jpmad4it

ok I’ve hit some issues. some updates failed. So I tried to download the windows update troubleshooting program. The link was a bit strange where it sent me for this aka.ms/ see screenshot. then this wouldn’t run because it couldn’t verify the validity of the program so I tried the renaming the download folder trick to start again but got permission denied and my pc is listening on some ports via a tunnel adapter which is where the problem started. see images

Ok makes sense thanks. Carry on with updates?

Ok windows update installed updates fine. fyi - the link to the farbar page gave me cipher errors / page not secure. I’ve seen certificate details inside dll’s when I was digging around earlier. Worried I’m being served websites via fake certs

Hi again! Please find attached the logs. FRST.txt Addition.txt

I think I have the drivers but they aren’t at my house. I will have to get them first thing in the morning and install them.

Damn. Just thought some looked a bit suspect being setup on the local subnet already after clean install. once I get the scan done I will reply. Thanks for all your help today. I’ll be up another few hours trying to get it sorted

Firewall inbound rules

Are these normal for hosts file, network, services etc in system32/drivers/etc/

Struggling. Can’t find old cd with drivers. Might have to put the brakes on until tomorrow 😞

Thanks - I need to get to a machine for those I’m on my iPhone at present. Any ideas on how to get these on the new machine ?

64 bit. I’m sure I have the drivers on disc somewhere I’ll look quickly

Custom built by myself. The LAN ports are on the gigabyte mb intel and atheros. 64 bit windows 7

Just something else I noticed over the last few weeks. is it normal to have such users setup ?

I.e cd-r / dvd-r etc

Apologies. I will follow your lead now and shut up. Thank you for bearing with me win 7 can’t find the driver for my network cards. Is it best to get these offsite and burn to a non writeable cd drive ?

Ok sorry. Panicking! Will follow your lead. Downloading now .....

I am almost convinced this virus is in the bios / Uefi. It seems to set up legitimate windows functions / drivers etc on the drive, partition it - hiding your legitimate copy of Windows , and creating a nasty one which is the same as your version but loaded with malware- and then once you get online it does it thing.

Already my machine has been put into a workgroup

Windows 7 is up

Ok so just leave win 7 installed once it’s done?

Ok cool lets go for it. I will report back once on Windows

The pc is quite old. Maybe 10 years. Been upgrading over the years. The motherboard is a ga-z77x-up7. I had windows 10 installed - just can’t get the iso. I will try to upgrade once 7 is installed.

Also....am I safe to connect to the internet at this point ? I’m concerned that it may not be safe