both Adware cleaner and RKIll find PUP.Winlogon.Heuristic but it respawns

[arkhaan]

both Adware Cleaner and Rkill(used as file name iexplorer.exe/iexplore64) continually find PUP.Winlogon.Heuristic          HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon|Shell.  RKill detects it as * Empty HKLM\...\Winlogon: [Shell]! Value reset to explorer.exe
when removed it respawns. oh and both program tools also detects these values in WIndows 10 Pro 64's "safe mode". I also ran MBAM and Norton Power Eraser, though I only use Windows default Antivirus/firewall Microsoft Defender. when I use Power Eraser I notice the it dectects nothing and stops responding and when I scan with Adware Cleaner and Rkill, the PUP goes into its "hide E Hole" also Norton and Zemana detect notihng at all. nor does MBAM.  I reboot and then a bit later, I scan and again, the stupid thing respawns after rebooting into normal mode and running Adware Cleaner and Rkill respectively. I go into safe mode and again it detects the PUP I run Power Eraser and abra-kadabra it is gone, until I reboot into normal mode again and scan with Adware cleaner and Rkill! here are the Farbar Logs. if you reply and wish for the ADW and RKill logs I will gladly send them as well.

FRST.txt

Addition.txt

[AdvancedSetup]

Hello @arkhaan

Please download the attached fixlist.txt file and save it to the Desktop.
NOTE. It's important that both files, FRST or FRST64 and fixlist.txt are in the same location or the fix will not work.

NOTICE: This script was written specifically for this user, for use on this particular machine. Running this on another machine may cause damage to your operating system.

Run FRST or FRST64 and press the Fix button just once and wait.
If the tool needs a restart please make sure you let the system restart normally and let the tool complete its run after restart.
The tool will make a log on the Desktop (Fixlog.txt). Please attach or post it to your next reply.

Note: If the tool warned you about an outdated version please download and run the updated version.

fixlist.txt

Thanks

Ron

 

[AdvancedSetup]

Due to the lack of feedback, this topic is closed to prevent others from posting here.

If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this topic with your request.

This applies only to the originator of this topic. Other members who need assistance please start your own topic in a new thread.

Thanks