My friend’s PC got infected because of some Roblox script (I know, not a great move). All his accounts got hacked—Steam, League of Legends, Outlook, you name it. We’re sorting things out bit by bit.
I told him to change all his passwords from his phone and to reinstall Windows once he finds a USB drive.
So my question is… what else can he do?
^(sorry for my English)
If you think you have malware on your computer or are trying to get rid of it, check out our malware guide
Ignore this if it’s not relevant to your question.
I’m a bot, and this was done automatically. Please contact the moderators of this forum if you have questions or concerns.
Set up MFA (multi-factor authentication) on any accounts that allow it.
Using a password manager helps too—then you won’t end up with the same password on everything, so getting hacked on one account doesn’t lead to all of them.
Learn from his mistake, if possible.
Edit: Also, if you can, go into each account and remove any active sessions. Big sites like Steam, Google, and Microsoft usually have this in security settings.
u/nickey88k also made a good point about checking mail settings. Hackers sometimes set up email forwarding without you knowing, and that could mess up your password recovery.
@Baylen
What’s a password manager?
It’s a program that you log into with one really strong password, and it creates random, super-strong passwords for all your other accounts.
Think of it as having long, random passwords (like 50 characters) that are nearly impossible to crack. The program encrypts them to keep them safe.
You usually pay a few bucks per month or year for this kind of extra security.
Check out Bitwarden. It’s popular and has some good info on staying secure.
@Baylen
But if they steal the browser cookies, different passwords won’t matter much. Still, having a password manager and unique passwords is a smart move.
SphereCodersForum5 said:
@Baylen
But if they steal the browser cookies, different passwords won’t matter much. Still, having a password manager and unique passwords is a smart move.
Never save passwords in the browser… that’s just basic safety.
Get Hitman Pro and run a scan. Also, on your web browser, get Bitdefender TrafficLight—it blocks a lot of viruses and sketchy stuff.
Ciel said:
Get Hitman Pro and run a scan. Also, on your web browser, get Bitdefender TrafficLight—it blocks a lot of viruses and sketchy stuff.
What does Hitman Pro do exactly?
Find a new friend 
faith said:
Find a new friend
Lol! Why? Friends like that are good for making sure you’re not the dumbest one in the group.
Same thing happened to me once… I really need to stop downloading stuff at 4 AM 
. Here’s what I did: changed all my passwords from another device (like a phone), then went into each account and revoked any active logins I could find. After that, I did a full format and wiped every partition from my drive using a USB Windows installer.
Make sure he doesn’t log back in on the infected PC until it’s completely wiped, or it could happen all over again.
Also, make sure his email doesn’t have any forwarding rules set up. If they are, the hacker could still get his emails.
Enable two-factor authentication (2FA) on each account if it’s not already on, and refresh the codes to be extra safe. Also, check for any weird accounts or apps connected to the hacked accounts.
If it was a stealer virus, have him log out on everything after changing passwords so that the session tokens get reset.
Some stealers can use old tokens to keep access, so be thorough!
I have a friend who copies Roblox scripts without even knowing what they do—he thinks it’s “hacking” 
. I hope one day he learns a lesson.
Some websites and apps let you see what devices are linked to your account. For Steam, you can contact support to lock your account, change the password, and force all devices to log out.
For new passwords, I’d recommend using a random character generator or this website with secure password lists.
Be more careful next time and look out for any changes in account settings and logins.
Reformatting is the only way to be completely sure the infection is gone.
Honestly, feels like one person can target you with hackers if they hold a grudge or feel jealous. It’s scary but happens… maybe let hackers know there are limits?
Tell him to keep an eye on bank accounts too. Some of this stuff can leak financial info. Enabling two-factor authentication everywhere he can will help add a safety layer. Also, back up any important files before doing a wipe. Good luck!
Just set the whole computer on fire 