Otwórz notatnik systemowy i wklej: HKLM-x32\...\Run: [PowerDVD14Agent] => C:\Program Files (x86)\CyberLink\PowerDVD14\PowerDVD14Agent.exe [795336 2015-10-29] (CyberLink Corp.) HKLM Group Policy restriction on software: %systemroot%\system32\mrt.exe <==== UWAGA HKU\S-1-5-21-1302910574-664433798-587839676-1001\...\RunOnce: [Uninstall 17.3.7076.1026\amd64] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\HP\AppData\Local\Microsoft\OneDrive\17.3.7076.1026\amd64" HKU\S-1-5-21-1302910574-664433798-587839676-1001\...\RunOnce: [Uninstall 17.3.7076.1026] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\HP\AppData\Local\Microsoft\OneDrive\17.3.7076.1026" HKU\S-1-5-21-1302910574-664433798-587839676-1001\...\MountPoints2: {048248fc-ac43-11e7-83b6-705a0fb69444} - "F:\AutoRun.exe" HKU\S-1-5-21-1302910574-664433798-587839676-1001\...\MountPoints2: {8fa59017-cc9e-11e7-b927-705a0fb69444} - "F:\autorun.exe" HKU\S-1-5-21-1302910574-664433798-587839676-1001\...\MountPoints2: {af2cb974-b045-11e7-b924-705a0fb69444} - "F:\AutoRun.exe" CHR DefaultSearchURL: Default -> hxxps://search.tb.ask.com/search/GGmain.jhtml?searchfor={searchTerms}&redirect=CPC CHR DefaultSearchKeyword: Default -> askwebsearch CHR DefaultSuggestURL: Default -> hxxps://ss.search.ask.com/ss?li=ff&sstype=prefix&limit=10&hl=en&q={searchTerms} CHR Profile: C:\Users\HP\AppData\Local\Google\Chrome\User Data\Default [2018-01-05] CHR Extension: (Ask Web Search) - C:\Users\HP\AppData\Local\Google\Chrome\User Data\Default\Extensions\lgfehfbnofiffladdncogfobimealokp [2017-11-18] CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - hxxps://clients2.google.com/service/update2/crx CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - hxxps://clients2.google.com/service/update2/crx CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - hxxps://clients2.google.com/service/update2/crx CHR HKLM-x32\...\Chrome\Extension: [ofoeigeaodhbjogdigckajfhjbonaofg] - hxxps://clients2.google.com/service/update2/crx 2018-01-05 19:57 - 2018-01-05 19:57 - 000000000 ____D C:\ProgramData\SWCUTemp EmptyTemp: Plik zapisz pod nazwą fixlist.txt i umieść obok FRST w tym samym folderze. Uruchom jako administrator FRST i kliknij w Fix/Napraw. Pobierz i uruchom jako administrator AdwCleaner https://toolslib.net/downloads/finish/1/ Kliknij Scan(Skanuj) i później Cleaning(Oczyść).