Sounds like you have an infected file there.
Download ComboFix from the location below and save it to your Desktop >>
http://subs.geekstogo.com/ComboFix.exe
Double click combofix.exe and follow the prompts. Never rename Combofix unless instructed.
When finished it shall produce a log for you. Post that log and a HijackThis log in your next reply.
Note: Do not mouseclick Combofix's window while its running. That may cause it to stall.
Carefully examine the log from Combofix. Under the heading "Other Deletions" you will most likely find this statement >>
"Infected copy of c:\windows\system32\userinit.exe was found and disinfected
Restored copy from - c:\windows\$NtServicePackUninstall$\userinit.exe"
IF you see that then go to Start -> Run and type in
combofix /u (note the space) & press OK. This will remove Combofix.
Finally update Malwarebytes, run another full scan and post the log here.
Hybrid Mode
