Visual Studio is installing unauthorized package which takes over my computer

Question

My computers have been destroyed by the installation of packages used by Visual Studio and NuGet. I discovered Nuget when using windows powershell. First I ran find-rolecapability which returned restricted, then I ran get-executionpolicy, which returned NuGet provider is required to continue. I found the NuGet website and it uses Visual Studio, I tried to download and install Visual Studio but am blocked by another installation.

I have lost admin rights and a current package in a file SxS is pending installation. I tried to stop it but can't. This was the only clean computer I had left.

Can you please help?

Answer 1

I forgot to add, it deleted my recovery file.

Answer 2

Thanks for your response.

My system is not locking up, something different is going on. I figured out a package file made in NuGet, which uses Microsofts Visual Studio to install takes a number of steps before it installs. It first uses impersonation to downgrade my administration authority, I get replaced by a different administration user who has full rights on my system. Next it takes over my bios and adds partitions to my hard drive. 

It has shown up on a desktop which has never been on the internet and has infected it by a usb I used to move data around. I had created a user, which loads safe mode when Iog in as the user. Since safe mode was running, the package is in the pending file I found in an WinSxS folder along with a lot of replacement windows files. I tried to delete these files but did not have the authority.

I used PowerShell to run get-ExecutionPolicy which returned "Restricted", next I ran find-rolecapability which returned "NuGet provider is required to continue". I researched NuGet and its a package loader and runs under Visual Studio, it's not an update, so it must be a virus aimed at taking over systems using a usb port. I need help is stopping the pending file from loading and preventing this from happening again.

Answer 3

Hi. I am a fellow community member who likes to help my peers when able. When your PC locks up and you can't access any of the normal menus or troubleshooting options from within Windows it may be helpful to access the recovery menu using another method. Please try the following.

Power on and off your computer three times
as follows.

Power on and when you see the Windows Logo power off
Power on again and when you see the Windows Logo power off
Power on again and your computer will boot into the Advanced Recovery environment

You might be asked to sign in with your Microsoft Account or Local Account password.

Click on Advanced Options
Then Click on Troubleshoot
Then Click on Advanced Options

boot into the recovery environment, then try to use system restore to return to an earlier point before this issue ocurred

This answer was adapted from - AndreJA