My PC may be infected after several account takeovers—what should I do?
Asked by
MellowCedar42
On July 31, 2026, my Discord account was compromised, so I changed its password. The next morning, Google warned me about suspicious activity and indicated that my device might contain malware. I changed my email password immediately, then found a login from a macOS device on July 29, 2026, even though I do not use a Mac. Steam also notified me that the email address on my account had been changed without authorization. The Steam notification included an IP address, and looking it up led to a specific map location with a phone number attached. I found malware using Malwarebytes. How accurate are Steam IP locations, and should I report the address or phone number somewhere? Besides removing the malware, what else should I do? Should I change every password connected to my email accounts?
Answers
Use a different, trusted device to secure your accounts. Change your primary email password first, then update passwords for Steam, Discord, banking, cloud storage, and anything else that reused that password. Turn on two-factor authentication everywhere possible, review recovery email addresses and phone numbers, revoke unfamiliar sessions, and check for forwarding rules or other account changes. A password manager can make the process easier, but do not sign in from the infected PC until it has been reinstalled.
Reply to this answer
Treat the computer as compromised until Windows has been completely wiped and freshly reinstalled. Malware can leave behind scheduled tasks or other persistence that a normal scan may miss. Disconnect the PC from the internet, back up only personal files you can verify are safe, then perform a clean installation rather than relying only on antivirus removal.
Reply to this answer
The IP location is only an approximate clue. It may identify an internet provider, VPN, proxy, or another compromised device rather than the actual person, so the map address and phone number are unlikely to prove who accessed the account. Save the Steam and Google security emails, login timestamps, IP information, and screenshots, then report the unauthorized access through the affected services and, if there was financial loss or serious identity theft, to local law enforcement or your country’s cybercrime reporting service. Avoid contacting anyone at the listed address yourself.
Reply to this answer
Add your answer
Answers are reviewed before publication.
Related Discussions