Otwórz notatnik systemowy i wklej: ShellIconOverlayIdentifiers: [00avg] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> Brak pliku Task: {18A3568D-C3DD-4784-8AF3-FA6AB56F4D44} - \AutoKMS -> Brak pliku <==== UWAGA Task: {1E92C74C-E1D0-4820-AF97-003465883F27} - System32\Tasks\Avira\Safe Shopping\Check => C:\Program Files (x86)\Avira\Safe Shopping\Updater\Updater.exe Task: {22032968-356A-4502-BA60-14DB49F8CCF8} - System32\Tasks\{8DE1B35E-47BD-46FD-8E1C-DF1B2282385D} => C:\Windows\system32\pcalua.exe -a C:\Users\SAWEK~1\AppData\Local\Temp\jre-8u171-windows-au.exe -d C:\Windows\SysWOW64 -c /installmethod=jau FAMILYUPGRADE=1 <==== UWAGA Task: {78FC02FC-7472-4537-AA35-35DE8790B8D4} - System32\Tasks\Avira\Safe Shopping\Update => C:\Program Files (x86)\Avira\Safe Shopping\Updater\Updater.exe Task: {BD4B5C9F-CA25-4CB7-9E5D-BAE68FEDE606} - System32\Tasks\Avira\Safe Shopping\Launch => C:\Program Files (x86)\Avira\Safe Shopping\Updater\Updater.exe HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Ograniczenia <==== UWAGA HKU\S-1-5-21-4158546765-3951164989-3531573124-1000\...\MountPoints2: {6c407460-26dc-11e8-9511-20cf3072ed6a} - H:\LG_PC_Programs.exe HKU\S-1-5-21-4158546765-3951164989-3531573124-1000\...\MountPoints2: {ed49127d-f4bb-11e7-8b5d-20cf3072ed6a} - I:\SETUP.EXE HKU\S-1-5-21-4158546765-3951164989-3531573124-1000\...\MountPoints2: {ed49127f-f4bb-11e7-8b5d-20cf3072ed6a} - J:\SETUP.EXE BootExecute: autocheck autochk * Toolbar: HKLM - Brak nazwy - {b60873b9-51aa-4566-b2fc-c16de2ec8bff} - Brak pliku CHR HKLM\...\Chrome\Extension: [amkpcclbbgegoafihnpgomddadjhcadd] - hxxps://chrome.google.com/webstore/detail/amkpcclbbgegoafihnpgomddadjhcadd CHR HKLM\...\Chrome\Extension: [caljgklbbfbcjjanaijlacgncafpegll] - hxxps://clients2.google.com/service/update2/crx CHR HKLM\...\Chrome\Extension: [fagakgcelolinfnkfgekcnedpaklfcok] - hxxps://clients2.google.com/service/update2/crx CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx CHR HKLM\...\Chrome\Extension: [ipmkfpcnmccejididiaagpgchgjfajgp] - hxxps://clients2.google.com/service/update2/crx CHR HKLM-x32\...\Chrome\Extension: [amkpcclbbgegoafihnpgomddadjhcadd] - hxxps://chrome.google.com/webstore/detail/amkpcclbbgegoafihnpgomddadjhcadd CHR HKLM-x32\...\Chrome\Extension: [caljgklbbfbcjjanaijlacgncafpegll] - hxxps://clients2.google.com/service/update2/crx CHR HKLM-x32\...\Chrome\Extension: [dhigneefebkcagnpnpbibganpmfgebnk] - hxxps://clients2.google.com/service/update2/crx CHR HKLM-x32\...\Chrome\Extension: [fagakgcelolinfnkfgekcnedpaklfcok] - hxxps://clients2.google.com/service/update2/crx CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx CHR HKLM-x32\...\Chrome\Extension: [ipmkfpcnmccejididiaagpgchgjfajgp] - hxxps://clients2.google.com/service/update2/crx S1 ESProtectionDriver; \??\C:\Windows\system32\drivers\mbae64.sys [X] S3 MBAMFarflt; system32\DRIVERS\farflt.sys [X] S3 MBAMProtection; system32\DRIVERS\mbam.sys [X] S3 MBAMWebProtection; system32\DRIVERS\mwac.sys [X] 2018-07-04 12:37 - 2018-01-08 21:39 - 000000000 ____D C:\AdwCleaner EmptyTemp: Plik zapisz pod nazwą fixlist.txt i umieść obok FRST w tym samym folderze. Uruchom jako administrator FRST i kliknij w Fix/Napraw.