Kapersky detected a Trojan. Unable to delete it after several attempts.

[RanOutOfSpac]

Hello, hopefully I'm posting in the right area. Here's what happened.

I was playing a game of mine on my computer. Randomly, the game switched windows as if I pressed Alt+tab which I didn't. It took me to my desktop and then immediately zoomed in. Then, all of a sudden several other programs opened up without my permission, such as Steam's "Big Picture" mode and my Fire Fox browser. My mouse cursor even seemed to move on it's own despite the mouse being completely idle as I had a controller in my hand at the time. I freaked out and immediately suspected a remote hack of some sort. I shut down my computer and disconnected my wifi to be safe. I rebooted in safe mode, ran malwarebytes which detected nothing, changed my wifi password, ran CCleaner, ran Kaspersky's TDSS killer which detected nothing. Then I ran Kaspersky's Virus Removal Tool which detected a trojan called Trojan.Multi.GenAutorunBITS.a

I have no idea how I could've aquired this. I'm very careful with my downloads and avoid malicious sites like the plauge.

I tried deleting it (curing it as the tool calls it) using this tool several times but, upon reboot and re-scan, it still remained. I've dealt with viruses a few times already but, I'm stumped on what to do with this one and I can't find any help online. Any info on this, or even better, a solution, would amazing. Thanks in advance.

[Valinorum]

Hi,

My name is Valinorum and I will be the acolyte today. Before we proceed, please, acknowledge yourself the following(s):

• Please do not create any new threads on this while we are working on your system as it wastes another volunteer's time. If you are being helped/have solved the issue/no longer wish to continue, notify me in your reply and I will quickly close this thread. Failing to comply will result in denial of future assistance.
• Please do not install any new software while we are working on this system as it may hinder our process.
• Malware removal is a complicated process and so don't stop following the steps even if the symptoms are not found. Keep up with me until I declare you clean.
• Please do not try to fix anything without being asked.
• Please do not attach your logs or put them inside code/quote tags. Do a Copy/Paste of the entire contents of the log file and submit it inside your post unless directed otherwise.
• Please print or save the instructions I give you for quick reference. We may be using Safe mode which will cut you off from the internet and you will not always be able to access this thread.
• Back up your data. I will not knowingly suggest you any course that might damage your system but sometimes Malware infections are so severe that only option we have is to re-format and re-install the operating system.
• If you are confused about any instruction, stop and ask. Do not keep on going.
• Do not repeat the steps if you face any problems.
• I am not an omniscient. There are things even I cannot foresee. But what I know took years to learn and perfect the skill. This site is run by volunteers who help people in need in their own free time. I would ask you to respect their time and be patient as sometimes real life demands our time and replies to you can be delayed.
• Private Message(PM) if and only if I have not responded to your thread within three days or your query is offtopic and personal. Do not PM me under any other circumstances. Your thread is the only medium of communication.
• The fixes are for your system only. Please refrain from using these fixes on another system as it may do serious damage.
  

---

Please, peruse the following thread and attach the logs. 
https://forums.malwarebytes.com/topic/9573-im-infected-what-do-i-do-now/

Regards,
Valinorum

[RanOutOfSpac]

Thank you for the reply. I will do my best to follow directions. I believe this is what is needed?

FRST.txt

Addition.txt

[Valinorum]

• Step #1 ESET Online Scanner
  Disable your security programs which includes but not limited to anti-virus, anti-malware, anti-spyware et cetera. Peruse this for additional information. 
  
  • Download esetsmartinstaller_enu.exe by clicking here.
  • Right-click on the program and choose Run as administrator.
  • Accept their terms and condition and proceed.
  • Install Add-On/Active X if prompted.
  • From the Computer Scan Setting check the following box --
    
    • Enable detection for potentially unwanted programs
  • Click on Advanced Setting --
    
    • Check the box beside Remove Found Threats;
    • Check the box beside Scan archives
    • Check the box beside Scan for potentially unsafe applications
    • Check the box beside Enable Anti-Stealth Technology
  • Click on Start and wait for the virus signature database to update.
  • The online scan will begin automatically and can take several hours.
    
    • Note: Do not touch either the Mouse or keyboard during the scan. Otherwise it may stall.
  • After the Scan finishes --
    
    • If no threats were found:
      
      • Put a checkmark in Uninstall application on close.
      • Close the program and report that nothing was found
    • If threats were found:
      
      • Open the file located in C:\Program Files\ESET\ESET Online Scanner\log.txt (32-bit) or C:\Program Files (x86)\ESET\ESET Online Scanner\log.txt (64-bit).
      • Copy and Paste contents of the log file in your next reply.
  
  Note: Enable your security programs afterwards.

---

[RanOutOfSpac]

So I finished the scan like you asked and the scanner found nothing. What should I do now?

[Valinorum]

Are you still getting trojan alerts?

[RanOutOfSpac]

Only with Kapersky's Virus Removal Tool. I personally am starting to think it's a false positive because absolutely nothing else I have is detecting it. Kapersky only detected it the same day I updated it too before I posted the original post. I removed Kapersky and I'm gonna redownload it to see if it detects it again. 

[Valinorum]

I also think that it maybe an FP. Anything else I can assist you with?  

[AdvancedSetup]

Glad we could help. :)If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread.Other members who need assistance please start your own topic in a new thread. Thanks!