Browser search hijack

Hi there. I'm at my wits end here so I'm turning to people smarter than me for help

I'm trying to clean up my roommate's PC that have a search hijacking malware. It affects both Firefox and IE. I've run the Read Me for cleaning and have run all the scans and remove all the malware that malwarebytes found and ran cclearner. However, it looks like the malware is still present. I've looked through several other post with the same situation but none that matches mine exactly. 2 differences that I found in my roommate's machine that does not exist in the other post is that:
1. i can't access regedit.exe in the windows folder from normal or safeboot. It would just restart the session in safe boot and an error message appear in normal boot
2. combofix does not produce the log. when i run it from the desktop, it creates the 32788r22fwjfw in C:\ but no log

both SAS and MBAM says no infection and HJT looks ok to me but I can still see the malware redirecting searches. I've uninstalled Firefox and Java on his machine but no help there.

Please let me know what else I can do to get rid of this thing. Thanks.

 

hi chaslang

well i tried running combofix in safeboot but it complained about pc-cillin running. not knowing how to turn it off, i just uninstalled it on a normal reboot and was then able to run combofix in safeboot (i'll install it back later).

I had some problem running MGtools (keeps saying cannot access memory location something something) but again that works after i removed pc-cillin.

I've attached both new logs to this reply. Looking forward to hearing your diagnostics