Mam ten sam problem 
Otwórz notatnik systemowy i wklej:
Hosts:
Task: {45A12FDC-6910-4BB7-8144-CAE04F11A19E} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-1728229423-3140500212-2929802513-1000UA = C:\Users\Mariusz\AppData\Local\Facebook\Update\FacebookUpdate.exe [2014-09-09] (Facebook Inc.)
Task: {99006FC4-AB92-475E-B87D-E6FA5CED8CAC} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-1728229423-3140500212-2929802513-1000Core = C:\Users\Mariusz\AppData\Local\Facebook\Update\FacebookUpdate.exe [2014-09-09] (Facebook Inc.)
Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1728229423-3140500212-2929802513-1000Core.job = C:\Users\Mariusz\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1728229423-3140500212-2929802513-1000UA.job = C:\Users\Mariusz\AppData\Local\Facebook\Update\FacebookUpdate.exe
ShellIconOverlayIdentifiers: [00avast] - {472083B0-C522-11CF-8763-00608CC02F24} = No File
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction ======= ATTENTION
HKU\S-1-5-21-1728229423-3140500212-2929802513-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction ======= ATTENTION
HKU\S-1-5-21-1728229423-3140500212-2929802513-1000\Software\Microsoft\Internet Explorer\Main,Start Page = https://mysearch.avg.com/?cid={41D436B6-8ED9-4C5C-9688-1A36C425E044}mid=bb7adf3434fc47d2b3e159d6bc563cc4-caaa2e458d9cec4a86379c23889afb5493f371d5lang=plds=AVGcoid=avgtbavgcmpid=0215avipr=frd=2015-02-27 23:27:47v=4.1.0.411pid=wtusg=sap=hp
SearchScopes: HKU\.DEFAULT - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
Toolbar: HKU\S-1-5-21-1728229423-3140500212-2929802513-1000 - No Name - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - No File
FF Extension: No Name - C:\Users\Mariusz\AppData\Roaming\Mozilla\Firefox\Profiles\lut14u1n.Mariusz\Extensions\trash [2015-04-23]
S2 gupdate; "C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /svc [X]
S3 gupdatem; "C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /medsvc [X]
S3 catchme; \\C:\ComboFix\catchme.sys [X]
2015-05-16 14:47 - 2014-07-20 11:14 - 00000000 ____ D () C:\AdwCleaner
2014-09-01 10:18 - 2014-09-01 10:18 - 0002086 _____ () C:\Users\Mariusz\AppData\Roaming\ALGITBC
2014-09-01 10:18 - 2014-09-01 10:18 - 0001248 _____ () C:\Users\Mariusz\AppData\Roaming\HWQTVOFC
EmptyTemp:
Plik zapisz pod nazwą fixlist.txt i umieść obok FRST w tym samym folderze.