I clicked a link sent through a friend's messaging account after they suggested using a third-party site to watch anime together. The message looked genuine, but the link installed something on my gaming PC. While I was playing Palia, someone began typing on my screen and claimed they had access to my accounts. They also contacted me through another messaging account, threatened me, demanded money, and said they would delete my Google account. I disconnected the PC from the internet, started it in Safe Mode, uninstalled the suspicious application, and shut it down. I also created a new Gmail account, changed the email addresses and passwords on important accounts, and enabled authenticator-based two-factor authentication wherever possible. I saved screenshots of the threats and reported the compromised account activity. I'm still worried that the attacker may have access to the computer or my accounts, and I'm overwhelmed by the idea of reinstalling Windows. I have an older Windows 10 installation USB, but I don't know how to boot from it, whether I need a product key, or how to leave Safe Mode. Do I need to replace the computer, or can a clean Windows installation make it safe to use again?
4 Answers
You do not need to throw the computer away. A full wipe and clean installation should remove the malicious software, but make sure you back up only personal documents, photos, and other files you know are safe. Don’t copy programs or unknown executables. The USB needs to be a proper bootable installer, not merely a drive containing Windows setup files. Start the PC with the USB inserted and use the boot-menu key shown by the computer manufacturer, commonly F12, F11, Esc, or Delete. If the machine keeps starting in Safe Mode, press Windows+R, enter msconfig, open the Boot tab, clear the Safe boot option, and restart. If that is difficult, the Windows installer can also be started from the boot menu.
The attacker may have been moving from one compromised messaging account to another, so warn your friends not to open links sent from those accounts. They should verify unusual requests through another method. After reinstalling Windows, update it fully, reinstall software only from official sources, and change any passwords that were used on the infected computer. Getting help with the reinstall is sensible, especially since you’re exhausted and stressed; you’ve already taken several of the right steps.
Continue securing your accounts from a device you trust. Change passwords, sign out other sessions, remove unfamiliar recovery methods and app authorizations, and enable two-factor authentication. Save the backup codes somewhere safe. A password manager can help you create unique passwords, and a physical security key is an additional option for your most important accounts. Contact the account providers through their official support pages if anything was taken over, and preserve the screenshots as evidence. The threats are usually meant to cause panic, so don’t engage or send money.
I’ve already moved many accounts to a new email and added authenticator protection. I’ll also contact Google about the old account and keep the screenshots in case they’re needed.
This sounds like a compromised friend’s account being used to spread a fake link. Don’t pay the attacker, and block and report the accounts involved. Since you can’t trust what was installed, the safest option is a clean Windows installation that deletes the existing partitions and reinstalls the operating system. Use a different, trusted computer to create a bootable Windows USB if the old USB isn’t already bootable. During setup, choose the option to install without entering a key; computers that came with Windows often have their license stored in firmware, and Windows should reactivate automatically with the same edition. Keep the affected PC disconnected until the reinstall is complete, then reconnect it and install updates.
I bought the computer with Windows already installed, but there wasn’t a product key included. I have an old Windows 10 USB and may be able to get help from a friend creating a new installer. I’m still nervous because I don’t know how to boot from it or leave Safe Mode.
If you’re uncomfortable doing this alone, having a technically confident friend or a reputable repair shop perform the wipe is completely reasonable. Keep the PC offline until they begin the reinstall, and use another clean device for password changes.