Right click on the FRST icon and select Run as administrator Highlight the below information then hit the Ctrl + C keys at the same time or Right click/highlight on the text below and select Copy. beginning with Start:: and finishing with End::
Start:: CloseProcesses: CreateRestorePoint: HKLM Group Policy restriction on software: %systemroot%\system32\mrt.exe <==== ATTENTION SearchScopes: HKU\S-1-5-21-156121090-3762842222-1268290935-1001 -> DefaultScope {1DB22004-CDD8-400E-AC28-E401808E917D} URL = CustomCLSID: HKU\S-1-5-21-156121090-3762842222-1268290935-1001_Classes\CLSID\{d54018c0-34b4-9366-7477-cd71aa1444773}\InprocServer32 -> 0x8AA7F9F1C0DDD101D409FCF1C0DDD101010000000300000000000000 => No File ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => -> No File CMD: netsh advfirewall reset CMD: netsh advfirewall set allprofiles state ON CMD: ipconfig /flushdns CMD: netsh winsock reset catalog CMD: Bitsadmin /Reset /Allusers Emptytemp: End::
Press the Fix button. If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run. When finished FRST will generate a log on the Desktop (Fixlog.txt). Please post it to your reply.
~~~~~~~~~~~~~~~~~~~~~~~~
Follow the instructions in the thread below to run a scan with MBAR. Don't forget to update the database before launching the scan, and once launched, leave MBAR running and do not touch your computer until it is done scanning.
Once MBAR is done scanning, removing threats and rebooting your computer, go in its MBAR folder, and copy/paste the content of the mbar-log-TODAYS-DATE.txt log in your next reply.
With regard to MBAR, I had this already on my computer. But I downloaded and ran the rootkit - the message that came up was No Cleanup required. I could not find a log for this.
Then I ran MBAR, and the log for this is attached.
Zemana AntiMalware Free download it from here: Double-click on the file named Zemana.AntiMalware.Portable to perform a system scan with Zemana AntiMalware Free.
You may be presented with a User Account Control dialog asking you if you want to run this program. If this happens, you should click Yes to allow Zemana AntiMalware to run. When Zemana AntiMalware starts, click on the Scan button to perform a system scan. without changing any options, press Scan
When Zemana has finished finished scanning it will show a screen that displays any malware that has been detected. To remove all the malicious files, click on the Next button. Zemana AntiMalware will now start to remove all the malicious programs from your computer. Note: If restart is required to finish the cleaning process, you should click Reboot. If reboot isn't required, please restart your computer manually.
open Zemana AntiMalware again and locate the latest report
please paste the contents into your reply
When the process is complete, you can close Zemana AntiMalware
Please post this log. Tell me what the computer is doing now.