Spomalelený Win7

[Kovas]

Dobrý deň prajem,
známy má problém so značne spomaleným notebookom. Sedím nad tým od včera, tak by som Vás poprosil o pomoc. Po štarte systému a po jeho načítaní beží cca tak 3 minúty a potom sú už odozvy trvajúce aj niekoľko 10-tok minút. Pri tom CPU ukazuje využitie 0-5%, RAM necelých 25% využitých. Dokonca sa v jednu chvíľu na 1/4 monitora objavili pruhy, ale po reštarte to zmizlo. V núdzovom režime beží bez problémov. Spustil som kontrolu Kaspersky Rescue disc, ale ten našiel len adware. Spustil som aj AdwCleaner, ten toho našiel a odstránil dosť (log pripájam). Chcel som urobiť aj obnovu systému, ale tá sa nepodarila chýbal tam nejaký súbor .dll
Ukazujem tam posledné 4 dni nejaké kritické aktualizácie a aj v tom období začali problémy.

Logfile of random's system information tool 1.10 (written by random/random)
Run by Heňo at 2016-05-14 08:46:19
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 54 GB (54%) free of 100 GB
Total RAM: 4095 MB (77% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 8:46:33, on 14. 5. 2016
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.18205)
Boot mode: Normal

Running processes:
C:\Program Files\AVAST Software\Avast\avastui.exe
C:\Program Files (x86)\ASUS\ControlDeck\ControlDeckStartUp.exe
C:\Program Files\ASUS\Net4Switch\Net4Switch.exe
C:\Program Files (x86)\ASUS\ASUS Live Update\ALU.exe
C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe
C:\Program Files (x86)\ASUS\SmartLogon\sensorsrv.exe
C:\Program Files (x86)\IObit\Advanced SystemCare 6\Monitor.exe
C:\Program Files\trend micro\Heňo.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKCU\..\Run: [CCleaner Monitoring] "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O9 - Extra button: PokerStars.eu - {07BA1DA9-F501-4796-8728-74D1B91A6CD5} - C:\Program Files (x86)\PokerStars.EU\PokerStarsUpdate.exe
O9 - Extra button: PokerStars - {3AD14F0C-ED16-4e43-B6D8-661B03F6A1EF} - C:\Program Files (x86)\PokerStars\PokerStarsUpdate.exe (file missing)
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O23 - Service: ADSM Service (ADSMService) - ASUSTek Computer Inc. - C:\Program Files (x86)\ASUS\ASUS Data Security Manager\ADSMSrv.exe
O23 - Service: Advanced SystemCare Service 6 (AdvancedSystemCareService6) - IObit - C:\Program Files (x86)\IObit\Advanced SystemCare 6\ASCService.exe
O23 - Service: AFBAgent - Unknown owner - C:\Windows\system32\FBAgent.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: ASLDR Service (ASLDRService) - ASUS - C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe
O23 - Service: ATKGFNEX Service (ATKGFNEXSrv) - ASUS - C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
O23 - Service: Avast Antivirus (avast! Antivirus) - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: spmgr - Unknown owner - C:\Program Files\ASUS\NB Probe\SPM\spmgr.exe
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 6832 bytes

======Listing Processes======



\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
winlogon.exe
"C:\Program Files (x86)\IObit\Advanced SystemCare 6\ASCService.exe"
C:\Windows\system32\nvvsvc.exe
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs

C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Windows\Explorer.EXE
C:\Windows\system32\nvvsvc.exe -session -first
"C:\Windows\system32\Dwm.exe"
"C:\Windows\system32\FBAgent.exe"
"C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe"
"C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe"
"C:\Program Files\AVAST Software\Avast\AvastSvc.exe"
"C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe"
ATKOSD.exe
KBFiltr.exe
WDC.exe
taskeng.exe {73A1F209-8D89-47F7-B40D-F2AC951B3104}
C:\Windows\System32\spoolsv.exe
"taskhost.exe"
"C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
"C:\Program Files\AVAST Software\Avast\avastui.exe" /nogui
C:\Windows\System32\svchost.exe -k utcsvc
C:\Windows\system32\svchost.exe -k imgsvc
taskeng.exe {2DDEA57D-6404-4287-B42E-A07431C1EBAF}
"C:\Program Files (x86)\ASUS\ControlDeck\ControlDeckStartUp.exe"
"C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /c
"C:\Program Files\P4G\BatteryLife.exe"
"C:\Program Files\ASUS\Net4Switch\Net4Switch.exe"
"C:\Program Files (x86)\ASUS\ASUS Live Update\ALU.exe"
"C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe"
"C:\Program Files (x86)\ASUS\SmartLogon\sensorsrv.exe"
"C:\Program Files (x86)\IObit\Advanced SystemCare 6\Monitor.exe"
"C:\Program Files (x86)\ASUS\Splendid\ACMON.exe"
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Windows\system32\GWX\GWX.exe"
C:\Windows\system32\sppsvc.exe
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe1_ Global\UsGthrCtrlFltPipeMssGthrPipe1 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Windows\system32\SearchFilterHost.exe" 0 520 524 532 65536 528
C:\Windows\system32\wbem\unsecapp.exe -Embedding
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Windows\SysWOW64\ACEngSvr.exe" -Embedding
"C:\Users\Heňo\Desktop\RSITx64.exe"

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

[Kovas]

Log z AdwCleaner

# AdwCleaner v5.116 - Logfile created 13/05/2016 at 20:21:50
# Updated 09/05/2016 by Xplode
# Database : 2016-05-13.1 [Server]
# Operating system : Windows 7 Home Premium Service Pack 1 (X64)
# Username : Heňo - HEŇO-PC
# Running from : C:\Users\Heňo\Desktop\AdwCleaner.exe
# Option : Clean
# Support : http://toolslib.net/forum

***** [ Services ] *****


***** [ Folders ] *****

[-] Folder Deleted : C:\Program Files (x86)\Mobogenie
[-] Folder Deleted : C:\Users\Heňo\AppData\Local\genienext
[-] Folder Deleted : C:\Users\Heňo\AppData\Local\Mobogenie
[-] Folder Deleted : C:\Users\Heňo\AppData\Roaming\newnext.me
[-] Folder Deleted : C:\Users\Heňo\Documents\Mobogenie
[-] Folder Deleted : C:\Users\Heňo\AppData\Roaming\Mozilla\Firefox\Profiles\zhpijfqf.default\PConverter_dz
[-] Folder Deleted : C:\Users\Heňo\AppData\Roaming\Mozilla\Firefox\Profiles\zhpijfqf.default\extensions\_9pMembers_@free.onlinemapfinder.com
[-] Folder Deleted : C:\Users\Heňo\AppData\Roaming\Mozilla\Firefox\Profiles\zhpijfqf.default\extensions\_dqMembers_@www.downspeedtest.com
[-] Folder Deleted : C:\Users\Heňo\AppData\Roaming\Mozilla\Firefox\Profiles\zhpijfqf.default\extensions\_dzMembers_@www.pconverter.com

***** [ Files ] *****

[-] File Deleted : C:\Users\Heňo\daemonprocess.txt

***** [ DLLs ] *****


***** [ WMI ] *****


***** [ Shortcuts ] *****


***** [ Scheduled tasks ] *****


***** [ Registry ] *****

[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\MobogenieAdd
[-] Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Shared Tools\MsConfig\StartupReg\mobilegeni daemon

***** [ Web browsers ] *****

[-] [C:\Users\Heňo\AppData\Roaming\Mozilla\Firefox\Profiles\zhpijfqf.default\prefs.js] Deleted : user_pref("browser.search.selectedEngine", "Ask Web Search");
[-] [C:\Users\Heňo\AppData\Roaming\Mozilla\Firefox\Profiles\zhpijfqf.default\prefs.js] Deleted : user_pref("browser.startup.homepage", "hxxp://int.search.tb.ask.com/search/GGmain.jhtml?cb=BYC&pg=homepage&p2=%5EBYC%5Exdm008%5EYYA%5Esk&qid=a7efd502d4174d9981bb7d674f444047&n=782a1117&ss=sub&st=hp&pt[...]
[-] [C:\Users\Heňo\AppData\Roaming\Mozilla\Firefox\Profiles\zhpijfqf.default\prefs.js] Deleted : user_pref("extensions.mywebsearch.prevKwdEnabled", true);
[-] [C:\Users\Heňo\AppData\Roaming\Mozilla\Firefox\Profiles\zhpijfqf.default\prefs.js] Deleted : user_pref("extensions.mywebsearch.prevKwdURL", "hxxp://www.bing.com/search?FORM=UP22DF&PC=UP22&dt=042813&q=");
[-] [C:\Users\Heňo\AppData\Roaming\Mozilla\Firefox\Profiles\zhpijfqf.default\prefs.js] Deleted : user_pref("extensions.toolbar.mindspark._9pMembers_.BUTTON_STRUCTURE", "[{\"b\":224541277,\"c\":\"mindspark.magnify\",\"p\":\"L.0\"},{\"b\":224541278,\"c\":\"mindspark.entersearchterms\",\"p\":\"L.0.0[...]
[-] [C:\Users\Heňo\AppData\Roaming\Mozilla\Firefox\Profiles\zhpijfqf.default\prefs.js] Deleted : user_pref("extensions.toolbar.mindspark._9pMembers_.browser.search.defaultenginename.prev", "Ask Web Search");
[-] [C:\Users\Heňo\AppData\Roaming\Mozilla\Firefox\Profiles\zhpijfqf.default\prefs.js] Deleted : user_pref("extensions.toolbar.mindspark._9pMembers_.browser.search.defaultenginename.savedPrev", "true");
[-] [C:\Users\Heňo\AppData\Roaming\Mozilla\Firefox\Profiles\zhpijfqf.default\prefs.js] Deleted : user_pref("extensions.toolbar.mindspark._9pMembers_.browser.search.defaultenginename.tb", "Ask Web Search");
[-] [C:\Users\Heňo\AppData\Roaming\Mozilla\Firefox\Profiles\zhpijfqf.default\prefs.js] Deleted : user_pref("extensions.toolbar.mindspark._9pMembers_.browser.search.selectedEngine.prev", "Ask Web Search");
[-] [C:\Users\Heňo\AppData\Roaming\Mozilla\Firefox\Profiles\zhpijfqf.default\prefs.js] Deleted : user_pref("extensions.toolbar.mindspark._9pMembers_.browser.search.selectedEngine.savedPrev", "true");
[-] [C:\Users\Heňo\AppData\Roaming\Mozilla\Firefox\Profiles\zhpijfqf.default\prefs.js] Deleted : user_pref("extensions.toolbar.mindspark._9pMembers_.browser.search.selectedEngine.tb", "Ask Web Search");
[-] [C:\Users\Heňo\AppData\Roaming\Mozilla\Firefox\Profiles\zhpijfqf.default\prefs.js] Deleted : user_pref("extensions.toolbar.mindspark._9pMembers_.browser.startup.homepage.prev", "hxxp://home.tb.ask.com/index.jhtml?ptb=CB11E17C-F254-4C3C-85FE-12BC519FDDE8&n=782a1117&p2=^BYC^xdm008^YYA^sk");
[-] [C:\Users\Heňo\AppData\Roaming\Mozilla\Firefox\Profiles\zhpijfqf.default\prefs.js] Deleted : user_pref("extensions.toolbar.mindspark._9pMembers_.browser.startup.homepage.savedPrev", "true");
[-] [C:\Users\Heňo\AppData\Roaming\Mozilla\Firefox\Profiles\zhpijfqf.default\prefs.js] Deleted : user_pref("extensions.toolbar.mindspark._9pMembers_.browser.startup.homepage.tb", "hxxp://home.tb.ask.com/index.jhtml?ptb=F3062F91-572A-48C5-A068-89B7B849ED6C&n=782a1117&p2=^BA5^xdm067^YYA^sk&si=COaS8[...]
[-] [C:\Users\Heňo\AppData\Roaming\Mozilla\Firefox\Profiles\zhpijfqf.default\prefs.js] Deleted : user_pref("extensions.toolbar.mindspark._9pMembers_.browser.startup.page.savedPrev", 1);
[-] [C:\Users\Heňo\AppData\Roaming\Mozilla\Firefox\Profiles\zhpijfqf.default\prefs.js] Deleted : user_pref("extensions.toolbar.mindspark._9pMembers_.browser.startup.page.tb", 1);
[-] [C:\Users\Heňo\AppData\Roaming\Mozilla\Firefox\Profiles\zhpijfqf.default\prefs.js] Deleted : user_pref("extensions.toolbar.mindspark._9pMembers_.browser.version.last", "46.0");
[-] [C:\Users\Heňo\AppData\Roaming\Mozilla\Firefox\Profiles\zhpijfqf.default\prefs.js] Deleted : user_pref("extensions.toolbar.mindspark._9pMembers_.coId", "0744ec03a15f48708de4c19c86fedec4");
[-] [C:\Users\Heňo\AppData\Roaming\Mozilla\Firefox\Profiles\zhpijfqf.default\prefs.js] Deleted : user_pref("extensions.toolbar.mindspark._9pMembers_.competitorDNS", "{\"comment\":\"refresh every 1 week (7*24*60*60*1000)\",\"refreshPeriod\":604800000,\"list\":[{\"url\":\"hxxp://www.dnsrsearch.com/[...]
[-] [C:\Users\Heňo\AppData\Roaming\Mozilla\Firefox\Profiles\zhpijfqf.default\prefs.js] Deleted : user_pref("extensions.toolbar.mindspark._9pMembers_.firstKnownVersion", "7.38.8.46548");
[-] [C:\Users\Heňo\AppData\Roaming\Mozilla\Firefox\Profiles\zhpijfqf.default\prefs.js] Deleted : user_pref("extensions.toolbar.mindspark._9pMembers_.homepage", "hxxp://home.tb.ask.com/index.jhtml?ptb=F3062F91-572A-48C5-A068-89B7B849ED6C&n=782a1117&p2=^BA5^xdm067^YYA^sk&si=COaS8pGIm8sCFWj4wgodaugO[...]
[-] [C:\Users\Heňo\AppData\Roaming\Mozilla\Firefox\Profiles\zhpijfqf.default\prefs.js] Deleted : user_pref("extensions.toolbar.mindspark._9pMembers_.hp.enabled", true);
[-] [C:\Users\Heňo\AppData\Roaming\Mozilla\Firefox\Profiles\zhpijfqf.default\prefs.js] Deleted : user_pref("extensions.toolbar.mindspark._9pMembers_.hp.guardType", "HPR");
[-] [C:\Users\Heňo\AppData\Roaming\Mozilla\Firefox\Profiles\zhpijfqf.default\prefs.js] Deleted : user_pref("extensions.toolbar.mindspark._9pMembers_.hp.user.defined", false);
[-] [C:\Users\Heňo\AppData\Roaming\Mozilla\Firefox\Profiles\zhpijfqf.default\prefs.js] Deleted : user_pref("extensions.toolbar.mindspark._9pMembers_.initialized", true);
[-] [C:\Users\Heňo\AppData\Roaming\Mozilla\Firefox\Profiles\zhpijfqf.default\prefs.js] Deleted : user_pref("extensions.toolbar.mindspark._9pMembers_.installType", "XPI");
[-] [C:\Users\Heňo\AppData\Roaming\Mozilla\Firefox\Profiles\zhpijfqf.default\prefs.js] Deleted : user_pref("extensions.toolbar.mindspark._9pMembers_.installation.dlpCountryCode", "SK");
[-] [C:\Users\Heňo\AppData\Roaming\Mozilla\Firefox\Profiles\zhpijfqf.default\prefs.js] Deleted : user_pref("extensions.toolbar.mindspark._9pMembers_.installation.installDate", "2016022807");
[-] [C:\Users\Heňo\AppData\Roaming\Mozilla\Firefox\Profiles\zhpijfqf.default\prefs.js] Deleted : user_pref("extensions.toolbar.mindspark._9pMembers_.installation.partnerId", "^BA5^xdm067^YYA^sk");
[-] [C:\Users\Heňo\AppData\Roaming\Mozilla\Firefox\Profiles\zhpijfqf.default\prefs.js] Deleted : user_pref("extensions.toolbar.mindspark._9pMembers_.installation.partnerSubId", "COaS8pGIm8sCFWj4wgodaugOPA");
[-] [C:\Users\Heňo\AppData\Roaming\Mozilla\Firefox\Profiles\zhpijfqf.default\prefs.js] Deleted : user_pref("extensions.toolbar.mindspark._9pMembers_.installation.success", true);
[-] [C:\Users\Heňo\AppData\Roaming\Mozilla\Firefox\Profiles\zhpijfqf.default\prefs.js] Deleted : user_pref("extensions.toolbar.mindspark._9pMembers_.installation.toolbarId", "F3062F91-572A-48C5-A068-89B7B849ED6C");
[-] [C:\Users\Heňo\AppData\Roaming\Mozilla\Firefox\Profiles\zhpijfqf.default\prefs.js] Deleted : user_pref("extensions.toolbar.mindspark._9pMembers_.lastActivePing", "1463092964303");
[-] [C:\Users\Heňo\AppData\Roaming\Mozilla\Firefox\Profiles\zhpijfqf.default\prefs.js] Deleted : user_pref("extensions.toolbar.mindspark._9pMembers_.lastKnownVersion", "7.38.8.46548");
[-] [C:\Users\Heňo\AppData\Roaming\Mozilla\Firefox\Profiles\zhpijfqf.default\prefs.js] Deleted : user_pref("extensions.toolbar.mindspark._9pMembers_.lssState", "{\"previousLocales\":[\"sk\",\"cs\",\"en-US\",\"en\"],\"supportedLocales\":[\"de\",\"es\",\"pt\",\"ja\",\"en\"],\"defaultLocale\":\"en\"[...]
[-] [C:\Users\Heňo\AppData\Roaming\Mozilla\Firefox\Profiles\zhpijfqf.default\prefs.js] Deleted : user_pref("extensions.toolbar.mindspark._9pMembers_.options.defaultSearch", true);
[-] [C:\Users\Heňo\AppData\Roaming\Mozilla\Firefox\Profiles\zhpijfqf.default\prefs.js] Deleted : user_pref("extensions.toolbar.mindspark._9pMembers_.options.homePageEnabled", true);
[-] [C:\Users\Heňo\AppData\Roaming\Mozilla\Firefox\Profiles\zhpijfqf.default\prefs.js] Deleted : user_pref("extensions.toolbar.mindspark._9pMembers_.options.keywordEnabled", true);
[-] [C:\Users\Heňo\AppData\Roaming\Mozilla\Firefox\Profiles\zhpijfqf.default\prefs.js] Deleted : user_pref("extensions.toolbar.mindspark._9pMembers_.options.tabEnabled", true);
[-] [C:\Users\Heňo\AppData\Roaming\Mozilla\Firefox\Profiles\zhpijfqf.default\prefs.js] Deleted : user_pref("extensions.toolbar.mindspark._9pMembers_.productDeliveryOption.language", "sk");
[-] [C:\Users\Heňo\AppData\Roaming\Mozilla\Firefox\Profiles\zhpijfqf.default\prefs.js] Deleted : user_pref("extensions.toolbar.mindspark._9pMembers_.productDeliveryOption.type", "Toolbar");
[-] [C:\Users\Heňo\AppData\Roaming\Mozilla\Firefox\Profiles\zhpijfqf.default\prefs.js] Deleted : user_pref("extensions.toolbar.mindspark._9pMembers_.successUrl", "hxxp://free.onlinemapfinder.com/installComplete.jhtml");
[-] [C:\Users\Heňo\AppData\Roaming\Mozilla\Firefox\Profiles\zhpijfqf.default\prefs.js] Deleted : user_pref("extensions.toolbar.mindspark._9pMembers_.toolbar.versionChanged", false);
[-] [C:\Users\Heňo\AppData\Roaming\Mozilla\Firefox\Profiles\zhpijfqf.default\prefs.js] Deleted : user_pref("extensions.toolbar.mindspark._9pMembers_.toolbarCollapsed", true);
[-] [C:\Users\Heňo\AppData\Roaming\Mozilla\Firefox\Profiles\zhpijfqf.default\prefs.js] Deleted : user_pref("extensions.toolbar.mindspark._9pMembers_.uninstallTasks", "{\"prefBranchesToDelete\":[\"extensions.toolbar.mindspark._9pMembers_.\"],\"filesToDelete\":[\"C:\\\\Users\\\\HeHo\\\\AppData\\\\R[...]
[-] [C:\Users\Heňo\AppData\Roaming\Mozilla\Firefox\Profiles\zhpijfqf.default\prefs.js] Deleted : user_pref("extensions.toolbar.mindspark._dqMembers_.BUTTON_STRUCTURE", "[{\"b\":224510880,\"c\":\"mindspark.magnify\",\"p\":\"L.0\"},{\"b\":224510881,\"c\":\"mindspark.entersearchterms\",\"p\":\"L.0.0[...]
[-] [C:\Users\Heňo\AppData\Roaming\Mozilla\Firefox\Profiles\zhpijfqf.default\prefs.js] Deleted : user_pref("extensions.toolbar.mindspark._dqMembers_.browser.search.defaultenginename.prev", "Ask Web Search");
[-] [C:\Users\Heňo\AppData\Roaming\Mozilla\Firefox\Profiles\zhpijfqf.default\prefs.js] Deleted : user_pref("extensions.toolbar.mindspark._dqMembers_.browser.search.defaultenginename.savedPrev", "true");
[-] [C:\Users\Heňo\AppData\Roaming\Mozilla\Firefox\Profiles\zhpijfqf.default\prefs.js] Deleted : user_pref("extensions.toolbar.mindspark._dqMembers_.browser.search.defaultenginename.tb", "Ask Web Search");
[-] [C:\Users\Heňo\AppData\Roaming\Mozilla\Firefox\Profiles\zhpijfqf.default\prefs.js] Deleted : user_pref("extensions.toolbar.mindspark._dqMembers_.browser.search.selectedEngine.prev", "Ask Web Search");
[-] [C:\Users\Heňo\AppData\Roaming\Mozilla\Firefox\Profiles\zhpijfqf.default\prefs.js] Deleted : user_pref("extensions.toolbar.mindspark._dqMembers_.browser.search.selectedEngine.savedPrev", "true");
[-] [C:\Users\Heňo\AppData\Roaming\Mozilla\Firefox\Profiles\zhpijfqf.default\prefs.js] Deleted : user_pref("extensions.toolbar.mindspark._dqMembers_.browser.search.selectedEngine.tb", "Ask Web Search");
[-] [C:\Users\Heňo\AppData\Roaming\Mozilla\Firefox\Profiles\zhpijfqf.default\prefs.js] Deleted : user_pref("extensions.toolbar.mindspark._dqMembers_.browser.startup.homepage.prev", "www.google.sk");
[-] [C:\Users\Heňo\AppData\Roaming\Mozilla\Firefox\Profiles\zhpijfqf.default\prefs.js] Deleted : user_pref("extensions.toolbar.mindspark._dqMembers_.browser.startup.homepage.savedPrev", "true");
[-] [C:\Users\Heňo\AppData\Roaming\Mozilla\Firefox\Profiles\zhpijfqf.default\prefs.js] Deleted : user_pref("extensions.toolbar.mindspark._dqMembers_.browser.startup.homepage.tb", "hxxp://home.tb.ask.com/index.jhtml?ptb=A61AF7DE-41B0-47FF-B96D-41656CE5E572&n=781bd7af&p2=^BXM^xdm004^YYA^sk");
[-] [C:\Users\Heňo\AppData\Roaming\Mozilla\Firefox\Profiles\zhpijfqf.default\prefs.js] Deleted : user_pref("extensions.toolbar.mindspark._dqMembers_.browser.startup.page.savedPrev", 1);
[-] [C:\Users\Heňo\AppData\Roaming\Mozilla\Firefox\Profiles\zhpijfqf.default\prefs.js] Deleted : user_pref("extensions.toolbar.mindspark._dqMembers_.browser.startup.page.tb", 1);
[-] [C:\Users\Heňo\AppData\Roaming\Mozilla\Firefox\Profiles\zhpijfqf.default\prefs.js] Deleted : user_pref("extensions.toolbar.mindspark._dqMembers_.browser.version.last", "46.0");
[-] [C:\Users\Heňo\AppData\Roaming\Mozilla\Firefox\Profiles\zhpijfqf.default\prefs.js] Deleted : user_pref("extensions.toolbar.mindspark._dqMembers_.competitorDNS", "{\"comment\":\"refresh every 1 week (7*24*60*60*1000)\",\"refreshPeriod\":604800000,\"list\":[{\"url\":\"hxxp://www.dnsrsearch.com/[...]
[-] [C:\Users\Heňo\AppData\Roaming\Mozilla\Firefox\Profiles\zhpijfqf.default\prefs.js] Deleted : user_pref("extensions.toolbar.mindspark._dqMembers_.firstKnownVersion", "7.18.7.63935");
[-] [C:\Users\Heňo\AppData\Roaming\Mozilla\Firefox\Profiles\zhpijfqf.default\prefs.js] Deleted : user_pref("extensions.toolbar.mindspark._dqMembers_.homepage", "hxxp://home.tb.ask.com/index.jhtml?ptb=A61AF7DE-41B0-47FF-B96D-41656CE5E572&n=781bd7af&p2=^BXM^xdm004^YYA^sk");
[-] [C:\Users\Heňo\AppData\Roaming\Mozilla\Firefox\Profiles\zhpijfqf.default\prefs.js] Deleted : user_pref("extensions.toolbar.mindspark._dqMembers_.hp.enabled", true);
[-] [C:\Users\Heňo\AppData\Roaming\Mozilla\Firefox\Profiles\zhpijfqf.default\prefs.js] Deleted : user_pref("extensions.toolbar.mindspark._dqMembers_.hp.guardType", "HPR");
[-] [C:\Users\Heňo\AppData\Roaming\Mozilla\Firefox\Profiles\zhpijfqf.default\prefs.js] Deleted : user_pref("extensions.toolbar.mindspark._dqMembers_.hp.user.defined", true);
[-] [C:\Users\Heňo\AppData\Roaming\Mozilla\Firefox\Profiles\zhpijfqf.default\prefs.js] Deleted : user_pref("extensions.toolbar.mindspark._dqMembers_.initialized", true);
[-] [C:\Users\Heňo\AppData\Roaming\Mozilla\Firefox\Profiles\zhpijfqf.default\prefs.js] Deleted : user_pref("extensions.toolbar.mindspark._dqMembers_.installKeysSource", "Cookies");
[-] [C:\Users\Heňo\AppData\Roaming\Mozilla\Firefox\Profiles\zhpijfqf.default\prefs.js] Deleted : user_pref("extensions.toolbar.mindspark._dqMembers_.installType", "XPI");
[-] [C:\Users\Heňo\AppData\Roaming\Mozilla\Firefox\Profiles\zhpijfqf.default\prefs.js] Deleted : user_pref("extensions.toolbar.mindspark._dqMembers_.installation.contextKey", "");
[-] [C:\Users\Heňo\AppData\Roaming\Mozilla\Firefox\Profiles\zhpijfqf.default\prefs.js] Deleted : user_pref("extensions.toolbar.mindspark._dqMembers_.installation.dlpCountryCode", "SK");
[-] [C:\Users\Heňo\AppData\Roaming\Mozilla\Firefox\Profiles\zhpijfqf.default\prefs.js] Deleted : user_pref("extensions.toolbar.mindspark._dqMembers_.installation.installDate", "2015090607");
[-] [C:\Users\Heňo\AppData\Roaming\Mozilla\Firefox\Profiles\zhpijfqf.default\prefs.js] Deleted : user_pref("extensions.toolbar.mindspark._dqMembers_.installation.partnerId", "^BXM^xdm004^YYA^sk");
[-] [C:\Users\Heňo\AppData\Roaming\Mozilla\Firefox\Profiles\zhpijfqf.default\prefs.js] Deleted : user_pref("extensions.toolbar.mindspark._dqMembers_.installation.partnerSubId", "");
[-] [C:\Users\Heňo\AppData\Roaming\Mozilla\Firefox\Profiles\zhpijfqf.default\prefs.js] Deleted : user_pref("extensions.toolbar.mindspark._dqMembers_.installation.pixelUrl", "hxxp://www.downspeedtest.com/install_pixels.jh ... 1&tbGuid=A[...]
[-] [C:\Users\Heňo\AppData\Roaming\Mozilla\Firefox\Profiles\zhpijfqf.default\prefs.js] Deleted : user_pref("extensions.toolbar.mindspark._dqMembers_.installation.success", true);
[-] [C:\Users\Heňo\AppData\Roaming\Mozilla\Firefox\Profiles\zhpijfqf.default\prefs.js] Deleted : user_pref("extensions.toolbar.mindspark._dqMembers_.installation.toolbarId", "A61AF7DE-41B0-47FF-B96D-41656CE5E572");
[-] [C:\Users\Heňo\AppData\Roaming\Mozilla\Firefox\Profiles\zhpijfqf.default\prefs.js] Deleted : user_pref("extensions.toolbar.mindspark._dqMembers_.isCompliantUninstallImplementation", true);
[-] [C:\Users\Heňo\AppData\Roaming\Mozilla\Firefox\Profiles\zhpijfqf.default\prefs.js] Deleted : user_pref("extensions.toolbar.mindspark._dqMembers_.lastActivePing", "1463092964175");
[-] [C:\Users\Heňo\AppData\Roaming\Mozilla\Firefox\Profiles\zhpijfqf.default\prefs.js] Deleted : user_pref("extensions.toolbar.mindspark._dqMembers_.lastKnownVersion", "7.38.8.46204");
[-] [C:\Users\Heňo\AppData\Roaming\Mozilla\Firefox\Profiles\zhpijfqf.default\prefs.js] Deleted : user_pref("extensions.toolbar.mindspark._dqMembers_.lssState", "{\"previousLocales\":[\"sk\",\"cs\",\"en-US\",\"en\"],\"supportedLocales\":[\"de\",\"es\",\"pt\",\"ja\",\"en\"],\"defaultLocale\":\"en\"[...]
[-] [C:\Users\Heňo\AppData\Roaming\Mozilla\Firefox\Profiles\zhpijfqf.default\prefs.js] Deleted : user_pref("extensions.toolbar.mindspark._dqMembers_.options.defaultSearch", true);
[-] [C:\Users\Heňo\AppData\Roaming\Mozilla\Firefox\Profiles\zhpijfqf.default\prefs.js] Deleted : user_pref("extensions.toolbar.mindspark._dqMembers_.options.homePageEnabled", true);
[-] [C:\Users\Heňo\AppData\Roaming\Mozilla\Firefox\Profiles\zhpijfqf.default\prefs.js] Deleted : user_pref("extensions.toolbar.mindspark._dqMembers_.options.keywordEnabled", true);
[-] [C:\Users\Heňo\AppData\Roaming\Mozilla\Firefox\Profiles\zhpijfqf.default\prefs.js] Deleted : user_pref("extensions.toolbar.mindspark._dqMembers_.options.tabEnabled", true);
[-] [C:\Users\Heňo\AppData\Roaming\Mozilla\Firefox\Profiles\zhpijfqf.default\prefs.js] Deleted : user_pref("extensions.toolbar.mindspark._dqMembers_.partnerPixelFired", true);
[-] [C:\Users\Heňo\AppData\Roaming\Mozilla\Firefox\Profiles\zhpijfqf.default\prefs.js] Deleted : user_pref("extensions.toolbar.mindspark._dqMembers_.productDeliveryOption.language", "en");
[-] [C:\Users\Heňo\AppData\Roaming\Mozilla\Firefox\Profiles\zhpijfqf.default\prefs.js] Deleted : user_pref("extensions.toolbar.mindspark._dqMembers_.productDeliveryOption.type", "Toolbar");
[-] [C:\Users\Heňo\AppData\Roaming\Mozilla\Firefox\Profiles\zhpijfqf.default\prefs.js] Deleted : user_pref("extensions.toolbar.mindspark._dqMembers_.successUrl", "hxxp://www.downspeedtest.com/installComplete.jhtml");
[-] [C:\Users\Heňo\AppData\Roaming\Mozilla\Firefox\Profiles\zhpijfqf.default\prefs.js] Deleted : user_pref("extensions.toolbar.mindspark._dqMembers_.toolbar.ownSearch", false);
[-] [C:\Users\Heňo\AppData\Roaming\Mozilla\Firefox\Profiles\zhpijfqf.default\prefs.js] Deleted : user_pref("extensions.toolbar.mindspark._dqMembers_.toolbar.versionChanged", false);
[-] [C:\Users\Heňo\AppData\Roaming\Mozilla\Firefox\Profiles\zhpijfqf.default\prefs.js] Deleted : user_pref("extensions.toolbar.mindspark._dqMembers_.toolbarCollapsed", true);
[-] [C:\Users\Heňo\AppData\Roaming\Mozilla\Firefox\Profiles\zhpijfqf.default\prefs.js] Deleted : user_pref("extensions.toolbar.mindspark._dqMembers_.uninstallTasks", "{\"prefBranchesToDelete\":[\"extensions.toolbar.mindspark._dqMembers_.\"],\"filesToDelete\":[\"C:\\\\Users\\\\HeHo\\\\AppData\\\\R[...]
[-] [C:\Users\Heňo\AppData\Roaming\Mozilla\Firefox\Profiles\zhpijfqf.default\prefs.js] Deleted : user_pref("extensions.toolbar.mindspark._dzMembers_.BUTTON_STRUCTURE", "[{\"b\":224204658,\"c\":\"mindspark.magnify\",\"p\":\"L.0\"},{\"b\":224204659,\"c\":\"mindspark.entersearchterms\",\"p\":\"L.0.0[...]
[-] [C:\Users\Heňo\AppData\Roaming\Mozilla\Firefox\Profiles\zhpijfqf.default\prefs.js] Deleted : user_pref("extensions.toolbar.mindspark._dzMembers_.browser.search.defaultenginename.prev", "Google");
[-] [C:\Users\Heňo\AppData\Roaming\Mozilla\Firefox\Profiles\zhpijfqf.default\prefs.js] Deleted : user_pref("extensions.toolbar.mindspark._dzMembers_.browser.search.defaultenginename.savedPrev", "true");
[-] [C:\Users\Heňo\AppData\Roaming\Mozilla\Firefox\Profiles\zhpijfqf.default\prefs.js] Deleted : user_pref("extensions.toolbar.mindspark._dzMembers_.browser.search.defaultenginename.tb", "Ask Web Search");
[-] [C:\Users\Heňo\AppData\Roaming\Mozilla\Firefox\Profiles\zhpijfqf.default\prefs.js] Deleted : user_pref("extensions.toolbar.mindspark._dzMembers_.browser.search.selectedEngine.prev", "Google");
[-] [C:\Users\Heňo\AppData\Roaming\Mozilla\Firefox\Profiles\zhpijfqf.default\prefs.js] Deleted : user_pref("extensions.toolbar.mindspark._dzMembers_.browser.search.selectedEngine.savedPrev", "true");
[-] [C:\Users\Heňo\AppData\Roaming\Mozilla\Firefox\Profiles\zhpijfqf.default\prefs.js] Deleted : user_pref("extensions.toolbar.mindspark._dzMembers_.browser.search.selectedEngine.tb", "Ask Web Search");
[-] [C:\Users\Heňo\AppData\Roaming\Mozilla\Firefox\Profiles\zhpijfqf.default\prefs.js] Deleted : user_pref("extensions.toolbar.mindspark._dzMembers_.browser.startup.homepage.prev", "hxxp://www.google.sk/");
[-] [C:\Users\Heňo\AppData\Roaming\Mozilla\Firefox\Profiles\zhpijfqf.default\prefs.js] Deleted : user_pref("extensions.toolbar.mindspark._dzMembers_.browser.startup.homepage.savedPrev", "true");
[-] [C:\Users\Heňo\AppData\Roaming\Mozilla\Firefox\Profiles\zhpijfqf.default\prefs.js] Deleted : user_pref("extensions.toolbar.mindspark._dzMembers_.browser.startup.homepage.tb", "hxxp://home.tb.ask.com/index.jhtml?ptb=CB11E17C-F254-4C3C-85FE-12BC519FDDE8&n=782a1117&p2=^BYC^xdm008^YYA^sk");
[-] [C:\Users\Heňo\AppData\Roaming\Mozilla\Firefox\Profiles\zhpijfqf.default\prefs.js] Deleted : user_pref("extensions.toolbar.mindspark._dzMembers_.browser.startup.page.savedPrev", 1);
[-] [C:\Users\Heňo\AppData\Roaming\Mozilla\Firefox\Profiles\zhpijfqf.default\prefs.js] Deleted : user_pref("extensions.toolbar.mindspark._dzMembers_.browser.startup.page.tb", 1);
[-] [C:\Users\Heňo\AppData\Roaming\Mozilla\Firefox\Profiles\zhpijfqf.default\prefs.js] Deleted : user_pref("extensions.toolbar.mindspark._dzMembers_.browser.version.last", "46.0");
[-] [C:\Users\Heňo\AppData\Roaming\Mozilla\Firefox\Profiles\zhpijfqf.default\prefs.js] Deleted : user_pref("extensions.toolbar.mindspark._dzMembers_.coId", "b3e629be67964ef298170fa282fde8cc");
[-] [C:\Users\Heňo\AppData\Roaming\Mozilla\Firefox\Profiles\zhpijfqf.default\prefs.js] Deleted : user_pref("extensions.toolbar.mindspark._dzMembers_.competitorDNS", "{\"comment\":\"refresh every 1 week (7*24*60*60*1000)\",\"refreshPeriod\":604800000,\"list\":[{\"url\":\"hxxp://www.dnsrsearch.com/[...]
[-] [C:\Users\Heňo\AppData\Roaming\Mozilla\Firefox\Profiles\zhpijfqf.default\prefs.js] Deleted : user_pref("extensions.toolbar.mindspark._dzMembers_.firstKnownVersion", "7.38.8.46577");
[-] [C:\Users\Heňo\AppData\Roaming\Mozilla\Firefox\Profiles\zhpijfqf.default\prefs.js] Deleted : user_pref("extensions.toolbar.mindspark._dzMembers_.homepage", "hxxp://home.tb.ask.com/index.jhtml?ptb=CB11E17C-F254-4C3C-85FE-12BC519FDDE8&n=782a1117&p2=^BYC^xdm008^YYA^sk");
[-] [C:\Users\Heňo\AppData\Roaming\Mozilla\Firefox\Profiles\zhpijfqf.default\prefs.js] Deleted : user_pref("extensions.toolbar.mindspark._dzMembers_.hp.enabled", true);
[-] [C:\Users\Heňo\AppData\Roaming\Mozilla\Firefox\Profiles\zhpijfqf.default\prefs.js] Deleted : user_pref("extensions.toolbar.mindspark._dzMembers_.hp.guardType", "HPR");
[-] [C:\Users\Heňo\AppData\Roaming\Mozilla\Firefox\Profiles\zhpijfqf.default\prefs.js] Deleted : user_pref("extensions.toolbar.mindspark._dzMembers_.hp.user.defined", false);
[-] [C:\Users\Heňo\AppData\Roaming\Mozilla\Firefox\Profiles\zhpijfqf.default\prefs.js] Deleted : user_pref("extensions.toolbar.mindspark._dzMembers_.initialized", true);
[-] [C:\Users\Heňo\AppData\Roaming\Mozilla\Firefox\Profiles\zhpijfqf.default\prefs.js] Deleted : user_pref("extensions.toolbar.mindspark._dzMembers_.installType", "XPI");
[-] [C:\Users\Heňo\AppData\Roaming\Mozilla\Firefox\Profiles\zhpijfqf.default\prefs.js] Deleted : user_pref("extensions.toolbar.mindspark._dzMembers_.installation.dlpCountryCode", "SK");
[-] [C:\Users\Heňo\AppData\Roaming\Mozilla\Firefox\Profiles\zhpijfqf.default\prefs.js] Deleted : user_pref("extensions.toolbar.mindspark._dzMembers_.installation.installDate", "2016022807");
[-] [C:\Users\Heňo\AppData\Roaming\Mozilla\Firefox\Profiles\zhpijfqf.default\prefs.js] Deleted : user_pref("extensions.toolbar.mindspark._dzMembers_.installation.partnerId", "^BYC^xdm008^YYA^sk");
[-] [C:\Users\Heňo\AppData\Roaming\Mozilla\Firefox\Profiles\zhpijfqf.default\prefs.js] Deleted : user_pref("extensions.toolbar.mindspark._dzMembers_.installation.success", true);
[-] [C:\Users\Heňo\AppData\Roaming\Mozilla\Firefox\Profiles\zhpijfqf.default\prefs.js] Deleted : user_pref("extensions.toolbar.mindspark._dzMembers_.installation.toolbarId", "CB11E17C-F254-4C3C-85FE-12BC519FDDE8");
[-] [C:\Users\Heňo\AppData\Roaming\Mozilla\Firefox\Profiles\zhpijfqf.default\prefs.js] Deleted : user_pref("extensions.toolbar.mindspark._dzMembers_.lastActivePing", "1463092964333");
[-] [C:\Users\Heňo\AppData\Roaming\Mozilla\Firefox\Profiles\zhpijfqf.default\prefs.js] Deleted : user_pref("extensions.toolbar.mindspark._dzMembers_.lastKnownVersion", "7.70.9.27849");
[-] [C:\Users\Heňo\AppData\Roaming\Mozilla\Firefox\Profiles\zhpijfqf.default\prefs.js] Deleted : user_pref("extensions.toolbar.mindspark._dzMembers_.lssState", "{\"previousLocales\":[\"sk\",\"cs\",\"en-US\",\"en\"],\"supportedLocales\":[\"de\",\"es\",\"pt\",\"ja\",\"en\"],\"defaultLocale\":\"en\"[...]
[-] [C:\Users\Heňo\AppData\Roaming\Mozilla\Firefox\Profiles\zhpijfqf.default\prefs.js] Deleted : user_pref("extensions.toolbar.mindspark._dzMembers_.options.defaultSearch", true);
[-] [C:\Users\Heňo\AppData\Roaming\Mozilla\Firefox\Profiles\zhpijfqf.default\prefs.js] Deleted : user_pref("extensions.toolbar.mindspark._dzMembers_.options.homePageEnabled", true);
[-] [C:\Users\Heňo\AppData\Roaming\Mozilla\Firefox\Profiles\zhpijfqf.default\prefs.js] Deleted : user_pref("extensions.toolbar.mindspark._dzMembers_.options.keywordEnabled", true);
[-] [C:\Users\Heňo\AppData\Roaming\Mozilla\Firefox\Profiles\zhpijfqf.default\prefs.js] Deleted : user_pref("extensions.toolbar.mindspark._dzMembers_.options.tabEnabled", true);
[-] [C:\Users\Heňo\AppData\Roaming\Mozilla\Firefox\Profiles\zhpijfqf.default\prefs.js] Deleted : user_pref("extensions.toolbar.mindspark._dzMembers_.productDeliveryOption.language", "sk");
[-] [C:\Users\Heňo\AppData\Roaming\Mozilla\Firefox\Profiles\zhpijfqf.default\prefs.js] Deleted : user_pref("extensions.toolbar.mindspark._dzMembers_.productDeliveryOption.type", "Toolbar");
[-] [C:\Users\Heňo\AppData\Roaming\Mozilla\Firefox\Profiles\zhpijfqf.default\prefs.js] Deleted : user_pref("extensions.toolbar.mindspark._dzMembers_.successUrl", "hxxp://www.pconverter.com/installComplete.jhtml");
[-] [C:\Users\Heňo\AppData\Roaming\Mozilla\Firefox\Profiles\zhpijfqf.default\prefs.js] Deleted : user_pref("extensions.toolbar.mindspark._dzMembers_.toolbar.ownSearch", false);
[-] [C:\Users\Heňo\AppData\Roaming\Mozilla\Firefox\Profiles\zhpijfqf.default\prefs.js] Deleted : user_pref("extensions.toolbar.mindspark._dzMembers_.toolbar.versionChanged", false);
[-] [C:\Users\Heňo\AppData\Roaming\Mozilla\Firefox\Profiles\zhpijfqf.default\prefs.js] Deleted : user_pref("extensions.toolbar.mindspark._dzMembers_.toolbarCollapsed", true);
[-] [C:\Users\Heňo\AppData\Roaming\Mozilla\Firefox\Profiles\zhpijfqf.default\prefs.js] Deleted : user_pref("extensions.toolbar.mindspark._dzMembers_.uninstallSurveyUrl", "hxxp://www.research.net/r/HYSCVNM?CBID=<!--cob ... oolbarID-->");
[-] [C:\Users\Heňo\AppData\Roaming\Mozilla\Firefox\Profiles\zhpijfqf.default\prefs.js] Deleted : user_pref("extensions.toolbar.mindspark._dzMembers_.uninstallTasks", "{\"prefBranchesToDelete\":[\"extensions.toolbar.mindspark._dzMembers_.\"],\"filesToDelete\":[\"C:\\\\Users\\\\HeHo\\\\AppData\\\\R[...]
[-] [C:\Users\Heňo\AppData\Roaming\Mozilla\Firefox\Profiles\zhpijfqf.default\prefs.js] Deleted : user_pref("extensions.toolbar.mindspark.hp.enabled", true);
[-] [C:\Users\Heňo\AppData\Roaming\Mozilla\Firefox\Profiles\zhpijfqf.default\prefs.js] Deleted : user_pref("extensions.toolbar.mindspark.hp.enabled.guid", "pconverter@mindspark.com");
[-] [C:\Users\Heňo\AppData\Roaming\Mozilla\Firefox\Profiles\zhpijfqf.default\prefs.js] Deleted : user_pref("extensions.toolbar.mindspark.lastInstalled", "onlinemapfinder@mindspark.com");
[-] [C:\Users\Heňo\AppData\Roaming\Mozilla\Firefox\Profiles\zhpijfqf.default\prefs.js] Deleted : user_pref("keyword.URL", "hxxp://int.search.tb.ask.com/search/GGmain.jhtml?st=kwd&ptb=F3062F91-572A-48C5-A068-89B7B849ED6C&n=782a1117&ind=2016022807&p2=^BA5^xdm067^YYA^sk&si=COaS8pGIm8sCFWj4wgodaugOPA[...]
[-] [C:\Users\Heňo\AppData\Roaming\Mozilla\Firefox\Profiles\zhpijfqf.default\prefs.js] Deleted : user_pref("network.hxxp.request.max-start-delay", 0);
[-] [C:\Users\Heňo\AppData\Roaming\Mozilla\Firefox\Profiles\zhpijfqf.default\user.js] Deleted : user_pref("network.hxxp.request.max-start-delay", 0);

*************************

:: "Tracing" keys deleted
:: Winsock settings cleared

*************************

C:\AdwCleaner\AdwCleaner[C1].txt - [30551 bytes] - [13/05/2016 20:21:50]
C:\AdwCleaner\AdwCleaner[S1].txt - [29714 bytes] - [13/05/2016 20:19:39]

########## EOF - C:\AdwCleaner\AdwCleaner[C1].txt - [30699 bytes] ##########

[Rudy]

Zdravím!
Log není kompletní.

[Kovas]

Zdravím,

ospravedlňujem sa, fakt som to nejako domiešal. Nevzalo mi celý log (asi viac znakov), ale ma to ani po odoslaní neupozornilo na to. Musím to robiť v núdzovom režime, tak že by to bolo v tom? Sedel som nad tým včera dlho do noci, oči mám červené, no teraz mi to ani nepáli.
Ako som písal notebook beží len v núdzovom režime. Pokiaľ spúšťam systém v normálnom režime je to funkčné tak cca 2 minúty po načítaní systému. Potom to už má takmer nekonečnú odozvu (aj RSIT som musel stihnúť hneď na začiatku). Preto by som sa chcel opýtať, či nebude potom problém so spúšťanim utilít, alebo je možné ich spustiť aj v núdzovom režime?
Neviem prečo, ale zbytok logu nemôžem uložiť do príspevku, aj keď ho rozdelím na menej znakov. Pošlem Vám odkaz, kde som logy uložil celé

Odkaz na log z RSIT :

http://leteckaposta.cz/634563330

Odkaz na log z AdwCleaner :

http://leteckaposta.cz/702418027

[Rudy]

Stáhněte OTM: http://oldtimer.geekstogo.com/OTM.exe a uložte na plochu. Spusťte a do levého okna zkopírujte:

:files
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job

:commands
[Purity]
[Emptytemp]
[Emptyflash]

a klikněte na >MoveIt!<. Po skenu restartujte PC a dejte nový log RSIT.

Doporučuji odinstalovat AdvancedSystemCare. Tento program vidí problémy i tam, kde nejsou a laik si jím snadno může poškodit systém.

[Kovas]

Ten odkaz na stiahnutie OTM je nefunkčný a ako čítam na fórach nie je na stiahnutie na týchto stránkach.

Našiel som túto stránku, kde je na stiahnutie.

http://www.myantispyware.com/download/otm/

Mám ho stiahnuť odtiaľ?

Podľa popisu je tam uvedená jeho posledná aktualizácia 9.11.2015

[Rudy]

Zkuste to.

[Kovas]

Odinštaloval som AdvancedSystemCare, spustil som OTM, RSIT.
Log z RSIT Vám posielam leteckou poštou. Je toho dosť a do príspevku by mi vošlo asi tak 1/4 logu

Tu je link na log :

http://leteckaposta.cz/325478982

[Rudy]

Smazáno. Znovu spusťte OTM a klikněte na >CleanUp!<. OTM po sobě uklidí. Nakonec restartujte PC. Nastala nějaká změna?

[Kovas]

No bohužiaľ zmena nenastala. Akurát po načítaní systému je možné s nim robiť možno o 2 minúty viac. Potom to začne mrznúť. Notebook je v podstate takto nepoužiteľný. V podstate aj notebook musím vypínať vypínačom.

Systém beží len v núdzovom režime tak, ako má. Aj ten musím mať spustený ak sa chcem s týmto notebookom ísť na net.

Nemôže to mať súvis s Win10, ktorý sa ponúka?

[Rudy]

Nemělo by. Ještě zkuste kompletní sken MBAM: http://www.malwarebytes.org/mbam.php a dejte log. Předem nic nemažte.

[Kovas]

No spustil som MBAM v normálnom režime Win7. Skenovanie bežalo 15 min 34 s a potom systém zamrzol. Nechal som to ešte asi 15 min, ale nič. Dokonca zamrzol aj systémový čas. Zastavil sa.

Mám MBAM spustiť v núdzovom režime?

[Kovas]

Zabudol som uviesť, že to zamrzlo pri skenovaní pamäte, asi 107 objekt

[Rudy]

Ano, spusťte v nouz. režimu.

[Kovas]

Tu je log z MBAM

Malwarebytes Anti-Malware
www.malwarebytes.org

Dátum kontroly: 15. 5. 2016
Čas kontroly: 13:04
Protokol: MAM.txt
Správca: Áno

Verzia: 2.2.1.1043
Dazabáza malware: v2016.05.15.02
Databáza rootkitov: v2016.05.06.01
Licencia: Skúšobná verzia
Ochrana pred škodlivým softvérom: Vypnuté
Ochrana pred škodlivými webstránkami: Vypnuté
Vlastná ochrana: Vypnuté

OS: Windows 7 Service Pack 1
CPU: x64
Súborový systém: NTFS
Používateľ: Heňo

Typ kontroly: Kontrola hrozieb
Výsledok: Dokončená
Skontrolovaných objektov: 288337
Uplynulý čas: 14 min, 59 s

Pamäť: Zapnuté
Pri spustení: Zapnuté
Súborový systém: Zapnuté
Archívy: Zapnuté
Rootkity: Vypnuté
Heuristika: Zapnuté
PUP: Zapnuté
PUM: Zapnuté

Procesy: 0
(Žiadne škodlivé položky neboli zistené)

Moduly: 0
(Žiadne škodlivé položky neboli zistené)

Kľúče databázy Registry: 0
(Žiadne škodlivé položky neboli zistené)

Hodnoty databázy Registry: 0
(Žiadne škodlivé položky neboli zistené)

Údaj databázy Registry: 0
(Žiadne škodlivé položky neboli zistené)

Priečinky: 2
PUP.Optional.MindSpark, C:\Users\Heňo\AppData\Roaming\Mozilla\Firefox\Profiles\zhpijfqf.default\DownSpeedTest_dq, , [64ca06d0336657df67d6dca627dcdb25],
PUP.Optional.MindSpark, C:\Users\Heňo\AppData\Roaming\Mozilla\Firefox\Profiles\zhpijfqf.default\OnlineMapFinder_9p, , [45e95b7b77227abc0736afd3f310ef11],

Súbory: 4
PUP.Optional.OpenCandy, C:\Users\Heňo\Downloads\KMPlayer_v3.8.0.117.exe, , [82ac0fc7792066d0aedbda7df4107888],
PUP.Optional.MindSpark, C:\Users\Heňo\AppData\Roaming\Mozilla\Firefox\Profiles\zhpijfqf.default\DownSpeedTest_dq\A61AF7DE-41B0-47FF-B96D-41656CE5E572.sqlite, , [64ca06d0336657df67d6dca627dcdb25],
PUP.Optional.MindSpark, C:\Users\Heňo\AppData\Roaming\Mozilla\Firefox\Profiles\zhpijfqf.default\OnlineMapFinder_9p\F3062F91-572A-48C5-A068-89B7B849ED6C.sqlite, , [45e95b7b77227abc0736afd3f310ef11],
PUP.Optional.ASK, C:\Users\Heňo\AppData\Roaming\Mozilla\Firefox\Profiles\zhpijfqf.default\prefs.js, Dobrá: (), Zlá: (user_pref("keyword.URL", "http://int.search.tb.ask.com/search/GGm ... searchfor=");), ,[f13df7df1e7b9d99a809fa6a788c5ea2]

Fyzické sektory: 0
(Žiadne škodlivé položky neboli zistené)


(end)