Managing personal Outlook.com account settings, security, and privacy
Please note that our forum is a public platform, and we will modify your question to hide private, identifiable information in the description. Even if it's from the suspected attacker. Kindly ensure that you hide such details the next time you post.
I’m very sorry to hear about your friend situation, having their Microsoft account taken over immediately after a malware infection. The unauthorized activity on another account is understandably alarming, especially when the recovery email and phone number have also been changed.
That said, I must note that Microsoft Q&A is just a public community forum, focused on providing guidance on technical issues. Moderators and contributors here do not have access to private account data, nor the ability to verify ownership and manually restore the original email/phone information.
For a compromised personal Microsoft account, Microsoft directs users through the official account-recovery process: How to recover a hacked or compromised Microsoft account | Microsoft Support. Since malware was downloaded shortly before the compromise, I recommend doing the following in this order:
1 - Secure the affected computer first:
- Do not enter any new passwords on the potentially infected computer until it has been checked.
- In Windows Security, go to Virus & threat protection > Scan options > Full scan > Scan now
- Since another account was already affected, your friend should use a trusted, malware-free device to change the passwords of other important accounts that's linked to this one.
2 - Start Microsoft’s Sign-in Helper from a trusted device:
- Enter the email address or phone number associated with your friend’s account
- Follow the recovery options (depending on the situation, it may lead to speaking with an agent).
3 - Use the account recovery form
- Visit https://account.live.com/acsr > fill in the form
- Enter much historical information as your friend can provide.
I know this is not the immediate intervention your friend was hoping for, but in retrospect, Microsoft Q&A is in the same position with you. We unfortunately cannot take control of or escalate the request from here.
If you think the answer is helpful to you, please mark this as accepted. If you have extra questions about this answer, feel free to click "Add Comment" and ask!
Note: Follow the steps in our documentation if you want to enable and receive the related email notifications for this thread.