Otwórz notatnik systemowy i wklej:

Shortcut: C:\Users\Bartek\Desktop\Lаunchеr — skrót.lnk -> C:\Users\Bartek\AppData\Roaming\Browsers\exe.rehcnual.bat ()
Shortcut: C:\Users\Bartek\Desktop\Wоrld of Таnks.lnk -> C:\Users\Bartek\AppData\Roaming\Browsers\exe.rehcnualtow.bat ()
Shortcut: C:\Users\Bartek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Intеrnet Еxрlоrer.lnk -> C:\Users\Bartek\AppData\Roaming\Browsers\exe.erolpxei.bat ()
Shortcut: C:\Users\Bartek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Intеrnеt Еxplоrer (Nо Add-оns).lnk -> C:\Users\Bartek\AppData\Roaming\Browsers\exe.erolpxei.bat ()
Shortcut: C:\Users\Bartek\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Gоoglе Chrome.lnk -> C:\Users\Bartek\AppData\Roaming\Browsers\exe.emorhc.bat ()
Shortcut: C:\Users\Bartek\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Lаunch Intеrnet Exрlоrer Вrowsеr.lnk -> C:\Users\Bartek\AppData\Roaming\Browsers\exe.erolpxei.bat ()
Shortcut: C:\Users\Bartek\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Gоoglе Сhrome (2).lnk -> C:\Users\Bartek\AppData\Roaming\Browsers\exe.emorhc.bat ()
Shortcut: C:\Users\Bartek\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Gоoglе Сhrome.lnk -> C:\Users\Bartek\AppData\Roaming\Browsers\exe.emorhc.bat ()
Shortcut: C:\Users\Bartek\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Intеrnet Eхplоrеr (2).lnk -> C:\Users\Bartek\AppData\Roaming\Browsers\exe.erolpxei.bat ()
Shortcut: C:\Users\Bartek\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Intеrnet Eхplоrеr.lnk -> C:\Users\Bartek\AppData\Roaming\Browsers\exe.erolpxei.bat ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Gоogle Chrоmе.lnk -> C:\Users\Bartek\AppData\Roaming\Browsers\exe.emorhc.bat ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Аvast SafеZоne Вrowser.lnk -> C:\Users\Bartek\AppData\Roaming\Browsers\exe.rehcnual.bat ()
Shortcut: C:\Users\Public\Desktop\DАЕMОN Tооls Litе.lnk -> C:\Users\Bartek\AppData\Roaming\Browsers\exe.rehcnualtd.bat ()
Shortcut: C:\Users\Public\Desktop\Gооglе Chromе.lnk -> C:\Users\Bartek\AppData\Roaming\Browsers\exe.emorhc.bat ()
Shortcut: C:\Users\Public\Desktop\Rосkstаr Gаmes Social Сlub.lnk -> C:\Users\Bartek\AppData\Roaming\Browsers\exe.rehcnualcsgr.bat ()
Shortcut: C:\Users\Public\Desktop\Аvast SаfеZonе Вrоwser.lnk -> C:\Users\Bartek\AppData\Roaming\Browsers\exe.rehcnual.bat ()
AlternateDataStreams: C:\ProgramData:NT [40]
AlternateDataStreams: C:\ProgramData:NT2 [432]
AlternateDataStreams: C:\Users\All Users:NT [40]
AlternateDataStreams: C:\Users\All Users:NT2 [432]
AlternateDataStreams: C:\ProgramData\Application Data:NT [40]
AlternateDataStreams: C:\ProgramData\Application Data:NT2 [432]
AlternateDataStreams: C:\ProgramData\Dane aplikacji:NT [40]
AlternateDataStreams: C:\ProgramData\Dane aplikacji:NT2 [432]
AlternateDataStreams: C:\ProgramData\MTA San Andreas All:NT [40]
AlternateDataStreams: C:\ProgramData\MTA San Andreas All:NT2 [432]
AlternateDataStreams: C:\Users\Bartek\Dane aplikacji:NT [40]
AlternateDataStreams: C:\Users\Bartek\Dane aplikacji:NT2 [432]
AlternateDataStreams: C:\Users\Bartek\AppData\Roaming:NT [40]
AlternateDataStreams: C:\Users\Bartek\AppData\Roaming:NT2 [432]
Hosts:
MSCONFIG\startupreg: gplyra => C:\Users\Bartek\AppData\Roaming\gplyra\gplyra\start.cmd
HKLM-x32\...\Run: [GrooveMonitor] => C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [31016 2006-10-27] (Microsoft Corporation)
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Ograniczenia <==== UWAGA
GroupPolicy: Ograniczenia <==== UWAGA
CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - hxxps://clients2.google.com/service/update2/crx
OPR Extension: (Fast search) - C:\Users\Bartek\AppData\Roaming\Opera Software\Opera Stable\Extensions\pbdpajcdgknpendpmecafmopknefafha [2017-07-30]
2017-07-30 21:40 - 2017-07-30 21:40 - 000002038 ___RS C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Аvast SafеZоne Вrowser.lnk
2017-07-30 21:40 - 2017-07-30 21:40 - 000002008 ___RS C:\Users\Public\Desktop\Аvast SаfеZonе Вrоwser.lnk
2017-07-30 21:40 - 2017-07-30 21:40 - 000001662 ___RS C:\Users\Bartek\Desktop\Lаunchеr — skrót.lnk
2017-07-30 21:40 - 2017-07-30 21:40 - 000001449 ___RS C:\Users\Bartek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Intеrnet Еxрlоrer.lnk
2017-07-30 21:40 - 2017-07-30 21:40 - 000001187 ___RS C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Gоogle Chrоmе.lnk
2017-07-30 21:40 - 2017-07-30 21:40 - 000001157 ___RS C:\Users\Public\Desktop\Gооglе Chromе.lnk
2017-07-30 21:40 - 2017-07-30 21:40 - 000001107 ___RS C:\Users\Public\Desktop\Rосkstаr Gаmes Social Сlub.lnk
2017-07-30 21:40 - 2017-07-30 21:40 - 000001087 ___RS C:\Users\Public\Desktop\DАЕMОN Tооls Litе.lnk
2017-07-30 21:40 - 2017-07-30 21:40 - 000001044 ___RS C:\Users\Bartek\Desktop\Wоrld of Таnks.lnk
2017-07-30 21:40 - 2017-07-30 21:40 - 000000000 ____D C:\Users\Public\Documents\XMUpdate
2017-07-30 21:40 - 2017-07-30 21:40 - 000000000 ____D C:\Users\Bartek\AppData\Roaming\SPI
2017-07-30 21:40 - 2017-07-30 21:40 - 000000000 ____D C:\Users\Bartek\AppData\Roaming\gplyra
2017-07-30 21:40 - 2017-07-30 21:40 - 000000000 ____D C:\Users\Bartek\AppData\Roaming\Browsers
2017-07-30 21:40 - 2017-07-30 21:40 - 000000000 ____D C:\Users\Bartek\AppData\Roaming\bhe3ckvh0lh
EmptyTemp:

Plik zapisz pod nazwą fixlist.txt i umieść obok FRST w tym samym folderze. 
Uruchom jako administrator FRST i kliknij w Fix/Napraw.
Pobierz i uruchom jako administrator AdwCleaner   https://toolslib.net/downloads/finish/1/ Kliknij Scan(Skanuj) i później Cleaning(Oczyść).