I have a similar problem but the malware seems to have renamed itself "UTubaeAudaBllock". May I post my inquiry here or begin a new thread? I have followed the steps above and have a .FRST.txt which I've attached. Thanks in advance.