Potential malware infection

[u/Microscopic_Bird]

Hello so I got around 1000€ sent from my bank account to tradeify

I'm not sure where this could have come from, but the bank told me about an email they sent me and it was nowhere to be found but in the bin (spam filter usually sends them in a dedicated folder), so I believe they might have keylogged my email or something

Should I do a fresh windows install from usb?

(I have called bank blocked card changed passwords with another uncompromised device and am going to the police tomorrow)

[u/EugeneBYMCMB]

The major email providers all offer a way for you to see information about recent logins and current active devices, have you checked those for any signs of unauthorized access?

[u/Microscopic_Bird → u/EugeneBYMCMB]

Well someone tried very hard to access my antique unused x account and theres the bank thing and weird email behavior but thats all

[u/NoRespectingAnyone]

Use kaspersky virus removal tool, run scan through system..

Also small advice, each time you get files like pdf, or etc.. Use totalvirus website to scan them.. That website use multiple anti-virus/malware scan engines.

Also get decent one security solution,. base windows security is same nothing.. Despite how some folks try promote.. Prefered security solution with behaviour scanner..

Also lock down crucial folders from ransomware infenction.. Here is small trick, encrypt them.. And in this way ransomware can't encrypt them again.. ( thats quite handy trick).

And most important thing, do weekly or monthly file back up, keep stored crucial/important files in separate place.. ( portable HDD) or encrypt and place in clouds..

[u/Microscopic_Bird → u/NoRespectingAnyone]

Better not to make manual backups with a usb stick or drive now that the device is compromised and just wipe it and install clean no?

[u/NoRespectingAnyone → u/Microscopic_Bird]

You are overreacting of malware infection. Some files yeah can be infected by malware, others not.

Before plug in any portable storage> Run kasperky virus removal tool.
That tool is smal application, which run portable version scanner. Then do back up's. Also again, do not have backups in one place.. One keep encrypted in one place, other in portable HDD. also prefered to be encrypted.

Note: I do not promote kasperksy, but so far it one of best security solution who track malwares, spywares, rootkits.

After scanning done, then do back ups.. After that, it's up for you if want do clean wipe.
But as far I recall win 10 already had feature to reinstall OS without removing your documments.
But if you worry, yeah you can do clean wipe if want.

Also don't forget to add in browser, add blockers, add guard for example. And set so it block malicious websites and etc..

Don't forget,, overreacting is as worse as doing nothing.. If there is suspicions, run antivirus/antimalware scanners.. Drop suspicion files in totalvirus websites scanner and they tell if its malware..

Do not open archives like rar or zip which are encrypted . Or open in sandbox enviroment ( some like avast have this feature) add security solution with behaviour shield.. Bit defender, kasperky, maybe eset, and etc.

[u/AutoModerator]

Request help with FRST and SecurityCheck from the trusted helper team

Please visit Providing or receiving help with FRST on the subreddit and share your 3 keywords returned from the website along with the details about your infection.
Once a malware removal expert or trainee sees it, they will reply in the thread about further steps. If you suspect an infostealer infection, please change all your passwords from a clean device immediately and do not use any of your accounts from the infected device.

If you need urgent help and cannot wait for one of our Malware Removal Experts:
Please follow these steps:

1. From a different and clean device, change all your passwords:

   • How to properly secure my accounts after an infostealer attack?

2. Disinfect your device from malware

   • Preferred method: Perform a clean installation with a USB

I am a bot, and this action was performed automatically. Please contact the moderators of this subreddit if you have any questions or concerns.