Otwórz notatnik systemowy i wklej:

CloseProcesses:
HKU\S-1-5-21-1630707920-3537980791-2959964446-1001\...\Run: [spoolsvwn] => "%SystemRoot%\System32\WScript.exe" "C:\Users\Komputer\AppData\Roaming\spoolsv store files\start64.vbs" //B "%1" %*
HKU\S-1-5-21-1630707920-3537980791-2959964446-1001\...\Run: [nusb3monst] => "%SystemRoot%\System32\WScript.exe" "C:\Users\Komputer\AppData\Roaming\nusb3mon saved files\start.vbs" //B "%1" %*
HKU\S-1-5-21-1630707920-3537980791-2959964446-1001\...\Run: [spoolsvws] => "%SystemRoot%\System32\WScript.exe" "C:\Users\Komputer\AppData\Roaming\spoolsv local files\start.vbs" //B "%1" %*
HKU\S-1-5-21-1630707920-3537980791-2959964446-1001\...\Run: [svchostst] => "%SystemRoot%\System32\WScript.exe" "C:\Users\Komputer\AppData\Roaming\svchost saved files\start.vbs" //B "%1" %*
Startup: C:\Users\Komputer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\nusb3monst.vbs [2017-08-15] ()
Startup: C:\Users\Komputer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\spoolsvwn.vbs [2017-08-15] ()
Startup: C:\Users\Komputer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\spoolsvws.vbs [2017-08-15] ()
Startup: C:\Users\Komputer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\svchostst.vbs [2017-08-15] ()
2017-08-15 14:37 - 2017-08-15 14:37 - 000000000 ____D C:\Users\Komputer\AppData\Roaming\svchost saved files
2017-08-15 14:25 - 2017-08-15 14:27 - 000000000 ____D C:\AdwCleaner
2017-08-10 07:28 - 2017-08-11 06:01 - 000000000 ____D C:\Users\Komputer\AppData\Roaming\spoolsv local files
2017-08-10 07:28 - 2017-08-10 14:39 - 000000000 ____D C:\Users\Komputer\AppData\Roaming\spoolsv store files
2017-08-10 07:28 - 2017-08-10 14:39 - 000000000 ____D C:\Users\Komputer\AppData\Roaming\nusb3mon saved files

Plik zapisz pod nazwą fixlist.txt i umieść obok FRST w tym samym folderze. 
Uruchom jako administrator FRST i kliknij w Fix/Napraw.
Pokaż nowy raport z FRST bez Addition i Shortcut.