Otwórz notatnik systemowy i wklej:

Task: {0CAF8CC2-DD8E-49F1-A1AA-FF9FD639BE94} - System32\Tasks\{5B754E4D-AF38-456D-A29F-6C4D8F5CB2EE} => C:\Riot Games\League of Legends\LeagueClient.exe [2017-06-22] ()
Task: {40BEE185-D9AB-4873-9F23-57AD2488D558} - System32\Tasks\{3204D730-57D2-4C04-BFA3-3535420B3044} => C:\Riot Games\League of Legends\LeagueClient.exe [2017-06-22] ()
Task: {4AB23311-3BCA-4159-91B6-786277994C2F} - System32\Tasks\{CAC3DB5E-D953-4117-8D1F-D2716B15714F} => C:\Riot Games\League of Legends\LeagueClient.exe [2017-06-22] ()
Task: {5AE87807-E760-4135-9CE2-B631A8689F4B} - System32\Tasks\{D1BF78C1-9739-41A7-8DD1-9B4FCF1AC09E} => pcalua.exe -a C:\Users\berni\Downloads\forge-1.7.10-10.13.4.1614-1.7.10-installer-win.exe -d C:\Users\berni\Downloads
Task: {A4573D97-58FC-4FE9-8EE6-346500B67784} - System32\Tasks\{AA373313-296D-48C2-853C-ACF7A1BD0563} => C:\Riot Games\League of Legends\LeagueClient.exe [2017-06-22] ()
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Ograniczenia <======= UWAGA
ShellIconOverlayIdentifiers: [00avg] -> {472083B0-C522-11CF-8763-00608CC02F24} =>  -> Brak pliku
CHR HomePage: Default -> hxxps://%66%65%65%64.%68%65%6C%70%65%72%62%61%72.%63%6F%6D/?p=mKO_AwFzXIpYRYSttY34mamef947lyuPOB2E6QjqkhGUSaY4JkTc30YGQB60mRlYfe3gErvezmdZ2OfOkBjvNG9HZt9YrxE-iDEPciJqDE8xNCua-agvu5HwA-Fxqo5BShSlOoBmTTBCnl-Yhf9ALKA-dxRK7MyL4gMJk4JwlS3c21006ucY5gN_4WYC
2017-06-24 20:43 - 2017-06-24 20:48 - 00000000 ____D C:\AdwCleaner
2017-06-24 10:21 - 2017-06-24 10:21 - 00002980 _____ C:\Windows\System32\Tasks\{AA373313-296D-48C2-853C-ACF7A1BD0563}
2017-06-24 10:20 - 2017-06-24 10:20 - 00002980 _____ C:\Windows\System32\Tasks\{3204D730-57D2-4C04-BFA3-3535420B3044}
2017-06-24 10:19 - 2017-06-24 10:19 - 00002980 _____ C:\Windows\System32\Tasks\{CAC3DB5E-D953-4117-8D1F-D2716B15714F}
2017-06-24 10:19 - 2017-06-24 10:19 - 00002980 _____ C:\Windows\System32\Tasks\{5B754E4D-AF38-456D-A29F-6C4D8F5CB2EE}
2017-06-23 20:36 - 2017-06-23 20:36 - 00000000 __SHD C:\found.008
2017-06-23 12:05 - 2017-06-23 12:05 - 00000000 __SHD C:\found.007
2017-06-19 22:01 - 2017-06-19 22:01 - 00000000 __SHD C:\found.006
2017-06-12 13:08 - 2017-06-12 13:08 - 00000000 __SHD C:\found.005
2017-06-11 21:44 - 2017-06-11 21:44 - 00000000 __SHD C:\found.004
2017-05-29 15:10 - 2017-05-29 15:10 - 00000000 __SHD C:\found.003
2017-05-26 19:29 - 2017-05-26 19:29 - 00000000 __SHD C:\found.002
EmptyTemp:

Plik zapisz pod nazwą fixlist.txt i umieść obok FRST w tym samym folderze. 
Uruchom jako administrator FRST i kliknij w Fix/Napraw.