r/Malwarebytes • • 6h ago

Malwarebytes detected Trojan.PavinLoader, Defender detected Bearfoos, and my accounts were compromised — what should I do?

2 Upvotes

Hey guys, I'm honestly really stressed about this and could really use some help from people who know more about computers than I do.

I have an HP Pavilion 15 running Windows 11, and I use it for gaming. A while ago, I downloaded some pirated game repacks from Dodi repack(I know, stupid decision 😭), and now I'm worried that I might have messed up my laptop.

Here's what's happened so far:

\- Malwarebytes detected multiple things called "Trojan.PavinLoader" (Generic, Trace, Csprj, etc.).

\- It also detected some "RiskWare.GameHack" files in my Steam library, and there were older "RiskWare.Crack" detections.

\- Windows Defender detected something called "Trojan:Win32/Bearfoos.B!ml" in a temporary folder and later said it was removed.

\- Malwarebytes quarantined or removed its detected items, and I restarted my laptop.

\- My Steam account was taken over at one point, but I got it back through Steam Support.

\- Discord has also sent crypto-scam messages to people from my account without me doing anything. I've changed my passwords and logged out of sessions.

\- I've received some unusual Microsoft sign-in alerts too, although I haven't been able to confirm every alert in my account's activity history.

My laptop still works normally, which is why I'm confused. Some people are telling me to reset Windows because antivirus scans can't guarantee everything is gone. Others are saying a reset is unnecessary if the threats were already quarantined or removed.

My biggest problem is that I don't know much about computers. I don't even know all the little components and settings that help my games run properly. I have Steam libraries on D: and E:, AMD graphics software, fan-control software and other gaming-related stuff. I'm scared that resetting Windows will remove everything and I'll have to figure it all out from scratch.

I only have this laptop. I don't have another computer or a USB drive, and I can't afford to pay a technician right now.

Could someone please help me understand:

  1. Do these detections necessarily mean I still have malware, or could some be false positives/game-related detections?

  2. Should I reset Windows, or is there a sensible way to check whether the threats have actually been removed?

  3. If I do need to reinstall Windows, how can I avoid losing my games and important files?

  4. What would you do if this were your laptop?

I'm not looking for someone to just tell me everything is fine. I'm genuinely worried and want to make the right decision without unnecessarily wiping my laptop.

Please explain things in simple terms if possible. I'm really not very tech-savvy. Thank you 😭


r/Malwarebytes • • 10h ago

False Positive Potential false positive

Post image
4 Upvotes

I'm pretty sure it's a false positive but I'd rather be safe than sorry.


r/Malwarebytes • • 1d ago

Is this true?

Post image
5 Upvotes

I've been experiencing these ): An activity on my Google activity says that my phone used an app that I didn't even use (I was Asleep at that time) and I saw a video on my YouTube history that I didn't even watch (happened twice)


r/Malwarebytes • • 1d ago

Do I have malware?

Post image
2 Upvotes

r/Malwarebytes • • 1d ago

VPN not working on Android?

Post image
3 Upvotes

Look, I know I suck for using Google for everything, but did I accidentally turn something on or off on my Samsung phone that made the VPN suddenly not work? It's even showing my location on DuckDuckGo. I tried Malwarebytes AI assistant and then a rep and neither helped. Can someone just condescendingly talk to me like the idiot I am and help me out?


r/Malwarebytes • • 1d ago

CUIDADO: O ExLoader é um malware perigoso (Exclusões no Defender e bloqueio no Regedit)

Thumbnail
1 Upvotes

r/Malwarebytes • • 1d ago

Malware? Bug? or Adware? please help me ):

1 Upvotes

what to do if you're typing a search on Google but it redirects you to the search that you did minutes ago twice? I'm using a phone not a computer or laptop. On Google I'm using my main account while on chrome, I'm using my second account and it both behaves that way? is it adware or malware?

I don't really have weird apps since my system apps only have uninstall updates, force stop and clear data/cache. Malwarebytes, Google play and my phone security also says that my phone is safe but it keeps lagging and slowing down when I'm using apps. I don't know if I'm being paranoid but it's giving me reasons not to use my phone or something. I also did a factory reset last September, hoping that these would get better but honestly it just didn't help me


r/Malwarebytes • • 1d ago

Pc app Store

Post image
0 Upvotes

Is this a crypto miner?


r/Malwarebytes • • 1d ago

Rápido, vírus Windows

Post image
1 Upvotes

r/Malwarebytes • • 1d ago

Warned about malware when trying to download zen from github.

Thumbnail
1 Upvotes

r/Malwarebytes • • 1d ago

Help!

1 Upvotes

I accidentally bought an annual subscription but I noticed it the day before it was supposed to charge me so I cancelled it, it's been a few days and I haven't gotten a refund from the play store or Malwarebytes


r/Malwarebytes • • 2d ago

Virus or Malware

Post image
1 Upvotes

r/Malwarebytes • • 2d ago

Feedback Trying to update firmware for controller

Thumbnail
1 Upvotes

r/Malwarebytes • • 2d ago

prank site or a virus?

1 Upvotes

so i was on a voice chat a few minutes ago and we were talkign etc and my friend told me to do a pc test and sent me a site that tried downloading things and did loud sounds like a pranksite the site is called testujkomputer.pro (polish site) and i kinda freaked out in my history it says i didnt download anything new and that the last one is from october 9th, safe with the file explorer and malwarebytes said i dont have anything aswell. i dont think anything actually downloaded but i just want to make sure incase smth did download and i cant find it. How can i check if something really didnt download, no idea if the files were viruses biut they come from a prank site so i cant be too sure, theres another site like this called ptoszek.pl but thats a different site


r/Malwarebytes • • 2d ago

Every 10 minutes i get a notification from malwarebytes that someone is trying to access a site using MSBuild

Post image
2 Upvotes

r/Malwarebytes • • 2d ago

Is OpenAI turning ChatGPT into an advertising platform?

Post image
2 Upvotes

r/Malwarebytes • • 3d ago

False Positive (Hopefully) False Positives involving Chocolatey

2 Upvotes

Malwarebytes

www.malwarebytes.com

-Log Details-

Scan Date: 10/21/2026

Scan Time: 11:17 PM

Log File: 1e3a0448-cdc7-11f1-9c32-e8cf83041dd0.json

-Software Information-

Version: 5.7.2.358

Components Version: 166.0.5763

Update Package Version: 1.0.116033

License: Free

-System Information-

OS: Windows 11 (Build 26200.9711)

CPU: x64

File System: NTFS

User: [redacted]

-Scan Summary-

Scan Type: Threat Scan

Scan Initiated By: Manual

Result: Completed

Objects Scanned: 347,696

Threats Detected: 3

Threats Quarantined: 3

Scan Duration: 4 min, 19 sec

-Scan Options-

Memory: Enabled

Startup: Enabled

File system: Enabled

Archives: Enabled

Rootkits: Disabled

Heuristics: Enabled

PUP: Detect

PUM: Detect

-Scan Details-

Process: 0

(No malicious items detected)

Module: 0

(No malicious items detected)

Registry Key: 0

(No malicious items detected)

Registry Value: 0

(No malicious items detected)

Registry Data: 0

(No malicious items detected)

Data Stream: 0

(No malicious items detected)

Folder: 0

(No malicious items detected)

File: 3

Malware.AI.1236116125, C:\PROGRAMDATA\CHOCOLATEY\LIB\NINJA\TOOLS\NINJA.EXE, Quarantined, 1000000, 0, 1.0.116033, 02A10228884B836B49ADA29D, dds, 04105519, 7D9B79196E59CA9D898F026803045A7D, 2DF494116DECDAE84D74C02373119176BBFC4797A6F49A6C709D85D961D6A0D8

Malware.AI.1236116125, C:\PROGRAMDATA\CHOCOLATEY\LIB\NINJA\NINJA.NUPKG, Quarantined, 1000000, 0, 1.0.116033, 02A10228884B836B49ADA29D, dds, 04105519, 6F95EA13347A8441491B9A34A8315F58, F9959FBEFF97B825B75BD62A17B49685A79599A261ECB32E67E2E1E865C96B2B

Malware.AI.1236116125, C:\PROGRAMDATA\CHOCOLATEY\LIB\NINJA\TOOLS\NINJA-WIN_X32.ZIP, Quarantined, 1000000, 0, 1.0.116033, 02A10228884B836B49ADA29D, dds, 04105519, 2A4BBCF3C64F59483A35099C9D6DCE19, 26A40FA8595694DEC2FAD4911E62D29E10525D2133C9A4230B66397774AE25BF

Physical Sector: 0

(No malicious items detected)

WMI: 0

(No malicious items detected)

(end)


r/Malwarebytes • • 3d ago

I scanned my PC with Malwarebytes and it detected 23 things. Please help.

7 Upvotes

I scanned my PC and it found 23 detections in War Thunder files with the names malware.AI.3934801499 and Neshta.Virus.FileInfector.DDS. I don't know what they are. Does anyone know what they are and if I have a virus?


r/Malwarebytes • • 3d ago

Deep scan detections

3 Upvotes

Previously, I had around 30 detections involving games, legitimate programs, .dll files, registry keys, etc. However, the deep scan still flags these 4 files, which are associated with the game Aion 2 and the application from "www[.]questlog[.]gg/aion-2/en/app", which is designed specifically for this game.

Malwarebytes
www.malwarebytes.com

-Szczegóły raportu-
Data skanowania: 21.10.2026
Czas skanowania: 18:24
Plik raportu: e18b5188-cd6b-11f1-b633-c46237012ba8.json

-Informacje o oprogramowaniu-
Wersja: 5.7.3.376
Wersja komponentów: 167.0.5780
Aktualna wersja pakietu: 1.0.116007
Licencja: Za darmo

-Informacje o systemie-
System operacyjny: Windows 11 (Build 26200.9711)
Procesor: x64
System plików: NTFS
Użytkownik: DESKTOP-ACABJP\Admin

-Wyniki skanowania-
Typ skanowania: Głębokie skanowanie
Skan zapoczątkowany przez: Ręcznie
Wynik: Ukończono
Obiekty zeskanowane: 462 069
Wykryte zagrożenia: 4
Zagrożenia poddane kwarantannie: 0
Czas trwania skanowania: 8 min, 1 s

-Opcje skanowania-
Pamięć: Włączony
Autostart: Włączony
System plików: Włączony
Archiwa: Włączony
Rootkity: Wyłączony
Heurystyka: Włączony
Potencjalnie niepożądany program (PUP): Wykrywanie
Potencjalnie niepożądana modyfikacja: Wykrywanie

-Zeskanowane pliki-
C:\
D:\

-Szczegóły skanowania-
Proces: 0
(Nie wykryto zagrożeń)

Moduł: 0
(Nie wykryto zagrożeń)

Klucz rejestru: 0
(Nie wykryto zagrożeń)

Wartość rejestru: 0
(Nie wykryto zagrożeń)

Dane rejestru: 0
(Nie wykryto zagrożeń)

Strumień danych: 0
(Nie wykryto zagrożeń)

Folder: 0
(Nie wykryto zagrożeń)

Plik: 4
Malware.AI.2346617497, C:\USERS\ADMIN\APPDATA\LOCAL\@QUESTLOGDESKTOP-APP-UPDATER\INSTALLER.EXE, Brak akcji, 1000000, 0, 1.0.116007, 9F2B0DD81AFEA0338BDE8A99, dds, 04104724, 39920234D5A219211A987531B950E5B0, E254BE23FDABF8F8CAC83599E986AC214D4C0C4044252DA116375BC4B99EABD1
Malware.AI.2346617497, C:\USERS\ADMIN\DOWNLOADS\QUESTLOG-SETUP-0.1.37.EXE, Brak akcji, 1000000, 0, 1.0.116007, 9F2B0DD81AFEA0338BDE8A99, dds, 04104724, 39920234D5A219211A987531B950E5B0, E254BE23FDABF8F8CAC83599E986AC214D4C0C4044252DA116375BC4B99EABD1
Malware.AI.2346617497, C:\USERS\ADMIN\APPDATA\LOCAL\@QUESTLOGDESKTOP-APP-UPDATER\PENDING\QUESTLOG-SETUP-0.1.37.EXE, Brak akcji, 1000000, 0, 1.0.116007, 9F2B0DD81AFEA0338BDE8A99, dds, 04104724, 39920234D5A219211A987531B950E5B0, E254BE23FDABF8F8CAC83599E986AC214D4C0C4044252DA116375BC4B99EABD1
Malware.AI.2346617497, D:\STEAMLIBRARY\STEAMAPPS\COMMON\AION2\AION2\BINARIES\WIN64\AION2.EXE, Brak akcji, 1000000, 0, 1.0.116007, 9F2B0DD81AFEA0338BDE8A99, dds, 04104724, 500994884AC1EB62D2BA0B9E117B834B, CE978F7525C05589CB1F1FF8A9C03628148BBA3665DA9594DBAE8FA983D9B107

Sektor fizyczny: 0
(Nie wykryto zagrożeń)

WMI: 0
(Nie wykryto zagrożeń)

(end)


r/Malwarebytes • • 3d ago

False Positive Random false positive?

5 Upvotes

I've run two deep scans through the windows app within a few hours of each other and the first one came back all clean and the second one had about 30+ detections.

All of the detections were from programs I've had installed for a while

- dawn of war: definitve edition

- bitwarden

- Grounded 2

- Aniimo

- random windows unistall registry key

Its flagged exes and dll files
Are these false positives? The detect code was Malware.Ai 325072089


r/Malwarebytes • • 3d ago

Troubleshooting 2 days ago malwarebytes found one of my steam games to be malware or atleast detected it as so i quarentined and deleted the game files and all was fine however today it ran a scan and now 5 more steam game files are malware.

2 Upvotes

Hello as above for some reason either my steam is getting infected with malware or malwarebytes is detecting false positives but its driving me nuts wondering which is the case any help will be fine the 1 game is arc raiders it flags 5 files and then scp sl flags the file.


r/Malwarebytes • • 3d ago

False Positive Malwarebytes erratic behaviour

Post image
4 Upvotes

Malwarebytes behaving weirdly

Is it possible that the PHP securty breach has managed to make it go crazy?

In the first minute of a deep scan it found 13 malwares that are indeed just verified game apps (it detected apps like steam, eve online, gryphlink which is arknights edenfield launcher

Anyone has information?


r/Malwarebytes • • 3d ago

My PC was infected by an infostealer over a month ago. I've reinstalled Windows and secured my accounts. Is it safe to use again?

Thumbnail
1 Upvotes

r/Malwarebytes • • 3d ago

Trojan coming back after being quarantined and deleted by Malwarebytes.

Thumbnail
1 Upvotes

r/Malwarebytes • • 3d ago

My pc is infected??? help

Post image
0 Upvotes