2026-08-23 20:07 UTC
@vbarreirojr@gamepad.club @scopique@gamepad.club @nimgimli@gamepad.club I would absolutely treat it as potentially compromised. There are a couple of guides online on what to do in this situation, including this recent thread on the malwarebytes forum.
https://forums.malwarebytes.com/topic/334518-i-stupidly-ran-the-malicious-cloudflare-win-r-powershell-command/
In addition, I would change any password that has been used or saved on that machine.
Please note that I’m not a windows desktop security expert, but I wouldn’t trust a straight reinstall to have removed everything.
Replies (1)
-
@vbarreirojr@gamepad.club 2026-08-23 20:10
@Gazimoff@gamepad.club @scopique@gamepad.club @nimgimli@gamepad.club ah crap. this was it. the powershell verify thing. i am thoroughly freaked out