Stay vigilant, maintain regular backups, and remember—when in doubt, nuke it from orbit (a clean Windows reinstall is the only way to be 100% sure).
When the user bypassed the Windows Defender warning—clicking "Run Anyway" with a mix of excitement and impatience—the process CODB02-rpk.exe flickered into existence in the Task Manager. It didn't stay there long. It immediately spawned a child process with a random string of characters, buried itself in the %AppData% folder, and deleted its original installer to hide the evidence. CODB02-rpk.exe
If the process respawns, reboot into and repeat. maintain regular backups