Trojan affected system 32 or maybe it was the AV cleanup
A few hours ago I downloaded and executed a file that was supposed to be an installer of a game. After opening it, I started suspecting it was real malware. I tried scanning and disinfecting the computer using Kaspersky. During the process, Kaspersky detected what appeared to be a trojan. I remember one of the detected names being something similar to “winn.exe”. I also received a warning saying that someone was attempting to use my computer’s resources for cryptocurrency mining.
After Kaspersky finished the “disinfection” process, the computer restarted and I began getting System32 and kernel-related errors. From that point on, Windows became extremely unstable. The Start menu stopped responding, Windows search no longer worked, and trying to use the browser or basic system functions would often do nothing.
I shut the computer down and disconnected it from the internet. I have not continued using it normally since then. I’m considering booting into Safe Mode only to recover important files before formatting or reinstalling Windows.
So far I have not received any emails about login attempts or compromised accounts, but I’m worried the malware may have stolen cookies, sessions, or credentials before I shut the PC down.
I wanted to ask:
• Does this sound like a serious infection or mostly a system corrupted by the antivirus cleanup?
• Could the malware still have stolen sessions or passwords even though I disconnected the internet relatively quickly?
• Is restoring/resetting Windows from troubleshooting enough, or would you recommend a completely clean reinstall from a USB?
• How safe is it to recover personal files through Safe Mode?
• Will booting into safe mode allow me to access my files or do basic stuff?