How can I get rid of this cryware?

[sleek void]

My windows 11 deleted some of the cryware but wasn't able to finish it off

The cryware was located in here

But I guess windows deleted it

[crisp halo]

thats another reason why u shouldnt download pirated files

[proven basin]

play stupid games, win stupid prizes

[proven basin]

Best thing to do in this case is nuke nad reinstall Windows 11

you never know what malware could be lingering even if you think you removed it

[sleek void]

Windows identifies it as a Trojan. I did some research on cryware and it seems like it only targets crypto wallets last time I checked

[proven basin]

as a IT/InfoSec Professional, my best advice is to just do a fresh install.

[sleek void]

Yeah I’m planning to do that soon but one question. Can any Trojan virus like cryware can steal personal information or passwords?

[proven basin]

yes

do that, and then for all personal/financial accoutns change your passwords and add mfa

you should have MFA on all important accounts but if not now is the time to do it..

[sleek void]

How? By a keylogger? Or something else

[sleek void]

What’s MFA? You mean 2FA?

[proven basin]

it's out of scope here and irrelevant

and yes M in MFA stands for multi

[sleek void]

How can I setup MFA? Never heard of it before

[proven basin]

that's on what you use... we can't show you here

mfa = 2fa

[sleek void]

Alr

[proven basin]

this is for Microsoft - https://support.microsoft.com/en-us/topic/what-is-multifactor-authentication-e5e39437-121c-be60-d123-eda06bddf661

but for each vendor they have thier own process

i would do it for ALL bank accounts right now

[sleek void]

Well I already have MFA on discord and other accounts I guess I just have to reinstall windows tomorrow

[sleek void]

My bank account is secured by my phone number

[proven basin]

correct, your phone is considered MFA/2FA (they text or send you a code through their app)

[sleek void]

Alr

[sleek void]

Thanks for the help then. I’ll go reinstall windows

[proven basin]

you can also try malwarebytes to remove it but again I recommend nuke and start fresh route

have you done that?

@sleek void

[sleek void]

Never heard of malware bytes

Is it some sort of program?

[proven basin]

https://www.malwarebytes.com/

use for home

[sleek void]

Alr

Thanks

[sleek void]

@proven basin Update

For some reason I cannot download malwarebytes

This site can’t be reached
The webpage at https://www.malwarebytes.com/ might be temporarily down or it may have moved permanently to a new web address.

ERR_ADDRESS_INVALID```

[proven basin]

it's because of the malware/cryware

you're going to have to download it on another computer and install it and even then it may not work

easiest thing for you to do is nuke everything and then reinstall Windows

[crisp halo]

one question, whats that little window in the right bottom corner?

[sleek void]

it's a little youtube video that I was watching

[crisp halo]

o

[sleek void]

Hm. Can't I not download it from github?

[crisp halo]

wait

maybe we can try to send the download file

in discord

[sleek void]

That'll work too lol

[sleek void]

Try sending it in a mediafire I don't think discord supports .exe files

[crisp halo]

here

hope it works for u

[sleek void]

it works

since I have a malware should I nuke my computer? @crisp halo

[crisp halo]

wdym

[sleek void]

as like should I reinstall windows

[crisp halo]

oh

i mean

try to unninstall them with malwarebytes and see if it works

[sleek void]

seems like I should reinstall windows. I still cannot connect to malware bytes

[crisp halo]

damn

reinstall windows then

[proven basin]

yeah it's blocked on your computer

Use this to make a usb + install windows #1176159332317012008 message

[pure loom]

mcford#0 - #Hello, a virus entered my PC when downloading something. Everything I had on my PC was transformed t

i provided you with all the resources you need earlier today.

wipe your PC, do a clean install of your OS
the guides below cover the entire process

1. How to create an installation media
2. How to use an installation media
   ideally you'd make the installation media on a safe / clean PC

Quoted by ghostyoloswag42069#0 • [225321172018003968] · Nov 20, 2023, 10:29 PM

[sleek void]

Can't I not reset my computer?

wouldn't that solve everything?

[proven basin]

You can try... but if you want to be sure that's it's completely gone, I would go for a clean install.

[sleek void]

last time I check it reinstalls windows for you

@proven basin

[proven basin]

the option is there if you want to try it but again it may not completely remove the malware

[hasty sky]

hello me

[cobalt star]

It was listed as being able to be used for c2, so I would just assume it could allow them to do anything, hopefully its removed now, but I also suggest a reinstall

[cobalt star]

Yes; I dont know why ghost didnt answer, but chrome and other browsers store passwords that you allow them to directly on your drive in a easy to find location, and anyone who knows how to write programs can figure out how to access them; This is the same for cookies for sessions (cookies store information for websites) this means any websites you are logged into that stay logged in between browser closes can easily be used by anyone who gets these cookies.

I would suggest you change your passwords and make sure you log out of all accounts and back in

but you dont have to if you dont wana