ojava
Start free trial

All guides

A tool tried to steal Windows passwords

What happened

A program read the part of Windows that holds passwords. Attackers do this to move from one PC to the others.

How serious

Critical: act within the hour.

Steps: Windows PC

  1. Take the PC off the network now: unplug the cable and turn off Wi-Fi. Don't switch it off: what's in memory helps your IT provider.

  2. Change the passwords used on that PC (Windows, Microsoft 365 or Google, banking) from ANOTHER, clean device.

  3. Ask the person at that PC what they were doing at that time (installing something, a link in an email, a USB stick).

  4. Run a deep scan: Windows Security → Virus & threat protection → Scan options → Microsoft Defender Antivirus (offline scan) → Scan now. The PC restarts.

How to check it’s fixed

Fixed when the deep scan finds nothing, protection is on again and Ojava shows the PC as healthy for 24 hours.

When to call your IT provider

Call your IT provider today, before using the PC again for work.