Could you let me know if this stops it
CAUTION : This fix is only valid for this specific machine, using it on another may break your computer
Open notepad and copy/paste the text in the quotebox below into it:
CreateRestorePoint:
Toolbar: HKLM - No Name - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - No File
S4 peqoluwi; C:\Users\craig\AppData\Roaming\1E007640-1425844370-A100-48D4-002618AF5843\jnsz2AE.tmp [175104 2015-03-12] () [File not signed]
2015-04-12 13:31 - 2015-04-12 13:31 - 00003072 _____ () C:\Windows\System32\Tasks\{ED89BDC7-B4E3-4287-84C2-610B8513C231}
2015-03-29 22:56 - 2015-03-08 14:52 - 00000000 ____D () C:\ProgramData\{572f9010-f4ba-af2c-572f-f9010f4b4043}
C:\Users\craig\AppData\Roaming\1E007640-1425844370-A100-48D4-002618AF5843
Reg: reg delete HKLM\SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local /f
Reg: reg add HKLM\SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local /f
RemoveProxy:
EmptyTemp:
CMD: bitsadmin /reset /allusers
Save this as fixlist.txt, in the same location as FRST.exe
https://dl.dropboxusercontent.com/u/73555776/FRSTfix.JPG
Run FRST and press Fix
On completion a log will be generated please post that