The two last weeks, I've been performing scans and everytime I got this: Vendor: Malware.Packer Type: File Path: C:\Program Files (x86)\Microsoft\DesktopLayer.exe Action: Quarantined It keeps appearing back but I always permanently delete it. So far, 3 hours passed and it didn't get back, I removed it from Program Files (x86) and I found another one in AppData\Roaming that I deleted so I think that one was fixed. But it might had lead to something else: Vendor: Hijack.UserInit Type: Registry Data Path: HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS NT\CURRENTVERSION\WINLOGON Action: Replaced I found it in Regedit and I'm thinking of deleting it but I'm afraid to not break something (Especially that the action is "Replaced" in the MBAM scan log) Since Malwarebytes detected that virus, my Chrome extensions kept breaking (I repaired them lots of times) so I uninstalled all of the extensions. I would really appreciate some help since I'm scared that it might get worse.