Odinstaluj CPUID CPU-Z 1.76.Otwórz notatnik systemowy i wklej: CloseProcesses: CreateRestorePoint: HKU\S-1-5-21-2989287135-381012079-4072819957-1000\...\ChromeHTML: -> <==== UWAGA ContextMenuHandlers1: [ANotepad++64] -> {B298D29A-A6ED-11DE-BA8C-A68E55D89593} => -> Brak pliku ContextMenuHandlers5: [Gadgets] -> {6B9228DA-9C15-419e-856C-19E768A13BDC} => -> Brak pliku ContextMenuHandlers1_S-1-5-21-2989287135-381012079-4072819957-1000: [UltraEdit] -> {b5eedee0-c06e-11cf-8c56-444553540000} => -> Brak pliku Task: {0060AFC5-799B-4C6C-A0EE-1E5D6D177D24} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> Brak pliku <==== UWAGA Task: {0BCF31CE-9075-44DF-AD4C-08D8BB384B08} - \{F820878D-B168-4492-A34E-929040AD2249} -> Brak pliku <==== UWAGA Task: {1CDAE250-DBC9-45A1-8482-22039FDD3124} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> Brak pliku <==== UWAGA Task: {21B9370B-032B-4B79-9A71-D453169CBDD9} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> Brak pliku <==== UWAGA Task: {28374002-C5C6-4F23-B3DA-F17CB74D0C4F} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> Brak pliku <==== UWAGA Task: {2EE04F0C-C3AC-435B-8287-85CB7ABAF828} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> Brak pliku <==== UWAGA Task: {30D0B343-C6AC-467F-864B-10352C402FD7} - System32\Tasks\{00B94987-DD88-7848-35BA-1B9271A9993D} => C:\Users\Bartek\AppData\Roaming\YIvbqcOIE.exe [2018-04-12] (Microsoft Corporation) <==== UWAGA Task: {30F7834F-636F-41AF-A78F-5FFC861A568B} - System32\Tasks\{5524D207-BACB-46BB-83C9-0ACB8E874C53} => "c:\program files (x86)\mozilla firefox\firefox.exe" hxxp://ui.skype.com/ui/0/7.28.0.101/pl/abandoninstall?page=tsProgressBar Task: {3F39FB2B-6E18-4F21-BEF9-5CA75FA4F3D4} - System32\Tasks\UCBrowserUpdater => C:\Program Files (x86)\UCBrowser\Application\update_task.exe <==== UWAGA Task: {55DD0B4F-89A6-4B22-A107-88478CBC68B7} - \Microsoft\Windows\Setup\GWXTriggers\Telemetry-4xd -> Brak pliku <==== UWAGA Task: {5F063C38-E068-4475-9544-5909A7B02828} - \Microsoft\Windows\UNP\RunCampaignManager -> Brak pliku <==== UWAGA Task: {6806707C-DE6B-477C-ABAD-AE2454F15D75} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> Brak pliku <==== UWAGA Task: {7A741594-8EBB-415B-A3BC-9543CBF18ED8} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> Brak pliku <==== UWAGA Task: {8AACF352-AA2F-497D-970C-87F020618579} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> Brak pliku <==== UWAGA Task: {B1D7467F-1C1B-486D-B53C-DBAC2AC288BA} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> Brak pliku <==== UWAGA Task: {B75DAEA6-D796-4227-B6DB-4819B95D05EC} - System32\Tasks\{12003D0D-A8B1-23E7-3BE2-F9718090B81B} => C:\Users\Bartek\AppData\Roaming\UgFB.exe [2018-04-12] (Microsoft Corporation) <==== UWAGA Task: {E2C74088-30BB-42C5-AA60-CB3904C98601} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> Brak pliku <==== UWAGA Task: C:\WINDOWS\Tasks\UCBrowserUpdater.job => C:\Program Files (x86)\UCBrowser\Application\update_task.exe <==== UWAGA Hosts: HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Ograniczenia <==== UWAGA GroupPolicy: Ograniczenia ? <==== UWAGA S3 gupdate; "C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /svc [X] S3 gupdatem; "C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /medsvc [X] U3 idsvc; Brak ImagePath S1 UCGuard; system32\DRIVERS\ucguard.sys [X] <==== UWAGA 2018-06-29 18:33 - 2018-06-29 19:51 - 000000000 ____D C:\AdwCleaner 2018-06-25 21:06 - 2018-06-25 21:06 - 000003908 _____ C:\WINDOWS\System32\Tasks\{5D48670D-2949-B280-54FB-89A33E948486} 2018-06-25 21:06 - 2018-06-25 21:06 - 000003792 _____ C:\WINDOWS\System32\Tasks\{00B94987-DD88-7848-35BA-1B9271A9993D} 2018-06-25 21:06 - 2018-06-25 21:06 - 000003582 _____ C:\WINDOWS\System32\Tasks\{12003D0D-A8B1-23E7-3BE2-F9718090B81B} 2018-04-12 01:34 - 2018-04-12 01:34 - 000178688 ____N (Microsoft Corporation) C:\Program Files (x86)\bHlyCwu.exe 2018-04-12 01:34 - 2018-04-12 01:34 - 000059904 ____N (Microsoft Corporation) C:\Users\Bartek\AppData\Roaming\UgFB.exe 2018-04-12 01:34 - 2018-04-12 01:34 - 000059904 ____N (Microsoft Corporation) C:\Users\Bartek\AppData\Roaming\YIvbqcOIE.exe EmptyTemp: Plik zapisz pod nazwą fixlist.txt i umieść obok FRST w tym samym folderze. Uruchom jako administrator FRST i kliknij w Fix/Napraw. Przeskanuj progr. Malwarebytes Anti-Malware http://www.bleepingcomputer.com/download/malwarebytes-anti-malware/