Website blocked: powershell.exe making outbound connections

[chillsphere]

Hi guys,  my computer regularly reports an Outbound connection is trying to be made from powershell.exe.   See below

Last year I did get a website popup claiming to encrypt my hard disk but it was just a website popup, I disconnected from the Internet.  Cleared my temporary files and re-installed the browser (firefox) as infection appeared to be profile specific and bought Malware Bytes to trap any further disruption.
 

Malware Bytes did find and clean some files but now I get the message in this attached JPG.

I've run FRST - attached are the log files.  Computer is running Windows 10 Pro, 64bit  intel i5

Any help much appreciated.

A

Addition.txt

FRST.txt

Edited February 6, 2017 by chillsphere

[TwinHeadedEagle]

Hello and

 

Scan with Malwarebytes' Anti-Malware

Please re-run Malwarebytes' Anti-Malware.

• First of all, select update.
• Once updated, click the Settings tab, in the left panel choose Detection & Protection and tick Scan for rootkits.
• In the same tab, under PUP and PUM detections make sure it is set to Treat detections as malware
• Click the Scan tab, choose Threat Scan is checked and click Start Scan.
• If threats are detected, click the Apply Actions button. You will now be prompted to reboot. Click Yes.
• Upon completion of the scan (or after the reboot), click the History tab.
• Click Application Logs and double-click the newest Scan Log.
• At the bottom click Export and choose Text file.

Save the file to your desktop and upload your next reply.

 

---

 

Please download Zemana AntiMalware and save it to your  Desktop.

• Install the program and once the installation is complete it will start automatically.
• Without changing any options, press Scanto begin.
• After the short scan is finished, if threats are detected press Next to remove them.
  

Note: If restart is required to finish the cleaning process, you should click Reboot. If reboot isn't required, please restart your computer manually.

• Open Zemana AntiMalware again.
• Click on icon and double click the latest report.
• Now click File > Save As and choose your Desktop before pressing Save.
• The only left thing is to attach saved report in your next message.
  

[chillsphere]

Hi - thanks for replying so soon,  please see results attached.

Malware returned 0

Zemana picked up a few I couldnt related to.

malware_bytes_result_060217.txt

2017.02.06-17.45.31-i0-t92-d12.txt

[TwinHeadedEagle]

How is your PC behaving now?

[chillsphere]

15 hours ago, TwinHeadedEagle said:

How is your PC behaving now?

Yes - so far so good,  thank you.   Just need to let it run throughout the day - before can tell if Malware Bytes does alert me if  powershell.exe tries an Outbound link.