Odinstaluj Browser-Security,CCleaner.Otwórz notatnik systemowy i wklej:

ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} =>  -> Brak pliku
Task: {9401F40D-54A4-4DD2-AC5C-E17AC3E0F5DD} - System32\Tasks\GoogleUpdateTaskMachineCore =>  [Argument = /c] <==== UWAGA
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> hxxps://launchpage.org/?uid=qTBCBKjchx0cXu%2FWPI%2BL8zogZrIYdTnMZvqlve0qg6CGZzkfsNYpbjXNYzxOOL9yYC8%3D
ShortcutWithArgument: C:\Users\Public\Desktop\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> hxxps://launchpage.org/?uid=qTBCBKjchx0cXu%2FWPI%2BL8zogZrIYdTnMZvqlve0qg6CGZzkfsNYpbjXNYzxOOL9yYC8%3D
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Ograniczenia <==== UWAGA
HKU\S-1-5-21-918967821-2167642238-3892435710-1001\...\Run: [] => [X]
HKU\S-1-5-21-918967821-2167642238-3892435710-1001\...\MountPoints2: {275e43e7-63b3-11e6-824f-806e6f6e6963} - "D:\autorun.exe" 
HKU\S-1-5-21-918967821-2167642238-3892435710-1001\...\MountPoints2: {848b973c-d5ca-11e6-826b-18cf5ea88b5a} - "E:\HiSuiteDownLoader.exe" 
AutoConfigURL: [S-1-5-21-918967821-2167642238-3892435710-1001] => hxxp://fast-access-web.com/wpad.dat?c532d840da755521fc140df1aba396c534263656
ManualProxies: 0hxxp://fast-access-web.com/wpad.dat?c532d840da755521fc140df1aba396c534263656
FF Homepage: Mozilla\Firefox\Profiles\bxeza6hj.default -> hxxp://www.yandex.ru/?clid=2039341
FF Extension: (Browser-Security) - C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\bxeza6hj.default\Extensions\firefox@browser-security.de.xpi [2017-02-03]
FF Extension: ("Yandex Elements") - C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\bxeza6hj.default\Extensions\yasearch@yandex.ru.xpi [2017-08-21]
FF Extension: (Coolrom Search Engine) - C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\bxeza6hj.default\Extensions\{0fc22c4c-93ed-48ea-ad12-dc8039cf3795}.xpi [2017-08-03]
FF Extension: (WebSearch Yahoo Extension) - C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\bxeza6hj.default\Extensions\{2c413992-ba94-4917-bd57-57eef39b4f8a}.xpi [2017-08-02]
FF ExtraCheck: C:\Program Files (x86)\mozilla firefox\defaults\pref\784312.js [2017-07-28] <==== UWAGA (Linkuje do pliku *.cfg)
FF ExtraCheck: C:\Program Files (x86)\mozilla firefox\784312.cfg [2017-07-28] <==== UWAGA
CHR HomePage: Default -> hxxp://search.babylon.com/?affID=119535&tt=190313_wctrl&babsrc=HP_ss_bad2g&mntrId=38AB002421101810
RemoveProxy:
EmptyTemp:

Plik zapisz pod nazwą fixlist.txt i umieść obok FRST w tym samym folderze. 
Uruchom jako administrator FRST i kliknij w Fix/Napraw.
Pobierz i uruchom jako administrator AdwCleaner   https://toolslib.net/downloads/finish/1/ Kliknij Scan(Skanuj) i później Cleaning(Oczyść).