This IS a rootkit+trojan and backdoor.
You may have to reformat. This particular virus is annoyingly nasty. I ran in to it out of my own stupidity. Simply put there are no current, at time of posting, definitions to kill it by any vendor.
Allow me to restate. At this point of posting NO antivirus can completely remove this. I tried literally everything. Emisoft is the only one that did anything at all. Even my paid antivirus did nothing.
There are 4-5 files running at all times.
There are two windows process managers running at all times.
There are two 'windows services' running as well that you won't recognize(easily noticed if you know the OS).
There is another executable that replaces missing files if you manage to delete anything(not running, runs once at start).
The names of the 3rd, 4th and 5th processes are randomly generated along with the folders they rest in.
You can not terminate via CMD or Powershell because all run as a child process of Services.exe which is a windows service. If you terminate it /t /f you WILL bluescreen. Also the PIDs are false and randomly generated each time. You may also notice one exe saying it's linked to a PID that doesn't exist and can't be terminated. You can also neither force delete or suspend their processes.
I was able to eliminate the process manager executables that were in a locked folder in user/name/app data/local, and they did not come back. However I could not eliminate the other two processes that were running because removing either would simply be replaced on restart by the 5th executable I could not locate.
ALL parts send data out over your network connection unless you can block it with a REAL firewall, not the windows garbage. The troubling thing is the windows process exes would launch multiple exes and ALL would send data out at an alarming rate. I can not say what they were sending other that they were sending data. None of my personal accounts have been attempted at, but I also have 2step on everything important. Also the IPs it was sending data too were likely false or behind a VPN since there was no single IP receiving a lot of information. Reported them all the same.
In the end I could not eliminate the 3 remaining exes and was forced to reformat. I tried contacting Avast to get a definition created for this thing, but I got no reply from them. Very disappointed in that fact.
Emisoft was able to detect one part after getting rid of the first two, but would then crash/hang on that third file indefinitely on detection. I left it running all day and it was still hung on the file after. I tried a few times in/out of safe mode and the root account with no luck.
If you're running Windows 10 you can download an ISO from Microsoft directly and you'll only need your serial to install. This was my route except my computer is bios activated so no serial needed. I would suggest using another machine to do this on.. I can't guarantee that the virus doesn't have the ability to hop to another device.