Otwórz notatnik systemowy i wklej:

AlternateDataStreams: C:\ProgramData:NT [40]
AlternateDataStreams: C:\ProgramData:NT2 [432]
AlternateDataStreams: C:\Users\All Users:NT [40]
AlternateDataStreams: C:\Users\All Users:NT2 [432]
AlternateDataStreams: C:\ProgramData\Application Data:NT [40]
AlternateDataStreams: C:\ProgramData\Application Data:NT2 [432]
AlternateDataStreams: C:\ProgramData\Dane aplikacji:NT [40]
AlternateDataStreams: C:\ProgramData\Dane aplikacji:NT2 [432]
AlternateDataStreams: C:\ProgramData\MTA San Andreas All:NT [40]
AlternateDataStreams: C:\ProgramData\MTA San Andreas All:NT2 [432]
AlternateDataStreams: C:\Users\Kanu\Dane aplikacji:NT [40]
AlternateDataStreams: C:\Users\Kanu\Dane aplikacji:NT2 [432]
AlternateDataStreams: C:\Users\Kanu\AppData\Roaming:NT [40]
AlternateDataStreams: C:\Users\Kanu\AppData\Roaming:NT2 [432]
AlternateDataStreams: C:\Users\Public\AppData:CSM [472]
HKLM\...\Policies\Explorer: [f2b78d167355cd9d] 7n/CLdp2CQM3z1qjKTLq7nLAzefwf33bJHzys2X1DZFRuxyBbc9TcQ==
HKLM\...\Policies\Explorer: [e6a8b5cb93b14384] f9dd36107ee09f25e9ee0401bcef4efb
HKU\S-1-5-19\...\Run: [TunnelBear] => C:\Program Files (x86)\TunnelBear\TunnelBear.UI.exe [1352064 2017-06-13] (TunnelBear)
HKU\S-1-5-20\...\Run: [TunnelBear] => C:\Program Files (x86)\TunnelBear\TunnelBear.UI.exe [1352064 2017-06-13] (TunnelBear)
HKU\S-1-5-21-190050623-2394863787-883911600-500\...\MountPoints2: {0dce2781-06bd-11e8-870a-7824af9cfd9e} - E:\HiSuiteDownLoader.exe
HKU\S-1-5-18\...\Run: [TunnelBear] => C:\Program Files (x86)\TunnelBear\TunnelBear.UI.exe [1352064 2017-06-13] (TunnelBear)
Startup: C:\Users\Kanu\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\XIcvKkIsaT.lnk [2016-08-18]
ShortcutTarget: XIcvKkIsaT.lnk -> C:\Users\Administrator.KanuPC\AppData\Roaming\ZTuuGhr\TjxjVBchpp.exe (Brak pliku)
SearchScopes: HKU\S-1-5-21-190050623-2394863787-883911600-500 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
S3 Appinfo; %SystemRoot%\System32\appinfo.dll [X]
S3 BstHdAndroidSvc; "C:\Program Files (x86)\BlueStacks\HD-Service.exe" BstHdAndroidSvc Android [X]
S3 BstHdPlusAndroidSvc; "C:\Program Files (x86)\BlueStacks\HD-Plus-Service.exe" BstHdPlusAndroidSvc Android [X]
S3 Origin Client Service; "C:\Program Files (x86)\Origin\OriginClientService.exe" [X]
S3 BstHdDrv; \??\C:\Program Files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [X]
S3 BstkDrv; \??\C:\Program Files (x86)\BlueStacks\BstkDrv.sys [X]
S3 FairplayKD; \??\C:\ProgramData\MTA San Andreas All\Common\temp\FairplayKD.sys [X]
R4 IOMap; \??\C:\Windows\system32\drivers\IOMap64.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]
2018-01-26 14:22 - 2018-01-26 14:22 - 000000000 __SHD C:\found.000
EmptyTemp:


Plik zapisz pod nazwą fixlist.txt i umieść obok FRST w tym samym folderze. 
Uruchom jako administrator FRST i kliknij w Fix/Napraw.