Recently, trying to find a solution to a problem with an old game of mine not running on Windows 7, I stumbled across a solution saying that a cracked .exe was the answer (I have proof of purchase and the disk case + disk, if anybody wants to know), and directed me to a website called gamecopyworld.com. McAfee SiteAdvisor told me this website was fine, so I proceeded to download the file. Instantly after download, explorer.exe stopped working, and only McAfee's intervention - deleting 23 trojans - stopped my computer crashing. After checking through my Temp files, as well as all the reported locations of the trojans, and wiping them completely, everything worked fine. A full scan revealed nothing more than GameSpy Arcade - registered as Adware for some reason - which I quarantined for good measure. As I said, everything worked fine.
This morning, when I turned on my computer, it functioned fine for two minutes, but my windows gadgets didn't work and I got an error message saying that a strangely-named process could not run because one of the files I had deleted in temp the day before was missing. My fan proceeded to spin very fast, and before the bluescreen happened I managed to get the names of two processes - one which windows defender immediately proceeded to delete, because it was a trojan dropper, and the other which I actually managed to write down - hostdll.exe. This was the only strange program I had noticed, although there were multiple versions of a lot of processes.
Can anyone shed some light on this situation?
EDIT: Furthermore, I noticed that in safe mode, everything worked but had multiple versions of most processes, and McAfee reported that the continual scanning service was turned off. When I turned it on, it worked for two seconds, and then was turned off again. Watching my processes list, it showed that the process Mchost.exe, was instantly ended as soon as it was run.
Edited by El Quirko, 12 December 2010 - 06:10 AM.