|"Then on the restart the virus was back"|
If the virus keeps coming back, it may nullify setting changes, etc.
Boot the infected system to Safe Mode by tapping F8 (top row key), and select Safe Mode with Networking
In Safe Mode with Networking, sign in to your usual profile.
Next, download iExplore.exe or eXplorer.exe, which are renamed copies of rKill:
Save the file to the Desktop, and double-click on it. (For Vista, select: Run as Administrator)
Ignore any messages, and allow the file to run until the command window closes.
Without a reboot, update and run Malwarebytes’ Anti-Malware
>>Last, please post the Malwarebytes log in your reply.<<