So Windows 7 on my Dad's HP Pavilion Laptop got infected with a rootkit and was removed by me. Since he was vacationing at the time of the infection, he brought it to a mom and pop computer repair store and they incorrectly diagnosed a bad hard drive. They replaced the hard drive and that helped for a few days before the infection came back.
I posted a topic over at bleeping computer forums for help and they eventually sent me here. They think it may have to do with the new hard driver and needing a generic driver. The topic and steps taken can be found at
Exploit.Dropper.GSA Virus removed but system files infected? - Virus, Trojan, Spyware, and Malware Removal Logs
Ran sfc command and it said there was corruption. Ran SFCFix but it could not connect to the servers and came back all clear. CBS Log file is attached. Also attached the windows update error.
SFCFix output:
SFCFix version 3.0.0.0 by niemiro.
Start time: 2018-03-07 11:25:02.847
Microsoft Windows 7 Service Pack 1 - amd64
Not using a script file.
AutoAnalysis::
SUMMARY: No corruptions were detected.
AutoAnalysis:: directive completed successfully.
Successfully processed all directives.
SFCFix version 3.0.0.0 by niemiro has completed.
Currently storing 0 datablocks.
Finish time: 2018-03-07 11:25:30.911
----------------------EOF-----------------------