Odinstaluj Trend Micro Titanium Internet Security.Otwórz notatnik systemowy i wklej: HKU\S-1-5-21-3111321062-1205076256-668564734-1000\...\Run: [BingSvc] => C:\Users\Piotr\AppData\Local\Microsoft\BingSvc\BingSvc.exe [144008 2015-11-05] (© 2015 Microsoft Corporation) HKU\S-1-5-21-3111321062-1205076256-668564734-1000\...\MountPoints2: {258458f4-bf99-11e5-8da8-c860000752b2} - F:\autorun.exe HKU\S-1-5-21-3111321062-1205076256-668564734-1000\...\MountPoints2: {3656b3de-cd65-11e4-9859-c860000752b2} - F:\AutoRun.exe HKU\S-1-5-21-3111321062-1205076256-668564734-1000\...\MountPoints2: {3656b41f-cd65-11e4-9859-c860000752b2} - G:\AutoRun.exe HKU\S-1-5-21-3111321062-1205076256-668564734-1000\...\MountPoints2: {3656b429-cd65-11e4-9859-c860000752b2} - F:\AutoRun.exe HKU\S-1-5-21-3111321062-1205076256-668564734-1000\...\MountPoints2: {3656b452-cd65-11e4-9859-c860000752b2} - F:\AutoRun.exe HKU\S-1-5-21-3111321062-1205076256-668564734-1000\...\MountPoints2: {3e5c1a1e-6708-11e6-ac74-c860000752b2} - F:\HiSuiteDownLoader.exe HKU\S-1-5-21-3111321062-1205076256-668564734-1000\...\MountPoints2: {3e5c1a29-6708-11e6-ac74-c860000752b2} - F:\HiSuiteDownLoader.exe HKU\S-1-5-21-3111321062-1205076256-668564734-1000\...\MountPoints2: {486ec36a-1280-11e5-8b8a-c860000752b2} - F:\AutoRun.exe HKU\S-1-5-21-3111321062-1205076256-668564734-1000\...\MountPoints2: {4d8b4fa4-5ca5-11e5-8683-c860000752b2} - H:\HiSuiteDownLoader.exe HKU\S-1-5-21-3111321062-1205076256-668564734-1000\...\MountPoints2: {4d8b4fde-5ca5-11e5-8683-c860000752b2} - F:\AutoRun.exe HKU\S-1-5-21-3111321062-1205076256-668564734-1000\...\MountPoints2: {557efa0f-3f31-11e5-a2aa-c860000752b2} - F:\AutoRun.exe HKU\S-1-5-21-3111321062-1205076256-668564734-1000\...\MountPoints2: {e7c3813d-499d-11e4-8179-c860000752b2} - F:\AutoRun.exe HKU\S-1-5-21-3111321062-1205076256-668564734-1000\...\MountPoints2: {e7c3814f-499d-11e4-8179-c860000752b2} - F:\AutoRun.exe HKU\S-1-5-21-3111321062-1205076256-668564734-1000\...\MountPoints2: {fc8e721c-a80a-11e5-ac74-c860000752b2} - F:\startme.exe ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> Brak pliku CHR HKLM\SOFTWARE\Policies\Google: Ograniczenia <==== UWAGA HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = HKLM \Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = HKLM \Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Local Page = URLSearchHook: HKU\S-1-5-21-3111321062-1205076256-668564734-1000 - (Brak nazwy) - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} - Brak pliku SearchScopes: HKLM -> DefaultScope - brak wartości SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKLM-x32 -> DefaultScope - brak wartości SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-21-3111321062-1205076256-668564734-1000 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = BHO: SafeMon Class -> {B69F34DD-F0F9-42DC-9EDD-957187DA688D} -> C:\Program Files (x86)\360\Total Security\safemon\safemon64.dll => Brak pliku DefaultPrefix: => <==== UWAGA Prefixes: [home]=> <==== UWAGA Prefixes: [www]=> <==== UWAGA CHR HKU\S-1-5-21-3111321062-1205076256-668564734-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [fcfenmboojpjinhpgggodefccipikbpd] - hxxps://clients2.google.com/service/update2/crx S3 Amsp; "C:\Program Files\Trend Micro\AMSP\coreServiceShell.exe" coreFrameworkHost.exe -m=rb -dt=60000 [X] S1 360FsFlt; system32\DRIVERS\360FsFlt.sys [X] EmptyTemp: Plik zapisz pod nazwą fixlist.txt i umieść obok FRST w tym samym folderze. Uruchom jako administrator FRST i kliknij w Fix/Napraw.