Pelno szkodliwych rozszerzen, mozna to bylo usunac z poziomu chrome.
Wykonaj Fixlist.txt dla FRST:
Task: {55C9C4F2-3048-4FF0-99D6-CEF3EE9B6ABD} - System32\Tasks\{0C3E62F2-0C07-4658-A624-1D786269BA1A} => "c:\program files (x86)\google\chrome\application\chrome.exe" hxxps://ui.skype.com/ui/0/7.32.85.104/pl/abandoninstall?page=tsBing
Task: {6A409607-140C-416A-9789-47274E71899B} - System32\Tasks\{B1F13DA0-6E0E-4AA7-A064-1AEFD7C09F17} => "c:\program files (x86)\google\chrome\application\chrome.exe" hxxp://ui.skype.com/ui/0/6.21.59.104/pl/abandoninstall?page=tsMain
Task: {B8424882-144F-44BD-9F79-4CBEDDDC9040} - System32\Tasks\{E6FD399E-DE8D-4E22-8EA4-075535E7FBB2} => "c:\program files (x86)\google\chrome\application\chrome.exe" hxxp://ui.skype.com/ui/0/6.16.0.105/pl/abandoninstall?page=tsPlugin
Task: {E4E804D4-2EAC-4E6F-98A7-AE0E533335D7} - System32\Tasks\{E6CBA685-C98D-4008-8784-CB932ADBD4D4} => C:\Windows\system32\pcalua.exe -a D:\eFilmLt.exe -d D:\
HKLM-x32\...\Run: [NPSStartup] => [X]
HKU\S-1-5-21-3849004643-3842444224-1205628881-1001\...\MountPoints2: {727beff8-590b-11e5-bf04-2089846fd37b} - "E:\AutoRun.exe"
HKU\S-1-5-21-3849004643-3842444224-1205628881-1001\...\MountPoints2: {73145716-8bce-11e5-bf0a-2089846fd37b} - "E:\AutoRun.exe"
HKU\S-1-5-21-3849004643-3842444224-1205628881-1001\...\MountPoints2: {f90a3a48-d32c-11e5-bf0f-2089846fd37b} - "E:\AutoRun.exe"
CHR Extension: (Nurijol) - C:\Users\leama_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\bomhdboceokdlmakcjpkceiaipllgkpk [2016-12-04]
C:\Users\leama_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\bomhdboceokdlmakcjpkceiaipllgkpk
CHR Extension: (3d Computer and pong) - C:\Users\leama_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\cnclaefejpeijbhgnaepfeceengpjaln [2017-07-08]
C:\Users\leama_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\cnclaefejpeijbhgnaepfeceengpjaln
CHR Extension: (Dokumenty Google offline) - C:\Users\leama_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-03-17]
C:\Users\leama_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - hxxps://clients2.google.com/service/update2/crx
C:\Users\leama_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\iljflkaifejnednfnpffhpdccmlpndpg
CHR Extension: (ToDoBrowser) - C:\Users\leama_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\iljflkaifejnednfnpffhpdccmlpndpg [2016-11-27]
CHR Extension: (Check Status) - C:\Users\leama_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\lacjmhnohaonbcjonnehgnlkfajoddoh [2017-08-01]
CHR Extension: (Search Etymology ) - C:\Users\leama_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\milpmenagckbameeagfhbmgjiicpclbd [2016-10-21]
CHR Extension: (ShortURL) - C:\Users\leama_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\pmggapohjffegjnnhdoehpnfknpnhbio [2017-03-25]
C:\Users\leama_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\lacjmhnohaonbcjonnehgnlkfajoddoh
C:\Users\leama_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\pmggapohjffegjnnhdoehpnfknpnhbio
C:\Users\leama_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\milpmenagckbameeagfhbmgjiicpclbd
2017-09-01 14:22 - 2017-09-01 14:22 - 000000677 _____ C:\Users\leama_000\Desktop\JRT.txt
2017-09-01 14:13 - 2017-09-01 14:19 - 000226162 _____ C:\TDSSKiller.3.1.0.15_01.09.2017_14.13.26_log.txt
2017-09-01 14:03 - 2017-09-01 14:08 - 000001864 _____ C:\Users\leama_000\Desktop\Rkill.txt
2017-09-01 14:03 - 2017-09-01 13:58 - 004922400 _____ (AO Kaspersky Lab) C:\Users\leama_000\Desktop\tdsskiller.exe
2017-09-01 14:03 - 2017-09-01 13:56 - 001792640 _____ (Bleeping Computer, LLC) C:\Users\leama_000\Desktop\rkill.exe
2017-09-01 14:03 - 2017-09-01 13:54 - 005659788 _____ (Swearware) C:\Users\leama_000\Desktop\ComboFix.exe
2017-09-01 14:34 - 2016-12-05 11:24 - 000000000 ____D C:\AdwCleaner
Jezeli nie pomoze to zgraj zakladki i usun katalog profilu przegladarki tak jak podal ojagooo
