Odinstaluj Java 7 Update 79 (64-bit),Java 8 Update 121 (64-bit).Otwórz notatnik systemowy i wklej:

ShellIconOverlayIdentifiers: [GDriveSharedOverlay] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D43} =>  -> No File
Task: {D384E07C-7410-4BF5-8047-06A7C02882D8} - System32\Tasks\lorensonewsnetrgzoss => "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" lorensonews.net/rgzoss <==== ATTENTION
AlternateDataStreams: C:\ProgramData:NT [40]
AlternateDataStreams: C:\ProgramData:NT2 [432]
AlternateDataStreams: C:\Users\All Users:NT [40]
AlternateDataStreams: C:\Users\All Users:NT2 [432]
AlternateDataStreams: C:\ProgramData\Application Data:NT [40]
AlternateDataStreams: C:\ProgramData\Application Data:NT2 [432]
AlternateDataStreams: C:\ProgramData\MTA San Andreas All:NT [40]
AlternateDataStreams: C:\ProgramData\MTA San Andreas All:NT2 [432]
AlternateDataStreams: C:\Users\Ephistoteles\Application Data:NT [40]
AlternateDataStreams: C:\Users\Ephistoteles\Application Data:NT2 [432]
AlternateDataStreams: C:\Users\Ephistoteles\Local Settings:R9hVc1Nwd1BRoktfyUJbyTz [2144]
AlternateDataStreams: C:\Users\Ephistoteles\AppData\Local:R9hVc1Nwd1BRoktfyUJbyTz [2144]
AlternateDataStreams: C:\Users\Ephistoteles\AppData\Roaming:NT [40]
AlternateDataStreams: C:\Users\Ephistoteles\AppData\Roaming:NT2 [432]
AlternateDataStreams: C:\Users\Ephistoteles\AppData\Local\Application Data:R9hVc1Nwd1BRoktfyUJbyTz [2144]
AlternateDataStreams: C:\Users\Ephistoteles\AppData\Local\Temporary Internet Files:way5gBy7KDIbYNgFs7Cz [2382]
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restriction <==== ATTENTION
HKU\S-1-5-21-3297363965-2412082854-2817705463-1000\...\Run: [AdobeBridge] => [X]
HKU\S-1-5-21-3297363965-2412082854-2817705463-1000\...\MountPoints2: {a5c03257-eb91-11e6-b2b1-408d5ced33f1} - F:\AutoPlay.exe -c
GroupPolicy: Restriction <==== ATTENTION
GroupPolicy\User: Restriction <==== ATTENTION
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = 
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = 
SearchScopes: HKU\S-1-5-21-3297363965-2412082854-2817705463-1000 -> {FFEBBF0A-C22C-4172-89FF-45215A135AC7} URL = hxxp://go.mail.ru/distib/ep/?q={searchTerms}&fr=ntg&product_id=%7B504B7483-6808-49CB-9D25-000FA6A13A31%7D&gp=811041
CHR StartupUrls: Default -> "hxxp://www.google.pl/","hxxp://www.google.com/","hxxp://mail.ru/cnt/10445?gp=811036"
CHR HKU\S-1-5-21-3297363965-2412082854-2817705463-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [fcfenmboojpjinhpgggodefccipikbpd] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [bhjhnafpiilpffhglajcaepjbnbjemci] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [epgjfmblhacacphaljkdcjllkomdcjpc] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx <not found>
CHR HKLM-x32\...\Chrome\Extension: [hcadgijmedbfgciegjomfpjcdchlhnif] - hxxps://clients2.google.com/service/update2/crx
2017-08-26 15:31 - 2017-01-01 14:24 - 000000000 ____D C:\AdwCleaner
C:\Users\Ephistoteles\worldpainter_2.4.0.exe
EmptyTemp:

Plik zapisz pod nazwą fixlist.txt i umieść obok FRST w tym samym folderze. 
Uruchom jako administrator FRST i kliknij w Fix/Napraw.
Reset Chrome: https://support.google.com/chrome/answer/3296214?hl=pl
W ustawieniach Chrome usun przywracanie zestawu stron po starcie przegladarki.