Za minimalizacje odpowiedzialny jest program od Tp-Linka.
Obok frst.exe utworz plik Fixlist.txt z zawartoscia:
() C:\Program Files (x86)\TP-LINK\TP-LINK Wireless Configuration Utility\TWCU.exe
Task: {043527F8-F004-43D0-BF92-09AB0259B238} - System32\Tasks\{31D47AA2-525A-4BCA-BEBC-D26A19524321} => pcalua.exe -a D:\heroes_might_magic_5_1.05_us.exe -d D:\
Task: {0674858F-6C33-4B4B-BC14-4ED7D586E352} - System32\Tasks\{16615CC0-CD47-4EC0-A6B6-F14ED3827C6B} => pcalua.exe -a "D:\►Mount&Blade - Ogniem i Mieczem - Dzikie Pola [PL] (Aramandur)\Mount&Blade - Ogniem i Mieczem - Dzikie Pola PL\setup.exe" -d "D:\►Mount&Blade - Ogniem i Mieczem - Dzikie Pola [PL] (Aramandur)\Mount&Blade - Ogniem i Mieczem - Dzikie Pola PL"
Task: {073EA840-4980-4A84-AA89-CA06C70E3D2C} - System32\Tasks\{48CEAA60-3683-43D9-8F03-2CA19036FD6D} => pcalua.exe -a "D:\Program Files (x86)\Gothic PL\Materiały Dodatkowe\gothic1_playerkit-1.08k.exe" -d "D:\Program Files (x86)\Gothic PL\Materiały Dodatkowe"
Task: {32B1973D-85AB-4D4C-921F-7DD2C03BA99B} - System32\Tasks\{479A5DE9-C6FA-4EBC-A097-0EFD8D04E0E4} => D:\Program Files (x86)\SEGA\Medieval II Total War\medieval2.exe [2013-12-25] (The Creative Assembly Ltd)
Task: {4CFDF8E4-D25D-4BFD-88EF-482057A12519} - System32\Tasks\{35AD49DA-7B14-4D7C-B4EB-3EBE999CC814} => D:\Program Files (x86)\Deep Silver\Rush For Berlin\RushForBerlin.exe
Task: {7F62FB15-9400-4145-ADA4-2E031027FC0F} - System32\Tasks\{6FA14673-8777-41FA-95FF-6190844491AF} => pcalua.exe -a F:\americas\setup.exe -d F:\americas
Task: {839C38B7-2F50-4941-A33E-3B7439850576} - System32\Tasks\{D7CA8627-3B2B-4E9C-A735-9F5092B59E25} => pcalua.exe -a "D:\victoria PL+dodatek revolutions+spolszczenie do dodatku full wypas (Sindram)\Victoria Revolutions.exe" -d "D:\victoria PL+dodatek revolutions+spolszczenie do dodatku full wypas (Sindram)"
Task: {8AE0451A-793B-419B-8B07-1307DCB0557B} - System32\Tasks\{9BEB46C5-5D0B-430C-A561-4DA2CA155C07} => D:\Program Files (x86)\Deep Silver\Rush For Berlin\RushForBerlin.exe
Task: {B6A78B1A-F69E-4686-93ED-9DA701DAFC78} - System32\Tasks\{98EAD976-0479-4E33-9A1B-68AFD35B5564} => pcalua.exe -a D:\heroes_might_magic_5_1.02_hu_pl.exe -d D:\
Task: {D6F76CD9-7930-4AC7-BD2B-D85AAE7CBDC7} - \Update Service YourFileDownloader -> Brak pliku <==== UWAGA
HKU\S-1-5-21-86169130-3220667825-3085346687-1000\Software\Classes\.scr: AutoCADScriptFile => C:\Windows\system32\notepad.exe "%1" <===== UWAGA
HKLM-x32\...\Run: [NPSStartup] => [X]
HKU\S-1-5-19\...\Winlogon: [Shell] C:\Windows\explorer.exe [3231232 2016-01-22] (Microsoft Corporation) <==== UWAGA
HKU\S-1-5-20\...\Winlogon: [Shell] C:\Windows\explorer.exe [3231232 2016-01-22] (Microsoft Corporation) <==== UWAGA
HKU\S-1-5-21-86169130-3220667825-3085346687-1000\...\Run: [Opos] => [X]
HKU\S-1-5-21-86169130-3220667825-3085346687-1000\...\MountPoints2: E - E:\RFB.exe
HKU\S-1-5-21-86169130-3220667825-3085346687-1000\...\MountPoints2: {1502d5e4-731d-11e3-82d0-bcee7b8a6a31} - F:\autorun.exe
HKU\S-1-5-21-86169130-3220667825-3085346687-1000\...\MountPoints2: {170a85c9-6fff-11e3-a1e1-bcee7b8a6a31} - F:\blank.exe
HKU\S-1-5-21-86169130-3220667825-3085346687-1000\...\MountPoints2: {612217c9-676c-11e3-94e6-806e6f6e6963} - E:\Bin\ASSETUP.exe
HKU\S-1-5-21-86169130-3220667825-3085346687-1000\...\MountPoints2: {c67460f4-6afe-11e3-bbd7-bcee7b8a6a31} - G:\blank.exe
HKU\S-1-5-21-86169130-3220667825-3085346687-1000\...\MountPoints2: {fd0656ec-7239-11e3-bf4b-bcee7b8a6a31} - F:\setup_the_witcher_enhanced_edition_2.0.0.12.exe
HKU\S-1-5-21-86169130-3220667825-3085346687-1000\...\Winlogon: [Shell] C:\Windows\explorer.exe [3231232 2016-01-22] (Microsoft Corporation) <==== UWAGA
HKU\S-1-5-18\...\Winlogon: [Shell] C:\Windows\explorer.exe [3231232 2016-01-22] (Microsoft Corporation) <==== UWAGA
ShellIconOverlayIdentifiers: [###MegaShellExtPending] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} => Brak pliku
ShellIconOverlayIdentifiers: [###MegaShellExtSynced] -> {05B38830-F4E9-4329-978B-1DD28605D202} => Brak pliku
ShellIconOverlayIdentifiers: [###MegaShellExtSyncing] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} => Brak pliku
ShellIconOverlayIdentifiers-x32: [###MegaShellExtPending] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} => Brak pliku
ShellIconOverlayIdentifiers-x32: [###MegaShellExtSynced] -> {05B38830-F4E9-4329-978B-1DD28605D202} => Brak pliku
ShellIconOverlayIdentifiers-x32: [###MegaShellExtSyncing] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} => Brak pliku
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\TP-LINK Wireless Configuration Utility.lnk
U3 a0mw7dw2; C:\Windows\System32\Drivers\a0mw7dw2.sys [0 ] (Intel Corporation) <==== UWAGA (zerobajtowy plik/folder)
S3 GPUZ; \??\C:\Windows\TEMP\GPUZ.sys [X]
S3 MBAMSwissArmy; \??\C:\Windows\system32\drivers\MBAMSwissArmy.sys [X]
2016-05-28 20:45 - 2016-05-28 20:47 - 00000000 ___DC C:\AdwCleaner
EmptyTemp:
W FRST wybierz Napraw.
Przy okazji zainstaluj aktualizacje z:
https://support.microsoft.com/pl-pl/kb/2545227 
