Use an updated antivirus or EDR solution to scan your system.

Scripts that execute in the background to download a secondary payload from a Command and Control (C2) server.

Unknown processes running from %AppData% or %Temp% directories.

Connections to unknown IP addresses or domains (C2 communication).