Yesterday, I downloaded a modded version of a game from YouTube, which isn't something I usually do. I was having a tough day and thought it would help me unwind. Before downloading, I checked the comments, which said it was safe, but after running it, the Command Prompt opened on its own. I immediately factory reset my PC, hoping that would solve the problem. However, today I got notifications that someone logged into my Epic Games account via my Gmail, and my Instagram shared reels I didn't approve of. I didn't get any login alerts at that moment. Since then, I've changed all my passwords, turned on two-step verification, and run a Malwarebytes scan on my PC. I'm still worried that the virus could be lurking on my system unnoticed. What steps should I take to ensure my PC and accounts are fully secure?
3 Answers
Factory resetting your PC might not be enough. The best way to ensure you're completely clean is to wipe all your drives and do a fresh install of Windows using a USB drive. That way, any lingering malware gets completely wiped out.
When you did a factory reset, what specific steps did you take? Sometimes, just resetting might not clear everything if the virus is clever enough. I'd recommend changing all your passwords again too, especially if they were linked to your browser or accounts you used during that time. If you had a credit card linked to any compromised accounts, contact your bank to cancel it just in case. It's a tough situation, but it's a valuable lesson in security.
Definitely keep running Malwarebytes and make sure to scan your system thoroughly. The fact that you're still worried means it’s a good idea to be extra cautious, even if it seems like you're in the clear now.
I already ran it, but what if it missed something?

If I reinstall Windows, is there any chance the virus could stick around?