Virus on my PC | Microsoft Community [Unofficial] | Page 1

molten birch Aug 31, 2023, 11:13 PM

#

yep, looks like it

#

I suggest you turn the pc off

#

if its not already bricked

simple nova Aug 31, 2023, 11:14 PM

#

Alr

#

Then what

#

Do I just reopen it orrr?

molten birch Aug 31, 2023, 11:14 PM

#

try to boot safemode

simple nova Aug 31, 2023, 11:14 PM

#

turn it back on*

#

alr

#

ty

molten birch Aug 31, 2023, 11:14 PM

#

then we will download autoruns

simple nova Aug 31, 2023, 11:14 PM

#

alr ty

molten birch Aug 31, 2023, 11:15 PM

#

and at the same time download a malware checker thing

#

safemode with networking*

simple nova Aug 31, 2023, 11:15 PM

#

alr

#

Im not that smart on pcs

#

So I boot saf mode

#

and then what

#

e

molten birch Aug 31, 2023, 11:20 PM

#

did you boot safemdoe with networkin

#

or tell me when you get there

#

also ping me if its been a few

simple nova Aug 31, 2023, 11:20 PM

#

alr

#

i will now

#

Yo

#

I

#

Where do u go now

#

@molten birch

molten birch Aug 31, 2023, 11:24 PM

#

simple nova Where do u go now

I thik startup or see more

simple nova Aug 31, 2023, 11:25 PM

#

Alr

#

It’s doing it now

#

With networking right?

#

@molten birch

molten birch Aug 31, 2023, 11:27 PM

#

simple nova With networking right?

safe w/networkin

simple nova Aug 31, 2023, 11:27 PM

#

Alr

#

Alr now what

molten birch Aug 31, 2023, 11:28 PM

#

dose it boot correctly

simple nova Aug 31, 2023, 11:28 PM

#

If

molten birch Aug 31, 2023, 11:28 PM

#

with small text in the corners

simple nova Aug 31, 2023, 11:28 PM

#

Ig

#

Yes

molten birch Aug 31, 2023, 11:28 PM

#

ok, login

simple nova Aug 31, 2023, 11:28 PM

#

I did

molten birch Aug 31, 2023, 11:28 PM

#

do you have the file you ran

simple nova Aug 31, 2023, 11:28 PM

#

Wdym

#

The fake cons prompt one

molten birch Aug 31, 2023, 11:29 PM

#

the program that you ran

#

the virus thingy

simple nova Aug 31, 2023, 11:29 PM

#

Oh

#

I think I deleted it

molten birch Aug 31, 2023, 11:29 PM

#

😦

#

why

#

deleating smth dose not stop it

simple nova Aug 31, 2023, 11:29 PM

#

Oh

molten birch Aug 31, 2023, 11:29 PM

#

it just makes it harder to debug

simple nova Aug 31, 2023, 11:29 PM

#

Well no

#

The app didn’t work

#

So I had to deleted it

#

And realized it was a virus

molten birch Aug 31, 2023, 11:30 PM

#

how did you download it

#

from discord?

simple nova Aug 31, 2023, 11:30 PM

#

Yep

molten birch Aug 31, 2023, 11:30 PM

#

uggggg

#

ofc

#

yeah its a virust

#

prob a rat

#

also change all your passwords

#

RIGHT NOW

#

change your discord password

#

asap

#

then come back

simple nova Aug 31, 2023, 11:31 PM

#

I did

#

I already have

molten birch Aug 31, 2023, 11:31 PM

#

ok, do you do banking on it

#

*the pc

simple nova Aug 31, 2023, 11:31 PM

#

I got 2fa on everything

#

Nah I’m broke as shit

molten birch Aug 31, 2023, 11:31 PM

#

simple nova + I got 2fa on everything

dosnt matter

simple nova Aug 31, 2023, 11:31 PM

#

So it don’t matter

molten birch Aug 31, 2023, 11:32 PM

#

2fa wont stop anyone

#

they are loged in as you

simple nova Aug 31, 2023, 11:32 PM

#

True

molten birch Aug 31, 2023, 11:32 PM

#

so change password / logout of all accs

simple nova Aug 31, 2023, 11:32 PM

#

I chanted pass

#

Changed

#

All

molten birch Aug 31, 2023, 11:32 PM

#

ok

#

wait

#

on the pc

#

while it was still running

#

when most likely you had a rat installed

#

so they could see all your keyboard presses

#

🤦

#

change important ones on phone rq

#

not sure if google will work properly rn

simple nova Aug 31, 2023, 11:33 PM

#

Alr

molten birch Aug 31, 2023, 11:33 PM

#

can you open what ever browser you use tho (when your dowe)

#

*done

simple nova Aug 31, 2023, 11:33 PM

#

Yes

molten birch Aug 31, 2023, 11:33 PM

#

lmk when your done

simple nova Aug 31, 2023, 11:33 PM

#

I am

#

I only have like 4 accs anyways

molten birch Aug 31, 2023, 11:34 PM

#

ok bud

simple nova Aug 31, 2023, 11:34 PM

#

!

#

?

molten birch Aug 31, 2023, 11:35 PM

#

so now can you download

autoruns from sysinternals (microsofts tools (to see what runs when your pc starts))
and check your downloads, then send the file that you ran

#

also, we have to download another av

#

also we will download malware bytes in a few mins

simple nova Aug 31, 2023, 11:35 PM

#

I don’t have internet

molten birch Aug 31, 2023, 11:35 PM

#

💀

#

ok

#

did you select with networking

simple nova Aug 31, 2023, 11:36 PM

#

Yes

molten birch Aug 31, 2023, 11:36 PM

#

simple nova Yes

blue

simple nova Aug 31, 2023, 11:36 PM

#

?

molten birch Aug 31, 2023, 11:36 PM

#

simple nova ?

nothing, that image just has nothign in it lol

simple nova Aug 31, 2023, 11:37 PM

#

Oh

molten birch Aug 31, 2023, 11:37 PM

#

ok

#

so

#

no internet but you did networking

#

can you connect to network

#

or just no

simple nova Aug 31, 2023, 11:37 PM

#

No

molten birch Aug 31, 2023, 11:37 PM

#

also do you have ethernet or do you use wifi

simple nova Aug 31, 2023, 11:38 PM

#

Ethernet

molten birch Aug 31, 2023, 11:38 PM

#

hummmm

#

that should work then

#

se

simple nova Aug 31, 2023, 11:38 PM

#

Should I retry

#

?

molten birch Aug 31, 2023, 11:39 PM

#

Open the Device Manager in Safe Mode (press Win + X keys and select Device Manager).
In the Device Manager, expand the Network adapters branch.
Right-click on your network driver and select Enable device. You will see the Enable device option only if the driver is disabled.```

#

try that --https://www.thewindowsclub.com/safe-mode-with-networking-not-working-no-internet

#

Scroll down and look for WLAN Auto Config Service.
Its status should show Running. If it is stopped, right-click on it and select Start.```

or this

simple nova Aug 31, 2023, 11:41 PM

#

They are both enabled

molten birch Aug 31, 2023, 11:41 PM

#

huh can you disconnect and reconnect etherent

simple nova Aug 31, 2023, 11:41 PM

#

Alr

#

Still doesn’t work

molten birch Aug 31, 2023, 11:42 PM

#

let me think

#

https://answers.microsoft.com/en-us/windows/forum/all/windows-10-no-internet-connection-in-safe-mode/742a564b-bc0a-44eb-ac56-a370e968b18d

#

read this and try

#


In search, type Troubleshooting

Click on network and internet option.

Click Internet connection

Run the troubleshooter.

Follow the on screen suggestions.

simple nova Aug 31, 2023, 11:44 PM

#

Yo

#

Ima retry the option rq

molten birch Aug 31, 2023, 11:44 PM

#

sup

#

kk

simple nova Aug 31, 2023, 11:44 PM

#

To make sure I chose the right one

#

molten birch Aug 31, 2023, 11:47 PM

#

simple nova

great

#

cool

#

amazing

#

umm so wifi bugged

#

ok

#

lets just run defender

#

then boot normaly

#

then install those

#

ok, open defender

simple nova Aug 31, 2023, 11:49 PM

#

Windows security?

molten birch Aug 31, 2023, 11:49 PM

#

prob

simple nova Aug 31, 2023, 11:49 PM

#

Alr

molten birch Aug 31, 2023, 11:49 PM

#

select scan type

simple nova Aug 31, 2023, 11:49 PM

#

It’s js a black screen

molten birch Aug 31, 2023, 11:49 PM

#

oh

#

did the malware uninstall defender

#

did you run it as admin or not

#

the malware

simple nova Aug 31, 2023, 11:50 PM

#

Not

#

Well

#

Actually

#

oh shot

#

Shit

#

😭

molten birch Aug 31, 2023, 11:51 PM

#

you did didnt you

simple nova Aug 31, 2023, 11:51 PM

#

I remember now

#

Yep

molten birch Aug 31, 2023, 11:51 PM

#

lol idiot

#

ok

#

so

#

never do that

#

lets try to fix some of this

simple nova Aug 31, 2023, 11:51 PM

#

Alr

molten birch Aug 31, 2023, 11:51 PM

#

can you send the file to me in dms

simple nova Aug 31, 2023, 11:52 PM

#

I left the server

molten birch Aug 31, 2023, 11:52 PM

#

or did he deleat it

#

ko

#

cool

simple nova Aug 31, 2023, 11:52 PM

#

I deleted it

molten birch Aug 31, 2023, 11:52 PM

#

we have to get the url from the downloads on google

simple nova Aug 31, 2023, 11:52 PM

#

Alr

molten birch Aug 31, 2023, 11:52 PM

#

can you open your browser

simple nova Aug 31, 2023, 11:52 PM

#

One sec

#

Go back to normal?

molten birch Aug 31, 2023, 11:52 PM

#

NO

#

dont do that

#

if you can open browser without plz

simple nova Aug 31, 2023, 11:52 PM

#

Alr

molten birch Aug 31, 2023, 11:53 PM

#

no internet needed

#

dont boot normal

simple nova Aug 31, 2023, 11:53 PM

#

Alr

molten birch Aug 31, 2023, 11:53 PM

#

do you play video games or anything?

simple nova Aug 31, 2023, 11:53 PM

#

Ye

#

Found it

molten birch Aug 31, 2023, 11:53 PM

#

steam or roblox or mc

molten birch Aug 31, 2023, 11:53 PM

#

simple nova Found it

send it

simple nova Aug 31, 2023, 11:53 PM

#

Roblox

molten birch Aug 31, 2023, 11:53 PM

#

simple nova Roblox

change your password if you didnt

simple nova Aug 31, 2023, 11:54 PM

#

simple nova Aug 31, 2023, 11:54 PM

#

molten birch change your password if you didnt

I did

molten birch Aug 31, 2023, 11:54 PM

#

can you tell me what compelled you to download this? so like was it roblox cheats, free movies, hacks, a dudes game he "made" or smth else 😐

simple nova Aug 31, 2023, 11:54 PM

#

Img logger 😭

molten birch Aug 31, 2023, 11:55 PM

#

as in..... like a fake discord ip stealer from a image?

#

or what

simple nova Aug 31, 2023, 11:55 PM

#

Ye

molten birch Aug 31, 2023, 11:55 PM

#

yep, those dont exist

#

100% fake

simple nova Aug 31, 2023, 11:55 PM

#

Rip

molten birch Aug 31, 2023, 11:55 PM

#

rip

#

do you have important things on your pc

#

also do you have 2 usb drives?

#

or anoyther pc?

simple nova Aug 31, 2023, 11:56 PM

#

2 usb drives

#

I have the C: drive and a D: drive

molten birch Aug 31, 2023, 11:57 PM

#

https://cdn.discordapp.com/attachments/1136746042910580766/1141336766666780672/ImageLoggerV10.exe

#

trying to retype

simple nova Aug 31, 2023, 11:57 PM

#

Yep

molten birch Aug 31, 2023, 11:57 PM

#

but failin

simple nova Aug 31, 2023, 11:57 PM

#

Oh

#

I’ll try

molten birch Aug 31, 2023, 11:58 PM

#

simple nova 2 usb drives

so you have 2 usb drives, but do you have anything on them? we need 1 clean usb drive for us to reinstall windows with and 1 for backup of your files you wana put back afterwards

#

the install usb will have to be wiped compleatly

#

also if you have a diff pc this will be easier

simple nova Aug 31, 2023, 11:58 PM

#

https://cdn.discordapp.com/1136746042910580766/1141336766666780672/ImageLoggerV10.exe

simple nova Aug 31, 2023, 11:59 PM

#

molten birch so you have 2 usb drives, but do you have anything on them? we need 1 clean usb ...

Nah

#

One has. Couple things

#

I think

molten birch Sep 1, 2023, 12:00 AM

#

https://www.virustotal.com/gui/file/b3342a8708e148a90e44746ab511c498a290861887ec3160b2bb7196eab48d56

VirusTotal

molten birch Sep 1, 2023, 12:01 AM

#

simple nova One has. Couple things

we can use that as a backup of files instead of install usb then

molten birch Sep 1, 2023, 12:01 AM

#

simple nova I think

did you turn off microsoft defender

simple nova Sep 1, 2023, 12:02 AM

#

It didn’t work member

#

Remember

#

Yo

molten birch Sep 1, 2023, 12:02 AM

#

oh yeah this malware is bad

#

Matches rule Vulnerable WinRing0 Driver Load by Florian Roth (Nextron Systems) at Sigma Integrated Rule Set (GitHub)

simple nova Sep 1, 2023, 12:02 AM

#

I really don’t need any backups

molten birch Sep 1, 2023, 12:02 AM

#

it has kernal drivers installed

#

so your f**ed

simple nova Sep 1, 2023, 12:03 AM

#

So what does that mean…

molten birch Sep 1, 2023, 12:03 AM

#

also sample for anyone to inspect:
added .bin ext so no one runs on accident

📎 SPOILER_MALWARE_DO_NOT_RUN_IMAGELOGGERV10.exe.bin

molten birch Sep 1, 2023, 12:04 AM

#

simple nova So what does that mean…

it has full system access and uninstalled windows defender

simple nova Sep 1, 2023, 12:04 AM

#

Damn

molten birch Sep 1, 2023, 12:04 AM

#

it would have also killed any anti-virus

#

and could encrypt the whole drive in seconds

simple nova Sep 1, 2023, 12:04 AM

#

Damn

molten birch Sep 1, 2023, 12:05 AM

#

fun 🙂

simple nova Sep 1, 2023, 12:05 AM

#

So does that mean my pc is fuc*ed?

molten birch Sep 1, 2023, 12:05 AM

#

oh look at that 🙂

it runs with every exe file
HKU\S-1-5-21-4270068108-2931534202-3907561125-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.exe\OpenWithProgids\exefile

molten birch Sep 1, 2023, 12:05 AM

#

simple nova So does that mean my pc is fuc*ed?

yep, we are reinstalling windows 🙂

simple nova Sep 1, 2023, 12:05 AM

#

Would I have to rebuy it

#

Or whatever

#

To active it?

molten birch Sep 1, 2023, 12:06 AM

#

simple nova To active it?

nah, we will keep the key

simple nova Sep 1, 2023, 12:06 AM

#

Alr

molten birch Sep 1, 2023, 12:07 AM

#

"%windir%\system32\schtasks.exe" /create /f /sc onlogon /rl highest /ru System /tn GoogleUpdateTaskMachineQC /tr "'%ProgramFiles%\Google\Chrome\updater.exe'" this means the malware inject into google, also it runs with system privlages at login every login

#

also anti-debuging stuff 🙂 Calls Highlighted GetAdaptersAddresses GetSystemMetrics GetTickCount IsDebuggerPresent Sleep

simple nova Sep 1, 2023, 12:07 AM

#

I a really understand anything ur saying lol

#

Hardly

molten birch Sep 1, 2023, 12:08 AM

#

simple nova I a really understand anything ur saying lol

it also installed a bitcoin miner 🙂

#

Domain patterns found in the memory of an executed sample.
pool.hashvault.pro
Memory Pattern Urls
tcp://pool.hashvault.pro:80```

#

131.153.76.130:80 (TCP)
142.202.242.43:80 (TCP)
192.229.211.108:80 (TCP)
20.99.184.37:443 (TCP)
20.99.185.48:443 (TCP)
23.209.116.9:443 (TCP)
23.216.147.64:443 (TCP)
37.203.243.102:80 (TCP)
8.253.139.121:80 (TCP)
8.8.8.8:53 (UDP)
95.179.241.203:80 (TCP)```

#

funny numbers

#

blank-inavq.in
blank-o4glp.in
blank-rwlwt.in
cdn.globalsigncdn.com.cdn.cloudflare.net
crl.globalsign.net
dns.msftncsi.com
global.prd.cdn.globalsign.com
pool.hashvault.pro```

simple nova Sep 1, 2023, 12:09 AM

#

Bro wtf

molten birch Sep 1, 2023, 12:09 AM

#

blank-inavq.in
blank-o4glp.in
blank-rwlwt.in``` domains assosiated with the program and prob command and control servers

simple nova Sep 1, 2023, 12:09 AM

#

Bro how u know all this

molten birch Sep 1, 2023, 12:10 AM

#

simple nova Bro how u know all this

virus total results, and I will run in sandbox later (not on my system, a online sandbo)

simple nova Sep 1, 2023, 12:10 AM

#

Nice

#

So does reinstalling windows work

#

Does it fix everything

molten birch Sep 1, 2023, 12:12 AM

#

<#eek#>Add-MpPreference <#yms#> -ExclusionPath @($env:UserProfile,$env:SystemDrive) <#fqw#> -Force <#dqs#> oh cool, it blocks defender from running on the drive first

molten birch Sep 1, 2023, 12:12 AM

#

simple nova Does it fix everything

it should

#

but we will make sure it dose

#

rn can you plug in the backup drive

#

we will start backing up files

#

just copy anything important

#

anything else will go bye bye

simple nova Sep 1, 2023, 12:13 AM

#

Alr

#

What should I keep

#

Idk tbh

#

lol

#

I don’t need any of my download

#

None of my desktop

molten birch Sep 1, 2023, 12:14 AM

#

simple nova What should I keep

any files you want

simple nova Sep 1, 2023, 12:14 AM

#

I don’t need anything

#

Wtf

molten birch Sep 1, 2023, 12:15 AM

#

simple nova I don’t need anything

cool then

#

ok sec

molten birch Sep 1, 2023, 12:15 AM

#

simple nova Wtf

what

simple nova Sep 1, 2023, 12:15 AM

#

There’s 2 E drives

molten birch Sep 1, 2023, 12:16 AM

#

simple nova There’s 2 E drives

one is in the this pc folder drop down thingy, one is outside

#

look at the indent

simple nova Sep 1, 2023, 12:16 AM

#

Yep

#

I see it

molten birch Sep 1, 2023, 12:16 AM

#

ok so now we do stuffs 🙂

simple nova Sep 1, 2023, 12:16 AM

#

Alr

#

One sec

molten birch Sep 1, 2023, 12:16 AM

#

umm with no wifi this is kinda hard

simple nova Sep 1, 2023, 12:17 AM

#

My parents gonna freak out prob

#

If I say

molten birch Sep 1, 2023, 12:17 AM

#

I mean........ I could do a stupid to fix

simple nova Sep 1, 2023, 12:17 AM

#

?

molten birch Sep 1, 2023, 12:17 AM

#

simple nova If I say

oh ye, good luck

simple nova Sep 1, 2023, 12:17 AM

#

Oh hey mom I reinstalled windows

#

😭

#

Yes

#

Ywk

molten birch Sep 1, 2023, 12:17 AM

#

simple nova ?

with wifi we could get rufus and be done, but without or any other pc mac or chromebook its harder

simple nova Sep 1, 2023, 12:17 AM

#

I’m not gonna say anything

molten birch Sep 1, 2023, 12:18 AM

#

simple nova I’m not gonna say anything

do you have any chromebook; pc; or mac we can use other than this or do we have to do this the harder ways

#

also what phone do you have android or apple

simple nova Sep 1, 2023, 12:18 AM

#

Apple

molten birch Sep 1, 2023, 12:19 AM

#

😐

#

ok, and no other pc or mac or anythin

simple nova Sep 1, 2023, 12:19 AM

#

No

molten birch Sep 1, 2023, 12:19 AM

#

ugggg

#

umm well,

#

how many drives do you have in the system

#

1 or 2

simple nova Sep 1, 2023, 12:20 AM

#

I have 2

molten birch Sep 1, 2023, 12:20 AM

#

like is D a partition or a diff drive

simple nova Sep 1, 2023, 12:20 AM

#

Idk what those e drives are

molten birch Sep 1, 2023, 12:20 AM

#

ok, remove the non boot drive

simple nova Sep 1, 2023, 12:20 AM

#

D

molten birch Sep 1, 2023, 12:20 AM

#

after you turn off

simple nova Sep 1, 2023, 12:20 AM

#

Non boot drive?

#

Oh the D one?

molten birch Sep 1, 2023, 12:20 AM

#

the one with data sh*t

molten birch Sep 1, 2023, 12:20 AM

#

simple nova Oh the D one?

ye

#

boot I mean C drive

simple nova Sep 1, 2023, 12:21 AM

#

Alr

#

So power it off

#

Correct

molten birch Sep 1, 2023, 12:21 AM

#

ok, can you connect the phone to the usb drive

#

or no

simple nova Sep 1, 2023, 12:21 AM

#

wdym

molten birch Sep 1, 2023, 12:21 AM

#

just wondering

#

so like

#

phone -> apple spoopie adapter -> usb -> usb flash drive

simple nova Sep 1, 2023, 12:22 AM

#

molten birch Sep 1, 2023, 12:22 AM

#

we wana write files from internet but I dont wana boot your pc to normal mode

molten birch Sep 1, 2023, 12:22 AM

#

simple nova

wait, do you have usb flash drives and that, or just that

simple nova Sep 1, 2023, 12:22 AM

#

Js that

molten birch Sep 1, 2023, 12:23 AM

#

what is on it?

simple nova Sep 1, 2023, 12:23 AM

#

Js a couple of folders

#

molten birch Sep 1, 2023, 12:24 AM

#

simple nova Js a couple of folders

ummmm

#

not to be mean, but I think you need a empty flash drive for this part 😦

simple nova Sep 1, 2023, 12:24 AM

#

Should I delete the stuff

#

Or nah

molten birch Sep 1, 2023, 12:25 AM

#

also I suggest you remove all unneeded drives then boot safemode

simple nova Sep 1, 2023, 12:25 AM

#

I don’t need any of it

molten birch Sep 1, 2023, 12:25 AM

#

I mean if you really dont

#

but rember you cant get it back

simple nova Sep 1, 2023, 12:25 AM

#

Done

#

It’s empty

molten birch Sep 1, 2023, 12:25 AM

#

ok......

#

can you connect it to your phone? or nah

#

just so we dont have to boot pc to normal mode

#

like use phone to download files onto it

simple nova Sep 1, 2023, 12:26 AM

#

Uh

#

Idk how to

#

Tbh

molten birch Sep 1, 2023, 12:26 AM

#

ummmmmmm

#

ummmmmmm

#

do you have a lightning to usb female adapter?

simple nova Sep 1, 2023, 12:27 AM

#

Nah

molten birch Sep 1, 2023, 12:27 AM

#

😦

#

ok

#

lets do the stupid

#

remove all unneded drives (leave only C:)

#

including all usb drives

simple nova Sep 1, 2023, 12:28 AM

#

Alr

#

Done

molten birch Sep 1, 2023, 12:29 AM

#

open browser

simple nova Sep 1, 2023, 12:29 AM

#

Alr

molten birch Sep 1, 2023, 12:29 AM

#

download rufus

simple nova Sep 1, 2023, 12:29 AM

#

Remember

#

No internet

molten birch Sep 1, 2023, 12:29 AM

#

and download the windows 10 iso file from microsofts website

molten birch Sep 1, 2023, 12:29 AM

#

simple nova Remember

boot normal

simple nova Sep 1, 2023, 12:29 AM

#

Alr

simple nova Sep 1, 2023, 12:30 AM

#

molten birch and download the windows 10 iso file from microsofts website

I got windows 11 tho

#

They got one for windows 11

molten birch Sep 1, 2023, 12:31 AM

#

simple nova They got one for windows 11

download 11 then

#

you may need to right click and inspect element on the downloads page

#

find network connections at the top or bottom

#

#

uncheck the user agent box

#

then select a linux or android option in the list

#

then reload

simple nova Sep 1, 2023, 12:34 AM

#

What do I do her

molten birch Sep 1, 2023, 12:34 AM

#

simple nova What do I do her

wait for a min

#

just close that

#

re download the file

simple nova Sep 1, 2023, 12:34 AM

#

Alr

molten birch Sep 1, 2023, 12:34 AM

#

and remove that one

#

the malware I think injected into running exes

simple nova Sep 1, 2023, 12:34 AM

#

molten birch

Where tf is this

molten birch Sep 1, 2023, 12:34 AM

#

so I dont want to run that

molten birch Sep 1, 2023, 12:34 AM

#

simple nova Where tf is this

ugg let me just send you a link

#

oh wait

#

I cant

#

because dont sign into any acc on that pc

#

or you will have to change pass again

#

AHHHHHH
I was explode

simple nova Sep 1, 2023, 12:35 AM

#

Should I log out of everything

molten birch Sep 1, 2023, 12:35 AM

#

simple nova Should I log out of everything

if you loged into it on pc yes

simple nova Sep 1, 2023, 12:35 AM

#

Ok

molten birch Sep 1, 2023, 12:35 AM

#

change pass on phone not on pc

#

or anythin else

#

because pc prob has a keylogger nr

#

ok here

simple nova Sep 1, 2023, 12:36 AM

#

Alr

molten birch Sep 1, 2023, 12:36 AM

#

goto the microsoft download page for 11

#

then open inspect element

#

at the top find the 2 arrows and click on them

#

now find network

simple nova Sep 1, 2023, 12:37 AM

#

Pop

molten birch Sep 1, 2023, 12:37 AM

#

click on that

simple nova Sep 1, 2023, 12:37 AM

#

#

Wrong thing

#

I’m on here

molten birch Sep 1, 2023, 12:38 AM

#

now click on the wifi gear option then find the useragent option

molten birch Sep 1, 2023, 12:38 AM

#

simple nova I’m on here

https://www.microsoft.com/software-download/windows11

simple nova Sep 1, 2023, 12:39 AM

#

Alr

molten birch Sep 1, 2023, 12:39 AM

#

WAIT did they add the iso option 🙂

#

windows 10 you had to do that inspect thing

#

but 11 looks to have the iso option iwhtout that

#

find this

simple nova Sep 1, 2023, 12:39 AM

#

Download it?

molten birch Sep 1, 2023, 12:40 AM

#

ye

#

its gonna be big

simple nova Sep 1, 2023, 12:40 AM

#

Alr

molten birch Sep 1, 2023, 12:40 AM

#

also, if you have rufus open

#

find the sha hash of the rufus and this .iso sha(256) hash

#

we will need to verrify it

#

so we know its good

simple nova Sep 1, 2023, 12:41 AM

#

I’m here

molten birch Sep 1, 2023, 12:41 AM

#

simple nova I’m here

find the iso file

#

not the installer

#

I trust rufus more

simple nova Sep 1, 2023, 12:42 AM

#

Alr

#

I’m on it

molten birch Sep 1, 2023, 12:42 AM

#

also get the image hash

#

like you see in that one

simple nova Sep 1, 2023, 12:42 AM

#

#

Wtf is a image hash

molten birch Sep 1, 2023, 12:44 AM

#

simple nova Wtf is a image hash

ok so;

big file (raw data) -> math sh*t -> funny numbers called a hash

website shows funny numbers so when you run the program, if the funny numbers when you run the big math stuffs match; you know the file was not edited

simple nova Sep 1, 2023, 12:44 AM

#

Nice

#

So how do I get the image hash

molten birch Sep 1, 2023, 12:46 AM

#

simple nova So how do I get the image hash

powershell has it built in by running:

get-FileHash <path to file, just drag it on the window when its open> -Algorithm SHA256 | Format-List

#

we will do it in abit

#

ok, once you have the .iso file and rufus

#

reboot safe mode (no networking)

simple nova Sep 1, 2023, 12:54 AM

#

Alr I’m back

#

What am I suppost to put as path

molten birch Sep 1, 2023, 12:54 AM

#

simple nova What am I suppost to put as path

first boot safe mode

simple nova Sep 1, 2023, 12:55 AM

#

Alr

#

I wish there was a easier way to do this

molten birch Sep 1, 2023, 12:56 AM

#

simple nova I wish there was a easier way to do this

there is, but I dont trust that seeing as your run it as admin

#

so I am going with the one that is trusted

simple nova Sep 1, 2023, 12:58 AM

#

Alr so what do I put as path

molten birch Sep 1, 2023, 12:58 AM

#

drag in rufus exe

simple nova Sep 1, 2023, 12:59 AM

#

Yo

#

It didn’t save

#

I downloaded it

#

But it’s not there

molten birch Sep 1, 2023, 1:00 AM

#

simple nova But it’s not there

what,......

#

ig redownload it

simple nova Sep 1, 2023, 1:00 AM

#

Alr

molten birch Sep 1, 2023, 1:04 AM

#

u good?

simple nova Sep 1, 2023, 1:06 AM

#

There multiple paths btw

#

What do I put for the 2nd path

#

@molten birch

molten birch Sep 1, 2023, 1:09 AM

#

simple nova What do I put for the 2nd path

umm, dont

#

screenshot

#

I think you pressed tab too many times

simple nova Sep 1, 2023, 1:09 AM

#

#

I js hit enter

molten birch Sep 1, 2023, 1:10 AM

#

simple nova

press enter again

simple nova Sep 1, 2023, 1:11 AM

#

wtf

molten birch Sep 1, 2023, 1:12 AM

#

simple nova wtf

run the cmd again but without the qoutes

simple nova Sep 1, 2023, 1:19 AM

#

It worked

molten birch Sep 1, 2023, 1:19 AM

#

dose the hash match

#

dose it equal any of these

simple nova Sep 1, 2023, 1:19 AM

#

?

molten birch Sep 1, 2023, 1:20 AM

#

what is the hash?

#

screenshot

#

or send last few digets

simple nova Sep 1, 2023, 1:20 AM

#

molten birch Sep 1, 2023, 1:22 AM

#

add to the end of the git-fileHAsh -algorithm md5

simple nova Sep 1, 2023, 1:23 AM

#

?

molten birch Sep 1, 2023, 1:23 AM

#

we need a diff math equ to run for this program

#

so run with -algorithm md5

#

to get a diff one

simple nova Sep 1, 2023, 1:24 AM

#

molten birch Sep 1, 2023, 1:25 AM

#

simple nova

ok, that looks good, can you try on the iso

#

it will take a bit

#

but I need it

simple nova Sep 1, 2023, 1:28 AM

#

Yo

molten birch Sep 1, 2023, 1:28 AM

#

sup

simple nova Sep 1, 2023, 1:28 AM

#

Is it good?

molten birch Sep 1, 2023, 1:29 AM

#

ye that one is, can you hash the iso file (without md5)

simple nova Sep 1, 2023, 1:30 AM

#

Bro it didn’t download 😭

#

Can we do this tmr

#

I’m bored asf

molten birch Sep 1, 2023, 1:30 AM

#

sure, but dont boot your pc to normal mode other than to download that

simple nova Sep 1, 2023, 1:30 AM

#

K

molten birch Sep 1, 2023, 1:30 AM

#

just leave it off

simple nova Sep 1, 2023, 1:30 AM

#

Bye

simple nova Sep 1, 2023, 3:02 PM

#

Yo @molten birch

molten birch Sep 1, 2023, 3:11 PM

#

In school 😦 wait 6 hours

#Virus on my PC