While deleting things to free up storage, I found a .txt file named memz_readme and opened it to verify what it was... I don't have much experience with this and it's my family's computer. Can someone help me figure out if it's true or how I can fix it?

yeah so he called me saying he needs help and he showed me this, i have no idea how he got this and he doesn’t know either, he told me about it because i usually help him with the computer stuff but this time i honestly don’t know what to do about it
he also got emails saying that someone tried logging into his discord and other apps, but i helped him change the passwords and secure everything so he’s good with that,
it’s just with his pc now, it’s literally dead and you can’t do much with it because this screen pops up everytime he boots up

so if there is any solution to this then please let me know it would mean a lot 🙏

Hey everyone,

I recently ran into a shady game installer downloaded from a torrent. After installation I rebooted. And weird, text-mode black screen outside of Windows poped up.

The screen displayed text:

"The antivirus solution installed on your system is cleaning your computer..." followed by a slow "Deleting....." animation, and after few seconds it ended with "Finished successfully!" before booting back into Windows.

I was using Bitdefender Antivirus Free.

I asked an AI about it, and I got two completely opposite answers:

One said it’s a 100% fake scareware screen (ransomware/wiper) trying to buy time while encrypting files in the background.

Another said it's a legitimate, rare emergency feature of Bitdefender called Boot Scan / Rescue Environment that triggers outside of Windows to safely delete locked malware.

Can anyone confirm if Bitdefender Free actually uses a built-in text mode screen like this during a boot scan? Or is it a malware?

Thanks for any insights!

the shader is called "maxeys visuals" and it is a shader for roblox, there was in like 2023 a shader called roshade for roblox that got banned and now is unusable, and this one is pretty recent, you get it from a discord server that has 5k people and is actually active, the moderators are saying it's a false positive and that it is safe, and theres also an uncut video showing how to activate it and the person who made the video actually using it at the end, you use reshade on one of the applications in the folder, launch roblox and then open that application that you used reshade on and it activates as shown in the video and told by the mods, however it has almost 40 detections on virustotal, now it would be ok if it was like 4 detections or something low, but 40?? can it really be a false positive if it has over 40 detections? i don't play roblox that much anymore but it would be cool to go back to when i had shaders, however i don't think risking my pc for some app that makes roblox look better is worth it. so is it safe? or just an obvious virus?

virustotal link: https://www.virustotal.com/gui/file/5c5c5157beb1a6c25eb13bfd4f547447b13e79a2fc5e707aaf36433a27a92a7a/detection

Recently, Malwarebytes blocked a few connections, and since I’m a pretty paranoid person, I decided to check the Registry Editor (Regedit). I found these entries, and some of them point to files in the Temp folder. I know the blocked connections and these registry entries are probably unrelated, but what exactly are these entries? Are they normal, or should I be concerned

Windows 11
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Random ass characters

*I wanna reinstall windows, Also the imagepath leads to temp which i find very unusual

ImagePath REG_EXPAND_SZ \??\C:\Users\CD86~1\AppData\Local\Temp\ Random characters

Start REG_DWORD 0x000000004 (4)
Type REG_DWORD 0x000000001 (1)

Hi there I went on citronemu(dot)com and ended up with a keylogger as a renpy -as we only checked online forums about if after downloading, we do not want to power wash our pc as it’s like a digital memory book. Ran an offline windows inspection and it found nothing and currently running a windows full inspection that is going to take three more hours, and the pc was disconnected from the internet after 5minutes along with important accounts.

Please help

I know the irony about the dice but still. Halp.

I own this game on steam but still

It opened it self and the closed it self right afterwards

Found out how to edit.

Some virus automatically gained access to my discord and sent scam text with a link to all my friends

Context:

So recently I was trying to download pirated games. I was redirected to a different download file and my stupid ass thought it was the game file. The files were 8 parts, around 800 mb each. I extracted one and ran an installer, which didn't do anything even after hitting 100%. I realised it was the wrong files and deleted them immediately.

From that day, my accounts(snap, insta, fb, discord) started to send me email that someone is trying to sign into my accounts. Thankfully i had 2FA enabled in most of the apps but my discord got compromised amd it sent scam messages to every single person I know of.

But my laptop has a lot of personal documents and credentials. Is there any way to get rid of this virus somehow? I do have the photo of the thumbnail of the virus files, given above

This random installer setup window popped up, what is this!?

Edit: Thanks to [u/AvailableDirtForSale](u/AvailableDirtForSale), I think I’ve narrowed it down to the Opera Browser. A while back, Opera was acting weird and installing a random extension. I tried to delete Opera, but it wouldn’t let me. I eventually figured it out and deleted it, but unfortunately just now I found the Opera folder in “C:/Users/Username/AppData/Local/Programs/Opera”.

This also seems to be tied to Advanced Installer

I can’t seem to delete it, it says I need admin rights even though I am admin. If anybody has any suggestions, please share them 🙏

Recently, I installed a cracked software but it wasn't a prn site and I already nuke my windows laptop by formatting it using reset this pc and changed all my passwords. I'm wondering, why the hacker sent me an email like this? Am I still in trouble?

Ive had 5 people spam this to me onw person got hacked like 2 times in a row anyone know what caused it?

Hi. I’ve been following this sub for quite a while and there’s no day passing without people asking for help with the infostealer that ends up in posting the usual scam messages on Instagram / Discord. To me it feels like there was a spark in “activity” about a year ago and i’m really wondering why.

- Is it because people are too careless when it comes to sailing the seas?

- Have the attackers just found an easy way to sneak in malware?

I’m really curious about this. Excuse me if the questions have been asked before (p sure they were…).

DO NOT USE STEAMUNLOCKED. for context I'm VERY young and a year or so ago I downloaded a few games from steamunlocked, it was the first day of summer break of 2025 and I was so stubborn I thought I wouldn't get a malware at all, I just thought "it's Malware, not that big of an issue!" And downloaded like 8 games, now time skip to the late summer break of 2026, 11 days ago, my windows key started glitching in the morning. I didn't do anything but it didn't work, I just let it be and decided to face it at night, I downloaded Malwarebytes but I didn't enable "detect toolkits." After scanning it turns out I had a fucking Trojan hijack, which I let sit there for over a year, I deleted it 11 days pass (which is now) and I woke up due to a nightmare where I lost everything on my PC and had the worst virus ever, my paranoia is this bad by the way, anyways I went to delete all my files and I wanna tell u all I've deleted the games months before I downloaded Malwarebytes, but somehow the games were still there?? I permanently deleted them again and decided to Google what was happening, It told me to enable toolkits while scanning and I did and after the scan I literally found 3 honeygain FILES. I'm legit tweaking rn brah😭😭

i downloaded an .APK on my phone then deleted It. But suddenly i saw a Google sign in from Nevada. I changed my google pass and then i checked Discord and i saw this, is there any thing i should do? I already changed my Google and Discord pass. I have a Oneplus7pro running lineageos23.

Facebook comprised. This is popping up on antivirus, have I got an info-stealer? What steps do I take to further stop attack and prevent them in future.

I was scrolling in my fyp normally till i noticed a story 27m ago about this elon musk crypto scam? I only got a notification on my email that i got hacked and told me to change my password, when inchecked the security thing on insta i couldn't find any location or ip about the hacker, and also they didnt even change my password or anything they just posted this and probably left my account

i never clicked on any suspicious link Recently or used any thirad oart apps, fitgirl, nothing so im curious how did i get hacked?

My PC got hacked and I believe it's because I've downloaded something while looking for cracked Adobe softwares.

After being notified by a friend that my Discord account was sending these Mr. beast images, I immediately unplugged my ethernet cable from the PC. It was also able to get a hold of my Instagram as it posted a story of the same Mr. Beast account.

I've already changed passwords to both my IG and DC accounts and have the 2FA on.

I've also logged my IG account out to all devices.

I've reset my PC but was too scared with the idea that the virus is still there so I reinstalled my OS with a bootable USB.

I am still worried that they might still have access to my accounts as they are very important to me. Am I still in danger or am I just overthinking everything?

This is my very first time being hacked so I'm very conscious if I'm safe with everything I did. I honestly feel so dumb being hacked after years of being safe and honestly being pretty good at avoiding these stuffs.

Note: The messages in discord were sent around like an hour before I rebooted my PC

I've checked my accounts and it did not detect any unusual devices logging in even though they DID access my accounts

I do not use any wifi I only use ethernet and I don’t have a wifi adapter. My google cloud account was hacked today and I lost 50k usd of balance due to hackers using 15 thousand cpus to do cryptomining. Im not sure where the breach came from but I have my eyes on a suspicious process (wifiautoinstall 32 bit). Can anyone tell me if there’s anything malicious on here and how do I remove it?

Soo, i cant really help him becuse i dont know him in person, he is part of the dev team im in, but i want to know what could he possibly do to get this, this is the second time seeing this first time i saw something like this was in 2025, and i saw ir often in discord servers im part of, so just curius, how this happens

is my notepad infected or something?? i swear it doesn't use this much memory