Otwórz notatnik systemowy i wklej:

HKLM\...\Run: [] => [X]
HKLM-x32\...\Run: [] => [X]
Winlogon\Notify\ScCertProp: wlnotify.dll [X]
HKU\S-1-5-21-2880700550-4203685602-1200931078-1000\...\MountPoints2: E - E:\AutoRun.exe
HKU\S-1-5-21-2880700550-4203685602-1200931078-1000\...\MountPoints2: {f108d64b-273a-11e7-b1d3-00247e3e3456} - E:\AutoRun.exe
HKU\S-1-5-21-2880700550-4203685602-1200931078-1000\...\MountPoints2: {f108d661-273a-11e7-b1d3-00247e3e3456} - E:\AutoRun.exe
HKU\S-1-5-21-2880700550-4203685602-1200931078-1000\...\MountPoints2: {f108d682-273a-11e7-b1d3-00247e3e3456} - E:\AutoRun.exe
HKU\S-1-5-21-2880700550-4203685602-1200931078-1000\...\MountPoints2: {f108d69c-273a-11e7-b1d3-00247e3e3456} - E:\AutoRun.exe
HKU\S-1-5-21-2880700550-4203685602-1200931078-1000\...\MountPoints2: {f108d6b0-273a-11e7-b1d3-00247e3e3456} - E:\AutoRun.exe
HKU\S-1-5-21-2880700550-4203685602-1200931078-1000\...\MountPoints2: {f108d6c8-273a-11e7-b1d3-00247e3e3456} - E:\AutoRun.exe
HKU\S-1-5-21-2880700550-4203685602-1200931078-1000\...\MountPoints2: {f108d6d5-273a-11e7-b1d3-00247e3e3456} - E:\AutoRun.exe
HKU\S-1-5-21-2880700550-4203685602-1200931078-1000\...\MountPoints2: {f108d6e2-273a-11e7-b1d3-00247e3e3456} - E:\AutoRun.exe
HKU\S-1-5-21-2880700550-4203685602-1200931078-1000\...\MountPoints2: {f108d6f9-273a-11e7-b1d3-00247e3e3456} - E:\AutoRun.exe
HKU\S-1-5-21-2880700550-4203685602-1200931078-1000\...\MountPoints2: {f108d704-273a-11e7-b1d3-00247e3e3456} - E:\AutoRun.exe
HKU\S-1-5-21-2880700550-4203685602-1200931078-1000\...\MountPoints2: {f108d731-273a-11e7-b1d3-00247e3e3456} - E:\AutoRun.exe
HKU\S-1-5-21-2880700550-4203685602-1200931078-1000\...\MountPoints2: {f108d73e-273a-11e7-b1d3-00247e3e3456} - E:\AutoRun.exe
HKU\S-1-5-21-2880700550-4203685602-1200931078-1000\...\MountPoints2: {f108d75c-273a-11e7-b1d3-00247e3e3456} - E:\AutoRun.exe
HKU\S-1-5-21-2880700550-4203685602-1200931078-1000\...\MountPoints2: {f108d7d9-273a-11e7-b1d3-00247e3e3456} - E:\AutoRun.exe
HKU\S-1-5-21-2880700550-4203685602-1200931078-1000\...\MountPoints2: {f108d7e6-273a-11e7-b1d3-00247e3e3456} - E:\AutoRun.exe
S3 dbx; system32\DRIVERS\dbx.sys [X]
S3 ewusbnet; system32\DRIVERS\ewusbnet.sys [X]
S3 hwusbdev; system32\DRIVERS\ewusbdev.sys [X]
EmptyTemp:

Plik zapisz pod nazwą fixlist.txt i umieść obok FRST w tym samym folderze. 
Uruchom jako administrator FRST i kliknij w Fix/Napraw.