Messages

1

General Computer Support / Living off the land hacker has loaded a custom .wim and OS windows10

« on: January 08, 2022, 01:15:43 am »

Thank you so much for all and any help I will read that removing virtual adapters asap.

2

General Computer Support / Re: Living off the land hacker has loaded a custom .wim and OS windows10

« on: January 07, 2022, 07:56:30 am »

I will do so in about 30 minutes.  I'm racing home to finally show how weird the virtual network adapters are amongst other things.

3

General Computer Support / Re: Living off the land hacker has loaded a custom .wim and OS windows10

« on: January 07, 2022, 06:52:42 am »

Sorry for the long response time, I didn't sable them and soon after after a while they enable again. I then did what you asked and they were there after a minute or so. I honestly believe I am being forced synced. With persistence from registry editing and scheduled tasks.

4

General Computer Support / Re: Living off the land hacker has loaded a custom .wim and OS windows10

« on: January 04, 2022, 12:35:21 pm »

It reinstalled windows with no problems but my startup list has chrome upgrader.exe and my scheduled tasks are doing some other things than just defragment every now and then in fact it's full of stuff. Once again after the reboot I'm a workstation. Tried the SFC/DISM same errors. Virtual adapters including a hidden loopback and ALOT of hidden devices populated my device manager as it has done Everytime I clean install or repair. I'm stuck. It's such a horrible feeling I hope this never happens to anyone.

5

General Computer Support / Re: Living off the land hacker has loaded a custom .wim and OS windows10

« on: January 03, 2022, 08:01:12 am »

I ran an elevated CMD as Administrator and the errors are as follows:

DISM states Unable to access the image. (I believe it's because of the second reason stating "do you have read permission on folder.")

SFC states The arguments passed to SFC are invalid. The offline windows directory specified points to the online system.

The virus scan showed no virus.

Thank you so much for helping.

6

General Computer Support / Re: Living off the land hacker has loaded a custom .wim and OS windows10

« on: January 03, 2022, 06:38:42 am »

I did as directed and my OS Partition is C the following errors resulted

For DISM it states "Error: 2 Unable to access the image"
I tried three times to ensure I was correct in invoking the DISM command.

SFC stated "Windows resource protection could not perform the requested operation"

This is after a clean install. My firewall rules, scheduled tasks, silent installs of edge updater and silent install of OneDrive,ability to access and turn off sync right from the boot has been populated with tasks and remote connection devices/rules.

7

General Computer Support / Living off the land hacker has loaded a custom .wim and OS windows10

« on: January 02, 2022, 10:28:59 am »

Hello, I am currently unable to reinstall Windows without a bunch of pre-installed software, not blower, but things that seem to be auto syncing and pre-filled proxy and DNS resolution. In addition to that, I cannot do a clean install. I've tried about 50 times every time it gets overwritten and when I download an ISO from the internet it says that this file has been modified by another computer. It has been blocked for your safety. I believe that the whim file is heavily modified and has many packages installed in a custom OS. No virus scanners and I've tried them all. Can pick up these changes. I've tried restore them and repair image to no avail. It seems like I'm being actively synced to some kind of directory either through OneDrive which I have disabled or some other hidden program. I found many artifacts that point to multiple servers and XML documents as well as the default user that is hidden has a bunch of programs used for remote access. I'm at a loss at what to do. This has been going on for years  I found and bought windows repair from tweaking.com and I ran it in safe mode several times, but there are still some errors that cannot be fixed, such as the default firewall rules I believe are just bound to a WIM file and since it is corrupt, I don't know if it has effectively been cleaned. Every time I run the program it has errors such as disprotected cannot write or something to that effect. That repair was not totally completed mostly and concerned about repairing the WIM file so I can reinstall     Please help me and if I need to do something or make a log or download a program I will. Thank you so much for hearing me out.