Otwórz notatnik systemowy i wklej: ShellIconOverlayIdentifiers: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => -> Brak pliku ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> Brak pliku ShellIconOverlayIdentifiers-x32: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => -> Brak pliku ContextMenuHandlers01: [Advanced SystemCare] -> {2803063F-4B8D-4dc6-8874-D1802487FE2D} => C:\Program Files (x86)\IObit\Advanced SystemCare\ASCExtMenu_64.dll -> Brak pliku ContextMenuHandlers01: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => -> Brak pliku ContextMenuHandlers06: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => -> Brak pliku Task: {CEDEE101-D9DE-4F41-B2E0-506279764EE3} - System32\Tasks\blogingtcommwes => "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" blogingt.com/mwes <==== UWAGA AlternateDataStreams: C:\ProgramData\MTA San Andreas All:NT [40] AlternateDataStreams: C:\ProgramData\MTA San Andreas All:NT2 [432] HKLM Group Policy restriction on software: %systemroot%\system32\mrt.exe <==== UWAGA HKLM\...\Winlogon: [Userinit] C:\WINDOWS\system32\userinit.exe,C:\ProgramData\Microsoft\Windows\Start Menu\Systen\Win.exe HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Ograniczenia <==== UWAGA GroupPolicy: Ograniczenia <==== UWAGA GroupPolicy\User: Ograniczenia <==== UWAGA CHR HomePage: Default -> hxxp://www.ourstartpage.com/ CHR StartupUrls: Default -> "hxxp://www.interia.pl/#utm_source=instalki1&utm_medium=installer&utm_campaign=instalki1&iwa_source=installer_instalki","hxxps://www.google.pl/webhp?sourceid=chrome-instant&ion=1&espv=2&ie=UTF-8","hxxp://www.youndoo.com/?z=a0320a8fbc09949ced7ca29gcz4tde8ecb4z5t8t4c&from=bcn&uid=ST1000DX001-SSHD-8GB_Z4YDMJ89XXXXZ4YDMJ89&type=hp","hxxp://www.youndoo.com/?z=a6b2196d4732435efdc485cg0z6t0e6e4baq2e6cfo&from=amz&uid=ST1000DX001-SSHD-8GB_Z4YDMJ89XXXXZ4YDMJ89&type=hp","hxxp://www.startpageing123.com/?type=hp&ts=1490216635&z=d1373f0c79a403868c2307fg2z7tdebobg5q8q8c9q&from=che0812&uid=ST1000DX001-SSHD-8GB_Z4YDMJ89XXXXZ4YDMJ89" CHR HKLM-x32\...\Chrome\Extension: [glcimepnljoholdmjchkloafkggfoijh] - hxxps://clients2.google.com/service/update2/crx 2017-07-15 18:18 - 2017-07-15 19:33 - 00000000 ____D C:\AdwCleaner EmptyTemp: Plik zapisz pod nazwą fixlist.txt i umieść obok FRST w tym samym folderze. Uruchom jako administrator FRST i kliknij w Fix/Napraw. Reset Chrome: https://support.google.com/chrome/answer/3296214?hl=pl