Hello,
I have no professional knowledge in how to touch registry files or anything similar and I think my desktop needs a registry fix and malware removal.
I have removed the Ethernet cable so I can open malwarebytes. I ran a scan just on my C drive all night long and here are the results. I took photos because there is no way to upload the scan log anywhere wo internet and also as soon as I inserted a USB stick to manually move the file, my windows went blue screen (oops something went wrong...)
The issues started when an infected usb stick was inserted by my friend. My browsers (chrome and firefox) slowed down and eventually stopped responding, after closing them, 2 cmd.exe windows ran on their own for 1 second, my wallpaper turned to black and my app shortcuts on desktop started glitching. I quickly removed the stick and it looked like everything visually turned to normal. However nothing would run so I restarted, it worked for half a day and then everything started freezing again. I then restarted again and it got stuck on the restart screen for 10 hours (I restarted and left for work, when I came back it was still restarting). I restarted with the button once again, this time the system booted up, I tried to open task manager and it was again not responding. It did run on the third try, and it shows 50% of my disk is engaged. The list and the activities are not normal. I tried to open malwarebytes but it kept appearing in task manager and then disappearing. As if it was force closing. then everything froze again and the desktop disappeared, only task manager window which was not responding remained. I got stressed because it felt like someone has access to my desktop and is running things remotely. I immediately pulled the ethernet cable out, restarted and then could run malwarebytes and also open task manager again.
The scan found 10 threats but after some googling I didnt quarantine them, since they seem to be registry related and it might mess my windows up. I had kept the scan window open until the blue screen happened. I had to restart as I mentioned above, so the riskware is still there untouched. I will run scans on my other drives after I post this.
Please advise me how to correctly attempt to remove the malware and restore the registry. Thank You!
*I removed my user name in the photos since it contained my real name and I do not wish to share that online.