Could you download and run Getsusp tool on the machine and update the logs for review that will tell us what we are dealing with on your machine.
Moved to Malware Discussion > Home User Assistance.
I'll get the utility. The McAfee scan reported it as a Generic Downloader.x!emj (Trojan) in file C:\ProgramData\api-ms-win-core-memory-I1-1-032.dll. It can't be deleted on a restart scan, as administrator and doesn't even appear in the directory listing on a Safe/Command line start.
Got the utility, ran it and uploaded to labs. Received extra.dat. Installed it. Trojan still there...
tried all the above again... no luck
Tried to delete file as administrator in safe mode .... file locked
tried again as admin... safe command prompt... file does not exist
reboot .... trojan back