How Can I Tell Whether My PC Is Still Compromised After Account Takeovers?
About a week ago, my Discord and Steam accounts were compromised and used to post a scam message. I changed my passwords and enabled two-factor authentication on my…
malware detection
Windows Defender Blocked a Suspicious DLL After I Was Only Playing Minecraft
Windows Defender blocked C:UsersjktraDownloadsSolstice.dll and identified it as Trojan:Win32/Ulthar.A!ml, saying it could execute commands from an attacker. I don't remember intentionally downloading anything and was only playing Minecraft…
How can I verify that a RAT is gone after reinstalling Windows?
A friend once installed a remote-access Trojan on my laptop as a joke. It reportedly ran in the background, connected to a webhook, and allowed remote interaction through…
How Can I Verify That a RAT Is Gone After Reinstalling Windows?
A friend once installed a remote-access trojan on my laptop as a joke. It reportedly ran in the background and connected to a webhook, allowing them to view…
Is Microsoft Defender’s Trojan detection in the Recycle Bin a real infection?
I have an ASUS TUF A17 running Windows 11. Earlier today, search engines suddenly showed frequent "prove you're human" CAPTCHA challenges, and my browser incorrectly offered to translate…
Why does Google keep flagging my home network’s public IP for unusual traffic?
For the past three days, Google Search has frequently shown an "unusual traffic" warning whenever I search from my phone over home Wi‑Fi without signing in. I don't…
Why does Google keep showing “unusual traffic” on my home internet?
For the past few days, Google shows an "unusual traffic" warning whenever I search from my phone without signing in. It only happens while connected to my home…
Are Recent Wacatac Alerts for ScreenConnect Client a False Positive?
Has anyone else seen Microsoft Defender detect ScreenConnect.ClientService.exe as Wacatac within the past day? Our managed detection and response provider believes the file is malicious, while ConnectWise support…
Norton blocked a legitimate website as a threat—should I be worried?
I had a crochet tutorial website called cookiebox dot store saved in Chrome, but Norton blocked it twice and labeled it as a threat. The site seems legitimate,…
How can I check whether my iPhone has been compromised?
I may be overthinking this, but I want to make sure my iPhone is secure and hasn't been compromised. I haven't seen anything obviously suspicious, and I've already…
An Unknown File Downloaded While I Was Browsing—Should I Be Worried?
I was watching a video and playing a browser game I've used for months when my computer suddenly notified me that a file had downloaded. It was around…
Why Is This Company’s .exe Being Detected as Malware?
I work as a proofreader for a well-known Chinese company, and they asked me to download an .exe utility designed to make my work faster. Microsoft Defender repeatedly…
How should I interpret conflicting threat scores for a suspicious redirect?
I accidentally visited a typo domain while trying to reach indianasheriffs.org. The typo domain automatically redirected to yfdabv11[.]com with parameters referencing the misspelled domain and an HTTP 504-style…
I Received an Email Claiming Malware Is Stealing My Login Sessions—Is It Legit?
I found an email dated August 29 in one of my secondary Google accounts claiming that malware on my Mac or other Windows computers has been stealing my…
I received an email claiming malware is stealing my login sessions—how can I verify it?
I noticed an email dated August 29 in one of my secondary Google accounts claiming that malware on my Mac or other Windows computers may be stealing my…
What is the unfamiliar “yzqxc.vbs” entry in my startup apps?
I found a startup entry called "yzqxc.vbs" on my computer. It has an unfamiliar, randomly generated-looking name and no typical Windows app icon. I'm not sure whether it…
Can a Docker Hub image be malicious, and how can I check or remove it safely?
I pulled an image from Docker Hub and now I'm worried it might contain malware, such as code that could collect credentials or access files it shouldn't. I…
What is the unfamiliar “yzqxc.vbs” entry in my startup apps?
I found a startup entry named "yzqxc.vbs" on my computer. It has an unfamiliar, randomly generated-looking name and no normal Windows application icon. Is this a legitimate program,…
How Can I Tell Whether a Docker Image Is Malicious?
I pulled an image from a public container registry and started worrying that it might contain malware, such as code that could collect credentials or access files it…
What Is COM Surrogate, and Why Did It Access My Location?
I'm using Windows 11, and my laptop was running a little more slowly than usual. Websites took longer to load, and Windows updates seemed slower too. I briefly…