r/techsupport • u/cmduser1 • 1h ago
Open | Malware Got hacked and I’m lost
Downloaded a malicious GitHub repo, got hacked within minutes, and now my Microsoft account is gone. What should I do?
I made a huge mistake today. While downloading something from GitHub, I accidentally downloaded and opened a malicious repo.
In literally five minutes since I run it, I started receiving account recovery and password reset emails for various accounts I own. After a second of thinking what happened, I quickly installed Malwarebytes to scan my PC.
It detected a couple of threats on my computer: Trojan.Crypt.MSIL, Malware.AI and something concerning Microsoft Defender exclusions.
Without wasting a second, I started changing my passwords via my phone, such as Google account, Discord, Steam, Epic Games, TikTok, almost every account I could
Unfortunately, in trying to recover my Microsoft account, it says that the account doesn’t exist anymore. I am afraid that some person has managed to gain unauthorized access to the account and change the email.
My main worry right now is whether the malware still operates in the background, stealing any data, and still lurking in the background
As for my computer, I have three drives (C:, D:, and E:) where there is about 300 GB of private recordings and clips with my friends which I definitely would like to keep. Most of them are stored on D: drive, although some are also saved on C: drive.
I’m considering doing a completely fresh Windows installation, but I’m worried the malware could have spread to my other drives.
My questions are:
1. Is a clean Windows installation enough to get rid of the malware?
2. Can I safely keep my D: and E: drives without wiping them?
3. Is there any way to tell what information the malware stole?
4. Is it possible that someone still has access to my accounts even after changing my passwords?
5. Is there anything I can do to recover my Microsoft account if the original email is no longer recognized?
My PC is currently being treated as compromised, and I’ve been securing my accounts from my phone.
Any advice would be appreciated. I’m honestly pretty stressed about the whole situation.
Also like what do I do?
I’m currently running Malwarebytes deep scan