Installed aurora related malware (before i had bitdefender) - need advice.

BoomRoasted

so i was not paying attention and downloaded this thing from ai.mid-journey.org.

I realized something was wrong as soon as i clicked on it and I used windows system restore to go back a day. When i logged back in on windows the executable was gone.

I went ahead and signed up for bitdefender which performed a full scan and found nothing. I assumed everything was OK and I contained whatever possible damage.

However within days there have been attempted takeovers on my social media/emails and others. I have changed passwords and turned on 2FA on anything that didn't have it before…

Is it possible they grabbed/sent everything all at once? or is this malware laying dormant on my system (undetected by bitdefender). How can I make sure that I am not being further compromised? Should I reimage my entire machine?

Gjoksi

Hello.

You could scan (and disinfect, if needed) your PC with Bitdefender Rescue Environment:

https://www.bitdefender.com/consumer/support/answer/29132/

I think that should be enough.

Next, you could also do the steps below.

Create a log file on your Windows device using Bitdefender Support Tool, by following these steps:

https://www.bitdefender.com/consumer/support/answer/1733/

and

create a log file on your Windows device using BDsysLog, by following these steps:

https://www.bitdefender.com/consumer/support/answer/1922/

Next, contact Bitdefender Consumer Support by e-mail:

https://www.bitdefender.com/consumer/support/help/

with short description of the issue.

After that, you will get an automated reply by the Bitdefender Customer Care Team, with your ticket number.

Now, in reply to that automated reply, you can send the log files you already created in the first step.

Since you are all done, just wait for the support engineers to investigate your issue and find a solution to fix the issue.

Remember that the log files will help a lot to the support engineers for better and faster investigation on your issue and finding a solution.

Regards.

BoomRoasted

Thank you, I will do that now

Flexx

Additionally, follow these below stated steps also

1) Restart PC in safe mode: https://support.microsoft.com/en-us/windows/start-your-pc-in-safe-mode-in-windows-92c27cff-db89-8644-1ce4-b3e5e56fe234

2) Open run command and run below command one by one:

temp ,delete all the files in the folder

%temp% ,delete all the files in folder

prefetch ,delete all the files in folder

3) Restart your PC in general mode by unticking the option that you selected to run the system in safe mode and then click apply.

4) Reset your browsers:

Google Chrome: https://support.google.com/chrome/answer/3296214?hl=en

Mozilla Firefox: https://support.mozilla.org/en-US/kb/refresh-firefox-reset-add-ons-and-settings

Microsoft Edge: https://malwaretips.com/blogs/reset-microsoft-edge/

Opera: https://browsersolution.com/reset-opera-browser

Vivaldi: https://help.vivaldi.com/desktop/install-update/full-reset-of-vivaldi/

Brave: https://support.brave.com/hc/en-us/articles/360017903152-How-do-I-reset-Brave-settings-to-default-

5) Reset windows host file to default: https://support.microsoft.com/en-us/topic/how-to-reset-the-hosts-file-back-to-the-default-c2a43f9d-e176-c6f3-e4ef-3500277a6dae

Regards