I have tried everything to clean install and ferret out malware but I have ,after 3 years, find that I cannot clean install without corrupt and mal appxpackages and a whole list of registry, firewall, scheduled tasks preconfigured and it looks like whoever put me in this sync prison geared it towards remote control with valid but modified legitimate windows programs. Reverse shells, BADUSB being written to any external drives and untouchable files that brick my computer because they are the modified system files.
I have tried sfc scan ow and get "Windows resource protection could not perform the requested operation. There is an enterprise feel to this as apps and the install during the OOBE seems to be autopilot heavy as well as several vbscripts and PowerShell scripts that preconfigure my prison OS during and after my first boot.
I note whatever browser I use to download basic things to settle up there is a program called edge upgrade or chrome upgrade.
I believe I am having a custom image with a heavily hacked .wim files that make upgrading or truly clean installing without virtual network adapters being deployed.
The last thing I'd like to note is these files have " legitimate" certificates but they have inconsistent meta data.
Removed Thank you for your time.
I have tried sfc scan ow and get "Windows resource protection could not perform the requested operation. There is an enterprise feel to this as apps and the install during the OOBE seems to be autopilot heavy as well as several vbscripts and PowerShell scripts that preconfigure my prison OS during and after my first boot.
I note whatever browser I use to download basic things to settle up there is a program called edge upgrade or chrome upgrade.
I believe I am having a custom image with a heavily hacked .wim files that make upgrading or truly clean installing without virtual network adapters being deployed.
The last thing I'd like to note is these files have " legitimate" certificates but they have inconsistent meta data.
Removed Thank you for your time.
Last edited by a moderator: