Obok frst.exe utworz plik Fixlist.txt z zawartoscia:
Task: {B7F5550B-5D3D-4CA4-A228-0987AD59C3DE} - System32\Tasks\Opera scheduled Autoupdate 1542231530 => C:\Users\Błażej\AppData\Local\Programs\Opera\launcher.exe [2018-11-14] (Opera Software)
Task: {C714E2EA-B1D8-4268-BD35-F50F2CAB9272} - System32\Tasks\Driver Booster SkipUAC (Błażej) => C:\Program Files (x86)\IObit\Driver Booster\5.2.0\DriverBooster.exe [2018-01-29] (IObit)
AlternateDataStreams: C:\WINDOWS\system32\Drivers\uasczjwz.sys:changelist [302]
AlternateDataStreams: C:\ProgramData\.rdata:X [128]
AlternateDataStreams: C:\ProgramData\MTA San Andreas All:NT [40]
AlternateDataStreams: C:\ProgramData\MTA San Andreas All:NT2 [432]
AlternateDataStreams: C:\Users\Błażej\AppData\Local\Temp:$DATA [16]
AlternateDataStreams: C:\Users\Public\AppData:CSM [480]
AlternateDataStreams: C:\Users\Public\Shared Files:VersionCache [472]
HKU\S-1-5-21-697105182-3418535882-4100780587-1002\...\Run: [ALLUpdate] => D:\Program Files\ALLPlayer\ALLUpdate.exe [3884720 2017-10-04] (ALLPlayer.org)
HKU\S-1-5-21-697105182-3418535882-4100780587-1002\...\MountPoints2: {86332186-9b17-11e7-99dd-88d7f6e23974} - "G:\setup.exe"
HKU\S-1-5-21-697105182-3418535882-4100780587-1002\...\MountPoints2: {a1a7c53b-18b8-11e8-9a07-88d7f6e23974} - "I:\stp-fifa18.exe"
HKU\S-1-5-21-697105182-3418535882-4100780587-1002\...\MountPoints2: {d5ffcb4a-fa2b-11e7-9a00-88d7f6e23974} - "H:\autorun.exe"
HKU\S-1-5-21-697105182-3418535882-4100780587-1002\...\Command Processor: @mode 20,5 & tasklist /FI "IMAGENAME eq SoundMixer.exe" 2>NUL | find /I /N "SoundMixer.exe">NUL && exit & if exist "C:\Users\Błażej\AppData\Roaming\Microsoft\SoundMixer\SoundMixer.exe" ( start /MIN "" "C:\Users\Błażej\AppData\Roaming\Microsoft\SoundMixer\SoundMixer.exe" & tasklist /FI "IMAGENAME eq explorer.exe" 2>NUL | find /I /N "explorer.exe">NUL && exit & explorer.exe & exit ) else ( tasklist /FI "IMAGENAME eq explorer.exe" 2>NUL | find /I /N "explorer.exe">NUL && exit & explorer.exe & exit ) <==== ATTENTION
GroupPolicy: Restriction ? <==== ATTENTION
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - hxxps://clients2.google.com/service/update2/crx
S3 mracsvc; C:\WINDOWS\System32\mracsvc.exe [11132176 2018-09-11] (LLC Mail.Ru)
S3 mracdrv; C:\WINDOWS\System32\drivers\mracdrv.sys [10348560 2018-09-11] (LLC Mail.Ru)
2018-11-23 14:57 - 2018-11-23 15:00 - 000000000 ____D C:\AdwCleaner
2018-11-14 22:38 - 2018-11-14 22:38 - 000004256 _____ C:\WINDOWS\System32\Tasks\Opera scheduled Autoupdate 1542231530
W FRST wybierz Napraw.
Usun katalog C:\FRST i to wszystko.
