Komputer wujka został zaśmiecony różnymi nachalnymi reklamami, Strong Signal (tego chyba się pozbyłem) i jeszcze komunikatem Welcome to Anywhere access setup wizard.
Wyniki poszukiwań FRST w załączniku 
Otwórz notatnik systemowy i wklej:
Task: {6F33E592-5058-437B-92FB-CE9D59318424} - System32\Tasks\{71C52DE3-C479-447F-AB5B-AD36AD76292C} = pcalua.exe -a C:\Users\Andrzej\AppData\Roaming\mystartsearch\UninstallManager.exe -c -ptid=cvs
ShellIconOverlayIdentifiers: [00avast] - {472083B0-C522-11CF-8763-00608CC02F24} = No File
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction ======= ATTENTION
HKU\S-1-5-21-1002390150-1187674150-2912461534-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction ======= ATTENTION
SearchScopes: HKU\.DEFAULT - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: No Name - {F5566DA9-EA9A-4C1E-8041-81046DA3C639} - No File
Toolbar: HKU\S-1-5-21-1002390150-1187674150-2912461534-1000 - No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No File
CHR HKLM-x32\...\Chrome\Extension: [pplphlbogdadpkmdhbjdebhfhjifbfka] - No Path Or update_url value
R2 xeqomesu; C:\Users\Andrzej\AppData\Roaming\0E08D920-1425318153-11B2-8000-FF92E95450CB\nsnDF22.tmpfs [X]
S3 catchme; \\C:\ComboFix\catchme.sys [X]
2015-03-02 21:43 - 2015-03-02 21:43 - 00003152 _____ () C:\Windows\System32\Tasks\{71C52DE3-C479-447F-AB5B-AD36AD76292C}
2015-03-05 10:01 - 2013-11-05 16:30 - 00000000 ____ D () C:\AdwCleaner
C:\Users\Andrzej\AppData\Local\Google\Desktop\Install
EmptyTemp:
Plik zapisz pod nazwą fixlist.txt i umieść obok FRST w tym samym folderze.
Skasuj folder C:\FRST