Hi now you have your files and folders back -lets check out those suspicious files. Just one will do I feel
[]Make sure to use Internet Explorer for this
[]Please go to VirSCAN.org FREE on-line scan service
[*]Copy and paste the following file path into the “Suspicious files to scan” box on the top of the page:
[*]C:\Windows\System32\drivers\wimmount.sys
[*]Click on the Upload button
[*]If a pop-up appears saying the file has been scanned already, please select the ReScan button.
[*]Once the Scan is completed, click on the “Copy to Clipboard” button. This will copy the link of the report into the Clipboard.
[*]Paste the contents of the Clipboard in your next reply.
THEN
Could you run a fresh OTS log for me please and let me know what problems you currently have