firefox Browser files wont delete saying i need permission from trustedinstaller

Okay so i tried to dele these 2 browser files i gave it admin permission but i still cant delete, it says i need permission from trustedinstaller i already tried to change owners, it says trustedinstallers is owner now… wont let change settings or anything. please help me delete these 2 browser files avast keeps popping up cuz of these 2 files everytime i open firefox, google chrome is working fine with no avast pop ups. its just firefox.

Attach your basic logs. (MBAM, FRST and aswMBR…!!)
Instructions: https://forum.avast.com/index.php?topic=53253.0

thanks for the fast reply, ill do them right now

heres the MBAM moving on to the next.

heres the FRST/Addition

heres the last one

OK, now you’ve to wait a bit…

okay thanks for the help bro.

You’re welcome. Be patient, it might take a while…

alright, hoping it wont be to hard to get trustedinstaller out of my system.

Did you set the following proxy server?

ProxyServer: [S-1-5-21-3303689390-605401886-785204288-1001] => http=127.0.0.1:60011;https=127.0.0.1:60011
...and the following directory?
2014-12-22 21:05 - 2014-12-22 21:05 - 00000000 ____D () C:\Users\eric\Desktop\I KNOW YOUR WATCHING YOU STUPID DORKS, ILL NEVER FORGIVE, NEVER FORGET. I CANT CONTROL MYSELF FOREVER DESIREE. ILL KILL YOU AND YOUR LIL BOYFRIEND, U MIGHT OF HEALED BUT I DIDNT. I DONT WANT MONEY I WANT BLOOD

[*]Step #1 Fix with FRST
Make sure that you still have FRST.exe on your Desktop. If you do not have it, download the suitable version from here to your Desktop.
[*]Open Notepad.exe. Do not use any other text editor software;
[*]Copy and Paste the contents inside the code-box to your Notepad

Start
CreateRestorePoint:
Closeprocesses:
Emptytemp:
HKLM\...\Run: [IntelTBRunOnce] => wscript.exe //b //nologo "C:\Program Files\Intel\TurboBoost\RunTBGadgetOnce.vbs"
C:\Program Files\Intel\TurboBoost\RunTBGadgetOnce.vbs
HKLM-x32\...\Run: [] => [X]
HKU\S-1-5-21-3303689390-605401886-785204288-1001\...\Run: [Pando Media Booster] => C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe [4287536 2013-12-05] ()
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF Plugin HKU\S-1-5-21-3303689390-605401886-785204288-1001: pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
End

[*]Click on File > Save as…
[list][*]Inside the File Name box type fixlist.txt
[*]From the Save as type drop down list, choose All Files
[*]Save the file to your Desktop;
[*]Re-run FRST.exe and click Fix;
[*]Note: If FRST advises there is a new updated version to be downloaded, do so/allow this.[]After the completion, a log will be produced;
[
]Attach the log in your next reply.[/list]


[*]Required Log(s):
[*]FRST Fix Log

Regards,
Valinorum

the folder contain other links like trustedinstaler but i was able to get rid of, i used mbam yesterday found 150 threats and did a boot time scan with avast found alot of other viruses i though i was done, until i logged in as a guest and avast started to act crazy with firefox and only firefox, so i uninstalled it reinstall, still goes crazy with pop ups i track the folder tried to dele it worked but i could not dele trustedinstaler.

going to run the FRST now.

should i restart the scan, it froze while scanning, or should i leave it>?

okay so i shut the scan down cuz it froze and re ran it and worked, here it is.

oh yes i remember i had issues with my proxy server too i did not set it. that was like 3 days ago i think.

Did the pop-up stop after the fix?

I havent installed firefox yet, but i still have those 2 broswer files in my system tried to delete and still saying i need permission from trustedinstaller.

Can you boot into safe mode and try removing them?

I just tried to remove them on safe mode, still asks for permission from trustedinstaller.