I stream online and downloaded a supposedly scary game from a link sent by a regular viewer. The download was a password-protected ZIP file. A few minutes after extracting it, explicit videos began playing on both of my monitors. Restarting the computer stopped it temporarily, but the videos started again later and continued even after another shutdown. I deleted the downloaded file, but I'm worried that malware was installed and that someone may still have access to my computer or accounts. What steps should I take to secure everything and prevent this from happening again?
3 Answers
Treat the computer as compromised. Disconnect it from the internet immediately by unplugging Ethernet or disabling Wi-Fi. Deleting the original ZIP file usually won’t remove malware that has already been installed. The safest option is to back up only essential personal documents after carefully checking them, then perform a completely clean operating-system reinstall using installation media created on a different, trusted computer. If you aren’t comfortable doing that, take it to a reputable technician.
From a different device, change the passwords for email, streaming, gaming, banking, and any other important accounts that were used on the affected computer. Sign out all existing sessions, revoke unknown connected apps, enable two-factor authentication, and change your primary email password first. Don’t enter new passwords on the compromised machine until it has been wiped and reinstalled.
A password-protected archive from an unknown sender is a major warning sign because security software may not be able to inspect its contents. In the future, only install software from a trusted official source, and don’t assume that a familiar viewer or chat contact has verified the file. After reinstalling, update the operating system, enable reputable security tools, and scan any removable drives before using them.
I’ll handle the account security from my phone and reinstall the computer before signing back in anywhere.