Otwórz notatnik systemowy i wklej: CustomCLSID: HKU\S-1-5-21-1855787007-2793573708-4186845403-1001_Classes\CLSID\{0E270DAA-1BE6-48F2-AC49-A53DA100DCA5}\InprocServer32 -> %%systemroot%%\system32\shell32.dll => Brak pliku ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> Brak pliku ShellIconOverlayIdentifiers: [00avg] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> Brak pliku HKLM Group Policy restriction on software: %systemroot%\system32\mrt.exe <==== UWAGA HKU\S-1-5-21-1855787007-2793573708-4186845403-1001\...\Run: [BingSvc] => C:\Users\user\AppData\Local\Microsoft\BingSvc\BingSvc.exe [144008 2015-11-05] (© 2015 Microsoft Corporation) HKU\S-1-5-21-1855787007-2793573708-4186845403-1001\...\RunOnce: [Report] => C:\AdwCleaner\AdwCleaner[C0].tx HKU\S-1-5-21-1855787007-2793573708-4186845403-1001\...\MountPoints2: {72b78ad0-8ccc-11e7-8f0b-4ccc6ad783b9} - "G:\Lenovo_Suite.exe" HKU\S-1-5-21-1855787007-2793573708-4186845403-1001\...\MountPoints2: {a35c39e0-f255-11e7-8f3e-4ccc6ad783b9} - "F:\HiSuiteDownLoader.exe" HKU\S-1-5-21-1855787007-2793573708-4186845403-1001\...\MountPoints2: {a35c39f2-f255-11e7-8f3e-4ccc6ad783b9} - "F:\HiSuiteDownLoader.exe" HKU\S-1-5-21-1855787007-2793573708-4186845403-1001\...\MountPoints2: {a35c3a10-f255-11e7-8f3e-4ccc6ad783b9} - "F:\HiSuiteDownLoader.exe" HKU\S-1-5-21-1855787007-2793573708-4186845403-1001\...\MountPoints2: {a76f4bae-c7bc-11e7-8f2c-4ccc6ad783b9} - "G:\autorun.exe" HKU\S-1-5-21-1855787007-2793573708-4186845403-1001\...\MountPoints2: {a76f4bb4-c7bc-11e7-8f2c-4ccc6ad783b9} - "F:\setup.exe" HKU\S-1-5-21-1855787007-2793573708-4186845403-1001\...\MountPoints2: {b6496d0e-cbd1-11e7-8f2e-4ccc6ad783b9} - "G:\autorun.exe" HKU\S-1-5-21-1855787007-2793573708-4186845403-1001\...\MountPoints2: {c0fc2937-d76d-11e7-8f35-4ccc6ad783b9} - "F:\HiSuiteDownLoader.exe" HKU\S-1-5-21-1855787007-2793573708-4186845403-1001\...\MountPoints2: {df2e7428-b0b5-11e7-8f1e-4ccc6ad783b9} - "F:\autorun.exe" CHR HKU\S-1-5-21-1855787007-2793573708-4186845403-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - hxxps://clients2.google.com/service/update2/crx CHR HKU\S-1-5-21-1855787007-2793573708-4186845403-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [fkkcgfbgohboipdhliafmacjnhjbhmim] - hxxps://clients2.google.com/service/update2/crx CHR HKLM-x32\...\Chrome\Extension: [ccjleegmemocfpghkhpjmiccjcacackp] - hxxps://clients2.google.com/service/update2/crx CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - hxxps://clients2.google.com/service/update2/crx U3 aswbdisk; Brak ImagePath 2018-01-09 17:05 - 2018-01-09 17:09 - 000000000 ____D C:\AdwCleaner EmptyTemp: Plik zapisz pod nazwą fixlist.txt i umieść obok FRST w tym samym folderze. Uruchom jako administrator FRST i kliknij w Fix/Napraw.