All services rendered by myself through this Google Site are subject to this disclaimer.
The Zekos trojan (also known as Trojan.Patched.Zekos) is responsible for problems like audio ads playing in the background.
Zekos is known to modify rpcss.dll and svchost.exe.
Once Zekos is installed, it will connect to a remote server, and can also monitor internet activity.
Most antivirus vendors will detect Zekos using their heuristic engine of behaviour blocking, but these zero-day variants are often difficult to detect, especially when security products only use virus signatures to detect malware.
Perform a full scan with Malwarebytes Anti-Malware and use it to remove it.
Restart when prompted by Malwarebytes.
Run a quick scan with Malwarebytes it comes back.
Run HitmanPro.
If having trouble running HitmanPro, you can use the Force Breach mode.
To start HitmanPro in Force Breach mode, hold down the left CTRL-key when you double click on HitmanPro and all non-essential processes will be terminated, including the malware processes.
Run RogueKiller.
Run BitDefender last.