my system is badly hacked microsoft just informed me

[poakes4]

i need help with a badly damaged windows 11 that cant be reinstalled without reinstalling the malware again.

heres some farbar logs. i need some help please.

Shortcut.txt Addition.txt FRST.txt microsoft support final text save.txt speccy reports.txt

[Porthos]

@poakes4 Is this the same computer as before?

 

[poakes4]

That it is. And freshly from the pc repair guy in placerville 150$ and a verry messed up remote tech support from Microsoft. I have all of the documentation as well to prove I'm not just mentally disabled but my computer is really badly compromised.

[poakes4]

Bump

[AdvancedSetup]

Hello @poakes4

Not sure how the computer would have gotten reinfected so soon from a New install, but we'll go ahead and try to assist.

Please go to Control Panel, Programs, Programs and Features and uninstall the following

• McAfee VirusScan
• Avast Secure Browser
• Speccy

 

Your DNS Servers: 192.168.0.1

Please consider changing your default DNS Server settings. Please choose one provider only

DNS is what lets users connect to websites using domain names instead of IP addresses

• Google Public DNS: IPv4   8.8.8.8 and 8.8.4.4   IPv6   2001:4860:4860::8888 and 2001:4860:4860::8844
• Cloudflare: IPv4   1.1.1.1 and 1.0.0.1   IPv6   2606:4700:4700::1111 and 2606:4700:4700::1001
• OpenDNS: IPv4   208.67.222.222 and 208.67.220.220  IPv6  2620:119:35::35 and 2620:119:53::53
• DNSWATCH: IPv4   84.200.69.80 and 84.200.70.40   IPv6  2001:1608:10:25::1c04:b12f and 2001:1608:10:25::9249:d69b

The Ultimate Guide to Changing Your DNS Server
https://www.howtogeek.com/167533/the-ultimate-guide-to-changing-your-dns-server/

Here is a YouTube video on Changing DNS settings if needed

 

 

 

Once the above has been completed, please restart the computer and then run the following

Microsoft Safety Scanner

Please make sure you Exit out of any other program you might have open so that the sole task is to run the following scan.   
That goes especially for web browsers, make sure all are fully exited out of and messenger programs are exited and closed as well
 

STEP 1

Please set File Explorer to SHOW ALL folders, all files, including hidden ones.  Use OPTION ONE or TWO of this article

https://www.tenforums.com/tutorials/7078-turn-off-show-all-folders-windows-10-navigation-pane.html

STEP 2

I suggest a new scan for viruses & other malware. This may take several hours, depending on the number of files on the system and the speed of the computer.

The Microsoft Safety Scanner is a free Microsoft stand-alone virus scanner that can be used to scan for & remove malware or potentially unwanted software from a system. 

The download links & the how-to-run-the tool are at this link at Microsoft 

https://docs.microsoft.com/en-us/windows/security/threat-protection/intelligence/safety-scanner-download

 

Look on the Scan Options & select the FULL scan.

Then start the scan. Have lots of patience. It may take several hours.

• Once you see it has started, take a long long break;  walk away.  Do not pay credence if you see some intermediate early flash messages on the screen display.  The only things that count are the End result at the end of the run.
• The scan will take several hours.  Leave it alone. It will remove any other remaining threats as it goes along.  Take a very long break, do your normal personal errands .....just do not use the computer during this scan.

This is likely to run for many hours as previously mentioned  ( depending on the number of files on your machine & the speed of the hardware.)

The log is named MSERT.log  and the log will be at C:\Windows\debug\msert.log

Please attach that log with your next reply.

Thank you

 

[poakes4]

I got ahold of someone I have been trying to get help from for a long time and must make sure that whatever is done with any of my devices doesn't illegally interfere any actual official work or breach any kind of copyright or especially make contoso or ic3 unhappy during this repair process as I have stayed in compliance and wish to remain that way. now that I finally have their help this should all be sorted out but next year hopefully. I still need your help with this and I wish to make sure it's done properly and by the book. I know that is a bit weird of a read but I can't risk unauthorized intell being in my attackers hands. I'll try to get back on this site tomorrow or the day after to keep you updated. Thank You.

[AdvancedSetup]

I have no idea what you're talking about. If you have specific stipulations of work to adhere to then you'll need to physically take your computer to a company that specializes in security and have them assist you.

We offer a free service to assist users in the removal of malware. That may include backing up data and formatting the drive or anything in between.