Managing personal Outlook.com account settings, security, and privacy
Run a full malware scan before changing any passwords, then recover the Microsoft account through the Sign-in Helper from a clean device and secure every other affected account.
1. Contain and remove the suspected malware
Because several services logged you out after you ran the Python program, treat the PC as potentially compromised, although that sequence alone does not prove what the program did.
- Stop using that PC for email, banking, purchases, or password changes for now.
- On the PC, open Windows Security → Virus & threat protection → Scan options → Full scan → Scan now.
- After the full scan, save your open work and run Microsoft Defender Offline scan from the same Scan options page. The PC will restart and scan outside normal Windows, making persistent malware harder to hide.
- After restart, open Windows Security → Virus & threat protection → Protection history and review what was detected or removed.
Microsoft specifically recommends scanning the PC before changing the compromised account’s password.^1^ Defender Offline is intended for suspected exposure and persistent threats.^2^
If Defender reports that a threat was only partially removed or it returns after restarting, do not trust the PC for account recovery yet. Use another known-clean device while continuing malware-removal work.
2. Recover the Microsoft account
The Microsoft Store still showing the account does not provide a way around reauthentication; use the online recovery process.
- On a clean phone or computer, open the Microsoft Sign-in Helper at
https://aka.ms/sign-in-helper. - Enter the original Microsoft account email address or phone number.
- Follow the branch it provides. Microsoft directs “account doesn’t exist” and unrecognized-username cases to this tool.^3^
- If directed to the recovery form:
- Supply a different working email address where Microsoft can contact you.
- Complete it from a device and location previously used with the account, if possible.
- Include old passwords, exact Outlook email subject lines and contacts, and Xbox console information where applicable.
- Microsoft normally sends the result to the contact address within 24 hours. If verification fails, the form can be retried up to twice per day.^4^
Support agents cannot manually send a reset link or change protected account details. If the Sign-in Helper offers an agent option, use it, but identity verification still controls whether access can be restored.
3. Secure the other accounts immediately
From the clean device:
- Secure the email accounts used for password resets first.
- Change the passwords for Discord, Epic, Steam, Riot, financial services, and any other affected accounts.
- Use a different, unique password for every account. Change any account that reused the Microsoft password even if it has not shown suspicious activity.
- Review recovery email addresses, phone numbers, connected applications, active sessions, and purchase history.
- Enable two-factor authentication wherever available.
- Contact the individual service’s account-recovery or fraud channel if its email address, recovery details, or purchases were changed.
Do not approve unexpected authentication prompts or use links from security-alert emails; open each service directly.
4. If Microsoft access is restored
Immediately:
- Change the Microsoft password and remove unknown security methods.
- Review Recent activity for the previous 30 days. Mark unfamiliar entries as This wasn’t me or select Secure your account.^5^
- Check Outlook connected accounts, forwarding rules, and automatic replies for unauthorized changes.^1^
- In the Microsoft account’s Advanced security options, select Sign out everywhere. This signs out browsers and apps within 24 hours, except Xbox consoles.^6^
- Add Microsoft Authenticator or another current recovery method and enable two-step verification.
Also back up important local documents before making major Windows repairs. Do not delete the Windows user profile merely because the online account cannot currently authenticate.
References
- How to recover a hacked or compromised Microsoft account | Microsoft Support
- Virus and Threat Protection in the Windows Security App | Microsoft Support
- Microsoft account sign-in helper | Microsoft Support
- Help with the Microsoft account recovery form | Microsoft Support
- Check the recent sign-in activity for your Microsoft account
- How to sign out of your Microsoft account everywhere | Microsoft Support