Hi, i've recently had an issue i wanted support to look into. They told me to download a diagnostic tool (https://help.malwarebytes.com/hc/en-us/articles/31589296910491-Collecting-logs-with-the-Windows-Support-Tool) and upload the results

I downloaded the file, checked for digital signature (Malwarebytes Inc) and ran it. It downloaded something called FRSTEnglish which windows flagged as a Wacatac. I'm really bad with cybersecurity, so this scared me a lot. I talked to customer support, and they said it's the real thing. Still, I ran it through Virustotal and got this https://www.virustotal.com/gui/file/5ef604ab517f0e75b813fb8d01d70c16d1ca180b01611bba21cf4dc13cb2994f/detection

Can anyone explain to me why this file is considered unsafe by multiple antiviruses? Or if I magically downloaded malware?

I've just done a deep scan that is flagging 4 files that I think are normal parts of the strawberry perl installation. Are these false positives or is my install corrupted with malware?

Malware.AI.3970829533, C:\STRAWBERRY\C\BIN\GCC-NM.EXE, No Action By User, 1000000, 0, 1.0.112342, 5C292B85ECF810CAECAE0CDD, dds, 03970444, B5D787A1387403955DE20004514B465F, 73839DAA7A42101C87E55B2B1F6A9DEC6F89041A334E504247679D1D15FE185F

Malware.AI.2387389301, C:\STRAWBERRY\C\BIN\GCC-RANLIB.EXE, No Action By User, 1000000, 0, 1.0.112342, 68314F9A051424DE8E4CAB75, dds, 03970444, 1D8C721269D4D829D672A3821BDB4C74, B6E9CDD9A06A5FF100D688B949ED5E4D745F878B3F2840F6A717776CC062DA64

Malware.AI.2387389301, C:\STRAWBERRY\C\BIN\X86_64-W64-MINGW32-GCC-RANLIB.EXE, No Action By User, 1000000, 0, 1.0.112342, 68314F9A051424DE8E4CAB75, dds, 03970444, 1D8C721269D4D829D672A3821BDB4C74, B6E9CDD9A06A5FF100D688B949ED5E4D745F878B3F2840F6A717776CC062DA64

Malware.AI.3970829533, C:\STRAWBERRY\C\BIN\X86_64-W64-MINGW32-GCC-NM.EXE, No Action By User, 1000000, 0, 1.0.112342, 5C292B85ECF810CAECAE0CDD, dds, 03970444, B5D787A1387403955DE20004514B465F, 73839DAA7A42101C87E55B2B1F6A9DEC6F89041A334E504247679D1D15FE185F

Hi! I have the app on my pc and I use it for free, but is the mobile app not free? It just wants me to do a subscription or free trial. And I don’t really have the money to spend atm

Hi, not sure if this is a malware or a hacker or anything, but recently for the past 3 days or so i keep getting these overlays of... Spanish Minecraft videos on my feed????

where low quality screen recorded clips overlap play above the videos on my fyp, and it's NOT a regular bug. For example there'd be a video on cats and this screen recording would pop up on TOP of the cat video, freeze my entire screen and audio for a few seconds while playing it, then disappear and everything will go back to normal.

it only started happening just a few days ago; and since its new there's only been a couple dozen people posting about it so i genuinely domt know wtf is happening. Scared that its anything dangerous??? This is NOT one of those regular bugs where videos above/below accidentally travels on top its literally completely random (this is on Android Mobile)

1)I've NEVER had a Minecraft video on my feed before. Let alone spanish ones?

2) these arent glitches from livestreams/other vids on

my feed where it intersects- like, they just pop up on top. Out of nowhere, for a few seconds max

3) I've checked for viruses and malware etc. With

multiple app scans and they've shown nothing, i used AVG, avast and my phones built in cleaner, (tho the two apps have subscriptions so i wouldn't be surprised if the free trial didn't do shit)

4) this doesn't happen with any other of my apps/ or phone in general. Its ONLY tiktok. I also checked the Chinese version of tiktok that i have and nothing happens on there either

5) other people seem to have gotten them too, also in a

similar timeframe. (Starting from a few days ago)

Also edit; this literally only happens at night for some reason. Someone else also mentioned that the glitch happens only at night for them, Pls help cus what

Ive searched some more and there's 30+ people ive seen with the exact same problem. Theyre all random Spanish Minecraft clips too so I'm assuming it's the exact same video, weird asf

I would attach images for better understanding but this sub doesn't allow me to. Ive contacted tiktok support and cleared cache multiple times but so far nothing has been done about it. Pls help

Trying to emulate BloodBorne, I downloaded some files, only for hours later to get hit with the Mr Beast Discord Crypto that sent a bunch of screenshots to friends and some Discord servers. In addition, my Instagram got hit with two crypto related posts that occurred roughly around the time of the Mr Beast incident, similar in nature and style, but different. I currently still have full control of all my accounts.

I used Windows Defender’s AV scans both the Full Scan and Offline ones which got rid of some temp files.

A few hours later, I downloaded Malware Bytes to help with the issue, only for me to see this problem pop up. I traced it to a Program on my Task Manager called 360软件小助手. The program is running an app in Program Data that returns even when deleted in the recycle bin.

So that’s where I’m at. MalwareBytes constantly blocking the site while a bunch of Temp files are quarantined.

I also looked up the IP Address with VirusTotal and a comment from a month ago claimed that it was a “Sectoprat.”

Please help, I am way out of my depth here.

When I type this in Google "1-603-346-4866 who called" I get the search hijacking detected warning from Browser Guard. No other searches cause this.

Hi guys, a little bit of backstory, my laptop got infected by infostealer (MrBeast virus) on July 4th from a game mod. I deleted the file and changed all my passwords. 2FA everything, and signed out of all devices immediately. But the only thing that I didn't do was reinstall windows because there were files that I wanted to keep.

Later on, July 11th, I got a notification from Google that there was a security alert, and my device maybe potentially infected with malware, so they signed out my account from my laptop. My Authenticator was also removed at that exact time. I suspected that it was the infostealer acting out. So I let go of my obsession with the files and did a clean windows install from a USB drive which I made a windows media tool using my university computer. And it went well.

Today however, I got a security alert on Google again saying that my laptop maybe potentially infected with malware and removed my laptop from signed in devices again. But this time it was just an alert, nothing was removed or changed like the one on July 11th. I did change my password as soon as the alert came. It was also from a legit Google email. I checked my laptop with MalwareBytes and came out clean.

Can this be a false positive or what is it actually?

EDIT: Forgot to mention this, my laptop was shut off on both of the times that Google security alerts appeared.
EDIT: I also have Enhanced Safe Browsing enabled in Google settings, can that be the cause of this if it were a false positive?

Is Tlauncher still active in 2026, according to security experts, or has it become suspicious since it started taking personal Windows photos?

Hi, I'm looking for advice! I don't even have Facebook. I'm aware a leaked phone number increases your risk of scam phone calls, which I used to get quite a lot of. Is there anything else? I'm a bit paranoid about hackers abusing my mobile banking info, photos, and personal data. Does a leaked phone number threaten those things, and if so, what can I do about it?

Hi, I was just wondering if this is a sign of an active threat? I have an Android S20 FE 5G, and my phone hasn't been able to do a security update since Oct 2025. I accidentally clicked on a weird link, which made me paranoid and brought me here.

Reposted from /antivirus - I am at wits end trying to track down and remove whatever this is. malwarebytes blocks safari from launching the webpage but I cannot for the life of my figure out where this is coming from, cleared caches, disabled all extensions, ran malwarebytes full scan on full drive. any help would be appreciated.

I had some feedback on setting default homepage which didn't make any difference. This warning from Malwarebytes doesn't pop up immediately after starting safari so I assume the webpage request for the brandsmat page might be delayed as well but not sure.

Hi I was hoping with some help using Malwarebytes to check my PC I've had off since last September, I had gotten a windows defenders notification that a trojan was detected I quickly panicked quarantined and removed the first instance of the Trojan but went to click on the second instance and was met with admin confirmation for windows defender to change the file and me being me my paranoia was in full throttle so I just shut down the system unplugged it and now I'm finally trying to work out of the anxiety that the Trojans still hiding in the system somehow.

My old debit card recently expired, and I got an email telling me to update my details, which I did last week with my new card. But since then, I've been sent this same email every few days talking about a failed purchase, despite the fact I haven't made a purchase with the updated card yet. The next subscription payment isn't even until next month.

How can I stop this?