SYSTEM CHECK REPAIR boot pe, delete malware under allusers appdata and local settings appdata backup %temp%\smtmp boot safe mode right click task bar, properties reset menu items run c:\windows\system32\cmd.exe regedit delete policies keys run unhide.bat run shortcuts_restore.bat Verify Shortcuts, restore manually if necessary. xcopy "%UserProfile%\Local Settings\Temp\smtmp\1\*.*" "%AllUsersProfile%\Start Menu\*.*" /s/e xcopy "%UserProfile%\Local Settings\Temp\smtmp\2\*.*" "%UserProfile%\Application Data\Microsoft\Internet Explorer\Quick Launch\*.*" /s/e xcopy "%UserProfile%\Local Settings\Temp\smtmp\4\*.*" "%UserProfile%\Start Menu\*.*" /s/e Fix EXE if necessary to run MBam Launch Task Mgr and watch for malware startup when starting MBam Run MBam flash scan Remove bad stuff, reboot. Update MBam and run quick scan. Run Anti-Virus Done.