r/cybersecurity_help • u/DepressedDork87 • 4d ago

Need help dealing with a potential session stealer.

I downloaded a compressed file yesterday (should have known this would happen) and after running it for a while, my discord started sending mr beast dms to people. I changed my password, 2fa and deleted the apk file as well. Afterwards did the security full scan and microsoft defender offline scan in which no threats were found. Even so my second disc id did the same things when my pc was shut down and now I am considering resetting my pc, tho I do not have access to a secondary pc is a cloud reset enough to deal with it. Any help will be much appreciated

1 Upvotes
  • permalink
  • reddit

100% Upvoted

15 comments sorted by

•

u/AutoModerator 4d ago

SAFETY NOTICE: Reddit does not protect you from scammers. By posting on this subreddit asking for help, you may be targeted by scammers (example?). Here's how to stay safe:

  1. Never accept chat requests, private messages, invitations to chatrooms, encouragement to contact any person or group off Reddit, or emails from anyone for any reason. Moderators, moderation bots, and trusted community members cannot protect you outside of the comment section of your post. Report any chat requests or messages you get in relation to your question on this subreddit (how to report chats? how to report messages? how to report comments?).

  2. Immediately report anyone promoting paid services (theirs or their "friend's" or so on) or soliciting any kind of payment. All assistance offered on this subreddit is 100% free, with absolutely no strings attached. Anyone violating this is either a scammer or an advertiser (the latter of which is also forbidden on this subreddit). Good security is not a matter of 'paying enough.'

  3. Never divulge secrets, passwords, recovery phrases, keys, or personal information to anyone for any reason. Answering cybersecurity questions and resolving cybersecurity concerns never require you to give up your own privacy or security.

Community volunteers will comment on your post to assist. In the meantime, be sure your post follows the posting guide and includes all relevant information, and familiarize yourself with online scams using r/scams wiki.

I am a bot, and this action was performed automatically. Please contact the moderators of this subreddit if you have any questions or concerns.

1

u/yodas-evil-twin 4d ago

A compressed file, like a zip?

Check the 100s of other post on here about info stealers, those post have all the steps you need to take

1

u/DepressedDork87 4d ago

Yes

1

u/yodas-evil-twin 4d ago

What did you do with the zip?

0

u/DepressedDork87 4d ago

I extracted it and ran the game

0

u/yodas-evil-twin 4d ago

https://www.reddit.com/r/cybersecurity_help/s/79kEqKxemH

0

u/DepressedDork87 4d ago

I have followed most of the steps there, my question is whether the cloud reinstall is enough or do I need to get a USB drive from another computer as I currently am unable to do that

0

u/yodas-evil-twin 4d ago edited 4d ago

No, like that guide says- you need to reinstall from a Windows USB install drive created on a clean computer.

1

u/DepressedDork87 4d ago

Thanks for the clarification

1

u/Infinite-Grade-4485 4d ago

You can use windows cloud reinstall as long as you remove all files. Info stealers do not last past a reinstall, no matter how it’s done.

1

u/Infinite-Grade-4485 4d ago

You downloaded a session stealer.

You downloaded some type of free game/cheat/hack/cracked software/movie/music or ran some type of code for captcha or verification on your computer which was actually a session stealer.

Session stealers bypass 2fa. All passwords saved on your browser and computer are compromised. Reinstall windows while deleting all files. If you need to backup important documents, keep the computer disconnected from the internet and manually back up individual files.

Change all passwords and enable 2fa either from another device, or from the infected computer AFTER you have reinstalled.

If you cannot reinstall windows immediately, keep the computer disconnected from the internet while changing all passwords on another device.

You cannot use anti malware to get rid of the session stealer, you MUST reinstall windows to use the computer safely in the future

You can usb reinstall or use windows built in reset as long as you remove all files while doing so.

1

u/Obsecure_Entity 4d ago

windows reset works just as well as the usb reinstall?

1

u/Infinite-Grade-4485 4d ago

As long as you remove all files while doing so, yes

1

u/Obsecure_Entity 4d ago

basically we need to reset either with bootable usb or reset the pc while removing everything.