Share via

What do I do after falling for the captcha win+r ctrl+v scam?

Anonymous
2025-01-13T11:38:57+00:00

I was surfing the internet and got a captcha telling me to type win+r, ctrl+v and enter. I followed the steps mindlessly and realized moments later what I probably did. I restarted my computer and did a quick scan and then a full scan with windows defender but it found nothing. I reset my passwords and deleted the rest on chrome. what should I do now?

Windows for home | Windows 10 | Security and privacy

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.

0 comments
Answer accepted by question author
  1. Anonymous
    2025-01-13T13:08:50+00:00

    Most of those fake captchas are serving up Lumma Stealer. Depending on how quickly you restarted, it may not have had a chance to download and run. Lumma pretty much gets the info it wants then self deletes. It has no persistence. As you've changed your passwords, you should be OK.

    Run a scan with Malwarebytes and/or ESET online scan.

    https://www.malwarebytes.com/mwb-download

    ESET Online Scanner - press the One Time Scan button

    https://www.eset.com/au/home/online-scanner/

    9 people found this answer helpful.
    0 comments
Answer accepted by question author
  1. Anonymous
    2025-01-13T12:05:07+00:00

    Hello. The problem is that each website could have a diffrent thing(s) launching in the ctrl+c ctrl+v process.

    Do not feel bad some of these website things are very convincing. I am glad you figured it out quickly. The best option(s) are : A) Bring it to a small computer repair store to have it looked at. B) Disconnect the computer from the internet and backup your important cat photos ect to an external drive. Then factory reset the computer. Important files are usally saved under [ C:\Users\Your_USERNAME\ ]. A factory reset can erase game saves and important data so take your time doing a copy of the important files then power off the computer and power on the computer and check the back up then factory reset.

    Answer: Repair person Or Backup + Factory reset.

    4 people found this answer helpful.
    0 comments

4 additional answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Anonymous
    2025-01-13T13:21:24+00:00

    Hello Tiffany, I'm Quinn, and I'm happy to help.

    I'm sorry to hear that you fell for that scam. It's good that you've already taken some steps to secure your system. Here are a few additional steps you can take to further protect yourself.

    1. Firstly, on the same Windows Defender, run a Microsoft Defender Offline Scan. This will help detect and remove deeply embedded malware that regular scans might miss. You can find this option under Windows Security > Virus & threat protection > Scan options.
    2. Use a tool like Malwarebytes for a thorough scan. It’s effective in identifying and removing potential threats missed by Microsoft Defender.
    3. After scanning with both of them, open Control Panel > Programs and Features and review the list of installed programs. Uninstall anything unfamiliar or that you don’t recall installing.
    4. Review Event Viewer Logs: Open Event Viewer (Win+R > type "eventvwr.msc" > Enter). Look under Windows Logs > Application and System for unusual errors or warnings.

    Let me know if you encounter any suspicious findings or need help with these steps.

    4 people found this answer helpful.
    0 comments
  2. Anonymous
    2025-01-14T02:35:23+00:00

    Thank you for your help. I tried all the scans recommended (windows full and offline, malwarebytes and eset) but nothing was found. I looked at all my programs and only microsoft 365 and edge was updated on the 12th, the day of the scam. So i deleted microsoft 365 because i don't remember downloading it. I also looked through event viewer but there are so many errors and warnings before, during and after the time of the scam I don't know what's unusual.

    1 person found this answer helpful.
    0 comments
  3. Anonymous
    2025-01-14T02:19:56+00:00

    Thank you so much for your kind words. I was beating myself up for how I just followed the instructions like a game of Simon says.

    0 comments