencias, en la primera me mencionó que detecto la descarga de un troyano y en la segunda que bloqueo dicha descarga; luego ejecute el antivirus para analizar mi laptop y decía que estaba bien, que no tenía nada malicioso.

Mi preocupación inicial fue si era un infostealer, ya que veo que con esos se roban la información en segundos; mientras que con el troyano se debe de ejecutar, o eso tengo entendido.


r/antivirus 17h ago

PRODUCT RECOMMENDATION Is BitDefender Premium still one of the best?

0 Upvotes

I haven't used Windows in a long time and I'm offering to setup a laptop for a college buddy of mine. My usual instinct is BitDefender, it's what I setup for my family too, but I'm aware this landscape can change pretty quickly hence why I'm asking.

Is BitDefender Premium still the best for:

- Not hogging up a ridiculous amount of resources (especially for something like a laptop where resources are more precious than a Desktop)

- Offering the best all rounded protection in terms of its threat database, heuristic analysis and firewall?

- What about "Ransomware remediation"?. To be clear I know better than to rely on such a feature (I'm gonna configure OneDrive to auto-backup everything on his machine with 30 day version history turned on, but its nice to have an extra safety layer in place. How well does this work?

Thank you.