AminAd

Look's like the issues are gone. Did a reinstall of the OS and the network and windows icon works as they should. Thanks for the help guys.

Not really. But I had a issue with desktop icons jumping around when I would move one of them. This was after a windows update. Besides that there were no issues.

Yes and windows store not being able to install or update apps.

@Porthos @Aura Looks like I have saved most of the files. Thanks for the help. Tho I'm still having problems with the OS.

@Porthos I now have the harddrive. I'm ready when you are.

I'm using my mobile phone. Put my laptop away. Don't want make the situation worse.

No, but I'll buy one tomorrow and come back to you. Sounds good?

As I was making a new user I made a user called Administrator. I logged in to and did not see a fix on the problem. And then I made another one normal user that did not work. As I was trying to do the fix I went on my user and logged in to a local version of the account. As I was looking at the users and nothing was working I stated deleting the users I created. Thinking my files are saved in the admin user I deleted the local user. I answered yes when windows asked if I wanted to delete the user and the files. Big mistake.

Don't have a backup. Is it not possible to do a drive recovery?

@Aura @Porthos I messed up!!! Deleted my primary profile where all my documents where, and the new user fix didn't work. I have looked on the folder user/username and the files are not there. Just some files I had on Onedrive. Am I screwed? what do I do?

Did run it, but looks like it didnt fix the problem. Still can't connect to a wireless network.

Nothing happends. I click the network icon, and a get no respons. I've run a troubleshooting and the response is that I haven't selected a wireless network. The same with the windows logo, nothing happends when I click it.

Did not work. I think it might be a problem with the OS. You think a system restore might work?

It is a SF314-51-33QS

Here they are:

Hi, looks like there's not many options left or? I was thinking of maybe doing a system reset where I keep my personal files. Do you think that might work?

My laptop: Acer swift 3 sf314

Not good. The only way I can stay connected is by a wired connection since the computer won't show me available wireless networks. And the windows button it not working. Only by right-clicking it giving me the list of options. What do you think we can do?

Here they are: JRT log: ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Junkware Removal Tool (JRT) by Malwarebytes Version: 8.1.3 (04.10.2017) Operating System: Windows 10 Home x64 Ran by Amin (Administrator) on 06.06.2017 at 20.42.44,90 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ File System: 0 Registry: 1 Successfully deleted: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{6ADB0154-4781-473A-B1B0-F090C6DD1D01} (Registry Key) ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Scan was completed on 06.06.2017 at 20.45.32,06 End of JRT log ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ AdwCleaner clean log: # AdwCleaner v6.047 - Logfile created 06/06/2017 at 20:53:03 # Updated on 19/05/2017 by Malwarebytes # Database : 2017-06-06.1 [Server] # Operating System : Windows 10 Home (X64) # Username : Amin - LAPTOP-7EP4QV9A # Running from : C:\Users\Amin Addow\Desktop\AdwCleaner.exe # Mode: Clean # Support : https://www.malwarebytes.com/support ***** [ Services ] ***** ***** [ Folders ] ***** [-] Folder deleted: C:\Users\Amin Addow\AppData\LocalLow\.acestream [-] Folder deleted: C:\Users\Amin Addow\AppData\RoAming\.acestream [-] Folder deleted: C:\Users\Amin Addow\AppData\RoAming\Enigma Software Group [-] Folder deleted: C:\Program Files\DriverSetupUtility [-] Folder deleted: C:\Program Files\Enigma Software Group [-] Folder deleted: C:\_acestream_cache_ [-] Folder deleted: C:\sh4ldr [-] Folder deleted: C:\ProgramData\DriverSetupUtility [-] Folder deleted: C:\ProgramData\VideoMemoryDiagnostic [-] Folder deleted: C:\WINDOWS\SysWOW64\SSL ***** [ Files ] ***** ***** [ DLL ] ***** ***** [ WMI ] ***** ***** [ Shortcuts ] ***** ***** [ Scheduled Tasks ] ***** ***** [ Registry ] ***** [-] Key deleted: HKLM\SYSTEM\CurrentControlSet\services\d877ab5a48fbef5f12fbd2d96a1ced20 [-] Key deleted: HKU\S-1-5-21-941062246-4019233677-694128654-1001\Software\Classes\.acestream [-] Key deleted: HKU\S-1-5-21-941062246-4019233677-694128654-1001\Software\Classes\acestream [#] Key deleted on reboot: HKCU\Software\Classes\.acestream [#] Key deleted on reboot: HKCU\Software\Classes\acestream [#] Key deleted on reboot: [x64] HKCU\Software\Classes\.acestream [#] Key deleted on reboot: [x64] HKCU\Software\Classes\acestream [-] Key deleted: HKCU\Software\Classes\CLSID\{79690976-ED6E-403C-BBBA-F8928B5EDE17} [-] Key deleted: HKU\.DEFAULT\Software\ompndb [-] Key deleted: HKU\S-1-5-21-941062246-4019233677-694128654-1001\Software\Installer [-] Key deleted: HKU\S-1-5-21-941062246-4019233677-694128654-1001\Software\Microsoft\{94ebd7b5-82ae-449t-b679-3d04078ed154} [-] Key deleted: HKU\S-1-5-21-941062246-4019233677-694128654-1001\Software\Microsoft\{1f7ee1a8-4436-4ffc-b97b-b5b01e87d3d2} [-] Key deleted: HKU\S-1-5-21-941062246-4019233677-694128654-1001\Software\PopWnd [#] Key deleted on reboot: HKU\S-1-5-18\Software\ompndb [#] Key deleted on reboot: HKCU\Software\Installer [#] Key deleted on reboot: HKCU\Software\Microsoft\{94ebd7b5-82ae-449t-b679-3d04078ed154} [#] Key deleted on reboot: HKCU\Software\Microsoft\{1f7ee1a8-4436-4ffc-b97b-b5b01e87d3d2} [#] Key deleted on reboot: HKCU\Software\PopWnd [-] Key deleted: HKLM\SOFTWARE\Microsoft\{94ebd7b5-82ae-449t-b679-3d04078ed154} [-] Key deleted: HKLM\SOFTWARE\Microsoft\{1f7ee1a8-4436-4ffc-b97b-b5b01e87d3d2} [-] Key deleted: HKLM\SOFTWARE\ompndb [#] Key deleted on reboot: [x64] HKCU\Software\Installer [#] Key deleted on reboot: [x64] HKCU\Software\Microsoft\{94ebd7b5-82ae-449t-b679-3d04078ed154} [#] Key deleted on reboot: [x64] HKCU\Software\Microsoft\{1f7ee1a8-4436-4ffc-b97b-b5b01e87d3d2} [#] Key deleted on reboot: [x64] HKCU\Software\PopWnd [-] Key deleted: [x64] HKLM\SOFTWARE\Microsoft\{94ebd7b5-82ae-449t-b679-3d04078ed154} [-] Key deleted: [x64] HKLM\SOFTWARE\Microsoft\{1f7ee1a8-4436-4ffc-b97b-b5b01e87d3d2} [-] Key deleted: [x64] HKLM\SOFTWARE\ompndb [-] Key deleted: [x64] HKLM\SOFTWARE\EnigmaSoftwareGroup [-] Key deleted: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{2B51C83A-465D-4EA9-9CDC-1ED95ED09AC6} [-] Key deleted: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Searchy [-] Key deleted: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{24F5E422-6A70-4FAA-8CAD-E23D5DC1DAE6} [-] Key deleted: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{DD0688A5-FC8B-4E93-A485-CBF606A56D49} [-] Key deleted: HKLM\SOFTWARE\Classes\Installer\Features\A38C15B2D5649AE4C9CDE19DE50DA96C [-] Key deleted: HKLM\SOFTWARE\Classes\Installer\Products\A38C15B2D5649AE4C9CDE19DE50DA96C [-] Key deleted: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\A38C15B2D5649AE4C9CDE19DE50DA96C [#] Key deleted on reboot: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\A38C15B2D5649AE4C9CDE19DE50DA96C [#] Key deleted on reboot: [x64] HKLM\SOFTWARE\Classes\Installer\Features\A38C15B2D5649AE4C9CDE19DE50DA96C [#] Key deleted on reboot: [x64] HKLM\SOFTWARE\Classes\Installer\Products\A38C15B2D5649AE4C9CDE19DE50DA96C [-] Value deleted: HKU\S-1-5-21-941062246-4019233677-694128654-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run [msiql] [-] Key deleted: HKCU\Software\Classes\MIME\Database\Content Type\application/x-acestream-plugin [#] Key deleted on reboot: HKCU\SOFTWARE\Classes\MIME\Database\Content Type\application/x-acestream-plugin [#] Key deleted on reboot: HKLM\SOFTWARE\Microsoft\{1f7ee1a8-4436-4ffc-b97b-b5b01e87d3d2} [-] Value deleted: HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost [BIT] ***** [ Web browsers ] ***** [-] [C:\Users\Amin Addow\AppData\Local\Google\Chrome\User Data\Default] [startup_urls] Deleted: hxxp://www.initialsite123.com/?z=b94309e11b793756a600a2cg8z1tczct1m6g4o1tdz&from=icb&uid=3219913727_526057_8E5C3B48&type=hp ************************* :: "Tracing" keys deleted :: Winsock settings cleared ************************* C:\AdwCleaner\AdwCleaner[C0].txt - [5347 Bytes] - [06/06/2017 20:53:03] C:\AdwCleaner\AdwCleaner[S0].txt - [5410 Bytes] - [06/06/2017 20:50:40] ########## EOF - C:\AdwCleaner\AdwCleaner[C0].txt - [5493 Bytes] ##########

I ran it twice since I was in safe mode the first time and the fix sayd it dident make a restore point, the second one was in normal mode. Safe mode: Fix result of Farbar Recovery Scan Tool (x64) Version: 05-06-2017 Ran by Amin (06-06-2017 19:03:21) Run:4 Running from C:\Users\Amin Addow\Desktop Loaded Profiles: Amin (Available Profiles: defaultuser0 & Amin) Boot Mode: Safe Mode (with Networking) ============================================== fixlist content: ***************** CloseProcesses: CreateRestorePoint: ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> No File FF Extension: (Ace Stream Web Extension) - C:\Users\Amin Addow\AppData\Roaming\ACEStream\extensions\awe\firefox\acewebextension_unlisted.xpi [2017-01-31] FF Plugin HKU\S-1-5-21-941062246-4019233677-694128654-1001: @acestream.net/acestreamplugin,version=3.1.1 -> C:\Users\Amin Addow\AppData\Roaming\ACEStream\player\npace_plugin.dll [2015-08-06] (Innovative Digital Technologies) CHR StartupUrls: Default -> "hxxp://www.initialsite123.com/?z=b94309e11b793756a600a2cg8z1tczct1m6g4o1tdz&from=icb&uid=3219913727_526057_8E5C3B48&type=hp" CHR DefaultSearchURL: Default -> hxxp://navsmart.info/search?q={searchTerms} CHR DefaultSearchKeyword: Default -> {searchterms} CHR HKU\S-1-5-21-941062246-4019233677-694128654-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [mjbepbhonbojpoaenhckjocchgfiaofo] - hxxps://clients2.google.com/service/update2/crx S2 BIT; C:\ProgramData\BIT\BIT.dll [X] <==== ATTENTION Task: {62ACDF13-E122-4FA6-BF6C-7A35800D8DAC} - \Microsoft\Windows\DeviceSettings\Niculyigerent -> No File <==== ATTENTION Task: {733CF82A-069B-4652-B94D-DF93D2E99B94} - System32\Tasks\watchdog2 => C:\Windows\System32\Drivers\UMDF\run2.bat [2016-07-28] () <==== ATTENTION FirewallRules: [TCP Query User{D0414E82-93CC-4189-ACAA-6775475B5463}C:\users\amin addow\appdata\roaming\acestream\engine\ace_engine.exe] => (Allow) C:\users\amin addow\appdata\roaming\acestream\engine\ace_engine.exe FirewallRules: [UDP Query User{7BB7309C-063B-4DEA-B988-C3E9909A6827}C:\users\amin addow\appdata\roaming\acestream\engine\ace_engine.exe] => (Allow) C:\users\amin addow\appdata\roaming\acestream\engine\ace_engine.exe C:\Program Files\0EBDV8HZKL C:\ProgramData\agent.1494972023.bdinstall.bin C:\ProgramData\agent.1495136354.bdinstall.bin C:\ProgramData\agent.1495136363.bdinstall.bin C:\ProgramData\agent.1495143774.bdinstall.bin C:\ProgramData\agent.uninstall.1495030377.bdinstall.bin C:\ProgramData\agent.update.1494973243.bdinstall.bin C:\ProgramData\igfxDH.dll C:\ProgramData\BIT C:\Users\Amin Addow\AppData\Roaming\ACEStream C:\Windows\System32\Drivers\UMDF\run2.bat EmptyTemp: ***************** Processes closed successfully. Error: Restore point can only be created in normal mode. HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\00asw => key removed successfully HKCR\CLSID\{472083B0-C522-11CF-8763-00608CC02F24} => key not found. C:\Users\Amin Addow\AppData\Roaming\ACEStream\extensions\awe\firefox\acewebextension_unlisted.xpi => not found. HKU\S-1-5-21-941062246-4019233677-694128654-1001\Software\MozillaPlugins\@acestream.net/acestreamplugin,version=3.1.1 => key not found. C:\Users\Amin Addow\AppData\Roaming\ACEStream\player\npace_plugin.dll => not found. Chrome StartupUrls => removed successfully Chrome DefaultSearchURL => removed successfully Chrome DefaultSearchKeyword => removed successfully HKU\S-1-5-21-941062246-4019233677-694128654-1001\SOFTWARE\Google\Chrome\Extensions\mjbepbhonbojpoaenhckjocchgfiaofo => key not found. HKLM\System\CurrentControlSet\Services\BIT => key removed successfully BIT => service removed successfully HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{62ACDF13-E122-4FA6-BF6C-7A35800D8DAC} => key removed successfully HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{62ACDF13-E122-4FA6-BF6C-7A35800D8DAC} => key removed successfully HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\DeviceSettings\Niculyigerent => key removed successfully HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Boot\{733CF82A-069B-4652-B94D-DF93D2E99B94} => key removed successfully HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{733CF82A-069B-4652-B94D-DF93D2E99B94} => key removed successfully C:\WINDOWS\System32\Tasks\watchdog2 => moved successfully HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\watchdog2 => key removed successfully HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{D0414E82-93CC-4189-ACAA-6775475B5463}C:\users\amin addow\appdata\roaming\acestream\engine\ace_engine.exe => value removed successfully HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{7BB7309C-063B-4DEA-B988-C3E9909A6827}C:\users\amin addow\appdata\roaming\acestream\engine\ace_engine.exe => value removed successfully C:\Program Files\0EBDV8HZKL => moved successfully C:\ProgramData\agent.1494972023.bdinstall.bin => moved successfully C:\ProgramData\agent.1495136354.bdinstall.bin => moved successfully C:\ProgramData\agent.1495136363.bdinstall.bin => moved successfully C:\ProgramData\agent.1495143774.bdinstall.bin => moved successfully C:\ProgramData\agent.uninstall.1495030377.bdinstall.bin => moved successfully C:\ProgramData\agent.update.1494973243.bdinstall.bin => moved successfully C:\ProgramData\igfxDH.dll => moved successfully C:\ProgramData\BIT => moved successfully C:\Users\Amin Addow\AppData\Roaming\ACEStream => moved successfully C:\Windows\System32\Drivers\UMDF\run2.bat => moved successfully =========== EmptyTemp: ========== BITS transfer queue => 12345344 B DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 12741076 B Java, Flash, Steam htmlcache => 189617822 B Windows/system/drivers => 10904427 B Edge => 40013 B Chrome => 397549463 B Firefox => 26548922 B Opera => 0 B Temp, IE cache, history, cookies, recent: Default => 0 B Users => 0 B ProgramData => 0 B Public => 0 B systemprofile => 83600 B systemprofile32 => 867288 B LocalService => 20564 B NetworkService => 35108 B defaultuser0 => 0 B Amin Addow => 39840973 B RecycleBin => 13357440 B EmptyTemp: => 671.3 MB temporary data Removed. ================================ The system needed a reboot. ==== End of Fixlog 19:03:31 ==== Normal mode: Fix result of Farbar Recovery Scan Tool (x64) Version: 05-06-2017 Ran by Amin (06-06-2017 19:15:04) Run:5 Running from C:\Users\Amin Addow\Desktop Loaded Profiles: Amin (Available Profiles: defaultuser0 & Amin) Boot Mode: Normal ============================================== fixlist content: ***************** CloseProcesses: CreateRestorePoint: ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> No File FF Extension: (Ace Stream Web Extension) - C:\Users\Amin Addow\AppData\Roaming\ACEStream\extensions\awe\firefox\acewebextension_unlisted.xpi [2017-01-31] FF Plugin HKU\S-1-5-21-941062246-4019233677-694128654-1001: @acestream.net/acestreamplugin,version=3.1.1 -> C:\Users\Amin Addow\AppData\Roaming\ACEStream\player\npace_plugin.dll [2015-08-06] (Innovative Digital Technologies) CHR StartupUrls: Default -> "hxxp://www.initialsite123.com/?z=b94309e11b793756a600a2cg8z1tczct1m6g4o1tdz&from=icb&uid=3219913727_526057_8E5C3B48&type=hp" CHR DefaultSearchURL: Default -> hxxp://navsmart.info/search?q={searchTerms} CHR DefaultSearchKeyword: Default -> {searchterms} CHR HKU\S-1-5-21-941062246-4019233677-694128654-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [mjbepbhonbojpoaenhckjocchgfiaofo] - hxxps://clients2.google.com/service/update2/crx S2 BIT; C:\ProgramData\BIT\BIT.dll [X] <==== ATTENTION Task: {62ACDF13-E122-4FA6-BF6C-7A35800D8DAC} - \Microsoft\Windows\DeviceSettings\Niculyigerent -> No File <==== ATTENTION Task: {733CF82A-069B-4652-B94D-DF93D2E99B94} - System32\Tasks\watchdog2 => C:\Windows\System32\Drivers\UMDF\run2.bat [2016-07-28] () <==== ATTENTION FirewallRules: [TCP Query User{D0414E82-93CC-4189-ACAA-6775475B5463}C:\users\amin addow\appdata\roaming\acestream\engine\ace_engine.exe] => (Allow) C:\users\amin addow\appdata\roaming\acestream\engine\ace_engine.exe FirewallRules: [UDP Query User{7BB7309C-063B-4DEA-B988-C3E9909A6827}C:\users\amin addow\appdata\roaming\acestream\engine\ace_engine.exe] => (Allow) C:\users\amin addow\appdata\roaming\acestream\engine\ace_engine.exe C:\Program Files\0EBDV8HZKL C:\ProgramData\agent.1494972023.bdinstall.bin C:\ProgramData\agent.1495136354.bdinstall.bin C:\ProgramData\agent.1495136363.bdinstall.bin C:\ProgramData\agent.1495143774.bdinstall.bin C:\ProgramData\agent.uninstall.1495030377.bdinstall.bin C:\ProgramData\agent.update.1494973243.bdinstall.bin C:\ProgramData\igfxDH.dll C:\ProgramData\BIT C:\Users\Amin Addow\AppData\Roaming\ACEStream C:\Windows\System32\Drivers\UMDF\run2.bat EmptyTemp: ***************** Processes closed successfully. Restore point was successfully created. HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\00asw => key not found. HKCR\CLSID\{472083B0-C522-11CF-8763-00608CC02F24} => key not found. C:\Users\Amin Addow\AppData\Roaming\ACEStream\extensions\awe\firefox\acewebextension_unlisted.xpi => not found. HKU\S-1-5-21-941062246-4019233677-694128654-1001\Software\MozillaPlugins\@acestream.net/acestreamplugin,version=3.1.1 => key not found. C:\Users\Amin Addow\AppData\Roaming\ACEStream\player\npace_plugin.dll => not found. Chrome StartupUrls => removed successfully Chrome DefaultSearchURL => not found. Chrome DefaultSearchKeyword => not found. HKU\S-1-5-21-941062246-4019233677-694128654-1001\SOFTWARE\Google\Chrome\Extensions\mjbepbhonbojpoaenhckjocchgfiaofo => key not found. BIT => service not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{62ACDF13-E122-4FA6-BF6C-7A35800D8DAC} => key not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\DeviceSettings\Niculyigerent => key not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{733CF82A-069B-4652-B94D-DF93D2E99B94} => key not found. C:\WINDOWS\System32\Tasks\watchdog2 => not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\watchdog2 => key not found. HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{D0414E82-93CC-4189-ACAA-6775475B5463}C:\users\amin addow\appdata\roaming\acestream\engine\ace_engine.exe => value not found. HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{7BB7309C-063B-4DEA-B988-C3E9909A6827}C:\users\amin addow\appdata\roaming\acestream\engine\ace_engine.exe => value not found. "C:\Program Files\0EBDV8HZKL" => not found. "C:\ProgramData\agent.1494972023.bdinstall.bin" => not found. "C:\ProgramData\agent.1495136354.bdinstall.bin" => not found. "C:\ProgramData\agent.1495136363.bdinstall.bin" => not found. "C:\ProgramData\agent.1495143774.bdinstall.bin" => not found. "C:\ProgramData\agent.uninstall.1495030377.bdinstall.bin" => not found. "C:\ProgramData\agent.update.1494973243.bdinstall.bin" => not found. "C:\ProgramData\igfxDH.dll" => not found. "C:\ProgramData\BIT" => not found. "C:\Users\Amin Addow\AppData\Roaming\ACEStream" => not found. "C:\Windows\System32\Drivers\UMDF\run2.bat" => not found. =========== EmptyTemp: ========== BITS transfer queue => 12345344 B DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 7362616 B Java, Flash, Steam htmlcache => 138240 B Windows/system/drivers => 7449376 B Edge => 0 B Chrome => 16477021 B Firefox => 0 B Opera => 0 B Temp, IE cache, history, cookies, recent: Default => 0 B Users => 0 B ProgramData => 0 B Public => 0 B systemprofile => 0 B systemprofile32 => 0 B LocalService => 830 B NetworkService => 0 B defaultuser0 => 0 B Amin Addow => 13036402 B RecycleBin => 0 B EmptyTemp: => 54.2 MB temporary data Removed. ================================ The system needed a reboot. ==== End of Fixlog 19:15:26 ====

Here: Addition.txt FRST.txt

Hi @Aura @nikhils Looks like I'm still infected. I've run malwarebytes and McAfee where both come back clean. Malwarebytes is also blocking the same IP that's trying to connect to my computer, even tho I'm not able to use the internet. What can I do?

Thank you. It worked. Superb support. 10/10!

Here they are:

Here it is: signatures.txt