I recently had my Steam account hacked without realizing it, which led me to a megathread about security issues. After installing Malwarebytes and scanning my files, it detected a Trojan: "Trojan.HijackLoader" located in a folder at C:\PROGRAMDATA\SLIZ_PNG_1. I found several suspicious files there, including "Ceack.oau", "Deetsuck.lbq", "RecordHook.dll", and "rtl280.bpl" (marked as a threat). I've quarantined the files, but I'm worried about what they might be doing to my computer and how to prevent future infections.
3 Answers
It sounds like you've definitely downloaded malware at some point. I recommend backing up any important documents and photos, then wiping your system and reinstalling Windows. Malwarebytes might not have caught everything, so a clean slate is your safest option.
The best advice is to stop downloading things from sketchy sites. To clean up your system, change your passwords using a secure device, create a fresh install drive from Windows' site, and then reinstall Windows. Just a heads up, doing this will erase everything on your system, but it’s necessary if you’ve been dealing with malware.
Wait, what does that mean for my files?
Those files you found seem pretty suspicious. Most of them have odd extensions, and even the .bpl and .dll can be used for malicious purposes. The Trojan you've encountered could lead to more serious issues down the line, including remote access or ransomware. I'd strongly advise resetting your computer using the Windows media creation tool on a USB drive. It's the safest way to deal with this threat.
Quick question: I have all my passwords saved in a .txt file. Could the malware access those?