The only real way to assure yourself there is no malware is to reinstall Windows cleanly, if you can. If you choose to do this, use the Media Creation Tool to create a bootable installer for Windows, save your data to an external backup and use the tool to remove the existing partitions and recreate them, after which you can finish installing Windows cleanly.
A hacker send me a screenshot of me using my computer and told me that they have all my data, also they’re saying that they are gonna make a **** of me
Hey. I have bad news for you!
/1.P1GhQ,
03.08.2022-On this day, I hacked your device's operating system and got full access to your account . I have been watching you closely for a long time.
f0f7ut
I installed a virus on your system that allows me to control all your devices.
The virus software gives me access to all the controllers of your devices (microphone, video camera, keyboard, display). I have uploaded all your information, data, photos, browsing history to my servers. I have access to all your messengers, social networks, email, sync, chat history and contact list.
XrNr
I learned a lot about you!
f/CJ
I thought what can I do with this data...
I recently came up with an interesting idea: to create a video clip in which you **** in one part of the screen and watch a **** in the other, such videos are now at the peak of popularity!
What happened amazed me!
i?8-
With one click, I can send this video to all your friends via email, social networks and instant messengers. I can also publish access to all your emails and instant messengers that you use.
In addition, I found a lot of interesting things that I was able to publish on the Internet and send to friends.
\nn
If you don't want me to do it, send me 1900 $ (US dollar) in my bitcoin wallet. My BTC wallet address:
bc1qe9h0drc5aq3xl7zyaq6l0al6nwf92uweruw24j
If you do not know how to replenish such a wallet, use the Google search engine. There is nothing difficult in this. As soon as funds arrive, I will see this and immediately remove all this garbage. After that we will forget each other. I also promise to deactivate and remove all malware from your devices. Trust me, I keep my word. It's a fair deal and the price is pretty low considering I've been checking your profile and traffic for a while.
XN
I give exactly two days (48 hours) from the moment of opening this letter for payment.
After this period, if I do not receive the specified amount from you, I will send everyone access to your accounts and visited sites, personal data, and edited videos without warning.
Remember: I do not make mistakes, I do not advise you to joke with me, I have many opportunities.
There's no point complaining about me because they can't find me. Formatting the drive or destroying the device won't help because I already have your data.
It makes no sense to write back to me - I do not write from personal mail and do not look at the answers.
>UP
>UP
Good luck and don't get angry!
Everyone has their own job, you just got unlucky today.
L
P.S. In the future, I recommend that you follow the safety rules on the Internet and do not visit dubious sites.
Windows for home | Windows 10 | Security and privacy
Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.
200 additional answers
Sort by: Most helpful
-
Anonymous
2022-08-29T16:57:02+00:00 I received the same email and the same message today, everything is literally the same except the amount is 1950$ not 1900$ and the rest of the message is the same even with the screenshot of my device (was on 6/6/2022) please if u can tell me what happened after 48 hours ?
-
Anonymous
2022-09-24T19:54:55+00:00 Yes. Same over here.
All my personal accounts and e-mails of myself, my partner’s and my parents got hacked for weeks straight before receiving the threat. The e-mail was sent to all accounts I had linked with my Google Password manager. The hacker simply hacked into my main google account that is the key to access to all my other accounts and the ones of my dear ones.
Most people had the exact same experience. The screenshot taken is some type of malware that takes a screenshot the moment u installed the software. After that, they don’t have any access to your pc.
Like a person replied in one of the forums:
There's an executable file originally called Scshtrv.exe that was developed precisely to grab a screenshot of an active session and upload it to a remote FTP site. This is the source of that screenshot.
This file was originally discovered by Malwarebytes while investigating a tech support scam as part of a package of executable files that were forced-downloaded when a spoofed software cracker was installed. At the time Malwarebytes had no idea what this file would be used for: they speculated it could be used to run blackmail scams and they were right on target, as they and Kaspersky always are.
Somewhere on your (friend's) computer Scshtrv.exe is present. You can look for it yourself, but chances are it was renamed. It was probably force-downloaded when installing spoofed software, or was disguised as part of pirated software. Don't worry, I won't go to the authorities because you (or your friend) use Pirate Bay or whatever. 😉
To the best of my knowledge the scammers themselves have no direct control over Scshtrv.exe: it's just programmed to grab a screenshot and upload it all by itself. Nobody has any control over your (friend's) computer, but it hints at severe flaws in security you should correct as soon as possible as they could be exploited by far more dangerous malware.
Also read another person’s reply saying that a hacker who really has access over your pc, would never e-mail you a threat. They’d simply show you the threat right in your face while using your computer. They’d also show you exactly what they have on you, to make sure you know it’s not a joke.
This is all a scam. Don’t worry too much.
Still got 24h to go for the 48h to pass, but I am not worried whatsoever.
Scanned my pc with Malwarebytes and indeed I had a malware in my pc, but it was easily removed with help of the cleaning software. I recommend you do the same and just make sure to change all your passwords.
-
Anonymous
2022-09-25T19:01:33+00:00 UPDATE!
It is now exactly 49 hours after receiving the threat and 48 hours and 30 minutes since reading it for the first time.
I can guarantee, nothing happened ..It was all a well put together scam!
Make sure to not fall for it folks! And also make sure to take care of the malware that took the screenshot of your screen in the first place!For anyone reading this at any point in the future, a quick recap of my story.
I downloaded a cracked version of Photoshop about 2 months ago on a laptop.
About 1 week after all my e-mails, social media platforms, shopping platforms etc. etc. were getting hacked into.
Not only my own personal stuff were being hacked, but also the stuff of my partner, my parents, and siblings.Fastforward about 48h ago, I received an e-mail going along the lines:
Hello.
I have bad news for you! **** -On this day, I hacked your device's operating system and got full access to your account . I have been watching you closely for a long time. I installed a virus on your system that allows me to control all your devices. The virus software gives me access to all the controllers of your devices (microphone, video camera, keyboard, display). I have uploaded all your information, data, photos, browsing history to my servers. I have access to all your messengers, social networks, email, sync, chat history and contact list. I learned a lot about you! I thought what can I do with this data... I recently came up with an interesting idea: to create a video clip in which you **** in one part of the screen and watch a **** in the other, such videos are now at the peak of popularity! What happened amazed me!I received this e-mail with a screenshot of my screen the moment I downloaded the cracked version of Photoshop.
As I mentioned before, now 49h later, nothing has happened.
As another person explained on a Reddit post by the username RudbeckiaIS:
There's an executable file originally called Scshtrv.exe that was developed precisely to grab a screenshot of an active session and upload it to a remote FTP site. This is the source of that screenshot.
This file was originally discovered by Malwarebytes while investigating a tech support scam as part of a package of executable files that were forced-downloaded when a spoofed software cracker was installed. At the time Malwarebytes had no idea what this file would be used for: they speculated it could be used to run blackmail scams and they were right on target, as they and Kaspersky always are.
Somewhere on your (friend's) computer Scshtrv.exe is present. You can look for it yourself, but chances are it was renamed. It was probably force-downloaded when installing spoofed software, or was disguised as part of pirated software. Don't worry, I won't go to the authorities because you (or your friend) use Pirate Bay or whatever. 😉
To the best of my knowledge the scammers themselves have no direct control over Scshtrv.exe: it's just programmed to grab a screenshot and upload it all by itself. Nobody has any control over your (friend's) computer, but it hints at severe flaws in security you should correct as soon as possible as they could be exploited by far more dangerous malware.
So that explains the screenshot.
How the hacker got access to all my personal e-mails etc. was due to the fact that I had everything, but literally everything and everyone's passwords saved in the Google Chrome Password Manager.The hacker managed to somehow hack into my main G-mail (which wouldn't have been too hard tbh, my password was not too difficult) or buy my password of another hacker on the darkweb or something and from there on attempted to hack into all my e-mails and socials.
My advice?
I'd say the best first step is to download Malwarebytes and let it run a scan. It will 100% find some type of malware on the device of which a screenshot was taken and get rid of it. After that I'd contact a proper IT company that has knowledge on these type of situations to ensure your device has been cleaned from the malware.
Secondly, if you also got hacked on all your personal e-mails, socials and whatnot, make sure to change all your passwords! Activate 2FA on all platforms that allow it and make sure to avoid brower based password managers! There are tons of trust worthy password managers from companies such as Norton and Mcafee.
Goodluck to everyone going through a similar situation!
-
Anonymous
2022-08-24T19:39:57+00:00 I have read about these known scams and all they are are scams. You would be surprised what info the internet holds about you. If you have a webcam anyone can hack the cam and see what you are doing or take a screen shot anytime.You can reinstall Windows as much as you want it will do no good. Remember that ever who this is trying to scam you out of money they already have your info on his server so they say so what is the point of reinstalling windows. If you have a web cam just put a piece of paper over the cam when you are not using it and stay off of websites that you are not familiar with. You need to delete those infections that MB found and not keep them quarantined. This is a scam my friend and if you pay this punk he or she will keep on getting money from you. It is called blackmail. Change all your passwords and email addresses. If there was anything else malicious MB would have picked it up but you do what will make you feel better.
Cheers