I dunno why this one is so stubborn..
The biggest problem was an occurence (like an interrupt) that made your window inactive, and attempted to bring something else to the front, whatever it was it never ran, it just interupted you from your active window.
It started with an active internet connection, and after letting adwcleaner run and do a restart, internet stopped working, even in safe mode w/networking (which was BSOD until a Windows repair solved it). Tried the typical cmd line of winsock resets and ip flushes etc, but no good. The connection looks fine, you connect to the router (pinging the router works) but browsers and anything that connects to the network (steam, skype, etc.) won't even start, or pops up but instantly "stops responding"/crashes.
Things to note:
Ipv4 was set to a manual static ip, and dns 8 8 8 8. my routers assigns automatically but changing it to auto didn't help. I've had my laptop and even my desktop over his house and know their router assigns automatically, but he said it wouldn't connect unless it was set to those settings. I also found a teredo tunneller in network adapters, it had the yellow exclamation, uninstalling it did nothing. Some pseudo errors and file not found errors stopped happening with the ipconfig and netsh commands but they still didn't work after uninstalling that teredo tunneller.
MBAM only runs after a fresh install, and only installs 50% of the time, after adwcleaner, JWT and rkill have all been used. The other half a runtime error "could not call proc." stops the install (and even the uninstall). Mbam doesn't find anything anyway... **Rkill(iexplore.exe/com not needed) alone DOES NOT allow MBAM to run/install**
Internet explorer doesn't even open, it just simply never starts, or pops up but crashes before it's loads the homepage. Speaking of which, I checked LAN settings in the internet options, and the proxy box isn't checked. But the auto detect settings is. Mozilla is dead just like chrome btw.
There were like 12 scheduled tasks clearly viruses; runtask and scheduletask, the other were jumbles of letters/names I cleared all registry keys with their names because they kept coming back of you just deleted them from the task scheduler, this seemed to cut down on a lot of the "interrupt" problems and they no longer appear on the scheduled tasks list.
Under H_key_users, New s-1-5 Xxxxxxxxxxxx subfolders keep getting created, sometimes it's a few, sometimes a dozen but one of the logs has one of these s-1-5 folders in it, probably related?
Msconfig looks clean, services and startup tabs look fine....
Thanks for taking the time to read my post, I hope my detailed explanation helps lead to the answer quicker than normal, oh and these should help too:
Logs of the scans I have done so far... 😉
Edited by AbelsGambit, 26 March 2016 - 10:57 PM.