Yes, there are two separate parts to address: the compromised Microsoft account, and the compromised Windows PC.
For the Microsoft account:
- Scan the PC for malware before changing anything else. In Windows Security, open Virus and threat protection > Scan options > Full scan > Scan now. This is important because changing passwords before removing malware can allow the attacker to capture the new password again.
- Change or reset the Microsoft account password. If sign-in still works, change the password. If not, use the password reset flow.
- Check account settings that attackers commonly change.
Review:
- connected accounts
- forwarding
- automatic replies
- If the attacker changed the recovery methods and they cannot be removed, use the Microsoft account recovery and sign-in help flows. If the recovery request was unsuccessful, it can be retried up to two times per day. If the additional security information is no longer recognized, use the Sign-In Helper.
- If access is regained, go to Security settings and remove any unknown verification methods. If prompted for a code and the current methods are no longer accessible, choose I don't have any of these and follow the replacement process.
- Support cannot directly reset the account or change account details on behalf of the user. The supported path is the recovery form or Sign-In Helper.
For the Windows 11 PC:
- If malware made irreversible changes, Windows may need to be reset, restored, or reinstalled.
- Before doing that, back up files and settings that need to be kept.
- Restore files from backups created before the infection when possible, because backups stored on the infected PC may also be affected.
- After recovery, install the latest software updates.
Losing administrator privileges and being unable to open Task Manager can be consistent with malware damage. Based on the available guidance, this is fixable only if malware cleanup restores normal operation; otherwise a PC reset or reinstall may be required.
- How to recover a hacked or compromised Microsoft account | Microsoft Support
- How to recover a hacked or compromised Microsoft account | Microsoft Support
- Account recovery unsuccessful | Microsoft Support
- Removing a sign-in verification method | Microsoft Support
- Troubleshoot problems with detecting and removing malware | Microsoft Support