Please read what I said - It does not remove the malware but it will remove the run keys … No run key and the malware is inactive, unless it is allied to a job, in which case it will be re-instated when it next runs… But there is a window of opportunity to use MBAM or some other tool to kill it dead