Malware and False Product Key Trojan

[rksako]

Idiotically, I decided to try and download COD4 from a Mediafire, hoping to replay the nostalgic game. Upon finishing the download, I opened the first folder called "CD1", tried running the setup.exe and halfway through the install, but it closed instantly and product cd key malware instantly popped up.

A brief notification saying my UAC had been disabled popped up and my PC instantly restarted. Upon restart, a screen asking me for my Windows 10 product key popped up. I tried a hard shutdown (power button for 5+ seconds), and tried rebooting in safe mode. Instead, the Microsoft screen with options such as system restore, restarting as normal and whatnot showed up, and I immediately performed a system restore.

After signing on as normal again, I ran MalwareBytes, found lots of malware, adware and a couple trojans and removed them and restarted.

After class this afternoon, I opened my laptop back up and random malware had installed itself and started to run, I ran MalwareBytes again and proceeded to remove it.

So my question is, after getting affected by Trojans and malware, and removing it, it still somehow installed itself and ran, without the laptop being used, can someone please advise me how to ensure no more malware or viruses run and install itself? Thank you for taking the time to read this.

 

[ssddx]

safest option to be sure its gone?

complete hard drive wipe, reinstall, avoid doing something dumb like piracy again.

 

[Supermuncher85]

Nuke it from orbit, it's the only way to be sure

 

[Jugeum]

I think the only way you're going to be sure that it won't come back up is to go back to an old restore point, or a reinstall of the OS. I would also suggest learning the safer ways to get pirated software than mediafire. There's a whole slew of places you can get things from where the people sharing it have ranks plus reviews of each file if you are going to download (and be a good pirate and if it's something you're going to play for a long time, go ahead and purchase it when you can to support developers)

 

[maikutech]

Sounds like you have a rootkit infection, the best way to get rid of it is this.
http://usa.kaspersky.com/downloads/TDSSKiller

http://www.eset.com/us/support/download/home/

Use this with malwarebytes, both will work together to make sure the infection will not come back.

https://steamcommunity.com/app/7940
Next time go legit if you have the funds and avoid this problem you ran into.

 

[Paul Wagenseil]

It does sound like you might have a rootkit. Try the Kaspersky TDSSKiller that maikutech recommends, but you should also boot and clean the PC from a rescue disk that will examine the entire Windows installation from outside Windows.

Here's a link to the Kaspersky free-tools page: http://free.kaspersky.com/us . The rescue-disk image is about halfway down the page. Download it and burn it to a blank CD (using a different computer from the one that's infected), then boot the infected machine from the CD and follow the instructions.