Wykonaj Fixlist.txt dla FRST:
HKU\S-1-5-21-3202566104-2062759587-1252365412-1001\...\RunOnce: [Application Restart #2] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [1589080 2018-11-16] (Google Inc.)
HKU\S-1-5-21-3202566104-2062759587-1252365412-1001\...\Winlogon: [Shell] C:\Windows\System32\cmd.exe [273920 2018-04-12] (Microsoft Corporation) <==== UWAGA
HKU\S-1-5-21-3202566104-2062759587-1252365412-1001\...\Command Processor: @mode 20,5 & tasklist /FI "IMAGENAME eq SoundMixer.exe" 2>NUL | find /I /N "SoundMixer.exe">NUL && exit & if exist ( start /MIN "" & tasklist /FI "IMAGENAME eq explorer.exe" 2>NUL | find /I /N "explorer.exe">NUL && exit & explorer.exe & exit ) else ( tasklist /FI "IMAGENAME eq explorer.exe" 2>NUL | find /I /N "explorer.exe">NUL && exit & explorer.exe & exit ) <==== UWAGA
GroupPolicy: Ograniczenia ? <==== UWAGA
CHR HKU\S-1-5-21-3202566104-2062759587-1252365412-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [mjbepbhonbojpoaenhckjocchgfiaofo] - hxxps://clients2.google.com/service/update2/crx
2018-12-05 10:35 - 2018-12-05 10:35 - 000000000 ____D C:\AdwCleaner
2018-12-05 10:20 - 2018-12-05 10:20 - 000000000 ____D C:\Users\Pitek\Desktop\FRST-OlderVersion
Po wykonaniu usun katalog C:\FRST i to wszystko.
