A little tidbit on MalwareBytes -
If you customize your StartMenu at all, say add the LogOff item to it, MalwareBytes, in an overabundance of caution, considers that a Possible Unwanted Modification, will identify it as 'PUM.Hijack.StartMenu' & show it as an 'infection'. If you elect to 'clean' it, MWB will just reset the StartMenu options back to defaults.
In other words, it may be tough to identify what is a true positive among the 'PUM....' entries MWB 'finds'. I can reliably tell you that 'PUM.Hijack.StartMenu' is a false positive, though.
