Hey everyone, I accidentally downloaded a file from a sketchy website and quickly deleted it. After that, I ran a full security scan with Microsoft, which found a Trojan:Win32/Kepavll!rfn and quarantined it. I then reset my computer to factory settings and redownloaded Windows from the cloud. The Trojan was on my system for about 15-30 minutes, but I'm concerned because I had some tax documents and personal info on this PC. Should I be worried about my data being compromised?
2 Answers
The Trojan:Win32/Kepavll!rfn is often just a downloader that tries to grab more harmful stuff if it can. Since you deleted the file, ran a full Defender scan, quarantined it, and did a complete cloud reset with a fresh Windows install, there’s really not much left for it to hide in. If the Trojan was only active for 15-30 minutes, the chances of your personal info being stolen are quite low. These threats usually need more time and instructions from a remote server to start sending out information. You've done the hard part already! Just to be extra safe, change any passwords you used on that PC, enable two-factor authentication where possible, keep an eye on your bank and tax accounts for a while, and only restore files that you trust. Overall, you’re in good shape!
If it helps at all, most data leaks happen because of companies being hacked. Just out of curiosity, how did you accidentally download the file? Did you actually run it?
Good to hear you didn't run it! Those scam pop-ups can be really nerve-wracking. It sounds like you caught it early!

I didn't run it. I clicked a link that downloaded the setup file, but I never opened it. I just got one of those scam pop-ups after, which is when I ran the MS security scan.