Advice on adware (or malware?)

Hi there folks
My browsers are being hijacked every now and then, suddenly i have the homepages set as e.g. "ourluckysites.com", or something like funnysearch, all my browsers shortcuts suddenly lead me to other weird folders with copies of the browser inside (e.g.today my Google Chrome was sitting inside a folder called "Everness").
This has been happening for a while and it affects all browsers (firefox, edge and chrome).
Until now i was using MalwareBytes free trial, MalwareBytes's AdwareCleaner and Zemana's free trial to clean it but t always comes back. It's like I have installed something that is reinstalling the garbage.

Haven't found a post talking about this sites, any help appreciated.

thanks folks

Marcos

This is kind of a simplified guide going from step #2 to the end. https://malwarecomplaints.info/our-lucky-sites-removal/
SuperAntiSpyware is also a great free program for finding things like Brower hijackers. If You don't have a restore point before the problems started, and cleaning out any "Suspicious" programs, services, and the Temp files doesn't work, You might have to resort to something Stronger like https://www.bleepingcomputer.com/download/rkill/ or the other four programs at the bottom of that page.

Bat 1 said:

This is kind of a simplified guide going from step #2 to the end. https://malwarecomplaints.info/our-lucky-sites-removal/
SuperAntiSpyware is also a great free program for finding things like Brower hijackers. If You don't have a restore point before the problems started, and cleaning out any "Suspicious" programs, services, and the Temp files doesn't work, You might have to resort to something Stronger like https://www.bleepingcomputer.com/download/rkill/ or the other four programs at the bottom of that page.

Unbelievable, after malware bytes, zemana and adware cleaner, SuperAntiSpyware found 605 threats

In a lot of these cases it's an add-on which doesn't get removed it then goes and gets more malware you can reset browser to remove all add-ons which is the best move

TairikuOkami said:

Run CMD as admin and copy/paste (it should prevent reinfection by malware):

reg add "HKLM\Software\Microsoft\Windows Script Host\Settings" /v "Enabled" /t REG_DWORD /d "0" /f

Hi there, what that command line does?

My hosts file was actually corrupt (empty), i had to paste the code of the picture to restore it.