Najbardziej denerwujące objawy jak w temacie.
Adwcleaner i Mbam nic nie znalazły.
Otwórz notatnik systemowy i wklej:
Task: {067BA2A1-93C2-41E9-8395-8B7EB9884B17} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-341414776-540284076-241748683-1000Core = C:\Users\Morsacze\AppData\Local\Facebook\Update\FacebookUpdate.exe [2014-02-20] (Facebook Inc.)
Task: {A10E4F16-F713-4ABC-964F-0356E55174C3} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-341414776-540284076-241748683-1000UA = C:\Users\Morsacze\AppData\Local\Facebook\Update\FacebookUpdate.exe [2014-02-20] (Facebook Inc.)
Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-341414776-540284076-241748683-1000Core.job = C:\Users\Morsacze\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-341414776-540284076-241748683-1000UA.job = C:\Users\Morsacze\AppData\Local\Facebook\Update\FacebookUpdate.exe
HKU\S-1-5-21-341414776-540284076-241748683-1000\...\MountPoints2: {01eeb36b-3796-11e4-a670-002186b2808a} - G:\MicroLauncher.exe
HKU\S-1-5-21-341414776-540284076-241748683-1000\...\MountPoints2: {18cd649e-2b48-11e3-9e8d-002186b2808a} - G:\AutoRun.exe
HKU\S-1-5-21-341414776-540284076-241748683-1000\...\MountPoints2: {18cd64a6-2b48-11e3-9e8d-002186b2808a} - G:\AutoRun.exe
HKU\S-1-5-21-341414776-540284076-241748683-1000\...\MountPoints2: {6861c0ff-2159-11e4-b495-002186b2808a} - G:\MicroLauncher.exe
HKU\S-1-5-21-341414776-540284076-241748683-1000\...\MountPoints2: {7b009c12-338d-11e4-9336-002186b2808a} - G:\AutoRun.exe
HKU\S-1-5-21-341414776-540284076-241748683-1000\...\MountPoints2: {a032718f-3cc9-11e3-8ade-00f1d000f1d0} - G:\AutoRun.exe
SearchScopes: HKU\.DEFAULT - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
CHR HKLM\...\Chrome\Extension: [ngpampappnmepgilojfohadhhmbhlaek] - C:\Program Files (x86)\Internet Download Manager\IDMGCExt.crx [Not Found]
CHR HKLM-x32\...\Chrome\Extension: [ngpampappnmepgilojfohadhhmbhlaek] - C:\Program Files (x86)\Internet Download Manager\IDMGCExt.crx [Not Found]
S4 cpuz136; No ImagePath
U3 aytxvpss; C:\Windows\System32\Drivers\aytxvpss.sys [0] (Advanced Micro Devices) ==== ATTENTION (zero byte File/Folder)
S4 btwaudio; system32\drivers\btwaudio.sys [X]
S4 btwavdt; system32\DRIVERS\btwavdt.sys [X]
S4 btwl2cap; system32\DRIVERS\btwl2cap.sys [X]
S4 btwrchid; system32\DRIVERS\btwrchid.sys [X]
S4 MpKsld90e5540; \\C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{40DC6C14-66C9-4B22-88CB-185FFCFC95AB}\MpKsld90e5540.sys [X]
EmptyTemp:
Plik zapisz pod nazwą fixlist.txt i umieść obok FRST w tym samym folderze.