sir3312

See attached FRST.txt Addition.txt

Zemana scan results attached. I edited the hosts file myself some time back so I don't think it's the problem. MB Rootkit Scanner found StartUp.lnk in my startup folder and removed it. I can now open regedit and MWAM. Full scan with MWAM found 4x PUP.Optional.NewTabTV which doesn't seem that harmful but I removed it. Odd that Spybot never found StartUp.lnk in startup. Any other advice on how to make sure all traces of this thing are gone? 2017.05.08-15.14.38-i0-t92-d1.txt

Also can't open Farbar Recovery Scan Tool. After UAC prompt I see the program for half a second then it closes.

It appears I've picked up the shortcut virus that effects external USB drives. Running Windows 10. I have a USB stick and an external HDD and both have a bunch of shortcuts in them but the contents still work. Formatting the stick ends up with a Drive.bat remaining on the stick. I can't open MalwareBytes, Regedit or some areas of the Control Panel. They close instantly just after the UAC prompt, before I even see them. Tried so far: I have turned off AutoPlay. Run Spybot search and destroy latest version with all updates: found nothing Run a full scan using Windows Defender: took many hours and found nothing. Run Rkill.exe and found nothing nasty (log attached) MB Chameleon doesn't seem to work. Running mbam-chameleon.exe as admin gives me a flash of cmd window then the screen goes black and I only have the mouse pointer. Task manager can't close MBC so I have to restart. The manual removal instructions for this virus on Google don't seem to match my particular case. Any help is much appreciated. Rkill.txt