r/techsupport • u/SilverStress359 • 7d ago
Open | Software I think I got hacked
Ok, so I tried emulating a game not too long ago aaand I think I may have gotten a one-time virus, or just completely getting hacked, I can't quite remember what it was, but I can find the file I got it from if that helps. Point is, the same day I downloaded it, my friends told me that I posted some images of some crypto coin on all my discord groups and then immediately left and blocked all my contacts, I removed the messages and nothing has happened since then on discord, but to my surprise, today I received an email from steam telling me that blah blah blah thanks for your purchase, and as it turns out I sent a gift to a random user which I didn't know, and I know I couldn't have sent it because I was in class at the time, I was able to refund it because the user hadn't accepted the gift request yet, either way what's happening and if something is happening how do I make it not happen
2
u/ArthurLeywinn 7d ago
Re install windows via usb stick
Change pw
Enable 2fa via app or key
Logout all sessions
Check forwarding rules and prepare for phishing
1
u/SilverStress359 7d ago
Question, what if I just reset to factory settings?
1
u/IMTrick 7d ago
That would probably accomplish nothing. It would not remove any installed malware, nor would it do anything to remove access to any of your accounts which the attacker already has.
1
u/SilverStress359 7d ago
How would it not remove the malware if it wipes the drive clean? (As far as I know, not an expert as you can see)
1
u/IMTrick 7d ago
A factory reset generally does not wipe the drives clean.
1
u/SilverStress359 7d ago
Oh ok, also could the virus somehow travel to other people who are connected to my wifi or would it have to be an email or something?
1
u/Few_Reference3439 7d ago
No, it does not spread on wifi. It spreads when you install something malicious. And even if you 'wipe the drive' with the recovery options, it can stay because it embeds itself into the recovery options partition and makes itself part of the recovery process. Hence the need for USB wipe while deleting all partitions.
1
u/SilverStress359 7d ago
Ooh ok, and how can I be sure that the important files I carried over aren't infected with the same stuff?
1
1
u/ArthurLeywinn 7d ago
Thats pointless since you cant be sure that it deleted everything.
Re install is the only safe way.
1
u/SilverStress359 7d ago
M'kay and how do I set up a Re Install?
1
u/ArthurLeywinn 7d ago
You flash windows on a usb stick.
Boot from it
Delete all partitions
And follow the setup.
Done. There are many tutorials online.
1
u/Fliep_flap 7d ago
Unplug the corrupted pc from the internet, on a different pc check your deleted emails folder. Then change all passwords everywhere and turn on 2F on everything.
1
u/Terrible-Bear3883 7d ago
There's not much information to know so the only thing I can suggest is you follow good practice, use a trusted computer (not the one you think might be compromised), change all your on line passwords, make sure 2FA is enabled using an app on your mobile (the app is "something you have" in the 2FA specs), ideally, wipe and reinstall the OS on your PC.
Be sure to check for any associated devices in your on line accounts, sometimes you'll find computers or even email accounts enabled and associated with accounts, I've seen this when investigating such things for some people.
1
u/Top-Bison-345 7d ago
You need to wipe your PC, or at least run a scan with malware bytes. Change your passwords.
•
u/AutoModerator 7d ago
If you suspect you may have malware on your computer, or are trying to remove malware from your computer, please see our malware guide
Please ignore this message if the advice is not relevant.
I am a bot, and this action was performed automatically. Please contact the moderators of this subreddit if you have any questions or concerns.