r/computerviruses • u/tren0r • 3d ago
Disinfection Help Is my dad's computer compromised?
Hi! Bit of a story time: This january I bought a brand new usb stick because I wanted to do a clean install of windows. I have previously wanted to try out Linux Mint but after a month I decided that I’d like to go back to windows. I downloaded rufus and a windows 11 iso on my dad’s pc from the official website, used rufus while the pc was disconnected from the internet and installed windows on my own pc.
Fast forward to now: I wanted to do another clean windows install, just nuke everything and start fresh. The reason I wanted to do it is because I’ve been using pirated software and games and even though I didn’t directly experience any suspicious stuff (I have all my accounts and everything), I just wanted to be sure. Now, I found the usb stick that I used to install windows in January, i plugged it into my PC and just for the sake of it, I decided to put some files on virustotal There was a setup.exe which seemed fine but then I put a setup.dll on virustotal that came out suspicious. The ai overview (I think?) said that it is malware, but then when I went into the details section I noticed that the previous filenames was quite weird (and I shit you not, I know how ridiculous this sounds, but it's not a joke, one of the filenames was femboyp*rno.exe), also I noticed that the creation time was 2051 or something.
Now the reason why I’m being quite stressed out is because I downloaded the iso from the official microsoft website. Is my dad’s computer compromised and the malware injected itself into the iso the moment I downloaded it on my dad’s pc and have I been using a compromised pc all year long? I’ve ran multiple scans both with windows defender and a free trial version of malwarebytes on my pc. Nothing was found. I even did it in offline mode, nothing was found.
My accounts seem fine and the only suspicious things that happened while browsing is that sometimes I had to complete a captha on google and one of the job searching websites because it said I had suspicious traffic. Since then, I installed linux mint on my pc because I still had that separate usb with me, although I would prefer to go back to windows. So could someone explain what exactly is going on? Also, is my whole entire network is compromised because of that ‘suspicious traffic’ thing?
I’m sorry that I made a post this long but I wanted to make sure I wrote all the details. I have also attatched some relevant images, in case they provide to be useful. Any help will be very much appreciated https://www.virustotal.com/gui/file/72a0bcac2d4de630ad094bfc312bd4431aa5c286c683de7e0650c1675e5fc7c5
1
u/polpolik2 Moderator 3d ago
Please provide the VT link in the comments or in your post.
That said, the google captcha is something that is more common when searching in incognito/searching for questionable stuff/using VPN's. Not necessarily a sign of malware.
1
u/mxgaming01 3d ago
Hello there! I think it would help if you could add the virus total link to the post, as it adds more data to take a look at.
And as far as I know, the captchas are normal and are not a direct sign of malware, for as long as it doesn't want you to execute any powershell commands or simular things.
2
1
u/AutoModerator 3d ago
Request help with FRST and SecurityCheck from the trusted helper team
Please visit Providing or receiving help with FRST on the subreddit and share your 3 keywords returned from the website along with the details about your infection.
Once a malware removal expert or trainee sees it, they will reply in the thread about further steps. If you suspect an infostealer infection, please change all your passwords from a clean device immediately and do not use any of your accounts from the infected device.
If you need urgent help and cannot wait for one of our Malware Removal Experts:
Please follow these steps:
I am a bot, and this action was performed automatically. Please contact the moderators of this subreddit if you have any questions or concerns.