Hey, sorry for a late answer, Christmas and weeks of trying to fix my windows came in the way.
My issue is fixed.
With help from your support tool. Julia is the star who assisted me, even though the logs pointed to me being a pirate heh. (Microsoft support confirmed my Win 10 Microsoft account is not effected and my licence is good as its been since 2011 (win 7. Upgraded to win 10 in 2014).
I want to share this story, because I've seen an increase of problems with windows "users" in Microsoft support forums.
(Feel free to skip it. Its how I solved my problem, which does not mean it solves others the same way)
My user was all messed up after a nasty new virus that injected several unprotected user folders in C:/Users, with code that lowered the admin rights of the user. But it didnt remove the label "administrator".
Which, if you have your user as an administrator, gives you a ton of issues. Having the right to get patches, firewall, etc. It also gave false positives on the right to your windows and office licence, which made it tricky to get help, heh. CBS.log and DISM.log in Windows/logs, plus a few other logs was enough to get Microsoft support to quickly assist you.
I did a repair upgrade at first, which seamed to work, but since my user still was not admin, even if it said so, problems didn't get fixed.
Everything you download, gets 2 "Account unknown", added to it, which are quite brilliant since that is not uncommon in Win 10 for a lot of different sources. Upgrading Win 7 to 10 for one. Where you should NOT remove that account unknown, heh. Those 2 account only had reading rights, but that was enough for them to survive the repair upgrade.
Microsoft support fixed that with connecting remotely to my Win 10 PC, and they downloaded the tool, checked it (it had no "account unknown", and executed the repair upgrade.
(This is very safe people. Microsoft really have stepped up their support quality)
Now my PC is peachy.
But before the repair upgrade, I had to:
Use RKill first.
Then run malwarebytes, which THEN found the little critter in my user folder.
And I ran comodos Internet security software just to be safe, who found hidden files in my user + hidden startup functions in the registry, which returned the call that your system had a 3:e party firewall....which made Win defender not put itself on. And refused to let you do any changes to Windows Firewall...which was on, but no you didnt have the right to change anything.
CCleaner did find the registry error, but since my user didnt have the correct rights, and still was labeled admin, CCleaner removed the registry from the startup, only to get put back by Win 10 backup functions, heh. When you rebooted.
Some brilliant kid must be the perp behind this, because, what did the virus do once your user was corrupt?
NOTHING!
The virus crippled your PC, made both you, Malwarebytes and Microsoft, see logs that said my licenses wasn't correct, and gave a bunch of false logs that your Firewall, etc, was not on....when they where.
I repaired my user and left all the data except the license links, just to be safe though.
But comodos internet security tools (VPN, sandbox, traceroutes, Valkyria, etc), and Microsoft support themselves did not find a single traffic sent out or in with important data my PC was wide open for because of this. And....Powershell, was downgraded to V1. NO powershell command was issues from anywhere else then me, microsoft and Win 10 own.
I am a "poweruser".
And during christmas, my PC was open to collect all passwords, login, windows logs and browser traffic. And of course execute a powershell command, with admin rights, if the virus was coded to do so.
That's why I guess this virus was made by a brilliant youngling, who didnt realize what harm the bug could do.
(sorry, but us adults, dont come up with things we know are impossible).
Since my user was corrupt, and I had to fix it without bringing along most of its folders, but the core ones, I had to re-register all over. Not just here.
My 422 synced passwords in my google account saved me.....some.....time.
Huge creds goes to your support tool specialists. Without that tool, Microsoft would not have believed that Win 10 logs was changed. Because Microsoft logs, said I was a good customer and my win 10 was perfect. Your support tool, said the opposite.
Whatever you are paying Julia, its not enough.
Best regards, and long time customer and fan of Malwarebytes.
--Jonas
Gothenburg, Sweden
