PC-HELP.CZ

Zdravím, cca týden se mě CPU zatěžuje na 50-60% přestože na ntb nic nedělám, přikládám obrázek skenu ProcesExploreru, tam je vidět co systém zatěžuje, ale nedokážu se dál dostat, jak to eliminovat. Jinak mám ntb prohlídnutej CCleanerem a Spybotem a nic nenašli, zkoušel jsem i ADWcleaner, ten hlásí že něco našel, ale když dám v dalším kroku vyčistit tak ADW zatuhne a přestane fungovat. díky za rady

Vlož log z HJT:
viewtopic.php?f=70&t=5119

Stáhni si ATF Cleaner
Poklepej na ATF Cleaner.exe, klikni na select all found, poté:
-Když používáš Firefox (Mozzila), klikni na Firefox nahoře a vyber: Select All, poté klikni na Empty Selected.
-Když používáš Operu, klikni nahoře na Operu a vyber: Select All, poté klikni na Empty Selected. Poté klikni na Main (hlavní stránku ) a klikni na Empty Selected.
Po vyčištění klikni na Exit k zavření programu.
ATF-Cleaner je jednoduchý nástroj na odstranění historie z webového prohlížeče. Program dokáže odstranit cache, cookies, historii a další stopy po surfování na Internetu. Mezi podporované prohlížeče patří Internet Explorer, Firefox a Opera. Aplikace navíc umí odstranit dočasné soubory Windows, vysypat koš atd.
- Pokud používáš jen Google Chrome , tak ATF nemusíš použít.


Stáhni si TFC
http://www.geekstogo.com/forum/files/fi ... -oldtimer/
Otevři soubor a zavři všechny ostatní okna, Klikni na Start k zahájení procesu. Program by neměl trvat dlouho.
Poté by se měl PC restartovat, pokud ne , proveď sám.

Stáhni AdwCleaner (by Xplode)
http://www.bleepingcomputer.com/download/adwcleaner/

Ulož si ho na svojí plochu
Ukonči všechny programy , okna a prohlížeče
Spusť program poklepáním a klikni na „Scan“
Po skenu klikni na „Logfile“ ,objeví se okno „Log Manager“ a pak poklepej na odpovídající log , který se otevře. ( jinak je uložen systémovem disku jako C:\AdwCleaner [C?].txt ), jeho obsah sem celý vlož.

Stáhni si Malwarebytes' Anti-Malware
- Při instalaci odeber zatržítko u „Povolit bezplatnou zkušební verzi Malwarebytes' Anti-Malware Premium“
Nainstaluj a spusť ho
- na konci instalace se ujisti že máš zvoleny/zatrhnuty obě možnosti:
Aktualizace Malwarebytes' Anti-Malware a Spustit aplikaci Malwarebytes' Anti-Malware, pokud jo tak klikni na tlačítko konec
- pokud bude nalezena aktualizace, tak se stáhne a nainstaluje
- program se po té spustí a klikni na Skenovat nyní a
- po proběhnutí programu se ti objeví hláška vpravo dole tak klikni na Uložit výsledky a vyber zkopírovat do schránky a vlož sem celý log.
-jinak se log nachází zde: C:\ProgramData\Malwarebytes\Malwarebytes Anti-Malware\Logs

- po té klikni na tlačítko Exit, objeví se ti hláška tak zvol Ano
(zatím nic nemaž!).

Pokud budou problémy , spusť v nouz. režimu.

zde posílám ten log z ADWCleaneru

# AdwCleaner v6.010 - Log soubor vytvořen 09/09/2016 na 16:21:00
# Aktualizováno dne 12/08/2016 z ToolsLib
# Databáze : 2016-09-09.2 [Server]
# Operační systém : Windows Vista (TM) Home Premium Service Pack 2 (X86)
# Uživatelské jméno : Milan - MILAN-PC
# Beží od : C:\Users\Milan\Downloads\adwcleaner_6.010.exe
# Mod: Skenování
# Podpora : https://toolslib.net/forum



***** [ Služby ] *****

Nebyly nalezeny žádné škodlivé služby.


***** [ Adresáře ] *****

Složka nalezena: C:\Users\Milan\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108
Složka nalezena: C:\Users\Milan\AppData\LocalLow\.acestream
Složka nalezena: C:\Users\Milan\AppData\Roaming\.acestream
Složka nalezena: C:\Users\Milan\AppData\Roaming\acestream
Složka nalezena: C:\Users\Milan\AppData\Roaming\RHEng
Složka nalezena: C:\Users\Milan\AppData\Roaming\Solvusoft
Složka nalezena: C:\Users\Milan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ace Stream Media
Složka nalezena: C:\Users\Milan\AppData\Roaming\Mozilla\Firefox\Profiles\41A66E7E5EE1\YourGSearchFinder_br
Složka nalezena: C:\_acestream_cache_
Složka nalezena: C:\ProgramData\ChelfNotify
Složka nalezena: C:\ProgramData\Application Data\ChelfNotify
Složka nalezena: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GAMESDESKTOP
Složka nalezena: C:\Program Files\Games-desktop
Složka nalezena: C:\Program Files\SearchesToYesbnd
Složka nalezena: C:\Program Files\Winsere
Složka nalezena: C:\Windows\system32\config\systemprofile\AppData\LocalLow\Application Updater
Složka nalezena: C:\Users\Public\Documents\dmp
Složka nalezena: C:\Users\Milan\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F
Složka nalezena: C:\Users\Milan\AppData\Roaming\Mozilla\Firefox\Profiles\41A66E7E5EE1


***** [ Soubory ] *****

Soubor nalezen: C:\Windows\system32\roboot.exe
Soubor nalezen: C:\Users\Milan\AppData\Roaming\Mozilla\Firefox\Profiles\41A66E7E5EE1\searchplugins\dd1b66d4.xml


***** [ DLL ] *****

Nebyly nalezeny žádné škodlivé DLL soubory.


***** [ WMI ] *****

Nebyly nalezeny žádné škodlivé klíče.


***** [ Zástupce ] *****

Žádné infikovaný zástupce nenalezen.


***** [ Plánovač úloh ] *****

Úkol nalezen: dsmonitor
Úkol nalezen: PC Performer
Úkol nalezen: PC Performer_DEFAULT
Úkol nalezen: PC Performer_UPDATES
Úkol nalezen: Scheduled Update for Ask Toolbar
Úkol nalezen: WinTaske


***** [ Registry ] *****

Klíč nalezen: HKU\S-1-5-21-1878576560-2232863587-1097285094-1000\Software\Classes\.acelive
Klíč nalezen: HKU\S-1-5-21-1878576560-2232863587-1097285094-1000\Software\Classes\.acemedia
Klíč nalezen: HKU\S-1-5-21-1878576560-2232863587-1097285094-1000\Software\Classes\.acestream
Klíč nalezen: HKU\S-1-5-21-1878576560-2232863587-1097285094-1000\Software\Classes\.tslive
Klíč nalezen: HKU\S-1-5-21-1878576560-2232863587-1097285094-1000\Software\Classes\acestream
Klíč nalezen: HKU\S-1-5-21-1878576560-2232863587-1097285094-1000\Software\Classes\AceStream.CDAudio
Klíč nalezen: HKU\S-1-5-21-1878576560-2232863587-1097285094-1000\Software\Classes\AceStream.DVDMovie
Klíč nalezen: HKU\S-1-5-21-1878576560-2232863587-1097285094-1000\Software\Classes\AceStream.file
Klíč nalezen: HKU\S-1-5-21-1878576560-2232863587-1097285094-1000\Software\Classes\AceStream.OPENFolder
Klíč nalezen: HKU\S-1-5-21-1878576560-2232863587-1097285094-1000\Software\Classes\AceStream.SVCDMovie
Klíč nalezen: HKU\S-1-5-21-1878576560-2232863587-1097285094-1000\Software\Classes\AceStream.VCDMovie
Klíč nalezen: HKCU\Software\Classes\.acelive
Klíč nalezen: HKCU\Software\Classes\.acemedia
Klíč nalezen: HKCU\Software\Classes\.acestream
Klíč nalezen: HKCU\Software\Classes\.tslive
Klíč nalezen: HKCU\Software\Classes\acestream
Klíč nalezen: HKCU\Software\Classes\AceStream.CDAudio
Klíč nalezen: HKCU\Software\Classes\AceStream.DVDMovie
Klíč nalezen: HKCU\Software\Classes\AceStream.file
Klíč nalezen: HKCU\Software\Classes\AceStream.OPENFolder
Klíč nalezen: HKCU\Software\Classes\AceStream.SVCDMovie
Klíč nalezen: HKCU\Software\Classes\AceStream.VCDMovie
Klíč nalezen: HKLM\SOFTWARE\Classes\pc-mechanic
Klíč nalezen: HKLM\SOFTWARE\Classes\protector_dll.Protector
Klíč nalezen: HKLM\SOFTWARE\Classes\protector_dll.Protector.1
Klíč nalezen: HKLM\SOFTWARE\Classes\protector_dll.ProtectorBho
Klíč nalezen: HKLM\SOFTWARE\Classes\protector_dll.ProtectorBho.1
Klíč nalezen: HKLM\SOFTWARE\Classes\protector_dll.ProtectorLib
Klíč nalezen: HKLM\SOFTWARE\Classes\protector_dll.ProtectorLib.1
Klíč nalezen: HKCU\Software\Classes\CLSID\{79690976-ED6E-403C-BBBA-F8928B5EDE17}
Klíč nalezen: HKLM\SOFTWARE\Classes\CLSID\{6BC38BF4-E84D-46E1-920B-42D31AEA617E}
Klíč nalezen: HKLM\SOFTWARE\Classes\CLSID\{8FF10FED-2F0A-4F7F-BE87-B04F1DCD4319}
Klíč nalezen: HKLM\SOFTWARE\Classes\Interface\{82443621-A29A-473E-8335-F5C958A7A4CA}
Klíč nalezen: HKLM\SOFTWARE\Classes\TypeLib\{E716F183-5AD7-11DC-9670-00508DC0D496}
Klíč nalezen: HKU\.DEFAULT\Software\{A16B1AF7-982D-40C3-B5C1-633E1A6A6678}
Klíč nalezen: HKU\S-1-5-21-1878576560-2232863587-1097285094-1000\Software\AceStream
Klíč nalezen: HKU\S-1-5-21-1878576560-2232863587-1097285094-1000\Software\Conduit
Klíč nalezen: HKU\S-1-5-21-1878576560-2232863587-1097285094-1000\Software\MICROSOFT\OTUT
Klíč nalezen: HKU\S-1-5-21-1878576560-2232863587-1097285094-1000\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{1F88FC5D-4D46-448A-AF59-7061FFC6ABBF}_is1
Klíč nalezen: HKU\S-1-5-21-1878576560-2232863587-1097285094-1000\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\AceStream
Klíč nalezen: HKU\S-1-5-21-1878576560-2232863587-1097285094-1000\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\WinThruster_is1
Klíč nalezen: HKU\S-1-5-21-1878576560-2232863587-1097285094-1000\Software\Microsoft\Windows\CurrentVersion\Uninstall\AceStream
Klíč nalezen: HKCU\Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-1878576560-2232863587-1097285094-1000\Software\ICQ\ICQToolbar
Klíč nalezen: HKCU\Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-1878576560-2232863587-1097285094-1000\Software\vShare
Klíč nalezen: HKCU\Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-1878576560-2232863587-1097285094-1000\Software\vShare.tv
Klíč nalezen: HKU\S-1-5-18\Software\{A16B1AF7-982D-40C3-B5C1-633E1A6A6678}
Klíč nalezen: HKCU\Software\AceStream
Klíč nalezen: HKCU\Software\Conduit
Klíč nalezen: HKCU\Software\MICROSOFT\OTUT
Klíč nalezen: HKLM\SOFTWARE\GAMESDESKTOP
Klíč nalezen: HKLM\SOFTWARE\yessearchesSoftware
Klíč nalezen: HKLM\SOFTWARE\{A16B1AF7-982D-40C3-B5C1-633E1A6A6678}
Klíč nalezen: HKLM\SOFTWARE\{E6276374-DE18-4AA5-A365-9016A2F98A2D}
Klíč nalezen: HKLM\SOFTWARE\{G6276374-DEEE-4AAA-A355-9016A2F98A2D}
Klíč nalezen: HKLM\SOFTWARE\Microsoft\{94ebd7b5-82ae-449t-b679-3d04078ed154}
Klíč nalezen: HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\AceStream
Klíč nalezen: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{7ADF667E-E14D-4D2C-827C-B0108F0D93BC}
Klíč nalezen: HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{1F88FC5D-4D46-448A-AF59-7061FFC6ABBF}_is1
Klíč nalezen: HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\AceStream
Klíč nalezen: HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\WinThruster_is1
Klíč nalezen: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\120DFADEB50841F408F04D2A278F9509
Klíč nalezen: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B5BAE2ED018083A4C8DA86D6E3F4B024
Klíč nalezen: HKLM\SOFTWARE\Classes\Installer\UpgradeCodes\F928123A039649549966D4C29D35B1C9
Klíč nalezen: HKLM\SOFTWARE\Classes\Installer\UpgradeCodes\F928123A039649549966d4C29D35B1C9
Hodnota nalezena: HKU\S-1-5-21-1878576560-2232863587-1097285094-1000\Software\Microsoft\Internet Explorer\SearchScopes [DoNotAskAgain]
Klíč nalezen: HKU\S-1-5-21-1878576560-2232863587-1097285094-1000\Software\Microsoft\Internet Explorer\SearchScopes\{12016692-5846-482B-BC22-69E40AD082C8}
Klíč nalezen: HKU\S-1-5-21-1878576560-2232863587-1097285094-1000\Software\Microsoft\Internet Explorer\SearchScopes\{9F7146F3-6FE4-4FFD-8FF7-8A55B09E08B1}
Klíč nalezen: HKU\S-1-5-21-1878576560-2232863587-1097285094-1000\Software\Microsoft\Internet Explorer\SearchScopes\{A99D8E84-1335-4C40-886E-FF8A77561577}
Klíč nalezen: HKU\S-1-5-21-1878576560-2232863587-1097285094-1000\Software\Microsoft\Internet Explorer\SearchScopes\{FBD47A13-37C0-4887-9360-790C9AD71340}
Hodnota nalezena: HKCU\Software\Microsoft\Internet Explorer\SearchScopes [DoNotAskAgain]
Klíč nalezen: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{12016692-5846-482B-BC22-69E40AD082C8}
Klíč nalezen: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{9F7146F3-6FE4-4FFD-8FF7-8A55B09E08B1}
Klíč nalezen: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{A99D8E84-1335-4C40-886E-FF8A77561577}
Klíč nalezen: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{FBD47A13-37C0-4887-9360-790C9AD71340}
Klíč nalezen: HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{1E676BE5-6C6E-4491-8981-EF67FF6C2623}
Klíč nalezen: HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{FBD47A13-37C0-4887-9360-790C9AD71340}
Klíč nalezen: HKCU\Software\Classes\Applications\ace_player.exe
Klíč nalezen: HKCU\Software\Classes\AudioCD\shell\PlayWithACEStream
Klíč nalezen: HKCU\Software\Classes\DVD\shell\PlayWithACEStream
Klíč nalezen: HKCU\Software\Classes\MIME\Database\Content Type\application/x-acestream-plugin
Klíč nalezen: HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\ACEStreamPlayCDAudioOnArrival
Klíč nalezen: HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\ACEStreamPlayDVDAudioOnArrival
Klíč nalezen: HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\ACEStreamPlayDVDMovieOnArrival
Klíč nalezen: HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\ACEStreamPlayMusicFilesOnArrival
Klíč nalezen: HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\ACEStreamPlaySVCDMovieOnArrival
Klíč nalezen: HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\ACEStreamPlayVCDMovieOnArrival
Klíč nalezen: HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\ACEStreamPlayVideoFilesOnArrival
Klíč nalezen: HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.acelive
Klíč nalezen: HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.acemedia
Klíč nalezen: HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.acestream
Klíč nalezen: HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.tslive
Klíč nalezen: HKCU\SOFTWARE\Mozilla\Firefox\{EB52F1AB-3C2B-424F-9794-833C687025CF}
Klíč nalezen: HKLM\SOFTWARE\Mozilla\Firefox\{EB52F1AB-3C2B-424F-9794-833C687025CF}
Klíč nalezen: HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.acelive
Klíč nalezen: HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.acemedia
Klíč nalezen: HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.acestream
Klíč nalezen: HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.tslive
Klíč nalezen: HKCU\SOFTWARE\Classes\Applications\ace_player.exe
Klíč nalezen: HKCU\SOFTWARE\Classes\MIME\Database\Content Type\application/x-acestream-plugin


***** [ Internetové prohlížeče ] *****

Firefox nastavení nalezeno: [C:\Users\Milan\AppData\Roaming\Mozilla\Firefox\Profiles\41A66E7E5EE1\prefs.js] - "browser.search.defaultenginename.US" - "data:text/plain,browser.search.defaultenginename.US=yessearches"
Firefox nastavení nalezeno: [C:\Users\Milan\AppData\Roaming\Mozilla\Firefox\Profiles\41A66E7E5EE1\prefs.js] - "browser.search.searchengine.hp" - "hxxp://www.yessearches.com/?ts=AHEpBnMmA34kAU..&v=20160301&uid=A91D07494AE58F93101
Firefox nastavení nalezeno: [C:\Users\Milan\AppData\Roaming\Mozilla\Firefox\Profiles\41A66E7E5EE1\prefs.js] - "browser.search.searchengine.sp" - "hxxp://www.yessearches.com/chrome.php?mode=ffsengext&ptid=wak&q={searchTerms}&ts=A
Firefox nastavení nalezeno: [C:\Users\Milan\AppData\Roaming\Mozilla\Firefox\Profiles\41A66E7E5EE1\prefs.js] - "browser.search.searchengine.url" - "hxxp://www.yessearches.com/chrome.php?mode=ffsengext&ptid=wak&q={searchTerms}&ts=
Firefox nastavení nalezeno: [C:\Users\Milan\AppData\Roaming\Mozilla\Firefox\Profiles\41A66E7E5EE1\prefs.js] - "extensions.toolbar.mindspark._brMembers_.BUTTON_STRUCTURE" - "[{\"b\":224520315,\"c\":\"mindspark.magnify\",\"p\":\"L
Firefox nastavení nalezeno: [C:\Users\Milan\AppData\Roaming\Mozilla\Firefox\Profiles\41A66E7E5EE1\prefs.js] - "extensions.toolbar.mindspark._brMembers_.successUrl" - "hxxp://www.yessearches.com/chrome.php?uid=A91D07494AE58F93101
Firefox nastavení nalezeno: [C:\Users\Milan\AppData\Roaming\Mozilla\Firefox\Profiles\41A66E7E5EE1\prefs.js] - "extensions.toolbar.mindspark._brMembers_.uninstallTasks" - "{\"prefBranchesToDelete\":[\"extensions.toolbar.mindspark
Chromium nastavení nalezeno: [C:\Users\Milan\AppData\Local\Google\Chrome\User Data\Profile 1\Web data] - ask.com
Chromium nastavení nalezeno: [C:\Users\Milan\AppData\Local\Google\Chrome\User Data\Profile 1\Web data] - search.icq.com
Chromium nastavení nalezeno: [C:\Users\Milan\AppData\Local\Google\Chrome\User Data\Profile 1\Web data] - conduit.search
Chromium nastavení nalezeno: [C:\Users\Milan\AppData\Local\Google\Chrome\User Data\Profile 1\Web data] - search.conduit.com
Chromium nastavení nalezeno: [C:\Users\Milan\AppData\Local\Google\Chrome\User Data\Profile 1\Secure Preferences] - hxxp://search.conduit.com/?ctid=CT32886 ... -4BB4-84D9
Chromium nastavení nalezeno: [C:\Users\Milan\AppData\Local\Google\Chrome\User Data\Profile 1\Secure Preferences ] - hxxp://search.conduit.com/?ctid=CT32886 ... D-4BB4-84D

*************************

C:\AdwCleaner\AdwCleaner[R0].txt - [43688 Bajtů] - [09/03/2014 00:08:35]
C:\AdwCleaner\AdwCleaner[R1].txt - [42328 Bajtů] - [09/03/2014 00:12:31]
C:\AdwCleaner\AdwCleaner[R2].txt - [42448 Bajtů] - [09/03/2014 00:16:11]
C:\AdwCleaner\AdwCleaner[R3].txt - [1217 Bajtů] - [09/03/2014 13:03:41]
C:\AdwCleaner\AdwCleaner[R4].txt - [2263 Bajtů] - [23/09/2014 20:32:47]
C:\AdwCleaner\AdwCleaner[R5].txt - [1635 Bajtů] - [23/09/2014 20:54:10]
C:\AdwCleaner\AdwCleaner[R6].txt - [1755 Bajtů] - [24/09/2014 17:54:50]
C:\AdwCleaner\AdwCleaner[S0].txt - [1947 Bajtů] - [09/03/2014 00:10:15]
C:\AdwCleaner\AdwCleaner[S10].txt - [15113 Bajtů] - [09/09/2016 16:21:00]
C:\AdwCleaner\AdwCleaner[S1].txt - [344 Bajtů] - [09/03/2014 00:13:54]
C:\AdwCleaner\AdwCleaner[S2].txt - [41332 Bajtů] - [09/03/2014 00:17:59]
C:\AdwCleaner\AdwCleaner[S3].txt - [1183 Bajtů] - [09/03/2014 13:06:31]
C:\AdwCleaner\AdwCleaner[S4].txt - [2174 Bajtů] - [23/09/2014 20:41:53]
C:\AdwCleaner\AdwCleaner[S5].txt - [1528 Bajtů] - [23/09/2014 20:57:03]
C:\AdwCleaner\AdwCleaner[S6].txt - [15348 Bajtů] - [05/09/2016 17:22:33]
C:\AdwCleaner\AdwCleaner[S7].txt - [15411 Bajtů] - [05/09/2016 17:29:30]
C:\AdwCleaner\AdwCleaner[S8].txt - [15427 Bajtů] - [05/09/2016 17:43:08]
C:\AdwCleaner\AdwCleaner[S9].txt - [15864 Bajtů] - [05/09/2016 18:20:29]

########## EOF - C:\AdwCleaner\AdwCleaner[S10].txt - [15859 Bajtů] ##########

A to další je kde??

Spusť znovu AdwCleaner (u Windows Vista či Windows7, klikni na AdwCleaner pravým a vyber „Spustit jako správce“
klikni na „Scan“, po prohledání klikni na „ Clean“

Program provede opravu, po automatickém restartu klikni na „Log Manager“ a pak poklepej na odpovídají log, (C:\AdwCleaner [C?].txt) , jeho obsah sem celý vlož.

Stáhni si Junkware Removal Tool by Thisisu
http://www.bleepingcomputer.com/downloa ... oval-tool/
na svojí plochu.

Deaktivuj si svůj antivirový program. Pravým tl. myši klikni na JRT.exe a vyber „spustit jako správce“. Pro pokračování budeš vyzván ke stisknutí jakékoliv klávesy. Na nějakou klikni.
Začne skenování programu. Skenování může trvat dloho , podle množství nákaz. Po ukončení skenu se objeví log (JRT.txt) , který se uloží na ploše.
Zkopíruj sem prosím celý jeho obsah.

další myslíš ostatní programy? ATF jsem nestahoval protože používám jen Chrome, a u ADW stále narážím na problém zatuhnutí - po skenu kliknu na čištění a program zatuhne, na liště se mu objeví "program nereaguje" a myš se točí a točí až to musím násilně ukončit přes Správce.

Malwarebytes Anti-Malware
www.malwarebytes.org

Datum skenování: 10.9.2016
Čas skenování: 8:51:44
Protokol:
Správce: Ano

Verze: 2.2.1.1043
Databáze malwaru: v2016.09.10.03
Databáze rootkitů: v2016.08.15.01
Licence: Bezplatná verze
Ochrana proti malwaru: Vypnuto
Ochrana proti škodlivým webovým stránkám: Vypnuto
Ochrana programu: Vypnuto

OS: Windows Vista Service Pack 2
CPU: x86
Souborový systém: NTFS
Uživatel: Milan

Typ skenu: Sken hrozeb
Výsledek: Dokončeno
Prohledaných objektů: 293539
Uplynulý čas: 33 min, 24 sek

Paměť: Zapnuto
Po spuštění: Zapnuto
Souborový systém: Zapnuto
Archivy: Zapnuto
Rootkity: Vypnuto
Heuristika: Zapnuto
PUP: Zapnuto
PUM: Zapnuto

Procesy: 0
(Nenalezeny žádné škodlivé položky)

Moduly: 0
(Nenalezeny žádné škodlivé položky)

Klíče registru: 28
PUP.Optional.Tuto4PC, HKLM\SOFTWARE\CLASSES\CLSID\{8FF10FED-2F0A-4F7F-BE87-B04F1DCD4319}, , [e19a5719108a7bbb214de8afc14149b7],
PUP.Optional.Elex.SHHKRST, HKU\S-1-5-18\SOFTWARE\{A16B1AF7-982D-40C3-B5C1-633E1A6A6678}, , [c2b92c448c0e11255967349cfb09b24e],
PUP.Optional.Elex.SHHKRST, HKLM\SOFTWARE\{A16B1AF7-982D-40C3-B5C1-633E1A6A6678}, , [c2b92c448c0e11255967349cfb09b24e],
PUP.Optional.Funshion, HKU\S-1-5-21-1878576560-2232863587-1097285094-1000\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{11CC93E4-0BE6-4F8F-82AA-D577FB955B05}, , [1d5e234dd6c4fc3a9386ceaf8e748b75],
PUP.Optional.Funshion, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\PREAPPROVED\{11CC93E4-0BE6-4F8F-82AA-D577FB955B05}, , [1d5e234dd6c4fc3a9386ceaf8e748b75],
PUP.Optional.Funshion, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{1DD31B76-C57E-49ba-94BC-BF53F0C82CD4}, , [eb9037392c6e112573a7daa3c83a4bb5],
Adware.BDSearch, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\PREAPPROVED\{E5D5D4A1-17F0-41D7-B1C6-0979F91E6F46}, , [0f6c650bb5e55fd76eb31c6361a1718f],
PUP.Optional.GamesDesktop, HKLM\SOFTWARE\GAMESDESKTOP, , [81fa93dddcbed95d18612f7440c3a45c],
PUP.Optional.YesSearches, HKLM\SOFTWARE\yessearchesSoftware, , [512a5c146c2ef24407f540a655ae54ac],
PUP.Optional.ConduitTB.Gen, HKLM\SOFTWARE\GOOGLE\CHROME\NATIVEMESSAGINGHOSTS\nmhostct3288691, , [681370003664b18571c8f1e8a1619f61],
PUP.Optional.WinTaske, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TASKS\{29E973CC-D336-4E04-92F4-23AD8DE8D3CB}, , [4437165a01992b0b73885d93c043ea16],
PUP.Optional.PCPerformer, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\PC Performer, , [83f8224ef1a9e74f6379d31d50b3ca36],
PUP.Optional.PCPerformer, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\PC Performer_DEFAULT, , [215aa9c783175bdb18c4a64a986bae52],
PUP.Optional.PCPerformer, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\PC Performer_UPDATES, , [d4a7363a5b3f1d197a62e60a877cc13f],
PUP.Optional.ASK, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\Scheduled Update for Ask Toolbar, , [4536650b6e2cb4827cc78860709356aa],
PUP.Optional.WinTaske, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\WinTaske, , [5e1d511fb9e192a47b6bce1dc53e8080],
PUP.Optional.MySearch123, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{7ADF667E-E14D-4D2C-827C-B0108F0D93BC}, , [6b102e42d3c765d13eab924826ddbe42],
PUP.Optional.YesSearches.YSSRHS1, HKLM\SOFTWARE\MOZILLA\FIREFOX\{EB52F1AB-3C2B-424F-9794-833C687025CF}, , [0477d29e8614e1552beeb2f755af38c8],
PUP.Optional.Tuto4PC, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\gmsd_re_021010263_is1, , [bfbc76fa0e8c71c5f5821dc90bf8eb15],
PUP.Optional.Tuto4PC, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\rec_en_221_is1, , [81fa9ed21d7dc0769d7ec028ba4940c0],
PUP.Optional.ConduitTB.Gen, HKU\S-1-5-21-1878576560-2232863587-1097285094-1000\SOFTWARE\GOOGLE\CHROME\NATIVEMESSAGINGHOSTS\nmhostct3288691, , [1368ed83cad01c1a7eb6d00911f1827e],
PUP.Optional.StartSearch, HKU\S-1-5-21-1878576560-2232863587-1097285094-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{12016692-5846-482B-BC22-69E40AD082C8}, , [6c0f531db7e34ee821839f1712f19f61],
PUP.Optional.Conduit, HKU\S-1-5-21-1878576560-2232863587-1097285094-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{9F7146F3-6FE4-4FFD-8FF7-8A55B09E08B1}, , [106b0b65cecc5bdb216f0c904cb71de3],
PUP.Optional.Spigot, HKU\S-1-5-21-1878576560-2232863587-1097285094-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{A99D8E84-1335-4C40-886E-FF8A77561577}, , [3447a1cfaeec61d5c371259110f3718f],
PUP.Optional.StartSearch, HKU\S-1-5-21-1878576560-2232863587-1097285094-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{FBD47A13-37C0-4887-9360-790C9AD71340}, , [a4d7aac6c4d646f0cbd97c3aac57a35d],
PUP.Optional.Tuto4PC, HKU\S-1-5-21-1878576560-2232863587-1097285094-1000\SOFTWARE\MICROSOFT\OTUT, , [de9d9cd47327b6801261866b04ff3bc5],
PUP.Optional.ConduitTB.Gen, HKU\S-1-5-21-1878576560-2232863587-1097285094-1000\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\CHCT3288691, , [245791df5c3e1c1acbb9751cb25137c9],
PUP.Optional.YesSearches.YSSRHS1, HKU\S-1-5-21-1878576560-2232863587-1097285094-1000\SOFTWARE\MOZILLA\FIREFOX\{EB52F1AB-3C2B-424F-9794-833C687025CF}, , [97e492debedce35369ad9c0daf556a96],

Hodnoty registru: 18
PUP.Optional.WinTaske, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TASKS\{29E973CC-D336-4E04-92F4-23AD8DE8D3CB}|Path, \WinTaske, , [4437165a01992b0b73885d93c043ea16]
PUP.Optional.YesSearches.YSSRHS1, HKLM\SOFTWARE\MOZILLA\FIREFOX\{EB52F1AB-3C2B-424F-9794-833C687025CF}|hp, http://www.yessearches.com/?ts=AHEpBnMm ... =ffsengext, , [0477d29e8614e1552beeb2f755af38c8]
PUP.Optional.YesSearches.YSSRHS1, HKLM\SOFTWARE\MOZILLA\FIREFOX\{EB52F1AB-3C2B-424F-9794-833C687025CF}|tab, http://www.yessearches.com/?ts=AHEpBnMm ... =ffsengext, , [512a94dc5248290d79a0f9b04bb9e917]
PUP.Optional.YesSearches.YSSRHS1, HKLM\SOFTWARE\MOZILLA\FIREFOX\{EB52F1AB-3C2B-424F-9794-833C687025CF}|sp, http://www.yessearches.com/chrome.php?u ... tid=wak&q={searchTerms}&ts=AHEpBnMmA34kAU..&v=20160301&mode=ffsengext, , [b0cb2a4684163df9908906a361a308f8]
PUP.Optional.YesSearches.YSSRHS1, HKLM\SOFTWARE\MOZILLA\FIREFOX\{EB52F1AB-3C2B-424F-9794-833C687025CF}|surl, http://www.yessearches.com/chrome.php?u ... toolbar&q=, , [2c4fa5cbf2a8a4921801b0f90afaf907]
PUP.Optional.StartSearch, HKU\S-1-5-21-1878576560-2232863587-1097285094-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{12016692-5846-482B-BC22-69E40AD082C8}|URL, http://startsear.ch/?aff=2&src=sp&cf=4e ... 04dcceb&q={searchTerms}, , [6c0f531db7e34ee821839f1712f19f61]
PUP.Optional.Conduit, HKU\S-1-5-21-1878576560-2232863587-1097285094-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{9F7146F3-6FE4-4FFD-8FF7-8A55B09E08B1}|URL, http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT3288691&CUI=UN32529972182696518&UM=2, , [106b0b65cecc5bdb216f0c904cb71de3]
PUP.Optional.Conduit, HKU\S-1-5-21-1878576560-2232863587-1097285094-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{9F7146F3-6FE4-4FFD-8FF7-8A55B09E08B1}|SuggestionsURL_JSON, http://suggest.search.conduit.com/CSugg ... hx?prefix={searchTerms}, , [562528484258cc6a95fbf6a69b689868]
PUP.Optional.Conduit, HKU\S-1-5-21-1878576560-2232863587-1097285094-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{9F7146F3-6FE4-4FFD-8FF7-8A55B09E08B1}|FaviconURL, http://search.conduit.com/favicon.ico, , [2952e48c4b4f51e53b55e6b60300dd23]
PUP.Optional.Spigot, HKU\S-1-5-21-1878576560-2232863587-1097285094-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{A99D8E84-1335-4C40-886E-FF8A77561577}|URL, http://search.yahoo.com/search?fr=chr-g ... =867034&p={searchTerms}, , [3447a1cfaeec61d5c371259110f3718f]
PUP.Optional.Spigot, HKU\S-1-5-21-1878576560-2232863587-1097285094-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{A99D8E84-1335-4C40-886E-FF8A77561577}|OSDFileURL, file:///C:/Program%20Files/Common%20Files/Spigot/Search%20Settings/yahoo_ie.xml, , [f784b7b94c4e54e272c3199d6d96f10f]
PUP.Optional.StartSearch, HKU\S-1-5-21-1878576560-2232863587-1097285094-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{FBD47A13-37C0-4887-9360-790C9AD71340}|URL, http://startsear.ch/?aff=1&src=sp&cf=4e ... 04dcceb&q={searchTerms}, , [a4d7aac6c4d646f0cbd97c3aac57a35d]
PUP.Optional.Tuto4PC, HKU\S-1-5-21-1878576560-2232863587-1097285094-1000\SOFTWARE\MICROSOFT\OTUT|product, tutoproduct, , [de9d9cd47327b6801261866b04ff3bc5]
PUP.Optional.Tuto4PC, HKU\S-1-5-21-1878576560-2232863587-1097285094-1000\SOFTWARE\MICROSOFT\OTUT|partner, tuto, , [790277f9f7a32b0b2350d71aaf548779]
PUP.Optional.YesSearches.YSSRHS1, HKU\S-1-5-21-1878576560-2232863587-1097285094-1000\SOFTWARE\MOZILLA\FIREFOX\{EB52F1AB-3C2B-424F-9794-833C687025CF}|hp, http://www.yessearches.com/?ts=AHEpBnMm ... =ffsengext, , [97e492debedce35369ad9c0daf556a96]
PUP.Optional.YesSearches.YSSRHS1, HKU\S-1-5-21-1878576560-2232863587-1097285094-1000\SOFTWARE\MOZILLA\FIREFOX\{EB52F1AB-3C2B-424F-9794-833C687025CF}|tab, http://www.yessearches.com/?ts=AHEpBnMm ... =ffsengext, , [0675c0b0b3e7ad89997d91185ba924dc]
PUP.Optional.YesSearches.YSSRHS1, HKU\S-1-5-21-1878576560-2232863587-1097285094-1000\SOFTWARE\MOZILLA\FIREFOX\{EB52F1AB-3C2B-424F-9794-833C687025CF}|sp, http://www.yessearches.com/chrome.php?u ... tid=wak&q={searchTerms}&ts=AHEpBnMmA34kAU..&v=20160301&mode=ffsengext, , [e398ed83029837ff1afc98119e664ab6]
PUP.Optional.YesSearches.YSSRHS1, HKU\S-1-5-21-1878576560-2232863587-1097285094-1000\SOFTWARE\MOZILLA\FIREFOX\{EB52F1AB-3C2B-424F-9794-833C687025CF}|surl, http://www.yessearches.com/chrome.php?u ... toolbar&q=, , [4d2e0a660991eb4b02148c1ded17b749]

Data registru: 0
(Nenalezeny žádné škodlivé položky)

Složky: 56
PUP.Optional.Tuto4PC, C:\Program Files\Games-desktop, , [c1ba234d3169b77f0ffe6d87d82b28d8],
PUP.Optional.GamesDesktop, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GAMESDESKTOP, , [1d5e08682d6dda5ccba6caea5aa823dd],
PUP.Optional.YesSearches, C:\Program Files\SearchesToYesbnd, , [6f0ccda3108a59dd5cd5a71f04fe8878],
PUP.Optional.YesSearches, C:\Program Files\SearchesToYesbnd\dmp, , [6f0ccda3108a59dd5cd5a71f04fe8878],
PUP.Optional.YesSearches, C:\Program Files\SearchesToYesbnd\dmp\Winsere.exe, , [6f0ccda3108a59dd5cd5a71f04fe8878],
PUP.Optional.YesSearches, C:\Program Files\SearchesToYesbnd\dmp\WinTaske.exe, , [6f0ccda3108a59dd5cd5a71f04fe8878],
PUP.Optional.YesSearches, C:\Users\Milan\AppData\Roaming\Mozilla\Firefox\Profiles\41A66E7E5EE1\YourGSearchFinder_br, , [7ffc88e8e7b370c65ce902c40cf6cb35],
PUP.Optional.Winsere, C:\Program Files\Winsere, , [1e5d71ffabeffc3a05b751758a78718f],
PUP.Optional.Winsere, C:\Program Files\Winsere\Winsere, , [1e5d71ffabeffc3a05b751758a78718f],
PUP.Optional.Solvusoft, C:\Users\Milan\AppData\Roaming\Solvusoft, , [0378f67aebafe650d5915487fb098779],
PUP.Optional.YesSearches.YSSRHS1, C:\Users\Milan\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F, , [5823214f7921fb3bfe175950b4502ed2],
PUP.Optional.YesSearches.YSSRHS1, C:\Users\Milan\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\bookmarkbackups, , [5823214f7921fb3bfe175950b4502ed2],
PUP.Optional.YesSearches.YSSRHS1, C:\Users\Milan\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\chrome, , [5823214f7921fb3bfe175950b4502ed2],
PUP.Optional.YesSearches.YSSRHS1, C:\Users\Milan\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\crashes, , [5823214f7921fb3bfe175950b4502ed2],
PUP.Optional.YesSearches.YSSRHS1, C:\Users\Milan\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\crashes\events, , [5823214f7921fb3bfe175950b4502ed2],
PUP.Optional.YesSearches.YSSRHS1, C:\Users\Milan\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\datareporting, , [5823214f7921fb3bfe175950b4502ed2],
PUP.Optional.YesSearches.YSSRHS1, C:\Users\Milan\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\extensions, , [5823214f7921fb3bfe175950b4502ed2],
PUP.Optional.YesSearches.YSSRHS1, C:\Users\Milan\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\gmp, , [5823214f7921fb3bfe175950b4502ed2],
PUP.Optional.YesSearches.YSSRHS1, C:\Users\Milan\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\gmp-eme-adobe, , [5823214f7921fb3bfe175950b4502ed2],
PUP.Optional.YesSearches.YSSRHS1, C:\Users\Milan\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\gmp-eme-adobe\12, , [5823214f7921fb3bfe175950b4502ed2],
PUP.Optional.YesSearches.YSSRHS1, C:\Users\Milan\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\gmp-gmpopenh264, , [5823214f7921fb3bfe175950b4502ed2],
PUP.Optional.YesSearches.YSSRHS1, C:\Users\Milan\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\gmp-gmpopenh264\1.1, , [5823214f7921fb3bfe175950b4502ed2],
PUP.Optional.YesSearches.YSSRHS1, C:\Users\Milan\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\gmp-gmpopenh264\1.5.3, , [5823214f7921fb3bfe175950b4502ed2],
PUP.Optional.YesSearches.YSSRHS1, C:\Users\Milan\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\healthreport, , [5823214f7921fb3bfe175950b4502ed2],
PUP.Optional.YesSearches.YSSRHS1, C:\Users\Milan\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\jetpack, , [5823214f7921fb3bfe175950b4502ed2],
PUP.Optional.YesSearches.YSSRHS1, C:\Users\Milan\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\jetpack\jid1-4P0kohSJxU1qGg@jetpack, , [5823214f7921fb3bfe175950b4502ed2],
PUP.Optional.YesSearches.YSSRHS1, C:\Users\Milan\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\jetpack\jid1-4P0kohSJxU1qGg@jetpack\simple-storage, , [5823214f7921fb3bfe175950b4502ed2],
PUP.Optional.YesSearches.YSSRHS1, C:\Users\Milan\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\lwtheme, , [5823214f7921fb3bfe175950b4502ed2],
PUP.Optional.YesSearches.YSSRHS1, C:\Users\Milan\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\minidumps, , [5823214f7921fb3bfe175950b4502ed2],
PUP.Optional.YesSearches.YSSRHS1, C:\Users\Milan\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\personas, , [5823214f7921fb3bfe175950b4502ed2],
PUP.Optional.YesSearches.YSSRHS1, C:\Users\Milan\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\personas\cache, , [5823214f7921fb3bfe175950b4502ed2],
PUP.Optional.YesSearches.YSSRHS1, C:\Users\Milan\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\personas\cache\187627, , [5823214f7921fb3bfe175950b4502ed2],
PUP.Optional.YesSearches.YSSRHS1, C:\Users\Milan\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\searchplugins, , [5823214f7921fb3bfe175950b4502ed2],
PUP.Optional.YesSearches.YSSRHS1, C:\Users\Milan\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\searchplugins\searchplugins-backup, , [5823214f7921fb3bfe175950b4502ed2],
PUP.Optional.YesSearches.YSSRHS1, C:\Users\Milan\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\sessionstore-backups, , [5823214f7921fb3bfe175950b4502ed2],
PUP.Optional.YesSearches.YSSRHS1, C:\Users\Milan\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\storage, , [5823214f7921fb3bfe175950b4502ed2],
PUP.Optional.YesSearches.YSSRHS1, C:\Users\Milan\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\storage\default, , [5823214f7921fb3bfe175950b4502ed2],
PUP.Optional.YesSearches.YSSRHS1, C:\Users\Milan\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\storage\default\https+++twitter.com, , [5823214f7921fb3bfe175950b4502ed2],
PUP.Optional.YesSearches.YSSRHS1, C:\Users\Milan\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\storage\default\https+++twitter.com\idb, , [5823214f7921fb3bfe175950b4502ed2],
PUP.Optional.YesSearches.YSSRHS1, C:\Users\Milan\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\storage\default\https+++twitter.com\idb\437107801ddma_ethyape.files, , [5823214f7921fb3bfe175950b4502ed2],
PUP.Optional.YesSearches.YSSRHS1, C:\Users\Milan\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\storage\permanent, , [5823214f7921fb3bfe175950b4502ed2],
PUP.Optional.YesSearches.YSSRHS1, C:\Users\Milan\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\storage\permanent\chrome, , [5823214f7921fb3bfe175950b4502ed2],
PUP.Optional.YesSearches.YSSRHS1, C:\Users\Milan\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\storage\permanent\chrome\idb, , [5823214f7921fb3bfe175950b4502ed2],
PUP.Optional.YesSearches.YSSRHS1, C:\Users\Milan\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\storage\permanent\chrome\idb\2588645841ssegtnti.files, , [5823214f7921fb3bfe175950b4502ed2],
PUP.Optional.YesSearches.YSSRHS1, C:\Users\Milan\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\storage\permanent\chrome\idb\2918063365piupsah.files, , [5823214f7921fb3bfe175950b4502ed2],
PUP.Optional.YesSearches.YSSRHS1, C:\Users\Milan\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\storage\permanent\chrome\idb\846562544phus.files, , [5823214f7921fb3bfe175950b4502ed2],
PUP.Optional.YesSearches.YSSRHS1, C:\Users\Milan\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\storage\permanent\moz-safe-about+home, , [5823214f7921fb3bfe175950b4502ed2],
PUP.Optional.YesSearches.YSSRHS1, C:\Users\Milan\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\storage\permanent\moz-safe-about+home\idb, , [5823214f7921fb3bfe175950b4502ed2],
PUP.Optional.YesSearches.YSSRHS1, C:\Users\Milan\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\storage\permanent\moz-safe-about+home\idb\818200132aebmoouht, , [5823214f7921fb3bfe175950b4502ed2],
PUP.Optional.YesSearches.YSSRHS1, C:\Users\Milan\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\storage\temporary, , [5823214f7921fb3bfe175950b4502ed2],
PUP.Optional.YesSearches.YSSRHS1, C:\Users\Milan\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\weave, , [5823214f7921fb3bfe175950b4502ed2],
PUP.Optional.YesSearches.YSSRHS1, C:\Users\Milan\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\weave\changes, , [5823214f7921fb3bfe175950b4502ed2],
PUP.Optional.YesSearches.YSSRHS1, C:\Users\Milan\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\weave\failed, , [5823214f7921fb3bfe175950b4502ed2],
PUP.Optional.YesSearches.YSSRHS1, C:\Users\Milan\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\weave\toFetch, , [5823214f7921fb3bfe175950b4502ed2],
PUP.Optional.YesSearches.YSSRHS1, C:\Users\Milan\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\webapps, , [5823214f7921fb3bfe175950b4502ed2],
PUP.Optional.YesSearches.YSSRHS1, C:\Users\Milan\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\{F0B1CEAC-7C0D-407c-B25E-623D7CBECCCB}, , [5823214f7921fb3bfe175950b4502ed2],

Soubory: 864
PUP.Optional.Elex, C:\Program Files\SearchesToYesbnd\SoEasy.exe, , [1665cfa1148677bf711f23a8e02459a7],
PUP.Optional.Elex, C:\Program Files\{510BE370-EEEB-40D0-AF33-A19B08A1C070}\ihpul.exe, , [1269e789a1f9c2741e126875659c04fc],
PUP.Optional.Elex, C:\Program Files\{510BE370-EEEB-40D0-AF33-A19B08A1C070}\qks.exe, , [1f5c1a56900abf774edb01e9a25fab55],
PUP.Optional.Elex, C:\Program Files\{60CB58D8-982A-4606-8A0E-431BEE76AB29}\qks.exe, , [0f6c5b15d1c9d95d2ffa19d12ed31ce4],
PUP.Optional.Elex, C:\Program Files\{785E69BF-452A-47D8-8E28-87546CADD5D0}\ihpul.exe, , [5823531dfe9ce6509d93667799688878],
PUP.Optional.Elex, C:\Program Files\{785E69BF-452A-47D8-8E28-87546CADD5D0}\qks.exe, , [39422d43425884b2da4fb63435ccae52],
PUP.Optional.Elex, C:\Program Files\{A89DEA1E-6B8C-4821-A378-63D7AF4EF686}\ihpul.exe, , [1d5ec0b03e5c79bd9b953aa32fd237c9],
PUP.Optional.Elex, C:\Program Files\{A89DEA1E-6B8C-4821-A378-63D7AF4EF686}\qks.exe, , [02792a46eeac9a9cf435a842f9085da3],
PUP.Optional.Elex, C:\Program Files\{B1D71910-0E0B-4AF4-8A72-89B0B2E3F2C3}\ihpul.exe, , [205b1c54455583b3cc648f4e976ac23e],
PUP.Optional.Elex, C:\Program Files\{B1D71910-0E0B-4AF4-8A72-89B0B2E3F2C3}\qks.exe, , [7dfeb5bbe9b167cf05246288dd24ec14],
PUP.Optional.Elex, C:\Program Files\{B8630914-6737-4C71-93A8-0B062E8BAED7}\ihpul.exe, , [f18a8ae6504a9b9bd75922bb778a5ba5],
PUP.Optional.Elex, C:\Program Files\{B8630914-6737-4C71-93A8-0B062E8BAED7}\qks.exe, , [6318b3bd4b4fff37d1584e9c659cd927],
PUP.Optional.Elex, C:\Program Files\{BC3E8A38-4681-4CFB-B70C-3B5F1134EB58}\qks.exe, , [abd074fc2f6be74f959408e2c23fbb45],
PUP.Optional.Elex, C:\Program Files\{DD60570A-CBDB-4894-B2F4-53236ACE00FC}\ihpul.exe, , [601b76fadac0d462fa36bf1ec93827d9],
PUP.Optional.Elex, C:\Program Files\{DD60570A-CBDB-4894-B2F4-53236ACE00FC}\qks.exe, , [0576acc4e0baea4ce742b931a958c13f],
PUP.Optional.Elex, C:\Program Files\{EDFA77E5-2980-4403-A557-9355A735589F}\qks.exe, , [c4b7d898b7e367cf43e6fcee639efe02],
PUP.Optional.Elex, C:\Program Files\{F516F7D6-096A-4E3C-B7C0-DED4748EBD9B}\ihpul.exe, , [79022b45d6c49d9979b7b62733ce47b9],
PUP.Optional.Elex, C:\Program Files\{F516F7D6-096A-4E3C-B7C0-DED4748EBD9B}\qks.exe, , [78030c64c3d7fb3b3fea2dbdc9380af6],
PUP.Optional.SysTweak, C:\Windows\System32\roboot.exe, , [34473d33c4d62115445624a0936ea25e],
PUP.Optional.SysTweak, C:\Users\Milan\Downloads\WinThruster_2016_Setup.exe, , [2d4e18581e7c5cdae0d2932b4db404fc],
Adware.InstallBrain, C:\Users\Milan\Downloads\BestCodecsPackSetup.exe, , [85f6a7c9b0eaa98d93a8adf678884fb1],
PUP.Optional.Bundler, C:\Users\Milan\Downloads\ccleaner-lista-centrumcz.exe, , [3c3f5a166d2d2016582fec6d10f111ef],
PUP.Optional.BrowseFox, C:\Users\Milan\Downloads\VipBoxSportsApp_setup(0)(1).exe, , [4f2cb5bba1f9a88ea52605748f72bd43],
Trojan.Dropper.RJH, C:\Users\Milan\Novinařina\nufcscreen.scr, , [7209a2ce21792c0acc4945b2f50b0df3],
PUP.Optional.Spigot, C:\Windows\Installer\79733.msi, , [d2a9036dd0ca30067550d25b21e0b749],
PUP.Optional.CrossAd.Gen, C:\Users\Milan\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\extensions\@E9438230-A7DF-4D1F-8F2D-CA1D0F0F7924.xpi, , [0576680835652e08aa7023ac877bd12f],
Trojan.Agent.Trace, C:\Users\Milan\AppData\Roaming\winsvcns.sys, , [4338363ac3d72c0a7eee2a9c9b68f010],
PUP.Optional.WinTaske, C:\Windows\System32\Tasks\WinTaske, , [1a61a1cf5545bc7a756f4aa1699a659b],
PUP.Optional.Tuto4PC, C:\Program Files\Games-desktop\rec_en_221 - uninstall.dat, , [c1ba234d3169b77f0ffe6d87d82b28d8],
PUP.Optional.Tuto4PC, C:\Program Files\Games-desktop\rec_en_221 - uninstall.exe, , [c1ba234d3169b77f0ffe6d87d82b28d8],
PUP.Optional.YesSearches, C:\Program Files\SearchesToYesbnd\9.3.6494.400.manifest, , [6f0ccda3108a59dd5cd5a71f04fe8878],
PUP.Optional.YesSearches, C:\Program Files\SearchesToYesbnd\BrowserUpdate.exe, , [6f0ccda3108a59dd5cd5a71f04fe8878],
PUP.Optional.YesSearches, C:\Program Files\SearchesToYesbnd\chrome_elf.dll, , [6f0ccda3108a59dd5cd5a71f04fe8878],
PUP.Optional.YesSearches, C:\Program Files\SearchesToYesbnd\ihpm.exe, , [6f0ccda3108a59dd5cd5a71f04fe8878],
PUP.Optional.YesSearches, C:\Program Files\SearchesToYesbnd\ihpul.exe, , [6f0ccda3108a59dd5cd5a71f04fe8878],
PUP.Optional.YesSearches, C:\Program Files\SearchesToYesbnd\qks.exe, , [6f0ccda3108a59dd5cd5a71f04fe8878],
PUP.Optional.YesSearches, C:\Program Files\SearchesToYesbnd\saber.exe, , [6f0ccda3108a59dd5cd5a71f04fe8878],
PUP.Optional.YesSearches, C:\Program Files\SearchesToYesbnd\winzipper.exe, , [6f0ccda3108a59dd5cd5a71f04fe8878],
PUP.Optional.YesSearches, C:\Program Files\SearchesToYesbnd\wpm.exe, , [6f0ccda3108a59dd5cd5a71f04fe8878],
PUP.Optional.YesSearches, C:\Program Files\SearchesToYesbnd\dmp\WinTaske.exe\WinTaske.exe_20160323_20160519142900607.dmp, , [6f0ccda3108a59dd5cd5a71f04fe8878],
PUP.Optional.YesSearches, C:\Program Files\SearchesToYesbnd\dmp\WinTaske.exe\WinTaske.exe_20160323_20160525152857101.dmp, , [6f0ccda3108a59dd5cd5a71f04fe8878],
PUP.Optional.Winsere, C:\Program Files\Winsere\Winsere\Winsere.exe, , [1e5d71ffabeffc3a05b751758a78718f],
PUP.Optional.MindSpark.Generic, C:\Users\Milan\AppData\Roaming\Mozilla\Firefox\Profiles\41A66E7E5EE1\prefs.js, Dobré: (), Špatné: (user_pref("extensions.toolbar.mindspark._brMembers_.BUTTON_STRUCTURE", "[{\"b\":224520315,\"c\":\"mindspark.magnify\",\"p\":\"L.0\"},{\"b\":224520316,\"c\":\"mindspark.entersearchterms\",\"p\":\"L.0.0\"},{\"b\":224520318,\"c\":\"mindspark.full\",\"p\":\"L.0.1\"},{\"b\":224520322,\"c\":\"mindspark.imagesearch\",\"p\":\"L.0.2\"},{\"b\":224520325,\"c\":\"mindspark.advanced\",\"p\":\"L.0.3\"},{\"b\":224520328,\"c\":\"mindspark.directorysearch\",\"p\":\"L.0.4\"},{\"b\":224520265,\"c\":\"mindspark.search\",\"p\":\"L.1\"},{\"b\":224520267,\"c\":\"mindspark.ask\",\"p\":\"R.0\"},{\"b\":224520332,\"c\":\"mindspark.wrench\",\"p\":\"R.1\"}]");), ,[85f63e328416a4924468c9106a9a9769]
PUP.Optional.MindSpark.Generic, C:\Users\Milan\AppData\Roaming\Mozilla\Firefox\Profiles\41A66E7E5EE1\prefs.js, Dobré: (), Špatné: (("app.update.lastUpdateTime.background-update-timer", 1453567703);
user_pref("app.), ,[f289d9974f4b3ff7cae2f5e4897b40c0]
PUP.Optional.MindSpark.Generic, C:\Users\Milan\AppData\Roaming\Mozilla\Firefox\Profiles\41A66E7E5EE1\prefs.js, Dobré: (), Špatné: (this file.
*
* If you make changes to this file while the application is running,
* t), ,[e497561a6634c472d8d4a1380ef628d8]
PUP.Optional.MindSpark.Generic, C:\Users\Milan\AppData\Roaming\Mozilla\Firefox\Profiles\41A66E7E5EE1\prefs.js, Dobré: (), Špatné: (file.
*
* If you make changes to this file while the application is running,
* the chan), ,[59229fd15644ba7cc9e3e3f656ae43bd]
PUP.Optional.MindSpark.Generic, C:\Users\Milan\AppData\Roaming\Mozilla\Firefox\Profiles\41A66E7E5EE1\prefs.js, Dobré: (), Špatné: (le.
*
* If you make changes to this file while the application is run), ,[c1ba83eda8f258dedad2f1e843c10ef2]
PUP.Optional.MindSpark.Generic, C:\Users\Milan\AppData\Roaming\Mozilla\Firefox\Profiles\41A66E7E5EE1\prefs.js, Dobré: (), Špatné: (Do not edit this file.
*
* If you make changes to this file while the ap), ,[7704bab6cbcffd39bdef4a8fc3412fd1]
PUP.Optional.MindSpark.Generic, C:\Users\Milan\AppData\Roaming\Mozilla\Firefox\Profiles\41A66E7E5EE1\prefs.js, Dobré: (), Špatné: (not edit this file.
*
* If you make changes to this file while the app), ,[3a41c6aa8b0f79bd2e7e17c234d0bd43]
PUP.Optional.MindSpark.Generic, C:\Users\Milan\AppData\Roaming\Mozilla\Firefox\Profiles\41A66E7E5EE1\prefs.js, Dobré: (), Špatné: (o not edit this file.
*
* If you make changes to this file while the application is running), ,[a3d8323ee1b912249b11a138f4104eb2]
PUP.Optional.MindSpark.Generic, C:\Users\Milan\AppData\Roaming\Mozilla\Firefox\Profiles\41A66E7E5EE1\prefs.js, Dobré: (), Špatné: (
*
* If you make changes to this file while the application is running,
* the ), ,[5922244c5149f046991314c509fb54ac]
PUP.Optional.MindSpark.Generic, C:\Users\Milan\AppData\Roaming\Mozilla\Firefox\Profiles\41A66E7E5EE1\prefs.js, Dobré: (), Špatné: (t this file.
*
* If you make changes to this file while the application is running,
), ,[a6d54a268a1066d0e3c919c0ec18bb45]
PUP.Optional.MindSpark.Generic, C:\Users\Milan\AppData\Roaming\Mozilla\Firefox\Profiles\41A66E7E5EE1\prefs.js, Dobré: (), Špatné: (s file.
*
* If you make changes to this file while the application is running,
* the), ,[94e799d7eab0da5cffaddefb07fd9c64]
PUP.Optional.MindSpark.Generic, C:\Users\Milan\AppData\Roaming\Mozilla\Firefox\Profiles\41A66E7E5EE1\prefs.js, Dobré: (), Špatné: ( file.
*
* If you make changes to this file while the application is running,
* the changes will be overwritten when the application exits.
*
* To make a manual change to preferences, you can visit the URL about:config
*/

user_pref("accessib), ,[e19af57bc8d260d6e8c49f3a9d677e82]
PUP.Optional.MindSpark.Generic, C:\Users\Milan\AppData\Roaming\Mozilla\Firefox\Profiles\41A66E7E5EE1\prefs.js, Dobré: (), Špatné: (al change to preferences, you can visit the URL about:config
*/

user_pref("acce), ,[770429478d0d5dd9cededefbab59a858]
PUP.Optional.MindSpark.Generic, C:\Users\Milan\AppData\Roaming\Mozilla\Firefox\Profiles\41A66E7E5EE1\prefs.js, Dobré: (), Špatné: (this file.
*
* If you make changes to this file while the application is running,
), ,[0a71beb2aeecf6409616e0f9df251fe1]
PUP.Optional.MindSpark.Generic, C:\Users\Milan\AppData\Roaming\Mozilla\Firefox\Profiles\41A66E7E5EE1\prefs.js, Dobré: (), Špatné: (is file.
*
* If you make changes to this file while the application is running,
), ,[b8c3bfb1afeb0a2c9f0d944518ec55ab]
PUP.Optional.MindSpark.Generic, C:\Users\Milan\AppData\Roaming\Mozilla\Firefox\Profiles\41A66E7E5EE1\prefs.js, Dobré: (), Špatné: (this file.
*
* If you make changes to this file while the application is runni), ,[a8d35020afeb94a2703c7c5de61eff01]
PUP.Optional.MindSpark.Generic, C:\Users\Milan\AppData\Roaming\Mozilla\Firefox\Profiles\41A66E7E5EE1\prefs.js, Dobré: (), Špatné: (it this file.
*
* If you make changes to this file while the application is running,
* t), ,[6813650bfe9cfc3a397300d9a65ef709]
PUP.Optional.MindSpark.Generic, C:\Users\Milan\AppData\Roaming\Mozilla\Firefox\Profiles\41A66E7E5EE1\prefs.js, Dobré: (), Špatné: (e.
*
* If you make changes to this file while the application is running,
* the changes w), ,[5b20a2ce2b6fe74f0aa29e3b40c4b14f]
PUP.Optional.MindSpark.Generic, C:\Users\Milan\AppData\Roaming\Mozilla\Firefox\Profiles\41A66E7E5EE1\prefs.js, Dobré: (), Špatné: (.
*
* If you make changes to this file while the application is running,
* the changes will be overwritten when the application exits.
*
* To make a manual change to preferences, you can visit the UR), ,[95e63c34910979bd7e2e35a417eddf21]
PUP.Optional.MindSpark.Generic, C:\Users\Milan\AppData\Roaming\Mozilla\Firefox\Profiles\41A66E7E5EE1\prefs.js, Dobré: (), Špatné: (en the application exits.
*
* To make a manual change to preferences, you ca), ,[bfbc234de4b6db5b2f7dfedb12f2f30d]
PUP.Optional.MindSpark.Generic, C:\Users\Milan\AppData\Roaming\Mozilla\Firefox\Profiles\41A66E7E5EE1\prefs.js, Dobré: (), Špatné: (edit this file.
*
* If you make changes to this file while the application is running,
* the changes will be overwritten when the application exits.
*
* To make a manual change to preferences, you can visit the URL about:config
*/

user_pref("accessibility.typeaheadfind", true);
user_pref("accessibility.typeaheadfind.flashBar", 0);
user_pref("app.update.auto", false);
user_pref("app.update.backgroundErrors", 1), ,[1d5ec9a75941c472793339a0bf4546ba]
PUP.Optional.MindSpark.Generic, C:\Users\Milan\AppData\Roaming\Mozilla\Firefox\Profiles\41A66E7E5EE1\prefs.js, Dobré: (), Špatné: (# Mozilla User Preferences

/* Do not edit this file.
*
* If you make changes to this file while the application is running,
* the changes will be overwritten when the application exits.
*
* To make a manual change to preferences, you can visit the URL about:config
*/

user_pref("accessibility.typeaheadfind", true);
user_pref("accessibility.typeaheadfind.flashBar", 0);
), ,[92e9dc94dac0ec4a3676c2177f85ae52]
PUP.Optional.MindSpark.Generic, C:\Users\Milan\AppData\Roaming\Mozilla\Firefox\Profiles\41A66E7E5EE1\prefs.js, Dobré: (), Špatné: (bility.typeaheadfind", true);
user_pref("accessibility.typ), ,[6e0de68ad7c3bb7bddcf9e3ba65e15eb]
PUP.Optional.MindSpark.Generic, C:\Users\Milan\AppData\Roaming\Mozilla\Firefox\Profiles\41A66E7E5EE1\prefs.js, Dobré: (), Špatné: (ences

/* Do not edit this file.
*
* If you make changes to this file while the applica), ,[aecd1858fc9e1620703c20b97a8ab44c]
PUP.Optional.MindSpark.Generic, C:\Users\Milan\AppData\Roaming\Mozilla\Firefox\Profiles\41A66E7E5EE1\prefs.js, Dobré: (), Špatné: (e.
*
* If you make changes to this file while the application is running,
* the change), ,[16650d63cad050e6e2ca42977094837d]
PUP.Optional.YesSearches.YSSRHS1, C:\Users\Milan\AppData\Roaming\Mozilla\Firefox\Profiles\41A66E7E5EE1\prefs.js, Dobré: (), Špatné: (user_pref("browser.search.searchengine.hp", "http://www.yessearches.com/?ts=AHEpBnMmA34kAU..&v=20160301&uid=A91D07494AE58F93101C6A7CC576B260&ptid=wak&mode=ffsengext");), ,[6a1193dd514982b412003277dc28f10f]
PUP.Optional.YesSearches.YSSRHS1, C:\Users\Milan\AppData\Roaming\Mozilla\Firefox\Profiles\41A66E7E5EE1\prefs.js, Dobré: (), Špatné: (le the application is running,
* the changes will be overwritten when the application exits.
*
* To make a manual change to preferences, you can visit the URL about:config
*/

user_pref("), ,[1b60d799cad0b97d0e044564f311e020]
PUP.Optional.YesSearches.YSSRHS1, C:\Users\Milan\AppData\Roaming\Mozilla\Firefox\Profiles\41A66E7E5EE1\prefs.js, Dobré: (), Špatné: (ing,
* the changes will be overwritten when the application exits.
*
* To make a manual change to preferences, you can visit the URL about:config
*/

user_pref("accessibility.typeaheadfind), ,[89f2333dc6d480b6d939f8b1927226da]
PUP.Optional.YesSearches.YSSRHS1, C:\Users\Milan\AppData\Roaming\Mozilla\Firefox\Profiles\41A66E7E5EE1\prefs.js, Dobré: (), Špatné: ( "{\"@E9438230-A7DF-4D1F-8F2D-CA1D0F0F7924\":{\"version\":\"1.08.8.66\",\"type\":\"extension\",\"descriptor\":\"C:\\\\Users\\\\Milan\\\\AppData\\\\Roaming\\\\Mozilla\\\\Firefox\\\\Profiles\\\\41A66E7E5EE1), ,[14676010e3b7c076c34fc9e04fb5d52b]
PUP.Optional.YesSearches.YSSRHS1, C:\Users\Milan\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\prefs.js, Dobré: (user_pref("browser.startup.homepage", "https://www.malwarebytes.org/restorebrowser/), Špatné: (user_pref("browser.startup.homepage", "http://www.yessearches.com), ,[e89310600a906fc7868b565355af6c94]
PUP.Optional.YesSearches.YSSRHS1, C:\Users\Milan\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\prefs.js, Dobré: (), Špatné: (user_pref("browser.newtab.url", "http://www.yessearches.com/?ts=AHEpBnMmA34kAU..&v=20160301&uid=A91D07494AE58F93101C6A7CC576B260&ptid=wak&mode=ffseng");), ,[d8a37ff14b4f4aec739f208924e09070]
PUP.Optional.YesSearches.YSSRHS1, C:\Users\Milan\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\prefs.js, Dobré: (), Špatné: (
user_pref("app.update.lastUpdateTime.xpi-signature-verification", 1449127282);
user_pref("browser.cache.disk.capacity", 358400);
user_pref("browser.cache.disk.files), ,[1269165a7c1e3ef8e9292584de2612ee]
PUP.Optional.YesSearches.YSSRHS1, C:\Users\Milan\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\prefs.js, Dobré: (), Špatné: (hile the application is running,
* the changes will be overwritten when the application exits.
*
* To make a manual change to preferences, you can visit the URL about:config
*/

user_), ,[d6a5f878eeac3cfa36dcd1d818ec53ad]
PUP.Optional.YesSearches.YSSRHS1, C:\Users\Milan\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\prefs.js, Dobré: (), Špatné: (nning,
* the changes will be overwritten when the application exits.
*
* To make a manual change to preferences, you can visit the URL about:config
*/

. spusť znovu Malwarebytes' Anti-Malware a dej Skenovat nyní
- po proběhnutí programu se ti objeví hláška tak klikni na „Vše do karantény(smazat vybrané)“ a na „Exportovat záznam“ a vyber „textový soubor“ , soubor nějak pojmenuj a někam ho ulož. Zkopíruj se celý obsah toho logu.

AdwCleaner-- zkus spustit v nouz. režimu.

+
JRT

+
Stáhni si RogueKiller by Adlice Software
32bit.:
http://www.sur-la-toile.com/RogueKiller/RogueKiller.exe
64bit.:
http://www.sur-la-toile.com/RogueKiller ... lerX64.exe
na svojí plochu.
- Zavři všechny ostatní programy a prohlížeče.
- Pro OS Vista a win7,8,10 spusť program RogueKiller.exe jako správce , u XP poklepáním.
- klikni na „Start Scan“. V novém okně nic neměň a klikni dole na „Start Scan“
- Program skenuje procesy PC. Po proskenování klikni na „Open Report “ , v okně pak na „Open TXT“ a celý obsah logu sem zkopíruj.
Pokud je program blokován , zkus ho spustit několikrát. Pokud dále program nepůjde spustit a pracovat, přejmenuj ho na winlogon.exe.
-pokud bude mít log více než 60.000 znaků , rozděl ho a vlož do více příspěvků

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 13:13:28, on 11.9.2016
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v9.00 (9.00.8112.16800)

FIREFOX: 43.0.1 (x86 cs)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskeng.exe
C:\Windows\system32\taskeng.exe
C:\Program Files\ASUS\ASUS Live Update\ALU.exe
C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe
C:\Windows\RtHDVCpl.exe
C:\Program Files\ASUS\ATK Media\DMedia.exe
C:\Program Files\PowerForPhone\PowerForPhone.exe
C:\Windows\ASScrPro.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.EXE
C:\Program Files\HP\HP Software Update\hpwuSchd2.exe
C:\Program Files\Logitech\LWS\Webcam Software\LWS.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\AVAST Software\Avast\avastui.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Logitech\Vid HD\Vid.exe
C:\Windows\ehome\ehtray.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\Logitech\LWS\Webcam Software\CameraHelperShell.exe
C:\Program Files\CCleaner\CCleaner.exe
C:\Windows\ehome\ehmsas.exe
C:\Program Files\Common Files\Logishrd\LQCVFX\COCIManager.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
C:\Windows\system32\conime.exe
C:\totalcmd\TOTALCMD.EXE
C:\Users\Milan\Downloads\HijackThis.exe
C:\Windows\system32\SearchFilterHost.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = www.google.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?

LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: (no name) - - (no file)
O1 - Hosts: ::1 localhost
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program

Files\Java\jre7\bin\ssv.dll
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST

Software\Avast\aswWebRepIE.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google

Toolbar\GoogleToolbar_32.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program

Files\Java\jre7\bin\jp2ssv.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google

Toolbar\GoogleToolbar_32.dll
O4 - HKLM\..\Run: [SMSERIAL] C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe
O4 - HKLM\..\Run: [StartCCC] C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [Skytel] Skytel.exe
O4 - HKLM\..\Run: [ATKMEDIA] C:\Program Files\ASUS\ATK Media\DMEDIA.EXE
O4 - HKLM\..\Run: [PowerForPhone] C:\Program Files\PowerForPhone\PowerForPhone.exe
O4 - HKLM\..\Run: [ASUS Screen Saver Protector] C:\Windows\ASScrPro.exe
O4 - HKLM\..\Run: [ASUS Camera ScreenSaver] C:\Windows\ASScrProlog.exe
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [LWS] C:\Program Files\Logitech\LWS\Webcam Software\LWS.exe -hide
O4 - HKLM\..\Run: [DivXMediaServer] C:\Program Files\DivX\DivX Media Server\DivXMediaServer.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKLM\..\Run: [DivXUpdate] "C:\Program Files\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [Logitech Vid] "C:\Program Files\Logitech\Vid HD\Vid.exe" -bootmode
O4 - HKCU\..\Run: [CCleaner Monitoring] "C:\Program Files\CCleaner\CCleaner.exe" /MONITOR
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL

SERVICE')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL

SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK

SERVICE')
O4 - HKUS\S-1-5-18\..\RunOnce: [SpUninstallDeleteDir] rmdir /s /q "\SearchProtect" (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\RunOnce: [SpUninstallDeleteDir] rmdir /s /q "\SearchProtect" (User 'Default user')
O8 - Extra context menu item: Download with Xilisoft Download YouTube Video - C:\Program

Files\Xilisoft\Download YouTube Video\upod_link.HTM
O8 - Extra context menu item: WikiKomentáře Google... - res://C:\Program Files\Google\Google

Toolbar\Component\GoogleToolbarDynamic_mui_en_96D6FF0C6D236BF8.dll/cmsidewiki.html
O9 - Extra button: @C:\Windows\WindowsMobile\INetRepl.dll,-222 - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} -

C:\Windows\WindowsMobile\INetRepl.dll
O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} -

C:\Windows\WindowsMobile\INetRepl.dll
O9 - Extra 'Tools' menuitem: @C:\Windows\WindowsMobile\INetRepl.dll,-223 - {2EAF5BB2-070F-11D3-9307-

00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll
O9 - Extra button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program

Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O16 - DPF: {8100D56A-5661-482C-BEE8-AFECE305D968} -

http://upload.facebook.com/controls/200 ... ader55.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) -

https://fpdownload.macromedia.com/pub/s ... wflash.cab
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O16 - DPF: {EF0D1A14-1033-41A2-A589-240C01EDC078} -

http://download.pplive.com/config/pplit ... nsetup.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{15524D8C-EDDA-46FD-B2AB-42848978BBA1}: NameServer =

212.96.169.97,212.96.162.2
O17 - HKLM\System\CS1\Services\Tcpip\..\{15524D8C-EDDA-46FD-B2AB-42848978BBA1}: NameServer =

212.96.169.97,212.96.162.2
O17 - HKLM\System\CS2\Services\Tcpip\..\{15524D8C-EDDA-46FD-B2AB-42848978BBA1}: NameServer =

212.96.169.97,212.96.162.2
O17 - HKLM\System\CS3\Services\Tcpip\..\{15524D8C-EDDA-46FD-B2AB-42848978BBA1}: NameServer =

212.96.169.97,212.96.162.2
O17 - HKLM\System\CS4\Services\Tcpip\..\{15524D8C-EDDA-46FD-B2AB-42848978BBA1}: NameServer =

212.96.169.97,212.96.162.2
O17 - HKLM\System\CS5\Services\Tcpip\..\{15524D8C-EDDA-46FD-B2AB-42848978BBA1}: NameServer =

212.96.169.97,212.96.162.2
O17 - HKLM\System\CS6\Services\Tcpip\..\{15524D8C-EDDA-46FD-B2AB-42848978BBA1}: NameServer =

212.96.169.97,212.96.162.2
O17 - HKLM\System\CS7\Services\Tcpip\..\{15524D8C-EDDA-46FD-B2AB-42848978BBA1}: NameServer =

212.96.169.97,212.96.162.2
O17 - HKLM\System\CS8\Services\Tcpip\..\{15524D8C-EDDA-46FD-B2AB-42848978BBA1}: NameServer =

212.96.169.97,212.96.162.2
O17 - HKLM\System\CS9\Services\Tcpip\..\{15524D8C-EDDA-46FD-B2AB-42848978BBA1}: NameServer =

212.96.169.97,212.96.162.2
O17 - HKLM\System\CS10\Services\Tcpip\..\{15524D8C-EDDA-46FD-B2AB-42848978BBA1}: NameServer =

212.96.169.97,212.96.162.2
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program

Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1

\Skype\SKYPE4~1.DLL
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} -

C:\Windows\system32\browseui.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program

Files\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated

- C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: ADSM Service (ADSMService) - Unknown owner - C:\Program Files\ASUS\ASUS Data Security

Manager\ADSMSrv.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device

Support\AppleMobileDeviceService.exe
O23 - Service: ASLDR Service (ASLDRService) - Unknown owner - C:\Program Files\ATK Hotkey\ASLDRSrv.exe
O23 - Service: Ati External Event Utility - ATI Technologies Inc. - C:\Windows\system32\Ati2evxx.exe
O23 - Service: ATKGFNEX Service (ATKGFNEXSrv) - Unknown owner - C:\Program Files\ATKGFNEX\GFNEXSrv.exe
O23 - Service: Avast Antivirus (avast! Antivirus) - AVAST Software - C:\Program Files\AVAST

Software\Avast\AvastSvc.exe
O23 - Service: Google Update Service (gupdate1caa64bd32a4040) (gupdate1caa64bd32a4040) - Google Inc. -

C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program

Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google

Updater\GoogleUpdaterService.exe
O23 - Service: HP SI Service (HPSIService) - HP - C:\Windows\system32\HPSIsvc.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program

Files\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program

Files\Skype\Updater\Updater.exe
O23 - Service: spmgr - Unknown owner - C:\Program Files\ASUS\NB Probe\SPM\spmgr.exe
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files\Common

Files\Steam\SteamService.exe
O23 - Service: UMVPFSrv - Logitech Inc. - C:\Program Files\Common Files\logishrd\LVMVFM\UMVPFSrv.exe

--
End of file - 10389 bytes

K čemu řešit log?
Vidíme, že CPU vytěžuje schvost.exe a že má uživatel visty = problém se zaseklými aktualizacemi.
Takže stáhnout zmíněné aktualizace z tohoto webu http://wu.krelay.de/en/

1) zakázat Windows update (pokud službu nezakážete, nebudete schopni nainstalovat aktualizace - zasekne se to opět na vyhledávání)
2) Restartovat počítač
3) Manuálně instalovat aktualizace
4) Restartovat počítač
5) Zapnout Windows update

Počítat s tím, že problém se bude pravidelně vracet kvůli problémům se službou WU u Vist a Sedmiček. Nejjednoduší je aktualizace nechat zakázané.

nations112: jsi v sekci HJt , přečti si pravidla , asi nevíš , že některé viry dokáží aktualizace blokovat..

AdwCleaner je kde?

Zavři ostatní aplikace a prohlížeče, odpoj se od netu a fixni v HJT:
Návod




+JRT
+RK.

Ano to vím, jenom říkám fakt, který trápí všechny uživatele Vist a Sedmiček. Takže bych začal tím nejjednoduším a to doinstalováním zmíněných aktualizací. Z 95% to způsobují u tohoto procesu právě ony jak po čisté reinstalaci, tak v průběhu používání OS už nějaký ten pátek (přesněji od června 2015)
Pokud to nepomůže, až pak bych začal řešit složitější cestou.

nations112: asi jsem se nevyjádřil dost přesně:
PRAVIDLA sekce HijackThis
viewtopic.php?f=70&t=29204