I'm going to do some investigation closer.
I will be back after several hours with the next instructions... For now, please do the following, which will help me decide what to do later:
First, Re-run Junkware Removal Tool and AdwCleaner as before and post logs from them.
Re-running FRST to search for any leftovers:
Please re-run Farbar Recovery Scan Tool
to give me a fresh look at your system.
- Right-click on FRST icon and select Run as Administrator to start the tool.
- Make sure that every checkbox has a checkmark beside it! <<< NEW INSTRUCTIONS
- Press Scan button and wait.
- The tool will produce two logfiles on your desktop: FRST.txt and Addition.txt.
Please include their content into your next reply.
- Double-click SystemLook.exe to run it.
- Copy the content of the following codebox into the main textfield:
- Click the Look button to start the scan.
- When finished, a notepad window will open with the results of the scan. Please post this log in your next reply.
The log can also be found on your Desktop entitled SystemLook.txt
Please download WVCheck from Latest EXE Download
- Double click WVCheck.exe. (If you downloaded the zipped version you will need to extract it.)
- As indicated by the prompt, This program can take a while depending on your hard drive space.
- Once the program is done, copy the contents of the notepad file and send me a private message with the information. This is important since much of the information is unique to you as an individual.
Confirm with me whether you ran the Chrome Browser Cleanup Tool early on and Avast Browser Cleanup. If this was not done, then this has caused the reinfection.
If you have accounts on Mozilla for Firefox, and Google for Chrome and other accounts, then you can easily sync your data, and completely reinstall the profiles for each browser, which may or may not help this process. I can help you do this of course, but I want to ensure you do not lose browser settings, bookmarks, list of addons, etc., which would easily be "sync-able".
Lastly, did you create the folders on the desktop named "AAA - *" (where * is the suffix, like personal files, video, etc.)?