Also, while runnning Combofix, it started to prepare for scanning, then gave this message: COmbofix has detected the presence of rootkit activity and needs to reboot the machine. kindly note down on paper, the name of each file, we may need it later.

The files were:
C:\Windows\System32\ntos.exe
C:\Windows\System32\oembois.exe
C:\Windows\System32\twext.exe
C:\Windows\System32\twex.exe
C:\Windows\System32\sdra64.exe
C:\Windows\System32\intel64.exe
C:\Windows\System32\wsnpoema.exe

After reboot, I logged in, then a black screen came up followed by Combofix opening on the screen. It scanned and then rebooted again.