Otwórz notatnik systemowy i wklej:
HKU\S-1-5-21-4072849881-243369907-252242290-1001\...\Run: [AdobeBridge] = [X]
SearchScopes: HKU\.DEFAULT - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
CHR Extension: (Rapideo.pl) - C:\Users\Mateusz\AppData\Local\Google\Chrome\User Data\Default\Extensions\elpdjcjlbmambiaahbcjphfdnpclaeec [2015-08-08]
CHR Extension: (SpeakIt!) - C:\Users\Mateusz\AppData\Local\Google\Chrome\User Data\Default\Extensions\pgeolalilifpodheeocdmbhehgnkkbak [2015-08-08]
R1 {66d1cdc5-8626-47a4-851f-1dccf3554719}Gw64; C:\Windows\System32\drivers\{66d1cdc5-8626-47a4-851f-1dccf3554719}Gw64.sys [48768 2015-08-09] (StdLib)
S3 wfpcapture; \SystemRoot\System32\drivers\wfpcapture.sys [X]
2015-08-09 12:07 - 2015-08-09 12:11 - 00000000 ____ D C:\AdwCleaner
EmptyTemp:
Plik zapisz pod nazwą fixlist.txt i umieść obok FRST w tym samym folderze.
Przeskanuj programem Malwarebytes Anti-Malware https://www.malwarebytes.org/downloads/