which logs ? i did not do any scan with avast - should i scan and send logs ?. just kicked avira out (damn thing has no password protect) and ran malware bytes - clean ! but Rkill always deletes these files and they reappear :

InfDefaultInstal.exe and runonce.exe in my SysWow64 folder…