Unable to Send Emails from o2.pl Mail: Dealing with Potential Virus and Invisible Spam Messages

Hello,

I am here for the first time and I am also a layman in the fight against viruses and I have something like that at the post office o2.pl (screenshots) ... Receives mail normally, although there are 11 messages in spam and they are not physically visible ( probably a virus). After clicking on "write new message" just enter one letter in the subject or body of the message and a boot like the pictures will appear. I am asking for help and thank you in advance

Include in the attachment the logs from FRST, from scanning.

I only have an adw cleaner report (attached). I don't know what's going on with FRST ???

It's better to find out, just read the suspended threads in this section, not talking about hundreds of guides on Google!

OK ... easy ... I'll bury on the net ... sorry, but I wrote at the beginning that I am a layman

Then why didn't you read: "Before you ask how to remove virus / trojan / adware read this!"? It's usually laziness and nothing more.

Wait laziness ... I wrote a thread with a problem and did not pay attention to others .... Is this what is in the attachment?

Nie zapisuj plikow do katalogu uzytkownika C:\Users\Dom\ tylko na pulpit czy gdzie tam chcesz, ale nie do glownego katalogu.

Obok frst.exe utworz plik Fixlist.txt z zawartoscia:
Task: {287C59AB-4966-41B0-BE63-8FCDDA4AB85F} - System32\Tasks\{1706DF5E-64F8-4248-B6E1-125D81108395} => pcalua.exe -a C:\Users\Dom\Rejestracja_www.exe -d C:\Users\Dom\Desktop
Task: {87EC856F-507D-4CF9-BCEB-BA08855A6311} - System32\Tasks\DomSlackensGoodsV2 => Rundll32.exe MissionaryModeller.dll,main 7 1 C:\Users\Dom\AppData\Roaming\PRICEF~1\PRICEF~1.EXE C:\Users\Dom\AppData\Roaming\PRICEF~1\PRICEF~1.EXE C:\Program Files (x86)\blueconnect\DataCardMonitor.exe* C:\Users)*Ţ™Y**Č(*x(*am Files (x86)\blueconnect\DataCardMonitor.exe**x(*Ä*(***™Y**x(*Ä*(*exe*ERVER=\\DOM- *ßťY*˜ g*˙˙˙˙************ ** (dane wartości zawierają 56 znaków więcej).
HKU\S-1-5-21-3528526601-211756003-444815717-1000\...\Run: [ALLUpdate] => C:\Program Files (x86)\ALLPlayer\ALLUpdate.exe [3670472 2015-07-28] (ALLPlayer Group Ltd.)
HKU\S-1-5-21-3528526601-211756003-444815717-1000\...\Run: [Napisy24Update] => C:\Program Files (x86)\Napisy24\Napisy24Update.exe [3709896 2015-11-04] (Napisy24.pl)
HKU\S-1-5-21-3528526601-211756003-444815717-1000\...\Run: [ALLPlayer WiFi Remote] => C:\Program Files (x86)\ALLPlayer Remote\ALLPlayerRemoteControl.exe [6168768 2016-09-15] (ALLPlayer Group Ltd.)
HKU\S-1-5-21-3528526601-211756003-444815717-1000\...\Run: [HW_OPENEYE_OUC_blueconnect] => C:\Program Files (x86)\blueconnect\UpdateDog\ouc.exe [110592 2009-12-31] (Huawei Technologies Co., Ltd.)
HKU\S-1-5-21-3528526601-211756003-444815717-1000\...\Run: [Napisy24.pl] => C:\Program Files (x86)\Napisy24\Napisy24.exe [6659584 2017-03-21] (Napisy24.pl)
HKU\S-1-5-21-3528526601-211756003-444815717-1000\...\MountPoints2: E - E:\AutoRun.exe
HKU\S-1-5-21-3528526601-211756003-444815717-1000\...\MountPoints2: {85888c40-34a1-11e6-94a5-3c970e32542d} - E:\AutoRun.exe
HKU\S-1-5-21-3528526601-211756003-444815717-1000\...\MountPoints2: {85888c59-34a1-11e6-94a5-3c970e32542d} - E:\AutoRun.exe
HKU\S-1-5-21-3528526601-211756003-444815717-1000\...\MountPoints2: {9fcdfd24-d00d-11e6-8d84-3c970e32542d} - E:\AutoRun.exe
Tcpip\..\Interfaces\{A5E7CB25-9AA3-4F16-938D-10E71E3C3A6E}: [DhcpNameServer] 172.168.128.2
Toolbar: HKU\S-1-5-21-3528526601-211756003-444815717-1000 -> Brak nazwy - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - Brak pliku
U3 BcmSqlStartupSvc; Brak ImagePath
U2 CLKMSVC10_3A60B698; Brak ImagePath
U2 CLKMSVC10_C3B3B687; Brak ImagePath
S3 dbx; system32\DRIVERS\dbx.sys [X]
U2 DriverService; Brak ImagePath
U2 IAStorDataMgrSvc; Brak ImagePath
U2 iATAgentService; Brak ImagePath
U2 idealife Update Service; Brak ImagePath
U3 IGRS; Brak ImagePath
U2 IviRegMgr; Brak ImagePath
U2 nvUpdatusService; Brak ImagePath
U2 Oasis2Service; Brak ImagePath
U2 PCCarerService; Brak ImagePath
U2 ReadyComm.DirectRouter; Brak ImagePath
U2 RichVideo; Brak ImagePath
U2 RtLedService; Brak ImagePath
U2 SeaPort; Brak ImagePath
U2 SoftwareService; Brak ImagePath
U3 SQLWriter; Brak ImagePath
2017-04-26 20:39 - 2017-04-26 20:52 - 00000000 ____D C:\AdwCleaner
2017-04-26 20:11 - 2012-09-18 03:53 - 00000000 ____D C: \ Program Files (x86) \ McAfee
C: \ Windows \ Tasks \ {07050C11-53BC-7C98-C39C-1E205B07B39A} .job
EmptyTemp:

In FRST, select Repair.

Also change your e-mail password.

I did as you said ... I entered the post office and ... there was a message in the missed calls, which I can not see physically and in a moment 12 spam messages arrived, so I could not even change the password: - /

Change and check if something still appears.

I have changed and I still have 1 missed call and I can't see it, and if I want to write a new message, after entering anything in the subject and e-mail this command pops up as before


Added after 1 [minutes]:

changing the password does nothing, because something pops up before the change as soon as I enter the post office

Check in another browser, not under a vulnerable IE.

Plus, maybe it's worth reporting to o2 and asking what exactly happened?

I did everything again in Google Chrome, but the same ... then report to o2.pl
Thank you for your help and time. Regards!