Otwórz notatnik systemowy i wklej: ShellIconOverlayIdentifiers: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => -> Brak pliku ShellIconOverlayIdentifiers: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => -> Brak pliku ShellIconOverlayIdentifiers: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => -> Brak pliku ShellIconOverlayIdentifiers: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => -> Brak pliku ShellIconOverlayIdentifiers: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => -> Brak pliku ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> Brak pliku ContextMenuHandlers1: [2.0 Zemana AntiMalware] -> {6ABB1C11-E261-4CEA-BBB5-3836225689DD} => -> Brak pliku ContextMenuHandlers3: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> Brak pliku ContextMenuHandlers6: [2.0 Zemana AntiMalware] -> {6ABB1C11-E261-4CEA-BBB5-3836225689DD} => -> Brak pliku Task: {40EF3C49-E547-435C-B586-B4CCF11178E5} - System32\Tasks\{C566C924-ACAF-4542-B754-9C09351E8FD8} => C:\WINDOWS\system32\pcalua.exe -a E:\START.EXE -d E:\ Task: {44B4F48B-E8D3-4694-8993-64DA24F409DF} - System32\Tasks\{C120A8A6-1292-4FF7-8B7B-E2CC627FC792} => C:\WINDOWS\system32\pcalua.exe -a E:\START.EXE -d E:\ HKU\S-1-5-21-2501479232-936715594-3242880791-1000\...\MountPoints2: {30213332-e88e-11e6-874f-00247e79360f} - "F:\HiSuiteDownLoader.exe" HKU\S-1-5-21-2501479232-936715594-3242880791-1000\...\MountPoints2: {47a5209e-3b55-11e5-9138-806e6f6e6963} - "E:\START_2011.EXE" HKU\S-1-5-21-2501479232-936715594-3242880791-1000\...\MountPoints2: {61d9e445-6121-11e6-918a-00247e79360f} - "F:\HiSuiteDownLoader.exe" HKU\S-1-5-21-2501479232-936715594-3242880791-1000\...\MountPoints2: {856029e1-4bac-11e7-8767-00247e79360f} - "F:\HiSuiteDownLoader.exe" HKU\S-1-5-21-2501479232-936715594-3242880791-1000\...\MountPoints2: {daec2b60-779d-11e7-8774-00247e79360f} - "F:\HiSuiteDownLoader.exe" HKU\S-1-5-21-2501479232-936715594-3242880791-1000\...\MountPoints2: {e4f1d6a1-8cd9-11e7-8779-00247e79360f} - "F:\HiSuiteDownLoader.exe" HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = SearchScopes: HKU\S-1-5-21-2501479232-936715594-3242880791-1000 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = CHR HKLM\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - hxxps://clients2.google.com/service/update2/crx CHR HKLM\...\Chrome\Extension: [glcimepnljoholdmjchkloafkggfoijh] - hxxps://clients2.google.com/service/update2/crx U0 aswVmm; Brak ImagePath S1 ZAM; \??\C:\WINDOWS\System32\drivers\zam32.sys [X] EmptyTemp: Plik zapisz pod nazwą fixlist.txt i umieść obok FRST w tym samym folderze. Uruchom jako administrator FRST i kliknij w Fix/Napraw.