Kaizoku-Otaku

There is no need for further assistance. I decided to just reset everything, it went fast and I am already up and running. Thank you for everything, I appreciate all the help you gave me!

Okay, I am in the middle of the scan.

I ran a scan with ADW and it still shows 18 threats, this is not giving any results...

I did a scan with Kaspersky and nothing noteworthy came up. As for Rogue Killer, oh boy, all kind of thing came up there. RogueKiller log.txt

We already did one not too long ago. So I am sure that's not the case.

Yup, I already did the firewall resetting and rebooted the system. Still, nothing

Now that you mention it, my memory is still really great even after how much I have used the PC. That said, the threats are still there, is there nothing I can do about them?

Okay, here you go. TDSSKiller.3.1.0.17_21.07.2018_14.46.14_log.txt TDSSKiller.3.1.0.17_21.07.2018_14.38.11_log.txt

So I ran the software, and it found 3 threats as listed below: C:\Program Files (x86)\Magical Jelly Bean\keyfinder.exe a variant of Win32/MagicalJellyBean.B potentially unsafe application cleaned by deleting C:\Windows\System32\drivers\NFC_Driver.sys a variant of Win64/NetFilter.A potentially unsafe application cleaned by deleting D:\My Documents - HDD\My Filehippo Downloads\ccsetup529.exe Win32/Bundled.Toolbar.Google.D potentially unsafe application cleaned by deleting

Okay, here you go. Hopefully, we are nearing an answer. FRST.txt Addition.txt

Sorry about the lack of reply, I was sleeping since it was over midnight here. Anyways, I did the steps you asked without any form of luck, the treats are still there. As for this path "c:\program files (x86)\system native\main services\service.exe", I only found the "system native" folder and inside it was empty, I even double chcked if file explorer was hiding hidden files, but still no luck. # ------------------------------- # Malwarebytes AdwCleaner 7.2.2.0 # ------------------------------- # Build: 07-17-2018 # Database: 2018-07-19.1 # Support: https://www.malwarebytes.com/support # # ------------------------------- # Mode: Clean # ------------------------------- # Start: 07-20-2018 # Duration: 00:00:01 # OS: Windows 10 Pro # Cleaned: 18 # Failed: 0 ***** [ Services ] ***** No malicious services cleaned. ***** [ Folders ] ***** No malicious folders cleaned. ***** [ Files ] ***** No malicious files cleaned. ***** [ DLL ] ***** No malicious DLLs cleaned. ***** [ WMI ] ***** No malicious WMI cleaned. ***** [ Shortcuts ] ***** No malicious shortcuts cleaned. ***** [ Tasks ] ***** No malicious tasks cleaned. ***** [ Registry ] ***** Deleted HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|{078C70C8-4C07-4BA0-B188-2559803FFCA0} Deleted HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|{9BB27663-E0AF-47E8-9688-D4BAF8BC30EC} Deleted HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|{E867D627-E17F-44D1-8202-4D0C8AA524DF} Deleted HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|{7BAA3ECA-E729-4BE2-94D6-BEC5C90FC40E} Deleted HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|{1604747C-4256-4FDE-9BBE-24CD174BDC67} Deleted HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|{B9148DEC-B0A2-4C08-B3A4-8413ED6FA813} Deleted HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|{FB02EB40-CCB8-4090-A506-459EDFB8A6A3} Deleted HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|{8CE75110-6D33-4AE5-A98D-B8985C22774C} Deleted HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|{16790C14-FE2C-48EE-85D2-1105B3C4B75D} Deleted HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|{EE89BBDD-91FF-4883-9123-5532623667D3} Deleted HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|{1014A245-7281-4DC9-8233-29DF5357F364} Deleted HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|{D95EE72C-C283-4B39-B380-DE762C49E5F5} Deleted HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|{584CC972-5D56-4C76-9118-22B4E9B07DA2} Deleted HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|{DD5E3917-D207-4B71-8A4E-F4C34904F034} Deleted HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|{8725E405-D2BE-4511-B233-365CB7FDE44F} Deleted HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|{362BEB87-B40D-4BC3-9F21-55017A1551CF} Deleted HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|{8ED82A56-454A-472E-96A8-8367FCC73421} Deleted HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|{310C8128-BF75-4058-85CD-3C452934FCA9} ***** [ Chromium (and derivatives) ] ***** No malicious Chromium entries cleaned. ***** [ Chromium URLs ] ***** No malicious Chromium URLs cleaned. ***** [ Firefox (and derivatives) ] ***** No malicious Firefox entries cleaned. ***** [ Firefox URLs ] ***** No malicious Firefox URLs cleaned. ************************* [+] Delete Tracing Keys [+] Reset Winsock ************************* AdwCleaner[S00].txt - [4431 octets] - [28/06/2018 16:22:08] AdwCleaner[C00].txt - [4159 octets] - [28/06/2018 16:22:39] AdwCleaner[S01].txt - [1375 octets] - [28/06/2018 16:25:12] AdwCleaner[C01].txt - [1541 octets] - [28/06/2018 16:25:24] AdwCleaner[S02].txt - [1485 octets] - [28/06/2018 16:27:34] AdwCleaner[S03].txt - [1546 octets] - [28/06/2018 16:28:03] AdwCleaner[S04].txt - [4522 octets] - [28/06/2018 16:39:04] AdwCleaner[S05].txt - [4583 octets] - [28/06/2018 16:58:16] AdwCleaner[S06].txt - [2775 octets] - [30/06/2018 16:38:36] AdwCleaner[S07].txt - [4805 octets] - [04/07/2018 16:06:51] AdwCleaner[C07].txt - [4647 octets] - [04/07/2018 16:07:14] AdwCleaner[S08].txt - [1912 octets] - [04/07/2018 16:08:06] AdwCleaner[S09].txt - [1973 octets] - [04/07/2018 16:26:08] AdwCleaner[S10].txt - [4949 octets] - [04/07/2018 16:36:27] AdwCleaner[S11].txt - [5010 octets] - [07/07/2018 12:44:18] AdwCleaner[S12].txt - [5071 octets] - [07/07/2018 12:46:19] AdwCleaner[S13].txt - [4148 octets] - [07/07/2018 13:06:52] AdwCleaner[C13].txt - [4116 octets] - [07/07/2018 13:07:12] AdwCleaner[S14].txt - [2629 octets] - [07/07/2018 13:10:20] AdwCleaner[C14].txt - [2777 octets] - [07/07/2018 13:10:28] AdwCleaner[S15].txt - [2461 octets] - [07/07/2018 13:13:28] AdwCleaner[S16].txt - [5437 octets] - [07/07/2018 13:38:19] AdwCleaner[S17].txt - [5498 octets] - [07/07/2018 14:35:04] AdwCleaner[S18].txt - [5598 octets] - [07/07/2018 14:38:31] AdwCleaner[S19].txt - [5659 octets] - [07/07/2018 15:44:04] AdwCleaner[C19].txt - [5481 octets] - [07/07/2018 15:49:43] AdwCleaner[S20].txt - [5125 octets] - [07/07/2018 15:53:41] AdwCleaner[S21].txt - [5678 octets] - [07/07/2018 15:57:33] AdwCleaner[C21].txt - [5518 octets] - [07/07/2018 15:57:46] AdwCleaner[S22].txt - [3010 octets] - [07/07/2018 16:01:02] AdwCleaner[S23].txt - [5658 octets] - [07/07/2018 16:03:12] AdwCleaner[S24].txt - [5719 octets] - [07/07/2018 16:03:40] AdwCleaner[S25].txt - [6108 octets] - [07/07/2018 17:16:32] AdwCleaner[S26].txt - [6169 octets] - [10/07/2018 14:00:17] AdwCleaner[S27].txt - [6330 octets] - [11/07/2018 20:55:29] AdwCleaner[S28].txt - [6391 octets] - [12/07/2018 14:00:49] AdwCleaner[C28].txt - [6233 octets] - [12/07/2018 14:00:57] AdwCleaner[S29].txt - [3498 octets] - [12/07/2018 14:04:22] AdwCleaner[S30].txt - [3849 octets] - [12/07/2018 14:04:52] AdwCleaner[S31].txt - [5879 octets] - [12/07/2018 14:05:18] AdwCleaner[S32].txt - [6596 octets] - [13/07/2018 10:34:07] AdwCleaner[S33].txt - [6657 octets] - [14/07/2018 05:15:44] AdwCleaner[S34].txt - [4749 octets] - [14/07/2018 13:20:25] AdwCleaner[S35].txt - [6779 octets] - [17/07/2018 15:08:17] AdwCleaner[S36].txt - [3925 octets] - [17/07/2018 16:12:46] AdwCleaner[S37].txt - [3986 octets] - [17/07/2018 16:19:28] AdwCleaner[S38].txt - [4047 octets] - [17/07/2018 16:20:08] AdwCleaner[C38].txt - [4233 octets] - [17/07/2018 16:20:11] AdwCleaner[S39].txt - [7084 octets] - [17/07/2018 16:45:11] AdwCleaner[S40].txt - [7145 octets] - [17/07/2018 20:25:00] AdwCleaner[S41].txt - [7206 octets] - [19/07/2018 14:21:38] AdwCleaner[S42].txt - [7267 octets] - [19/07/2018 17:34:04] AdwCleaner[S43].txt - [7328 octets] - [19/07/2018 21:41:54] AdwCleaner[C43].txt - [7188 octets] - [19/07/2018 21:42:04] AdwCleaner[S44].txt - [7450 octets] - [19/07/2018 21:56:47] AdwCleaner[S45].txt - [7511 octets] - [19/07/2018 22:57:44] AdwCleaner[S46].txt - [7572 octets] - [19/07/2018 23:18:53] AdwCleaner[S47].txt - [7633 octets] - [19/07/2018 23:30:12] AdwCleaner[C47].txt - [7493 octets] - [19/07/2018 23:31:09] AdwCleaner[S48].txt - [7755 octets] - [19/07/2018 23:44:06] AdwCleaner[S49].txt - [7816 octets] - [20/07/2018 10:31:11] ########## EOF - C:\AdwCleaner\Logs\AdwCleaner[C49].txt ##########

wow, I am so sorry, I forgot it again... # ------------------------------- # Malwarebytes AdwCleaner 7.2.2.0 # ------------------------------- # Build: 07-17-2018 # Database: 2018-07-19.1 # Support: https://www.malwarebytes.com/support # # ------------------------------- # Mode: Clean # ------------------------------- # Start: 07-19-2018 # Duration: 00:00:04 # OS: Windows 10 Pro # Cleaned: 18 # Failed: 0 ***** [ Services ] ***** No malicious services cleaned. ***** [ Folders ] ***** No malicious folders cleaned. ***** [ Files ] ***** No malicious files cleaned. ***** [ DLL ] ***** No malicious DLLs cleaned. ***** [ WMI ] ***** No malicious WMI cleaned. ***** [ Shortcuts ] ***** No malicious shortcuts cleaned. ***** [ Tasks ] ***** No malicious tasks cleaned. ***** [ Registry ] ***** Deleted HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|{FA453310-0EAB-4813-AB8E-1FD99F0B5178} Deleted HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|{A272C53B-646A-4963-A3C6-5C3F673C8FB3} Deleted HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|{B2733577-4BE1-416A-B45C-A6EA6883141A} Deleted HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|{5F7DBB24-08B3-4E49-B66A-83267F853B3D} Deleted HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|{7248CEA9-FAD2-4F12-A8D6-FE08B5F4F53D} Deleted HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|{F43C568C-7CF7-4028-803B-DAB2EBD1DE7F} Deleted HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|{57946D8C-F1C2-46E9-9CCC-BC0A133EEB08} Deleted HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|{2D3EA268-9354-4E5B-906D-15E38393E585} Deleted HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|{C3BC7A33-C0CE-4F5A-8D76-C438AC0801D5} Deleted HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|{9D636984-C4E3-4552-B930-B3606B4482AD} Deleted HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|{653BB576-9DCF-4E86-842B-2415B8D8F5B2} Deleted HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|{73666311-19F2-458E-8B75-B817AA0692D6} Deleted HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|{0243B610-AAAC-45D0-AF78-0C7B19C7688D} Deleted HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|{19767D2A-33CD-4EEA-8C19-1DEBE3754CF1} Deleted HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|{9FC98393-15FA-48DE-A162-9BBF79163433} Deleted HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|{82A84825-8739-413F-9A83-86213319C038} Deleted HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|{3A490250-5D5E-4C43-BBAA-1295190AC45C} Deleted HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|{BB32C489-5D97-41C4-A551-9A7EDFA3AB38} ***** [ Chromium (and derivatives) ] ***** No malicious Chromium entries cleaned. ***** [ Chromium URLs ] ***** No malicious Chromium URLs cleaned. ***** [ Firefox (and derivatives) ] ***** No malicious Firefox entries cleaned. ***** [ Firefox URLs ] ***** No malicious Firefox URLs cleaned. ************************* [+] Delete Tracing Keys [+] Reset Winsock ************************* AdwCleaner[S00].txt - [4431 octets] - [28/06/2018 16:22:08] AdwCleaner[C00].txt - [4159 octets] - [28/06/2018 16:22:39] AdwCleaner[S01].txt - [1375 octets] - [28/06/2018 16:25:12] AdwCleaner[C01].txt - [1541 octets] - [28/06/2018 16:25:24] AdwCleaner[S02].txt - [1485 octets] - [28/06/2018 16:27:34] AdwCleaner[S03].txt - [1546 octets] - [28/06/2018 16:28:03] AdwCleaner[S04].txt - [4522 octets] - [28/06/2018 16:39:04] AdwCleaner[S05].txt - [4583 octets] - [28/06/2018 16:58:16] AdwCleaner[S06].txt - [2775 octets] - [30/06/2018 16:38:36] AdwCleaner[S07].txt - [4805 octets] - [04/07/2018 16:06:51] AdwCleaner[C07].txt - [4647 octets] - [04/07/2018 16:07:14] AdwCleaner[S08].txt - [1912 octets] - [04/07/2018 16:08:06] AdwCleaner[S09].txt - [1973 octets] - [04/07/2018 16:26:08] AdwCleaner[S10].txt - [4949 octets] - [04/07/2018 16:36:27] AdwCleaner[S11].txt - [5010 octets] - [07/07/2018 12:44:18] AdwCleaner[S12].txt - [5071 octets] - [07/07/2018 12:46:19] AdwCleaner[S13].txt - [4148 octets] - [07/07/2018 13:06:52] AdwCleaner[C13].txt - [4116 octets] - [07/07/2018 13:07:12] AdwCleaner[S14].txt - [2629 octets] - [07/07/2018 13:10:20] AdwCleaner[C14].txt - [2777 octets] - [07/07/2018 13:10:28] AdwCleaner[S15].txt - [2461 octets] - [07/07/2018 13:13:28] AdwCleaner[S16].txt - [5437 octets] - [07/07/2018 13:38:19] AdwCleaner[S17].txt - [5498 octets] - [07/07/2018 14:35:04] AdwCleaner[S18].txt - [5598 octets] - [07/07/2018 14:38:31] AdwCleaner[S19].txt - [5659 octets] - [07/07/2018 15:44:04] AdwCleaner[C19].txt - [5481 octets] - [07/07/2018 15:49:43] AdwCleaner[S20].txt - [5125 octets] - [07/07/2018 15:53:41] AdwCleaner[S21].txt - [5678 octets] - [07/07/2018 15:57:33] AdwCleaner[C21].txt - [5518 octets] - [07/07/2018 15:57:46] AdwCleaner[S22].txt - [3010 octets] - [07/07/2018 16:01:02] AdwCleaner[S23].txt - [5658 octets] - [07/07/2018 16:03:12] AdwCleaner[S24].txt - [5719 octets] - [07/07/2018 16:03:40] AdwCleaner[S25].txt - [6108 octets] - [07/07/2018 17:16:32] AdwCleaner[S26].txt - [6169 octets] - [10/07/2018 14:00:17] AdwCleaner[S27].txt - [6330 octets] - [11/07/2018 20:55:29] AdwCleaner[S28].txt - [6391 octets] - [12/07/2018 14:00:49] AdwCleaner[C28].txt - [6233 octets] - [12/07/2018 14:00:57] AdwCleaner[S29].txt - [3498 octets] - [12/07/2018 14:04:22] AdwCleaner[S30].txt - [3849 octets] - [12/07/2018 14:04:52] AdwCleaner[S31].txt - [5879 octets] - [12/07/2018 14:05:18] AdwCleaner[S32].txt - [6596 octets] - [13/07/2018 10:34:07] AdwCleaner[S33].txt - [6657 octets] - [14/07/2018 05:15:44] AdwCleaner[S34].txt - [4749 octets] - [14/07/2018 13:20:25] AdwCleaner[S35].txt - [6779 octets] - [17/07/2018 15:08:17] AdwCleaner[S36].txt - [3925 octets] - [17/07/2018 16:12:46] AdwCleaner[S37].txt - [3986 octets] - [17/07/2018 16:19:28] AdwCleaner[S38].txt - [4047 octets] - [17/07/2018 16:20:08] AdwCleaner[C38].txt - [4233 octets] - [17/07/2018 16:20:11] AdwCleaner[S39].txt - [7084 octets] - [17/07/2018 16:45:11] AdwCleaner[S40].txt - [7145 octets] - [17/07/2018 20:25:00] AdwCleaner[S41].txt - [7206 octets] - [19/07/2018 14:21:38] AdwCleaner[S42].txt - [7267 octets] - [19/07/2018 17:34:04] AdwCleaner[S43].txt - [7328 octets] - [19/07/2018 21:41:54] AdwCleaner[C43].txt - [7188 octets] - [19/07/2018 21:42:04] AdwCleaner[S44].txt - [7450 octets] - [19/07/2018 21:56:47] AdwCleaner[S45].txt - [7511 octets] - [19/07/2018 22:57:44] AdwCleaner[S46].txt - [7572 octets] - [19/07/2018 23:18:53] AdwCleaner[S47].txt - [7633 octets] - [19/07/2018 23:30:12] ########## EOF - C:\AdwCleaner\Logs\AdwCleaner[C47].txt ##########

Oh, sorry a mistake on my end. Anyways, it still doesn't look good, but here you have the new logs... PS: I removed the tweaking software as well. FRST.txt Addition.txt Malwarebyte log.txt

Of course, I am fully aware that reinstalling Windows is the very best solution, but it's also the most troublesome since I would have to set up everything up again from scratch, which wants to avoid if at all possible since I don't have the time to set up everything back up again. As for Qbittorent, I am sure it's not the cause for the problem, and I really need it so I don't want to uninstall if possible. I didn't catch quite catch what you meant when you were referring to Windows Repair tool, should I use it or uninstall it? PS: I removed everything you listed above, apart from Qbitorrent.

Sorry about the misunderstanding, I was able to find the latest clean log from within ADW Cleaner. # ------------------------------- # Malwarebytes AdwCleaner 7.2.2.0 # ------------------------------- # Build: 07-17-2018 # Database: 2018-07-19.1 # Support: https://www.malwarebytes.com/support # # ------------------------------- # Mode: Clean # ------------------------------- # Start: 07-19-2018 # Duration: 00:00:05 # OS: Windows 10 Pro # Cleaned: 18 # Failed: 0 ***** [ Services ] ***** No malicious services cleaned. ***** [ Folders ] ***** No malicious folders cleaned. ***** [ Files ] ***** No malicious files cleaned. ***** [ DLL ] ***** No malicious DLLs cleaned. ***** [ WMI ] ***** No malicious WMI cleaned. ***** [ Shortcuts ] ***** No malicious shortcuts cleaned. ***** [ Tasks ] ***** No malicious tasks cleaned. ***** [ Registry ] ***** Deleted HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|{791321D2-9B5B-4156-8ACC-FA33F1FBAC22} Deleted HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|{1428793A-2CFB-4C2D-A0AA-9C7FFE9A9221} Deleted HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|{2138DB37-4E55-4E85-8453-200C7CABEC14} Deleted HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|{998BACAB-5664-456B-8157-55B6416924A3} Deleted HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|{88FF640B-4D6C-46A9-9BCD-0EBE29D5A3F5} Deleted HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|{3CAFEB6B-1556-41B9-98B2-CBD8B8E6F013} Deleted HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|{C8B89D50-80EA-4D98-8241-A29782D94609} Deleted HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|{BFA2C100-23A9-40B1-B4C0-BA79A95769A6} Deleted HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|{06AE709C-778D-43D6-AA60-C52019C16C87} Deleted HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|{F610F940-5D92-4A92-929F-BC7AB0FFFA62} Deleted HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|{79DE5C3E-A8BA-47B5-AE82-6D4D2F595306} Deleted HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|{2B7A5B49-D5E4-4C2E-8801-19BD43CD7C6D} Deleted HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|{60F254AC-E6E4-41E7-B6E2-25DCB5D88D65} Deleted HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|{8B779F9D-4DE4-4146-A504-71594C99F7C5} Deleted HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|{DB988A8A-BCAD-4825-A527-969E99693210} Deleted HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|{857C4A40-DB50-4D1A-908D-20B0D06E390B} Deleted HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|{B3301F29-1487-4128-9546-167C2CC9DCED} Deleted HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|{F3277295-888F-4F86-B93D-6003967874EF} ***** [ Chromium (and derivatives) ] ***** No malicious Chromium entries cleaned. ***** [ Chromium URLs ] ***** No malicious Chromium URLs cleaned. ***** [ Firefox (and derivatives) ] ***** No malicious Firefox entries cleaned. ***** [ Firefox URLs ] ***** No malicious Firefox URLs cleaned. ************************* [+] Delete Tracing Keys [+] Reset Winsock ************************* AdwCleaner[S00].txt - [4431 octets] - [28/06/2018 16:22:08] AdwCleaner[C00].txt - [4159 octets] - [28/06/2018 16:22:39] AdwCleaner[S01].txt - [1375 octets] - [28/06/2018 16:25:12] AdwCleaner[C01].txt - [1541 octets] - [28/06/2018 16:25:24] AdwCleaner[S02].txt - [1485 octets] - [28/06/2018 16:27:34] AdwCleaner[S03].txt - [1546 octets] - [28/06/2018 16:28:03] AdwCleaner[S04].txt - [4522 octets] - [28/06/2018 16:39:04] AdwCleaner[S05].txt - [4583 octets] - [28/06/2018 16:58:16] AdwCleaner[S06].txt - [2775 octets] - [30/06/2018 16:38:36] AdwCleaner[S07].txt - [4805 octets] - [04/07/2018 16:06:51] AdwCleaner[C07].txt - [4647 octets] - [04/07/2018 16:07:14] AdwCleaner[S08].txt - [1912 octets] - [04/07/2018 16:08:06] AdwCleaner[S09].txt - [1973 octets] - [04/07/2018 16:26:08] AdwCleaner[S10].txt - [4949 octets] - [04/07/2018 16:36:27] AdwCleaner[S11].txt - [5010 octets] - [07/07/2018 12:44:18] AdwCleaner[S12].txt - [5071 octets] - [07/07/2018 12:46:19] AdwCleaner[S13].txt - [4148 octets] - [07/07/2018 13:06:52] AdwCleaner[C13].txt - [4116 octets] - [07/07/2018 13:07:12] AdwCleaner[S14].txt - [2629 octets] - [07/07/2018 13:10:20] AdwCleaner[C14].txt - [2777 octets] - [07/07/2018 13:10:28] AdwCleaner[S15].txt - [2461 octets] - [07/07/2018 13:13:28] AdwCleaner[S16].txt - [5437 octets] - [07/07/2018 13:38:19] AdwCleaner[S17].txt - [5498 octets] - [07/07/2018 14:35:04] AdwCleaner[S18].txt - [5598 octets] - [07/07/2018 14:38:31] AdwCleaner[S19].txt - [5659 octets] - [07/07/2018 15:44:04] AdwCleaner[C19].txt - [5481 octets] - [07/07/2018 15:49:43] AdwCleaner[S20].txt - [5125 octets] - [07/07/2018 15:53:41] AdwCleaner[S21].txt - [5678 octets] - [07/07/2018 15:57:33] AdwCleaner[C21].txt - [5518 octets] - [07/07/2018 15:57:46] AdwCleaner[S22].txt - [3010 octets] - [07/07/2018 16:01:02] AdwCleaner[S23].txt - [5658 octets] - [07/07/2018 16:03:12] AdwCleaner[S24].txt - [5719 octets] - [07/07/2018 16:03:40] AdwCleaner[S25].txt - [6108 octets] - [07/07/2018 17:16:32] AdwCleaner[S26].txt - [6169 octets] - [10/07/2018 14:00:17] AdwCleaner[S27].txt - [6330 octets] - [11/07/2018 20:55:29] AdwCleaner[S28].txt - [6391 octets] - [12/07/2018 14:00:49] AdwCleaner[C28].txt - [6233 octets] - [12/07/2018 14:00:57] AdwCleaner[S29].txt - [3498 octets] - [12/07/2018 14:04:22] AdwCleaner[S30].txt - [3849 octets] - [12/07/2018 14:04:52] AdwCleaner[S31].txt - [5879 octets] - [12/07/2018 14:05:18] AdwCleaner[S32].txt - [6596 octets] - [13/07/2018 10:34:07] AdwCleaner[S33].txt - [6657 octets] - [14/07/2018 05:15:44] AdwCleaner[S34].txt - [4749 octets] - [14/07/2018 13:20:25] AdwCleaner[S35].txt - [6779 octets] - [17/07/2018 15:08:17] AdwCleaner[S36].txt - [3925 octets] - [17/07/2018 16:12:46] AdwCleaner[S37].txt - [3986 octets] - [17/07/2018 16:19:28] AdwCleaner[S38].txt - [4047 octets] - [17/07/2018 16:20:08] AdwCleaner[C38].txt - [4233 octets] - [17/07/2018 16:20:11] AdwCleaner[S39].txt - [7084 octets] - [17/07/2018 16:45:11] AdwCleaner[S40].txt - [7145 octets] - [17/07/2018 20:25:00] AdwCleaner[S41].txt - [7206 octets] - [19/07/2018 14:21:38] AdwCleaner[S42].txt - [7267 octets] - [19/07/2018 17:34:04] AdwCleaner[S43].txt - [7328 octets] - [19/07/2018 21:41:54] ########## EOF - C:\AdwCleaner\Logs\AdwCleaner[C43].txt ##########

I didn't get any ADW log upon rebooting into Windows. However, I was able to find what seems to be like the latest log for ADW. Hope this helps. # ------------------------------- # Malwarebytes AdwCleaner 7.2.2.0 # ------------------------------- # Build: 07-17-2018 # Database: 2018-07-19.1 # Support: https://www.malwarebytes.com/support # # ------------------------------- # Mode: Scan # ------------------------------- # Start: 07-19-2018 # Duration: 00:00:14 # OS: Windows 10 Pro # Scanned: 41772 # Detected: 18 ***** [ Services ] ***** No malicious services found. ***** [ Folders ] ***** No malicious folders found. ***** [ Files ] ***** No malicious files found. ***** [ DLL ] ***** No malicious DLLs found. ***** [ WMI ] ***** No malicious WMI found. ***** [ Shortcuts ] ***** No malicious shortcuts found. ***** [ Tasks ] ***** No malicious tasks found. ***** [ Registry ] ***** PUP.Optional.Legacy HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|{FA453310-0EAB-4813-AB8E-1FD99F0B5178} PUP.Optional.Legacy HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|{A272C53B-646A-4963-A3C6-5C3F673C8FB3} PUP.Optional.Legacy HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|{B2733577-4BE1-416A-B45C-A6EA6883141A} PUP.Optional.Legacy HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|{5F7DBB24-08B3-4E49-B66A-83267F853B3D} PUP.Optional.Legacy HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|{7248CEA9-FAD2-4F12-A8D6-FE08B5F4F53D} PUP.Optional.Legacy HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|{F43C568C-7CF7-4028-803B-DAB2EBD1DE7F} PUP.Optional.Legacy HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|{57946D8C-F1C2-46E9-9CCC-BC0A133EEB08} PUP.Optional.Legacy HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|{2D3EA268-9354-4E5B-906D-15E38393E585} PUP.Optional.Legacy HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|{C3BC7A33-C0CE-4F5A-8D76-C438AC0801D5} PUP.Optional.Legacy HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|{9D636984-C4E3-4552-B930-B3606B4482AD} PUP.Optional.Legacy HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|{653BB576-9DCF-4E86-842B-2415B8D8F5B2} PUP.Optional.Legacy HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|{73666311-19F2-458E-8B75-B817AA0692D6} Trojan.Agent HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|{0243B610-AAAC-45D0-AF78-0C7B19C7688D} Trojan.Agent HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|{19767D2A-33CD-4EEA-8C19-1DEBE3754CF1} Trojan.Agent HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|{9FC98393-15FA-48DE-A162-9BBF79163433} Trojan.Agent HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|{82A84825-8739-413F-9A83-86213319C038} Trojan.Agent HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|{3A490250-5D5E-4C43-BBAA-1295190AC45C} Trojan.Agent HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|{BB32C489-5D97-41C4-A551-9A7EDFA3AB38} ***** [ Chromium (and derivatives) ] ***** No malicious Chromium entries found. ***** [ Chromium URLs ] ***** No malicious Chromium URLs found. ***** [ Firefox (and derivatives) ] ***** No malicious Firefox entries found. ***** [ Firefox URLs ] ***** No malicious Firefox URLs found. AdwCleaner[S00].txt - [4431 octets] - [28/06/2018 16:22:08] AdwCleaner[C00].txt - [4159 octets] - [28/06/2018 16:22:39] AdwCleaner[S01].txt - [1375 octets] - [28/06/2018 16:25:12] AdwCleaner[C01].txt - [1541 octets] - [28/06/2018 16:25:24] AdwCleaner[S02].txt - [1485 octets] - [28/06/2018 16:27:34] AdwCleaner[S03].txt - [1546 octets] - [28/06/2018 16:28:03] AdwCleaner[S04].txt - [4522 octets] - [28/06/2018 16:39:04] AdwCleaner[S05].txt - [4583 octets] - [28/06/2018 16:58:16] AdwCleaner[S06].txt - [2775 octets] - [30/06/2018 16:38:36] AdwCleaner[S07].txt - [4805 octets] - [04/07/2018 16:06:51] AdwCleaner[C07].txt - [4647 octets] - [04/07/2018 16:07:14] AdwCleaner[S08].txt - [1912 octets] - [04/07/2018 16:08:06] AdwCleaner[S09].txt - [1973 octets] - [04/07/2018 16:26:08] AdwCleaner[S10].txt - [4949 octets] - [04/07/2018 16:36:27] AdwCleaner[S11].txt - [5010 octets] - [07/07/2018 12:44:18] AdwCleaner[S12].txt - [5071 octets] - [07/07/2018 12:46:19] AdwCleaner[S13].txt - [4148 octets] - [07/07/2018 13:06:52] AdwCleaner[C13].txt - [4116 octets] - [07/07/2018 13:07:12] AdwCleaner[S14].txt - [2629 octets] - [07/07/2018 13:10:20] AdwCleaner[C14].txt - [2777 octets] - [07/07/2018 13:10:28] AdwCleaner[S15].txt - [2461 octets] - [07/07/2018 13:13:28] AdwCleaner[S16].txt - [5437 octets] - [07/07/2018 13:38:19] AdwCleaner[S17].txt - [5498 octets] - [07/07/2018 14:35:04] AdwCleaner[S18].txt - [5598 octets] - [07/07/2018 14:38:31] AdwCleaner[S19].txt - [5659 octets] - [07/07/2018 15:44:04] AdwCleaner[C19].txt - [5481 octets] - [07/07/2018 15:49:43] AdwCleaner[S20].txt - [5125 octets] - [07/07/2018 15:53:41] AdwCleaner[S21].txt - [5678 octets] - [07/07/2018 15:57:33] AdwCleaner[C21].txt - [5518 octets] - [07/07/2018 15:57:46] AdwCleaner[S22].txt - [3010 octets] - [07/07/2018 16:01:02] AdwCleaner[S23].txt - [5658 octets] - [07/07/2018 16:03:12] AdwCleaner[S24].txt - [5719 octets] - [07/07/2018 16:03:40] AdwCleaner[S25].txt - [6108 octets] - [07/07/2018 17:16:32] AdwCleaner[S26].txt - [6169 octets] - [10/07/2018 14:00:17] AdwCleaner[S27].txt - [6330 octets] - [11/07/2018 20:55:29] AdwCleaner[S28].txt - [6391 octets] - [12/07/2018 14:00:49] AdwCleaner[C28].txt - [6233 octets] - [12/07/2018 14:00:57] AdwCleaner[S29].txt - [3498 octets] - [12/07/2018 14:04:22] AdwCleaner[S30].txt - [3849 octets] - [12/07/2018 14:04:52] AdwCleaner[S31].txt - [5879 octets] - [12/07/2018 14:05:18] AdwCleaner[S32].txt - [6596 octets] - [13/07/2018 10:34:07] AdwCleaner[S33].txt - [6657 octets] - [14/07/2018 05:15:44] AdwCleaner[S34].txt - [4749 octets] - [14/07/2018 13:20:25] AdwCleaner[S35].txt - [6779 octets] - [17/07/2018 15:08:17] AdwCleaner[S36].txt - [3925 octets] - [17/07/2018 16:12:46] AdwCleaner[S37].txt - [3986 octets] - [17/07/2018 16:19:28] AdwCleaner[S38].txt - [4047 octets] - [17/07/2018 16:20:08] AdwCleaner[C38].txt - [4233 octets] - [17/07/2018 16:20:11] AdwCleaner[S39].txt - [7084 octets] - [17/07/2018 16:45:11] AdwCleaner[S40].txt - [7145 octets] - [17/07/2018 20:25:00] AdwCleaner[S41].txt - [7206 octets] - [19/07/2018 14:21:38] AdwCleaner[S42].txt - [7267 octets] - [19/07/2018 17:34:04] AdwCleaner[S43].txt - [7328 octets] - [19/07/2018 21:41:54] AdwCleaner[C43].txt - [7188 octets] - [19/07/2018 21:42:04] ########## EOF - C:\AdwCleaner\Logs\AdwCleaner[S44].txt ##########

Okay, I did exactly as you asked, and ran all tree software. ADW detected 18 threats Pup.optional.Legacy and Trojan. Agent, there were a total of 18 threats with Pup having a lot more. However. I was never greeted by a log of the aftermath. Also, the threats are now back again, even after cleaning. FRST.txt Addition.txt Malwarebyte log.txt

Okay, I went ahead and did it. Unfortunately, after rebooting I ran the ADW upon curiosity and all of the Pup.Optional and Trojan.Agent are still there. Fixlog.txt

HELLO?

These are the malware that keeps coming back, the two mentioned below. Please help! :( Malwarebytes www.malwarebytes.com -Log Details- Scan Date: 7/18/18 Scan Time: 1:55 PM Log File: 89120cc6-8a81-11e8-9c26-5cf37075915a.json Administrator: Yes -Software Information- Version: 3.5.1.2522 Components Version: 1.0.391 Update Package Version: 1.0.5955 License: Premium -System Information- OS: Windows 10 (Build 17134.167) CPU: x64 File System: NTFS User: System -Scan Summary- Scan Type: Threat Scan Scan Initiated By: Scheduler Result: Completed Objects Scanned: 356446 Threats Detected: 2 Threats Quarantined: 0 (No malicious items detected) Time Elapsed: 12 min, 22 sec -Scan Options- Memory: Enabled Startup: Enabled Filesystem: Enabled Archives: Enabled Rootkits: Disabled Heuristics: Enabled PUP: Detect PUM: Detect -Scan Details- Process: 0 (No malicious items detected) Module: 0 (No malicious items detected) Registry Key: 0 (No malicious items detected) Registry Value: 2 Adware.NetAdapter.Generic, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\SHAREDACCESS\PARAMETERS\FIREWALLPOLICY\FIREWALLRULES|{2B4FC790-17EB-4D10-8018-68ACE073E935}, No Action By User, [7621], [477452],1.0.5955 Adware.NetAdapter.Generic, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\SHAREDACCESS\PARAMETERS\FIREWALLPOLICY\FIREWALLRULES|{5922528D-246E-433C-ADF4-C52D531FE6F9}, No Action By User, [7621], [477452],1.0.5955 Registry Data: 0 (No malicious items detected) Data Stream: 0 (No malicious items detected) Folder: 0 (No malicious items detected) File: 0 (No malicious items detected) Physical Sector: 0 (No malicious items detected) WMI: 0 (No malicious items detected) (end)

Hi. I have high ram usage at times, I mean 70-90% and I think it's connected to malware and Malwarebytes can't pick it up, but when my windows has been up and running for few hours, it shows 2 malware threats are detected, but even if I quarantine them and delete them, nothing works, they just keep coming back. I have also tried to use ADW cleaner multiple times without any luck too since it's all come back a few minutes after windows has loaded. One thing to note is that Chrome is only using 4-5 GB of ram which is okay, but the task manager shows over 70% even at sometimes 90% so there might be something running in the background which is hidden. I really hope we can fix this since this really destroys my PC experience and I can't wait to get down to bussines. Thank you. FRST.txt Addition.txt