Otwórz notatnik systemowy i wklej:

AlternateDataStreams: C:\ProgramData:NT [40]
AlternateDataStreams: C:\ProgramData:NT2 [432]
AlternateDataStreams: C:\Users\All Users:NT [40]
AlternateDataStreams: C:\Users\All Users:NT2 [432]
AlternateDataStreams: C:\ProgramData\Application Data:NT [40]
AlternateDataStreams: C:\ProgramData\Application Data:NT2 [432]
AlternateDataStreams: C:\ProgramData\Dane aplikacji:NT [40]
AlternateDataStreams: C:\ProgramData\Dane aplikacji:NT2 [432]
AlternateDataStreams: C:\ProgramData\MTA San Andreas All:NT [40]
AlternateDataStreams: C:\ProgramData\MTA San Andreas All:NT2 [432]
AlternateDataStreams: C:\Users\jan\Dane aplikacji:NT [40]
AlternateDataStreams: C:\Users\jan\Dane aplikacji:NT2 [432]
AlternateDataStreams: C:\Users\jan\AppData\Roaming:NT [40]
AlternateDataStreams: C:\Users\jan\AppData\Roaming:NT2 [432]
HKLM-x32\...\Run: [d5a7378a23f84df25dc5e25931e3cd5f] => "C:\Users\jan\AppData\Local\Temp\wmplayer.exe" .. <==== UWAGA
HKU\S-1-5-21-3021925073-3619065012-3030617680-1001\...\Run: [d5a7378a23f84df25dc5e25931e3cd5f] => "C:\Users\jan\AppData\Local\Temp\wmplayer.exe" .. <==== UWAGA
HKU\S-1-5-21-3021925073-3619065012-3030617680-1001\...\Run: [b1ba35d808ff65c992ad2450d5291202] => C:\Users\jan\AppData\Roaming\taskhost.exe .. [24064 2017-06-18] () <==== UWAGA
HKU\S-1-5-21-3021925073-3619065012-3030617680-1001\...\Run: [Gaijin.Net Agent] => C:\Users\jan\AppData\Local\Gaijin\Program Files (x86)\NetAgent\gjagent.exe [2115656 2017-09-20] (Gaijin Entertainment)
Startup: C:\Users\jan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\b1ba35d808ff65c992ad2450d5291202.exe [2017-06-18] ()
Startup: C:\Users\jan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\d5a7378a23f84df25dc5e25931e3cd5f.exe [2017-06-14] ()
Startup: C:\Users\jan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Twitch.lnk [2017-07-11]
ShortcutTarget: Twitch.lnk -> C:\Users\jan\AppData\Roaming\Twitch\Bin\Twitch.exe (Brak pliku)
S3 FairplayKD; \??\C:\ProgramData\MTA San Andreas All\Common\temp\FairplayKD.sys [X]
S4 nvvad_WaveExtensible; \SystemRoot\system32\drivers\nvvad64v.sys [X]
2017-06-17 21:14 - 2017-06-17 21:14 - 000024064 _____ () C:\Users\jan\AppData\Roaming\crss.exe
2017-06-17 22:24 - 2017-06-17 22:24 - 000024064 _____ () C:\Users\jan\AppData\Roaming\svchost.exe
2017-06-17 21:21 - 2017-06-18 14:02 - 000024064 _____ () C:\Users\jan\AppData\Roaming\taskhost.exe
C:\Users\jan\AppData\Roaming\taskhost.exe ..
EmptyTemp:

Plik zapisz pod nazwą fixlist.txt i umieść obok FRST w tym samym folderze. 
Uruchom jako administrator FRST i kliknij w Fix/Napraw.
Przeskanuj progr. Malwarebytes Anti-Malware http://www.bleepingcomputer.com/download/malwarebytes-anti-malware/