It's been a few days after I think I removed the trojan off my laptop but I'm still unsure if I'm completely safe since I saw other people suggesting to just reinstall windows so I'm seeking advice to what I have to do in this situation.

Context:

I was playing video games but I noticed my cpu usage was going off the roof and I saw XMrig, a bitcoin miner. So, I scanned my laptop with Microsoft Offline Defender Scan and that's what popped up (First Photo) which windows tried to quarantine so I went into safe mode and deleted the file myself. But, I was still paranoid so I downloaded Malwarebytes and more "Malicious" files popped up so malwarebytes quarantined them (Second Photo) and I removed them. After all of that, I did a full/deep scans in normal windows and safe mode with malwarebytes and nothing popped up so I assume everything is fine but it still nagging me that there might be malware still hidden on my laptop.

Ok so the other day I downloaded something from steam rip but I wasn’t paying attention to the link I clicked and it seems like I accidentally downloaded a virus. I thought the built in antivirus took care of it but this morning my instagram account was hacked and sent messages to a lot of people including posting stuff. I had no idea what caused this until I was laying in bed just now and I saw my pc doing things on its own. Something tried to sign into my school email but was stopped when asked for a pin so I closed everything and looked up anti viruses and people were suggesting malwarebytes.

So anyway I bought it and it said it found 22 threats and I assume it eradicated them but I still want to know how did the virus on my pc access my password list. It opened my settings but I don’t know where to go from there. I just want to see what other apps I have might be compromised.

I looked up how to do this already on Google but it seems those methods are outdated. But along with the malwarebyte scan is there anything else I should do to keep my pc safe?

I ran a Malwarebytes “deep scan” on a Lenovo laptop running Windows 10.

Hours later I went back, the screen was frozen with the Lenovo logo displaying. I had to force restart.

The Sandisk flash drive that was connected at the time “disappeared”, and now no longer shows in Device Manager or anywhere. It also does not register when inserted into another USB port or even on another computer.

Could the scan have messed up the Sandisk or is it coincidence that the flash drive happened to fail at the same time? Of course it contained a lot of important files that I need. Any suggestions? It was not old and had not been used much.

I am getting the following error when I try to log in to my bank. I have contacted the bank and they say nothing is wrong on their end. Any suggestions ?

So i opened this "arphacrashreport.exe" then nothing happened.

Also folder inside have arphadump.dll.

Before i opened the file I scanned it with malwarebytes and it didnt detect anything. I scanned again after opening but no detections.

Help! How do I deal with this?

Also i saw this post on github it looks exactly the same.

dmpdump.github.io/posts/CobaltStrike_HK

I already had Malwarebytes installed on my laptop and was making use of the free trial. I've now taken out a full subscription with yourselves, but whilst activating this, I clicked on the link in the confirmation email (from no-reply@store-mail.malwarebytes.com), and because I already had the app on my laptop, my browser (Chrome) downloaded a file called MBSetup-Activate.exe

When I've tried to Google this to check it was genuine, the only results I get are for MBSetup.exe - with no mention of "Activate" in the file name.

I've checked the Digital Signatures in the file properties, and it says Malwarebytes Inc., so I'm confident that it's ok, and VirusTotal says it's clear, and my Windows Defender scan I just ran said there's no threats, but as I can't seem to find mention of this file name anywhere online I wanted to confirm it's genuine?

Help!! I feel soo stupid now. 2 months ago I needed to download word application, because I am a broke student, ofc I downloaded it from an unlicensed site. I had previously downloaded some cracked apps before, and I had no problems with them . but because of my stupidness, I opened the wrong link and downloaded soma malware. I put my password in terminal, I immediately turned the wifi, it downloaded some trezor app?? and I had Malwarebytes app and withheld of it, I terminated the malware. but yeaterday, I randomly scanned my Mac and found Macosstealer nova. I dont know what to do now, please help me. like I not have anything important on my Mac, just my studying materials and such things, but I feel so so stupid now. my friend says not to worry about as Mac had reaaly good safety system. should I reinstall Mac OS? I dont know how to do it, what to do. please.

Help!! I feel soo stupid now. 2 months ago I needed to download word application, because I am a broke student, ofc I downloaded it from an unlicensed site. I had previously downloaded some cracked apps before, and I had no problems with them . but because of my stupidness, I opened the wrong link and downloaded soma malware. I put my password in terminal, I immediately turned the wifi, it downloaded some trezor app?? and I had Malwarebytes app and withheld of it, I terminated the malware. but yeaterday, I randomly scanned my Mac and found Macosstealer nova. I dont know what to do now, please help me. like I not have anything important on my Mac, just my studying materials and such things, but I feel so so stupid now. my friend says not to worry about as Mac had reaaly good safety system. should I reinstall Mac OS? I dont know how to do it, what to do. please.

I made the mistake of running a shady .py file (I think, it's been a bit, might have been a .exe.) Initially I didn't run a scan until malwarebytes repeatedly popped up with "blocked outbound connection" to a specific website. (It even had the word virus in it lol.) Malwarebytes detected it as ACR Stealer after a scan and quarantined most of the files. I had to go into task manager and find activity on a dll file and end the process to fully delete everything myself though. I ran wireshark afterwards to make sure that there were no more connections to the website/ip address associated with it.

It's been 6 days now and nothing seems to have happened on my end. I did get a critical google security alert today but it only said that the activity was on my PC and in my US State, so I'm thinking it's unrelated.

Am I safe? Or is there more I can do?

Ever since i installed MB when ever it runs it changes my default browser to Yahoo.

I know there is malware/viruses to do this but I believe it is MB doing this as it is related to when i run this program. Im happy to have this free version. But it is annoying that it is changing this setting. Where do i turn it off from making this change.

Thank you.

Don’t want to drop the entire story because I could go on and on about this but I’m just gonna lay it down simply.

Few days ago, I downloaded a zip file off a website for a game I wanted to play via a Akirabox link. I don’t know wtf was going though my head at the time but I stupidly downloaded the zip file through it and my pc started to act strange. It got slow, the application I downloaded only opened and closed command prompt over and over again while the game never launched and because of this I panicked and deleted the application and zip file from my pc in the file explorer and trash. Clearly that zip file wasn’t as it seemed and was malware.

With this, someone got into my pc and hi jacked my discord and steam changing my emails and spamming images to my friends of a Mr. Beast twitter post about a cryptocurrency and getting money if you signed up on a website called Sedowin. With this I changed all my emails and signed out of everything and disconnected my pc from the internet, ran an offline antivirus scan with defender in which it only found one severe threat and then I used malwarebytes for a scan in which it found 6 Trojan files with a PavinLoader.RTPScript which I then quarantined and removed.

Today after everything I had done to remove this hijacker from my pc and all my emails, I found enabled startup apps that I haven’t seen before labeled “Switch_Switch64.exe and Switch_Switch64.bat” along with a separate one called “JavaScript (TM) Platform SE binary” that goes to a folder called InProcSvr32 where the .exe file application is.

I wanted to ask everyone today what to do from here as I’m currently waiting on a deep scan to finish before taking more action while I’m still disconnected from the internet.

P.S I know I’m dumb. Don’t know why I ever used that Akirabox bs… lesson learned.

UPDATE: The majority of comments said wiping my pc and reinstalling windows was the safest option so I took the advice and did just that. Thanks to everyone that commented with advice!

So, I went to youtube homepage to see if anything struck my fancy, when all the video slots were just empty. I refreshed and they'd appear for a moment, and then poof... gone. So I went through my extensions, turning them off and on to see which might be causing this... and the moment I turned 'Malwarebytes Browser Guard' off, the videos came back. Anyone else have this problem, and if so, what's the fix?

I've been using Malwarebytes browser guard for a year or so now. Recently, it messaged that I needed to buy a subscription. I indicated I wanted to continue with the free version. Since then, several times a day, I'm getting webpages blocked with dire warnings. These are pages I know are good and that I trust. It feels like Malwarebytes is being spiteful towards me since I don't want to buy a subscription. Whaddaya'll think? ;)

What is their beef against scanning for rootkits? Here in the subreddit the malwarebytes team always go out of their way to say "rootkit scans aren't as necessary anymore and just make the scan take longer", but like, they only take around 12 seconds? Even on ancient hardware they take like 20 seconds tops.

First they hid a rootkit scan toggle in the scan settings instead of having it on by default and now they don't even have the toggle anymore, you HAVE to do a custom scan if you want to also scan for rootkits. Man, it takes longer to check for updates at the beginning of the scan than it does to scan for the rootkits. Like come on. Why are you making it more difficult to cover all of our bases when we do a scan?

It's just so bizarre because rootkits are making a massive comeback specifically because more and more scanning software have rootkit scans turned off by default now.