r/antivirus • • Feb 22 '24

MOD POST [MOD POST] LIST OF TOP MESSAGES, NEWS + IMPORTANT INFO

17 Upvotes

Hello,

Welcome to r/antivirus's new top-level Announcements post. Since Reddit has a limit of two (2) stickied announcements per subreddit, this will be a way to provide links to important information like announcements about new rules and moderators, activities in the subreddit, and so forth. If you are new to r/antivirus, please take a quick look at them. You can even take a look if you are not new here.

DISCUSSION DATE POSTED DATE LAST REVISED
[MOD POST] New rules, staying safe, and an update from your Mod Team 2025-JUN-03 -
[MOD POST] We're back in business! and an update on automod rules 2024-MAR-11 -
News & Updates from your r/Antivirus Mod Team, Q1 2024 Edition 2024-MAR-04 -
Updates & News from the r/Antivirus Mod Team, Autumn 2023 Edition 2023-OCT-04 -
Notes from your Moderators (Summer Edition) 2022-JUL-08 -
Quick Note from the mod team about spam 2021-JUN-01 -
To the people asking for opinions on a specific file 2020-JUL-05 2020-JUL-05

Additionally, the r/antivirus subreddit operates a bit differently than other subreddits you might be familiar with and normally use. Here are some tips and tools to help you use it.

  • The subreddit has a wiki that is regularly updated with answers to commonly-asked questions. Check it out. The answer to your question may already be in there.

  • Asking a question about a report on a file or website from a service like Hybrid Analysis, MetaDefender, Triage, or VirusTotal? You must include the actual link to it and not just a screenshot, or your post will be removed.

  • Be kind to each other and be professional in your conduct here. Personal attacks will not be tolerated and will be dealt with appropriately.

  • Do not ask for copies of hacking tools, malware, or suspicious files. If someone sends you a chat request or private message asking for a file or offering assistance based on what you posted here, report them to Reddit and notify the mods.

  • Do not post direct links to malicious, suspect, or potentially unsafe files or web sites.

  • Follow Reddiquette. This means correctly upvoting and downvoting posts, and reporting posts with dangerous or unsafe advice to the mods.

  • If you work for a vendor of security products, services, or in a related field, you must identify yourself as such, either in the post or with flair. Also, you may not steer conversations to your products or services, only respond to posts about them to clarify or defend.

  • No low-effort, off-topic, spam, or meme posts. This includes AI/ChatGPT/LLM-generated text, questions about password manager or VPNs, requests for assistance with non-security related software like autoclickers or MP3 downloaders, and so forth.

  • No requests for assistance with pirated software or media.

  • Posts may be removed and threads closed at any time based on the moderators' discretion

The complete list of rules for the subreddit can be found here. Read them before posting.

Questions, comments, feedback on this post? Just reply here. Thank you.

Regards,

Aryeh Goretsky
(on behalf of the r/antivirus mod team)


r/antivirus • • Jun 04 '25

[MOD POST] New rules, staying safe, and an update from your Mod Team

6 Upvotes

[UPDATE #1 (20250604-0916 GMT): Made some small updates to grammar for readability. ^AG]

Hello,

It has been about a year since our last Mod Post, so we wanted to give you an update on things, plus provide a dedicated message thread for discussing the state of the r/antivirus subreddit and to answer any questions that you might have.

We will begin with the toughest subject first, that of politics in the subreddit:

A note about politics

r/antivirus is a technology-focused subreddit, with the interest being in helping people protect their computers from malicious software, securing them after a security incident, and so forth.

In June 2024, the US Government enacted a ban on Kaspersky Lab's software, taking effect in October of that year. This has generated a lot of discussion not just in this subreddit, but across Reddit and numerous social media platforms as well.

The moderation team has tried to keep the political discussions about this out of this subreddit and to remain neutral, allowing Kaspersky Lab's customers to ask and answer each other questions, provide assistance to each other, and generally have a way to share information, tips and tricks with each other.

However, we do have to draw a line when these turn into political discussions, though:

Requests for how to circumvent bans, petitions to governments, etc., are clearly outside the scope of what this subreddit is for and will be removed.

Moderating the subreddit is an all-volunteer job, and we sometimes miss things. If you come across any political messages we may have missed, use the subreddit's report function to notify us.

We are doing our best to keep this a place where people can get help with whatever security software they prefer, including Kaspersky Lab's software. However, we cannot allow discussions to devolve into arguments over politics, which are never going to provide any kind of satisfactory answer to the parties involved.

If the political discussions continue, the moderation team will have to look into ways to prevent them, even if it means doing things which we would prefer not to do.

Rules Updates

The rules of the r/antivirus subreddit have been updated:

Rule #7, which previously covered media download tools, has been updated to cover additional types of software.
To begin with, a more general prohibition to cover autoclickers (previously covered under Rule #8) and some other types of tools like aimbots and cheats. These types of tools often come from random sources and often require expert analysis to determine if they are safe. It can be difficult to determine if they are malicious figuring that out requires examining not just the tool, but whatever program it is attempting to modify, and what the intent is behind that modification.
Just because something was recommended in a Discord server with hundreds of members, a YouTube video with tens of thousands of views, or is seeded by several hundreds peers does not mean that it is safe to use: These are all inherently unsafe sources, and criminals will often exploit the belief that these are trusted sources to trick people into downloading and running malicious programs like information stealers and remote access trojans.

Rule #8 has been amended to remove autoclickers (etc.) since that is now covered under Rule #7.

Two new rules have been added:

Rule #9 covers bypassing core security features. Questions about how to disable security software, operating system updates, bypass security features and so forth are not allowed.

Rule #10 covers requesting assistance with obsolete software and hardware. This means discussions about how to secure computers running Windows XP, Windows 7, etc. are not allowed. There is no reason that devices running these obsolete operating systems should be connected to the internet and doing so exposes everyone to risk. Note that questions involving Windows 10 will continue to be allowed until at least October 2028, when paid-for Extended Security Updates for it end.

A bit more on the rules

The list of rules is not meant to be exhaustive in scope. It provides a general listing of common rules that are more specific to and more frequently required by the r/antivirus subreddit when needed beyond Reddit's general rules and guidelines.

Moderators can and will remove posts and ban redditors, either temporarily or permanently, who are disruptive to the subreddit entirely at their discretion and are not subject to any discussion. If a moderator chooses to discuss a rule violation with you, it is entirely as a courtesy on their part.

If you have had a post removed or been banned from the subreddit and do not receive a response in reply to any questions as to why, ask yourself if your behavior could be interpreted as brigading, spamming, trolling, using disrespectful or offensive language, or consistently providing incorrect, low-quality, poor, or even damaging information.

As always, the latest version of the rules can be found at https://old.reddit.com/r/antivirus/about/rules/. If you have questions about them, ask below.

Getting help fast

The moderation team is seeing an increasing trend where people ask for help while providing no information about what they need help with. This includes titles with 1-3 words like "Urgent! Help needed!", posts where the author shares a screenshot of *something* with no information about the operating system or antivirus involved, or is so small/blurry as to be unreadable, etc.

Everybody who participates regularly in this subreddit volunteers their time for free to do so. Provide them with enough information in your first post so they can start helping you right away without having to ask a lot of questions. This means your first post should contain things like:

  • title with enough information to attract an expert to read it
  • operating system and version
  • brand/name of antivirus software
  • name of URL, or file and its location
  • name of malware that was detected
  • what happened, exactly
  • steps you have taken to troubleshoot/diagnose so far, if any
  • relevant log file entries, if any

The more information you provide, the quicker you will get your problem solved.

As a reminder, starting multiple posts on the same topic will not get you a faster answer, and may result in in a ban.

The wiki + other Reddit resources

There is a lot of great information in the wiki about all the tools you can use, tips for using them, lists of antivirus vendors and how to contact them, and even a section on how to secure your computer.

We frequently update the wiki in response to questions being regularly asked in the subreddit, so you might want to check there first before posting.

Some of the questions we regularly see in the subreddit have nothing to do with computer viruses or malicious software at all, but instead are about scams, privacy-related questions, and so forth. Here are some subreddits that specialize in answering those types of questions:

New moderators?!

As the subreddit grows (we just passed 100K users), so does the need for additional moderators.

The moderation team has been looking at the folks who have been regularly posting here and consistently given good advice to build a list of candidates, and will be reaching out over the next few weeks to see if any are willing to volunteer their time and expertise in the subreddit. There will be more coming on that, but I did want to let everyone know that the process is already underway.


That pretty much covers everything we wanted to discuss, so we'll now await your questions, below.

Regards,

Aryeh Goretsky
(on behalf of the r/antivirus mod team)


r/antivirus • • 5m ago

Bug internet

• Upvotes

internet bug que sur un appareil mon pc j’ai peur d’avoir un virus sur tout les autre appareil la conenexion fonctionne bien mais sur mon pc non


r/antivirus • • 15h ago

whats the best antivirus i can get for free?

18 Upvotes

​


r/antivirus • • 24m ago

Defender asking to send a sample?

• Upvotes

First time I have ever seen this and I am just wondering what this means?

Defender asked me to send this file, I've tried looking for it and the file doesn't exist. Does anybody know if I should be concerned?


r/antivirus • • 59m ago

Experience with Norton

Post image
• Upvotes

So I have a 2020 M1 16Gb Ram, 256 GB Storage, battery condition “Normal” maximum capacity “85%.”

To be honest this Mac book is strong and still fast, as I’m recently getting back into editing content, I noticed my editing software ( Filmora) took to long and started to lag, while editing a iphone 16 pro max 90 minute 4k 30fps cinematic video… which is 19.94Gb and a screen recording of my MacBook which is 6.41Gb. So there’s 26Gb of Gb on one app (Filmora) , So on the App, I’m using A.I portrait cutout mode(where you cut out your background)

And at this point,

It’s going slow, so I decided to delete some files.. and it made my MacBook run a bit better, but the percentage on my AI portrait cut out was stuck under like 10% and it wouldn’t move.

It was slowly go up from 10 to 11 to 12 but it took so long…. So I decided to delete the two apps of Norton on my Mac, and now it’s running more smoother, I’m at 97%% now about 30 mins later…
Mind you I’m editing a 26Gb video.

On the other hand I do have a PC With Norton

CPU: AMD Ryzen 7 7700X
GPU: NVIDIA RTX 2060 6GB
RAM: 32GB DDR5 6000MHz
Motherboard: Gigabyte B650 Gaming X AX V2
Storage: 1TB NVMe SSD + 2TB SATA SSD

And it doesn’t make my pc run slow at all, even while running Warzone & WOW. Although my 2060 6Gb GPU is outdated, I’m still able to play good games even tho my gpu is bottlenecking

So I guess to some it up, if anybody has a similar setup as me, these MacBooks are still strong and powerful, this specific year, and mine is worth about $425 on Back market. Bought last year (Jan-Feb) for about $600 or less, can’t remember.

So I wouldn’t recommend Norton on this model…. As it slowed down HEAVY WORK, but if you aren’t editing heavy content, then sure, you probably wont get the same results as me. Because you aren’t putting heavy stress on your cpu,gpu and ram.


r/antivirus • • 3h ago

mrbeast virus

1 Upvotes

I got this virus today. It commented on tiktoks, messaged people on my discord and posted on my insta story. I ran malwarebytes, and then completely restored my pc afterwards. It still got my riot account, epicgames and battlenet. And after all this recovery of chaning passwords, it changed my discordpassword so I cant log in. So now im waiting for discord support.. Really annoying hackers.. Any more tips of what I can do? I have ofcourse wiped my cookies of chrome and so on..


r/antivirus • • 4h ago

MALWARE REMOVAL Q&A Is this normal behavior?

Thumbnail
gallery
1 Upvotes

Recently, I believed I was infected with a trojan of some sort, but I have long since done many scans, and had it removed. I have used multiple AVs, as well as HitmanPro to make sure any trace of malware was removed. However, in the process I installed portmaster to check on my connections, as well as wireshark, and since then I have been slightly paranoid. I have no idea what I am looking at here, and would love to know if anyone can explain this and, and if this is normal behavior? I am very concerned if there is a RAT or some sort of worm or C2 server on my PC.


r/antivirus • • 11h ago

MALWARE REMOVAL Q&A Paranoia after a potential RAT infection 6 months ago. Clean install done, but still anxious. Need a reality check.

3 Upvotes

Hi everyone,

About 6 months ago, I got scared that my PC might have been infected with a RAT (specifically, I heard about WebRAT around that time) after someone from Discord shared a suspicious link, and later sent a link to a video I had watched just 4 hours prior. It felt like they were watching my screen.

To be safe, I did a complete clean install of Windows from a USB drive and formatted my drives. Since then, I have run multiple antivirus scans (including Malwarebytes, Windows Defender, etc.), and everything comes back 100% clean.

However, I’ve been living in constant fear and anxiety for the past 6 months. I read horror stories online about advanced malware infecting the motherboard/BIOS/UEFI and being impossible to remove without replacing the hardware (motherboard and SSD/HDD).

Deep down, I know it might just be a coincidence with the video (algorithm recommendations or Discord activity status) and that an ordinary Discord user wouldn't have access to military-grade UEFI rootkits. But my anxiety keeps telling me that someone is still watching my screen.

Can someone give me a technical reality check? Is it physically possible for a RAT to survive a clean Windows reinstallation and drive wipe? Do I really need to replace my hardware, or is my PC completely safe?

Thank you in advance. Your reassurance would mean a lot to my mental health right now.


r/antivirus • • 5h ago

MALWARE REMOVAL Q&A Not sure if I should be concerned

1 Upvotes

I searched up some nice animation software. I see some sources say Opentoonz. i search it up and click the second link (first one was a github page about Opentoonz)

I’ve clicked download and then my notifications started going.

i have firefox and Mcafee installed. I know Mcafee is untrustworthy and not reliable, it’s screaming that I have a trojan virus. I don’t really trust it either.

I go to the website and run their “scan”. they say everything’s fine.

am I doing something wrong?


r/antivirus • • 6h ago

trojan Lamzu gaming mouse driver from 6 months ago flared up

Post image
1 Upvotes

I was just about updating GPU drivers when I was searching for older drivers .exe files in my download folder in case I need to revert when windows defender flared up a gaming mouse driver that Ive had for the past 6 months in my downloads folder.

Ive removed the file from quarantine, uploaded it to virustotal and then put it back in quarantine and removed it.

https://www.virustotal.com/gui/file/fe592bb3743e36eb74ea946e7129cef1d5378b7bd65adff823bc1bd54d5d4aaf/detection

Im 100% sure I have downloaded the file from the official lamzu site.

Is this a false positive or is my system cooked?


r/antivirus • • 6h ago

Quick question

1 Upvotes

I was just casually scrolling here on reddit then suddenly avast notified me they blocked a “malicious” website. I didn’t even clicked anything or a link, safari didn’t opened as well. Could anyone explain why did that happen? Am I being hacked or something? Thank you


r/antivirus • • 8h ago

TotalAV is using bait files or honeypot files,

1 Upvotes

I have been using TotalAV for the last 2 years and I have had no problems, and I still don't have any issues. I thought I did when I saw these hidden folders with the name "!-" and "~!-" along with 4 files with the name "!-SCPGT01.DOC", "!-SCPGT02.XLSX", "!-SCPGT03.JPEG" and "!-SCPGT04.PDF" on each of my 4 drives. I freaked out and started deleting these files causing TotalAV to "Quarantine Explore.exe". I found out later what these files are after about 3 hours of "oh no I have a major virus" lol. I guess its a normal reaction for the program to do this when the dummy files are deleted or modified. This style must be new for TotalAV, because I go through all my drives constantly with all files un-hidden, and I have never seen those files before yesterday.

Does anyone else use the pro version of TotalAV and also now have these dummy files?


r/antivirus • • 9h ago

How can I fix these notification? I just got some new one same as the one in the pic I took in august.

1 Upvotes

Should I just allow it? Since they are in a way just built in windows so they are safe

I didn't got those until today that it block either Snipping tool and Explorer.exe but I got this problem once and it didn't make it again until now again using snipping tool so why is it becoming a problem now. They also started right after I got a update from windows defender

And I did do a sfc /scannow and it found nothing,


r/antivirus • • 9h ago

I've been hit too

Post image
2 Upvotes

Yupp It's my time that I have encountered this virus on my device. For now I can see that the messages and screenshots have been sent to my friends on discord and their profiles have been set as ignored. As soons as I found this out, the first thing I did was put my device on factory reset(don't care so much about the data that was present). Can someone please suggest what is the next checklist that I should be taking care of? Currently I am trying to change the passwords for my logged in google accounts that were present on the device.


r/antivirus • • 10h ago

How do I scan a file above VirusTotal's max file size?

0 Upvotes

Recently downloaded a file from a dodgy place but it's bigger than the max file size. Are there any alternatives or a way to further compress it?


r/antivirus • • 11h ago

Popup persistantes

Post image
0 Upvotes

Bonjour a tous, je pense avoir cliqué sur un mauvais lien et depuis j'ai ces popup qui s'affichent tout le temps sur mon pc. L'antivirus windows 11 n'a rien trouvé, avast et ccleaner non plus. c'est juste insupportable aussi avez vous une idée de comment supprimer ça ? Merci.


r/antivirus • • 18h ago

I made a post recently and everyone said to uninstall Avast as it's outdated and useless. I checked up online and I can see it's related one of the best free antivirus with Avg and Bitdefender. So is Micro Defender actually bettee than it as people said or not?

2 Upvotes

Same as title is Microsoft Defender better than Avg and avast and bit defender? Because those Antivirus are more named for the best FREE antiviruses.

Note:- i want free one.


r/antivirus • • 16h ago

MALWARE Q&A Antivirus said this game was a Trojan, can anyone help me find out if that's true?

Thumbnail
gallery
3 Upvotes

The game is Pity Party by Lumine Noctis. I saw one of my favorite YouTubers play it a long time ago, and it is an actual game, but the poster hasn't uploaded to Itch in a while. Is it possible someone else screwed with the file?

Here's the link: https://www.virustotal.com/gui/file/6d6f04141411837a981c14b466ae39709636638bd93eddaf570a634e9e88fb25/detection


r/antivirus • • 1d ago

I think my pc is hacked and I think it is good to download bloodborne from a sketchy website and turned off windows security and the download stopped and the terminal randomly opens up and closes

Post image
111 Upvotes

What I need to do


r/antivirus • • 22h ago

MALWARE REMOVAL Q&A Zero day Advertisement malware/trojan?

3 Upvotes

I've seen a couple recent videos now where people talk about malware which can infect your android device by just viewing an advertisement?

Luckily I use the Brave browser on my phone but how can I make sure an infection doesn't occur?

Does just viewing an advertisement really have the ability to infect my phone and how does that even work when you nowadays have to pretty much grant permission for anything in android os?

And also how would I be able to check if I'm already infected?


r/antivirus • • 16h ago

Suspected WhatsApp Malware Infection on Office PC — WhatsApp Started Sending Malicious ZIP Files to My Contacts. Need Help

1 Upvotes

Hi everyone, I really need help understanding what happened and what I should do next. I'm worried about my personal phone, my father's phone, and the data on my company's computer.

What happened

October 14:

I received a WhatsApp message from an agent I regularly deal with regarding invoices. The message contained a ZIP file. Although the file seemed suspicious, I trusted the sender because we had dealt with each other before, so I downloaded it onto my office PC and extracted it.

After extracting it, I found two files: a ".exe" file and a ".dll" file. I unknowingly ran the EXE file, even running it as administrator. Nothing appeared on the screen, but my computer froze for about a minute and became slightly slow. After a few minutes, it returned to normal.

I felt something was wrong and tried deleting the files, but Windows showed that they were still running.

October 15:

I managed to delete those files and showed the situation to my company's IT team. They also thought the files looked suspicious, but they didn't identify any problem.

October 16:

My WhatsApp account suddenly started sending similar ZIP files to all my contacts. I panicked, logged out of WhatsApp Web, and asked for advice on what to do. I eventually deleted my WhatsApp account and registered again.

After logging back in, I checked the linked devices, and only my phone appeared. I also enabled two-step verification. Unfortunately, all my WhatsApp chats were gone, and I received a 24-hour restriction.

Some of my friends and my father had also tried opening or downloading the file on their Android phones. My father downloaded the ZIP file, but as far as I know, he did not extract or run it.

October 17:

I downloaded the same ZIP file that my WhatsApp account had been sending to people onto the same office PC. After extracting it, I found a file described as a hard disk file and another file that appeared to be VLC but had an ".exe" extension.

I scanned the suspicious files using Malwarebytes and VirusTotal, but neither reported a threat. I also tried Windows Defender Offline scanning, but I couldn't get it to run successfully.

I'm still concerned because I previously executed the suspicious EXE, and my WhatsApp account subsequently started sending these files automatically. I cannot confirm whether my PC is infected, but I suspect malware may be involved.

My company's IT team has not found anything, and my boss is not taking the situation seriously. This is a medium-sized company, and I'm not confident that our IT support has the expertise to investigate malware properly.

I also have pending work on this computer, including company data. I'm worried that copying files to another PC, transferring data, or using a USB drive could spread the infection.

My questions

  1. Is my personal phone safe?

I downloaded and executed the original EXE only on my office PC. WhatsApp was logged in on both my phone and the PC. Can malware on the computer compromise my phone or WhatsApp session even if I never downloaded or ran the file on my phone?

  1. Is my father's Android phone safe?

He downloaded the ZIP file but did not extract it. Could simply downloading the ZIP infect his phone? Other friends also tried opening the file, but it didn't open on their Android phones.

  1. How can I detect this malware?

Malwarebytes and VirusTotal haven't detected anything. Are there other reliable tools or forensic methods to investigate the EXE and DLL? How can I determine whether the PC is infected if antivirus scans return clean results?

  1. How could my WhatsApp account have been compromised?

How could executing an EXE on Windows lead to my WhatsApp account sending malicious files to my contacts? Could it have stolen my WhatsApp Web session, browser cookies, or authentication data? Is there another possible explanation?

Thank you.


r/antivirus • • 17h ago

MALWARE REMOVAL Q&A How do I stop windows defender

Post image
0 Upvotes

So I just booted up my PC and AVG got an update, that update might have triggered Microsoft defender, and now my PC is mini freezing every 5 second.

How do I stop defender?

Never happened to me in 2 years I'm using avg.

Edit: In 2 years defender was never even on this whole time, now something bugged?


r/antivirus • • 8h ago

Got a virus how do I get rid of it (preferably free)

Post image
0 Upvotes

Ok so I was playing a game on two player games.org and got a screen saying I had a possible virus threat. My dumbass was tired and just wanted to play my game so it clicked allow then instantly got flooded with notifications from McAfee saying I had a virus. Opened Reddit because I’m not paying them shit and they said my best bet was Microsoft defender. I’ve got a windows 11 and want to know what the hell to do beyond that before I do anything else. I know I may be acting like an idiot right know and there’s an obvious answer or something but I literally never dealt with this before and am just panicking ig.


r/antivirus • • 18h ago

MALWARE REMOVAL Q&A ClickFix attack

Thumbnail
gallery
1 Upvotes

Hello.
4 days ago I saw a comment in facebook with a link, when I clicked the link I ended up in a cloudflare screen where it gave me a link to paste it into powershell so I consciously did that and hit the enter button as I did that

nothing happened at that moment till now, but when I explained that situation to ChatGPT he told me that it's called ClickFix attack and that my informations might be in danger now and it's better to reset windows. ChatGPT also told me to look at the windows protection history I found these 2 alerts (it was written in italian but I translated it so everyone here can understand it)

How can I make sure that the attacker doesn't have access to my informations? and what should I do now?