MD5: 827af8be2ce6df20773c147ff4789bb5
SHA1: 8cc6d34b8405df6217e1bf58c19cd1798a68797e
SHA256: e00117b86d1128ba240a85b9dcaa3ec4c51cd4a1081d85cf935e713eff288256
SSDeep: 49152:jqxxTDwW148xBbRZlj2k6o23j OSP6QPsAE0TlJUEt0DobjGe:uxxTUG48xtRZlyk673j DPYbCJUnS
Size: 3210056 bytes
File type: EXE
Platform: WIN32
Entropy: Packed
PEID: BorlandDelphi30, UPolyXv05_v6
Company: MF Team
Created at: 1992-06-20 01:22:17
Analyzed on: Windows7 SP1 32-bit

Summary:

Trojan. A program that appears to do one thing but actually does another (a.k.a. Trojan Horse).

Payload

No specific payload has been found.

Process activity

The Trojan creates the following process(es):

%original file name%.exe:2712

The Trojan injects its code into the following process(es):

setup.exe:3516
827af8be2ce6df20773c147ff4789bb5.tmp:3404

Mutexes

The following mutexes were created/opened:
No objects were found.

File activity

The process %original file name%.exe:2712 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\Temp\is-D319D.tmp\827af8be2ce6df20773c147ff4789bb5.tmp (1437 bytes)

The process 827af8be2ce6df20773c147ff4789bb5.tmp:3404 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\Temp\is-JR1R5.tmp\_isetup\_iscrypt.dll (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\is-JR1R5.tmp\_isetup\_shfoldr.dll (47 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\is-JR1R5.tmp\setup.exe (61547 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\is-JR1R5.tmp\default.xml (713 bytes)

Registry activity

The process 827af8be2ce6df20773c147ff4789bb5.tmp:3404 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKCU\Software\Microsoft\RestartManager\Session0000]
"Sequence" = "1"
"Owner" = "4C 0D 00 00 18 0A 73 B4 2A F2 D2 01"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"AutoDetect" = "1"

[HKCU\Software\Microsoft\RestartManager\Session0000]
"SessionHash" = "3F 01 3E 8A BF 09 AD C5 CA 53 D6 FB 88 02 12 B3"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "0"

The Trojan deletes the following value(s) in system registry:

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"
"IntranetName"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

Dropped PE files

HOSTS file anomalies

No changes have been detected.

Rootkit activity

No anomalies have been detected.

Propagation

VersionInfo

Company Name: MF Team
Product Name: mfwi
Product Version: 1.0.1.1
Legal Copyright:
Legal Trademarks:
Original Filename:
Internal Name:
File Version:
File Description: mfwi Setup
Comments: This installation was built with Inno Setup.
Language: Language Neutral

PE Sections

Dropped from:

Downloaded by:

Similar by SSDeep:

Similar by Lavasoft Polymorphic Checker:

Total found: 828
9f3eb380cb4b7d80cab1440ac82ca870
71510f7f6f8659e8e732b87f6dd920e1
5af151c02e91de152b4e15f42f56d278
c1424872a116ebc996046ae93a1cec4b
7a2c76f85c584826187d5184e9069843
71a7a9be5eb0c078c91e7a0cce79b3e9
5431d598badb74099fc3f11d86834b35
3e481ea289c04ce9c0270b8613348c22
4efda33040438e2d480b7161f4eb9356
b4b2091017120deb45f723792c96e53a
25c9dc1ceb96256e837dbf8afdfed4fb
66a1e5ced7907bbfca8aa02f748db8c4
1132f455b4505c9f188bf32b6b428432
b01bcffdd52a6901ba98fc6b3f1aa557
94ccdd2654332007f8c382ffe35c532d
9e23284f79353e17654a5bdb9fa6753d
83ef9be0911ea17139ed0aa33b1c8bfc
e1d9749987fb01e58919921f9be19d99
1fb85864c4e83c01ccf3ade832d671e1
30aae4123ef939639c30a8ed715e81cb
9c41f122b667aca766bf13f25cb05e3e
6a5123322437dc1446a5e86dd9564f50
a40e33a897a9627dba9e96a3b2a85967
6f4c6b3543dc822283c54f9ab34b2fe6
47a2d2c2ef748b27d79033636739335f

URLs

No activity has been detected.

IDS verdicts (Suricata alerts: Emerging Threats ET ruleset)

Traffic

Web Traffic was not found.

The Trojan connects to the servers at the folowing location(s):

.idata

.rdata

P.reloc

P.rsrc

kernel32.dll

.DEFAULT\Control Panel\International

File I/O error %d

lzmadecompsmall: Compressed data is corrupted (%d)

lzmadecompsmall: %s

LzmaDecode failed (%d)

shell32.dll

/SL5="$%x,%d,%d,

Inno Setup Setup Data (5.5.0)

Inno Setup Messages (5.5.0)

mu2.iu

user32.dll

oleaut32.dll

advapi32.dll

RegOpenKeyExA

RegCloseKey

GetWindowsDirectoryA

MsgWaitForMultipleObjects

ExitWindowsEx

comctl32.dll

name="JR.Inno.Setup"

version="1.0.0.0"

name="Microsoft.Windows.Common-Controls"

version="6.0.0.0"

publicKeyToken="6595b64144ccf1df"

<requestedExecutionLevel level="asInvoker" uiAccess="false"/>

<windowsSettings>

<dpiAware xmlns="hXXp://schemas.microsoft.com/SMI/2005/WindowsSettings">true</dpiAware>

</windowsSettings>

<supportedOS Id="{e2011457-1546-43c5-a5fe-008deee3d3f0}"/>

<supportedOS Id="{35138b9a-5d96-4fbd-8e2d-a2440225f93a}"/>

<supportedOS Id="{4a2f28e3-53b9-4441-ba9c-d69d4a4a6e38}"/>

!'%s' is not a valid integer value('%s' is not a valid floating point value

'%s' is not a valid date

'%s' is not a valid time!'%s' is not a valid date and time

I/O error %d

Integer overflow Invalid floating point operation

Invalid pointer operation

Invalid class typecast0Access violation at address %p. %s of address %p

Operation aborted%Exception %s in module %s at %p.

Application Error1Format '%s' invalid or incompatible with argument

No argument for format '%s'

Invalid variant operation"Variant method calls not supported

External exception %x

1.0.1.1

827af8be2ce6df20773c147ff4789bb5.tmp_3404:

.idata

.rdata

P.reloc

P.rsrc

kernel32.dll

%s_%d

EInvalidOperation

TKeyEvent

TKeyPressEvent

crSQLWait

t.HtR

EInvalidGraphicOperation

TWindowState

poProportional

KeyPreview

WindowState

OnKeyDown

OnKeyPress

OnKeyUp

CTL3D32.DLL

PasswordChar

ssHorizontal

OnKeyUpXeB

RegDeleteKeyExA

advapi32.dll

.DEFAULT\Control Panel\International

user32.dll

shlwapi.dll

TPSExec

TPSRuntimeClassImporter

TPSExportedVar

Cannot Import

Interface not supported

TPSCustomDebugExec

TPSDebugExec

uxtheme.dll

oleacc.dll

RICHED20.DLL

RICHED32.DLL

Rstrtmgr.dll

File I/O error %d

Messages file "%s" is missing. Please correct the problem or obtain a new copy of the program.

shell32.dll

HKEY_CLASSES_ROOT

HKEY_CURRENT_USER

HKEY_LOCAL_MACHINE

HKEY_USERS

HKEY_PERFORMANCE_DATA

HKEY_CURRENT_CONFIG

HKEY_DYN_DATA

WININIT.INI

t.Htb

Software\Microsoft\Windows\CurrentVersion\SharedDLLs

RegCreateKeyEx

RegOpenKeyEx

sfc.dll

cmd.exe" /C "

COMMAND.COM" /C

heXE

PendingFileRenameOperations

PendingFileRenameOperations2

Software\Microsoft\Windows\CurrentVersion\Fonts

Software\Microsoft\Windows NT\CurrentVersion\Fonts

IPropertyStore::SetValue(PKEY_AppUserModel_PreventPinning)

IPropertyStore::SetValue(PKEY_AppUserModel_ID)

IPropertyStore::SetValue(PKEY_AppUserModel_ExcludeFromShowInNewInstall)

OLEAUT32.DLL

Log opened. (Time zone: UTC%s%.2u:%.2u)

%s Log %s #%.3u.txt

MsgWaitForMultipleObjects

regsvr32.exe"

Cannot register 64-bit DLLs on this version of Windows

HELPER_EXE_AMD64

Cannot utilize 64-bit features on this version of Windows

64-bit helper EXE wasn't extracted

\\.\pipe\InnoSetup64BitHelper-%.8x-%.8x-%.8x-%.8x%.8x

CreateNamedPipe

SetNamedPipeHandleState

helper %d 0x%x

Helper process PID: %u

Stopping 64-bit helper process. (PID: %u)

Helper process exited with failure code: 0x%x

TransactNamedPipe

TransactNamedPipe/GetOverlappedResult

Helper: Command did not execute

SOFTWARE\Microsoft\.NETFramework

.NET Framework not found

SOFTWARE\Microsoft\.NETFramework\Policy\v4.0

v4.0.30319

SOFTWARE\Microsoft\.NETFramework\Policy\v2.0

v2.0.50727

SOFTWARE\Microsoft\.NETFramework\Policy\v1.1

v1.1.4322

.NET Framework version %s not found

Fusion.dll

Failed to load .NET Framework DLL "%s"

Failed to get address of .NET Framework CreateAssemblyCache function

.NET Framework CreateAssemblyCache function failed

MoveFileEx failed (%d).

Deleting directory: %s

Failed to delete directory (%d). Will retry later.

Failed to delete directory (%d). Will delete on restart (if empty).

Failed to delete directory (%d).

Deleting file: %s

Failed to delete the file; it may be in use (%d).

ExtractRecData: Unicode data unsupported by this build

The file appears to be in use (%d). Will delete on restart.

Decrementing shared count (%d-bit): %s

Unregistering 64-bit DLL/OCX: %s

Unregistering 32-bit DLL/OCX: %s

Not unregistering DLL/OCX again: %s

Unregistering 64-bit type library: %s

Unregistering 32-bit type library: %s

Uninstalling from GAC: %s

Running Exec filename:

Running Exec parameters:

CreateProcess failed (%d).

Process exit code: %u

Running ShellExec filename:

Running ShellExec parameters:

ShellExecuteEx failed (%d).

Skipping RunOnceId "%s" filename: %s

Unregistering font: %s

zlib: Internal error. Code %d

1.2.1

bzlib: Internal error. Code %d

lzmadecomp: %s

lzmadecomp: Compressed data is corrupted (%d)

DecodeToBuf failed (%d)

TPasswordEdit

TPasswordEditl

PasswordEdit(

Password

c:\directory

Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced

PasswordPage

PasswordLabel

PasswordEdit

PasswordEditLabel$

Could not find page with ID %d

Software\Microsoft\Windows\CurrentVersion\Uninstall

%s\%s_is1

RestartManager found an application using one of our files: %s

Can use RestartManager to avoid reboot? %s (%d)

CheckPassword

PrepareToInstall failed: %s

Need to restart Windows? %s

/:*?"<>|

\/:*?"<>|

%s-%d.bin

%s-%d%s.bin

..\DISK%d\

Asking user for new disk containing "%s".

Cannot read an encrypted file before the key has been set

LoggedMsgBox returned an unexpected value. Assuming Abort.

Software\Microsoft\Windows\CurrentVersion\Uninstall\

5.5.2 (a)

URLInfoAbout

URLUpdateInfo

Creating directory: %s

Setting permissions on directory: %s

Failed to set permissions on directory (%d).

Setting NTFS compression on directory: %s

Unsetting NTFS compression on directory: %s

Failed to set NTFS compression state (%d).

IMsg

Failed to set value in Fonts registry key.

Failed to open Fonts registry key.

Setting permissions on file: %s

Failed to set permissions on file (%d).

Setting NTFS compression on file: %s

Unsetting NTFS compression on file: %s

Dest filename: %s

Dest file is protected by Windows File Protection.

Time stamp of our file: %s

Time stamp of existing file: %s

Version of our file: %u.%u.%u.%u

Version of existing file: %u.%u.%u.%u

Existing file is protected by Windows File Protection. Skipping.

Uninstaller requires administrator: %s

The existing file appears to be in use (%d). Will replace on restart.

The existing file appears to be in use (%d). Retrying.

Registering file as a font ("%s")

Cannot install files to 64-bit locations on this version of Windows

desktop.ini

.ShellClassInfo

{0AFACED1-E828-11D1-9187-B532F1E9575D}

target.lnk

Filename: %s

Desktop.ini

Software\Microsoft\Windows\CurrentVersion\App Paths\

Setting permissions on registry key: %s\%s

Could not set permissions on the registry key because it currently does not exist.

Failed to set permissions on registry key (%d).

Cannot access 64-bit registry keys on this version of Windows

Registration executable created: %s

Software\Microsoft\Windows\CurrentVersion\RunOnce

Registering 64-bit DLL/OCX: %s

Registering 32-bit DLL/OCX: %s

Registering 64-bit type library: %s

Registering 32-bit type library: %s

Directory for uninstall files: %s

Will append to existing uninstall log: %s

Will overwrite existing uninstall log: %s

Creating new uninstall log: %s

LoggedMsgBox returned an unexpected value. Assuming Cancel.

RmShutdown returned an error: %d

Fatal exception during installation process (%s):

ExtractTemporaryFile: The file "%s" was not found

Invalid symbol '%s' found

Invalid token '%s' found

QuerySpawnServer: Unexpected response: $%x

CallSpawnServer: Unexpected response: $%x

CallSpawnServer: Unexpected status: %d

ShellExecuteEx

ShellExecuteEx returned hProcess=0

Wnd=$%x

FormKeyDown

PasswordCheckHash

Expression error '%s'

SuppressMsgBoxes

Cannot evaluate "%s" constant during Uninstall

Cannot access a 64-bit key in a "reg" constant on this version of Windows

Unknown custom message name "%s" in "cm" constant

srcexe

Cannot expand "pf64" constant on this version of Windows

Cannot expand "cf64" constant on this version of Windows

uninstallexe

Cannot expand "dotnet2064" constant on this version of Windows

Cannot expand "dotnet4064" constant on this version of Windows

Failed to expand shell folder constant "%s"

Unknown constant "%s"

Software\Microsoft\Windows\CurrentVersion

SOFTWARE\Microsoft\Windows NT\CurrentVersion

cmd.exe

COMMAND.COM

\_setup64.tmp

_isetup\_shfoldr.dll

Failed to get version numbers of _shfoldr.dll

shfolder.dll

Failed to load DLL "%s"

Found pending rename or delete that matches one of our files: %s

Windows version: %u.%u.%u%s (NT platform: %s)

64-bit Windows: %s

Processor architecture: %s

Defaulting to %s for suppressed message box (%s):

Message box (%s):

User chose %s.

MsgBox failed.

/SPAWNWND=$%x /NOTIFYWND=$%x

64-bit install mode: %s

Windows

_isetup\_isdecmp.dll

_isetup\_iscrypt.dll

/Password=

/SuppressMsgBoxes

/DETACHEDMSG

-0.bin

Setup version: Inno Setup version 5.5.2 (a)

Original Setup EXE:

Not restarting Windows because Setup is being run from the debugger.

Restarting Windows.

Inno Setup version 5.5.2 (a)

Portions Copyright (C) 2000-2012 Martijn Laan

hXXp://VVV.innosetup.com/

hXXp://VVV.remobjects.com/ps

Cannot run files in 64-bit locations on this version of Windows

Type: Exec

Type: ShellExec

RmRestart returned an error: %d

Need to restart Windows, not attempting to restart applications

Will not restart Windows automatically.

System\CurrentControlSet\Control\Windows

TOutputMsgWizardPage

TOutputMsgMemoWizardPage

TOutputMsgMemoWizardPage|?H

PasswordEdit

PasswordEditLabel

MsgLabel

Msg1Label

Msg2Label

function CreateOutputMsgPage(const AfterID: Integer; const ACaption, ADescription, AMsg: String): TOutputMsgWizardPage;

function CreateOutputMsgMemoPage(const AfterID: Integer; const ACaption, ADescription, ASubCaption: String; const AMsg: AnsiString): TOutputMsgMemoWizardPage;

function MsgBox(const Text: String; const Typ: TMsgBoxType; const Buttons: Integer): Integer;

function GetIniString(const Section, Key, Default, Filename: String): String;

function GetIniInt(const Section, Key: String; const Default, Min, Max: Longint; const Filename: String): Longint;

function GetIniBool(const Section, Key: String; const Default: Boolean; const Filename: String): Boolean;

function IniKeyExists(const Section, Key, Filename: String): Boolean;

function SetIniString(const Section, Key, Value, Filename: String): Boolean;

function SetIniInt(const Section, Key: String; const Value: Longint; const Filename: String): Boolean;

function SetIniBool(const Section, Key: String; const Value: Boolean; const Filename: String): Boolean;

procedure DeleteIniEntry(const Section, Key, Filename: String);

function GetCmdTail: String;

function StringChangeEx(var S: String; const FromStr, ToStr: String; const SupportDBCS: Boolean): Integer;

function RegValueExists(const RootKey: Integer; const SubKeyName, ValueName: String): Boolean;

function RegQueryStringValue(const RootKey: Integer; const SubKeyName, ValueName: String; var ResultStr: String): Boolean;

function RegQueryMultiStringValue(const RootKey: Integer; const SubKeyName, ValueName: String; var ResultStr: String): Boolean;

function RegDeleteKeyIncludingSubkeys(const RootKey: Integer; const SubkeyName: String): Boolean;

function RegDeleteKeyIfEmpty(const RootKey: Integer; const SubkeyName: String): Boolean;

function RegKeyExists(const RootKey: Integer; const SubKeyName: String): Boolean;

function RegDeleteValue(const RootKey: Integer; const SubKeyName, ValueName: String): Boolean;

function RegGetSubkeyNames(const RootKey: Integer; const SubKeyName: String; var Names: TArrayOfString): Boolean;

function RegGetValueNames(const RootKey: Integer; const SubKeyName: String; var Names: TArrayOfString): Boolean;

function RegQueryDWordValue(const RootKey: Integer; const SubKeyName, ValueName: String; var ResultDWord: Cardinal): Boolean;

function RegQueryBinaryValue(const RootKey: Integer; const SubKeyName, ValueName: String; var ResultStr: AnsiString): Boolean;

function RegWriteStringValue(const RootKey: Integer; const SubKeyName, ValueName, Data: String): Boolean;

function RegWriteExpandStringValue(const RootKey: Integer; const SubKeyName, ValueName, Data: String): Boolean;

function RegWriteMultiStringValue(const RootKey: Integer; const SubKeyName, ValueName, Data: String): Boolean;

function RegWriteDWordValue(const RootKey: Integer; const SubKeyName, ValueName: String; const Data: Cardinal): Boolean;

function RegWriteBinaryValue(const RootKey: Integer; const SubKeyName, ValueName: String; const Data: AnsiString): Boolean;

function CheckForMutexes(Mutexes: String): Boolean;

function Exec(const Filename, Params, WorkingDir: String; const ShowCmd: Integer; const Wait: TExecWait; var ResultCode: Integer): Boolean;

function ExecAsOriginalUser(const Filename, Params, WorkingDir: String; const ShowCmd: Integer; const Wait: TExecWait; var ResultCode: Integer): Boolean;

function ShellExec(const Verb, Filename, Params, WorkingDir: String; const ShowCmd: Integer; const Wait: TExecWait; var ErrorCode: Integer): Boolean;

function ShellExecAsOriginalUser(const Verb, Filename, Params, WorkingDir: String; const ShowCmd: Integer; const Wait: TExecWait; var ErrorCode: Integer): Boolean;

function MakePendingFileRenameOperationsChecksum: String;

function CreateShellLink(const Filename, Description, ShortcutTo, Parameters, WorkingDir, IconFilename: String; const IconIndex, ShowCmd: Integer): String;

function ExitSetupMsgBox: Boolean;

function GetWindowsVersion: Cardinal;

procedure GetWindowsVersionEx(var Version: TWindowsVersion);

function GetWindowsVersionString: String;

function SuppressibleMsgBox(const Text: String; const Typ: TMsgBoxType; const Buttons, Default: Integer): Integer;

function CustomMessage(const MsgName: String): String;

function SendMessage(const Wnd: HWND; const Msg, WParam, LParam: Longint): Longint;

function PostMessage(const Wnd: HWND; const Msg, WParam, LParam: Longint): Boolean;

function SendNotifyMessage(const Wnd: HWND; const Msg, WParam, LParam: Longint): Boolean;

function SendBroadcastMessage(const Msg, WParam, LParam: Longint): Longint;

function PostBroadcastMessage(const Msg, WParam, LParam: Longint): Boolean;

function SendBroadcastNotifyMessage(const Msg, WParam, LParam: Longint): Boolean;

procedure RaiseException(const Msg: String);

function SetPreviousData(const PreviousDataKey: Integer; const ValueName, ValueData: String): Boolean;

Cannot call "%s" function during Setup

Cannot call "%s" function during Uninstall

Cannot call "%s" function during non Unicode Setup or Uninstall

CREATEOUTPUTMSGPAGE

CREATEOUTPUTMSGMEMOPAGE

MSGBOX

Invalid RootKey value

INIKEYEXISTS

GETCMDTAIL

REGKEYEXISTS

REGDELETEKEYINCLUDINGSUBKEYS

REGDELETEKEYIFEMPTY

REGGETSUBKEYNAMES

CHECKFORMUTEXES

SHELLEXEC

SHELLEXECASORIGINALUSER

MAKEPENDINGFILERENAMEOPERATIONSCHECKSUM

Unknown custom message name "%s"

EXITSETUPMSGBOX

GETWINDOWSVERSION

GETWINDOWSVERSIONSTRING

%u.%.2u.%u

SUPPRESSIBLEMSGBOX

%u.%u.%u.%u

Cannot disable FS redirection on this version of Windows

GetWindowsVersionEx

Runtime Error (at %d:%d):

Exception "%s" at address %p

TScriptRunner.SetPSExecParameters: Invalid type

TScriptRunner.LoadScript failed

Remove shared file %s? User chose %s%s

/INITPROCWND=$%x

/SECONDPHASE="%s" /FIRSTPHASEWND=$%x

Original Uninstall EXE:

Install was done in 64-bit mode but not running 64-bit Windows now

Removed all? %s

Not restarting Windows because Uninstall is being run from the debugger.

IMsgt

isRS-???.tmp

isRS-%.3u.tmp

DisableProcessWindowsGhosting

FTPF0P

0123456789abcdefInno Setup Setup Data (5.5.0)

Inno Setup Messages (5.5.0)

0ku2.iu

oleaut32.dll

RegQueryInfoKeyA

RegOpenKeyExA

RegEnumKeyExA

RegDeleteKeyA

RegCreateKeyExA

RegCloseKey

GetWindowsDirectoryA

CreateNamedPipeA

mpr.dll

version.dll

gdi32.dll

SetViewportOrgEx

UnhookWindowsHookEx

SetWindowsHookExA

MapVirtualKeyA

GetKeyState

GetKeyNameTextA

ExitWindowsEx

EnumWindows

EnumThreadWindows

comctl32.dll

ole32.dll

ShellExecuteExA

ShellExecuteA

comdlg32.dll

.text

`.rdata

@.data

.pdata

@.rsrc

COMCTL32.dll

SHLWAPI.dll

SetProcessShutdownParameters

KERNEL32.dll

ADVAPI32.dll

SHELL32.dll

OLEAUT32.dll

name="Microsoft.Windows.Common-Controls"

version="6.0.0.0"

publicKeyToken="6595b64144ccf1df"

<requestedExecutionLevel level="asInvoker" uiAccess="false"/>

<supportedOS Id="{e2011457-1546-43c5-a5fe-008deee3d3f0}"/>

<supportedOS Id="{35138b9a-5d96-4fbd-8e2d-a2440225f93a}"/>

<supportedOS Id="{4a2f28e3-53b9-4441-ba9c-d69d4a4a6e38}"/>

`.data

.rsrc

@.reloc

Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders

Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders

SOFTWARE\Microsoft\Windows\CurrentVersion

Software\Microsoft\Windows\CurrentVersion\ProfileReconciliation

RegKey

GetWindowsDirectoryW

RegOpenKeyA

SHFOLDER.dll

dll\shfolder.dbg

Font.Color

Font.Height

Font.Name

Font.Style

Lines.Strings

name="JR.Inno.Setup"

version="1.0.0.0"

<requestedExecutionLevel level="asInvoker" uiAccess="false"/>

<windowsSettings>

<dpiAware xmlns="hXXp://schemas.microsoft.com/SMI/2005/WindowsSettings">true</dpiAware>

</windowsSettings>

Cannot assign a %s to a %s

Cannot create file %s

Cannot open file %s

Stream write error Out of memory while expanding memory stream*Can't write to a read-only resource stream.WriteObject called twice for the same instance

Class %s not found

Resource %s not found!Resource %s is of incorrect class

List index out of bounds Operation not allowed on sorted string list%String list does not allow duplicates

Tab index out of bounds#A component named %s already exists$''%s'' is not a valid component name

A class named %s already exists#''%s'' is not a valid integer value

Error reading %s.%s: %s

Ancestor for '%s' not found

Bitmap is empty!Cannot change the size of an icon$Unknown picture file extension (.%s)

Unsupported clipboard format

Error creating window Cannot focus a disabled or invisible window!Control '%s' has no parent window

%s property out of range

%s on %s@GroupIndex cannot be less than a previous menu item's GroupIndex2Cannot have more than one MDI form per application

Could not load CARDS.DLL

Duplicate CardId found"An error returned from DDE ($0%x)/DDE Error - conversation not established ($0%x)0Error occurred when DDE ran out of memory ($0%x)"Unable to connect DDE conversation

Grid too large for operation Too many rows or columns deleted

%s on line %d

''%s'' expected

%s expected

Invalid input value7Invalid input value. Use escape key to abandon changes

Value must be between %d and %d<Cannot create a default method name for an unnamed component

''%s'' is not a valid date

''%s'' is not a valid time#''%s'' is not a valid date and time

Invalid file name - %s

All files (*.*)|*.*

&Files: (*.*)

Invalid clipboard format Clipboard does not support Icons

Custom Colors Operation not supported on selected printer.There is no default printer currently selected

Unable to write to %s

Invalid data type for '%s'

Failed to create key %s

Failed to set data for '%s'

Failed to get data for '%s'9Synchronize called when main VCL thread in a WaitFor call0Unknown RichEdit conversion file extension (.%s)

/Menu '%s' is already being used by another form

Failed to Save Stream)StatusBar cannot have more than 64 panels!Error assigning Hot-Key to %s. %s

Hot-Key is invalid#Window is invalid or a child window%Hot-Key is assigned to another window %s is already associated with %s!'%s' is not a valid integer value('%s' is not a valid floating point value

'%s' is not a valid date

'%s' is not a valid time!'%s' is not a valid date and time

I/O error %d

Integer overflow Invalid floating point operation

Invalid pointer operation

Invalid class typecast0Access violation at address %p. %s of address %p

Operation aborted%Exception %s in module %s at %p.

Application Error1Format '%s' invalid or incompatible with argument

No argument for format '%s'

Invalid variant operation"Variant method calls not supported

External exception %x

n%USERPROFILE%

r%SYSTEMROOT%

5.50.4807.2300

Microsoft(R) Windows (R) 2000 Operating System

Datos de programa%Configuraci

51.52.0.0

setup.exe_3516:

.text

`.itext

`.data

.idata

.didata

.rdata

@.reloc

B.rsrc

biClrImportant

tagMSG

Windows

HKEY

TWMKey

KeyData

Keys

MouseMsg

grfLocksSupported

ENoMonitorSupportException

.uvCOu

$*@@@*$@@@$ *@@* $@@($*)@-$*@@$-*@@$*-@@(*$)@-*$@@*-$@@*$-@@-* $@-$ *@* $-@$ *-@$ -*@*- $@($ *)(* $)

etNoMonitorSupportException

Operator

EVariantBadIndexError

EVariantBadIndexError`

ssShift

htKeyword

EInvalidOperation

TList.TDirection

AOperator

TThread.TSynchronizeRecord

TOperation

Operation

FOnExecute

OnExecute

TList.Sort$ActRec

TList.Sort$ActRectuC

Uh*%D

TComponent.FindComponent$ActRec

HelpKeyword

UnderstandsKeyword

DeleteKey

TRegKeyInfo

NumSubKeys

MaxSubKeyLen

FCurrentKey

FRootKey

FCloseRootKey

CloseKey

CreateKey

GetKeyInfo

GetKeyNames

HasSubKeys

KeyExists

LoadKey

MoveKey

OpenKey

OpenKeyReadOnly

ReplaceKey

RestoreKey

SaveKey

UnLoadKey

CurrentKeyP

LastErrorMsg

RootKeyP

RootKeyName

EInvalidGraphicOperation

SupportsPartialTransparency

SupportsClipboardFormat

Monochrome

TPatternManager`%F

OnKeyDownpJJ

OnKeyPress

OnKeyUpL

TCustomButton.TButtonStyle

OnKeyUp

poPortrait

APort

Port

FProportional

Proportional

cdsShowKeyboardCues

vsReport

FCustomizeKeyName

CustomizeKeyNameP

FURL

URLP

FAutoHotkeys

RethinkHotkeys

AutoHotkeys sI

IsShortCut

AutoHotkeyslsI

igoParentPassthrough

FAlwaysShowDragImages

AlwaysShowDragImages

toFlickFallbackKeys

'TCustomGestureEngine.TGestureEngineFlag

(TCustomGestureEngine.TGestureEngineFlags

Supported

TKeyEvent

TKeyPressEvent

FHelpKeyword

FOnKeyDown

FOnKeyPress

FOnKeyUp

IsHintMsg

FNativeWheelSupport

FWheelSupportMessage

thHeaderItemLeftPressed

tsArrowBtnLeftPressed

ttbThumbLeftPressed

lrMonoChrome

HelpKeyword<

ssHotTrack

TWindowState

poProportional

fsShowing

FWindowState

FKeyPreview

WantChildKey

KeyPreviewh

WindowState

KeyPreview

FBiDiKeyboard

FNonBiDiKeyboard

FEnumAllWindowsOnActivateHint

FOnActionExecute

Keyword

EnumAllWindowsOnActivateHintP

BiDiKeyboardP

NonBiDiKeyboard

OnActionExecuteT

Uh.kN

FLastErrorMsg

TRootKey

HKEY_CLASSES_ROOT

HKEY_CURRENT_USER

HKEY_LOCAL_MACHINE

HKEY_USERS

HKEY_PERFORMANCE_DATA

HKEY_CURRENT_CONFIG

HKEY_DYN_DATA

ccIDSBinaryOperator

ccIDSTrinaryOperator

ccJoinControl

EJclMutexError

Uh.eQ

Uh.hQ

TsWindowShowMode

fKeyword

Keywordt

UpdateIconsIndexes

t.Ht4

OnKeyUppGJ

TacMenuSupport&

TacMenuSupportx

IndexWebBtn

FMenuSupport

InitConstantIndexes

InitMaskIndexes

MenuSupportP

TsWebLabel6

TsWebLabel`

UpdateIndexes

csIndexed

FCrToRedTable

FCrToGreenTable

3333333

acInMouseMsg

IsControlSupported

CurLeft

f;x.tP

t.Ht!

TacMDIWnd'

TacMDIWnd

C.Phx1\

HtKHt.Ht_

F.PhL

sWebLabel15

sWebLabel16

sWebLabel17

sWebLabel9

sWebLabel21

sWebLabel24

sWebLabel23

sWebLabel22

sWebLabel18

sWebLabel19

sWebLabel20

sWebLblEuroclic1(

sWebLblEuroclic2,

sWebLblMyThings1<

sWebLblMyThings2@

sWebLabel25X

sWebLabel26\

sWebLabel13l

sWebLabel14p

sWebLabel2

sWebLabel1

sWebLabel30

sWebLabel31

sWebLabel28

sWebLabel29

sWebLabel27

sWebLabel12

sWebLabel3

sWebLabel4$

sWebLabel5@

sWebLabel6d

sWebLabel7h

sWebLabel8t

sWebLabel10x

sWebLabel11

sWebLabel32

sWebLabel33

sWebLabel34

sWebLabel35

sWebLabel36

sWebLabel37

sWebLabel38

sWebLabel39

sWebLabel40

sWebLabel41

sWebLabel42(

sWebLabel43,

sWebLabel440

sWebLabel454

sWebLabel46@

sWebLabel47X

sWebLabel48\

sWebLabel49|

sWebLabel50

sWebLabel51

sWebLabel52

sWebLabel53

sWebLabel54

sWebLabel55

sWebLabel56

sWebLabel57

sWebLabel58

sWebLabel59

sWebLabel60

sWebLabel61

sWebLabel624

sWebLabel63D

sWebLabel64L

sWebLblEuroclic1

sWebLblEuroclic2

sWebLblMyThings1

sWebLblMyThings2

sWebLabel25

sWebLabel26

sWebLabel13

sWebLabel14

sWebLabel4

sWebLabel5

sWebLabel6

sWebLabel7

sWebLabel8

sWebLabel10

sWebLabel42

sWebLabel43

sWebLabel44

sWebLabel45

sWebLabel46

sWebLabel47

sWebLabel48

sWebLabel49

sWebLabel62

sWebLabel63

sWebLabel64

iMaxUdpDg

sin_port

sin6_port

0.0.0.0

127.0.0.1

255.255.255.255

getservbyport

LT_SSHv2

ResolvePort

GetLocalSinPort

GetRemoteSinPort

FSocksPort

FSocksPassword

FSocksResponsePort

FSocksLocalPort

FSocksRemotePort

FBypassFlag

SocksPortP

SocksPassword

FHTTPTunnelIP

FHTTPTunnelPort

FHTTPTunnel

FHTTPTunnelRemoteIP

FHTTPTunnelRemotePort

FHTTPTunnelUser

FHTTPTunnelPass

FHTTPTunnelTimeout

TTCPBlockSocket&

TTCPBlockSocketP

HTTPTunnelIPP

HTTPTunnelPortP

HTTPTunnelUserP

HTTPTunnelPass

HTTPTunnelTimeout

HTTPTunnel

FKeyPassword

FCertificateFile

FPrivateKeyFile

FCertificate

FPrivateKey

FCertCA

FCertCAFile

FTrustCertificate

FTrustCertificateFile

FVerifyCert

FPassword

FSSHChannelType

FSSHChannelArg1

FSSHChannelArg2

GetCertInfo

GetVerifyCert

KeyPasswordP

PasswordP

CertificateFileP

PrivateKeyFilet

Certificatet

PrivateKeyt

TrustCertificateFilet

TrustCertificatet

CertCAP

CertCAFile

VerifyCertP

SSHChannelTypeP

SSHChannelArg1P

SSHChannelArg2

FTargetPort

TargetPortP

Password

httpsend

FAlivePort

FProxyPort

FProxyPass

FAddPortNumberToHost

THTTPSend&

HTTPMethod

THTTPSend$

ProxyPortP

ProxyPassP

AddPortNumberToHost

AMsg

EIdCanNotBindPortInRange

EIdCanNotBindPortInRange<

EIdInvalidPortRange

CheckIPVersionSupport

VPort

WSGetServByPort

APortNumber

IdStackWindows

TIdSocketListWindows4

TIdSocketListWindowsL

TIdStackWindowsg

ReceiveMsg

WSTranslateSocketErrorMsg

SupportsIPv6

TIdStackWindows$

EIdIPVersionUnsupported

FSourcePort

FDestPort

SourcePort

DestPort

ftpTransfer

ftpReady

ftpAborted

FClientPortMin

FClientPortMax

FPort

FPeerPort

ClientPortMin

ClientPortMaxP

PeerPortSVW

EIdPortRequired

EIdTCPConnectionError

EIdTCPConnectionError(

EIdObjectTypeNotSupported

VMsgEnd

"EIdTransparentProxyUDPNotSupported

"EIdTransparentProxyUDPNotSupportedl>b

OpenUDP

CloseUDP

RecvFromUDP

VPeerPort

SendToUDP

FBoundPort

FBoundPortMax

FBoundPortMin

TIdTCPClientCustom'

TIdTCPClientCustom<Qb

IdTCPClient

BoundPort

BoundPortMax

BoundPortMin

TIdTCPClient

TIdTCPClient@Wb

IPAsString

%EIdSocksUDPNotSupportedBySOCKSVersion

%EIdSocksUDPNotSupportedBySOCKSVersion<ib

saUsernamePassword

FUDPSocksAssociation

FDefaultPort

DefaultPort

FLastCmdResult

TIdTCPConnectionB

RaiseExceptionForLastCmdResult

SendCmd

SendCmdf

TIdTCPConnection,

IdTCPConnection

LastCmdResult

URLDecode

URLEncode

PortP

Uh6%d

AURL

FHttpOnly

HttpOnlyP

FCommentURL

FPortList

FRecvPort

FUsePort

CommentURL

PortCount

UsePort

RecvPort

CompressFTPDeflate

CompressFTPToIO

DecompressFTPFromIO

DecompressFTPDeflate

CompressHTTPDeflate

DecompressHTTPDeflate

fPassThrough

PassThrough

MakeFTPSvrPort

MakeFTPSvrPasv

IdHTTPHeaderInfo

ProxyPassword

dsa_keygen

pub_key

priv_key

PEVP_PKEY

EVP_PKEY_union

EVP_PKEY

pkey

pkey_type

required_pkey_type

key_len

key_length

AUTHORITY_KEYID

keyid

PAUTHORITY_KEYID

X509_PUBKEY

public_key

PX509_PUBKEY

X509_CERT_AUX

PX509_CERT_AUX

cert_info

ex_nscert

get_cert_methods

cert_crl

ppem_password_cb

key_arg_length

key_arg

master_key_length

master_key

sess_cert

Ptlsext_ticket_key_cb!

cert_store

default_passwd_callback

default_passwd_callback_userdata

client_cert_cb

extra_certs

max_cert_list

cert

msg_callback

msg_callback_arg

client_cert_engine

tlsext_tick_key_name

tlsext_tick_hmac_key

tlsext_tick_aes_key

tlsext_ticket_key_cb

init_msg

read_key

write_key

key_material_length

key_material

tmp_cert_type

tmp_cert_length

tmp_cert_verify_md

tmp_cert_req

tmp_key_block_length

tmp_key_block

tmp_cert_request

msg_len

w_msg_hdr

r_msg_hdr

sslvrfFailIfNoPeerCert

TPasswordEvent

Certificate

fsRootCertFile

fsCertFile

fsKeyFile

RootCertFileP

CertFileP

KeyFile

LoadRootCert

LoadCert

RootCertFilet

CertFilet

KeyFile<

fPeerCert

PeerCert

fOnGetPassword

OnGetPasswordH

EIdOSSLLoadingRootCertError

EIdOSSLLoadingCertError

EIdOSSLLoadingKeyError

EIdOSSLLoadingKeyErrorh

TIdHTTPConnectionType

IdHTTP

TIdHTTPOption

TIdHTTPOptions

TIdHTTPProtocolVersion

TIdHTTPOnRedirectEvent

TIdHTTPOnHeadersAvailable

FHTTP

TIdHTTPResponse7

TIdHTTPResponseh*f

TIdHTTPRequest5

AHTTP

TIdHTTPRequest

TIdHTTPProtocol;

TIdHTTPProtocolL/f

FHTTPProto

TIdCustomHTTP'

TIdCustomHTTP

HTTPOptions

TIdHTTPD@f

TIdHTTP

EIdHTTPProtocolExceptionn

EIdHTTPProtocolExceptionpDf

ImportPalette

ImportColorTable

ImportDIBColors

ImportColorMap

ExportPalette

rmWindows20

rmWindows256

rmWindowsGray

rmMonochrome

rmQuantizeWindows

TMonochromeLookup7

TMonochromeLookup

TReportLevel

TDTExeName

TDTCMDStr

TDTFileUrls

IdHTTPWork

IdHTTPWorkBegin

IdHTTPWorkEnd

ReportType

UrlMon

IdTCPServer

IdCustomTCPServer

1.2.3

deflate 1.2.3 Copyright 1995-2005 Jean-loup Gailly

inflate 1.2.3 Copyright 1995-2005 Mark Adler

- -!-"-#-$-%-

% %!%"%#%$%%%&%'%(%)%*% %,%-%.%/%0%1%2%3%4%5%6%7%8%9%:%;%<$=%>%?%@%A%B%C%D%E%F%G%H%I%J%K%L%M%N%O%P%Q%R%S%T%U%V%W%X%Y%Z%[%\%]%^%_%`%a%b%c%d%e%f%g%h%i%j%k%l%m%n%o%p%q%r%s%t%u%v%w%x%y%z%{%|%}%~%

* *!*"*#*$*%*&*'*(*)*** *,*-*.*/*0*1*2*3*4*5*6*7*8*9*:*;*<*=*>*?*@*A*B*C*D*E*F*G*H*I*J*K*L*M*N*O*P*Q*R*S*T*U*V*W*X*Y*Z*[*\*]*^*_*`*a*b*c*d*e*f*g*h*i*j*k*l*m*n*o*p*q*r*s*t*u*v*w*x*y*z*{*|*}*~*

. .!.".#.$.%.&.'.(.).*. .,.-.../.0.1.2.3.4.5.6.7.8.9.:.;.<.=.>.?.@.A.B.C.D.E.F.G.H.I.J.K.L.M.N.O.P.Q.R.S.T.U.V.W.X.Y.Z.[.\.].^._.`.a.b.c.d.e.f.g.h.i.j.k.l.m.n.o.p.q.r.s.t.u.v.w.x.y.z.{.|.}.~.

C C!C"C#C$C%C&C'C(C)C*C C,C-C.C/C0C1C2C3C4C5C6C7C8C9C:C;C<C=C>C?C@CACBCCCDCECFCGCHCICJCKCLCMCNCOCPCQCRCSCTCUCVCWCXCYCZC[C\C]C^C_C`CaCbCcCdCeCfCgChCiCjCkClCmCnCoCpCqCrCsCtCuCvCwCxCyCzC{C|C}C~C

D D!D"D#D$D%D&D'D(D)D*D D,D-D.D/D0D1D2D3D4D5D6D7D8D9D:D;D<D=D>D?D@DADBDCDDDEDFDGDHDIDJDKDLDMDNDODPDQDRDSDTDUDVDWDXDYDZD[D\D]D^D_D`DaDbDcDdDeDfDgDhDiDjDkDlDmDnDoDpDqDrDsDtDuDvDwDxDyDzD{D|D}D~D

E E!E"E#E$E%E&E'E(E)E*E E,E-E.E/E0E1E2E3E4E5E6E7E8E9E:E;E<E=E>E?E@EAEBECEDEEEFEGEHEIEJEKELEMENEOEPEQERESETEUEVEWEXEYEZE[E\E]E^E_E`EaEbEcEdEeEfEgEhEiEjEkElEmEnEoEpEqErEsEtEuEvEwExEyEzE{E|E}E~E

F F!F"F#F$F%F&F'F(F)F*F F,F-F.F/F0F1F2F3F4F5F6F7F8F9F:F;F<F=F>F?F@FAFBFCFDFEFFFGFHFIFJFKFLFMFNFOFPFQFRFSFTFUFVFWFXFYFZF[F\F]F^F_F`FaFbFcFdFeFfFgFhFiFjFkFlFmFnFoFpFqFrFsFtFuFvFwFxFyFzF{F|F}F~F

M M!M"M#M$M%M&M'M(M)M*M M,M-M.M/M0M1M2M3M4M5M6M7M8M9M:M;M<M=M>M?M@MAMBMCMDMEMFMGMHMIMJMKMLMMMNMOMPMQMRMSMTMUMVMWMXMYMZM[M\M]M^M_M`MaMbMcMdMeMfMgMhMiMjMkMlMmMnMoMpMqMrMsMtMuMvMwMxMyMzM{M|M}M~M

S S!S"S#S$S%S&S'S(S)S*S S,S-S.S/S0S1S2S3S4S5S6S7S8S9S:S;S<S=S>S?S@SASBSCSDSESFSGSHSISJSKSLSMSNSOSPSQSRSSSTSUSVSWSXSYSZS[S\S]S^S_S`SaSbScSdSeSfSgShSiSjSkSlSmSnSoSpSqSrSsStSuSvSwSxSySzS{S|S}S~S

U U!U"U#U$U%U&U'U(U)U*U U,U-U.U/U0U1U2U3U4U5U6U7U8U9U:U;U<U=U>U?U@UAUBUCUDUEUFUGUHUIUJUKULUMUNUOUPUQURUSUTUUUVUWUXUYUZU[U\U]U^U_U`UaUbUcUdUeUfUgUhUiUjUkUlUmUnUoUpUqUrUsUtUuUvUwUxUyUzU{U|U}U~U

X X!X"X#X$X%X&X'X(X)X*X X,X-X.X/X0X1X2X3X4X5X6X7X8X9X:X;X<X=X>X?X@XAXBXCXDXEXFXGXHXIXJXKXLXMXNXOXPXQXRXSXTXUXVXWXXXYXZX[X\X]X^X_X`XaXbXcXdXeXfXgXhXiXjXkXlXmXnXoXpXqXrXsXtXuXvXwXxXyXzX{X|X}X~X

c c!c"c#c$c%c&c'c(c)c*c c,c-c.c/c0c1c2c3c4c5c6c7c8c9c:c;c<c=c>c?c@cAcBcCcDcEcFcGcHcIcJcKcLcMcNcOcPcQcRcScTcUcVcWcXcYcZc[c\c]c^c_c`cacbcccdcecfcgchcicjckclcmcncocpcqcrcsctcucvcwcxcyczc{c|c}c~c

d d!d"d#d$d%d&d'd(d)d*d d,d-d.d/d0d1d2d3d4d5d6d7d8d9d:d;d<d=d>d?d@dAdBdCdDdEdFdGdHdIdJdKdLdMdNdOdPdQdRdSdTdUdVdWdXdYdZd[d\d]d^d_d`dadbdcdddedfdgdhdidjdkdldmdndodpdqdrdsdtdudvdwdxdydzd{d|d}d~d

e e!e"e#e$e%e&e'e(e)e*e e,e-e.e/e0e1e2e3e4e5e6e7e8e9e:e;e<e=e>e?e@eAeBeCeDeEeFeGeHeIeJeKeLeMeNeOePeQeReSeTeUeVeWeXeYeZe[e\e]e^e_e`eaebecedeeefegeheiejekelemeneoepeqereseteuevewexeyeze{e|e}e~e

f f!f"f#f$f%f&f'f(f)f*f f,f-f.f/f0f1f2f3f4f5f6f7f8f9f:f;f<f=f>f?f@fAfBfCfDfEfFfGfHfIfJfKfLfMfNfOfPfQfRfSfTfUfVfWfXfYfZf[f\f]f^f_f`fafbfcfdfefffgfhfifjfkflfmfnfofpfqfrfsftfufvfwfxfyfzf{f|f}f~f

m m!m"m#m$m%m&m'm(m)m*m m,m-m.m/m0m1m2m3m4m5m6m7m8m9m:m;m<m=m>m?m@mAmBmCmDmEmFmGmHmImJmKmLmMmNmOmPmQmRmSmTmUmVmWmXmYmZm[m\m]m^m_m`mambmcmdmemfmgmhmimjmkmlmmmnmompmqmrmsmtmumvmwmxmymzm{m|m}m~m

s s!s"s#s$s%s&s's(s)s*s s,s-s.s/s0s1s2s3s4s5s6s7s8s9s:s;s<s=s>s?s@sAsBsCsDsEsFsGsHsIsJsKsLsMsNsOsPsQsRsSsTsUsVsWsXsYsZs[s\s]s^s_s`sasbscsdsesfsgshsisjskslsmsnsospsqsrssstsusvswsxsyszs{s|s}s~s

u u!u"u#u$u%u&u'u(u)u*u u,u-u.u/u0u1u2u3u4u5u6u7u8u9u:u;u<u=u>u?u@uAuBuCuDuEuFuGuHuIuJuKuLuMuNuOuPuQuRuSuTuUuVuWuXuYuZu[u\u]u^u_u`uaubucudueufuguhuiujukulumunuoupuqurusutuuuvuwuxuyuzu{u|u}u~u

x x!x"x#x$x%x&x'x(x)x*x x,x-x.x/x0x1x2x3x4x5x6x7x8x9x:x;x<x=x>x?x@xAxBxCxDxExFxGxHxIxJxKxLxMxNxOxPxQxRxSxTxUxVxWxXxYxZx[x\x]x^x_x`xaxbxcxdxexfxgxhxixjxkxlxmxnxoxpxqxrxsxtxuxvxwxxxyxzx{x|x}x~x

, ,!,",#,$,%,&,',(,),*, ,,,-,.,/,

?456789:;<=

!"#$%&'()* ,-./0123

1iu2.iua

oleaut32.dll

advapi32.dll

RegOpenKeyExW

RegCloseKey

user32.dll

kernel32.dll

UnhookWindowsHookEx

SetWindowsHookExW

MsgWaitForMultipleObjectsEx

MsgWaitForMultipleObjects

MapVirtualKeyW

LoadKeyboardLayoutW

GetKeyboardState

GetKeyboardLayoutNameW

GetKeyboardLayoutList

GetKeyboardLayout

GetKeyState

GetKeyNameTextW

EnumWindows

EnumThreadWindows

EnumChildWindows

ActivateKeyboardLayout

msimg32.dll

gdi32.dll

SetViewportOrgEx

GetViewportOrgEx

version.dll

GetCPInfo

RegUnLoadKeyW

RegSaveKeyW

RegRestoreKeyW

RegReplaceKeyW

RegQueryInfoKeyW

RegLoadKeyW

RegFlushKey

RegEnumKeyExW

RegDeleteKeyW

RegCreateKeyExW

ole32.dll

comctl32.dll

shell32.dll

ShellExecuteW

winspool.drv

winmm.dll

SHFolder.dll

uxtheme.dll

DWMAPI.DLL

windowscodecs.dll

0$0,0004080

1!1*161=1

8%8-858I8W8m8}8

? ?$?(?,?0?4?8?<?@?

7#7'7 7/7

?#?'? ?/?3?7?;?

;%; ;4;8;

3L4

2&2D2V2o2}2

9“9D9W9_9m9~9

:!:%:@:]:

2 2$2(2;3

5]5L5T5\5d5

0!00]0

5$787@7[7

5)5?5\5~5

=7=;=?=[=

9#9'9 9/9

4%5)5-5155595

5e6S6

>!>%>)>->1>5>9>=>

88g8

<*<5<{=(>

88Y8h8

>!>%>)>->1>5>

5!6%6)6-61656

9#9*91989?9

2%3-3Q3y3}3

00C0V0p0~0

3"4*424@4\4

4M4x4}4

1'1.161`1

9“9C9Y9g9u9

? ???^?}?

3 3=3\3{3

>#>'> >/>3>7>;>?>

; ;&;.;3;>;

1!1&1 1=1

= =$=(=,=0=

: :$:(:,:0:4:

333333333333333333

33333833

3333339

3333333333333338

:*"*"$3338

33333333

33333333333

3333333333338

33338?383

333333333333

:*3:"$3338

333333333333333

KWindows

 IdTCPServer

uhttpsend

.JvProgressUtils

0IdHTTPHeaderInfo

Media Finder Web Installer

Constraints.MinHeight

Constraints.MinWidth

Font.Charset

Font.Color

Font.Height

Font.Name

Font.Style

Margins.Left

Margins.Top

Margins.Right

Margins.Bottom

SkinData.SkinSection

SkinData.CustomColor

SkinData.CustomFont

Media Finder makes it very easy to find files on the Internet using the advanced search system and download them in automatic mode. The Media Finder supports most of the leading file sharing services and lets you avoid all the clutter of free downloads.

PROGRESSH

Picture.Data

\~~~[}}}\{{{]{{{]{{{]

i}}}jrrrgnnnhllljmmminnnhsssh|||g

AnimEffects.BlendOnMoving.Active

Options.dat

.us:,

ButtonHuge.bmp6

M&"8.YC

.wssGq

Master.bmp

/.sF-

*.YA^

%s&$o

%Xoe7O

_.wgQ

\3H.Gf

#.sp2

ot.Ne

%s/e^

q6.DV

(.zvHS

ExBorder.png

GlowBtn.png

GlowBtn1.png

GlowBtn2.pngK

GlowCAlone.png

GlowClose.pngB

GlowMax.png(

GlowMin.png

GlowNorm.png

MenuSupport.IcoLineSkin

ICOLINE!MenuSupport.ExtraLineFont.Charset

MenuSupport.ExtraLineFont.Color

clWindowText MenuSupport.ExtraLineFont.Height

MenuSupport.ExtraLineFont.Name

MenuSupport.ExtraLineFont.Style

K:\Work_mfp\design\skins

ThirdParty.ThirdEdits

ThirdParty.ThirdButtons

ThirdParty.ThirdBitBtns

ThirdParty.ThirdCheckBoxes

ThirdParty.ThirdGroupBoxes

ThirdParty.ThirdListViews

ThirdParty.ThirdPanels

ThirdParty.ThirdGrids

ThirdParty.ThirdTreeViews

ThirdParty.ThirdComboBoxes

ThirdParty.ThirdWWEdits

ThirdParty.ThirdVirtualTrees

ThirdParty.ThirdGridEh

ThirdParty.ThirdPageControl

ThirdParty.ThirdTabControl

ThirdParty.ThirdToolBar

ThirdParty.ThirdStatusBar

ThirdParty.ThirdSpeedButton

ThirdParty.ThirdScrollControl

ThirdParty.ThirdUpDown

ThirdParty.ThirdScrollBar

AddedTitle.Font.Charset

AddedTitle.Font.Color

AddedTitle.Font.Height

AddedTitle.Font.Name

AddedTitle.Font.Style

Padding.Left

Padding.Top

Padding.Right

Padding.Bottom

- Web Search

JFC543332>>=@@?100KJJ))(MLL322A@@==<//.ONN)('QPP221A@@:99877CCC555998;98

TsWebLabel

HoverFont.Charset

HoverFont.Color

HoverFont.Height

HoverFont.Name

HoverFont.Style

hXXp://VVV.snap.do/privacy.html

hXXp://VVV.snap.do/terms.html

hXXp://VVV.snap.do/eula.html

ohXXp://ns.adobe.com/xap/1.0/

" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c061 64.140949, 2010/12/07-10:57:01 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:B0D4D88513B9E111BE8DFF4D53C30479" xmpMM:DocumentID="xmp.did:290E06A2B95511E18B2DDAA6C9D291A7" xmpMM:InstanceID="xmp.iid:290E06A1B95511E18B2DDAA6C9D291A7" xmp:CreatorTool="Adobe Photoshop CS5.1 Windows"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:B1D4D88513B9E111BE8DFF4D53C30479" stRef:documentID="xmp.did:B0D4D88513B9E111BE8DFF4D53C30479"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>

Qq2B%U

DN.Pk

$hXXp://VVV.claro-search.com/eula.htm

$hXXp://rivalgaming.com/ClientEula.rg

. hXXp://rivalgaming.com/BrowserOptimization.rg

Play online right in your browser at rivalgaming.com

-hXXp://rivalgaming.com/ClientPrivacyPolicy.rg

MsG%X3

S2%d<-j>,\4!G%

You will be served advertising through in-text, pop-up/under, transitional and floating ads in your web browser, based on the content generally viewed.

) hXXp://VVV.rivalgaming.com/Deactivate.rg

7Free Access to PREMIUM online games at RivalGaming.com!

/hXXp://corp.mysearchresults.com/search-bar-eula

- hXXp://corp.mysearchresults.com/terms-of-use

.hXXp://corp.mysearchresults.com/privacy-policy

hXXp://m1988.ae/tc.txt

hXXp://m1988.ae/pp.txt

@hXXp://crossrider.com/apps/15068-ad-optimizer--15068-/terms/eula

ChXXp://crossrider.com/apps/15068-ad-optimizer--15068-/terms/privacy

Click 'Next' to continue and install the software and the SweetIM Toolbar. Access fun smileys for Facebook, Windows Live Messenger, Yahoo Messenger, ICQ and E-Mail Compatibles. 50 Million users worldwide.

SweetIM can be removed at any time via Windows Add/Remove Program.

hXXp://VVV.sweetim.com/eula.html

$hXXp://sweetim.com/eula.html#privacy

HorzScrollBar.Visible

VertScrollBar.Range

VertScrollBar.Style

IMPORTANT - PLEASE READ THE FOLLOWING AGREEMENT CAREFULLY.

THIS AGREEMENT SHALL GOVERN YOUR USE OF SWEETIM SOFTWARE, SERVICE AND SITE. IF, AFTER READING THIS AGREEMNET, YOU WISH TO USE THE SWEETIM SOFTWARE, WEBSITE AND ITS FEATURES, PLEASE INDICATE YOUR ACCEPTANCE HEREOF BY CLICKING "I AGREE" AT THE END.

This combined End User License Agreement / Terms / and Privacy policy (The "Agreement") constitutes a valid and binding agreement between SweetIM Technologies LTD. (formerly known as Imvent Ltd) which governs the use of the SweetIM Website, Software and its features (together with its affiliates, successors and assigns "SweetIM") and you ("you", or "your") for the use of the SweetIM Software, Network, Content and Services as defined below. You must enter into this agreement in order to install and use such SweetIM Software.

o SweetIM Tab: you will receive an additional Tab that is located on your Windows Live Messenger window. The SweetIM Tab will offer you various fun content and entertainment options from time to time.

3. SweetIM Toolbar for IE, for Firefox and for Chrome: A toolbar that is located on your internet browser and allows you to:

o Add SweetIM fun content such as emoticons, texticons and other animations to web mail, chat, forums and social networks

o Search the web through SweetIM Search, powered by Google (described below).

o SweetIM Search: allows you to search the web through:

o Home page and New Tab: Upon installation, we offer you to change your Home Page to the SweetIM Home Page which is essentially a Web search page. If you do not want to accept this change, you may uncheck the relevant box in the set-up process.

THE SOFTWARE (ASIDE FROM THE SWEETIM TOOLBAR FOR FIREFOX) CAN BE UNINSTALLED FROM THE "ADD OR REMOVE PROGRAMS" DIALOG BOX IN THE WINDOWS CONTROL PANEL.

o To uninstall SweetIM Toolbar: If you are using Internet Explorer, go to "Add Remove Programs" in your Control panel. Look for "SweetIM Toolbar For Internet Explorer" program and click the "remove" button. If you are using Firefox browser, please follow the uninstall instructions below:

4. Close all Firefox windows. When you reopen Firefox, the Toolbar will be uninstalled.

o Go to FAQ page: hXXp://VVV.sweetim.com/help_simie.asp#inst and follow the "Uninstall" section

o Contact our Support team that is available for assistance within less than 72 hours from entering a query into hXXp://VVV.sweetim.com/help

The SweetIM Software is being licensed to you by SweetIM on an "AS IS" basis, for your private personal use only. Subject to the terms of this Agreement, SweetIM and its current, and future , parent and subsidiary companies (collectively "Licensor", "we", "us" or "our") hereby grants you a limited, non-exclusive, personal, non-sublicensable, non-assignable license to download, install and use the SweetIM Software, including any online or enclosed documentation, data distributed to your computer for processing and any future programming fixes, updates and upgrades provided to you (collectively, the "SweetIM Software") onto a computer for your sole use to install, interact with and utilize the SweetIM Software, including the content and features contained therein and the services and the Network related thereto ("Services"). The SweetIM Software may only be used in connection with the Services. As used herein, the term "Network" means the universe of computers connected to the Internet that are operating the SweetIM Software.

(a) Notwithstanding anything to the contrary, you may not: (i) remove any proprietary notices from the Services, SweetIM Software or any copy thereof; (ii) cause, permit or authorize the modification, creation of derivative works, translation, reverse engineering, decompiling or disassembling or hacking of the SweetIM Software, the Services or the Network; (iii) sell, assign, rent, lease, act as a service bureau, or grant rights in the SweetIM Software or Services, including, without limitation, through sublicense, to any other entity without the prior written consent of SweetIM; (iv) export or re-export the SweetIM Software in violation of export laws; (v) use the SweetIM Software or Services for any commercial purpose or the benefit of any third party or charge any person for the use of the SweetIM Software; or (vi) use the SweetIM Software or Services to, or in any way that would violate any applicable law, regulation or ordinance; (vii) collect any information or communication about the Network or users of the SweetIM Software or Services by monitoring, interdicting or intercepting any process of the SweetIM Software or the Network; and (viii) use any type of bot, spider virus, clock, timer, counter, worm, software lock, drop dead device, packet-sniffer, Trojan-horse routing, trap door, time bomb or any other codes or instructions that are designed to be used to provide a means of surreptitious or unauthorized access or that are designed to distort, delete, damage or disassemble the SweetIM Software, the Services or the Network. Furthermore, you may not use the SweetIM Software or Services to develop, generate, transmit or store information that: (A) infringes any third party's intellectual property or other proprietary right; (B) is defamatory, harmful, abusive, obscene or hateful; (C) in any way obstructs or otherwise interferes with the normal performance of another person's use of the SweetIM Software or Services, (D) performs any unsolicited commercial activity not permitted by applicable law; (E) is harassment or a violation of privacy or threatens other people or groups of people; and (F) impersonates any other person, or steals or assumes any person's identity (whether a real identity or online nickname or alias).

In order to receive the benefits provided by the SweetIM Software, you hereby grant permission for the SweetIM Software to (i) utilize the processor and bandwidth of your computer, only in order to provide you with the Services (ii) use your Instant Messenger's identification that you have submitted to your instant messenger provider in order to login to SweetIM and receive the SweetIM Services for Instant Messenger.

4.Risks

If you choose to use the SweetIM Software or the Services, you may be exposed to a variety of risks such as : (i) unauthorized invasion of your privacy during, or as a result of, your or another's use of the Service (ii) unauthorized exposure of information and material posted by you or others on or through the Services. (iii) potential exposure to objectionable material and/or parties, such as content and messages that may offend and which may contain contaminated files., (iv) spoofing, eavesdropping, sniffing, spamming, breaking passwords, harassment, fraud, forgery, "imposturing", electronic trespassing, tampering, hacking, nuking, system contamination including without limitation use of viruses, worms and Trojan horses causing unauthorized, damaging or harmful access and/or retrieval of information and data on your computer and other forms of activity that may even be illegal.

(d) SweetIM will occasionally update this Agreement and Privacy Policy. When such changes take place, we will also revise the "Effective Date" of the Privacy Policy. For material changes to this Agreement or Privacy Policy, you will be notified by SweetIM as it will place prominent notice on its Web site. SweetIM encourages you to periodically review this Agreement and Privacy Policy.

7. Installation, Operation and Removal

UPON INSTALLATION SweetIM software will be added to your Instant Messenger allowing you to add Emoticons, other graphics and sounds to your chats. In addition, SweetIM toolbar will be added to your Internet browser in the form of a toolbar. The toolbar allows you to insert Emoticons and various graphical elements to your Facebook, web based emails, blogs, forums and social networks. It also provides you with a search box, and easy access to powerful Web search directly from your browser. SweetIM for Internet Explorer can be minimized by right clicking the toolbar and selecting it. In addition, you will receive SweetIM Search Assistance feature which provides you with relevant search results when you place a search query in the browser address bar (as described above under Search Assistance)

"SWEETIM TOOLBAR FOR INTERNET EXPLORER", INCLUDING SWEETIM FOR FACEBOOK AND "SWEETIM FOR MESSENGER" SOFTWARE CAN BE UNINSTALLED FROM THE "ADD OR REMOVE PROGRAMS" DIALOG BOX IN THE WINDOWS CONTROL PANEL:

o To uninstall SweetIM Toolbar including SweetIM for Facebook: If you are using Internet Explorer, go to "Add Remove Programs" in your Control panel. Look for "SweetIM Toolbar For Internet Explorer" program and click the "remove" button. If you are using Firefox browser, please follow the uninstall instructions below:

When a user uses one of SweetIM search feature to search the Web, the query reaches our servers. As all standard Web pages, besides the keyword query, it includes information such as IP address, default language setting, browser type, and an anonymous unique ID. SweetIM uses this information in order to appropriately process your search request and to serve you relevant and better search results.

Examples include information on your preferred language; we currently support our search in 15 languages, and the IP address helps us serve the user with the relevant one.

Importantly, all collected information of search queries are recorded on a non-personally identifiable basis and kept strictly anonymous. All search activity information is researched and evaluated only on an aggregated basis (except in response to a customer service inquiry or legal process), and we do not disclose any non-aggregated information to third parties, except as required by a valid legal process such as a search warrant, subpoena, statute, or court order, or to protect someone's safety.

This privacy policy applies to the SweetIM Software and each of the related Web sites (the "Web Sites") maintained by SweetIM ("we" or "us"). In the event of any inconsistency between this privacy policy and a policy listed on one of the other Web Sites, this policy shall control.

We do not collect personal identification information including names, address', phone numbers. We do collect information necessary to enable certain features in SweetIM (such as your Instant Messenger Version). We do not sell, rent or trade any personally identifiable information you provide when using the SweetIM Software or the Web Sites.

We gather certain information such as internet protocol (IP) addresses, browser user agent, referring page, date/time stamp and cookies automatically. We use such information to analyze trends, to administer the site, to track users' movements around the site and to gather demographic information to better provide our services.

When you visit the SweetIM Web Sites, we may place a small text file-called a "cookie"-on your computer that allows us to improve the quality of our service, and to store your preferences and settings. Importantly, a cookie does not allow us to obtain any personally identifiable information (such as your real name or address) unless you have specifically provided such information when using the Web Sites or the Software. The search feature sends a request to our servers while processing a search query that you have inputted. This request includes the keyword query, source (Toolbar, IE bar, related links, etc

) and all HTTP data transferred automatically by the browser (IP Address, User Agent, Cookies, etc

If any of the Web Sites or the Software is ever sold or all or substantially all of the assets relating to a Web Site or the Software are transferred to another entity, we may transfer all information provided by or collected from you, including personally identifiable information, in order to ensure continuity of your service. We will disclose information, including personally identifiable information, data acquired by cookies, and other data, where required by a subpoena, interception order or other lawful process. We also reserve the right to disclose such information when we believe, in our sole judgment and to the extent consistent with applicable law, that such disclosure is necessary to protect the rights or safety of others or to enforce, or protect our rights under, this Agreement.

(b) You agree that you will not use any automatic or manual device or process to interfere or attempt to interfere with the proper working of the SweetIM Software, Network or Services, except to remove the SweetIM Software from a computer of which you are an owner or authorized user in a manner permitted by this Agreement. You may not violate or attempt to violate the security of the SweetIM Software, Network or Services. SweetIM reserves the right to investigate occurrences which may involve such violations, and may involve, and cooperate with, law enforcement authorities in prosecuting users who have participated in such violations.

The Software may provide, or third parties may provide, search results or other links to other World Wide Web sites or resources. Because we have no control over such sites and resources, you acknowledge and agree that we are not responsible for the availability of such external sites or resources, and do not endorse and are not responsible or liable for any Content, advertising, products, or other materials on or available from such sites or resources. You further acknowledge and agree that we shall not be responsible or liable, directly or indirectly, for any damage or loss caused or alleged to be caused by or in connection with use of or reliance on any such Content, goods or services available on or through any such site or resource.

(a) IN NO EVENT AND UNDER NO LEGAL THEORY, SHALL SWEETIM, ITS AFFILIATES, PARENT COMPANIES, SUBSIDIARIES, OFFICERS, DIRECTORS, EMPLOYEES, AGENTS OR NETWORK SERVICE PROVIDERS BE LIABLE WHETHER IN CONTRACT, WARRANTY, TORT (INCLUDING NEGLIGENCE (WHETHER ACTIVE, PASSIVE OR IMPUTED), PRODUCT LIABILITY OR STRICT LIABILITY OR OTHER THEORY), FOR ANY INDIRECT, INCIDENTAL, SPECIAL OR CONSEQUENTIAL DAMAGES (INCLUDING WITHOUT LIMITATION ANY LOSS OF DATA, SERVICE INTERRUPTION, COMPUTER FAILURE OR PECUNIARY LOSS OF ANY TYPE , DAMAGES FOR LOSS OF GOODWILL, BUSINESS INTERRUPTION, COMPUTER FAILURE OR MALFUNCTION, LOSS OF BUSINESS PROFITS, LOSS OF BUSINESS INFORMATION, OR ANY AND ALL OTHER COMMERCIAL DAMAGES OR LOSSES) ARISING OUT OF THE USE OR INABILITY TO USE THE SWEETIM SOFTWARE OR THE SERVICES, EVEN IF SWEETIM HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.

15. Customer Support

SweetIM may, but is not required to, provide you with customer support ("Support"). SweetIM may terminate any Support it provides at any time in its sole discretion.

SweetIM reserves all rights not expressly granted herein. SweetIM may modify this Agreement at any time by providing such revised Agreement to you or posting the revised Agreement on its website located at SweetIM VVV.sweetim.com. Your continued use of the SweetIM Software and/or Services shall constitute your acceptance of such revised Agreement. You may not assign this Agreement or any rights hereunder. Nothing in this Agreement shall constitute a partnership or joint venture between you and SweetIM. Should any term or provision hereof be deemed invalid, void or unenforceable either in its entirety or in a particular application, the remainder of this Agreement shall nonetheless remain in full force and effect. The failure of SweetIM at any time or times to require performance of any provision hereof shall in no manner affect its right at a later time to enforce the same unless the same is waived in writing. This Agreement shall be governed by and construed in accordance with the laws of Israel without regard to its conflict of law rules. Any legal proceeding arising out or relating to this Agreement will be subject to the exclusive jurisdiction of any court of Israel and you irrevocably consent to the jurisdiction of such courts. The terms set forth in this Agreement and any related service agreements constitute the final, complete and exclusive agreement with respect to the SweetIM Software and Services and may not be contradicted, explained or supplemented by evidence of any prior agreement, any contemporaneous oral agreement or any consistent additional terms. SweetIM may at its sole discretion assign this Agreement to a subsidiary or sister company, without giving prior notice.

From time-to-time we may provide you the opportunity to participate in contests or surveys on our site. If you participate, we will request certain personally identifiable information from you. Participation in these surveys or contests is completely voluntary and you therefore have a choice whether or not to disclose this information. The requested information typically includes contact information (such as name and shipping address), and demographic information (such as zip code).

1hXXp://VVV.uniblue.com/software/speedupmypc/eula/

hXXp://VVV.uniblue.com/privacy/

{U(yU,sQ.tM&u<

{Y.wX(qS"

wG%sT9

pD.dI.

}OÂ

w;%d(

wb_I0XC/YE5ZC0iG)eC%U0

omB%uG/

up=%c(

By 'checking' You agree to CouponDropDown and . CouponDropDown is add-supported software that is provided at no cost and may display advertisements in websites as you view them.

'hXXp://VVV.coupondropdown.com/terms.php

* hXXp://VVV.coupondropdown.com/privacy.php

mhXXp://ns.adobe.com/xap/1.0/

" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:48B4F59C97BFE111B531EA08F2E41C0F" xmpMM:DocumentID="xmp.did:B3B30C59FBFD11E1823D9C1022C1B80D" xmpMM:InstanceID="xmp.iid:B3B30C58FBFD11E1823D9C1022C1B80D" xmp:CreatorTool="Adobe Photoshop CS5 Windows"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:CC259288E2C4E111BB0E847A06BBA8B1" stRef:documentID="xmp.did:48B4F59C97BFE111B531EA08F2E41C0F"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>

.rkD0

[z.Zx

$hXXp://coupish.com/terms-conditions/

# hXXp://coupish.com/privacy-policy/

y.ua.

l`GTF)XJ-ZM.TG'iI

sS"vV%uU$

sV.oS)

user data is used by Wajam to give you personal results from friends based on what you search for. Wajam may use cookies, pixels and/or other means to collect your IP address, URLs of the pages you visit and other non-personally identifiable information in order to give you personal search results and show you advertising. You may opt out of third party advertising in your account settings. The browser add-on can be removed or disabled at any time.

%hXXp://VVV.wajam.com/terms-of-service

hXXp://VVV.wajam.com/privacy

hXXp://VVV.wajam.com/faq

Yandex.Browser

-hXXp://legal.yandex.com.tr/browser_agreement/

.hXXp://legal.yandex.com.tr/elements_agreement/

#Download and install Yandex.Browser

$Install Media Finder and Yandex.Bar

*hXXp://legal.yandex.com/bar_agreement_int/

Install Yandex.Bar for browsers

C6.OA;

DhXXp://VVV.babylon.com/redirects/redir.cgi?type=babylon_toolbar_eula

Install the WhiteSmoke Community Toolbar, set the WhiteSmoke web search as my default search, change my home page, and notify me of changes. Please send me news and useful info (I can always opt out of receiving them).

)hXXp://whitesmokebar.ourtoolbar.com/eula/

,hXXp://whitesmokebar.ourtoolbar.com/privacy/

2hXXp://VVV.conduit.com/Privacy/content-policy.aspx

WSet the WhiteSmoke customized web search as my default search and notify me of changes.

fSet my homepage to the WhiteSmoke customized web search as my default search and notify me of changes.

*hXXp://VVV.jollywallet.com/jollywallet/tou

.hXXp://VVV.jollywallet.com/jollywallet/privacy

{JollyWallet pays you cash-back on over 2500 leading online stores such as Gap.com, VictoriasSecret, BestBuy and many more.

2hXXp://www2.noproblemppc.com/LegalEndUserTerms.htm

-hXXp://www2.noproblemppc.com/LegalPrivacy.htm

Recommended: For cleaning, repairing and fixing all PC errors, use FastAgain PC Booster. FastAgain can improve system stability, increase speed and prevent your computer from crashing. The developers of FastAgain are Microsoft Gold Certified Partners and have created software that has been downloaded by over 30 million people.

1 hXXp://fastagain.activeris.com/home/privacy.html

. hXXp://fastagain.activeris.com/home/EULA.html

hXXp://legal.aol.com/TOS

hXXp://privacy.aol.com/

Set AOL.com as mu home page.

hXXp://idlebucks.com/eula.php

hXXp://idlebucks.com/privacy.php

4Idlebucks.com - Earn money for your idle connection!

)hXXp://VVV.infoatoms.com/terms-of-service

'hXXp://VVV.infoatoms.com/privacy-policy

Download tons of fun smilies, animations and games for social networks and IM., Messenger and e-mail. Personalize your Homepage with Iminent SearchTheWeb. Get weekly new content thanks to advertising on the pages you browse.

you agree to the Iminent , and , consent to install Iminent and the Iminent Toolbar, to set SearchTheWeb as your default search engine and homepage, to disable some elements of incompatible software and notify me of upcoming content that will update user application data.

Supported by Windows XP, Vista & 7. Provided by .

) hXXp://VVV.iminent.com/corporate/privacy

%hXXp://VVV.iminent.com/corporate/eula

hXXp://VVV.sien.com/contact/

&hXXp://VVV.iminent.com/corporate/terms

* hXXp://VVV.iminent.com/service/iminentapp

WMake and keep Iminent SearchTheWeb your default search engine and notify me of changes.

9Make and keep Iminent SearchTheWeb your default homepage.

%Download and Install Iminent toolbar.

FDownload and install Iminent on multiple browsers (IE, FF and Chrome).

/hXXp://VVV.endless-spaces.ru/photofun/eula.html

bPhotoFun is ad supported software that politely presents photos on free spaces on your PC screen.

This software can be removed at any time via the Add/Remove Programs Utility. Strongvault is a free application with a 500MB storage limit and is supported by advertising within the application. There is an option to upgrade to the full version for $5.99/month. After installation, you will be required to register and will need to provide a valid e-mail address. Credit Card info is required for upgrades.

"hXXp://strongvaultfree.com/terms_2

 hXXp://strongvaultfree.com/privacy_policy_2

%Free Online Back-up for your Computer

*hXXp://VVV.browseforthecause.com/terms.php

,hXXp://VVV.browseforthecause.com/privacy.php

I*Qtrax player can be removed at any time via Windows Add/Remove programs.

@JaVVY]]]]]]]]]]]]]]]]]]]]]]]]]]]RW_.Dn N

]]]___{{{

]]]___|||

!#&:;=RRS]]]]]][[\IKQ%c

%C$,B05E8;G=>I?AIABIABJ?@I<>H48F*0B

'hXXp://VVV.qtrax.com/TermsAndConditions

"hXXp://VVV.qtrax.com/PrivacyPolicy

Yontoo is supported by ads on sites with Yontoo features. Yontoo ads are labeled and

non-personally identifiable information (including search and URL history) to improve

and URL history) to improve performance and ad relevance.

(hXXp://VVV.yontoo.com/PrivacyPolicy.aspx

)hXXp://VVV.yontoo.com/TermsOfService.aspx

As part of the installation, you can also get the official YTtoolbar Toolbar for Windows

, Firefox

and Chrome

$hXXp://yttoolbar.ourtoolbar.com/eula

Install the YTtoolbar toolbar and search protect by Conduit. Set the YTtoolbar customized web search as my default search, change my home page and notify me of changes. Send me info from Toolbar and apps (can be disabled later).

2hXXp://storage.conduit.com/ps/legal/learnmore.html

-hXXp://yttoolbar.ourtoolbar.com/contentpolicy

  hXXp://yttoolbarbar.ourtoolbar.com/privacy

]Set my home page to YTtoolbar web search page. Enable Search Protect to notify me of changes.

kSet the YTtoolbar customized web search as my default search. Enable Search Protect to notify me of changes

"hXXp://VVV.qwertybox.com/#/privacy

hXXp://VVV.qwertybox.com/#/terms

FormKeyPress

Constraints.MaxHeight

Constraints.MaxWidth

Glyph.Data

Brush.Color

Pen.Style

BoundLabel.Active

BoundLabel.Caption

BoundLabel.Indent

BoundLabel.Layout

BoundLabel.MaxWidth

BoundLabel.UseSkinColor

GlyphMode.Grayed

Colors.Strings

sEditHexKeyPress

;p.fE?M

pn.QYb

.pToH#h

U}.rm"

9N/.bj

C.wcy-BM*!

_f%DU

c|6.bHo

md6.fK

.ECWG>/9

.uQsA

[%xvX^

5gR"%c=

{.xbtd(

^}>.Yq

,V%CL

%snST

4Tz(|-c}V

g.Krly

.uk7Q/

.nx0D]

.yftY

r.JXd

9%.Do

)4'%U

pE.MS

 f'%X!

4S%F<

IQ9%X

4=.ir

Q%sFd

x1Fw.Ab

%xcn]

%ui'1

L#p%x

k/.nF 

%D" E

-Ud7}

1v~.atd

\4d.ya

>..IB1

we.kR

\2%CV

2).vD

.LeDEC2

^]_}WEb

%cpbd

.oMea

\v#-n9}

N'.le

.Pi)\Q

3^.Gv

iUdp

CMdx<:

.IDATx

R.ad*

X.pjeI

mA.AE

[x.Zl

%sIDATx

.j8.Zv

.BN^a

Gt.Iy

%S(ZV

x^(X%cX

.GKK 

:^.uB

u.aj|

.nOV-`DG

fW.Yqa

.ZU@s

.eQ)`

.BG{.

.Lp[)F

gJ|o.mo36@

4.okA6

F .ok

C.oJYf

O9%X|J

u3=%x

crT,Yf

.cqQi

.COL0

-#.dc

.XnU4

-$<...555%%%-#=!

<!)>)9#;

<.HLumMeu

"*61-3!5

?>$=5%!.6

.aljdk

J%XmM

$Z%x;

\.XPLf

FfB%c

Q%Dk=X

.wXvZc

[.DZQ

\k %D!T

version="14.0.3615.26342"

name="Microsoft.Windows.Common-Controls"

version="6.0.0.0"

publicKeyToken="6595b64144ccf1df"

<requestedExecutionLevel

MSWHEEL_ROLLMSG

MSH_WHEELSUPPORT_MSG

MSH_SCROLL_LINES_MSG

TaskDialogIndirect

%s[%d]

%s_%d

.Owner

USER32.DLL

\\?\UNC\

%s (*.%s)|*.%1:s

%s (%s)|%1:s|

SOFTWARE\Microsoft\Windows NT\CurrentVersion\FontSubstitutes

clWebSnow

clWebFloralWhite

clWebLavenderBlush

clWebOldLace

clWebIvory

clWebCornSilk

clWebBeige

clWebAntiqueWhite

clWebWheat

clWebAliceBlue

clWebGhostWhite

clWebLavender

clWebSeashell

clWebLightYellow

clWebPapayaWhip

clWebNavajoWhite

clWebMoccasin

clWebBurlywood

clWebAzure

clWebMintcream

clWebHoneydew

clWebLinen

clWebLemonChiffon

clWebBlanchedAlmond

clWebBisque

clWebPeachPuff

clWebTan

clWebYellow

clWebDarkOrange

clWebRed

clWebDarkRed

clWebMaroon

clWebIndianRed

clWebSalmon

clWebCoral

clWebGold

clWebTomato

clWebCrimson

clWebBrown

clWebChocolate

clWebSandyBrown

clWebLightSalmon

clWebLightCoral

clWebOrange

clWebOrangeRed

clWebFirebrick

clWebSaddleBrown

clWebSienna

clWebPeru

clWebDarkSalmon

clWebRosyBrown

clWebPaleGoldenrod

clWebLightGoldenrodYellow

clWebOlive

clWebForestGreen

clWebGreenYellow

clWebChartreuse

clWebLightGreen

clWebAquamarine

clWebSeaGreen

clWebGoldenRod

clWebKhaki

clWebOliveDrab

clWebGreen

clWebYellowGreen

clWebLawnGreen

clWebPaleGreen

clWebMediumAquamarine

clWebMediumSeaGreen

clWebDarkGoldenRod

clWebDarkKhaki

clWebDarkOliveGreen

clWebDarkgreen

clWebLimeGreen

clWebLime

clWebSpringGreen

clWebMediumSpringGreen

clWebDarkSeaGreen

clWebLightSeaGreen

clWebPaleTurquoise

clWebLightCyan

clWebLightBlue

clWebLightSkyBlue

clWebCornFlowerBlue

clWebDarkBlue

clWebIndigo

clWebMediumTurquoise

clWebTurquoise

clWebCyan

clWebPowderBlue

clWebSkyBlue

clWebRoyalBlue

clWebMediumBlue

clWebMidnightBlue

clWebDarkTurquoise

clWebCadetBlue

clWebDarkCyan

clWebTeal

clWebDeepskyBlue

clWebDodgerBlue

clWebBlue

clWebNavy

clWebDarkViolet

clWebDarkOrchid

clWebMagenta

clWebDarkMagenta

clWebMediumVioletRed

clWebPaleVioletRed

clWebBlueViolet

clWebMediumOrchid

clWebMediumPurple

clWebPurple

clWebDeepPink

clWebLightPink

clWebViolet

clWebOrchid

clWebPlum

clWebThistle

clWebHotPink

clWebPink

clWebLightSteelBlue

clWebMediumSlateBlue

clWebLightSlateGray

clWebWhite

clWebLightgrey

clWebGray

clWebSteelBlue

clWebSlateBlue

clWebSlateGray

clWebWhiteSmoke

clWebSilver

clWebDimGray

clWebMistyRose

clWebDarkSlateBlue

clWebDarkSlategray

clWebGainsboro

clWebDarkGray

clWebBlack

%s%s%s%s%s%s%s%s%s%s

\SYSTEM\CurrentControlSet\Control\Keyboard Layouts\

crSQLWait

%s (%s)

imm32.dll

System\CurrentControlSet\Control\Keyboard Layouts\%.8x

$URL: hXXps://jcl.svn.sourceforge.net/svnroot/jcl/tags/JCL-2.3-Build4197/jcl/source/common/JclResources.pas $

$URL: hXXps://jcl.svn.sourceforge.net/svnroot/jcl/tags/JCL-2.3-Build4197/jcl/source/windows/JclWin32.pas $

JCL\source\windows

$URL: hXXps://jcl.svn.sourceforge.net/svnroot/jcl/tags/JCL-2.3-Build4197/jcl/source/common/JclStringConversions.pas $

$URL: hXXps://jcl.svn.sourceforge.net/svnroot/jcl/tags/JCL-2.3-Build4197/jcl/source/common/Jcl8087.pas $

$URL: hXXps://jcl.svn.sourceforge.net/svnroot/jcl/tags/JCL-2.3-Build4197/jcl/source/common/JclMath.pas $

windows-1256

windows-1257

windows-1250

windows-1251

windows-1253

windows-1255

csShiftJIS

csWindows31J

windows-874

windows-1254

ISO_646.irv:1991

windows-1258

Windows-1252

$URL: hXXps://jcl.svn.sourceforge.net/svnroot/jcl/tags/JCL-2.3-Build4197/jcl/source/common/JclCharsets.pas $

$URL: hXXps://jcl.svn.sourceforge.net/svnroot/jcl/tags/JCL-2.3-Build4197/jcl/source/common/JclStreams.pas $

$URL: hXXps://jcl.svn.sourceforge.net/svnroot/jcl/tags/JCL-2.3-Build4197/jcl/source/common/JclLogic.pas $

$URL: hXXps://jcl.svn.sourceforge.net/svnroot/jcl/tags/JCL-2.3-Build4197/jcl/source/common/JclDateTime.pas $

$URL: hXXps://jcl.svn.sourceforge.net/svnroot/jcl/tags/JCL-2.3-Build4197/jcl/source/windows/JclRegistry.pas $

$URL: hXXps://jcl.svn.sourceforge.net/svnroot/jcl/tags/JCL-2.3-Build4197/jcl/source/windows/JclSecurity.pas $

$URL: hXXps://jcl.svn.sourceforge.net/svnroot/jcl/tags/JCL-2.3-Build4197/jcl/source/windows/JclShell.pas $

$URL: hXXps://jcl.svn.sourceforge.net/svnroot/jcl/tags/JCL-2.3-Build4197/jcl/source/common/JclFileUtils.pas $

$URL: hXXps://jcl.svn.sourceforge.net/svnroot/jcl/tags/JCL-2.3-Build4197/jcl/source/windows/JclConsole.pas $

@$URL: hXXps://jcl.svn.sourceforge.net/svnroot/jcl/tags/JCL-2.3-Build4197/jcl/source/common/JclSysUtils.pas $

$URL: hXXps://jcl.svn.sourceforge.net/svnroot/jcl/tags/JCL-2.3-Build4197/jcl/source/common/JclAnsiStrings.pas $

$URL: hXXps://jcl.svn.sourceforge.net/svnroot/jcl/tags/JCL-2.3-Build4197/jcl/source/common/JclIniFiles.pas $

$URL: hXXps://jcl.svn.sourceforge.net/svnroot/jcl/tags/JCL-2.3-Build4197/jcl/source/windows/Snmp.pas $

$URL: hXXps://jcl.svn.sourceforge.net/svnroot/jcl/tags/JCL-2.3-Build4197/jcl/source/common/JclSysInfo.pas $

Mathematical Operators

Supplemental Mathematical Operators

$URL: hXXps://jcl.svn.sourceforge.net/svnroot/jcl/tags/JCL-2.3-Build4197/jcl/source/common/JclUnicode.pas $

@$URL: hXXps://jcl.svn.sourceforge.net/svnroot/jcl/tags/JCL-2.3-Build4197/jcl/source/common/JclWideStrings.pas $

$URL: hXXps://jcl.svn.sourceforge.net/svnroot/jcl/tags/JCL-2.3-Build4197/jcl/source/common/JclStrings.pas $

@$URL: hXXps://jcl.svn.sourceforge.net/svnroot/jcl/tags/JCL-2.3-Build4197/jcl/source/common/JclSynch.pas $

$URL: hXXps://jcl.svn.sourceforge.net/svnroot/jcl/tags/JCL-2.3-Build4197/jcl/source/common/JclUnitVersioning.pas $

$URL:

$URL: hXXps://jcl.svn.sourceforge.net/svnroot/jcl/tags/JCL-2.3-Build4197/jcl/source/common/JclBase.pas $

@$URL: hXXps://jcl.svn.sourceforge.net/svnroot/jcl/tags/JCL-2.3-Build4197/jcl/source/common/JclMime.pas $

$URL: hXXps://jcl.svn.sourceforge.net/svnroot/jcl/tags/JCL-2.3-Build4197/jcl/source/common/JclRTTI.pas $

Invalid ZStream operation!

Webdings

c:\Skins

extracted.asz

WEBBUTTON

1.tmp

.JPEG

2.tmp

" skin. Please, update a skins to latest or link with the AlphaControls support for upgrading of existing skin.

This version of the skin have not complete support by used AlphaControls package release.

Cannot load image. %s not supported for %s files.

Cannot load image. Palette in %s file is invalid.

Cannot load image. Invalid or unexpected %s image format.

Cannot load image. CRC error found in %s file.

Cannot load image. Extra compressed data found in %s file.

Cannot load image. Compression error found in %s file.

Invalid color format in %s file.

Conversion between indexed and non-indexed pixel formats is not supported.

acMDIIcons

%d.%d.%d.%d

ws2_32.dll

owship6.dll

HTTPS

Synapse TCP/IP Socket error %d: %s

Operation would block

Operation now in progress

Operation already in progress

Socket operation on nonsocket

Protocol not supported

Socket not supported

Operation not supported on Socket

Protocol family not supported

Address family not supported

Winsock DLL cannot support this application

0.0.0.1

HTTP/1.0

HTTP/

SSL/TLS support is not compiled!

Without SSL support

Mozilla/4.0 (compatible; Synapse)

HTTP/

%s:%s="%s"

%s="%s"

C:\Builds\TP\indysockets\lib\System\IdStreamVCL.pas

C:\Builds\TP\indysockets\lib\System\IdGlobal.pas

%s, %.2d %s %.4d %s %s

%s, %.2d-%s-%.2d %s %s

WS2_32.DLL

WSAAsyncGetServByPort

WSAJoinLeaf

MSWSOCK.DLL

WSARecvMsg

WSASendMsg

Wship6.dll

Fwpuclnt.dll

C:\Builds\TP\indysockets\lib\System\IdStack.pas

10.5.5

C:\Builds\TP\indysockets\lib\Core\IdIOHandler.pas

C:\Builds\TP\indysockets\lib\Core\IdIOHandlerStack.pas

ISO_646.basic:1983

ISO_646.irv:1983

csISO16Portuguese

csISO84Portuguese2

windows-936

ISO-8859-1-Windows-3.0-Latin-1

csWindows30Latin1

ISO-8859-1-Windows-3.1-Latin-1

csWindows31Latin1

ISO-8859-2-Windows-Latin-2

csWindows31Latin2

ISO-8859-9-Windows-Latin-5

csWindows31Latin5

csMicrosoftPublishing

Windows-31J

windows-1252

.nml=animation/narrative

.aiff=audio/x-aiff

.au=audio/basic

.mid=midi/mid

.mp3=audio/x-mpg

.m3u=audio/x-mpegurl

.qcp=audio/vnd.qcelp

.ra=audio/x-realaudio

.wav=audio/x-wav

.gsm=audio/x-gsm

.wax=audio/x-ms-wax

.wma=audio/x-ms-wma

.ram=audio/x-pn-realaudio

.mjf=audio/x-vnd.AudioExplosion.MjuiceMediaFile

.bmp=image/bmp

.gif=image/gif

.jpg=image/jpeg

.jpeg=image/jpeg

.jpe=image/jpeg

.pict=image/x-pict

.png=image/x-png

.svg=image/svg-xml

.tif=image/x-tiff

.rf=image/vnd.rn-realflash

.rp=image/vnd.rn-realpix

.ico=image/x-icon

.art=image/x-jg

.pntg=image/x-macpaint

.qtif=image/x-quicktime

.sgi=image/x-sgi

.targa=image/x-targa

.xbm=image/xbm

.psd=image/x-psd

.pnm=image/x-portable-anymap

.pbm=image/x-portable-bitmap

.pgm=image/x-portable-graymap

.ppm=image/x-portable-pixmap

.rgb=image/x-rgb

.xbm=image/x-xbitmap

.xpm=image/x-xpixmap

.xwd=image/x-xwindowdump

.xml=text/xml

.uls=text/iuls

.txt=text/plain

.rtx=text/richtext

.wsc=text/scriptlet

.rt=text/vnd.rn-realtext

.htt=text/webviewhtml

.htc=text/x-component

.vcf=text/x-vcard

.avi=video/x-msvideo

.flc=video/flc

.mp2=video/mpeg

.mp3=video/mpeg

.mp4=video/mpeg

.mpeg=video/x-mpeg2a

.mpa=video/mpeg

.mpe=video/mpeg

.mpg=video/mpeg

.mov=video/quicktime

.rv=video/vnd.rn-realvideo

.ivf=video/x-ivf

.wm=video/x-ms-wm

.wmp=video/x-ms-wmp

.wmv=video/x-ms-wmv

.wmx=video/x-ms-wmx

.wvx=video/x-ms-wvx

.rms=video/vnd.rn-realvideo-secure

.asx=video/x-ms-asf-plugin

.movie=video/x-sgi-movie

.aab=application/x-authorware-bin

.aam=application/x-authorware-map

.aas=application/x-authorware-seg

.abw=application/x-abiword

.ai=application/postscript

.arj=application/x-arj

.asf=application/vnd.ms-asf

.bat=application/x-msdos-program

.bcpio=application/x-bcpio

.bz2=application/x-bzip2

.cab=application/vnd.ms-cab-compressed

.cat=application/vnd.ms-pki.seccat

.ccn=application/x-cnc

.cco=application/x-cocoa

.cdf=application/x-cdf

.cer=application/x-x509-ca-cert

.chm=application/vnd.ms-htmlhelp

.chrt=application/vnd.kde.kchart

.cil=application/vnd.ms-artgalry

.class=application/java-vm

.com=application/x-msdos-program

.clp=application/x-msclip

.cpio=application/x-cpio

.cpt=application/mac-compactpro

.cqk=application/x-calquick

.crd=application/x-mscardfile

.crl=application/pkix-crl

.csh=application/x-csh

.dbf=application/x-dbase

.dcr=application/x-director

.deb=application/x-debian-package

.dir=application/x-director

.dist=vnd.apple.installer xml

.distz=vnd.apple.installer xml

.dll=application/x-msdos-program

.dmg=application/x-apple-diskimage

.doc=application/msword

.dot=application/msword

.dvi=application/x-dvi

.dxr=application/x-director

.ebk=application/x-expandedbook

.eps=application/postscript

.evy=application/envoy

.exe=application/x-msdos-program

.fdf=application/vnd.fdf

.fif=application/fractals

.flm=application/vnd.kde.kivio

.fml=application/x-file-mirror-list

.gnumeric=application/x-gnumeric

.gtar=application/x-gtar

.gz=application/x-gzip

.hdf=application/x-hdf

.hlp=application/winhlp

.hpf=application/x-icq-hpf

.hqx=application/mac-binhex40

.hta=application/hta

.ims=application/vnd.ms-ims

.ins=application/x-internet-signup

.iii=application/x-iphone

.iso=application/x-iso9660-image

.jar=application/java-archive

.karbon=application/vnd.kde.karbon

.kfo=application/vnd.kde.kformula

.kon=application/vnd.kde.kontour

.kpr=application/vnd.kde.kpresenter

.kpt=application/vnd.kde.kpresenter

.kwd=application/vnd.kde.kword

.kwt=application/vnd.kde.kword

.latex=application/x-latex

.lha=application/x-lzh

.lcc=application/fastman

.lrm=application/vnd.ms-lrm

.lzh=application/x-lzh

.mpp=application/vnd.ms-project

.mvb=application/x-msmediaview

.man=application/x-troff-man

.mdb=application/x-msaccess

.me=application/x-troff-me

.ms=application/x-troff-ms

.msi=application/x-msi

.mpkg=vnd.apple.installer xml

.mny=application/x-msmoney

.nix=application/x-mix-transfer

.oda=application/oda

.odb=application/vnd.oasis.opendocument.database

.odc=application/vnd.oasis.opendocument.chart

.odf=application/vnd.oasis.opendocument.formula

.odg=application/vnd.oasis.opendocument.graphics

.odi=application/vnd.oasis.opendocument.image

.odm=application/vnd.oasis.opendocument.text-master

.odp=application/vnd.oasis.opendocument.presentation

.ods=application/vnd.oasis.opendocument.spreadsheet

.ogg=application/ogg

.odt=application/vnd.oasis.opendocument.text

.otg=application/vnd.oasis.opendocument.graphics-template

.oth=application/vnd.oasis.opendocument.text-web

.otp=application/vnd.oasis.opendocument.presentation-template

.ots=application/vnd.oasis.opendocument.spreadsheet-template

.ott=application/vnd.oasis.opendocument.text-template

.p7b=application/x-pkcs7-certificates

.p7r=application/x-pkcs7-certreqresp

.package=application/vnd.autopackage

.pfr=application/font-tdpfr

.pkg=vnd.apple.installer xml

.pdf=application/pdf

.pko=application/vnd.ms-pki.pko

.pl=application/x-perl

.pnq=application/x-icq-pnq

.pot=application/mspowerpoint

.pps=application/mspowerpoint

.ppt=application/mspowerpoint

.ppz=application/mspowerpoint

.ps=application/postscript

.pub=application/x-mspublisher

.qpw=application/x-quattropro

.qtl=application/x-quicktimeplayer

.rar=application/rar

.rdf=application/rdf xml

.rjs=application/vnd.rn-realsystem-rjs

.rm=application/vnd.rn-realmedia

.rmf=application/vnd.rmf

.rmp=application/vnd.rn-rn_music_package

.rmx=application/vnd.rn-realsystem-rmx

.rnx=application/vnd.rn-realplayer

.rpm=application/x-redhat-package-manager

.rsml=application/vnd.rn-rsml

.rtsp=application/x-rtsp

.rss=application/rss xml

.scm=application/x-icq-scm

.ser=application/java-serialized-object

.sh=application/x-sh

.shar=application/x-shar

.scd=application/x-msschedule

.sda=application/vnd.stardivision.draw

.sdc=application/vnd.stardivision.calc

.sdd=application/vnd.stardivision.impress

.sdp=application/x-sdp

.setpay=application/set-payment-initiation

.setreg=application/set-registration-initiation

.shw=application/presentations

.sit=application/x-stuffit

.skd=application/x-koan

.skm=application/x-koan

.skp=application/x-koan

.skt=application/x-koan

.smf=application/vnd.stardivision.math

.smi=application/smil

.smil=application/smil

.spl=application/futuresplash

.ssm=application/streamingmedia

.sst=application/vnd.ms-pki.certstore

.stc=application/vnd.sun.xml.calc.template

.std=application/vnd.sun.xml.draw.template

.sti=application/vnd.sun.xml.impress.template

.stl=application/vnd.ms-pki.stl

.stw=application/vnd.sun.xml.writer.template

.svi=application/softvision

.sv4cpio=application/x-sv4cpio

.sv4crc=application/x-sv4crc

.swf=application/x-shockwave-flash

.sxc=application/vnd.sun.xml.calc

.sxi=application/vnd.sun.xml.impress

.sxm=application/vnd.sun.xml.math

.sxw=application/vnd.sun.xml.writer

.sxg=application/vnd.sun.xml.writer.global

.tar=application/x-tar

.tcl=application/x-tcl

.tex=application/x-tex

.texi=application/x-texinfo

.texinfo=application/x-texinfo

.tr=application/x-troff

.trm=application/x-msterminal

.troff=application/x-troff

.tsp=application/dsptype

.tgz=application/x-compressed

.torrent=application/x-bittorrent

.ttz=application/t-time

.uin=application/x-icq

.urls=application/x-url-list

.ustar=application/x-ustar

.vcd=application/x-cdlink

.vor=application/vnd.stardivision.writer

.vsl=application/x-cnet-vsl

.wcm=application/vnd.ms-works

.wb1=application/x-quattropro

.wb2=application/x-quattropro

.wb3=application/x-quattropro

.wdb=application/vnd.ms-works

.wks=application/vnd.ms-works

.wmd=application/x-ms-wmd

.wms=application/x-ms-wms

.wmz=application/x-ms-wmz

.wp5=application/wordperfect5.1

.wpd=application/wordperfect

.wpl=application/vnd.ms-wpl

.wps=application/vnd.ms-works

.wri=application/x-mswrite

.xfdf=application/vnd.adobe.xfdf

.xls=application/x-msexcel

.xlb=application/x-msexcel

.xpi=application/x-xpinstall

.xps=application/vnd.ms-xpsdocument

.xsd=application/vnd.sun.xml.draw

.xul=application/vnd.mozilla.xul xml

.zoo=application/x-zoo

.zip=application/x-zip-compressed

.wbmp=image/vnd.wap.wbmp

.wml=text/vnd.wap.wml

.wmlc=application/vnd.wap.wmlc

.wmls=text/vnd.wap.wmlscript

.wmlsc=application/vnd.wap.wmlscriptc

.pas=text/x-pascal

.hpp=text/x-c  hdr

.hxx=text/x-c  hdr

.hh=text/x-c  hdr

.cpp=text/x-c  src

.cxx=text/x-c  src

.cc=text/x-c  src

.java=text/x-java

.css=text/css

.js=text/javascript

.htm=text/html

.html=text/html

.ls=text/javascript

.mocha=text/javascript

.shtml=server-parsed-html

.sgm=text/sgml

.sgml=text/sgml

C:\Builds\TP\indysockets\lib\Protocols\IdGlobalProtocols.pas

()<>@,;:\"/[]?=

()<>@,;:\"/[]?=

Content-Disposition: form-data; name="%s"; filename="%s"

Content-Type: %s

Content-Disposition: form-data; name="%s"

*#%<> []

*#%<>  []

TIdEncoder3to4.Encode: Calculated length exceeded (expected

C:\Builds\TP\indysockets\lib\Protocols\IdCoder3to4.pas

TIdEncoder3to4.Encode: Calculated length not met (expected

HttpOnly

HTTPONLY

port

COMMENTURL

PORT

.local

C:\Builds\TP\indysockets\lib\Protocols\IdZLibCompressorBase.pas

C:\Builds\TP\indysockets\lib\Core\IdThread.pas

C:\Builds\TP\indysockets\lib\Core\IdScheduler.pas

Mozilla/3.0 (compatible; Indy Library)

%d%s%d

C:\Builds\TP\indysockets\lib\Protocols\IdSSLOpenSSLHeaders.pas

libeay32.dll

ssleay32.dll

libssl32.dll

SSL_CTX_use_PrivateKey_file

SSL_CTX_use_PrivateKey

SSL_CTX_use_certificate

SSL_CTX_use_certificate_file

SSL_get_peer_certificate

SSL_CTX_set_default_passwd_cb

SSL_CTX_set_default_passwd_cb_userdata

SSL_CTX_check_private_key

X509_STORE_CTX_get_current_cert

DES_set_key

_ossl_old_des_set_key

des_set_key

RSA_generate_key

RSA_check_key

i2d_PrivateKey_bio

X509_set_pubkey

X509_REQ_set_pubkey

PEM_write_bio_PKCS8PrivateKey

PEM_read_bio_PrivateKey

EVP_PKEY_type

EVP_PKEY_new

EVP_PKEY_free

EVP_PKEY_assign

C:\Builds\TP\indysockets\lib\Protocols\IdSSLOpenSSL.pas

C:\Builds\TP\indysockets\lib\Protocols\IdHTTP.pas

application/x-www-form-urlencoded

https

HTTP/1.0 200 OK

\Mozilla\Firefox\%s\extensions\

\Google\Chrome\User Data\Default\Extensions\

\Software\endless spaces\Photo Fun Tool\{3B9D4F4E-C520-6061-A666-134506E5B93B}

\Mozilla\Firefox\profiles.ini

{EBF2BA02-9094-4c5a-858B-BB198F3D8DE2}

{ba00b7b1-0351-477a-b948-23e3ee5a73d4}

{9da1bcf1-77f5-41c5-b7c3-c597dc20752c}

{9302e698-7e00-43ab-b867-c6e759bc2ada}

{9167da98-6f9b-46f1-991d-826cae46cab6}

{61539ecd-cc67-4437-a03c-9aaccbd14326}

{7affbfae-c4e2-4915-8c0f-00fa3ec610a1}

{c2f863cd-0429-48c7-bb54-db756a951760}

{493b4069-8c4f-4b4a-8f8c-506200c9887a}

{6ad56361-628f-471b-8f9d-4c338973a87d}

{4D1E692F-D179-413b-A987-EEEAAD85DDB3}

{0b38152b-1b20-484d-a11f-5e04a9b0661f}

\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\BrowseForTheCause

\Software\Microsoft\Windows\CurrentVersion\Uninstall\CouponDropDown

\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\CouponDropDown

\SOFTWARE\Microsoft\.NETFramework\Policy\v2.0

\SOFTWARE\Microsoft\.NETFramework\Policy\v3.0

\SOFTWARE\Microsoft\.NETFramework\Policy\v3.5

\SOFTWARE\Microsoft\.NETFramework\Policy\v4.0

\SOFTWARE\Microsoft\.NETFramework\Policy\v4.5

\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\m1988

\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\OneTab

\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\IMBoosterARP

\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\InfoAtoms

\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\InfoAtoms

\SweetIM\Messenger\SweetIM.exe

{462be121-2b54-4218-bf00-b9bf8135b23f}

\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{889DF117-14D1-44EE-9F31-C5FB5D47F68B}

{49222b9b-af0d-4ae4-9d1e-a193397bb515}

StringFileInfo\0%x0%x\FileVersion

hXXp://mfapi.com/?action=log&category=%s&event=%s&label=%s&data={%s}

\http\shell\open\command

safari.exe

chrome.exe

firefox.exe

opera.exe

iexplore.exe

naviga~1.exe

hXXp://fullmediastorage.com/checkout.html?custom1=&filename=

mfwi_%s

sPnl_%s

FrameTB%d

sTab_page_%d

sInstall%s

sMakeSP%s

sMakeHP%s

sSelectInstall%s

sSelectInstallFull%s

sCheckOptional_%d_%s

Preparing to download: %s

"url":"

hXXp://mediafinderpro.com/step.php

BeginSendReport

hXXp://mfapi.com/?action=install

&wm=%s&sub=%s&site=%s&UniqueId=%s&toolbar=%s

ErrorSendReport

hXXp://ad.propellerads.com/conversion.php?type=lead&aid=309&visitor_id=%s

EndSendReport

?country=%s&db=%s&wmid=%s&tbisset=%s&dotnet=%s&silverligth=%s

default.xml

reports

promourl

urls

Download: %s

--partner mediafinder-elements-tr --distr /passive

--distr /passive /msicl "

/ci=%s

/ci=%s /S

/ci=%s /S /WJPARAM=4

Portable Network Graphics

Portable network graphics (AlphaControls)

Error loading Socket interface (ws2_32.dll)!

Kernel32.dll

Open SSL Support DLL Delphi and C  Builder interface

hXXp://VVV.indyproject.org/

1993 - 2009

Add to custom colors set8Listbox (%s) style must be virtual in order to set Count

Error setting %s.Count

pMore than 500 million download links are waiting for you in our database. Join, search and download any of them.aYour every single search can be shown in a separate tab. It''s very easy to manage them this way!CYou can apply a file type filter: video, music, software and other.

We protect you with our own unique technology.** For complete anonymity please use the OpenVPN services for your Internet connection.aYou can use your premium account at any file hosting / file sharing service with the Media Finder

You have full control of your downloads. Your can directly add new links and the Media Finder will automatically recognize the captchas on the file sharing website!nYou can apply a file size filter, filename extension filter, file age filter or search by exact or loose match0You can request and receive help in a few clicks

You receive more and more features with every frequent update (E.g. soon you''ll be able to request passwords for the protected archives, request results for a certain keyword and enjoy the file catalog!) Not to mention more and more files are added for your every day, of course. Simple and clear interface for ease of use.

Safety and anonymity*Support of the 3rd party download services

Fast support

Media Finder makes it very easy to find files on the Internet using the advanced search system and download them in automatic mode. The Media Finder supports most of the leading file sharing services and lets you avoid all the clutter of free downloads.&No global or local color table defined

Unsupported PixelFormat

Invalid stream operation

Invalid extension introducerúiled to allocate memory for GIF DIB

Invalid Image trailerAInternal error: Extension Instance does not match Extension Label,Unsupported Application Extension block size

Unknown GIF block type'Object type not supported for operation

SSL status: "%s"pUnsupported object type. You can assign only one of the following types or their descendants: TStrings, TStream.

Unsupported operation.

Unknown Protocol(Request method requires HTTP version 1.1DThis authentication method is already registered with class name %s.KUnsupported hash algorithm. This implementation supports only MD5 encoding.$Error accepting connection with SSL.

Error creating SSL context. Could not load root certificate.

Could not load certificate.#Could not load key, check password.8Set LargeStream to True to send streams greater than 2GB

Transparent proxy cannot bind. UDP Not supported by this proxy.$Buffer terminator must be specified.!Buffer start position is invalid.$Cannot change a connected IOHandler.%No IOHandler of type %s is installed.

Reply Code is not valid: %s

Reply Code already exists: %s

Command not supported.

Address type not supported."%d: Circular links are not allowed"Not enough data in buffer. (%d/%d)

File "%s" not found

Object type not supported.

%s is not a valid IPv6 address:The requested IPVersion / Address family is not supported.

Set Size Exceeded.)UDP is not support in this SOCKS version.

Request rejected or failed.5Request rejected because SOCKS server cannot connect.QRequest rejected because the client program and identd report different user-ids.

Stack already created.1Only one TIdAntiFreeze can exist per application.&Cannot change IPVersion when connected$Can not bind in port range (%d - %d)

Connection Closed Gracefully.;Could not bind socket. Address and port are already in use.

Invalid Port Range (%d - %d)

%s is not a valid service."Operation not supported on socket.

Protocol family not supported.0Address family not supported by protocol family.

Socket is not connected..Cannot send or receive after socket is closed.#Too many references, cannot splice.

Operation would block.

Operation now in progress.

Operation already in progress.

Socket operation on non-socket.

Protocol not supported.

Socket type not supported.

7The png image could not be loaded from the resource ID.oSome operation could not be performed because the system is out of resources. Close some windows and try again.

Setting bit transparency color is not allowed for png images containing alpha value for each pixel (COLOR_RGBALPHA and COLOR_GRAYSCALEALPHA)OThis operation is not valid because the current image contains no valid header.4The new size provided for image resizing is invalid.oThe "Portable Network Graphics" could not be created because invalid image type parameters have being provided.4Failed attempting to retrieve time zone information.-Error on call to Winsock2 library function %s&Error on loading Winsock2 library (%s)

Resolving hostname %s.

Connecting to %s.

Socket Error # %d

%syThe "Portable Network Graphics" image could not be loaded because one of its main piece of data (ihdr) might be corruptedUThis "Portable Network Graphics" image is invalid because it has missing image parts.[Could not decompress the image because it contains invalid compressed data.

Description: BThe "Portable Network Graphics" image contains an invalid palette.

The file being read is not a valid "Portable Network Graphics" image because it contains an invalid header. This file may be corrupted, try obtaining it againnThis "Portable Network Graphics" image is not supported or it might be invalid.

This "Portable Network Graphics" image is not supported because either it's width or height exceeds the maximum size, which is 65535 pixels length.

There is no such palette entry.dThis "Portable Network Graphics" image contains an unknown critical part which could not be decoded.pThis "Portable Network Graphics" image is encoded with an unknown compression scheme which could not be decoded.cThis "Portable Network Graphics" image uses an unknown interlace scheme which could not be decoded.-The chunks must be compatible to be assigned.jThis "Portable Network Graphics" image is invalid because the decoder found an unexpected end of the file.8This "Portable Network Graphics" image contains no data.]The program tried to add a existent critical chunk to the current image which is not allowed.IIt's not allowed to add a new chunk because the current image is invalid.

Invalid MMF name "%s"*The MMF named "%s" cannot be created empty

Win32 error: %s (%u)%s%s

OLE error %.8x.Method '%s' not supported by automation object/Variant does not reference an automation object7Dispatch methods do not support more than 64 parameters&Cannot change the size of a JPEG image

JPEG error #%d

Skin previewjThis "Portable Network Graphics" image is not valid because it contains invalid pieces of data (crc error)

128-Byte PrefetchingeCPUID leaf 2 does not report cache descriptor information, use CPUID leaf 4 to query cache parametersA2nd-level cache: 256 KBytes, 8-way associative, 32 byte line sizeA2nd-level cache: 512 KBytes, 8-way associative, 32 byte line size?2nd-level cache: 1 MBytes, 8-way associative, 32 byte line size?2nd-level cache: 2 MBytes, 8-way associative, 32 byte line sizeD2nd-level cache: 512 KByte, 4-way set associative, 64 byte line sizeB2nd-level cache: 1 MByte, 8-way set associative, 64 byte line sizeBInstruction TLB: 4 KByte pages, 4-way set associative, 128 entriesSInstruction TLB: 2 MByte pages, 4-way, 8 entries or 4 MByte pages, 4-way, 4 entriesAInstruction TLB: 4 KByte pages, 4-way set associative, 64 entries;Data TLB: 4 KByte pages, 4-way set associative, 128 entries<Data TLB1: 4 KByte pages, 4-way set associative, 256 entries;Data TLB1: 4 KByte pages, 4-way set associative, 64 entriesEData TLB: 4 KByte and 4 MByte pages, 4-way set associative, 8 entriesCShared 2nd-Level TLB: 4 KByte pages, 4-way associative, 512 entriesD3rd-level cache: 512 KByte, 4-way set associative, 64 byte line sizeB3rd-level cache: 1 MByte, 4-way set associative, 64 byte line sizeH1st-level data cache: 8 KBytes, 4-way set associative, 64 byte line sizeI1st-level data cache: 16 KBytes, 4-way set associative, 64 byte line sizeI1st-level data cache: 32 KBytes, 4-way set associative, 64 byte line size,Trace cache: 12 K-Ops, 8-way set associative,Trace cache: 16 K-Ops, 8-way set associative,Trace cache: 32 K-Ops, 8-way set associative,Trace cache: 64 K-Ops, 8-way set associative:Instruction TLB: 2M/4M pages, fully associative, 8 entriesD2nd-level cache: 1 MBytes, 4-way set associative, 64 bytes line sizeZ2nd-level cache: 128 KBytes, 8-way set associative, 64 bytes line size, 2 lines per sectorZ2nd-level cache: 256 KBytes, 8-way set associative, 64 bytes line size, 2 lines per sectorZ2nd-level cache: 512 KBytes, 8-way set associative, 64 bytes line size, 2 lines per sectorX2nd-level cache: 1 MBytes, 8-way set associative, 64 bytes line size, 2 lines per sectorC2nd-level cache: 2 MBytes, 8-way set associative, 64 byte line sizeE2nd-level cache: 512 KBytes, 2-way set associative, 64 byte line sizeE2nd-level cache: 512 KBytes, 8-way set associative, 64 byte line size

@Invalid Comment: "--" not allowed inside comments at position ÖInvalid Comment: Unexpected end of data at position %d>Invalid CDATA: expected "%0:s" but found "%1:s" at position ÔInvalid CDATA: Unexpected end of data at position %d?Invalid Header: expected "%0:s" but found "%1:s" at position %d?Invalid Document: Unexpected text in file prolog at position %d

No matching charset]Invalid XML Element: Unexpected character in property declaration ("%s" found at position %d)rInvalid XML Element: Unexpected character in property declaration. Expecting " or ' but "%s" found at position %dLInvalid XML Element: Expected beginning of tag but "%s" found at position ßInvalid XML Element: Expected end of tag but "%s" found at position %dGInvalid XML Element: malformed tag found (no valid name) at position %d]Invalid XML Element: Erroneous end of tag, expecting </%0:s> but </%1:s> found at position %d@Invalid Comment: expected "%0:s" but found "%1:s" at position %d

Failed to clear tab control Failed to delete tab at index %d"Failed to retrieve tab at index %d Failed to get object at index %d"Failed to set tab "%s" at index %d Failed to set object at index %d<MultiLine must be True when TabPosition is tpLeft or tpRightE%d is an invalid PageIndex value. PageIndex must be between 0 and %d

CompuServe GIF ImageÊnnot change the Size of a GIF image

- Dock zone has no controlLError loading dock zone from the stream. Expecting version %d, but found %d.

Error setting %s.Count8Listbox (%s) style must be virtual in order to set Count

UTF-7"PageControl must first be assigned"%s requires Windows Vista or later %s requires themes to be enabled

Button%d

RadioButton%d

Value must be between %d and %d

Unable to insert a line Clipboard does not support Icons

Cannot open clipboard: %s Operation not supported on selected printer.There is no default printer currently selected/Menu '%s' is already being used by another form

Enhanced Metafiles$Parent given is not a parent of '%s'

%s property out of range

%s on %s@GroupIndex cannot be less than a previous menu item's GroupIndex

!Cannot change the size of an iconÊnnot change the size of a WIC Image$Unknown picture file extension (.%s)

Unsupported clipboard format

Error creating window class Cannot focus a disabled or invisible window!Control '%s' has no parent window

No help found for %s0Tab position incompatible with current tab style0Tab style incompatible with current tab position

Thread Error: %s (%d)-Cannot terminate an externally created thread,Cannot wait for an externally created thread2Cannot call Start on a running or suspended thread'Parameter %s cannot be a negative value*Input buffer exceeded for %s = %d, %s = %d The specified file was not found$No help viewer that supports filters7String index out of range (%d). Must be >= 1 and <= %drHigh surrogate char without a following low surrogate char at index: %d. Check that the string is encoded properlyrLow surrogate char without a preceding high surrogate char at index: %d. Check that the string is encoded properly

Invalid Timeout value: %s

''%s'' is not a valid date#''%s'' is not a valid date and time#''%s'' is not a valid integer value

''%s'' is not a valid time

List index out of bounds (%d) Out of memory while expanding memory stream)%s has not been registered as a COM class

Error reading %s%s%s: %s

Failed to create key %s

Failed to get data for '%s'

Failed to set data for '%s'

Resource %s not found

%s.Seek not implemented$Operation not allowed on sorted list$%s not in a class registration group

Property %s does not exist

Thread creation error: %s

A class named %s already exists%List does not allow duplicates ($0%x)#A component named %s already exists%String list does not allow duplicates

Cannot create file "%s". %s

Cannot open file "%s". %s

Invalid file name - %s

Invalid stream format$''%s'' is not a valid component name

Invalid property element: %s

Invalid data type for '%s' List capacity out of bounds (%d)

List count out of bounds (%d)

Invalid destination array"Character index out of bounds (%d)

Start index out of bounds (%d)

Invalid count (%d)

Invalid destination index (%d)

Ancestor for '%s' not found

Cannot assign a %s to a %s

Bits index out of range*Can't write to a read-only resource streamECheckSynchronize called from thread $%x, which is NOT the main thread

Class %s not found

External exception %x

Interface not supported

Object lock not owned(Monitor support function not initialized

%s (%s, line %d)

Abstract Error?Access violation at address %p in module '%s'. %s of address %p

System Error. Code: %d.

Invalid variant operation

Invalid NULL variant operation%Invalid variant operation (%s%.8x)

%s,Custom variant type (%s%.4x) is out of range/Custom variant type (%s%.4x) already used by %s*Custom variant type (%s%.4x) is not usable2Too many custom variant types have been registered5Could not convert variant of type (%s) into type (%s)=Overflow while converting variant of type (%s) into type (%s)

Operation not supported

Invalid pointer operation

Invalid class typecast0Access violation at address %p. %s of address %p

Operation aborted(Exception %s in module %s at %p.

Application Error1Format '%s' invalid or incompatible with argument

No argument for format '%s'"Variant method calls not supported

('%s' is not a valid floating point value

I/O error %d

Integer overflow Invalid floating point operation

1.0.4.287

1.0.0.0

Remove it with Ad-Aware

1. Click (here) to download and install Ad-Aware Free Antivirus.
2. Update the definition files.
3. Run a full scan of your computer.

Manual removal*

1. Terminate malicious process(es) (How to End a Process With the Task Manager):
   

   %original file name%.exe:2712
   

2. Delete the original Trojan file.
   
3. Delete or disinfect the following files created/modified by the Trojan:
   

   C:\Users\"%CurrentUserName%"\AppData\Local\Temp\is-D319D.tmp\827af8be2ce6df20773c147ff4789bb5.tmp (1437 bytes)
   C:\Users\"%CurrentUserName%"\AppData\Local\Temp\is-JR1R5.tmp\_isetup\_iscrypt.dll (6 bytes)
   C:\Users\"%CurrentUserName%"\AppData\Local\Temp\is-JR1R5.tmp\_isetup\_shfoldr.dll (47 bytes)
   C:\Users\"%CurrentUserName%"\AppData\Local\Temp\is-JR1R5.tmp\setup.exe (61547 bytes)
   C:\Users\"%CurrentUserName%"\AppData\Local\Temp\is-JR1R5.tmp\default.xml (713 bytes)

4. Reboot the computer.
   

*Manual removal may cause unexpected system behaviour and should be performed at your own risk.