PLEEASE HEEELLP -Potential Rootkit/ Restricted Admin Privilege's/H

I can't see from the scans/logs what's on here so we have no choice but to run a couple of tools.
 
When you ran MalwareBytes did you enable rootkit scan?

~~~~~~~~~~~~~~~~~~~~~

Start Farbar Recovery Scan Tool with Administrator privileges
(Right click on the FRST icon and select Run as administrator)

highlight on the text below and select Copy.
beginning with Start:: and finishing with End::
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Highlight the entire content of the quote box below and select Copy.

 

Start::
CloseProcesses:
CreateRestorePoint:
U4 AppMgmt; no ImagePath
U4 CscService; no ImagePath
U4 napagent; no ImagePath
U4 PeerDistSvc; no ImagePath
CustomCLSID: HKU\S-1-5-21-535892077-381013635-1888786479-1001_Classes\CLSID\{1BF42E4C-4AF4-4CFD-A1A0-CF2960B8F63E}\InprocServer32 -> C:\Users\BRANDON JAMES\AppData\Local\Microsoft\OneDrive\19.002.0107.0005\amd64\FileSyncShell64.dll => No File
CustomCLSID: HKU\S-1-5-21-535892077-381013635-1888786479-1001_Classes\CLSID\{7AFDFDDB-F914-11E4-8377-6C3BE50D980C}\InprocServer32 -> C:\Users\BRANDON JAMES\AppData\Local\Microsoft\OneDrive\19.002.0107.0005\amd64\FileSyncShell64.dll => No File
CustomCLSID: HKU\S-1-5-21-535892077-381013635-1888786479-1001_Classes\CLSID\{82CA8DE3-01AD-4CEA-9D75-BE4C51810A9E}\InprocServer32 -> C:\Users\BRANDON JAMES\AppData\Local\Microsoft\OneDrive\19.002.0107.0005\amd64\FileSyncShell64.dll => No File
ShellIconOverlayIdentifiers: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => -> No File
ShellIconOverlayIdentifiers: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => -> No File
ShellIconOverlayIdentifiers: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => -> No File
ShellIconOverlayIdentifiers: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => -> No File
ShellIconOverlayIdentifiers: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => -> No File
ShellIconOverlayIdentifiers: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => -> No File
ShellIconOverlayIdentifiers: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => -> No File
ShellIconOverlayIdentifiers-x32: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => -> No File
ShellIconOverlayIdentifiers-x32: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => -> No File
ShellIconOverlayIdentifiers-x32: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => -> No File
ShellIconOverlayIdentifiers-x32: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => -> No File
ShellIconOverlayIdentifiers-x32: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => -> No File
ShellIconOverlayIdentifiers-x32: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => -> No File
ShellIconOverlayIdentifiers-x32: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => -> No File
AlternateDataStreams: C:\Users\BRANDON JAMES\Downloads\ChromeSetup.exe:SmartScreen [7]
AlternateDataStreams: C:\Users\BRANDON JAMES\Downloads\FRST64.exe:SmartScreen [7]
AlternateDataStreams: C:\Users\BRANDON JAMES\Downloads\HijackThis.exe:SmartScreen [7]
AlternateDataStreams: C:\Users\BRANDON JAMES\Downloads\Install VALORANT.exe:SmartScreen [7]
AlternateDataStreams: C:\Users\BRANDON JAMES\Downloads\OriginThinSetup.exe:SmartScreen [7]
AlternateDataStreams: C:\Users\BRANDON JAMES\Downloads\wsabbs2.exe:SmartScreen [7]
EmptyTemp:
C:\Windows\Temp\*.*
End::

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~


Start FRST (FRST64) with Administrator privileges
Press the Fix button. FRST will process the lines copied above from the clipboard.
When finished, a log file Fixlog.txt will pop up and saved in the same location the tool was ran from.

Please copy and paste its contents in your next reply.
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~





Download AdwCleaner from here and save it to your desktop.

• run AdwCleaner by clicking on Scan Now
• when it has finished, leave everything that was found checked, (ticked), then click on Clean and Repair
• if it asks to reboot, allow the reboot
• on reboot, click on View Log File; please attach the content of the log to your next reply.
• ============================================
  
  
  Click Open Malwarebyte Free
  Under Scanner select Scheduled scans
  Select Advanced scanners
  Select Custom Scan select Configure Scan
  Place a check mark in Scan for rootkits and place a check mark on the C: drive and your external drives to be scanned
  Click Scan
  When completed click View Report
  Click Export, then Export to TXT
  Save the file onto your desktop as MBAM.txt
  Copy and paste the contents of the file in your reply
  ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~`
  
  Run RogueKiller
  
  IMPORTANT: Please remove any usb or external drives from the computer and close all running programs before you run this scan!
  
  Download RogueKiller to your desktopPlease post the contents of the RKreport.txt in your next reply.
  
  ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
• for Windows Vista/7/8/10, right click -> run as administrator, for XP simply double-click on RogueKiller.exe
• click on Scan then Start under ‘Standard Scan (recommended)’
• when it has finished, click on Results
• On completion, the results will be displayed
• Check every single entry (threat found), and click on the Remove Selected button
•  
• On completion, the results will be displayed. Click on the Open Report button in the bottom left corner, followed by the Open TXT button (also in the bottom left corner)
• This will open the report in Notepad. Copy/paste its content in your next reply
  
  
  ~~~~~~~~~~~~~~~~
  Please post
  Fixlog.txt
  AdwCleaner log
  Malwarebytes log
  RKreport.txt

THANK YOU so much for your assistance thus far, and no I didn't run the Malwarebytes scan quite that way, thank you for the straightforward and abrupt response. I seriously hope all of this helps. Everything should be attached!  Seriously, thank you so much for your help!!

Your welcome

Your MalwareBytes scan says "No Action By User: was the log saved before you allowed it to delete/quarantine?

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

No rootkits have been found so let's run a scanner dedicated to finding rootkits

Follow the instructions in the thread below. Make sure to download the MBAR version linked in it.
https://forums.malwarebytes.com/topic/198907-requested-resource-is-in-use-error-unable-to-start-malwarebytes/

 run a scan, delete everything it finds, and then copy/paste the content of the mbar-log-DATE-(TIME).txt log that is located in the MBAR folder here after.
 
~~~~~~~~~~~~~~~~~~~~~~~~~~~

Download ESET Online Scanner and save it to your desktop.

I always used the one (esetonlinescanner.exe) from this link which looks to be the same one Aryeh is recommending.
https://www.eset.com/us/home/online-scanner/

• Right-click on esetonlinescanner_enu.exe and select Run as Administrator.
• When the tool opens, click Get Started.
• Read and accept the license agreement.
• At the Welcome to ESET Online Scanner window, click Get Started.
• Select whether you would like to send anonymous data to ESET.
• Note: if you see the "Welcome Back to ESET Online Scanner" screen, click Computer Scan > Full Scan.
• Click on the Full Scan option.
• Select Enable ESET to detect and remove potentially unwanted applications, then click Start scan.
• ESET will now begin scanning your computer. This may take some time.
• When the scan is finished and if threats have been detected, select Save scan log. Save it to your desktop as eset.txt. Click on Continue.
• ESET Online Scanner may ask if you'd like to turn on the Periodic Scan feature. Click on Continue.
• On the next screen, you can leave feedback about the program if you wish. Check the box for Delete application data on closing. If you left feedback, click Submit and continue. If not, Close without feedback.
• Open the scan log on your desktop (eset.txt) and copy and paste its contents into your next reply.

—————————————————

Post these 2 logs when finished and also tell me what the computer is doing now.