Windows PC Infected Today

[pastis]

Computer was infected today and my husband called the number on the screen for assistance.  The company seems to have fixed the issue but I'm not really sure.  I'm concerned because it looks like they installed a pirated version of Malwarebytes, as the Hosts file has the following entries:

127.0.0.1    keystone.mwbsys.com
127.0.0.1    data-cdn.mbamupdates.com
127.0.0.1    stats.mbamupdates.com
127.0.0.1    keystone-prod.elasticbeanstalk.com

So not really sure if the malicious software has been removed and/or if the company that assisted my husband installed spyware/malware.

Would really appreciate your help.

Addition.txt

FRST.txt

[hopeworks]

1 hour ago, pastis said:

Computer was infected today and my husband called the number on the screen for assistance.  The company seems to have fixed the issue but I'm not really sure.  I'm concerned because it looks like they installed a pirated version of Malwarebytes, as the Hosts file has the following entries:

127.0.0.1    keystone.mwbsys.com
127.0.0.1    data-cdn.mbamupdates.com
127.0.0.1    stats.mbamupdates.com
127.0.0.1    keystone-prod.elasticbeanstalk.com

So not really sure if the malicious software has been removed and/or if the company that assisted my husband installed spyware/malware.

Would really appreciate your help.

Addition.txt

FRST.txt

When you say you called the number on the screen, are you saying a number popped up on your screen informing you to call it? 

Edited April 13, 2017 by hopeworks
Not sure if I answered in the correct place.

[hopeworks]

When you say you called the number on the screen, are you saying a number popped up on your screen informing you to call it? 

[pastis]

My husband was home alone and he's not tech savvy.  A message like "Official Microsoft Support - phone this number immediately, you may have been comprised" popped up.  And of course, he called it - the number was 1-844-452-3862.  He then spoke to a person who said he could call him directly, which he also did. And then he gave the person access to our PC.  I can see that Malwarebytes was installed.  I have no idea what has been comprised.