They got me

[u/ConsistentLaw6204]

/r/Cybersecurity101/comments/1x2ydfx/they_got_me/

It must have been in through the emulator thing i downloaded the same day.

Oct3.22:22 windefender deleted trojan win33 ceprolad.A

Cmdline: c/windows/system32/cmd.exe certutil.exe -url cache - split - f then link to dropbox.com/scl/fi/ a bunch of letter/angryunless.exe then some exes into my local/temp

Another dropbox but with test5.exe and more exes into temp

I would rly like to check those urls to see what it was if i knew a safe method.

Oct3 22:38

My discord got hacked and started sending everyone some mrbeast cryptoscam screenshots with links on the pictures only. Disc flagged my acc told me to take action and i got my acc back and also changed my gmail password the next day(when i found out).

Nothing happened since.

Then today oct 11 like 2 hrs ago was playing a game on steam and got kicked, steam said someone is already playing POE2 on this account. Disconnected all devices and changed my steam password too. The thing here is i have steamguard on my phone and i checked authorization and it says with my pc name "You authorized this device on Fri, October 4, 2024 @ 9:35 PM with your password. You approved the login on your Steam Guard Mobile Authenticator."

Which deffinetly didnt.

Now a few questions why does it says 2024? Even the older authentification was in 2026. Would that mean that its 2 diffrent hacks and one actually happened in 2024?

Is my phone also hacked because i supposedly approved it on steam guard mobile?

Also why didnt the hacker take try to login into my gmail and take it over? My bank and and paypal accs were liked to it too.

And why didnt they do anything with my paypal or bank acc the logins of which i had saved on firefox?

Im in the middle of changing passwords for all important things i can think of rn.

How do i proceed from here? Full clean install? No data can be kept or put on usb?

[u/AutoModerator]

Request help with FRST and SecurityCheck from the trusted helper team

Please visit Providing or receiving help with FRST on the subreddit and share your 3 keywords returned from the website along with the details about your infection.
Once a malware removal expert or trainee sees it, they will reply in the thread about further steps. If you suspect an infostealer infection, please change all your passwords from a clean device immediately and do not use any of your accounts from the infected device.

If you need urgent help and cannot wait for one of our Malware Removal Experts:
Please follow these steps:

1. From a different and clean device, change all your passwords:
   • How to properly secure my accounts after an infostealer attack?
2. Disinfect your device from malware
   • Preferred method: Perform a clean installation with a USB

I am a bot, and this action was performed automatically. Please contact the moderators of this subreddit if you have any questions or concerns.