Virus/Malware: Startup Requires Wrong Serial Key

nkg725 · 17 Apr 2016

Hey guys,
First thing is, i am new to the forum and i couldn't find any other topic to post this to so i chose System Security, i apologize if this is the wrong topic to post this to.
So i'm having a problem with my computer. I was trying to download a file and it turned out to be a
virus.

When i start up my computer its pretty fine, it shows the manufacturer, then "windows is starting up". After that is goes to the select account screen, i select mine and put my password in, then its just black. After a little while it starts up with the windows 8/10 logo and the windows 8 loading dots and a button that says start (in the picture the white button is the start button). I have tried using safe mode, however not safe mode with networking or cmd, and it didn't change a thing. With no other options i pressed start and it came to a screen to put in the windows product key. I check behind my computer to see the product key and i take a picture. I have put the CORRECT product key into the box and selected "active" (the white box to the right), but it says that its wrong. If anyone could help i would be very thankful! (p.s. where it says google at the top, i can access google and use the internet, but for safety reasons i am using another computer and it has no internet)
-nkg725

EDIT: I'll add pictures to the post if they are required, since i need to download itunes and such :P

nkg725 · 17 Apr 2016

I just found out i can use task manager to close the fake product key activator, i can also use tm to open folders and applications, however, my desktop is completely black, and i cant click on icons such as if the black was only the layer above the actual desktop. I haven't tried it yet but i bet that every time i turn my computer on it will show that. I'm going to see if i can run my anti-virus software.

torchwood · 17 Apr 2016

Hi NGK,
certainly looks like its a nasty,
Can you start up in safe mode with networking, then run the ESET on line scan, could take a while, its an AV Malwarebytes is NOT.

DO NOT post your product key, i suspect thats what they were after in the first place.

Roy

nkg725 · 17 Apr 2016

Hello torchwood,
I have been messing around with it before i could see you reply and ill give an update:
I opened task manager and i was able to remove the fake windows authentication and used "run" to open control panel. I then was able to access my desktop in windows explorer and i opened malwarebytes and it was able to detect and delete 1895 files from ONE application. The virus installed like 7 applications. I have also uninstalled many of these programs, but the ones that aren't on the list (i found in the program files) wont delete, since ofcourse they are currently being used.

Anyways thats just an update and i will now try to download ESET and enter safemode, then run ESET.

nkg725

nkg725 · 17 Apr 2016

Update:
I shut down my computer and ran it in smwn and i downloaded ESET. After about 2 hours it finally completed, about 20 minutes ago. I was able to save a file of what the bad files were and i proceeded to delete those files and their folders if they were not needed. After a hard reset my computer turned on and it was re configuring my personal settings like the theme and background etc. I am currently writing this post on my computer that had the virus moments ago. I hope its all fixed, but for the most part its working great. If i have anymore problems i will always come to this forum to receive input and suggestions. Thanks for the help torchwood! p.s. I knew malwarebytes could scan and remove malware but i also thought it could detect viruses, one of my friends said it could :P at least now i have a virus scanning program too.

nkg725