Otwórz notatnik systemowy i wklej: Task: {00C13E2B-BE25-4945-A614-2D7BAE5E0941} - System32\Tasks\Baidu PC Faster Service => C:\Program Files (x86)\PC Faster\5.1.0.0\PCFasterSvc.exe Task: {4089AEC8-5DF7-4224-8FCF-2AC0CA7524B9} - System32\Tasks\AVG\Overseer => C:\Program Files\Common Files\AVG\Overseer\overseer.exe [2018-07-10] (AVG Technologies CZ, s.r.o.) Task: {B16E9572-8D79-4877-ACA8-B6D57E058359} - System32\Tasks\AVGPCTuneUp_Task_BkGndMaintenance => C:\Program Files (x86)\AVG\AVG PC TuneUp\tuscanx.exe [2018-01-22] (AVG Technologies CZ, s.r.o.) Task: {C570DE46-2FA4-4D17-8B06-F2FDC5EA1320} - System32\Tasks\Baidu PC Faster Update => C:\Program Files (x86)\PC Faster\5.1.0.0\Updater.exe Hosts: HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [96056 2013-05-30] (Hewlett-Packard) HKLM-x32\...\Run: [] => [X] HKU\S-1-5-21-3818615696-1212000770-3225446292-1001\...\MountPoints2: {64ff3d1c-d949-11e5-828d-40167e13151d} - "F:\Startme.exe" HKU\S-1-5-21-3818615696-1212000770-3225446292-1001\...\MountPoints2: {8f396a87-fb8c-11e7-8339-54271e5c4246} - "F:\AutoRun.exe" HKU\S-1-5-21-3818615696-1212000770-3225446292-1001\...\MountPoints2: {f0bf9929-6098-11e5-826b-40167e13151d} - "F:\Startme.exe" HKU\S-1-5-21-3818615696-1212000770-3225446292-1001\...\MountPoints2: {f365f5fb-8f8a-11e5-8277-40167e13151d} - "F:\AutoRun.exe" Startup: C:\Users\Arekk\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\WO Mic Client.lnk [2017-06-16] ShortcutTarget: WO Mic Client.lnk -> C:\Program Files (x86)\WOMic\WOMicClient.exe (Brak pliku) SearchScopes: HKU\S-1-5-21-3818615696-1212000770-3225446292-1001 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-21-3818615696-1212000770-3225446292-1001 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = BHO: Brak nazwy -> {95B7759C-8C7F-4BF1-B163-73684A933233} -> Brak pliku BHO-x32: Brak nazwy -> {95B7759C-8C7F-4BF1-B163-73684A933233} -> Brak pliku CHR HKU\S-1-5-21-3818615696-1212000770-3225446292-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [mbckjcfnjmoiinpgddefodcighgikkgn] - hxxps://clients2.google.com/service/update2/crx CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - hxxps://clients2.google.com/service/update2/crx CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - hxxps://clients2.google.com/service/update2/crx CHR HKLM-x32\...\Chrome\Extension: [ofoeigeaodhbjogdigckajfhjbonaofg] - hxxps://clients2.google.com/service/update2/crx S2 PCFasterSvc_{PCFaster_5.1.0.0}; C:\Program Files (x86)\PC Faster\5.1.0.0\PCFasterSvc.exe [X] S3 AndnetBus; \SystemRoot\System32\drivers\lgandnetbus64.sys [X] S3 AndNetDiag; \SystemRoot\system32\DRIVERS\lgandnetdiag64.sys [X] S3 ANDNetModem; \SystemRoot\system32\DRIVERS\lgandnetmodem64.sys [X] S3 andnetndis; \SystemRoot\system32\DRIVERS\lgandnetndis64.sys [X] S3 e1edc438-f640-4184-a443-d2a7c37a01dc; \??\C:\OA30\690b33e1-0462-4e84-9bea-c7552b45432a.sys [X] 2018-07-15 15:14 - 2018-07-15 15:18 - 000000000 ____D C:\AdwCleaner EmptyTemp: Plik zapisz pod nazwą fixlist.txt i umieść obok FRST w tym samym folderze. Uruchom jako administrator FRST i kliknij w Fix/Napraw.