URGENT! System compromised! PC has been hacked!
URGENT! System compromised! PC has been hacked!
I'm reaching out for assistance with a problem we're encountering for the first time. A friend and I were trying to watch anime on a random website when something went wrong. After clicking a link, we landed on another tab and saw a CAPTCHA pop up. When we tried to proceed, three steps appeared: press 'Win + R', open the command prompt, and fill in a column that didn't make sense. After finishing, pressing enter triggered a pop-up from Windows Defender. My friend ran the program twice with Defender active, but nothing appeared abnormal. At 7:22 PM, the malware changed the software password to several unrelated items like Hoyoverse, Ubisoft, EA, etc. After some discussion, we thought our data might have been exposed and checked Google and other services. We're worried about recovering our account, especially since it's linked to many apps, banks, e-wallets, and even our college accounts. We're students and need help—thank you for your support!
However, we can't alter the password. We thought the hacker might have updated both our email and password. The CAPTCHA isn't responding.
You need to contact Valve support regarding this issue. They may assist if you can demonstrate ownership of the account through proof such as purchase receipts or a physical copy of a game with a key linked to it. If the hackers manage to get a VAC ban, Valve is unlikely to reverse it since account security rests with the user. This also assumes the script didn’t inject fake DNS entries into the hosts file to hinder reCAPTCHA. Be cautious about Windows installation—don’t rely on its behavior, even if it appears functional.
I’d try the PC to access any accounts, run NPE (it works surprisingly well), Malwarebytes, and possibly Hitman Pro. After logging in, save all crucial data to a USB drive and reset the windowns. To recover your accounts, use a different clean machine or phone and contact companies like Google, Microsoft, Valve, PayPal directly—just as Needfuldoer suggested. You can also create a new email for Valve if you bought a physical game or code via Steam, which helped restore my account when the linked email was removed.
Review Windows Security settings. Threat logs likely show allowed risks. Best approach is to reinstall and start fresh.
Your friend encountered a fake captcha trick that asked for text input into the Windows Run dialog, claiming it checked for human interaction. In reality, this was a setup to install malware when the dialog was opened. The file flagged by the security tool was an MP3, which could be used to deliver malicious content if certain commands were executed. To handle this, immediately change all passwords using a clean device and reinstall the operating system on the infected machine from ORBIT. Avoid trusting passwords stored in browser managers, as they are vulnerable. If the accounts were compromised, reporting the incident may help regain access, though some responders might not act.