SearchProtectToolbar_f9f81c3215

by malwarelabrobot on January 30th, 2015 in Malware Descriptions.

mzpefinder_pcap_file.YR, SearchProtectToolbar.YR, TrojanSwrortProxy.YR, PUPSpigot.YR, BankerGeneric.YR (Lavasoft MAS)
Behaviour: Banker, Trojan, PUP

The description has been automatically generated by Lavasoft Malware Analysis System and it may contain incomplete or inaccurate information.

Summary

Dynamic Analysis

Static Analysis

Network Activity

Map

Strings from Dumps

Removals

MD5: f9f81c321571b00eed4188c4921481e6
SHA1: 4fbdf8936718b451f7103dfcde7925fbc86d1b89
SHA256: 5e1c9fe472c7bb9ecd076d9b012e946eec3ddb21d7422f00995c9a5359e247c1
SSDeep: 12288:DHDWvRXmvVy nZNoteV9urwR9twedd4xC33wvEw87eH4f32oSZK:HWvRAcMN394tUBwMwYyK
Size: 735608 bytes
File type: EXE
Platform: WIN32
Entropy: Packed
PEID: UPolyXv05_v6
Company: no certificate found
Created at: 2011-12-15 05:02:30
Analyzed on: Windows7Ada SP1 64-bit

Summary:

Banker. Steals data relating to online banking systems, e-payment systems and credit card systems.

Payload

No specific payload has been found.

Process activity

The Trojan creates the following process(es):

du73i.exe:3996
Yandex.exe:3208
SkypeSetupFull.exe:2652
MsiExec.exe:2576
MsiExec.exe:2088
MsiExec.exe:1188
MsiExec.exe:3828
utt568C.tmp.exe:2780
utt568C.tmp.exe:2984
%original file name%.exe:3584
%original file name%.exe:1640
syesubc3_p2v3.exe:2304
RunDll32.exe:2524
sender.exe:4064
YandexSearch.exe:3012
uTorrent.exe:2492
utt501D.tmp.exe:1120
utt501D.tmp.exe:2972

The Trojan injects its code into the following process(es):

Skype.exe:3328
uTorrent.exe:2888

Mutexes

The following mutexes were created/opened:
No objects were found.

File activity

The process du73i.exe:3996 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Roaming\OpenCandy\OpenCandy_FAF9D0CB233142BC9B2A763734709B2E\syesubc3_p2v3.exe (4217 bytes)

The process Yandex.exe:3208 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Yandex.lnk (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\yapin\Yandex.website (493 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\yapin\Yandex.lnk (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Yandex.website (493 bytes)

The process SkypeSetupFull.exe:2652 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\UB17W4OG.txt (127 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\7396C420A8E1BC1DA97F1AF0D10BAD21 (1072 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\7396C420A8E1BC1DA97F1AF0D10BAD21 (554 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\696F3DE637E6DE85B458996D49D759AD (568 bytes)
C:\ProgramData\Skype\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}\Skype.msi (355060 bytes)

The process MsiExec.exe:2576 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\Temp\2.8.1.1418 (PARTNER)\MsiExec.exe@2576-3852-1.log (694 bytes)
C:\Windows\Installer\MSI7107.tmp (49 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Google\Chrome\User Data\Default\Preferences (33 bytes)

The process MsiExec.exe:2088 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

C:\Windows\Installer\MSI8BBC.tmp (167 bytes)
C:\Windows\Installer\MSI8C0C.tmp (167 bytes)
C:\Windows\Installer\MSI8B7D.tmp (167 bytes)
C:\Windows\Installer\MSI9818.tmp (167 bytes)
C:\ProgramData\Skype\SKY8BCA.tmp (5572 bytes)
C:\Windows\Installer\MSI8BDC.tmp (167 bytes)
C:\Windows\Installer\MSI8F0D.tmp (167 bytes)

The process MsiExec.exe:1188 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

C:\Windows\Installer\MSI96FD.tmp (167 bytes)
C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\7B8944BA8AD0EFDF0E01A43EF62BECD0_DBEBBB72D7CF896A67503824FF19F0BB (1 bytes)
C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\7D266D9E1E69FA1EEFB9699B009B34C8_0A9BFDD75B598C2110CBF610C078E6E6 (1504 bytes)
C:\Windows\Installer\MSI8F1D.tmp (167 bytes)
C:\Windows\Installer\MSI96AE.tmp (155 bytes)
C:\Windows\Installer\MSI8D66.tmp (167 bytes)
C:\Windows\Installer\MSI95F1.tmp (167 bytes)
C:\Windows\Installer\MSI971D.tmp (167 bytes)
C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\7D266D9E1E69FA1EEFB9699B009B34C8_0A9BFDD75B598C2110CBF610C078E6E6 (1 bytes)
C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\7B8944BA8AD0EFDF0E01A43EF62BECD0_DBEBBB72D7CF896A67503824FF19F0BB (1504 bytes)

The process MsiExec.exe:3828 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

C:\Windows\Installer\MSI6059.tmp (49 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Opera Software\Opera Stable x64\Bookmarks_20150129095355.backup (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\places.sqlite-wal (19187 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Google\Chrome\User Data\Default\Preferences (66 bytes)
C:\Windows\Installer\MSI6FBC.tmp (221 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Opera Software\Opera Stable\Favicons (5137 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Google\Chrome\User Data\Default\History-journal (14544 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\2.8.1.1418 (PARTNER)\MsiExec.exe@3828-2052-1.log (150 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Opera Software\Opera Stable x64\Preferences_20150129095355.backup (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Opera Software\Opera Stable x64\favorites.db-journal (5062 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\2.8.1.1418 (PARTNER)\MsiExec.exe@3828-3868-1.log (250 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Google\Chrome\User Data\Default\Top Sites-journal (5380 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\prefs.js (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Yandex.website (493 bytes)
C:\Users\"%CurrentUserName%"\Favorites\Links\Yandex.url (284 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Chromium\User Data\Default\Favicons (4725 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Opera Software\Opera Stable x64\Web Data (609 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Chromium\User Data\Default\Top Sites-journal (5062 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Google\Chrome\User Data\Default\Bookmarks (785 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\2.8.1.1418 (PARTNER)\MsiExec.exe@3828-3332-1.log (258 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Chromium\User Data\Default\Web Data-journal (7534 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\searchplugins\yandex.com-095355.xml (9 bytes)
C:\Windows\Installer\MSI60EA.tmp (49 bytes)
C:\Windows\Installer\MSI6FCC.tmp (221 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\2.8.1.1418 (PARTNER)\MsiExec.exe@3828-3360-1.log (326 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Opera Software\Opera Stable\Web Data (609 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Yandex\ui (38 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\chromeappsstore.sqlite-journal (3302 bytes)
C:\Windows\Installer\MSI6089.tmp (49 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Google\Chrome\User Data\Default\History (4588 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\2.8.1.1418 (PARTNER)\MsiExec.exe@3828-3872-1.log (254 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Internet Explorer\Services\www.yandex.com_20150129095355.ico (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Internet Explorer\Services\mail.yandex.com_20150129095357.ico (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Opera Software\Opera Stable x64\Web Data-journal (544 bytes)
C:\Windows\Installer\MSI610A.tmp (49 bytes)
C:\Windows\Installer\MSI5F5E.tmp (221 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\chromeappsstore.sqlite (59 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\2.8.1.1418 (PARTNER)\browserconfig.properties (74 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Chromium\User Data\Default\History-journal (18998 bytes)
C:\Users\"%CurrentUserName%"\Favorites\Links\Mail.url (286 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\2.8.1.1418 (PARTNER)\Yandex.website (493 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Google\Chrome\User Data\Default\Preferences_20150129095355.backup (33 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Opera Software\Opera Stable\Preferences (238 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\etilqs_EIC8RzeArpKHUsh (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Internet Explorer\Services\www.yandex.com_20150129095357.ico (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Opera Software\Opera Stable x64\Preferences (340 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\prefs.js_20150129095355.backup (4 bytes)
C:\Windows\Installer\MSI60A9.tmp (49 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Opera Software\Opera Stable\Bookmarks (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Opera Software\Opera Stable\Web Data-journal (544 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Opera Software\Opera Stable x64\Favicons (5137 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Chromium\User Data\Default\History (12611 bytes)
C:\Windows\Installer\MSI6FAB.tmp (221 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\vendor00000.xml (591 bytes)
C:\Windows\Installer\MSI602A.tmp (163 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\2.8.1.1418 (PARTNER)\region.properties (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Chromium\User Data\Default\Bookmarks (785 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Google\Chrome\User Data\Default\Top Sites (1932 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Internet Explorer\Services\www.yandex.com_20150129095356.ico (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Chromium\User Data\Default\Preferences (732 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Opera Software\Opera Stable\Favicons-journal (32780 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\2.8.1.1418 (PARTNER)\MsiExec.exe@3828-3824-1.log (42637 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Mozilla\Firefox\Profiles\zwvbr04l.default\thumbnails\061150f69be1b6d86425899640d8e6fa.png (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\2.8.1.1418 (PARTNER)\stdout.log (40 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Chromium\User Data\First Run (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Google\Chrome\User Data\Default\Favicons-journal (37022 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Opera Software\Opera Stable x64\Bookmarks (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Opera Software\Opera Stable\favorites.db (523 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Opera Software\Opera Stable\Bookmarks_20150129095355.backup (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\sender.exe (308 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Chromium\User Data\Default\Top Sites (1151 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Opera Software\Opera Stable x64\favorites.db (523 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Opera Software\Opera Stable\favorites.db-journal (5062 bytes)
C:\Windows\Installer\MSI7185.tmp (49 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Google\Chrome\User Data\Default\Favicons (5572 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\backup00000.reg (2196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Chromium\User Data\Default\Web Data (24431 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Chromium\User Data\Default\Favicons-journal (32780 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Chromium\User Data\Local State (69 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\2.8.1.1418 (PARTNER)\MsiExec.exe@3828-1468-1.log (252 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Opera Software\Opera Stable\Preferences_20150129095355.backup (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\omni.ja_20150129095353.zip (44854 bytes)
C:\Windows\Installer\MSI60CA.tmp (49 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\places.sqlite (9176 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Opera Software\Opera Stable x64\Favicons-journal (32780 bytes)

The process utt568C.tmp.exe:2780 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\Temp\7F4987FB1A6E43d69E3E94B29EB75926\stat.log2780 (546 bytes)

The process utt568C.tmp.exe:2984 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\Temp\7F4987FB1A6E43d69E3E94B29EB75926\YandexSearch.exe (1480 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\YandexSearch[1].exe (301341 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\7B8944BA8AD0EFDF0E01A43EF62BECD0_84DF081C52E32C6CC02A8FC17AEFEC2C (1536 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\info[1].rss (827 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\7F4987FB1A6E43d69E3E94B29EB75926\seed.txt (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\7F4987FB1A6E43d69E3E94B29EB75926\downloader.log2984 (182756 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\7B8944BA8AD0EFDF0E01A43EF62BECD0_84DF081C52E32C6CC02A8FC17AEFEC2C (1 bytes)

The process %original file name%.exe:3584 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\P6CE4YX9.txt (89 bytes)
C:\ProgramData\Microsoft\Windows\Start Menu\Ã‚ÂµTorrent.lnk (953 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Ã‚ÂµTorrent.lnk (971 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\apps\player.btapp.new (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\apps\welcome.btapp.new (27 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\settings.dat.new (136 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Crypto\RSA\S-1-5-21-2858020935-2156992550-3658131804-1003\d53e9de8694875b1d0ce04633ae07c71_c0322acd-5e5d-42f0-b163-c591ee6ff5b9 (80 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\apps\plus.btapp.new (51 bytes)
%Program Files% (x86)\uTorrent\uTorrent.exe (1472 bytes)
C:\Users\Public\Desktop\Ã‚ÂµTorrent.lnk (947 bytes)

The process %original file name%.exe:1640 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\Temp\utt37F2.tmp.new (82 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\Q4YDVV9K.txt (89 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\apps\welcome.btapp (27 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\5MGNFFGL.txt (89 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\apps\player.btapp (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\settings.dat.new (136 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\apps\plus.btapp (51 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\utt366B.tmp.new (59 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Crypto\RSA\S-1-5-21-2858020935-2156992550-3658131804-1003\1f91d2d17ea675d4c2c3192e241743f9_c0322acd-5e5d-42f0-b163-c591ee6ff5b9 (105 bytes)

The process Skype.exe:3328 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\capsLock.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\normal\msa-logos-135x25.png (727 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\white-on-black\exclamation_20x20.png (513 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\white-on-black\button-middle-35x35@2x.png (331 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\normal\back_20x20-inverted@2x.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\languages\uk.js (883 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\fonts\segoe-ui-semibold-arabic.eot (2071 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\fonts\segoe-ui-light-greek.eot (29 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\css\retina\login.css (9 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\languages\nl.js (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\fonts\segoe-ui-light-cyrillic.ttf (1927 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\49514950C94E8026A2B06312597DFF49_33A0493B3756EC93EB52782457685E27 (1360 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\backgroundNoCloud.png (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\languages\pt.js (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\normal\button-darker-right-35x35@2x.png (884 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\languages\da.js (1828 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\languages\tr.js (987 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\retina\caret_left@2x.png (588 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\black-on-white\skype-logo-136x60@2x.png (1416 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\languages\et.js (1259 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\black-on-white\capslock_20x20@2x.png (620 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\black-on-white\arrow_up_20x20@2x.png (578 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\black-on-white\arrow_up_20x20.png (436 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\normal\exclamation_20x20.png (720 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\connection.png (865 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\black-on-white\button-right-35x35.png (867 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\white-on-black\back_20x20-inverted@2x.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\css\platform\mac.css (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\black-on-white\logo-xbox-25x25.png (965 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\normal\logo-skype-25x25@2x.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\normal\skype-logo-136x60@2x.png (10 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\retina\messageTopShort@2x.png (374 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\black-on-white\exclamation_20x20.png (515 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\white-on-black\skype-logo-136x60.png (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\white-on-black\logo-win-25x25@2x.png (908 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\externalSettings[1].js (77 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\normal\loader_15fps.gif (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\white-on-black\logo-skype-25x25.png (822 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\white-on-black\capslock_20x20@2x.png (620 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\fonts\segoe-ui-semibold-greek.woff (1985 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\languages\no.js (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\fonts\segoe-ui-regular-latin.woff (2039 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\black-on-white\logo-win-25x25.png (533 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\49514950C94E8026A2B06312597DFF49_33A0493B3756EC93EB52782457685E27 (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\languages\lt.js (10 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\white-on-black\button-right-35x35@2x.png (743 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\languages\el.js (672 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\loader.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\normal\skype-logo-136x60.png (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\white-on-black\dropdown_32x32@2x.png (370 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\white-on-black\dropdown_hover_32x32.png (267 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\retina\msAccount@2x.png (97 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\languages\ru.js (1198 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\black-on-white\capslock_20x20.png (380 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\fonts\segoe-ui-semibold-hebrew.eot (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\white-on-black\back_20x20-inverted.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\fonts\segoe-ui-regular-greek.ttf (2955 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\fonts\segoe-ui-light-latin.eot (2286 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\black-on-white\caret_right.png (823 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\white-on-black\ticked_not_10x10.png (191 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\05EC48341C277FE5110E7DFAA91377DC_39AA32012A618D407F0206C60DD48EA1 (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\fonts\segoe-ui-regular-hebrew.woff (9 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\languages\cs.js (11 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\white-on-black\capslock_20x20.png (380 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\fonts\segoe-ui-semibold-greek.eot (1762 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\retina\messageTop@2x.png (344 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\retina\background@2x.png (1847 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\normal\logo-office-25x25.png (783 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\picture.jpg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\css\platform\win.css (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\languages\es.js (9 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\black-on-white\ticked_10x10@2x.png (345 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\normal\button-right-35x35@2x.png (759 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\loader.gif (1089 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\black-on-white\ticked_not_10x10@2x.png (201 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\css\platform\unix.css (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\retina\messageBottomShort@2x.png (391 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\white-on-black\ticked_not_10x10@2x.png (201 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\languages\fi.js (9 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\black-on-white\button-middle-35x35@2x.png (331 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\fonts\segoe-ui-light-latin.ttf (6401 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\normal\button-darker-left-35x35.png (545 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\icons.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\fonts\segoe-ui-light-hebrew.eot (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\fonts\segoe-ui-light-cyrillic.eot (1032 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\white-on-black\logo-office-25x25.png (722 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\messageTop.png (265 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\skype.png (697 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\msAccountOverlay.png (93 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\languages\ar.js (639 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\normal\arrow_up_20x20_8bit.png (220 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\0FTVHFMW.txt (124 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\black-on-white\caret_left.png (1338 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\msDefaultPicture.png (585 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\languages\bg.js (131 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\black-on-white\msa-logos-135x25.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\retina\skype@2x.png (560 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\fonts\segoe-ui-regular-arabic.ttf (2820 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\languages\ko.js (13 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login.md5 (34 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\white-on-black\logo-skype-25x25@2x.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\fonts\segoe-ui-light-arabic.eot (894 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Skype\shared_dynco\dc.db (284502 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\white-on-black\button-right-35x35.png (469 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\black-on-white\logo-xbox-25x25@2x.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\normal\loader_30fps.gif (1168 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\fonts\segoe-ui-light-greek.ttf (3156 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\white-on-black\arrow_up_20x20@2x.png (578 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\normal\logo-cloud-35x25@2x.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\normal\ticked_not_10x10@2x.png (201 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\inputfields.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\normal\button-left-35x35@2x.png (792 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\white-on-black\logo-xbox-25x25.png (956 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\black-on-white\dropdown_hover_32x32.png (256 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\languages\it.js (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\facebook.png (315 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\normal\back_20x20-inverted.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\normal\button-darker-left-35x35@2x.png (900 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\fonts\segoe-ui-regular-cyrillic.eot (1147 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\normal\dropdown_32x32.png (269 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\languages\de.js (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\white-on-black\skype-logo-136x60@2x.png (229 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\retina\backgroundNoCloud@2x.png (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\normal\button-right-35x35.png (475 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\normal\ticked_10x10@2x.png (423 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\fonts\segoe-ui-semibold-latin.eot (3130 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\black-on-white\button-left-35x35@2x.png (753 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\normal\button-darker-middle-35x35.png (233 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\fonts\segoe-ui-regular-greek.woff (244 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\normal\button-darker-right-35x35.png (542 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\fonts\segoe-ui-regular-hebrew.eot (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\normal\logo-skype-25x25.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\fonts\segoe-ui-regular-latin.ttf (4737 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\normal\caret_left.png (998 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\css\login.css (904 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\languages\zh-hant.js (970 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\buttons.png (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\6G3ZHSXE.txt (348 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\retina\icons@2x.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\skypelogo.png (1431 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\white-on-black\logo-office-25x25@2x.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\black-on-white\logo-skype-25x25.png (815 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\white-on-black\arrow_up_20x20.png (436 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\languages\ja.js (1229 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\messageBottomShort.png (279 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\black-on-white\exclamation_20x20@2x.png (796 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\fonts\segoe-ui-semibold-cyrillic.woff (319 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\retina\skypeicon@2x.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\retina\msAccountOverlay@2x.png (97 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\black-on-white\logo-office-25x25@2x.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\retina\msAccountColour@2x.png (132 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\normal\logo-xbox-25x25@2x.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\black-on-white\button-middle-35x35.png (230 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\languages\he.js (751 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\normal\logo-win-25x25.png (558 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\skypeicon.png (618 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\capsLockShort.png (328 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\black-on-white\button-left-35x35.png (469 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\black-on-white\back_20x20-inverted.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\fonts\segoe-ui-light-cyrillic.woff (1080 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\normal\msa-logos-135x25@2x.png (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\languages\sl.js (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\languages\vi.js (14 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\languages\hu.js (159 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\index.html (18 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\AC9005F5466BD463DF06D711B370595F (1152 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\black-on-white\dropdown_hover_32x32@2x.png (375 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\fonts\segoe-ui-semibold-greek.ttf (1933 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\black-on-white\back_20x20-inverted@2x.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\languages\id.js (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\black-on-white\ticked_not_10x10.png (191 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\normal\logo-win-25x25@2x.png (924 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\fonts\segoe-ui-semibold-cyrillic.ttf (1253 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\fonts\segoe-ui-semibold-hebrew.ttf (16 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\black-on-white\logo-cloud-35x25.png (837 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\fonts\segoe-ui-regular-arabic.woff (2926 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\898UU6QSUNZ2FRV1VN52.temp (893 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\4309200C3DBAD0F6F0DFACE9165FD092 (944 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\4309200C3DBAD0F6F0DFACE9165FD092 (727 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\js\login.js (4750 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Skype\shared_httpfe\queue.db (9692 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\languages\fr.js (9 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\black-on-white\skype-logo-136x60.png (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\normal\ticked_10x10.png (284 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\messageTopShort.png (256 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\normal\capslock_20x20@2x.png (781 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\fonts\segoe-ui-regular-cyrillic.woff (356 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\white-on-black\ticked_10x10.png (256 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\normal\back_20x20@2x.png (685 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\languages\zh-hans.js (11 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\fonts\segoe-ui-semibold-hebrew.woff (756 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\checkbox.png (551 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\white-on-black\back_20x20@2x.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\white-on-black\logo-cloud-35x25.png (839 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\retina\msDefaultPicture@2x.png (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\retina\buttons@2x.png (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\fonts\segoe-ui-regular-latin.eot (2674 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\normal\logo-office-25x25@2x.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\msAccount.png (93 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\languages\en.js (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\black-on-white\button-right-35x35@2x.png (698 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\9TC2H4SWYT5M60H4H6DY.temp (893 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\background.png (13 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\white-on-black\back_20x20.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\logoanim.gif (14 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\white-on-black\exclamation_20x20@2x.png (799 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\normal\dropdown_hover_32x32.png (270 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\retina\caret_right@2x.png (609 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\normal\arrow_up_20x20.png (514 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\retina\inputfields@2x.png (421 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\white-on-black\logo-win-25x25.png (519 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\fonts\segoe-ui-semibold-latin.woff (3956 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\AC9005F5466BD463DF06D711B370595F (69 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\black-on-white\dropdown_32x32.png (291 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\white-on-black\msa-logos-135x25.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\normal\dropdown_hover_32x32@2x.png (380 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\black-on-white\msa-logos-135x25@2x.png (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\normal\capslock_20x20.png (466 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Skype\shared.tmp (3111 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\languages\ro.js (9 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\05EC48341C277FE5110E7DFAA91377DC_39AA32012A618D407F0206C60DD48EA1 (1456 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\retina\plus@2x.png (905 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\black-on-white\logo-win-25x25@2x.png (911 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Skype\DataRv\offline-storage-ecs.data (24 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\fonts\segoe-ui-light-hebrew.ttf (1419 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\languages\sk.js (594 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\black-on-white\dropdown_32x32@2x.png (375 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\white-on-black\dropdown_hover_32x32@2x.png (581 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\normal\caret_right.png (995 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\16F1UBK8.txt (590 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\fonts\segoe-ui-semibold-arabic.ttf (3456 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\fonts\segoe-ui-semibold-arabic.woff (2319 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\fonts\segoe-ui-regular-hebrew.ttf (1682 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\black-on-white\back_20x20.png (399 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\fonts\segoe-ui-regular-cyrillic.ttf (1786 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\white-on-black\dropdown_32x32.png (267 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\retina\messageBottom@2x.png (477 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\fonts\segoe-ui-regular-arabic.eot (518 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\white-on-black\ticked_10x10@2x.png (345 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\black-on-white\ticked_10x10.png (257 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\msAccountColour.png (118 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\fonts\segoe-ui-light-hebrew.woff (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\fonts\segoe-ui-light-arabic.woff (2084 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\white-on-black\button-left-35x35.png (492 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\languages\pt-br.js (1506 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\retina\checkbox@2x.png (794 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\normal\button-middle-35x35@2x.png (334 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\black-on-white\logo-cloud-35x25@2x.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\fonts\segoe-ui-regular-greek.eot (1046 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\black-on-white\back_20x20@2x.png (582 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\languages\th.js (1890 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\normal\dropdown_32x32@2x.png (379 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\white-on-black\logo-xbox-25x25@2x.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\85ZLPQ8NL7TCNH41JIOQ.temp (893 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\white-on-black\logo-cloud-35x25@2x.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\messageBottom.png (301 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\white-on-black\msa-logos-135x25@2x.png (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\fonts\segoe-ui-semibold-latin.ttf (4318 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Skype\shared_httpfe\queue.db-journal (22756 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\normal\logo-cloud-35x25.png (924 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\normal\logo-xbox-25x25.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\languages\sr-latn.js (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\normal\exclamation_20x20@2x.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\normal\arrow_up_20x20@2x.png (792 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\normal\back_20x20.png (452 bytes)
%Program Files% (x86)\Skype\Updater\Updater.dll (102 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\white-on-black\button-left-35x35@2x.png (829 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\plus.png (605 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\VMBYYCQB7UUMTS1V2ZCX.temp (893 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\black-on-white\logo-office-25x25.png (718 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\dropdown.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\normal\button-left-35x35.png (489 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\retina\loader@2x.png (9 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\fonts\segoe-ui-light-latin.woff (3762 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Skype\shared_dynco\dc.db-journal (443115 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\normal\ticked_not_10x10.png (191 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\languages\pl.js (9 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\languages\sv.js (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\retina\facebook@2x.png (630 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\black-on-white\logo-skype-25x25@2x.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\fonts\segoe-ui-light-arabic.ttf (3174 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\normal\button-darker-middle-35x35@2x.png (335 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Skype\DataRv\offline-storage.data (90586 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\languages\hr.js (9 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\normal\button-middle-35x35.png (233 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\languages\ca.js (9 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\fonts\segoe-ui-light-greek.woff (1120 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\white-on-black\button-middle-35x35.png (230 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\retina\dropdown@2x.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\fonts\segoe-ui-semibold-cyrillic.eot (1952 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\languages\lv.js (114 bytes)

The process syesubc3_p2v3.exe:2304 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsz57D0.tmp\SkypeSetupFull.exe (2642483 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsz57D0.tmp\inetc.dll (53 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\SkypeSetupFull[1].exe (2470680 bytes)

The process RunDll32.exe:2524 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Roaming\OpenCandy\OpenCandy_FAF9D0CB233142BC9B2A763734709B2E\du73i.exe (10150 bytes)

The process sender.exe:4064 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\Temp\statisticsex.log (940 bytes)

The process YandexSearch.exe:3012 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\Temp\{97DA2459-9AC9-49B0-BE2B-6F1E7E24D829}\YandexSearch.msi (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\YandexSearch00000.log (107946 bytes)

The process uTorrent.exe:2888 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\e68bceb105fd4a3d832d7a1ff6cec13a[1].jpg (13188 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\e[3].htm (65 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\icon[3].ico (200 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\utt7A03.tmp (8715 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\IF4T96AA.txt (115 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\i[2].gif (43 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\apps\D944B3378FAB35793B7951FA53E41B2AB9CC462B (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\i[1].gif (43 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\icon[1].ico (200 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\ados[2].js (10762 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\bench[2].js (25 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\fileserve[1].js (42281 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\base64[1].js (3646 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\3MHSXO3P.txt (97 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\icon[1].ico (200 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\jquery-1.11.1.min[2].js (57088 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\7UMHIPWR.txt (1423 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\FTZX6ORL.txt (93 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\11MB6FBI.txt (92 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\e[1].htm (65 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\SFL57S44.txt (243 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\jquery-1.11.1.min[1].js (68659 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\93GPWKA6.txt (1422 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\index[2].htm (315 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\index-edge[2].htm (105 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\apps\featuredContent.btapp.new (41 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\dlimagecache\165F6EF40A81DD175FFAEA69E77ABFD30B27E71C (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\base64[1].js (145 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\settings.dat.new (85 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\B6TZJWVR.txt (115 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\ados[2].js (24580 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\apps\D944B3378FAB35793B7951FA53E41B2AB9CC462B\index.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\VJGII430.txt (96 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\updates.dat (1158 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\i[1].gif (43 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\utt7906.tmp.new (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\index-edge[1].htm (105 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\ados[1].js (22150 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\index[1].htm (315 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\jquery-1.11.2[1].js (146971 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\LJFTIZ1J.txt (91 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\ados[1].js (2626 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\apps\welcome-upsell.btapp (28 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\34e5de599eb245f89dc65ea4e8e2c989[1].jpg (2814 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\fileserve[1].png (200 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\icon[4].ico (200 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\base64[1].js (145 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\fileserve[1].css (73 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\i[1].gif (43 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\e[2].htm (64 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\LLRSP1MG.txt (115 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\apps\D944B3378FAB35793B7951FA53E41B2AB9CC462B\vid_thumb.jpg (23 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\apps\D944B3378FAB35793B7951FA53E41B2AB9CC462B\x.png (265 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\icon[2].ico (200 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\ados[1].js (19787 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Crypto\RSA\S-1-5-21-2858020935-2156992550-3658131804-1003\0c794867e265b94c871e3eaa0c0dcc7a_c0322acd-5e5d-42f0-b163-c591ee6ff5b9 (80 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\OEIIGI0A.txt (90 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\e[3].htm (65 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\jquery-1.11.2[1].js (152412 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\analytics[1].js (17192 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\apps\D944B3378FAB35793B7951FA53E41B2AB9CC462B\btapp (201 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\C5YC4Q6M.txt (115 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\PEH11AH6.txt (1423 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\icon[2].ico (200 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\utorrent.lng (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\collect[1].gif (35 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\apps\plus.btapp.new (765 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\analytics[2].js (17192 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\fileserve[1].js (917 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\bench[1].js (25 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\apps\D944B3378FAB35793B7951FA53E41B2AB9CC462B\empty_movie.gif (282 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\fileserve[1].js (505 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\apps\D944B3378FAB35793B7951FA53E41B2AB9CC462B\main.css (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\a05ac8e903c14e74befdd8b8426a754e[1].jpg (2835 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\base64[2].js (3646 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\apps\D944B3378FAB35793B7951FA53E41B2AB9CC462B\info_icon.png (250 bytes)

The process uTorrent.exe:2492 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\apps.btapp (87898 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\91ECFED5143F7F4F4576655D8EFAB51C_5876942B8A1533861E194CE520DB3C48 (1504 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\7D1F03728133589A90656A87E482B21F (290 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\Tar350E.tmp (2784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\dlimagecache\10E6FBE4D921B475FA5FEC6E9A535A540D6FEED1 (318 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\public.31f3956980bc91d669c1e443d00b8ddc.gz[1].js (421406 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\887FDFEF9DC62EF73EB288690D5944B1_041C7BCA38AE473669C469148677703C (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\apps\3609FC884502A1DF0AA5D9D160C827BB1BD51FC9.btapp (1425 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\index[1].htm (183 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\MTP_ySUJH_bn48VBG8sNSnhCUOGz7vYGh680lGh-uXM[1].woff (14792 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\aDT[1].js (50969 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\e[2].htm (62 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\utt2F0E.tmp (11571 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\7B8944BA8AD0EFDF0E01A43EF62BECD0_251DAA28139FC527316726DEB16CC0E9 (1504 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\utt501D.tmp.exe (50 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\dht_feed.dat.new (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\282332204[1].js (103941 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\8059E9A0D314877E40FE93D8CCFB3C69_6974D89D7560C032FD086BB9AE092DD4 (2618 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\8059E9A0D314877E40FE93D8CCFB3C69_8BB8535855D9B94D8D1B596BEE16137C (463 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\7D266D9E1E69FA1EEFB9699B009B34C8_0A9BFDD75B598C2110CBF610C078E6E6 (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\apps\player.btapp (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\jquery.min[1].js (47793 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\1DAF2884EC4DFA96BA4A58D4DBC9C406 (960 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\23B523C9E7746F715D33C6527C18EB9D (878 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\play-button.b2579dc0b8f3e62f1a204bfa79a4b481[1].png (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\8059E9A0D314877E40FE93D8CCFB3C69_E1083B58096402790BB1984C8AAEEC87 (1432 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\bundle-logo-large.b049e3f1e4aa142045d83cced5c97560[1].png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\DXI1ORHCpsQm3Vp6mXoaTXhCUOGz7vYGh680lGh-uXM[1].woff (14792 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\utt2EAF.tmp (7203 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\collect[1].gif (35 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\0adc57539238324f6687b0c0176a4cd1d792eb737b7aeba460a201664d6fab1c[1].htm (4294 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\ecommerce[1].js (25 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\8059E9A0D314877E40FE93D8CCFB3C69_A363FA4664764D069037AD000B6F9001 (2590 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\1DAF2884EC4DFA96BA4A58D4DBC9C406 (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\EB2C4AB8B68FFA4B7733A9139239A396_D76DB901EE986B889F30D8CC06229E2D (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\modernizr.c1f148ce451bd94fd43d6b446b4ca51e.gz[1].js (7309 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\btapp[1].htm (58 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\223DE96EE265046957A660ED7C9DD9E7_EFF9B9BA98DEAA773F261FA85A0B1771 (1688 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\index[1].html (107 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F12703B35B1F82C21160A92376087C84_912F99CA8D5FDC99CE2D346B99B73E21 (471 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\D47DBD2F9E3365FBBE008D71FB06716F_835A2FD7EE5F1F37B7872C78D42A88BF (2716 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F12703B35B1F82C21160A92376087C84_912F99CA8D5FDC99CE2D346B99B73E21 (1672 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\background[1].jpg (18910 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\887FDFEF9DC62EF73EB288690D5944B1_041C7BCA38AE473669C469148677703C (1904 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\828298824EA5549947C17DDABF6871F5_4A500E9AA7C5573906560F21D53A5861 (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\7D266D9E1E69FA1EEFB9699B009B34C8_8CA7164968F366C9A94AC8E71C4BDD9B (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\EB2C4AB8B68FFA4B7733A9139239A396_D76DB901EE986B889F30D8CC06229E2D (1720 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\Red Army Poster[1].jpg (9668 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\77EC63BDA74BD0D0E0426DC8F8008506 (56 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\resume.dat.new (141 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\logo.90a665e9dfacdeef6f53b7b899b21ead[1].png (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\23B523C9E7746F715D33C6527C18EB9D (1056 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\css[1].css (756 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\app.1422517976.tmp (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\utt2EAD.tmp (811 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\7D266D9E1E69FA1EEFB9699B009B34C8_0A9BFDD75B598C2110CBF610C078E6E6 (1504 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Crypto\RSA\S-1-5-21-2858020935-2156992550-3658131804-1003\215322cc5e79c842231ac4f88c1d0102_c0322acd-5e5d-42f0-b163-c591ee6ff5b9 (80 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Internet Explorer\DOMStore\DRT4YCWO\bundles.bittorrent[1].xml (1743 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\FB788E090BC1F3AA2FBC9E8FB2859601 (984 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\0adc57539238324f6687b0c0176a4cd1d792eb737b7aeba460a201664d6fab1c[1].json (2967 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\7B8944BA8AD0EFDF0E01A43EF62BECD0_251DAA28139FC527316726DEB16CC0E9 (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\apps\9D1685A791FDE8335C27D20650E32136BC84646F.btapp (33 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\2427C246DCF85A06DD675914EDA68038_EEE52A74DEE31B064E156E492FD05217 (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\Cab350D.tmp (56 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\public.761cb99c79e57c9367a7b524d29f8bf6.gz[1].css (118355 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\74BFD122C0875EC75DBE5C6DB4C59019 (24 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\8059E9A0D314877E40FE93D8CCFB3C69_8BB8535855D9B94D8D1B596BEE16137C (1432 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\all[1].js (102039 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\utt2EAE.tmp (15053 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\cJZKeOuBrn4kERxqtaUH3T8E0i7KZn-EPnyo3HZu7kw[1].woff (14792 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\828298824EA5549947C17DDABF6871F5_4A500E9AA7C5573906560F21D53A5861 (1312 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\fontawesome-webfont.7149833697a959306ec3012a8588dcfa[1].eot (22641 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\8059E9A0D314877E40FE93D8CCFB3C69_E1083B58096402790BB1984C8AAEEC87 (463 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\See Red Army in Theaters[1].jpg (2184 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\D47DBD2F9E3365FBBE008D71FB06716F_835A2FD7EE5F1F37B7872C78D42A88BF (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\analytics[1].js (21662 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\8059E9A0D314877E40FE93D8CCFB3C69_A363FA4664764D069037AD000B6F9001 (926 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\FOOR2L8O.txt (93 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\955CAB6FF6A24D5820D50B5BA1CF79C7_0D0504E280D4BC90041F089A5D901106 (1488 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\apps\plus.btapp (51 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\77EC63BDA74BD0D0E0426DC8F8008506 (370 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\2427C246DCF85A06DD675914EDA68038_EEE52A74DEE31B064E156E492FD05217 (1480 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Internet Explorer\MSIMGSIZ.DAT (2024 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\8059E9A0D314877E40FE93D8CCFB3C69_6974D89D7560C032FD086BB9AE092DD4 (926 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\settings.dat.new (146 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\dht.dat.new (637 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\rss.dat.new (141 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\955CAB6FF6A24D5820D50B5BA1CF79C7_0D0504E280D4BC90041F089A5D901106 (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\7D1F03728133589A90656A87E482B21F (920 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\cover[1].jpg (200 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\e[1].htm (62 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\nr-515.min[1].js (10314 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\91ECFED5143F7F4F4576655D8EFAB51C_5876942B8A1533861E194CE520DB3C48 (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\EDC238BFF48A31D55A97E1E93892934B_C20E0DA2D0F89FE526E1490F4A2EE5AB (1592 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\7D266D9E1E69FA1EEFB9699B009B34C8_8CA7164968F366C9A94AC8E71C4BDD9B (2716 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\Red Army Poster[1].jpg (1928 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\collect[1].gif (105 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\widgets[1].js (68356 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\apps\welcome.btapp (27 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\EDC238BFF48A31D55A97E1E93892934B_C20E0DA2D0F89FE526E1490F4A2EE5AB (471 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\223DE96EE265046957A660ED7C9DD9E7_EFF9B9BA98DEAA773F261FA85A0B1771 (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\FB788E090BC1F3AA2FBC9E8FB2859601 (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\57C8EDB95DF3F0AD4EE2DC2B8CFD4157 (680 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\74BFD122C0875EC75DBE5C6DB4C59019 (2016 bytes)

The process utt501D.tmp.exe:1120 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\Temp\utt53CA.tmp.new (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\L8PYC53T.txt (89 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\utt692E.tmp.bat (93 bytes)

The process utt501D.tmp.exe:2972 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\Desktop\Ã‚ÂµTorrent.lnk (811 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\utt7946.tmp.new (61 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\maindoc.ico (63 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Crypto\RSA\S-1-5-21-2858020935-2156992550-3658131804-1003\af35ebe0fef5203424ad3ebf2d258dbb_c0322acd-5e5d-42f0-b163-c591ee6ff5b9 (80 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\utt7436.tmp (603 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\updates\3.4.2_37754.exe (10815 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\uTorrent.exe (50 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\apps\9D1685A791FDE8335C27D20650E32136BC84646F\index.html (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\utt568C.tmp.exe (316 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\apps\9D1685A791FDE8335C27D20650E32136BC84646F\btapp (223 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\apps\3609FC884502A1DF0AA5D9D160C827BB1BD51FC9\icon.bmp (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\apps\4585805A0BEAAAA6F570825EB241201C227B5E09\main.css (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\apps\3609FC884502A1DF0AA5D9D160C827BB1BD51FC9\btapp (209 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\apps\0E9349A6F81CE7F47E9364BCFE8EF4B95C7B1708\index.html (591 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\apps\72F0D3E2141065DACF6134D07A06A2DF20590748\icon.bmp (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\apps\0E9349A6F81CE7F47E9364BCFE8EF4B95C7B1708\btapp (206 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\utt7A31.tmp.new (24 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\apps\72F0D3E2141065DACF6134D07A06A2DF20590748\index.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\3T213LI9.txt (93 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\settings.dat.new (255 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\apps\D944B3378FAB35793B7951FA53E41B2AB9CC462B\index.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\updates.dat (579 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\apps\72F0D3E2141065DACF6134D07A06A2DF20590748\main.css (946 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\apps\4585805A0BEAAAA6F570825EB241201C227B5E09\btapp (194 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\apps\4585805A0BEAAAA6F570825EB241201C227B5E09\index.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\apps\featuredContent.btapp (41 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\apps\3609FC884502A1DF0AA5D9D160C827BB1BD51FC9\package.json (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\toolbar_offer.benc (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\toolbar.benc.new (61 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\apps\0E9349A6F81CE7F47E9364BCFE8EF4B95C7B1708\package.json (982 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\apps\72F0D3E2141065DACF6134D07A06A2DF20590748\index.html (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\apps\welcome-upsell.btapp (28 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\apps\72F0D3E2141065DACF6134D07A06A2DF20590748\btapp (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\apps\0E9349A6F81CE7F47E9364BCFE8EF4B95C7B1708\icon.bmp (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\apps\4585805A0BEAAAA6F570825EB241201C227B5E09\empty_movie.gif (282 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\apps\D944B3378FAB35793B7951FA53E41B2AB9CC462B\x.png (265 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\utt6A08.tmp.new (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\apps\D944B3378FAB35793B7951FA53E41B2AB9CC462B\vid_thumb.jpg (23 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\QBX6Q5Q5.txt (93 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Start Menu\Ã‚ÂµTorrent.lnk (791 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\apps\3609FC884502A1DF0AA5D9D160C827BB1BD51FC9\index.html (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Ã‚ÂµTorrent.lnk (791 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\utt7830.tmp.new (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\apps\D944B3378FAB35793B7951FA53E41B2AB9CC462B\btapp (201 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\apps\4585805A0BEAAAA6F570825EB241201C227B5E09\info_icon.png (250 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\apps\plus.btapp.new (765 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\apps\4585805A0BEAAAA6F570825EB241201C227B5E09\vid_thumb.jpg (23 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\apps\D944B3378FAB35793B7951FA53E41B2AB9CC462B\empty_movie.gif (282 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\apps\9D1685A791FDE8335C27D20650E32136BC84646F\main.js (93 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\apps\D944B3378FAB35793B7951FA53E41B2AB9CC462B\main.css (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\apps\4585805A0BEAAAA6F570825EB241201C227B5E09\x.png (265 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\apps\D944B3378FAB35793B7951FA53E41B2AB9CC462B\info_icon.png (250 bytes)

Registry activity

The process du73i.exe:3996 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionTime" = "E7 99 5E AF 98 3B D0 01"

[HKCR\TypeLib\{A9345A7F-B62E-4F8E-A91D-5728B8C83F63}\1.0\HELPDIR]
"(Default)" = "C:\Users\"%CurrentUserName%"\AppData\Roaming\OpenCandy\OpenCandy_FAF9D0CB233142BC9B2A763734709B2E"

[HKCR\TypeLib\{A9345A7F-B62E-4F8E-A91D-5728B8C83F63}\1.0]
"(Default)" = "DlmLib"

[HKCR\TypeLib\{A9345A7F-B62E-4F8E-A91D-5728B8C83F63}\1.0\0\win32]
"(Default)" = "C:\Users\"%CurrentUserName%"\AppData\Roaming\OpenCandy\OpenCandy_FAF9D0CB233142BC9B2A763734709B2E\du73i.exe"

[HKLM\System\CurrentControlSet\Control\Session Manager]
"PendingFileRenameOperations" = "\??\%Program Files% (x86)\Google\Update\1.3.24.15, , \??\C:\Users\"%CurrentUserName%"\AppData\Local\Temp\VMwareDnD\327c54aa\python.dll, , \??\C:\Users\"%CurrentUserName%"\AppData\Local\Temp\VMwareDnD\327c54aa\, , \??\C:\Users\"%CurrentUserName%"\AppData\Local\Temp\OpenCandy_Why_Is_This_Here.txt, , \??\C:\Users\"%CurrentUserName%"\AppData\Local\Temp\utt7436.tmp, , \??\C:\Users\"%CurrentUserName%"\AppData\Local\Temp\, , \??\C:\Users\"%CurrentUserName%"\AppData\Roaming\OpenCandy\OpenCandy_FAF9D0CB233142BC9B2A763734709B2E\du73i.exe,"

[HKCR\TypeLib\{A9345A7F-B62E-4F8E-A91D-5728B8C83F63}\1.0\FLAGS]
"(Default)" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionReason" = "1"
"WpadDetectedUrl" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "46 00 00 00 49 00 00 00 09 00 00 00 00 00 00 00"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecision" = "0"

[HKCU\Software\Microsoft\Windows Script\Settings]
"JITDebug" = "0"

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Trojan deletes the following registry key(s):

[HKCR\TypeLib\{A9345A7F-B62E-4F8E-A91D-5728B8C83F63}]
[HKCR\TypeLib\{A9345A7F-B62E-4F8E-A91D-5728B8C83F63}\1.0\0]
[HKCR\TypeLib\{A9345A7F-B62E-4F8E-A91D-5728B8C83F63}\1.0\HELPDIR]
[HKCR\TypeLib\{A9345A7F-B62E-4F8E-A91D-5728B8C83F63}\1.0\FLAGS]
[HKCR\TypeLib\{A9345A7F-B62E-4F8E-A91D-5728B8C83F63}\1.0]
[HKCR\TypeLib\{A9345A7F-B62E-4F8E-A91D-5728B8C83F63}\1.0\0\win32]

The Trojan deletes the following value(s) in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"AutoConfigURL"
"ProxyServer"
"ProxyOverride"
"AutoDetect"

The process Yandex.exe:3208 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Taskband]
"Favorites" = "00 7C 01 00 00 14 00 1F 80 C8 27 34 1F 10 5C 10"

[HKCU\Software\Classes\Local Settings\MuiCache\2A\52C64B7E\@C:\Windows\system32\migwiz]
"wet.dll,-591" = "Windows Easy Transfer Reports"

[HKCU\Software\Classes\Local Settings\MuiCache\2A\52C64B7E\@C:\Windows\system32]
"wdc.dll,-10030" = "Resource Monitor"
"miguiresource.dll,-201" = "Task Scheduler"
"WindowsAnytimeUpgradeUI.exe,-1" = "Windows Anytime Upgrade"
"mstsc.exe,-4000" = "Remote Desktop Connection"
"rstrui.exe,-100" = "System Restore"
"ie4uinit.exe,-737" = "Internet Explorer (No Add-ons)"

[HKCU\Software\Classes\Local Settings\MuiCache\2A\52C64B7E\@%Program Files%\Windows Sidebar]
"sidebar.exe,-1005" = "Desktop Gadget Gallery"

[HKCU\Software\Classes\Local Settings\MuiCache\2A\52C64B7E\@C:\Windows\system32]
"msinfo32.exe,-100" = "System Information"
"odbcint.dll,-1310" = "Data Sources (ODBC)"
"OobeFldr.dll,-33056" = "Getting Started"
"miguiresource.dll,-101" = "Event Viewer"
"MdSched.exe,-4001" = "Windows Memory Diagnostic"
"mycomput.dll,-300" = "Computer Management"
"FXSRESM.dll,-114" = "Windows Fax and Scan"

[HKCU\Software\Classes\Local Settings\MuiCache\2A\52C64B7E]
"LanguageList" = "en-US, en"

[HKCU\Software\Classes\Local Settings\MuiCache\2A\52C64B7E\@C:\Windows\system32]
"msra.exe,-100" = "Windows Remote Assistance"

[HKCU\Software\Classes\Local Settings\MuiCache\2A\52C64B7E\@%Program Files%\Common Files\Microsoft Shared\Ink]
"TipTsf.dll,-80" = "Tablet PC Input Panel"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Taskband]
"FavoritesVersion" = "2"

[HKCU\Software\Classes\Local Settings\MuiCache\2A\52C64B7E\@C:\Windows\system32]
"dfrgui.exe,-103" = "Disk Defragmenter"
"sdcpl.dll,-101" = "Backup and Restore"

[HKCU\Software\Classes\Local Settings\MuiCache\2A\52C64B7E\@C:\Windows\system32\Speech\SpeechUX]
"sapi.cpl,-5555" = "Windows Speech Recognition"

[HKCU\Software\Classes\Local Settings\MuiCache\2A\52C64B7E\@%Program Files%\Common Files\Microsoft Shared\Ink]
"ShapeCollector.exe,-298" = "Personalize Handwriting Recognition"

[HKCU\Software\Classes\Local Settings\MuiCache\2A\52C64B7E\@C:\Windows\system32]
"recdisc.exe,-2000" = "Create a System Repair Disc"
"mblctr.exe,-1008" = "Windows Mobility Center"
"comres.dll,-3410" = "Component Services"
"NetProjW.dll,-501" = "Connect to a Network Projector"

[HKCU\Software\Classes\Local Settings\MuiCache\2A\52C64B7E\@C:\Windows\system32\migwiz]
"wet.dll,-588" = "Windows Easy Transfer"

[HKCU\Software\Classes\Local Settings\MuiCache\2A\52C64B7E\@C:\Windows\system32]
"wdc.dll,-10021" = "Performance Monitor"
"gameux.dll,-10082" = "Games Explorer"
"wsecedit.dll,-718" = "Local Security Policy"
"AuthFWGP.dll,-20" = "Windows Firewall with Advanced Security"
"SNTSearch.dll,-505" = "Sticky Notes"
"displayswitch.exe,-320" = "Connect to a Projector"
"wucltux.dll,-1" = "Windows Update"
"msconfig.exe,-126" = "System Configuration"
"XpsRchVw.exe,-102" = "XPS Viewer"

[HKCU\Software\Classes\Local Settings\MuiCache\2A\52C64B7E\@%Program Files%\Common Files\Microsoft Shared\Ink]
"mip.exe,-291" = "Math Input Panel"

[HKCU\Software\Classes\Local Settings\MuiCache\2A\52C64B7E\@C:\Windows\system32]
"iscsicpl.dll,-5001" = "iSCSI Initiator"
"pmcsnap.dll,-700" = "Print Management"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Taskband]
"FavoritesChanges" = "8"

[HKCU\Software\Classes\Local Settings\MuiCache\2A\52C64B7E\@C:\Windows\system32]
"SyncCenter.dll,-3000" = "Sync Center"
"SnippingTool.exe,-15051" = "Snipping Tool"

[HKCU\Software\Classes\Local Settings\MuiCache\2A\52C64B7E\@C:\Windows\system32\WindowsPowerShell\v1.0]
"powershell.exe,-101" = "Windows PowerShell ISE"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Taskband]
"FavoritesResolve" = "CC 02 00 00 4C 00 00 00 01 14 02 00 00 00 00 00"

[HKCU\Software\Classes\Local Settings\MuiCache\2A\52C64B7E\@C:\Windows\system32\WindowsPowerShell\v1.0]
"powershell.exe,-102" = "Windows PowerShell ISE (x86)"

[HKCU\Software\Classes\Local Settings\MuiCache\2A\52C64B7E\@%Program Files%\Windows Journal]
"Journal.exe,-3074" = "Windows Journal"

[HKCU\Software\Classes\Local Settings\MuiCache\2A\52C64B7E\@C:\Windows\system32]
"SoundRecorder.exe,-100" = "Sound Recorder"
"sud.dll,-1" = "Default Programs"
"filemgmt.dll,-2204" = "Services"
"AccessibilityCpl.dll,-10" = "Ease of Access Center"

The process SkypeSetupFull.exe:2652 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"AutoDetect" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDetectedUrl" = ""

[HKLM\SOFTWARE\Wow6432Node\Skype\Installer]
"DownloadContentLength" = "0"

[HKLM\SOFTWARE\Wow6432Node\Skype\Phone\UI]
"InstallExitCode" = "50001"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f3-c8-bd]
"WpadDecisionReason" = "1"

[HKLM\SOFTWARE\Wow6432Node\Skype\Installer]
"C2CIE" = "255"
"C2CFF" = "255"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer]
"GlobalAssocChangedCounter" = "57"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9C99CCBB-10A0-4B2A-A5BE-4CAC43F74632}]
"WpadNetworkName" = "Network 3"

[HKLM\SOFTWARE\Wow6432Node\Skype\Installer]
"MSNHPIE" = "255"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "0"

[HKLM\SOFTWARE\Wow6432Node\Skype\Installer]
"MSNHPGC" = "255"
"BINGSRCHIE" = "255"
"DonwloadLastModified" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionTime" = "02 2C 7E BF 98 3B D0 01"

[HKLM\SOFTWARE\Wow6432Node\Skype\Phone\UI]
"FinishedInstallation" = "1422518048"

[HKLM\SOFTWARE\Wow6432Node\Skype\Phone]
"FE_Label" = "550"

[HKCU\Software\Classes\Local Settings\MuiCache\2A\52C64B7E]
"LanguageList" = "en-US, en"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9C99CCBB-10A0-4B2A-A5BE-4CAC43F74632}]
"WpadDecision" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content]
"CachePrefix" = ""

[HKLM\SOFTWARE\Wow6432Node\Skype\Phone\UI\General]
"SkypeSetup" = "SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce"

[HKLM\SOFTWARE\Wow6432Node\Skype\Installer]
"DownloadETag" = ""
"BINGSRCHGC" = "255"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f3-c8-bd]
"WpadDecisionTime" = "99 A0 5C C1 98 3B D0 01"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History]
"CachePrefix" = "Visited:"

[HKLM\SOFTWARE\Wow6432Node\Skype\Installer]
"YSRCH" = "255"
"C2CGC" = "255"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "46 00 00 00 4D 00 00 00 09 00 00 00 00 00 00 00"

[HKLM\SOFTWARE\Wow6432Node\Skype\Installer]
"MSNHPFF" = "255"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f3-c8-bd]
"WpadDecision" = "0"

[HKLM\SOFTWARE\Wow6432Node\Skype\Installer]
"yhp" = "255"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies]
"CachePrefix" = "Cookie:"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9C99CCBB-10A0-4B2A-A5BE-4CAC43F74632}]
"WpadDecisionReason" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionReason" = "1"

"WpadDecision" = "0"

[HKLM\SOFTWARE\Wow6432Node\Skype\Installer]
"BINGSRCHFF" = "255"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9C99CCBB-10A0-4B2A-A5BE-4CAC43F74632}]
"WpadDecisionTime" = "99 A0 5C C1 98 3B D0 01"

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

To automatically run itself each time Windows is booted, the Trojan adds the following link to its file to the system registry autorun key:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Run]
"Skype" = "%Program Files% (x86)\Skype\Phone\Skype.exe /minimized /regrun"

The Trojan deletes the following value(s) in system registry:

[HKLM\SOFTWARE\Wow6432Node\Skype\Phone\UI]
"FinishedInstallation"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f3-c8-bd]
"WpadDetectedUrl"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDetectedUrl"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyOverride"
"AutoDetect"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyServer"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9C99CCBB-10A0-4B2A-A5BE-4CAC43F74632}]
"WpadDetectedUrl"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"AutoConfigURL"

[HKLM\SOFTWARE\Wow6432Node\Skype\Phone\UI]
"InstallType"
"InstalledUDP"

The process MsiExec.exe:2576 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\cncgohepihcekklokhbhiblhfcmipbdh]
"install_parameter" = "clid=2154478&win=161&"
"update_url" = "http://clients2.google.com/service/update2/crx"

[HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\gehngeifmelphpllncobkmimphfkckne]
"update_url" = "http://clients2.google.com/service/update2/crx"
"install_parameter" = "clid=2154477&win=161&"

The process MsiExec.exe:1188 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKU\.DEFAULT\SOFTWARE\Classes\Local Settings\MuiCache\2A\52C64B7E\@%systemroot%\system32]
"dnsapi.dll,-103" = "Domain Name System (DNS) Server Trust"

[HKU\.DEFAULT\SOFTWARE\Classes\Local Settings\MuiCache\2A\52C64B7E]
"LanguageList" = "en-US, en"

[HKU\.DEFAULT\SOFTWARE\Classes\Local Settings\MuiCache\2A\52C64B7E\@%systemroot%\system32]
"p2pcollab.dll,-8042" = "Peer to Peer Trust"

The process MsiExec.exe:3828 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Taskband]
"Favorites" = "00 7C 01 00 00 14 00 1F 80 C8 27 34 1F 10 5C 10"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"AutoDetect" = "1"

[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\37A3B13E92087F401D37E840C9A3A3D4]
"FaviconPath" = "C:\Users\"%CurrentUserName%"\AppData\Local\MICROS~1\INTERN~1\Services\WWWYAN~2.ICO"

[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\buffer]
"FaviconPath" = "C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\Internet Explorer\Services\Bing.ico"

[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}]
"URL" = "http://yandex.com/yandsearch?win=161&clid=2154478&text={searchTerms}"

[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\37A3B13E92087F401D37E840C9A3A3D4]
"SortIndex" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "0"

[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}]
"NTLogoURL" = "http://downloader.yandex.net/banner/ntpagelogo/{language}_{scalelevel}.png"
"NTTopResultURL" = "Type: REG_SZ, Length: 0"

[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\37A3B13E92087F401D37E840C9A3A3D4]
"URL" = "http://yandex.com/yandsearch?win=161&clid=2154478&text={searchTerms}"
"SuggestionsURL" = "Type: REG_SZ, Length: 0"

[HKCU\Software\AppDataLow\Yandex]
"UICreated_adm" = "1"

[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\37A3B13E92087F401D37E840C9A3A3D4]
"DisplayName" = "Yandex"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Cached]
"{182C3813-DF97-40FA-9C4E-B7D3E74F00CA} {000214F9-0000-0000-C000-000000000046} 0xFFFF" = "01 00 00 00 00 00 00 00 69 AA 5F BB 98 3B D0 01"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Taskband]
"FavoritesVersion" = "2"

[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\37A3B13E92087F401D37E840C9A3A3D4]
"YaCreationDate" = "2015-01-29"

[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}]
"SuggestionsURL" = "Type: REG_SZ, Length: 0"

[HKCU\Software\Microsoft\Internet Explorer\SearchUrl\y]
"(Default)" = "http://yandex.com/yandsearch?win=161&clid=2154479&text=%s"

[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}]
"FaviconPath" = "C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\Internet Explorer\Services\Bing.ico"
"DisplayName" = "Yandex"

[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\buffer]
"DisplayName" = "Bing"

[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}]
"SortIndex" = "0"

[HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks]
"{CFBFAE00-17A6-11D0-99CB-00C04FD64497}" = "Type: REG_SZ, Length: 0"

[HKCU\Software\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope" = "{0633EE93-D776-472f-A0FF-E1416B8B2E3A}"

[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\37A3B13E92087F401D37E840C9A3A3D4]
"SuggestionsURL_JSON" = "http://suggest.yandex.net/suggest-ff.cgi?part={searchTerms}"
"ShowSearchSuggestions" = "1"

[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}]
"SuggestionsURL_JSON" = "http://suggest.yandex.net/suggest-ff.cgi?part={searchTerms}"

[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\buffer]
"FaviconURLFallback" = "http://www.bing.com/favicon.ico"

[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}]
"NTURL" = "http://yandex.com/yandsearch?win=161&clid=&text={searchTerms}"
"ShowSearchSuggestions" = "1"

[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\37A3B13E92087F401D37E840C9A3A3D4]
"NTLogoURL" = "http://downloader.yandex.net/banner/ntpagelogo/{language}_{scalelevel}.png"

[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\buffer]
"SuggestionsURLFallback" = "http://api.bing.com/qsml.aspx?query={searchTerms}&maxwidth={ie:maxWidth}&rowheight={ie:rowHeight}&sectionHeight={ie:sectionHeight}&FORM=IE10SS&market={language}"

[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}]
"YaCreationDate" = "2015-01-29"

[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\37A3B13E92087F401D37E840C9A3A3D4]
"NTTopResultURL" = "Type: REG_SZ, Length: 0"
"FaviconURLFallback" = "http://www.yandex.com/favicon.ico"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Taskband]
"FavoritesChanges" = "7"

[HKCU\Software\Microsoft\Internet Explorer\Main]
"Start Page" = "http://www.yandex.com/?win=161&clid=2154477"

[HKCU\Software\Microsoft\Internet Explorer\SearchScopes]
"ShowSearchSuggestionsInAddressGlobal" = "1"

[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}]
"FaviconURLFallback" = "http://www.yandex.com/favicon.ico"

[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\buffer]
"URL" = "http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE10SR"

[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\37A3B13E92087F401D37E840C9A3A3D4]
"SuggestionsURLFallback" = "http://api.bing.com/qsml.aspx?query={searchTerms}&maxwidth={ie:maxWidth}&rowheight={ie:rowHeight}&sectionHeight={ie:sectionHeight}&FORM=IE10SS&market={language}"

[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\buffer]
"TopResultURLFallback" = "http://www.bing.com/search?q={searchTerms}&src=IE-TopResult&FORM=IE10TR"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Taskband]
"FavoritesResolve" = "CC 02 00 00 4C 00 00 00 01 14 02 00 00 00 00 00"

[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\37A3B13E92087F401D37E840C9A3A3D4]
"NTURL" = "http://yandex.com/yandsearch?win=161&clid=&text={searchTerms}"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\Component Categories\{56FFCC30-D398-11D0-B2AE-00A0C908FA49}\Enum]
"Implementing" = "1C 00 00 00 01 00 00 00 DF 07 01 00 04 00 1D 00"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Cached]
"{E88DCCE0-B7B3-11D1-A9F0-00AA0060FA31} {000214E6-0000-0000-C000-000000000046} 0xFFFF" = "01 00 00 00 00 00 00 00 02 A7 0D BA 98 3B D0 01"

[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\37A3B13E92087F401D37E840C9A3A3D4]
"TopResultURLFallback" = "http://www.bing.com/search?q={searchTerms}&src=IE-TopResult&FORM=IE10TR"

The Trojan deletes the following registry key(s):

[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}]
[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\37A3B13E92087F401D37E840C9A3A3D4]
[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\buffer]
[HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks]

The Trojan deletes the following value(s) in system registry:

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"
"IntranetName"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

The process utt568C.tmp.exe:2984 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Trojan deletes the following value(s) in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyServer"
"ProxyOverride"
"AutoDetect"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"
"IntranetName"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"AutoConfigURL"

The process %original file name%.exe:3584 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\uTorrent]
"URLInfoAbout" = "http://www.utorrent.com"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"AutoDetect" = "1"

[HKCU\Software\Classes\Magnet]
"(Default)" = "Magnet URI"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History]
"CachePrefix" = "Visited:"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "46 00 00 00 41 00 00 00 09 00 00 00 00 00 00 00"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer]
"GlobalAssocChangedCounter" = "35"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDetectedUrl" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "0"

[HKCU\Software\Classes\Magnet\shell\open\command]
"(Default)" = "%Program Files% (x86)\uTorrent\uTorrent.exe %1"

[HKCU\Software\Classes\.btsearch]
"(Default)" = "uTorrent"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionTime" = "0E E1 3A 71 98 3B D0 01"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\uTorrent]
"DisplayName" = "Ã‚ÂµTorrent"

[HKCU\Software\Classes\Magnet\DefaultIcon]
"(Default)" = "%Program Files% (x86)\uTorrent\uTorrent.exe,0"

[HKCU\Software\Classes\uTorrent\DefaultIcon]
"(Default)" = "%Program Files% (x86)\uTorrent\uTorrent.exe,0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content]
"CachePrefix" = ""

[HKCU\Software\Classes\Magnet]
"Content Type" = "application/x-magnet"

[HKCU\Software\Classes\MIME\Database\Content Type\application/x-bittorrent]
"Extension" = ".torrent"

[HKCU\Software\BitTorrent\uTorrent]
"Revision" = "26616"

[HKCU\Software\Classes\Magnet\shell]
"(Default)" = "open"

[HKCU\Software\Classes\Applications\uTorrent.exe\shell\open\command]
"(Default)" = "%Program Files% (x86)\uTorrent\uTorrent.exe %1"

[HKCU\Software\Classes\.torrent]
"(Default)" = "uTorrent"

[HKCU\Software\Classes\MIME\Database\Content Type\application/x-bittorrentsearchdescription xml]
"Extension" = ".btsearch"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\uTorrent]
"InstallLocation" = "%Program Files% (x86)\uTorrent"
"NoRepair" = "1"

[HKCU\Software\Classes\.torrent]
"Content Type" = "application/x-bittorrent"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\uTorrent]
"NoModify" = "1"

[HKCU\Software\Classes\uTorrent\shell]
"(Default)" = "open"

[HKCR\MIME\Database\Content Type\application/x-bittorrent]
"Extension" = ".torrent"

[HKCU\Software\Classes\.btsearch\OpenWithProgids]
"uTorrent" = ""

[HKCU\Software\Classes\uTorrent\Content Type]
"(Default)" = "application/x-bittorrent"

[HKCU\Software\Classes\.torrent\OpenWithProgids]
"uTorrent" = ""

[HKCR\MIME\Database\Content Type\application/x-bittorrentsearchdescription xml]
"Extension" = ".btsearch"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies]
"CachePrefix" = "Cookie:"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\uTorrent]
"DisplayIcon" = "%Program Files% (x86)\uTorrent\uTorrent.exe,0"

[HKCU\Software\Classes\.btsearch]
"Content Type" = "application/x-bittorrentsearchdescription xml"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionReason" = "1"

[HKCU\Software\Classes\Applications\uTorrent.exe\shell]
"(Default)" = "open"

[HKCU\Software\Classes\uTorrent\shell\open\command]
"(Default)" = "%Program Files% (x86)\uTorrent\uTorrent.exe %1"

[HKCU\Software\Classes\Magnet]
"URL Protocol" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecision" = "0"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\uTorrent]
"DisplayVersion" = "3.1.0"
"UninstallString" = "%Program Files% (x86)\uTorrent\uTorrent.exe /UNINSTALL"

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Trojan deletes the following value(s) in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyOverride"
"AutoDetect"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyServer"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"AutoConfigURL"

The process %original file name%.exe:1640 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKCU\Software\Classes\Local Settings\MuiCache\29\52C64B7E]
"LanguageList" = "en-US, en"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies]
"CachePrefix" = "Cookie:"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"AutoDetect" = "1"

[HKCU\Software\Classes\FalconBetaAccount]
"remote_access_client_id" = "0438257705"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionTime" = "0E E1 3A 71 98 3B D0 01"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9C99CCBB-10A0-4B2A-A5BE-4CAC43F74632}]
"WpadDecision" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History]
"CachePrefix" = "Visited:"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content]
"CachePrefix" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f3-c8-bd]
"WpadDecisionReason" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionReason" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9C99CCBB-10A0-4B2A-A5BE-4CAC43F74632}]
"WpadNetworkName" = "Network 3"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f3-c8-bd]
"WpadDecision" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "46 00 00 00 40 00 00 00 09 00 00 00 00 00 00 00"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecision" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9C99CCBB-10A0-4B2A-A5BE-4CAC43F74632}]
"WpadDecisionReason" = "1"

"WpadDecisionTime" = "0E E1 3A 71 98 3B D0 01"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f3-c8-bd]
"WpadDecisionTime" = "0E E1 3A 71 98 3B D0 01"

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Trojan deletes the following value(s) in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f3-c8-bd]
"WpadDetectedUrl"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDetectedUrl"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyOverride"
"AutoDetect"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyServer"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9C99CCBB-10A0-4B2A-A5BE-4CAC43F74632}]
"WpadDetectedUrl"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"AutoConfigURL"

The process Skype.exe:3328 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKCU\Software\Classes\Wow6432Node\Interface\{92A9EB9B-85EE-444E-A302-00C3C945BAA4}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{B0C10F94-CAB6-4821-9643-D781885A46AF}]
"(Default)" = "_IVoiceMailsManagerEvents"

[HKCU\Software\Classes\Interface\{9B3A702D-5BE1-4FCE-ADB3-EBBD23E078C3}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{8E839AF9-9508-475A-AA47-3EE8A946B75E}]
"(Default)" = "IAudioChannel"

[HKCU\Software\Classes\Wow6432Node\Interface\{CA7EEB7A-7DC3-4FFE-A174-23DB5A003C04}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{70DCCE38-90BF-4428-A34F-3A6082F29E50}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{1FF8AA01-D8AF-4B2B-B254-BEFEFABAF2D6}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{4875C050-BA9C-4A05-891E-E7B0A9463664}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{62A75516-C79B-42D7-8B49-3BA492C2B385}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{4290152C-75C9-47C8-AA12-814818360B3F}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{E4E1D0AF-5B70-45AF-9A0E-F548D8FBD17C}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{D0DBB17D-565E-486C-A47B-BA32DC1FAD0A}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{76428270-36FA-4236-8BDF-AADB39FD1371}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{B1F5BCD8-69A6-4FC3-9EF0-9BD4AD999061}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{2209E091-5B90-4CAF-8582-CC5979883376}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{1F8EBE6F-7993-42CE-980A-A2F03793BE71}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{1B04D929-11E4-46C2-9162-EA4F2758C3A7}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{478DDA59-64C0-4429-AC8A-F10A940B52CC}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{D60B1701-766D-401E-8586-83E0C9106BE0}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{7B39CB77-4AEB-42D7-B351-CB5472C1C6AD}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{EF5C00E4-75E2-4D39-B358-0ED9CB14F3CB}]
"(Default)" = "IConversationContextCollectionEventData"

[HKCU\Software\Classes\Interface\{663C61F4-A9DA-4A6F-A606-F142F665DF61}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{FD9000B3-479F-4B16-9D63-70A49E078946}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{55A21CF3-A2B3-484E-BE2A-14280F501289}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{2EDAF003-14A6-4FAF-8A72-99526D048D63}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{DAA5FDE3-A81C-4F23-80B6-C47B52C649BF}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{25025B1B-0084-44D1-B383-9FFC9A99ABCD}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{57C3CB4D-C794-456F-846D-0E1ECA78BD00}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{08E1E9CF-A7E4-43BE-AE8E-B223CE71E46E}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{3C8D7146-35EA-4133-B2F6-C1FC2401A091}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{C12F0DE5-9A7D-425C-B391-8BE004EAA2F6}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{9AB20314-B258-48F8-B659-AD250DFA20F5}]
"(Default)" = "ILyncClientNotificationReceivedEventData"

[HKCU\Software\Classes\Interface\{C79E4169-535F-4A41-8DE2-C65A90D9503D}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{4023052E-E3B7-48A3-BCB3-CA2234D9BAEE}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{C63F58CB-EF11-4934-AA3B-2D69244F0780}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{FD02E775-CB9D-4CE3-9243-115C81E5F11C}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{953AE732-F53A-4116-AC1B-0321B3FB3DBA}]
"(Default)" = "_ILyncClientEvents"

[HKCU\Software\Classes\Wow6432Node\Interface\{E664682C-CBA5-4C7C-A65B-9CD046F24CBD}]
"(Default)" = "ISignInDelayedEventData"

[HKCU\Software\Classes\Interface\{DEDDD7BD-4763-41D2-9AAA-B2C143457CA4}]
"(Default)" = "IModalityActionAvailabilityChangedEventData"

[HKCU\Software\Classes\Wow6432Node\Interface\{E5CFF4A5-83A8-4FD8-8DAA-77A3E2288D4A}]
"(Default)" = "IConferenceCapabilities2"

[HKCU\Software\Classes\Wow6432Node\Interface\{18A9A79A-CBC7-4F8B-8B2B-9B40CA75EC3C}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{C4D95336-5949-4D13-AAC8-82039E5CBCFC}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{011B320C-9AC1-4DDE-B595-3D0014472E2F}]
"(Default)" = "_IRecentContactsEvents"

[HKCU\Software\Classes\Interface\{AA41EE75-F9C5-42F7-8D17-1D92D6BA4D92}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{E82737B9-B2BE-4AFD-B649-C9F665627F20}]
"(Default)" = "IDeviceCollectionEventData"

[HKCU\Software\Classes\Wow6432Node\Interface\{4DA899D3-FAC7-4F43-8E4A-1987988FBC9B}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{4875C050-BA9C-4A05-891E-E7B0A9463664}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{A58F54D2-9786-4309-964D-96549AEC7611}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{F644C610-A146-4A56-8338-A69C45C71CEF}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{AA186C92-181E-417F-B150-FCA0F367E0FC}]
"(Default)" = "_IFrequentContactsEvents"

[HKCU\Software\Classes\Interface\{7CFE77CD-731D-48B2-82B1-ECA3414D62E3}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{12480BD4-072F-4763-B9FB-41B2CA54F9CD}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{E0E8B413-BB57-4B58-B1FB-288F3A269E35}]
"(Default)" = "IConferenceCapabilities"

[HKCU\Software\Classes\Interface\{18A9A79A-CBC7-4F8B-8B2B-9B40CA75EC3C}]
"(Default)" = "IFrequentContacts"

[HKCU\Software\Classes\Interface\{87084018-7E74-4F92-AB39-1CF03188580E}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{DC63D621-11C8-4490-B017-B8C57EE1BE25}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{0C81EC90-9469-4ED4-ACAD-ADB86E11039C}]
"(Default)" = "IGroupCollection"

[HKCU\Software\Classes\Interface\{DC63D621-11C8-4490-B017-B8C57EE1BE25}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{A766520D-F700-4BF5-8428-56BD914C1C40}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{7BF20B14-58D1-494B-B301-9B16BACC9610}]
"(Default)" = "IRoomPropertyDictionary"

[HKCU\Software\Classes\Wow6432Node\Interface\{CA62E6F3-3E6D-451B-AEAA-6A1B7AACF8D4}]
"(Default)" = "IConversationWindowNeedsSizeChangeEventData"

[HKCU\Software\Classes\Interface\{628D7BDD-45AB-404D-8505-B3ADC15F454D}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{8057F99D-292C-4371-926B-5312E61A3A40}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{B8FD4A53-E7E6-4995-A5B5-1306C7584964}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{4290152C-75C9-47C8-AA12-814818360B3F}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{85109845-6AE2-4B6B-9524-65BA203E5B7D}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{7BF20B14-58D1-494B-B301-9B16BACC9610}]
"(Default)" = "IRoomPropertyDictionary"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecision" = "0"

[HKCU\Software\Classes\Wow6432Node\Interface\{A4E1D1E4-7839-473B-95FA-5D33DDC0D2DD}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{00E22CBB-3170-453A-AE62-EAFBC75A9F8D}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{3417D640-3976-4CB6-BC82-54E5E2E10784}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{AAFE380B-B079-4B55-B81B-A9401D77B776}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{C6605772-3D9D-44A7-B43A-4590E6B43EE3}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{D0984CEF-E323-4574-B07B-5C970C9CAEE0}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{86225E5C-7595-4D1C-985D-8A0458D714C0}]
"(Default)" = "IClient2"

[HKCU\Software\Classes\Wow6432Node\Interface\{F7EE956B-A713-48D3-AFEF-0A28F37740B3}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{3959E5C6-75CC-448E-9A18-9F163FF47646}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{E664682C-CBA5-4C7C-A65B-9CD046F24CBD}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{8AFFB8CE-5404-4280-BCA3-E2E4388E6D73}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{232F1CAB-5351-4E48-8A87-2185445F712D}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{3690D374-3779-4EFC-B8E8-20642C01529A}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{5418E2AB-EB9A-4659-B4DC-28DE633B2B8F}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{3DEBDC7E-811F-4304-BDD7-7D98C732026C}]
"(Default)" = "IHistoryInfo"

[HKCU\Software\Classes\Interface\{62A75516-C79B-42D7-8B49-3BA492C2B385}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{2F8C3E58-436B-42DB-8924-6C394B37DCA2}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{219DC126-9A48-483F-80C2-3F22B3B47829}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{A4E1D1E4-7839-473B-95FA-5D33DDC0D2DD}]
"(Default)" = "IConversationCollection"

[HKCU\Software\Classes\Interface\{2A9385AA-CF61-4E47-B64C-214DE4A4AD11}]
"(Default)" = "IConversationStateChangedEventData"

[HKCU\Software\Classes\Wow6432Node\Interface\{DEDDD7BD-4763-41D2-9AAA-B2C143457CA4}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{AAFE380B-B079-4B55-B81B-A9401D77B776}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{DC63D621-11C8-4490-B017-B8C57EE1BE25}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{26F15083-86DB-4663-89ED-A0ABC896B9A1}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{109D32CE-E09F-46F5-9ECB-01E1D273B7DA}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{56F7DEC0-59CA-47C6-9F35-D5066A702B39}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{995F992C-9DEF-47B9-BF11-81813C0C0E28}]
"(Default)" = "ISearchProviderStateChangedEventData"

[HKCU\Software\Classes\Interface\{17635563-2FA5-46AD-8F47-3F0FF958ECE2}]
"(Default)" = "IContentCollectionChangedEventData"

[HKCU\Software\Classes\Wow6432Node\Interface\{1FF8AA01-D8AF-4B2B-B254-BEFEFABAF2D6}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{38E5EC21-81A1-45A7-94D6-B812976231A4}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{3DEBDC7E-811F-4304-BDD7-7D98C732026C}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{9397FF55-EE06-4F02-8F2A-BE3AE249D4BB}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{BE6086A1-D436-4834-89EE-3CA4F8596A58}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{C4D95336-5949-4D13-AAC8-82039E5CBCFC}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{55A21CF3-A2B3-484E-BE2A-14280F501289}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{209DA899-15F1-499A-B8B5-A847EAA899AE}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{1A8A9402-E89F-40AE-88A8-B328391684B6}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{D9D04B55-D820-4D5B-A690-658A49368478}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{4BACB4B8-1236-42B8-BDA1-D1533148780D}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{378CD767-1B64-4A0E-A941-8F52869FC9DF}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{D0984CEF-E323-4574-B07B-5C970C9CAEE0}]
"(Default)" = "ICustomAvailabilityState"

[HKCU\Software\Classes\Interface\{88C688B0-3908-4C56-A2E8-F90AB705C536}]
"(Default)" = "IConversationActionAvailabilityEventData"

[HKCU\Software\Classes\Interface\{EBD19735-0CB5-4AF3-8E05-B0140CF9D545}]
"(Default)" = "IPreviousConversationBatchEventData"

[HKCU\Software\Classes\Interface\{082EE280-726E-417F-99CB-81A0CCBFF883}]
"(Default)" = "_IDistributionGroupEvents"

[HKCU\Software\Classes\Interface\{8A88C016-AA5D-4EAE-9C79-7AA5C360ED76}]
"(Default)" = "IConversationContextCollection"

[HKCU\Software\Classes\Wow6432Node\Interface\{1FF0E6F1-2FE4-4E29-A123-557AF0DB6927}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{FA7971EF-1E41-429F-8C79-DAC5F88D444B}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{AC10D6E9-4A8C-4484-B8F4-CA1E36347AAE}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{7356D7BB-FD71-4554-84A1-3BBE28726551}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{F0CE810F-E36F-4CD8-A836-515B9A6E09FC}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{85109845-6AE2-4B6B-9524-65BA203E5B7D}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{209DA899-15F1-499A-B8B5-A847EAA899AE}]
"(Default)" = "IRepresentationInfo"

[HKCU\Software\Classes\Interface\{6A222195-F65E-467F-8F77-EB180BD85288}]
"(Default)" = "IUCOfficeIntegration"

[HKCU\Software\Classes\Wow6432Node\Interface\{E0E8B413-BB57-4B58-B1FB-288F3A269E35}]
"(Default)" = "IConferenceCapabilities"

[HKCU\Software\Classes\Wow6432Node\Interface\{082EE280-726E-417F-99CB-81A0CCBFF883}]
"(Default)" = "_IDistributionGroupEvents"

[HKCU\Software\Classes\Wow6432Node\Interface\{21C41EDE-7ED8-4D97-9B0D-DD785781AF9B}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{AB2D1A67-2B3D-4E25-B21C-03F4BFC4C2BE}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{86225E5C-7595-4D1C-985D-8A0458D714C0}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{2495B94C-38AF-439B-BBA0-0AD38D959CE4}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{B335AE5E-E4EA-49D3-B03B-646A96FE66D3}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{FA7971EF-1E41-429F-8C79-DAC5F88D444B}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{995F992C-9DEF-47B9-BF11-81813C0C0E28}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{6A986B5D-E5EC-4395-AD2D-0E62B72DA776}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{533891F1-A460-43E6-8BDA-6D0D2C13ADDE}]
"(Default)" = "IConversation"

[HKCU\Software\Classes\Wow6432Node\Interface\{EFEC2816-F16D-48D8-9306-26C810F0EA55}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{A9AAB6A0-54B9-4419-AAAF-6B26DFAC1585}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{C4D95336-5949-4D13-AAC8-82039E5CBCFC}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{26F15083-86DB-4663-89ED-A0ABC896B9A1}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{1F8EBE6F-7993-42CE-980A-A2F03793BE71}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{6B551C9E-DE81-41DF-A0AE-39F0AF11D508}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{AB2D1A67-2B3D-4E25-B21C-03F4BFC4C2BE}]
"(Default)" = "IConversationManagerEventData"

[HKCU\Software\Classes\Wow6432Node\Interface\{8FE9A23D-72BC-4EA3-A5AF-E37F75EAD8A2}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{E4E1D0AF-5B70-45AF-9A0E-F548D8FBD17C}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{311DDE48-ED7D-46FA-9E0A-2E314B7FEF7C}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{56F7DEC0-59CA-47C6-9F35-D5066A702B39}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{D0DBB17D-565E-486C-A47B-BA32DC1FAD0A}]
"(Default)" = "ISharerChangedEventData"

[HKCU\Software\Classes\Wow6432Node\Interface\{B22EDBEA-9E61-4703-82BE-01C05619B6D6}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{1F8EBE6F-7993-42CE-980A-A2F03793BE71}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{85109845-6AE2-4B6B-9524-65BA203E5B7D}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{87084018-7E74-4F92-AB39-1CF03188580E}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{DF414A68-5051-4465-AAE2-4F301315734E}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{4875C050-BA9C-4A05-891E-E7B0A9463664}]
"(Default)" = "IParticipant"

[HKCU\Software\Classes\Wow6432Node\Interface\{4290152C-75C9-47C8-AA12-814818360B3F}]
"(Default)" = "IModalityPropertyChangedEventData"

[HKCU\Software\Classes\Wow6432Node\Interface\{8684D3AD-7061-4056-A894-EBF1270ADB9B}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{AE3A7C39-9C30-4E0F-BAE4-D8344EF377EA}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{478DDA59-64C0-4429-AC8A-F10A940B52CC}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{57CC2235-96C5-49FA-B92B-350486C6CF52}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{F644C610-A146-4A56-8338-A69C45C71CEF}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{086F0E9D-A416-40F9-877C-F1C82DC1A6AD}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{2A9385AA-CF61-4E47-B64C-214DE4A4AD11}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{9D4D3D10-DEBC-40C6-ACF9-527986CB42BC}]
"(Default)" = "IChannelActionAvailabilityEventData"

[HKCU\Software\Classes\Interface\{3F60CFF7-BE3F-4404-8395-C02D0CDD318E}]
"(Default)" = "_IModalityCallback"

[HKCU\Software\Classes\Wow6432Node\Interface\{E6B3F5FA-4208-4C37-AE07-F6435B68D693}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{50D86EE2-288F-44F5-8144-69F6E3B24B90}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{92A9EB9B-85EE-444E-A302-00C3C945BAA4}]
"(Default)" = "_IDelegatorClientEvents"

[HKCU\Software\Classes\Wow6432Node\Interface\{EBD19735-0CB5-4AF3-8E05-B0140CF9D545}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{4290152C-75C9-47C8-AA12-814818360B3F}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{533891F1-A460-43E6-8BDA-6D0D2C13ADDE}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{AE3A7C39-9C30-4E0F-BAE4-D8344EF377EA}]
"(Default)" = "_IContentSharingModalityEvents"

[HKCU\Software\Classes\Wow6432Node\Interface\{EE9F3E74-AC61-469E-80D6-E22BF4EEFF5C}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{EC9773AD-7D22-4B03-B949-5E9055AF0F19}]
"(Default)" = "IGroupCollectionChangedEventData"

[HKCU\Software\Classes\Interface\{4DA899D3-FAC7-4F43-8E4A-1987988FBC9B}]
"(Default)" = "ISelf"

[HKCU\Software\Classes\Interface\{4B3A2412-C149-4E52-A713-6CEBCF47503E}]
"(Default)" = "IGroupMemberChangedEventData"

[HKCU\Software\Classes\Wow6432Node\Interface\{2F8C3E58-436B-42DB-8924-6C394B37DCA2}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{ABF012A2-2068-4B4D-80D7-6D386BA7C8A2}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{4023052E-E3B7-48A3-BCB3-CA2234D9BAEE}]
"(Default)" = "IShareableContentActionAvailabilityChangedEventData"

[HKCU\Software\Classes\Wow6432Node\Interface\{62074904-8D06-43FE-A531-E63DF7FDC2E7}]
"(Default)" = "IModalityPropertyDictionary"

[HKCU\Software\Classes\Wow6432Node\Interface\{64B7E9AD-D920-4EAA-95C7-9D95DE9ACE24}]
"(Default)" = "IConferenceApplicationProperties"

[HKCU\Software\Classes\Interface\{086F0E9D-A416-40F9-877C-F1C82DC1A6AD}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{855AD949-E2EB-473D-AAF2-9800008EA303}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{953AE732-F53A-4116-AC1B-0321B3FB3DBA}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{330639F2-E399-48CB-863F-56A50A27A138}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{56A868B4-0AD4-11CE-B03A-0020AF0BA770}]
"(Default)" = "IVideoWindow"

[HKCU\Software\Classes\Wow6432Node\Interface\{AE3A7C39-9C30-4E0F-BAE4-D8344EF377EA}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{4E8DC7E0-04B8-470B-BDFA-F520099B975F}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{D60B1701-766D-401E-8586-83E0C9106BE0}]
"(Default)" = "IParticipant2"

[HKCU\Software\Classes\Wow6432Node\Interface\{55A21CF3-A2B3-484E-BE2A-14280F501289}]
"(Default)" = "IVideoView"

[HKCU\Software\Classes\Wow6432Node\Interface\{62A75516-C79B-42D7-8B49-3BA492C2B385}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{1A8A9402-E89F-40AE-88A8-B328391684B6}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{50D86EE2-288F-44F5-8144-69F6E3B24B90}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{A0C3E9BA-C622-45A2-9FED-2C662F3F489A}]
"(Default)" = "IRoomMessage"

[HKCU\Software\Classes\Interface\{D4B240B9-059B-4D13-8997-31B282B3BD43}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{1B04D929-11E4-46C2-9162-EA4F2758C3A7}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{A4E1D1E4-7839-473B-95FA-5D33DDC0D2DD}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{B03614AE-8D68-4386-9E1C-939CABCF1232}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{9918673D-4D74-41CF-8840-D4996395A34C}]
"(Default)" = "_IGroupEvents"

[HKCU\Software\Classes\Wow6432Node\Interface\{70DCCE38-90BF-4428-A34F-3A6082F29E50}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{48B3099D-841D-4CAA-9202-5787596E2BD2}]
"(Default)" = "IActivePresenterChangedEventData"

[HKCU\Software\Classes\Interface\{76DE1CD8-F278-48A1-A391-E5BEB8F428E6}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{B00F2520-029C-47D0-B4E8-8FBEF47CAA7E}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{BE026CD2-7E82-4F7C-8762-F6B02F496174}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{08DDF5C4-FA12-4978-B26E-C6D23C453413}]
"(Default)" = "_IDeviceManagerCallback"

[HKCU\Software\Classes\Wow6432Node\Interface\{90B49A60-72AF-4360-9F9B-916DB7504A3C}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{12480BD4-072F-4763-B9FB-41B2CA54F9CD}]
"(Default)" = "IContactSettingChangedEventData"

[HKCU\Software\Classes\Interface\{88C688B0-3908-4C56-A2E8-F90AB705C536}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{2A9385AA-CF61-4E47-B64C-214DE4A4AD11}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{7452BD0F-65CB-4A5E-AC37-E2BEA1F43DD9}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{330639F2-E399-48CB-863F-56A50A27A138}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{855AD949-E2EB-473D-AAF2-9800008EA303}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{533891F1-A460-43E6-8BDA-6D0D2C13ADDE}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{17635563-2FA5-46AD-8F47-3F0FF958ECE2}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{7CD92461-CA4F-4BEB-A636-8BBCC192E60F}]
"(Default)" = "ISearchResults2"

[HKCU\Software\Classes\Wow6432Node\Interface\{C4D95336-5949-4D13-AAC8-82039E5CBCFC}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{32430741-330B-48DF-96F6-0CFE00484D40}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{7356D7BB-FD71-4554-84A1-3BBE28726551}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{A4E1D1E4-7839-473B-95FA-5D33DDC0D2DD}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{ABF012A2-2068-4B4D-80D7-6D386BA7C8A2}]
"(Default)" = "_IContactsAndGroupsCallback"

[HKCU\Software\Classes\Interface\{C31FB52D-9E9E-45AD-A102-5218E1685B78}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{EF5C00E4-75E2-4D39-B358-0ED9CB14F3CB}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{F5996C71-77AB-4020-9776-C2C270FEF2AE}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9C99CCBB-10A0-4B2A-A5BE-4CAC43F74632}]
"WpadDecision" = "0"

[HKCU\Software\Classes\Wow6432Node\Interface\{378CD767-1B64-4A0E-A941-8F52869FC9DF}]
"(Default)" = "ISearchResult"

[HKCU\Software\Classes\Wow6432Node\Interface\{D5C1C8FB-DC8A-45A3-AAA3-53B89D43CDE4}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{3CD1DB65-D85B-4912-8536-6BD8E19F1738}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{C7ACB102-B692-49CC-92DA-5824822C7B96}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{0BDB9057-28AE-4BF0-AFF0-12A148E51637}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{64B7E9AD-D920-4EAA-95C7-9D95DE9ACE24}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{61C747F6-157C-4CAE-A37C-EC4352175860}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{464D5228-9F68-4B1F-B430-156A104E2B85}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{F7EE956B-A713-48D3-AFEF-0A28F37740B3}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{7693221D-7E9F-47D3-8782-6437CF3D4C0C}]
"(Default)" = "IPhone"

[HKCU\Software\Classes\Wow6432Node\Interface\{C31FB52D-9E9E-45AD-A102-5218E1685B78}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{53D014C1-54DB-42B3-9DFD-8E231EF2C356}]
"(Default)" = "IWorkingHours"

[HKCU\Software\Classes\Wow6432Node\Interface\{E4E1D0AF-5B70-45AF-9A0E-F548D8FBD17C}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{F0B791FA-434B-49F2-B84E-05619EBE6BEB}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{F0CE810F-E36F-4CD8-A836-515B9A6E09FC}]
"(Default)" = "IContactInformationDictionary"

[HKCU\Software\Classes\Interface\{4FE44049-4E44-4109-B234-4E4EFC135A86}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{00E22CBB-3170-453A-AE62-EAFBC75A9F8D}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{2C59A886-ACD3-46BB-8BAC-7C1C59FB2E0D}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{C63F58CB-EF11-4934-AA3B-2D69244F0780}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{21629AB6-9557-4985-9237-49177F618692}]
"(Default)" = "IContextEventData"

[HKCU\Software\Classes\Wow6432Node\Interface\{FB67275C-4D9E-4C32-9793-A96749884FC1}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{64B7E9AD-D920-4EAA-95C7-9D95DE9ACE24}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{92D7E7A8-48D8-4166-8911-630AE02B2B93}]
"(Default)" = "IInitialContextEventData"

[HKCU\Software\Classes\Wow6432Node\Interface\{70DCCE38-90BF-4428-A34F-3A6082F29E50}]
"(Default)" = "IParticipantPropertyChangedEventData"

[HKCU\Software\Classes\Interface\{2D3D62CA-E9F6-4F94-8EBD-5FABAB29E6A5}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{92A9EB9B-85EE-444E-A302-00C3C945BAA4}]
"(Default)" = "_IDelegatorClientEvents"

[HKCU\Software\Classes\Interface\{32430741-330B-48DF-96F6-0CFE00484D40}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{995F992C-9DEF-47B9-BF11-81813C0C0E28}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{66D1FFC0-C234-4F3D-ABAA-98222A69E525}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{53D014C1-54DB-42B3-9DFD-8E231EF2C356}]
"(Default)" = "IWorkingHours"

[HKCU\Software\Classes\Interface\{65B71572-5338-43C8-9E4C-F1DFC6711AD1}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{8E73E7E1-90CE-4D3B-B5B7-71E87B2E8BA5}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{D2BFC7D7-A64F-48EF-BF90-C3C7E684D89C}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9C99CCBB-10A0-4B2A-A5BE-4CAC43F74632}]
"WpadDecisionTime" = "24 2C F2 C4 98 3B D0 01"

[HKCU\Software\Classes\Interface\{4BACB4B8-1236-42B8-BDA1-D1533148780D}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{B0C10F94-CAB6-4821-9643-D781885A46AF}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{232F1CAB-5351-4E48-8A87-2185445F712D}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{7CFE77CD-731D-48B2-82B1-ECA3414D62E3}]
"(Default)" = "IConversationPropertyChangedEventData"

[HKCU\Software\Classes\Wow6432Node\Interface\{86225E5C-7595-4D1C-985D-8A0458D714C0}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{1FF8AA01-D8AF-4B2B-B254-BEFEFABAF2D6}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{4875C050-BA9C-4A05-891E-E7B0A9463664}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{8C9B6953-33CC-4A04-9DA4-F71AE79DA0C0}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{62B932E9-7847-4D78-BEEE-5D58BF815B03}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{2495B94C-38AF-439B-BBA0-0AD38D959CE4}]
"(Default)" = "IChannelStateChangedEventData"

[HKCU\Software\Classes\Interface\{806D3227-4CB8-47C4-9864-7D4DF4F44069}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{109D32CE-E09F-46F5-9ECB-01E1D273B7DA}]
"(Default)" = "IConversationWindowInformationDictionary"

[HKCU\Software\Classes\Interface\{0FDB5B86-DD44-41BF-A443-317FD19BBF3D}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{B335AE5E-E4EA-49D3-B03B-646A96FE66D3}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{FF037274-455A-4E34-B5D1-D42DB866F9B7}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{7CD92461-CA4F-4BEB-A636-8BBCC192E60F}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{ED5040FA-8F8F-4876-BF6D-9C62F5EFFD5B}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{D992371E-5161-453B-97E6-6E7C67BC075E}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{FD02E775-CB9D-4CE3-9243-115C81E5F11C}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{0C81EC90-9469-4ED4-ACAD-ADB86E11039C}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{E2C6D6E0-52EF-47A2-BDA9-9D6A7A29A391}]
"(Default)" = "_IRoomManagerEvents"

[HKCU\Software\Classes\Wow6432Node\Interface\{21629AB6-9557-4985-9237-49177F618692}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{D804BA85-DB0F-49EE-B723-DCDF0425BD9F}]
"(Default)" = "ICustomGroup"

[HKCU\Software\Classes\Wow6432Node\Interface\{08E1E9CF-A7E4-43BE-AE8E-B223CE71E46E}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{2F8C3E58-436B-42DB-8924-6C394B37DCA2}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{F97973D7-9436-4A3E-A802-F6EA172A0425}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{7B39CB77-4AEB-42D7-B351-CB5472C1C6AD}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{AAFE380B-B079-4B55-B81B-A9401D77B776}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{87084018-7E74-4F92-AB39-1CF03188580E}]
"(Default)" = "IUtilities"

[HKCU\Software\Classes\Interface\{8A88C016-AA5D-4EAE-9C79-7AA5C360ED76}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\IM Providers]
"DefaultIMApp" = "Skype"

[HKCU\Software\Classes\Wow6432Node\Interface\{26C8D96D-7D22-4E9E-948A-EDCCB4CA9C64}]
"(Default)" = "_IParticipantCallback"

[HKCU\Software\Classes\Wow6432Node\Interface\{806D3227-4CB8-47C4-9864-7D4DF4F44069}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{7CFE77CD-731D-48B2-82B1-ECA3414D62E3}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{6A7FF112-42CE-4D03-8922-D02AC6C5759F}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{B8FD4A53-E7E6-4995-A5B5-1306C7584964}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{D2BFC7D7-A64F-48EF-BF90-C3C7E684D89C}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{2F8C3E58-436B-42DB-8924-6C394B37DCA2}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{4BACB4B8-1236-42B8-BDA1-D1533148780D}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{011B320C-9AC1-4DDE-B595-3D0014472E2F}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{BE6086A1-D436-4834-89EE-3CA4F8596A58}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{BE026CD2-7E82-4F7C-8762-F6B02F496174}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{9918673D-4D74-41CF-8840-D4996395A34C}]
"(Default)" = "_IGroupEvents"

[HKCU\Software\Classes\Wow6432Node\Interface\{36CDC166-4F21-46AD-A60E-8551F26C1D41}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{32430741-330B-48DF-96F6-0CFE00484D40}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{CE16D540-B9E8-4742-8659-9A7A318AFB92}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{2D3D62CA-E9F6-4F94-8EBD-5FABAB29E6A5}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{3690D374-3779-4EFC-B8E8-20642C01529A}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{0C81EC90-9469-4ED4-ACAD-ADB86E11039C}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{3C8210C8-8578-47C6-87A9-FA1AD2BA9873}]
"(Default)" = "IShareableContentPropertyChangedEventData"

[HKCU\Software\Classes\Interface\{B1C6ECC3-1EA7-495D-9337-02FE4FB723F0}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{9AB20314-B258-48F8-B659-AD250DFA20F5}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{EE9F3E74-AC61-469E-80D6-E22BF4EEFF5C}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{E66CA1CC-9DB0-467E-9C60-6A832ACD6780}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{DC4BC923-6A52-4F02-9F8A-547B606955E7}]
"(Default)" = "_IAccessPermissionEvents"

[HKCU\Software\Classes\Wow6432Node\Interface\{905B727D-FD8F-46EC-8006-CE245F6835EE}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{7CFE77CD-731D-48B2-82B1-ECA3414D62E3}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{FD02E775-CB9D-4CE3-9243-115C81E5F11C}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{B335AE5E-E4EA-49D3-B03B-646A96FE66D3}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{330639F2-E399-48CB-863F-56A50A27A138}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{7818A3F7-674B-477E-99E8-54774579A8E7}]
"(Default)" = "IExchangeECPUrlChangedEventData"

[HKCU\Software\Classes\Wow6432Node\Interface\{F7EE956B-A713-48D3-AFEF-0A28F37740B3}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{3417D640-3976-4CB6-BC82-54E5E2E10784}]
"(Default)" = "_IUtilities2Events"

[HKCU\Software\Classes\Wow6432Node\Interface\{57CC2235-96C5-49FA-B92B-350486C6CF52}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{9E0F8FCA-D9C9-47CD-87F4-5554217DFFCC}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{9E0F8FCA-D9C9-47CD-87F4-5554217DFFCC}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{1566FA3C-FD24-41DB-A2B8-6232F89783DE}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{EFEC2816-F16D-48D8-9306-26C810F0EA55}]
"(Default)" = "IContactInformationChangedEventData"

[HKCU\Software\Classes\Wow6432Node\Interface\{7693221D-7E9F-47D3-8782-6437CF3D4C0C}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{B03614AE-8D68-4386-9E1C-939CABCF1232}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{855AD949-E2EB-473D-AAF2-9800008EA303}]
"(Default)" = "IConversationContextList"

[HKCU\Software\Classes\Interface\{E66CA1CC-9DB0-467E-9C60-6A832ACD6780}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{DC4BC923-6A52-4F02-9F8A-547B606955E7}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{569E04F2-D286-4903-9642-44D850310956}]
"(Default)" = "_IClientSettingsEvents"

[HKCU\Software\Classes\Wow6432Node\Interface\{7CC306E9-2546-4101-82AB-29613AD6F7A7}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{478DDA59-64C0-4429-AC8A-F10A940B52CC}]
"(Default)" = "IModalityStateChangedEventData"

[HKCU\Software\Classes\Interface\{9E0F8FCA-D9C9-47CD-87F4-5554217DFFCC}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{48B3099D-841D-4CAA-9202-5787596E2BD2}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{7693221D-7E9F-47D3-8782-6437CF3D4C0C}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{330639F2-E399-48CB-863F-56A50A27A138}]
"(Default)" = "IWebAppExtension"

[HKCU\Software\Classes\Wow6432Node\Interface\{F719ED75-B7BD-45D3-9097-254509226F20}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{80EDBF3A-812E-42B5-A67F-6CC6D9A19A6C}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{311DDE48-ED7D-46FA-9E0A-2E314B7FEF7C}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{FD02E775-CB9D-4CE3-9243-115C81E5F11C}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{89C7EB8E-42BC-4C9F-BB34-88CDE83CCB37}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{F87AFD9A-9BF8-4AC4-953E-33C4D2035D33}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{10FDD9BA-0CBA-4958-B6C8-D0912BF2703F}]
"(Default)" = "IContact2"

[HKCU\Software\Skype\Phone\UI]
"StatsSentVersion" = "7.1.0.105"

[HKCU\Software\Classes\Interface\{62B932E9-7847-4D78-BEEE-5D58BF815B03}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{26C8D96D-7D22-4E9E-948A-EDCCB4CA9C64}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{94093301-8854-408E-8138-C7C3D2DACA1F}]
"(Default)" = "IShareableContentStateChangedEventData"

[HKCU\Software\Classes\Wow6432Node\Interface\{A766520D-F700-4BF5-8428-56BD914C1C40}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{8E73E7E1-90CE-4D3B-B5B7-71E87B2E8BA5}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{68B1FC26-B48F-4D5F-B041-8E246676D836}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{3F60CFF7-BE3F-4404-8395-C02D0CDD318E}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{C0034194-F7B6-43EB-B0E0-7852FC8E7BFA}]
"(Default)" = "IPhonesChangedEventData"

[HKCU\Software\Classes\Wow6432Node\Interface\{E0E8B413-BB57-4B58-B1FB-288F3A269E35}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{26C8D96D-7D22-4E9E-948A-EDCCB4CA9C64}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{62B932E9-7847-4D78-BEEE-5D58BF815B03}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{DC4BC923-6A52-4F02-9F8A-547B606955E7}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{311DDE48-ED7D-46FA-9E0A-2E314B7FEF7C}]
"(Default)" = "_IContactCallback"

[HKCU\Software\Classes\Interface\{18A9A79A-CBC7-4F8B-8B2B-9B40CA75EC3C}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{339D28C6-3D1A-45D4-BA14-A56742749A43}]
"(Default)" = "IWorkingPeriod"

[HKCU\Software\Classes\Interface\{25D64AEA-0E65-49CB-8D6D-65DB0AC1AF65}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{86225E5C-7595-4D1C-985D-8A0458D714C0}]
"(Default)" = "IClient2"

[HKCU\Software\Classes\Interface\{E6B3F5FA-4208-4C37-AE07-F6435B68D693}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{DD31376E-E529-43F2-B3B4-E379EBD28E2A}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{D804BA85-DB0F-49EE-B723-DCDF0425BD9F}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{7CC306E9-2546-4101-82AB-29613AD6F7A7}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{1A8A9402-E89F-40AE-88A8-B328391684B6}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{E6B3F5FA-4208-4C37-AE07-F6435B68D693}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{064E6072-5592-4D13-AFDB-55F5A494E137}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{3F60CFF7-BE3F-4404-8395-C02D0CDD318E}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{C6605772-3D9D-44A7-B43A-4590E6B43EE3}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{DC4BC923-6A52-4F02-9F8A-547B606955E7}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{D4B240B9-059B-4D13-8997-31B282B3BD43}]
"(Default)" = "IModality"

[HKCU\Software\Classes\Interface\{8F04E92D-EE26-4B64-B9C1-56DD90816810}]
"(Default)" = "IFollowedRoomsChangedEventData"

[HKCU\Software\Classes\Wow6432Node\Interface\{0FDB5B86-DD44-41BF-A443-317FD19BBF3D}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{C6605772-3D9D-44A7-B43A-4590E6B43EE3}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{2209E091-5B90-4CAF-8582-CC5979883376}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{BE6086A1-D436-4834-89EE-3CA4F8596A58}]
"(Default)" = "IConferenceApplicationData"

[HKCU\Software\Classes\Interface\{9274DBDC-43CE-45AA-A817-414A4494AD28}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{57C3CB4D-C794-456F-846D-0E1ECA78BD00}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{21629AB6-9557-4985-9237-49177F618692}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{F8DF0B4B-A4CE-476B-81D3-9FBA98461B62}]
"(Default)" = "ISignInConfiguration"

[HKCU\Software\Classes\Wow6432Node\Interface\{4AA93AA8-898C-45EE-8E5C-1A86739B3F96}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{B00F2520-029C-47D0-B4E8-8FBEF47CAA7E}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{DAB42E13-500A-409A-AC34-C1BF4719EE2E}]
"(Default)" = "_IFavoriteContactsEvents"

[HKCU\Software\Classes\Interface\{011B320C-9AC1-4DDE-B595-3D0014472E2F}]
"(Default)" = "_IRecentContactsEvents"

[HKCU\Software\Classes\Interface\{E4E1D0AF-5B70-45AF-9A0E-F548D8FBD17C}]
"(Default)" = "IAVModality"

[HKCU\Software\Classes\Wow6432Node\Interface\{80EDBF3A-812E-42B5-A67F-6CC6D9A19A6C}]
"(Default)" = "IDelegatorClient"

[HKCU\Software\Classes\Wow6432Node\Interface\{FB67275C-4D9E-4C32-9793-A96749884FC1}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{311DDE48-ED7D-46FA-9E0A-2E314B7FEF7C}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{92D7E7A8-48D8-4166-8911-630AE02B2B93}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{02DD541F-C863-4295-92AB-A4CF29F5D841}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{B8FD4A53-E7E6-4995-A5B5-1306C7584964}]
"(Default)" = "IUnreadMessageCountChangedEventData"

[HKCU\Software\Classes\Interface\{283C2089-B760-4D65-9199-716627174F7A}]
"(Default)" = "IGroupNameChangedEventData"

[HKCU\Software\Classes\Wow6432Node\Interface\{DAB42E13-500A-409A-AC34-C1BF4719EE2E}]
"(Default)" = "_IFavoriteContactsEvents"

[HKCU\Software\Classes\Wow6432Node\Interface\{1B04D929-11E4-46C2-9162-EA4F2758C3A7}]
"(Default)" = "IClientSettings"

[HKCU\Software\Classes\Interface\{C7ACB102-B692-49CC-92DA-5824822C7B96}]
"(Default)" = "IConferenceScheduler"

[HKCU\Software\Classes\Interface\{81C9D13F-A4F9-4E13-92D3-BB271E8DF3D2}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{C79E4169-535F-4A41-8DE2-C65A90D9503D}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{905B727D-FD8F-46EC-8006-CE245F6835EE}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{6A222195-F65E-467F-8F77-EB180BD85288}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{A0984F01-5D2C-4302-87A0-69BE7B015143}]
"(Default)" = "IConferenceRegionalAccessInformationCollection"

[HKCU\Software\Classes\Wow6432Node\Interface\{64B7E9AD-D920-4EAA-95C7-9D95DE9ACE24}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{2C59A886-ACD3-46BB-8BAC-7C1C59FB2E0D}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{B0B0E8F8-32DA-4CB0-A124-D1E35891D53A}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{2EDAF003-14A6-4FAF-8A72-99526D048D63}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{36CDC166-4F21-46AD-A60E-8551F26C1D41}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{C4D95336-5949-4D13-AAC8-82039E5CBCFC}]
"(Default)" = "_IUtilitiesCallback"

[HKCU\Software\Classes\Interface\{BC9F5F40-D315-40C1-B1C6-CEA0646E18E2}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{21C41EDE-7ED8-4D97-9B0D-DD785781AF9B}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{DBA05C15-1C07-4A76-8248-08D8416A24E3}]
"(Default)" = "IIsTypingChangedEventData"

[HKCU\Software\Classes\Wow6432Node\Interface\{0CA9BAE8-DD28-4929-A821-4D00F11203CC}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{CA7EEB7A-7DC3-4FFE-A174-23DB5A003C04}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{4E8DC7E0-04B8-470B-BDFA-F520099B975F}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{62B932E9-7847-4D78-BEEE-5D58BF815B03}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{C79E4169-535F-4A41-8DE2-C65A90D9503D}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{0C81EC90-9469-4ED4-ACAD-ADB86E11039C}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{10D66B39-5E4B-4C98-AAC6-D0458FEB1BDB}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{806D3227-4CB8-47C4-9864-7D4DF4F44069}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{66D1FFC0-C234-4F3D-ABAA-98222A69E525}]
"(Default)" = "IConferenceTelephoneAccessInformation"

[HKCU\Software\Classes\Interface\{3C8D7146-35EA-4133-B2F6-C1FC2401A091}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{7818A3F7-674B-477E-99E8-54774579A8E7}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{219DC126-9A48-483F-80C2-3F22B3B47829}]
"(Default)" = "_IScheduledConferenceManagerCallback"

[HKCU\Software\Classes\Interface\{26F15083-86DB-4663-89ED-A0ABC896B9A1}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{04378C72-E58F-47C0-8621-901B85CA2ED4}]
"(Default)" = "IConversationContext"

[HKCU\Software\Classes\Interface\{3C8D7146-35EA-4133-B2F6-C1FC2401A091}]
"(Default)" = "ISelf2"

[HKCU\Software\Classes\Interface\{70DCCE38-90BF-4428-A34F-3A6082F29E50}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{C7ACB102-B692-49CC-92DA-5824822C7B96}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{A0C3E9BA-C622-45A2-9FED-2C662F3F489A}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{38E5EC21-81A1-45A7-94D6-B812976231A4}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{339D28C6-3D1A-45D4-BA14-A56742749A43}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{744BAB86-B15F-4BD5-B7DD-476B0CE0162A}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{BE6086A1-D436-4834-89EE-3CA4F8596A58}]
"(Default)" = "IConferenceApplicationData"

[HKCU\Software\Classes\Interface\{7CFE77CD-731D-48B2-82B1-ECA3414D62E3}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{26C8D96D-7D22-4E9E-948A-EDCCB4CA9C64}]
"(Default)" = "_IParticipantCallback"

[HKCU\Software\Classes\Wow6432Node\Interface\{02DD541F-C863-4295-92AB-A4CF29F5D841}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{9397FF55-EE06-4F02-8F2A-BE3AE249D4BB}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{C31FB52D-9E9E-45AD-A102-5218E1685B78}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{D992371E-5161-453B-97E6-6E7C67BC075E}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{9244D573-914F-4C1F-93F6-31609A95CBED}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{DEDDD7BD-4763-41D2-9AAA-B2C143457CA4}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{628D7BDD-45AB-404D-8505-B3ADC15F454D}]
"(Default)" = "_IRoomCallback"

[HKCU\Software\Classes\Wow6432Node\Interface\{57C3CB4D-C794-456F-846D-0E1ECA78BD00}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{08E1E9CF-A7E4-43BE-AE8E-B223CE71E46E}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{4BACB4B8-1236-42B8-BDA1-D1533148780D}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{12480BD4-072F-4763-B9FB-41B2CA54F9CD}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{05789509-AFA1-4E90-B4FA-1A7820DB9796}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{8E73E7E1-90CE-4D3B-B5B7-71E87B2E8BA5}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{D992371E-5161-453B-97E6-6E7C67BC075E}]
"(Default)" = "_IPreviousConversationsManagerEvents"

[HKCU\Software\Classes\Interface\{DAB42E13-500A-409A-AC34-C1BF4719EE2E}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{C12F0DE5-9A7D-425C-B391-8BE004EAA2F6}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{6B551C9E-DE81-41DF-A0AE-39F0AF11D508}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{68DA8699-6C6E-4390-BD82-709FF1DC1702}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{F97BED54-E434-4020-A197-F15AEA9D9C95}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{2A9385AA-CF61-4E47-B64C-214DE4A4AD11}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{74B6CAF0-755E-454D-A819-D0E439EF5296}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{70986DCE-4AA8-4DFB-9A45-4BFCF7A206F5}]
"(Default)" = "_IChannel2Callback"

[HKCU\Software\Classes\Wow6432Node\Interface\{A58F54D2-9786-4309-964D-96549AEC7611}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{88C688B0-3908-4C56-A2E8-F90AB705C536}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{2A9385AA-CF61-4E47-B64C-214DE4A4AD11}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{F0B791FA-434B-49F2-B84E-05619EBE6BEB}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{744BAB86-B15F-4BD5-B7DD-476B0CE0162A}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{4B3A2412-C149-4E52-A713-6CEBCF47503E}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{37C7F935-E215-46D2-82A3-A451840EC733}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{3CD1DB65-D85B-4912-8536-6BD8E19F1738}]
"(Default)" = "IVideoChannelCollection"

[HKCU\Software\Classes\Wow6432Node\Interface\{18BA13C7-A64E-4301-BA51-D1BFB3C1C9D5}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{4023052E-E3B7-48A3-BCB3-CA2234D9BAEE}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{EC9773AD-7D22-4B03-B949-5E9055AF0F19}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{56F7DEC0-59CA-47C6-9F35-D5066A702B39}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{420A24E2-5C31-4262-9BD5-058682300ED6}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{F423726D-0E9B-4B55-9569-E79865210F69}]
"(Default)" = "IScheduledConferenceCollection"

[HKCU\Software\Classes\Wow6432Node\Interface\{DC4BC923-6A52-4F02-9F8A-547B606955E7}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{DA7CF784-67DF-429C-82FB-9AFD99F6CCCB}]
"(Default)" = "IVideoDevice"

[HKCU\Software\Classes\Wow6432Node\Interface\{3C43A2BE-BA4A-41E8-8F93-A9DC5F091892}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{6A986B5D-E5EC-4395-AD2D-0E62B72DA776}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{7BF20B14-58D1-494B-B301-9B16BACC9610}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{905B727D-FD8F-46EC-8006-CE245F6835EE}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{56F7DEC0-59CA-47C6-9F35-D5066A702B39}]
"(Default)" = "IConversationStateChangePropertyDictionary"

[HKCU\Software\Classes\Interface\{F87AFD9A-9BF8-4AC4-953E-33C4D2035D33}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{3690D374-3779-4EFC-B8E8-20642C01529A}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{9E0F8FCA-D9C9-47CD-87F4-5554217DFFCC}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{9B3A702D-5BE1-4FCE-ADB3-EBBD23E078C3}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{FA7971EF-1E41-429F-8C79-DAC5F88D444B}]
"(Default)" = "_IConversationHistoryEvents"

[HKCU\Software\Classes\Interface\{5418E2AB-EB9A-4659-B4DC-28DE633B2B8F}]
"(Default)" = "IMutedChangedEventData"

[HKCU\Software\IM Providers\Skype]
"UpAndRunning" = "1"

[HKCU\Software\Classes\Wow6432Node\Interface\{AE3A7C39-9C30-4E0F-BAE4-D8344EF377EA}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{ACABFA1C-0738-4C4D-AF7E-326873CF4ACE}]
"(Default)" = "IPreviousConversationsManager"

[HKCU\Software\Classes\Wow6432Node\Interface\{48B3099D-841D-4CAA-9202-5787596E2BD2}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{378CD767-1B64-4A0E-A941-8F52869FC9DF}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{65B71572-5338-43C8-9E4C-F1DFC6711AD1}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{420A24E2-5C31-4262-9BD5-058682300ED6}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{E664682C-CBA5-4C7C-A65B-9CD046F24CBD}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{17635563-2FA5-46AD-8F47-3F0FF958ECE2}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{EE9F3E74-AC61-469E-80D6-E22BF4EEFF5C}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{1A8A9402-E89F-40AE-88A8-B328391684B6}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{71A054B3-4D4B-4643-B14F-4572494B19E7}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{B28F2007-3926-49CF-9101-4CCB9574049B}]
"(Default)" = "IPreferredCapabilitiesChangedEventData"

[HKCU\Software\Classes\Wow6432Node\Interface\{B1F5BCD8-69A6-4FC3-9EF0-9BD4AD999061}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{2EDAF003-14A6-4FAF-8A72-99526D048D63}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{BE026CD2-7E82-4F7C-8762-F6B02F496174}]
"(Default)" = "_IApplicationSharingModalityEvents"

[HKCU\Software\Classes\Wow6432Node\Interface\{CA478B44-4FCE-4082-8700-8CEC69FB50E1}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{6A7FF112-42CE-4D03-8922-D02AC6C5759F}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{4B3A2412-C149-4E52-A713-6CEBCF47503E}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{62074904-8D06-43FE-A531-E63DF7FDC2E7}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{B1C6ECC3-1EA7-495D-9337-02FE4FB723F0}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{DA7CF784-67DF-429C-82FB-9AFD99F6CCCB}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{330639F2-E399-48CB-863F-56A50A27A138}]
"(Default)" = "IWebAppExtension"

[HKCU\Software\Classes\Interface\{62B932E9-7847-4D78-BEEE-5D58BF815B03}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{02DD541F-C863-4295-92AB-A4CF29F5D841}]
"(Default)" = "IConversationWindow2"

[HKCU\Software\Classes\Interface\{04378C72-E58F-47C0-8621-901B85CA2ED4}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{37C7F935-E215-46D2-82A3-A451840EC733}]
"(Default)" = "IConversation2"

[HKCU\Software\Classes\Wow6432Node\Interface\{B0C10F94-CAB6-4821-9643-D781885A46AF}]
"(Default)" = "_IVoiceMailsManagerEvents"

[HKCU\Software\Classes\Wow6432Node\Interface\{E24C2484-C70D-44AB-8A4E-F1585A17A3E1}]
"(Default)" = "IVoiceMailsManager"

[HKCU\Software\Classes\Wow6432Node\Interface\{08DDF5C4-FA12-4978-B26E-C6D23C453413}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{84340964-7820-4EBC-BCD3-702926DE23E8}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{BD891697-C93E-4A0B-9B6C-004BD81B6EE8}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{64561371-77A2-4BD4-A909-E6DEB1B5C6CF}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{6B551C9E-DE81-41DF-A0AE-39F0AF11D508}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{CA478B44-4FCE-4082-8700-8CEC69FB50E1}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{B26F6403-761E-48D4-84E2-619C17EAEB13}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{081793DA-7221-45C3-8AFA-3A2E6E464670}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{2495B94C-38AF-439B-BBA0-0AD38D959CE4}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{D0984CEF-E323-4574-B07B-5C970C9CAEE0}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{3DEBDC7E-811F-4304-BDD7-7D98C732026C}]
"(Default)" = "IHistoryInfo"

[HKCU\Software\Classes\Wow6432Node\Interface\{744BAB86-B15F-4BD5-B7DD-476B0CE0162A}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{F719ED75-B7BD-45D3-9097-254509226F20}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{CA7EEB7A-7DC3-4FFE-A174-23DB5A003C04}]
"(Default)" = "IStreamStateChangedEventData"

[HKCU\Software\Classes\Interface\{2EDAF003-14A6-4FAF-8A72-99526D048D63}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{64561371-77A2-4BD4-A909-E6DEB1B5C6CF}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{3C43A2BE-BA4A-41E8-8F93-A9DC5F091892}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{806D3227-4CB8-47C4-9864-7D4DF4F44069}]
"(Default)" = "_IAutomationCallback"

[HKCU\Software\Classes\Interface\{87084018-7E74-4F92-AB39-1CF03188580E}]
"(Default)" = "IUtilities"

[HKCU\Software\Classes\Interface\{BD891697-C93E-4A0B-9B6C-004BD81B6EE8}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{4CB70415-BA71-491E-B12D-155D85CBDFF1}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{064E6072-5592-4D13-AFDB-55F5A494E137}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{76428270-36FA-4236-8BDF-AADB39FD1371}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{35CE3A44-C636-4D31-BC95-B9370C2251B9}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{109D32CE-E09F-46F5-9ECB-01E1D273B7DA}]
"(Default)" = "IConversationWindowInformationDictionary"

[HKCU\Software\Classes\Interface\{464D5228-9F68-4B1F-B430-156A104E2B85}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Local Settings\MuiCache\2B\52C64B7E]
"LanguageList" = "en-US, en"

[HKCU\Software\Classes\Wow6432Node\Interface\{21C41EDE-7ED8-4D97-9B0D-DD785781AF9B}]
"(Default)" = "IRoomMessageCollection"

[HKCU\Software\Classes\Interface\{BD891697-C93E-4A0B-9B6C-004BD81B6EE8}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{A766520D-F700-4BF5-8428-56BD914C1C40}]
"(Default)" = "IRoom"

[HKCU\Software\Classes\Interface\{8AFFB8CE-5404-4280-BCA3-E2E4388E6D73}]
"(Default)" = "IDescriptionChangedEventData"

[HKCU\Software\Classes\Interface\{7452BD0F-65CB-4A5E-AC37-E2BEA1F43DD9}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{5418E2AB-EB9A-4659-B4DC-28DE633B2B8F}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{32430741-330B-48DF-96F6-0CFE00484D40}]
"(Default)" = "IControlRequestReceivedEventData"

[HKCU\Software\Classes\Interface\{3CD1DB65-D85B-4912-8536-6BD8E19F1738}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{26C8D96D-7D22-4E9E-948A-EDCCB4CA9C64}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{C0034194-F7B6-43EB-B0E0-7852FC8E7BFA}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{7CD92461-CA4F-4BEB-A636-8BBCC192E60F}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{7693221D-7E9F-47D3-8782-6437CF3D4C0C}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{AB2D1A67-2B3D-4E25-B21C-03F4BFC4C2BE}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{6A222195-F65E-467F-8F77-EB180BD85288}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{7CC306E9-2546-4101-82AB-29613AD6F7A7}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{92A9EB9B-85EE-444E-A302-00C3C945BAA4}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{EC9773AD-7D22-4B03-B949-5E9055AF0F19}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{C31FB52D-9E9E-45AD-A102-5218E1685B78}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{1FF8AA01-D8AF-4B2B-B254-BEFEFABAF2D6}]
"(Default)" = "IConferenceInfoCollection"

[HKCU\Software\Classes\Wow6432Node\Interface\{90B49A60-72AF-4360-9F9B-916DB7504A3C}]
"(Default)" = "IAlertLevelChangedEventData"

[HKCU\Software\Classes\Interface\{08DDF5C4-FA12-4978-B26E-C6D23C453413}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{7356D7BB-FD71-4554-84A1-3BBE28726551}]
"(Default)" = "ISearchResults"

[HKCU\Software\Classes\Wow6432Node\Interface\{3417D640-3976-4CB6-BC82-54E5E2E10784}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{378CD767-1B64-4A0E-A941-8F52869FC9DF}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{283C2089-B760-4D65-9199-716627174F7A}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{E5CFF4A5-83A8-4FD8-8DAA-77A3E2288D4A}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{10D66B39-5E4B-4C98-AAC6-D0458FEB1BDB}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{62A75516-C79B-42D7-8B49-3BA492C2B385}]
"(Default)" = "IInstantMessageModality"

[HKCU\Software\Classes\Interface\{3C8D7146-35EA-4133-B2F6-C1FC2401A091}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{92D7E7A8-48D8-4166-8911-630AE02B2B93}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{B0C10F94-CAB6-4821-9643-D781885A46AF}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{E0E8B413-BB57-4B58-B1FB-288F3A269E35}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{37C7F935-E215-46D2-82A3-A451840EC733}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{74B6CAF0-755E-454D-A819-D0E439EF5296}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{D60B1701-766D-401E-8586-83E0C9106BE0}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{B26F6403-761E-48D4-84E2-619C17EAEB13}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{12480BD4-072F-4763-B9FB-41B2CA54F9CD}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{C413A27F-601E-4261-B9E3-0EB966F4E7D1}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{6B551C9E-DE81-41DF-A0AE-39F0AF11D508}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{62A75516-C79B-42D7-8B49-3BA492C2B385}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{7452BD0F-65CB-4A5E-AC37-E2BEA1F43DD9}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{219DC126-9A48-483F-80C2-3F22B3B47829}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{A0984F01-5D2C-4302-87A0-69BE7B015143}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{B3FF95BD-B743-498C-9973-7F8A2A78576A}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{EE9F3E74-AC61-469E-80D6-E22BF4EEFF5C}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{BD891697-C93E-4A0B-9B6C-004BD81B6EE8}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{06437ABB-C419-4B11-A474-1A2B02FBD646}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{1FF0E6F1-2FE4-4E29-A123-557AF0DB6927}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{70DCCE38-90BF-4428-A34F-3A6082F29E50}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{EE9F3E74-AC61-469E-80D6-E22BF4EEFF5C}]
"(Default)" = "IClient"

[HKCU\Software\Classes\Wow6432Node\Interface\{1124AA59-B6F3-4EB1-B79A-E7F53B388B8D}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{0FDB5B86-DD44-41BF-A443-317FD19BBF3D}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{7CD92461-CA4F-4BEB-A636-8BBCC192E60F}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{340C54A6-35CF-4971-B540-72D7F040AC24}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{B0B0E8F8-32DA-4CB0-A124-D1E35891D53A}]
"(Default)" = "IAudioDevice"

[HKCU\Software\Classes\Wow6432Node\Interface\{086F0E9D-A416-40F9-877C-F1C82DC1A6AD}]
"(Default)" = "IVideoViewInformationChangedEventData"

[HKCU\Software\Classes\Wow6432Node\Interface\{57CC2235-96C5-49FA-B92B-350486C6CF52}]
"(Default)" = "_IConversationCallback"

[HKCU\Software\Classes\Wow6432Node\Interface\{9B3A702D-5BE1-4FCE-ADB3-EBBD23E078C3}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{50D86EE2-288F-44F5-8144-69F6E3B24B90}]
"(Default)" = "_IContactManagerEvents"

[HKCU\Software\Classes\Wow6432Node\Interface\{DD31376E-E529-43F2-B3B4-E379EBD28E2A}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{E5CFF4A5-83A8-4FD8-8DAA-77A3E2288D4A}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{D0984CEF-E323-4574-B07B-5C970C9CAEE0}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{E66CA1CC-9DB0-467E-9C60-6A832ACD6780}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{70DCCE38-90BF-4428-A34F-3A6082F29E50}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{4FE44049-4E44-4109-B234-4E4EFC135A86}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{533891F1-A460-43E6-8BDA-6D0D2C13ADDE}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{9D4D3D10-DEBC-40C6-ACF9-527986CB42BC}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{B335AE5E-E4EA-49D3-B03B-646A96FE66D3}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{57C3CB4D-C794-456F-846D-0E1ECA78BD00}]
"(Default)" = "IContactCollection"

[HKCU\Software\Classes\Wow6432Node\Interface\{3C8D7146-35EA-4133-B2F6-C1FC2401A091}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{D9D04B55-D820-4D5B-A690-658A49368478}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{8F04E92D-EE26-4B64-B9C1-56DD90816810}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{35CE3A44-C636-4D31-BC95-B9370C2251B9}]
"(Default)" = "IFavoriteContacts"

[HKCU\Software\Classes\Wow6432Node\Interface\{995F992C-9DEF-47B9-BF11-81813C0C0E28}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{569E04F2-D286-4903-9642-44D850310956}]
"(Default)" = "_IClientSettingsEvents"

[HKCU\Software\Classes\Wow6432Node\Interface\{3C43A2BE-BA4A-41E8-8F93-A9DC5F091892}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{ACABFA1C-0738-4C4D-AF7E-326873CF4ACE}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{15D4461D-C7EB-45CB-B214-F1C45FED1DB2}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{4290152C-75C9-47C8-AA12-814818360B3F}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{AF2ABA54-F591-42BA-8004-20944C9FB4D7}]
"(Default)" = "_IConversationWindow2Events"

[HKCU\Software\Microsoft\Direct3D\MostRecentApplication]
"Name" = "Skype.exe"

[HKCU\Software\Classes\Wow6432Node\Interface\{6A222195-F65E-467F-8F77-EB180BD85288}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{95B8D3E8-F3D5-4DC0-BCFE-AB80C835DEA0}]
"(Default)" = "IContactSubscription"

[HKCU\Software\Classes\Wow6432Node\Interface\{9244D573-914F-4C1F-93F6-31609A95CBED}]
"(Default)" = "IConferenceRegionalAccessNumber"

[HKCU\Software\Classes\Interface\{DAC6D77B-12F7-405C-BB33-002D6D4007F3}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies]
"CachePrefix" = "Cookie:"

[HKCU\Software\Classes\Wow6432Node\Interface\{DAC6D77B-12F7-405C-BB33-002D6D4007F3}]
"(Default)" = "IResiliencyModeChangedEventData"

[HKCU\Software\Classes\Interface\{15D4461D-C7EB-45CB-B214-F1C45FED1DB2}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{9E0F8FCA-D9C9-47CD-87F4-5554217DFFCC}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{9918673D-4D74-41CF-8840-D4996395A34C}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{4FE44049-4E44-4109-B234-4E4EFC135A86}]
"(Default)" = "_IInstantMessageModalityEvents"

[HKCU\Software\Classes\Wow6432Node\Interface\{8E73E7E1-90CE-4D3B-B5B7-71E87B2E8BA5}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{5FA92EA7-6E6E-4A82-8F0D-107FEAF5A75D}]
"(Default)" = "_IConversationHistoryCallback"

[HKCU\Software\Classes\Interface\{3959E5C6-75CC-448E-9A18-9F163FF47646}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{6B551C9E-DE81-41DF-A0AE-39F0AF11D508}]
"(Default)" = "_IShareableContentEvents"

[HKCU\Software\Classes\Wow6432Node\Interface\{CA62E6F3-3E6D-451B-AEAA-6A1B7AACF8D4}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{18A9A79A-CBC7-4F8B-8B2B-9B40CA75EC3C}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{663C61F4-A9DA-4A6F-A606-F142F665DF61}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{AC10D6E9-4A8C-4484-B8F4-CA1E36347AAE}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{AA41EE75-F9C5-42F7-8D17-1D92D6BA4D92}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{569E04F2-D286-4903-9642-44D850310956}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{1F8EBE6F-7993-42CE-980A-A2F03793BE71}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{899B846A-8887-45D6-B8F5-8AAA0BFDF722}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{E4E1D0AF-5B70-45AF-9A0E-F548D8FBD17C}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{0CA9BAE8-DD28-4929-A821-4D00F11203CC}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{420A24E2-5C31-4262-9BD5-058682300ED6}]
"(Default)" = "IConferenceRegionalAccessInformation"

[HKCU\Software\Classes\Interface\{56A868B4-0AD4-11CE-B03A-0020AF0BA770}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{3690D374-3779-4EFC-B8E8-20642C01529A}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{3C43A2BE-BA4A-41E8-8F93-A9DC5F091892}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{3690D374-3779-4EFC-B8E8-20642C01529A}]
"(Default)" = "ISharingResource"

[HKCU\Software\Classes\Interface\{76428270-36FA-4236-8BDF-AADB39FD1371}]
"(Default)" = "_IConversationWindowCallback"

[HKCU\Software\Classes\Interface\{F423726D-0E9B-4B55-9569-E79865210F69}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{953AE732-F53A-4116-AC1B-0321B3FB3DBA}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{17635563-2FA5-46AD-8F47-3F0FF958ECE2}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{AC10D6E9-4A8C-4484-B8F4-CA1E36347AAE}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{BE026CD2-7E82-4F7C-8762-F6B02F496174}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{56A868B4-0AD4-11CE-B03A-0020AF0BA770}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{4CB70415-BA71-491E-B12D-155D85CBDFF1}]
"(Default)" = "IConferenceRegionalAccessNumberCollection"

[HKCU\Software\Classes\Wow6432Node\Interface\{340C54A6-35CF-4971-B540-72D7F040AC24}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{15D4461D-C7EB-45CB-B214-F1C45FED1DB2}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{DA7CF784-67DF-429C-82FB-9AFD99F6CCCB}]
"(Default)" = "IVideoDevice"

[HKCU\Software\Classes\Wow6432Node\Interface\{6A7FF112-42CE-4D03-8922-D02AC6C5759F}]
"(Default)" = "ISharingResourceList"

[HKCU\Software\Classes\Interface\{DD181E97-EEE0-4D65-BAD1-16866D0C7953}]
"(Default)" = "IAccessPermission"

[HKCU\Software\Classes\Interface\{10D66B39-5E4B-4C98-AAC6-D0458FEB1BDB}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{BD891697-C93E-4A0B-9B6C-004BD81B6EE8}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{84340964-7820-4EBC-BCD3-702926DE23E8}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{CA62E6F3-3E6D-451B-AEAA-6A1B7AACF8D4}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{628D7BDD-45AB-404D-8505-B3ADC15F454D}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{DAA5FDE3-A81C-4F23-80B6-C47B52C649BF}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{F97973D7-9436-4A3E-A802-F6EA172A0425}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{2209E091-5B90-4CAF-8582-CC5979883376}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{4FE44049-4E44-4109-B234-4E4EFC135A86}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{478DDA59-64C0-4429-AC8A-F10A940B52CC}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{36CDC166-4F21-46AD-A60E-8551F26C1D41}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{3C43A2BE-BA4A-41E8-8F93-A9DC5F091892}]
"(Default)" = "_ISelf2Events"

[HKCU\Software\Classes\Interface\{B1F5BCD8-69A6-4FC3-9EF0-9BD4AD999061}]
"(Default)" = "IConversationWindow"

[HKCU\Software\Classes\Interface\{232F1CAB-5351-4E48-8A87-2185445F712D}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{68B1FC26-B48F-4D5F-B041-8E246676D836}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{B22EDBEA-9E61-4703-82BE-01C05619B6D6}]
"(Default)" = "ILocalSharedResourcesChangedEventData"

[HKCU\Software\Classes\Interface\{7452BD0F-65CB-4A5E-AC37-E2BEA1F43DD9}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{3187885C-A8AF-4D4B-8E80-F4B9D447A7B2}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{32430741-330B-48DF-96F6-0CFE00484D40}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{15D4461D-C7EB-45CB-B214-F1C45FED1DB2}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{4CB70415-BA71-491E-B12D-155D85CBDFF1}]
"(Default)" = "IConferenceRegionalAccessNumberCollection"

[HKCU\Software\Classes\Interface\{21C41EDE-7ED8-4D97-9B0D-DD785781AF9B}]
"(Default)" = "IRoomMessageCollection"

[HKCU\Software\Classes\Interface\{1124AA59-B6F3-4EB1-B79A-E7F53B388B8D}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{92A9EB9B-85EE-444E-A302-00C3C945BAA4}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{38E5EC21-81A1-45A7-94D6-B812976231A4}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{3DEBDC7E-811F-4304-BDD7-7D98C732026C}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{5E7AB04C-E4B8-49FB-85FF-9E2BCA2899D3}]
"(Default)" = "IConferenceAccessInformation2"

[HKCU\Software\Classes\Interface\{76DE1CD8-F278-48A1-A391-E5BEB8F428E6}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{92D7E7A8-48D8-4166-8911-630AE02B2B93}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{08E1E9CF-A7E4-43BE-AE8E-B223CE71E46E}]
"(Default)" = "_IChannelCallback"

[HKCU\Software\Classes\Interface\{F423726D-0E9B-4B55-9569-E79865210F69}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{62B932E9-7847-4D78-BEEE-5D58BF815B03}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{5E7AB04C-E4B8-49FB-85FF-9E2BCA2899D3}]
"(Default)" = "IConferenceAccessInformation2"

[HKCU\Software\Classes\Interface\{9112CE9B-3704-48C0-86DC-7A7B0F34D7A3}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{10C3ACC7-6C0C-4F35-ADFB-AE0F200A8583}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{DA7CF784-67DF-429C-82FB-9AFD99F6CCCB}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{AA186C92-181E-417F-B150-FCA0F367E0FC}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{D804BA85-DB0F-49EE-B723-DCDF0425BD9F}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{8A88C016-AA5D-4EAE-9C79-7AA5C360ED76}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{F423726D-0E9B-4B55-9569-E79865210F69}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{1FF0E6F1-2FE4-4E29-A123-557AF0DB6927}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{CA7EEB7A-7DC3-4FFE-A174-23DB5A003C04}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{25025B1B-0084-44D1-B383-9FFC9A99ABCD}]
"(Default)" = "_IConversationManagerEvents"

[HKCU\Software\Classes\Wow6432Node\Interface\{3417D640-3976-4CB6-BC82-54E5E2E10784}]
"(Default)" = "_IUtilities2Events"

[HKCU\Software\Classes\Wow6432Node\Interface\{F423726D-0E9B-4B55-9569-E79865210F69}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{7B39CB77-4AEB-42D7-B351-CB5472C1C6AD}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{4FE44049-4E44-4109-B234-4E4EFC135A86}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{9112CE9B-3704-48C0-86DC-7A7B0F34D7A3}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionReason" = "1"

[HKCU\Software\Classes\Wow6432Node\Interface\{5418E2AB-EB9A-4659-B4DC-28DE633B2B8F}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{95B9A382-EA50-45E4-965E-BA61E7213DBA}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{4B3A2412-C149-4E52-A713-6CEBCF47503E}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{603E2454-725A-4679-A6A8-363B21633CB2}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{E4E1D0AF-5B70-45AF-9A0E-F548D8FBD17C}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{C413A27F-601E-4261-B9E3-0EB966F4E7D1}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{D0DBB17D-565E-486C-A47B-BA32DC1FAD0A}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{DCDEA425-B5F2-4719-A3B4-69FFB9770BE6}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{082EE280-726E-417F-99CB-81A0CCBFF883}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{7CC306E9-2546-4101-82AB-29613AD6F7A7}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{905B727D-FD8F-46EC-8006-CE245F6835EE}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{21C41EDE-7ED8-4D97-9B0D-DD785781AF9B}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{10C3ACC7-6C0C-4F35-ADFB-AE0F200A8583}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{4E8DC7E0-04B8-470B-BDFA-F520099B975F}]
"(Default)" = "IControllerChangedEventData"

[HKCU\Software\Classes\Wow6432Node\Interface\{F0CE810F-E36F-4CD8-A836-515B9A6E09FC}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{AC10D6E9-4A8C-4484-B8F4-CA1E36347AAE}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{1124AA59-B6F3-4EB1-B79A-E7F53B388B8D}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{64B7E9AD-D920-4EAA-95C7-9D95DE9ACE24}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{DAA5FDE3-A81C-4F23-80B6-C47B52C649BF}]
"(Default)" = "IContactEndpointCollection"

[HKCU\Software\Classes\Interface\{09028936-CD20-43EF-98CF-56726ADDBA34}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{8A88C016-AA5D-4EAE-9C79-7AA5C360ED76}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{9274DBDC-43CE-45AA-A817-414A4494AD28}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{ACD2FDB9-98ED-4283-AAE8-3CD989EBD9AE}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{CE16D540-B9E8-4742-8659-9A7A318AFB92}]
"(Default)" = "IDevice"

[HKCU\Software\Classes\Interface\{E6B3F5FA-4208-4C37-AE07-F6435B68D693}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{2EDAF003-14A6-4FAF-8A72-99526D048D63}]
"(Default)" = "IAutomation"

[HKCU\Software\Classes\Wow6432Node\Interface\{8AFFB8CE-5404-4280-BCA3-E2E4388E6D73}]
"(Default)" = "IDescriptionChangedEventData"

[HKCU\Software\Classes\Interface\{F8DF0B4B-A4CE-476B-81D3-9FBA98461B62}]
"(Default)" = "ISignInConfiguration"

[HKCU\Software\Classes\Wow6432Node\Interface\{F5996C71-77AB-4020-9776-C2C270FEF2AE}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{86225E5C-7595-4D1C-985D-8A0458D714C0}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{B335AE5E-E4EA-49D3-B03B-646A96FE66D3}]
"(Default)" = "IShareableContent"

[HKCU\Software\Classes\Interface\{3959E5C6-75CC-448E-9A18-9F163FF47646}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{5418E2AB-EB9A-4659-B4DC-28DE633B2B8F}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{DCDEA425-B5F2-4719-A3B4-69FFB9770BE6}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{55A21CF3-A2B3-484E-BE2A-14280F501289}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{2D3D62CA-E9F6-4F94-8EBD-5FABAB29E6A5}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{74B6CAF0-755E-454D-A819-D0E439EF5296}]
"(Default)" = "IPublicCloudProviderInfo"

[HKCU\Software\Classes\Interface\{57CC2235-96C5-49FA-B92B-350486C6CF52}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{CA62E6F3-3E6D-451B-AEAA-6A1B7AACF8D4}]
"(Default)" = "IConversationWindowNeedsSizeChangeEventData"

[HKCU\Software\Classes\Interface\{8665FD95-7720-4F9E-B605-6ABCBD7EDFF4}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{DD31376E-E529-43F2-B3B4-E379EBD28E2A}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{AA41EE75-F9C5-42F7-8D17-1D92D6BA4D92}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{62074904-8D06-43FE-A531-E63DF7FDC2E7}]
"(Default)" = "IModalityPropertyDictionary"

[HKCU\Software\Classes\Interface\{209DA899-15F1-499A-B8B5-A847EAA899AE}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f3-c8-bd]
"WpadDecisionTime" = "24 2C F2 C4 98 3B D0 01"

[HKCU\Software\Classes\Wow6432Node\Interface\{F0CE810F-E36F-4CD8-A836-515B9A6E09FC}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{25A47938-5C31-4F43-9108-DA01EE5869C0}]
"(Default)" = "IVoiceMail"

[HKCU\Software\Classes\Interface\{25025B1B-0084-44D1-B383-9FFC9A99ABCD}]
"(Default)" = "_IConversationManagerEvents"

[HKCU\Software\Classes\Wow6432Node\Interface\{6A7FF112-42CE-4D03-8922-D02AC6C5759F}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{C79E4169-535F-4A41-8DE2-C65A90D9503D}]
"(Default)" = "IModalityStateChangePropertyDictionary"

[HKCU\Software\Classes\Wow6432Node\Interface\{C413A27F-601E-4261-B9E3-0EB966F4E7D1}]
"(Default)" = "ILyncClient"

[HKCU\Software\Classes\Wow6432Node\Interface\{F87AFD9A-9BF8-4AC4-953E-33C4D2035D33}]
"(Default)" = "IPreviousConversationsManagerConnectionStateChangedEventData"

[HKCU\Software\Classes\Interface\{C79E4169-535F-4A41-8DE2-C65A90D9503D}]
"(Default)" = "IModalityStateChangePropertyDictionary"

[HKCU\Software\Classes\Wow6432Node\Interface\{C0034194-F7B6-43EB-B0E0-7852FC8E7BFA}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{AA186C92-181E-417F-B150-FCA0F367E0FC}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{3DEBDC7E-811F-4304-BDD7-7D98C732026C}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{7CFE77CD-731D-48B2-82B1-ECA3414D62E3}]
"(Default)" = "IConversationPropertyChangedEventData"

[HKCU\Software\Classes\Interface\{9244D573-914F-4C1F-93F6-31609A95CBED}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{57CC2235-96C5-49FA-B92B-350486C6CF52}]
"(Default)" = "_IConversationCallback"

[HKCU\Software\Classes\Interface\{4C675532-6D55-49DD-8C8E-3C1CC5624CF2}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{4B3A2412-C149-4E52-A713-6CEBCF47503E}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{2F8C3E58-436B-42DB-8924-6C394B37DCA2}]
"(Default)" = "IConferenceAccessInformation"

[HKCU\Software\Classes\Wow6432Node\Interface\{53D014C1-54DB-42B3-9DFD-8E231EF2C356}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{F97BED54-E434-4020-A197-F15AEA9D9C95}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionTime" = "99 A0 5C C1 98 3B D0 01"

[HKCU\Software\Classes\Wow6432Node\Interface\{25D64AEA-0E65-49CB-8D6D-65DB0AC1AF65}]
"(Default)" = "IClientSettingsChangedEventData"

[HKCU\Software\Classes\Wow6432Node\Interface\{5418E2AB-EB9A-4659-B4DC-28DE633B2B8F}]
"(Default)" = "IMutedChangedEventData"

[HKCU\Software\Classes\Interface\{62074904-8D06-43FE-A531-E63DF7FDC2E7}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{9244D573-914F-4C1F-93F6-31609A95CBED}]
"(Default)" = "IConferenceRegionalAccessNumber"

[HKCU\Software\Classes\Wow6432Node\Interface\{7BF20B14-58D1-494B-B301-9B16BACC9610}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{C7ACB102-B692-49CC-92DA-5824822C7B96}]
"(Default)" = "IConferenceScheduler"

[HKCU\Software\Classes\Interface\{AB2D1A67-2B3D-4E25-B21C-03F4BFC4C2BE}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{0BDB9057-28AE-4BF0-AFF0-12A148E51637}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{2D3D62CA-E9F6-4F94-8EBD-5FABAB29E6A5}]
"(Default)" = "IConferenceInfoPropertyDictionary"

[HKCU\Software\Classes\Wow6432Node\Interface\{AA41EE75-F9C5-42F7-8D17-1D92D6BA4D92}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{84340964-7820-4EBC-BCD3-702926DE23E8}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{628D7BDD-45AB-404D-8505-B3ADC15F454D}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{D9D04B55-D820-4D5B-A690-658A49368478}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{25A47938-5C31-4F43-9108-DA01EE5869C0}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{F7EE956B-A713-48D3-AFEF-0A28F37740B3}]
"(Default)" = "IAsynchronousOperation"

[HKCU\Software\Classes\Interface\{EC9773AD-7D22-4B03-B949-5E9055AF0F19}]
"(Default)" = "IGroupCollectionChangedEventData"

[HKCU\Software\Classes\Interface\{04378C72-E58F-47C0-8621-901B85CA2ED4}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{232F1CAB-5351-4E48-8A87-2185445F712D}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{1566FA3C-FD24-41DB-A2B8-6232F89783DE}]
"(Default)" = "IRoomMessageEventData"

[HKCU\Software\Classes\Wow6432Node\Interface\{E82737B9-B2BE-4AFD-B649-C9F665627F20}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{D0DBB17D-565E-486C-A47B-BA32DC1FAD0A}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{ED5040FA-8F8F-4876-BF6D-9C62F5EFFD5B}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{CA62E6F3-3E6D-451B-AEAA-6A1B7AACF8D4}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{340C54A6-35CF-4971-B540-72D7F040AC24}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{48B3099D-841D-4CAA-9202-5787596E2BD2}]
"(Default)" = "IActivePresenterChangedEventData"

[HKCU\Software\Classes\Wow6432Node\Interface\{90B49A60-72AF-4360-9F9B-916DB7504A3C}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{6A7FF112-42CE-4D03-8922-D02AC6C5759F}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{B3C5872E-591C-4A74-9F84-B00EF970A838}]
"(Default)" = "IConferenceInfo"

[HKCU\Software\Classes\Wow6432Node\Interface\{A0984F01-5D2C-4302-87A0-69BE7B015143}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{0C81EC90-9469-4ED4-ACAD-ADB86E11039C}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{2EDAF003-14A6-4FAF-8A72-99526D048D63}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{378CD767-1B64-4A0E-A941-8F52869FC9DF}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{2495B94C-38AF-439B-BBA0-0AD38D959CE4}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{2A9385AA-CF61-4E47-B64C-214DE4A4AD11}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{EC9773AD-7D22-4B03-B949-5E9055AF0F19}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{1A8A9402-E89F-40AE-88A8-B328391684B6}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{F423726D-0E9B-4B55-9569-E79865210F69}]
"(Default)" = "IScheduledConferenceCollection"

[HKCU\Software\Classes\Interface\{899B846A-8887-45D6-B8F5-8AAA0BFDF722}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{92A9EB9B-85EE-444E-A302-00C3C945BAA4}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{ACABFA1C-0738-4C4D-AF7E-326873CF4ACE}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{011B320C-9AC1-4DDE-B595-3D0014472E2F}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{B1C6ECC3-1EA7-495D-9337-02FE4FB723F0}]
"(Default)" = "_IContactEvents"

[HKCU\Software\Classes\Interface\{8684D3AD-7061-4056-A894-EBF1270ADB9B}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{953AE732-F53A-4116-AC1B-0321B3FB3DBA}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{533891F1-A460-43E6-8BDA-6D0D2C13ADDE}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{56F7DEC0-59CA-47C6-9F35-D5066A702B39}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{48B3099D-841D-4CAA-9202-5787596E2BD2}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{4B3A2412-C149-4E52-A713-6CEBCF47503E}]
"(Default)" = "IGroupMemberChangedEventData"

[HKCU\Software\Classes\Wow6432Node\Interface\{F5996C71-77AB-4020-9776-C2C270FEF2AE}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{C63F58CB-EF11-4934-AA3B-2D69244F0780}]
"(Default)" = "_IConversationEvents"

[HKCU\Software\Classes\Interface\{7356D7BB-FD71-4554-84A1-3BBE28726551}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{E82737B9-B2BE-4AFD-B649-C9F665627F20}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{8FE9A23D-72BC-4EA3-A5AF-E37F75EAD8A2}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{10D66B39-5E4B-4C98-AAC6-D0458FEB1BDB}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{D4B240B9-059B-4D13-8997-31B282B3BD43}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{5FA92EA7-6E6E-4A82-8F0D-107FEAF5A75D}]
"(Default)" = "_IConversationHistoryCallback"

[HKCU\Software\Classes\Wow6432Node\Interface\{80EDBF3A-812E-42B5-A67F-6CC6D9A19A6C}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{E2C6D6E0-52EF-47A2-BDA9-9D6A7A29A391}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{283C2089-B760-4D65-9199-716627174F7A}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{3DEBDC7E-811F-4304-BDD7-7D98C732026C}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{8C9B6953-33CC-4A04-9DA4-F71AE79DA0C0}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{DC63D621-11C8-4490-B017-B8C57EE1BE25}]
"(Default)" = "IAddress"

[HKCU\Software\Classes\Wow6432Node\Interface\{AA186C92-181E-417F-B150-FCA0F367E0FC}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{C22CE6BF-3A47-46B7-8544-44305BADFEF9}]
"(Default)" = "_IConferenceSchedulerCallback"

[HKCU\Software\Classes\Wow6432Node\Interface\{95B9A382-EA50-45E4-965E-BA61E7213DBA}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{18BA13C7-A64E-4301-BA51-D1BFB3C1C9D5}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{F719ED75-B7BD-45D3-9097-254509226F20}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{F719ED75-B7BD-45D3-9097-254509226F20}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{57CC2235-96C5-49FA-B92B-350486C6CF52}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{66D1FFC0-C234-4F3D-ABAA-98222A69E525}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{8E839AF9-9508-475A-AA47-3EE8A946B75E}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{D0984CEF-E323-4574-B07B-5C970C9CAEE0}]
"(Default)" = "ICustomAvailabilityState"

[HKCU\Software\Classes\Wow6432Node\Interface\{9AB20314-B258-48F8-B659-AD250DFA20F5}]
"(Default)" = "ILyncClientNotificationReceivedEventData"

[HKCU\Software\Classes\Interface\{B28F2007-3926-49CF-9101-4CCB9574049B}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{533891F1-A460-43E6-8BDA-6D0D2C13ADDE}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{3C8D7146-35EA-4133-B2F6-C1FC2401A091}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History]
"CachePrefix" = "Visited:"

[HKCU\Software\Classes\Interface\{10C3ACC7-6C0C-4F35-ADFB-AE0F200A8583}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{18A9A79A-CBC7-4F8B-8B2B-9B40CA75EC3C}]
"(Default)" = "IFrequentContacts"

[HKCU\Software\Classes\Wow6432Node\Interface\{F97973D7-9436-4A3E-A802-F6EA172A0425}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{B26F6403-761E-48D4-84E2-619C17EAEB13}]
"(Default)" = "_ILyncClientCallback"

[HKCU\Software\Classes\Wow6432Node\Interface\{DD181E97-EEE0-4D65-BAD1-16866D0C7953}]
"(Default)" = "IAccessPermission"

[HKCU\Software\Classes\Interface\{68B1FC26-B48F-4D5F-B041-8E246676D836}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{76DE1CD8-F278-48A1-A391-E5BEB8F428E6}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{9112CE9B-3704-48C0-86DC-7A7B0F34D7A3}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{905B727D-FD8F-46EC-8006-CE245F6835EE}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{F97973D7-9436-4A3E-A802-F6EA172A0425}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{B0B0E8F8-32DA-4CB0-A124-D1E35891D53A}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{DEDDD7BD-4763-41D2-9AAA-B2C143457CA4}]
"(Default)" = "IModalityActionAvailabilityChangedEventData"

[HKCU\Software\Classes\Wow6432Node\Interface\{F97BED54-E434-4020-A197-F15AEA9D9C95}]
"(Default)" = "IConversationWindowNeedsAttentionEventData"

[HKCU\Software\Classes\Interface\{4CB70415-BA71-491E-B12D-155D85CBDFF1}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{2A9385AA-CF61-4E47-B64C-214DE4A4AD11}]
"(Default)" = "IConversationStateChangedEventData"

[HKCU\Software\Classes\Wow6432Node\Interface\{3CD1DB65-D85B-4912-8536-6BD8E19F1738}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{ED5040FA-8F8F-4876-BF6D-9C62F5EFFD5B}]
"(Default)" = "IModalityDictionary"

[HKCU\Software\Classes\Wow6432Node\Interface\{A4E1D1E4-7839-473B-95FA-5D33DDC0D2DD}]
"(Default)" = "IConversationCollection"

[HKCU\Software\Classes\Wow6432Node\Interface\{95B8D3E8-F3D5-4DC0-BCFE-AB80C835DEA0}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{09028936-CD20-43EF-98CF-56726ADDBA34}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{CA478B44-4FCE-4082-8700-8CEC69FB50E1}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{8E839AF9-9508-475A-AA47-3EE8A946B75E}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{0CA9BAE8-DD28-4929-A821-4D00F11203CC}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{C63F58CB-EF11-4934-AA3B-2D69244F0780}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{478DDA59-64C0-4429-AC8A-F10A940B52CC}]
"(Default)" = "IModalityStateChangedEventData"

[HKCU\Software\Classes\Wow6432Node\Interface\{32430741-330B-48DF-96F6-0CFE00484D40}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{05789509-AFA1-4E90-B4FA-1A7820DB9796}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{4023052E-E3B7-48A3-BCB3-CA2234D9BAEE}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{C413A27F-601E-4261-B9E3-0EB966F4E7D1}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{D9D04B55-D820-4D5B-A690-658A49368478}]
"(Default)" = "_IVoiceMailsManagerCallback"

[HKCU\Software\Classes\Interface\{64561371-77A2-4BD4-A909-E6DEB1B5C6CF}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{9244D573-914F-4C1F-93F6-31609A95CBED}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{D9D04B55-D820-4D5B-A690-658A49368478}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{5FA92EA7-6E6E-4A82-8F0D-107FEAF5A75D}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{89C7EB8E-42BC-4C9F-BB34-88CDE83CCB37}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{9244D573-914F-4C1F-93F6-31609A95CBED}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{4AA93AA8-898C-45EE-8E5C-1A86739B3F96}]
"(Default)" = "_IDeviceManagerEvents"

[HKCU\Software\Classes\Interface\{ED5040FA-8F8F-4876-BF6D-9C62F5EFFD5B}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{B1C6ECC3-1EA7-495D-9337-02FE4FB723F0}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{086F0E9D-A416-40F9-877C-F1C82DC1A6AD}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{8057F99D-292C-4371-926B-5312E61A3A40}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{8057F99D-292C-4371-926B-5312E61A3A40}]
"(Default)" = "ISummarizerStatesChangedEventData"

[HKCU\Software\Classes\Interface\{995F992C-9DEF-47B9-BF11-81813C0C0E28}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{A766520D-F700-4BF5-8428-56BD914C1C40}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{B28F2007-3926-49CF-9101-4CCB9574049B}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{BE026CD2-7E82-4F7C-8762-F6B02F496174}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{B28F2007-3926-49CF-9101-4CCB9574049B}]
"(Default)" = "IPreferredCapabilitiesChangedEventData"

[HKCU\Software\Classes\Wow6432Node\Interface\{25025B1B-0084-44D1-B383-9FFC9A99ABCD}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{0BDB9057-28AE-4BF0-AFF0-12A148E51637}]
"(Default)" = "IUriChangedEventData"

[HKCU\Software\Classes\Wow6432Node\Interface\{2C59A886-ACD3-46BB-8BAC-7C1C59FB2E0D}]
"(Default)" = "IPreviousConversationsManagerNewItemCountChangedEventData"

[HKCU\Software\Classes\Interface\{95B8D3E8-F3D5-4DC0-BCFE-AB80C835DEA0}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{569E04F2-D286-4903-9642-44D850310956}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{62A75516-C79B-42D7-8B49-3BA492C2B385}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{4BACB4B8-1236-42B8-BDA1-D1533148780D}]
"(Default)" = "_IPreviousConversationsManagerCallback"

[HKCU\Software\Classes\Wow6432Node\Interface\{8665FD95-7720-4F9E-B605-6ABCBD7EDFF4}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{DC63D621-11C8-4490-B017-B8C57EE1BE25}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{0C81EC90-9469-4ED4-ACAD-ADB86E11039C}]
"(Default)" = "IGroupCollection"

[HKCU\Software\Classes\Interface\{C7ACB102-B692-49CC-92DA-5824822C7B96}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{4DA899D3-FAC7-4F43-8E4A-1987988FBC9B}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{A9AAB6A0-54B9-4419-AAAF-6B26DFAC1585}]
"(Default)" = "_ISelfCallback"

[HKCU\Software\Classes\Interface\{3187885C-A8AF-4D4B-8E80-F4B9D447A7B2}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{209DA899-15F1-499A-B8B5-A847EAA899AE}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{8684D3AD-7061-4056-A894-EBF1270ADB9B}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{DAC6D77B-12F7-405C-BB33-002D6D4007F3}]
"(Default)" = "IResiliencyModeChangedEventData"

[HKCU\Software\Classes\Wow6432Node\Interface\{FD9000B3-479F-4B16-9D63-70A49E078946}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{88C688B0-3908-4C56-A2E8-F90AB705C536}]
"(Default)" = "IConversationActionAvailabilityEventData"

[HKCU\Software\Classes\Wow6432Node\Interface\{85109845-6AE2-4B6B-9524-65BA203E5B7D}]
"(Default)" = "IContact"

[HKCU\Software\Classes\Interface\{FB67275C-4D9E-4C32-9793-A96749884FC1}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{C6605772-3D9D-44A7-B43A-4590E6B43EE3}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{AAFE380B-B079-4B55-B81B-A9401D77B776}]
"(Default)" = "IPowerPointContent"

[HKCU\Software\Classes\Wow6432Node\Interface\{339D28C6-3D1A-45D4-BA14-A56742749A43}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{32430741-330B-48DF-96F6-0CFE00484D40}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{4D120020-CE64-43C5-9F84-7A7B2360388F}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{85109845-6AE2-4B6B-9524-65BA203E5B7D}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{68DA8699-6C6E-4390-BD82-709FF1DC1702}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{B1F5BCD8-69A6-4FC3-9EF0-9BD4AD999061}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{A0984F01-5D2C-4302-87A0-69BE7B015143}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{E82737B9-B2BE-4AFD-B649-C9F665627F20}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{569E04F2-D286-4903-9642-44D850310956}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{3F60CFF7-BE3F-4404-8395-C02D0CDD318E}]
"(Default)" = "_IModalityCallback"

[HKCU\Software\Classes\Interface\{E5CFF4A5-83A8-4FD8-8DAA-77A3E2288D4A}]
"(Default)" = "IConferenceCapabilities2"

[HKCU\Software\Classes\Interface\{4D120020-CE64-43C5-9F84-7A7B2360388F}]
"(Default)" = "IRoomJoinStateChangedEventData"

[HKCU\Software\Classes\Interface\{AF2ABA54-F591-42BA-8004-20944C9FB4D7}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{80EDBF3A-812E-42B5-A67F-6CC6D9A19A6C}]
"(Default)" = "IDelegatorClient"

[HKCU\Software\Classes\Wow6432Node\Interface\{86225E5C-7595-4D1C-985D-8A0458D714C0}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{80EDBF3A-812E-42B5-A67F-6CC6D9A19A6C}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{B3FF95BD-B743-498C-9973-7F8A2A78576A}]
"(Default)" = "IParticipantInfo"

[HKCU\Software\Classes\Interface\{AA41EE75-F9C5-42F7-8D17-1D92D6BA4D92}]
"(Default)" = "IApplicationRegistration"

[HKCU\Software\Classes\Interface\{AB2D1A67-2B3D-4E25-B21C-03F4BFC4C2BE}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{8FE9A23D-72BC-4EA3-A5AF-E37F75EAD8A2}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{953AE732-F53A-4116-AC1B-0321B3FB3DBA}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{50D86EE2-288F-44F5-8144-69F6E3B24B90}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{38E5EC21-81A1-45A7-94D6-B812976231A4}]
"(Default)" = "IContentSharingModality"

[HKCU\Software\Classes\Interface\{2209E091-5B90-4CAF-8582-CC5979883376}]
"(Default)" = "IConversationWindowStateChangedEventData"

[HKCU\Software\Classes\Interface\{05789509-AFA1-4E90-B4FA-1A7820DB9796}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{C12F0DE5-9A7D-425C-B391-8BE004EAA2F6}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{8057F99D-292C-4371-926B-5312E61A3A40}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{3417D640-3976-4CB6-BC82-54E5E2E10784}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{EF5C00E4-75E2-4D39-B358-0ED9CB14F3CB}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{081793DA-7221-45C3-8AFA-3A2E6E464670}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{B1F5BCD8-69A6-4FC3-9EF0-9BD4AD999061}]
"(Default)" = "IConversationWindow"

[HKCU\Software\Classes\Wow6432Node\Interface\{08E1E9CF-A7E4-43BE-AE8E-B223CE71E46E}]
"(Default)" = "_IChannelCallback"

[HKCU\Software\Classes\Interface\{B03614AE-8D68-4386-9E1C-939CABCF1232}]
"(Default)" = "IRoomPropertyChangedEventData"

[HKCU\Software\Classes\Interface\{7356D7BB-FD71-4554-84A1-3BBE28726551}]
"(Default)" = "ISearchResults"

[HKCU\Software\Classes\Wow6432Node\Interface\{209DA899-15F1-499A-B8B5-A847EAA899AE}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{61C747F6-157C-4CAE-A37C-EC4352175860}]
"(Default)" = "IChannel"

[HKCU\Software\Classes\Wow6432Node\Interface\{339D28C6-3D1A-45D4-BA14-A56742749A43}]
"(Default)" = "IWorkingPeriod"

[HKCU\Software\Classes\Wow6432Node\Interface\{3187885C-A8AF-4D4B-8E80-F4B9D447A7B2}]
"(Default)" = "_IShareableContentCallback"

[HKCU\Software\Classes\Interface\{9397FF55-EE06-4F02-8F2A-BE3AE249D4BB}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{5FA92EA7-6E6E-4A82-8F0D-107FEAF5A75D}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{D804BA85-DB0F-49EE-B723-DCDF0425BD9F}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{5E7AB04C-E4B8-49FB-85FF-9E2BCA2899D3}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{7452BD0F-65CB-4A5E-AC37-E2BEA1F43DD9}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{011B320C-9AC1-4DDE-B595-3D0014472E2F}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{C6605772-3D9D-44A7-B43A-4590E6B43EE3}]
"(Default)" = "_IGroupCallback"

[HKCU\Software\Classes\Interface\{603E2454-725A-4679-A6A8-363B21633CB2}]
"(Default)" = "IRoomMessageDictionary"

[HKCU\Software\Classes\Interface\{D5C1C8FB-DC8A-45A3-AAA3-53B89D43CDE4}]
"(Default)" = "IIsContributingChangedEventData"

[HKCU\Software\Classes\Wow6432Node\Interface\{F0B791FA-434B-49F2-B84E-05619EBE6BEB}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{7CC306E9-2546-4101-82AB-29613AD6F7A7}]
"(Default)" = "ICallParkOrbit"

[HKCU\Software\Classes\Wow6432Node\Interface\{71A054B3-4D4B-4643-B14F-4572494B19E7}]
"(Default)" = "IScheduledConference"

[HKCU\Software\Classes\Wow6432Node\Interface\{9918673D-4D74-41CF-8840-D4996395A34C}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{081793DA-7221-45C3-8AFA-3A2E6E464670}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{32430741-330B-48DF-96F6-0CFE00484D40}]
"(Default)" = "IControlRequestReceivedEventData"

[HKCU\Software\Classes\Interface\{109D32CE-E09F-46F5-9ECB-01E1D273B7DA}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{B3C5872E-591C-4A74-9F84-B00EF970A838}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{64561371-77A2-4BD4-A909-E6DEB1B5C6CF}]
"(Default)" = "_IClientEvents"

[HKCU\Software\Classes\Interface\{10D66B39-5E4B-4C98-AAC6-D0458FEB1BDB}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{C63F58CB-EF11-4934-AA3B-2D69244F0780}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{FD9000B3-479F-4B16-9D63-70A49E078946}]
"(Default)" = "IContactSettingDictionary"

[HKCU\Software\Classes\Wow6432Node\Interface\{C22CE6BF-3A47-46B7-8544-44305BADFEF9}]
"(Default)" = "_IConferenceSchedulerCallback"

[HKCU\Software\Classes\Interface\{B26F6403-761E-48D4-84E2-619C17EAEB13}]
"(Default)" = "_ILyncClientCallback"

[HKCU\Software\Classes\Interface\{09028936-CD20-43EF-98CF-56726ADDBA34}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{CE16D540-B9E8-4742-8659-9A7A318AFB92}]
"(Default)" = "IDevice"

[HKCU\Software\Classes\Interface\{8E73E7E1-90CE-4D3B-B5B7-71E87B2E8BA5}]
"(Default)" = "_IRoomUserEvents"

[HKCU\Software\Classes\Wow6432Node\Interface\{AF2ABA54-F591-42BA-8004-20944C9FB4D7}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{62A75516-C79B-42D7-8B49-3BA492C2B385}]
"(Default)" = "IInstantMessageModality"

[HKCU\Software\Classes\Interface\{E66CA1CC-9DB0-467E-9C60-6A832ACD6780}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{55A21CF3-A2B3-484E-BE2A-14280F501289}]
"(Default)" = "IVideoView"

[HKCU\Software\Classes\Wow6432Node\Interface\{2A9385AA-CF61-4E47-B64C-214DE4A4AD11}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{FF037274-455A-4E34-B5D1-D42DB866F9B7}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{A9AAB6A0-54B9-4419-AAAF-6B26DFAC1585}]
"(Default)" = "_ISelfCallback"

[HKCU\Software\Classes\Wow6432Node\Interface\{7356D7BB-FD71-4554-84A1-3BBE28726551}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{1FF0E6F1-2FE4-4E29-A123-557AF0DB6927}]
"(Default)" = "IContactEndpoint"

[HKCU\Software\Classes\Wow6432Node\Interface\{4E8DC7E0-04B8-470B-BDFA-F520099B975F}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{61C747F6-157C-4CAE-A37C-EC4352175860}]
"(Default)" = "IChannel"

[HKCU\Software\Classes\Interface\{283C2089-B760-4D65-9199-716627174F7A}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{DAB42E13-500A-409A-AC34-C1BF4719EE2E}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{7BF20B14-58D1-494B-B301-9B16BACC9610}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{F7EE956B-A713-48D3-AFEF-0A28F37740B3}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{7452BD0F-65CB-4A5E-AC37-E2BEA1F43DD9}]
"(Default)" = "IRoomParticipantsEventData"

[HKCU\Software\Classes\Interface\{219DC126-9A48-483F-80C2-3F22B3B47829}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{6A222195-F65E-467F-8F77-EB180BD85288}]
"(Default)" = "IUCOfficeIntegration"

[HKCU\Software\Classes\Interface\{8684D3AD-7061-4056-A894-EBF1270ADB9B}]
"(Default)" = "_IApplicationSharingModalityCallback"

[HKCU\Software\Classes\Interface\{D0DBB17D-565E-486C-A47B-BA32DC1FAD0A}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{A0C3E9BA-C622-45A2-9FED-2C662F3F489A}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{06437ABB-C419-4B11-A474-1A2B02FBD646}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{E24C2484-C70D-44AB-8A4E-F1585A17A3E1}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{8E839AF9-9508-475A-AA47-3EE8A946B75E}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{B3FF95BD-B743-498C-9973-7F8A2A78576A}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{80EDBF3A-812E-42B5-A67F-6CC6D9A19A6C}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{7693221D-7E9F-47D3-8782-6437CF3D4C0C}]
"(Default)" = "IPhone"

[HKCU\Software\Classes\Interface\{086F0E9D-A416-40F9-877C-F1C82DC1A6AD}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{8AFFB8CE-5404-4280-BCA3-E2E4388E6D73}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{464D5228-9F68-4B1F-B430-156A104E2B85}]
"(Default)" = "IPreviousHistoryRetrievalStateChangedEventData"

[HKCU\Software\Classes\Wow6432Node\Interface\{3C8D7146-35EA-4133-B2F6-C1FC2401A091}]
"(Default)" = "ISelf2"

[HKCU\Software\Classes\Wow6432Node\Interface\{30F974FB-1F7B-49D3-8DA4-01694BA474D2}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{84340964-7820-4EBC-BCD3-702926DE23E8}]
"(Default)" = "_IContentSharingModalityCallback"

[HKCU\Software\Classes\Interface\{9D4D3D10-DEBC-40C6-ACF9-527986CB42BC}]
"(Default)" = "IChannelActionAvailabilityEventData"

[HKCU\Software\Classes\Wow6432Node\Interface\{3959E5C6-75CC-448E-9A18-9F163FF47646}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{D5C1C8FB-DC8A-45A3-AAA3-53B89D43CDE4}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{3C43A2BE-BA4A-41E8-8F93-A9DC5F091892}]
"(Default)" = "_ISelf2Events"

[HKCU\Software\Classes\Wow6432Node\Interface\{30F974FB-1F7B-49D3-8DA4-01694BA474D2}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{64B7E9AD-D920-4EAA-95C7-9D95DE9ACE24}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{DAC6D77B-12F7-405C-BB33-002D6D4007F3}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{DF414A68-5051-4465-AAE2-4F301315734E}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{4290152C-75C9-47C8-AA12-814818360B3F}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{66D1FFC0-C234-4F3D-ABAA-98222A69E525}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{0678C83E-F580-4D99-902F-930699B28BE8}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{55A21CF3-A2B3-484E-BE2A-14280F501289}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{56A868B4-0AD4-11CE-B03A-0020AF0BA770}]
"(Default)" = "IVideoWindow"

[HKCU\Software\Classes\Interface\{89C7EB8E-42BC-4C9F-BB34-88CDE83CCB37}]
"(Default)" = "IRoomManagerStateChangedEventData"

[HKCU\Software\Classes\Interface\{5FA92EA7-6E6E-4A82-8F0D-107FEAF5A75D}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{9918673D-4D74-41CF-8840-D4996395A34C}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{F423726D-0E9B-4B55-9569-E79865210F69}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{2C59A886-ACD3-46BB-8BAC-7C1C59FB2E0D}]
"(Default)" = "IPreviousConversationsManagerNewItemCountChangedEventData"

[HKCU\Software\Classes\Interface\{9B3A702D-5BE1-4FCE-ADB3-EBBD23E078C3}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{B26F6403-761E-48D4-84E2-619C17EAEB13}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{9AB20314-B258-48F8-B659-AD250DFA20F5}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{17635563-2FA5-46AD-8F47-3F0FF958ECE2}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{D992371E-5161-453B-97E6-6E7C67BC075E}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{B3FF95BD-B743-498C-9973-7F8A2A78576A}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{30F974FB-1F7B-49D3-8DA4-01694BA474D2}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{9274DBDC-43CE-45AA-A817-414A4494AD28}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{25D64AEA-0E65-49CB-8D6D-65DB0AC1AF65}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{6964B116-8FE6-4C19-9052-0EAA74460A58}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{04378C72-E58F-47C0-8621-901B85CA2ED4}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{18BA13C7-A64E-4301-BA51-D1BFB3C1C9D5}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{B3C5872E-591C-4A74-9F84-B00EF970A838}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{8FE9A23D-72BC-4EA3-A5AF-E37F75EAD8A2}]
"(Default)" = "IParticipationStateChangedEventData"

[HKCU\Software\Classes\Interface\{B3C5872E-591C-4A74-9F84-B00EF970A838}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{A9AAB6A0-54B9-4419-AAAF-6B26DFAC1585}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{88C688B0-3908-4C56-A2E8-F90AB705C536}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{12480BD4-072F-4763-B9FB-41B2CA54F9CD}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{84340964-7820-4EBC-BCD3-702926DE23E8}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{7818A3F7-674B-477E-99E8-54774579A8E7}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{EC9773AD-7D22-4B03-B949-5E9055AF0F19}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{62074904-8D06-43FE-A531-E63DF7FDC2E7}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{4E8DC7E0-04B8-470B-BDFA-F520099B975F}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{5E7AB04C-E4B8-49FB-85FF-9E2BCA2899D3}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{CE16D540-B9E8-4742-8659-9A7A318AFB92}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{603E2454-725A-4679-A6A8-363B21633CB2}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{2D3D62CA-E9F6-4F94-8EBD-5FABAB29E6A5}]
"(Default)" = "IConferenceInfoPropertyDictionary"

[HKCU\Software\Classes\Wow6432Node\Interface\{4B3A2412-C149-4E52-A713-6CEBCF47503E}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{9D4D3D10-DEBC-40C6-ACF9-527986CB42BC}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{ABF012A2-2068-4B4D-80D7-6D386BA7C8A2}]
"(Default)" = "_IContactsAndGroupsCallback"

[HKCU\Software\Classes\Interface\{DF414A68-5051-4465-AAE2-4F301315734E}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{311DDE48-ED7D-46FA-9E0A-2E314B7FEF7C}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{92A9EB9B-85EE-444E-A302-00C3C945BAA4}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{905B727D-FD8F-46EC-8006-CE245F6835EE}]
"(Default)" = "IMessageSentEventData"

[HKCU\Software\Classes\Wow6432Node\Interface\{6964B116-8FE6-4C19-9052-0EAA74460A58}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{AA186C92-181E-417F-B150-FCA0F367E0FC}]
"(Default)" = "_IFrequentContactsEvents"

[HKCU\Software\Classes\Wow6432Node\Interface\{70986DCE-4AA8-4DFB-9A45-4BFCF7A206F5}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{B00F2520-029C-47D0-B4E8-8FBEF47CAA7E}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{F5996C71-77AB-4020-9776-C2C270FEF2AE}]
"(Default)" = "IConversationHistory"

[HKCU\Software\Classes\Interface\{806D3227-4CB8-47C4-9864-7D4DF4F44069}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{FD9000B3-479F-4B16-9D63-70A49E078946}]
"(Default)" = "IContactSettingDictionary"

[HKCU\Software\Classes\Wow6432Node\Interface\{68B1FC26-B48F-4D5F-B041-8E246676D836}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{53D014C1-54DB-42B3-9DFD-8E231EF2C356}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{7356D7BB-FD71-4554-84A1-3BBE28726551}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{603E2454-725A-4679-A6A8-363B21633CB2}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{B0B0E8F8-32DA-4CB0-A124-D1E35891D53A}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{D0DBB17D-565E-486C-A47B-BA32DC1FAD0A}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{8E839AF9-9508-475A-AA47-3EE8A946B75E}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{F644C610-A146-4A56-8338-A69C45C71CEF}]
"(Default)" = "IVoiceMailCollection"

[HKCU\Software\Classes\Wow6432Node\Interface\{7818A3F7-674B-477E-99E8-54774579A8E7}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{300E56A3-CE08-4EB3-9F48-505AA162C9DA}]
"(Default)" = "_IRoomEvents"

[HKCU\Software\Classes\Interface\{B8FD4A53-E7E6-4995-A5B5-1306C7584964}]
"(Default)" = "IUnreadMessageCountChangedEventData"

[HKCU\Software\Classes\Interface\{8057F99D-292C-4371-926B-5312E61A3A40}]
"(Default)" = "ISummarizerStatesChangedEventData"

[HKCU\Software\Classes\Interface\{4AA93AA8-898C-45EE-8E5C-1A86739B3F96}]
"(Default)" = "_IDeviceManagerEvents"

[HKCU\Software\Classes\Wow6432Node\Interface\{F644C610-A146-4A56-8338-A69C45C71CEF}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{57CC2235-96C5-49FA-B92B-350486C6CF52}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{BE6086A1-D436-4834-89EE-3CA4F8596A58}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{D804BA85-DB0F-49EE-B723-DCDF0425BD9F}]
"(Default)" = "ICustomGroup"

[HKCU\Software\Classes\Interface\{4C675532-6D55-49DD-8C8E-3C1CC5624CF2}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{283C2089-B760-4D65-9199-716627174F7A}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{3417D640-3976-4CB6-BC82-54E5E2E10784}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{8C9B6953-33CC-4A04-9DA4-F71AE79DA0C0}]
"(Default)" = "_IUCOfficeIntegrationEvents"

[HKCU\Software\Classes\Wow6432Node\Interface\{CE16D540-B9E8-4742-8659-9A7A318AFB92}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{FF037274-455A-4E34-B5D1-D42DB866F9B7}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{420A24E2-5C31-4262-9BD5-058682300ED6}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{4D120020-CE64-43C5-9F84-7A7B2360388F}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{12480BD4-072F-4763-B9FB-41B2CA54F9CD}]
"(Default)" = "IContactSettingChangedEventData"

[HKCU\Software\Classes\Interface\{62A75516-C79B-42D7-8B49-3BA492C2B385}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{E664682C-CBA5-4C7C-A65B-9CD046F24CBD}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{420A24E2-5C31-4262-9BD5-058682300ED6}]
"(Default)" = "IConferenceRegionalAccessInformation"

[HKCU\Software\Classes\Interface\{B335AE5E-E4EA-49D3-B03B-646A96FE66D3}]
"(Default)" = "IShareableContent"

[HKCU\Software\Classes\Interface\{10C3ACC7-6C0C-4F35-ADFB-AE0F200A8583}]
"(Default)" = "IPresenceCapability"

[HKCU\Software\Classes\Wow6432Node\Interface\{87084018-7E74-4F92-AB39-1CF03188580E}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\TypeLib\{B9AA1F11-F480-4054-A84E-B5D9277E40A8}\1.0\0\win32]
"(Default)" = "%Program Files% (x86)\Skype\Phone\Skype.exe\3"

[HKCU\Software\Classes\Wow6432Node\Interface\{05789509-AFA1-4E90-B4FA-1A7820DB9796}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{BD891697-C93E-4A0B-9B6C-004BD81B6EE8}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{7CFE77CD-731D-48B2-82B1-ECA3414D62E3}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{95B9A382-EA50-45E4-965E-BA61E7213DBA}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{57C3CB4D-C794-456F-846D-0E1ECA78BD00}]
"(Default)" = "IContactCollection"

[HKCU\Software\Classes\Wow6432Node\Interface\{300E56A3-CE08-4EB3-9F48-505AA162C9DA}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{5FA92EA7-6E6E-4A82-8F0D-107FEAF5A75D}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{283C2089-B760-4D65-9199-716627174F7A}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{905B727D-FD8F-46EC-8006-CE245F6835EE}]
"(Default)" = "IMessageSentEventData"

[HKCU\Software\Classes\Wow6432Node\Interface\{2C59A886-ACD3-46BB-8BAC-7C1C59FB2E0D}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{B03614AE-8D68-4386-9E1C-939CABCF1232}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{F8DF0B4B-A4CE-476B-81D3-9FBA98461B62}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{BE6086A1-D436-4834-89EE-3CA4F8596A58}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{71A054B3-4D4B-4643-B14F-4572494B19E7}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{35CE3A44-C636-4D31-BC95-B9370C2251B9}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{81C9D13F-A4F9-4E13-92D3-BB271E8DF3D2}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{8A88C016-AA5D-4EAE-9C79-7AA5C360ED76}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{E6B3F5FA-4208-4C37-AE07-F6435B68D693}]
"(Default)" = "IContactManager"

[HKCU\Software\Classes\Wow6432Node\Interface\{0C81EC90-9469-4ED4-ACAD-ADB86E11039C}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{68B1FC26-B48F-4D5F-B041-8E246676D836}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{B8FD4A53-E7E6-4995-A5B5-1306C7584964}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{BE6086A1-D436-4834-89EE-3CA4F8596A58}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{C12F0DE5-9A7D-425C-B391-8BE004EAA2F6}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{8665FD95-7720-4F9E-B605-6ABCBD7EDFF4}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{E66CA1CC-9DB0-467E-9C60-6A832ACD6780}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{339D28C6-3D1A-45D4-BA14-A56742749A43}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{EE9F3E74-AC61-469E-80D6-E22BF4EEFF5C}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{3959E5C6-75CC-448E-9A18-9F163FF47646}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{C413A27F-601E-4261-B9E3-0EB966F4E7D1}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{D2BFC7D7-A64F-48EF-BF90-C3C7E684D89C}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{C4D95336-5949-4D13-AAC8-82039E5CBCFC}]
"(Default)" = "_IUtilitiesCallback"

[HKCU\Software\Classes\Interface\{081793DA-7221-45C3-8AFA-3A2E6E464670}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{CA7EEB7A-7DC3-4FFE-A174-23DB5A003C04}]
"(Default)" = "IStreamStateChangedEventData"

[HKCU\Software\Classes\Interface\{EBD19735-0CB5-4AF3-8E05-B0140CF9D545}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{86225E5C-7595-4D1C-985D-8A0458D714C0}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{953AE732-F53A-4116-AC1B-0321B3FB3DBA}]
"(Default)" = "_ILyncClientEvents"

[HKCU\Software\Classes\Wow6432Node\Interface\{37C7F935-E215-46D2-82A3-A451840EC733}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{DD181E97-EEE0-4D65-BAD1-16866D0C7953}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{EBD19735-0CB5-4AF3-8E05-B0140CF9D545}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{569E04F2-D286-4903-9642-44D850310956}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{C12F0DE5-9A7D-425C-B391-8BE004EAA2F6}]
"(Default)" = "ILocaleString"

[HKCU\Software\Classes\Wow6432Node\Interface\{F87AFD9A-9BF8-4AC4-953E-33C4D2035D33}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{55A21CF3-A2B3-484E-BE2A-14280F501289}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{209DA899-15F1-499A-B8B5-A847EAA899AE}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{0CA9BAE8-DD28-4929-A821-4D00F11203CC}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{3417D640-3976-4CB6-BC82-54E5E2E10784}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{4C675532-6D55-49DD-8C8E-3C1CC5624CF2}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{36CDC166-4F21-46AD-A60E-8551F26C1D41}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{6A222195-F65E-467F-8F77-EB180BD85288}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{64561371-77A2-4BD4-A909-E6DEB1B5C6CF}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{4290152C-75C9-47C8-AA12-814818360B3F}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{D4B240B9-059B-4D13-8997-31B282B3BD43}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{EFEC2816-F16D-48D8-9306-26C810F0EA55}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{4B3A2412-C149-4E52-A713-6CEBCF47503E}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{C6605772-3D9D-44A7-B43A-4590E6B43EE3}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{FB67275C-4D9E-4C32-9793-A96749884FC1}]
"(Default)" = "IAlertLevel"

[HKCU\Software\Classes\Interface\{EE9F3E74-AC61-469E-80D6-E22BF4EEFF5C}]
"(Default)" = "IClient"

[HKCU\Software\Classes\Interface\{082EE280-726E-417F-99CB-81A0CCBFF883}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{B03614AE-8D68-4386-9E1C-939CABCF1232}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{C22CE6BF-3A47-46B7-8544-44305BADFEF9}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{0678C83E-F580-4D99-902F-930699B28BE8}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{8E73E7E1-90CE-4D3B-B5B7-71E87B2E8BA5}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{7BF20B14-58D1-494B-B301-9B16BACC9610}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{DBA05C15-1C07-4A76-8248-08D8416A24E3}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f3-c8-bd]
"WpadDecision" = "0"

[HKCU\Software\Classes\Wow6432Node\Interface\{D5C1C8FB-DC8A-45A3-AAA3-53B89D43CDE4}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{68DA8699-6C6E-4390-BD82-709FF1DC1702}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{AC10D6E9-4A8C-4484-B8F4-CA1E36347AAE}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{B3FF95BD-B743-498C-9973-7F8A2A78576A}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{D4B240B9-059B-4D13-8997-31B282B3BD43}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{B0B0E8F8-32DA-4CB0-A124-D1E35891D53A}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{FD02E775-CB9D-4CE3-9243-115C81E5F11C}]
"(Default)" = "IParticipantCollection"

[HKCU\Software\Classes\Wow6432Node\Interface\{300E56A3-CE08-4EB3-9F48-505AA162C9DA}]
"(Default)" = "_IRoomEvents"

[HKCU\Software\Classes\Interface\{BD891697-C93E-4A0B-9B6C-004BD81B6EE8}]
"(Default)" = "IConferenceSettingDictionary"

[HKCU\Software\Classes\Interface\{BC9F5F40-D315-40C1-B1C6-CEA0646E18E2}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{0BDB9057-28AE-4BF0-AFF0-12A148E51637}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{25A47938-5C31-4F43-9108-DA01EE5869C0}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{C31FB52D-9E9E-45AD-A102-5218E1685B78}]
"(Default)" = "IConversationManager"

[HKCU\Software\Classes\Wow6432Node\Interface\{232F1CAB-5351-4E48-8A87-2185445F712D}]
"(Default)" = "IActiveVideoDeviceChangedEventData"

[HKCU\Software\Classes\Interface\{38E5EC21-81A1-45A7-94D6-B812976231A4}]
"(Default)" = "IContentSharingModality"

[HKCU\Software\Classes\Interface\{628D7BDD-45AB-404D-8505-B3ADC15F454D}]
"(Default)" = "_IRoomCallback"

[HKCU\Software\Classes\Interface\{94093301-8854-408E-8138-C7C3D2DACA1F}]
"(Default)" = "IShareableContentStateChangedEventData"

[HKCU\Software\Classes\Interface\{C79E4169-535F-4A41-8DE2-C65A90D9503D}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{92D7E7A8-48D8-4166-8911-630AE02B2B93}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{9274DBDC-43CE-45AA-A817-414A4494AD28}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{36CDC166-4F21-46AD-A60E-8551F26C1D41}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{9918673D-4D74-41CF-8840-D4996395A34C}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{B03614AE-8D68-4386-9E1C-939CABCF1232}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{15D4461D-C7EB-45CB-B214-F1C45FED1DB2}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{92D7E7A8-48D8-4166-8911-630AE02B2B93}]
"(Default)" = "IInitialContextEventData"

[HKCU\Software\Classes\Interface\{25025B1B-0084-44D1-B383-9FFC9A99ABCD}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{3F60CFF7-BE3F-4404-8395-C02D0CDD318E}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{8C9B6953-33CC-4A04-9DA4-F71AE79DA0C0}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{4E8DC7E0-04B8-470B-BDFA-F520099B975F}]
"(Default)" = "IControllerChangedEventData"

[HKCU\Software\Classes\Wow6432Node\Interface\{0BDB9057-28AE-4BF0-AFF0-12A148E51637}]
"(Default)" = "IUriChangedEventData"

[HKCU\Software\Classes\Wow6432Node\Interface\{57C3CB4D-C794-456F-846D-0E1ECA78BD00}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{8057F99D-292C-4371-926B-5312E61A3A40}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{E24C2484-C70D-44AB-8A4E-F1585A17A3E1}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{70986DCE-4AA8-4DFB-9A45-4BFCF7A206F5}]
"(Default)" = "_IChannel2Callback"

[HKCU\Software\Classes\Interface\{76DE1CD8-F278-48A1-A391-E5BEB8F428E6}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{CA478B44-4FCE-4082-8700-8CEC69FB50E1}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{378CD767-1B64-4A0E-A941-8F52869FC9DF}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{90B49A60-72AF-4360-9F9B-916DB7504A3C}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{08E1E9CF-A7E4-43BE-AE8E-B223CE71E46E}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{4FE44049-4E44-4109-B234-4E4EFC135A86}]
"(Default)" = "_IInstantMessageModalityEvents"

[HKCU\Software\Classes\Wow6432Node\Interface\{EF5C00E4-75E2-4D39-B358-0ED9CB14F3CB}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{25025B1B-0084-44D1-B383-9FFC9A99ABCD}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{B3FF95BD-B743-498C-9973-7F8A2A78576A}]
"(Default)" = "IParticipantInfo"

[HKCU\Software\Classes\Wow6432Node\Interface\{18BA13C7-A64E-4301-BA51-D1BFB3C1C9D5}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{4875C050-BA9C-4A05-891E-E7B0A9463664}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{855AD949-E2EB-473D-AAF2-9800008EA303}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{4BACB4B8-1236-42B8-BDA1-D1533148780D}]
"(Default)" = "_IPreviousConversationsManagerCallback"

[HKCU\Software\Classes\Interface\{330639F2-E399-48CB-863F-56A50A27A138}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{4023052E-E3B7-48A3-BCB3-CA2234D9BAEE}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{08E1E9CF-A7E4-43BE-AE8E-B223CE71E46E}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content]
"CachePrefix" = ""

[HKCU\Software\Classes\Wow6432Node\Interface\{76428270-36FA-4236-8BDF-AADB39FD1371}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{F8DF0B4B-A4CE-476B-81D3-9FBA98461B62}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{9397FF55-EE06-4F02-8F2A-BE3AE249D4BB}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{D2BFC7D7-A64F-48EF-BF90-C3C7E684D89C}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{6A222195-F65E-467F-8F77-EB180BD85288}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{DBA05C15-1C07-4A76-8248-08D8416A24E3}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{2495B94C-38AF-439B-BBA0-0AD38D959CE4}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{66D1FFC0-C234-4F3D-ABAA-98222A69E525}]
"(Default)" = "IConferenceTelephoneAccessInformation"

[HKCU\Software\Classes\Interface\{9D4D3D10-DEBC-40C6-ACF9-527986CB42BC}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{A4E1D1E4-7839-473B-95FA-5D33DDC0D2DD}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{2495B94C-38AF-439B-BBA0-0AD38D959CE4}]
"(Default)" = "IChannelStateChangedEventData"

[HKCU\Software\Classes\Wow6432Node\Interface\{B8FD4A53-E7E6-4995-A5B5-1306C7584964}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{AE3A7C39-9C30-4E0F-BAE4-D8344EF377EA}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{533891F1-A460-43E6-8BDA-6D0D2C13ADDE}]
"(Default)" = "IConversation"

[HKCU\Software\Classes\Interface\{DC63D621-11C8-4490-B017-B8C57EE1BE25}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{3C8210C8-8578-47C6-87A9-FA1AD2BA9873}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{BE026CD2-7E82-4F7C-8762-F6B02F496174}]
"(Default)" = "_IApplicationSharingModalityEvents"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f3-c8-bd]
"WpadDecisionReason" = "1"

[HKCU\Software\Classes\Interface\{F0CE810F-E36F-4CD8-A836-515B9A6E09FC}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{6964B116-8FE6-4C19-9052-0EAA74460A58}]
"(Default)" = "_IConversation2Callback"

[HKCU\Software\Classes\Interface\{EFEC2816-F16D-48D8-9306-26C810F0EA55}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{D992371E-5161-453B-97E6-6E7C67BC075E}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{09028936-CD20-43EF-98CF-56726ADDBA34}]
"(Default)" = "IUCOfficeIntegrationHelper"

[HKCU\Software\Classes\Interface\{C12F0DE5-9A7D-425C-B391-8BE004EAA2F6}]
"(Default)" = "ILocaleString"

[HKCU\Software\Classes\Interface\{3C43A2BE-BA4A-41E8-8F93-A9DC5F091892}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{ABF012A2-2068-4B4D-80D7-6D386BA7C8A2}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{D2BFC7D7-A64F-48EF-BF90-C3C7E684D89C}]
"(Default)" = "IDistributionGroupExpansionStateChangedEventData"

[HKCU\Software\Classes\Wow6432Node\Interface\{56A868B4-0AD4-11CE-B03A-0020AF0BA770}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{F0CE810F-E36F-4CD8-A836-515B9A6E09FC}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{BC9F5F40-D315-40C1-B1C6-CEA0646E18E2}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{1A8A9402-E89F-40AE-88A8-B328391684B6}]
"(Default)" = "INamedPropertyList"

[HKCU\Software\Classes\Interface\{300E56A3-CE08-4EB3-9F48-505AA162C9DA}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{EBD19735-0CB5-4AF3-8E05-B0140CF9D545}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{2C59A886-ACD3-46BB-8BAC-7C1C59FB2E0D}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{663C61F4-A9DA-4A6F-A606-F142F665DF61}]
"(Default)" = "IConversationWindowActions"

[HKCU\Software\Classes\Wow6432Node\Interface\{5E7AB04C-E4B8-49FB-85FF-9E2BCA2899D3}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{E82737B9-B2BE-4AFD-B649-C9F665627F20}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{2495B94C-38AF-439B-BBA0-0AD38D959CE4}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{1FF0E6F1-2FE4-4E29-A123-557AF0DB6927}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{744BAB86-B15F-4BD5-B7DD-476B0CE0162A}]
"(Default)" = "IDelegatorClientCollectionEventData"

[HKCU\Software\Classes\Interface\{30F974FB-1F7B-49D3-8DA4-01694BA474D2}]
"(Default)" = "_IVideoViewEvents"

[HKCU\Software\Classes\Interface\{21629AB6-9557-4985-9237-49177F618692}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{15D4461D-C7EB-45CB-B214-F1C45FED1DB2}]
"(Default)" = "IPreviousConversationsManagerDictionary"

[HKCU\Software\Classes\Interface\{F97973D7-9436-4A3E-A802-F6EA172A0425}]
"(Default)" = "IGroup"

[HKCU\Software\Classes\Interface\{1124AA59-B6F3-4EB1-B79A-E7F53B388B8D}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{064E6072-5592-4D13-AFDB-55F5A494E137}]
"(Default)" = "IParticipantCollectionChangedEventData"

[HKCU\Software\Classes\Interface\{905B727D-FD8F-46EC-8006-CE245F6835EE}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{53D014C1-54DB-42B3-9DFD-8E231EF2C356}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{9D4D3D10-DEBC-40C6-ACF9-527986CB42BC}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{011B320C-9AC1-4DDE-B595-3D0014472E2F}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{EF5C00E4-75E2-4D39-B358-0ED9CB14F3CB}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{378CD767-1B64-4A0E-A941-8F52869FC9DF}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{D5C1C8FB-DC8A-45A3-AAA3-53B89D43CDE4}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{3187885C-A8AF-4D4B-8E80-F4B9D447A7B2}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{ACABFA1C-0738-4C4D-AF7E-326873CF4ACE}]
"(Default)" = "IPreviousConversationsManager"

[HKCU\Software\Classes\Interface\{30F974FB-1F7B-49D3-8DA4-01694BA474D2}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{340C54A6-35CF-4971-B540-72D7F040AC24}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{6A986B5D-E5EC-4395-AD2D-0E62B72DA776}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{8684D3AD-7061-4056-A894-EBF1270ADB9B}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{30F974FB-1F7B-49D3-8DA4-01694BA474D2}]
"(Default)" = "_IVideoViewEvents"

[HKCU\Software\Classes\Wow6432Node\Interface\{F97BED54-E434-4020-A197-F15AEA9D9C95}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\TypeLib\{B9AA1F11-F480-4054-A84E-B5D9277E40A8}\1.0\FLAGS]
"(Default)" = "0"

[HKCU\Software\Classes\Wow6432Node\Interface\{6964B116-8FE6-4C19-9052-0EAA74460A58}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{7693221D-7E9F-47D3-8782-6437CF3D4C0C}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{1F8EBE6F-7993-42CE-980A-A2F03793BE71}]
"(Default)" = "IDeviceCollection"

[HKCU\Software\Classes\Wow6432Node\Interface\{DBA05C15-1C07-4A76-8248-08D8416A24E3}]
"(Default)" = "IIsTypingChangedEventData"

[HKCU\Software\Classes\Wow6432Node\Interface\{4AA93AA8-898C-45EE-8E5C-1A86739B3F96}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{9112CE9B-3704-48C0-86DC-7A7B0F34D7A3}]
"(Default)" = "IUtilities2"

[HKCU\Software\Classes\Interface\{A0C3E9BA-C622-45A2-9FED-2C662F3F489A}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{DAB42E13-500A-409A-AC34-C1BF4719EE2E}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{7BF20B14-58D1-494B-B301-9B16BACC9610}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{ED5040FA-8F8F-4876-BF6D-9C62F5EFFD5B}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{3187885C-A8AF-4D4B-8E80-F4B9D447A7B2}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{CA478B44-4FCE-4082-8700-8CEC69FB50E1}]
"(Default)" = "IShareableContentPropertyDictionary"

[HKCU\Software\Classes\Interface\{AF2ABA54-F591-42BA-8004-20944C9FB4D7}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{D60B1701-766D-401E-8586-83E0C9106BE0}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{300E56A3-CE08-4EB3-9F48-505AA162C9DA}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{232F1CAB-5351-4E48-8A87-2185445F712D}]
"(Default)" = "IActiveVideoDeviceChangedEventData"

[HKCU\Software\Classes\Wow6432Node\Interface\{232F1CAB-5351-4E48-8A87-2185445F712D}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{4C675532-6D55-49DD-8C8E-3C1CC5624CF2}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\TypeLib\{B9AA1F11-F480-4054-A84E-B5D9277E40A8}\1.0]
"(Default)" = "Unified Collaboration API 1.0 Type Library"

[HKCU\Software\Classes\Interface\{603E2454-725A-4679-A6A8-363B21633CB2}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{1FF0E6F1-2FE4-4E29-A123-557AF0DB6927}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{25D64AEA-0E65-49CB-8D6D-65DB0AC1AF65}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{8AFFB8CE-5404-4280-BCA3-E2E4388E6D73}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{FB67275C-4D9E-4C32-9793-A96749884FC1}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{26C8D96D-7D22-4E9E-948A-EDCCB4CA9C64}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{283C2089-B760-4D65-9199-716627174F7A}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{7CC306E9-2546-4101-82AB-29613AD6F7A7}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{E82737B9-B2BE-4AFD-B649-C9F665627F20}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{AC10D6E9-4A8C-4484-B8F4-CA1E36347AAE}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{AAFE380B-B079-4B55-B81B-A9401D77B776}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{53D014C1-54DB-42B3-9DFD-8E231EF2C356}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{0BDB9057-28AE-4BF0-AFF0-12A148E51637}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{ACABFA1C-0738-4C4D-AF7E-326873CF4ACE}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{1FF8AA01-D8AF-4B2B-B254-BEFEFABAF2D6}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{4C675532-6D55-49DD-8C8E-3C1CC5624CF2}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{10C3ACC7-6C0C-4F35-ADFB-AE0F200A8583}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{F644C610-A146-4A56-8338-A69C45C71CEF}]
"(Default)" = "IVoiceMailCollection"

[HKCU\Software\Classes\Wow6432Node\Interface\{1F8EBE6F-7993-42CE-980A-A2F03793BE71}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{8FE9A23D-72BC-4EA3-A5AF-E37F75EAD8A2}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{5418E2AB-EB9A-4659-B4DC-28DE633B2B8F}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{E24C2484-C70D-44AB-8A4E-F1585A17A3E1}]
"(Default)" = "IVoiceMailsManager"

[HKCU\Software\Classes\Wow6432Node\Interface\{D992371E-5161-453B-97E6-6E7C67BC075E}]
"(Default)" = "_IPreviousConversationsManagerEvents"

[HKCU\Software\Classes\Wow6432Node\Interface\{CE16D540-B9E8-4742-8659-9A7A318AFB92}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{17635563-2FA5-46AD-8F47-3F0FF958ECE2}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{70986DCE-4AA8-4DFB-9A45-4BFCF7A206F5}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{086F0E9D-A416-40F9-877C-F1C82DC1A6AD}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{DCDEA425-B5F2-4719-A3B4-69FFB9770BE6}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{283C2089-B760-4D65-9199-716627174F7A}]
"(Default)" = "IGroupNameChangedEventData"

[HKCU\Software\Classes\Wow6432Node\Interface\{0678C83E-F580-4D99-902F-930699B28BE8}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{8F04E92D-EE26-4B64-B9C1-56DD90816810}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{DAC6D77B-12F7-405C-BB33-002D6D4007F3}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{1566FA3C-FD24-41DB-A2B8-6232F89783DE}]
"(Default)" = "IRoomMessageEventData"

[HKCU\Software\Classes\Wow6432Node\Interface\{95B9A382-EA50-45E4-965E-BA61E7213DBA}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{A0C3E9BA-C622-45A2-9FED-2C662F3F489A}]
"(Default)" = "IRoomMessage"

[HKCU\Software\Classes\Interface\{6964B116-8FE6-4C19-9052-0EAA74460A58}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Local Settings\MuiCache\2B\52C64B7E\@%SystemRoot%\system32]
"p2pcollab.dll,-8042" = "Peer to Peer Trust"

[HKCU\Software\Classes\Wow6432Node\Interface\{74B6CAF0-755E-454D-A819-D0E439EF5296}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{300E56A3-CE08-4EB3-9F48-505AA162C9DA}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{6B551C9E-DE81-41DF-A0AE-39F0AF11D508}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{94093301-8854-408E-8138-C7C3D2DACA1F}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{AA186C92-181E-417F-B150-FCA0F367E0FC}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{A9AAB6A0-54B9-4419-AAAF-6B26DFAC1585}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{9918673D-4D74-41CF-8840-D4996395A34C}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{64561371-77A2-4BD4-A909-E6DEB1B5C6CF}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{B22EDBEA-9E61-4703-82BE-01C05619B6D6}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{37C7F935-E215-46D2-82A3-A451840EC733}]
"(Default)" = "IConversation2"

[HKCU\Software\Classes\Wow6432Node\Interface\{FB67275C-4D9E-4C32-9793-A96749884FC1}]
"(Default)" = "IAlertLevel"

[HKCU\Software\Classes\Interface\{A0C3E9BA-C622-45A2-9FED-2C662F3F489A}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{6A986B5D-E5EC-4395-AD2D-0E62B72DA776}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{F0B791FA-434B-49F2-B84E-05619EBE6BEB}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{D804BA85-DB0F-49EE-B723-DCDF0425BD9F}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{56F7DEC0-59CA-47C6-9F35-D5066A702B39}]
"(Default)" = "IConversationStateChangePropertyDictionary"

[HKCU\Software\Classes\Interface\{35CE3A44-C636-4D31-BC95-B9370C2251B9}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{26C8D96D-7D22-4E9E-948A-EDCCB4CA9C64}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{DCDEA425-B5F2-4719-A3B4-69FFB9770BE6}]
"(Default)" = "IRecentContacts"

[HKCU\Software\Classes\Wow6432Node\Interface\{00E22CBB-3170-453A-AE62-EAFBC75A9F8D}]
"(Default)" = "IConversationPropertyDictionary"

[HKCU\Software\Classes\Interface\{ABF012A2-2068-4B4D-80D7-6D386BA7C8A2}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{D60B1701-766D-401E-8586-83E0C9106BE0}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{05789509-AFA1-4E90-B4FA-1A7820DB9796}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{899B846A-8887-45D6-B8F5-8AAA0BFDF722}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{02DD541F-C863-4295-92AB-A4CF29F5D841}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{18BA13C7-A64E-4301-BA51-D1BFB3C1C9D5}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{95B8D3E8-F3D5-4DC0-BCFE-AB80C835DEA0}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{2F8C3E58-436B-42DB-8924-6C394B37DCA2}]
"(Default)" = "IConferenceAccessInformation"

[HKCU\Software\Classes\Wow6432Node\Interface\{1F8EBE6F-7993-42CE-980A-A2F03793BE71}]
"(Default)" = "IDeviceCollection"

[HKCU\Software\Classes\Interface\{0678C83E-F580-4D99-902F-930699B28BE8}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{8057F99D-292C-4371-926B-5312E61A3A40}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{B03614AE-8D68-4386-9E1C-939CABCF1232}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{B3FF95BD-B743-498C-9973-7F8A2A78576A}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{92D7E7A8-48D8-4166-8911-630AE02B2B93}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{09028936-CD20-43EF-98CF-56726ADDBA34}]
"(Default)" = "IUCOfficeIntegrationHelper"

[HKCU\Software\Classes\Interface\{DCDEA425-B5F2-4719-A3B4-69FFB9770BE6}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{C0034194-F7B6-43EB-B0E0-7852FC8E7BFA}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{219DC126-9A48-483F-80C2-3F22B3B47829}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{9B3A702D-5BE1-4FCE-ADB3-EBBD23E078C3}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{AE3A7C39-9C30-4E0F-BAE4-D8344EF377EA}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{76428270-36FA-4236-8BDF-AADB39FD1371}]
"(Default)" = "_IConversationWindowCallback"

[HKCU\Software\Classes\Wow6432Node\Interface\{9244D573-914F-4C1F-93F6-31609A95CBED}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{8E839AF9-9508-475A-AA47-3EE8A946B75E}]
"(Default)" = "IAudioChannel"

[HKCU\Software\Classes\Wow6432Node\Interface\{D5C1C8FB-DC8A-45A3-AAA3-53B89D43CDE4}]
"(Default)" = "IIsContributingChangedEventData"

[HKCU\Software\Classes\Interface\{F97973D7-9436-4A3E-A802-F6EA172A0425}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{995F992C-9DEF-47B9-BF11-81813C0C0E28}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{C413A27F-601E-4261-B9E3-0EB966F4E7D1}]
"(Default)" = "ILyncClient"

[HKCU\Software\Classes\Interface\{ACD2FDB9-98ED-4283-AAE8-3CD989EBD9AE}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{10FDD9BA-0CBA-4958-B6C8-D0912BF2703F}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{4023052E-E3B7-48A3-BCB3-CA2234D9BAEE}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{AF2ABA54-F591-42BA-8004-20944C9FB4D7}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{AC10D6E9-4A8C-4484-B8F4-CA1E36347AAE}]
"(Default)" = "IApplicationSharingModality"

[HKCU\Software\Classes\Wow6432Node\Interface\{7CFE77CD-731D-48B2-82B1-ECA3414D62E3}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{8684D3AD-7061-4056-A894-EBF1270ADB9B}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{E5CFF4A5-83A8-4FD8-8DAA-77A3E2288D4A}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{DA7CF784-67DF-429C-82FB-9AFD99F6CCCB}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{1124AA59-B6F3-4EB1-B79A-E7F53B388B8D}]
"(Default)" = "IParticipantActionAvailabilityChangedEventData"

[HKCU\Software\Classes\Wow6432Node\Interface\{B03614AE-8D68-4386-9E1C-939CABCF1232}]
"(Default)" = "IRoomPropertyChangedEventData"

[HKCU\Software\Classes\Interface\{4C675532-6D55-49DD-8C8E-3C1CC5624CF2}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{8F04E92D-EE26-4B64-B9C1-56DD90816810}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{F644C610-A146-4A56-8338-A69C45C71CEF}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{D0DBB17D-565E-486C-A47B-BA32DC1FAD0A}]
"(Default)" = "ISharerChangedEventData"

[HKCU\Software\Classes\Wow6432Node\Interface\{68DA8699-6C6E-4390-BD82-709FF1DC1702}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{8C9B6953-33CC-4A04-9DA4-F71AE79DA0C0}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{95B8D3E8-F3D5-4DC0-BCFE-AB80C835DEA0}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{E2C6D6E0-52EF-47A2-BDA9-9D6A7A29A391}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{F5996C71-77AB-4020-9776-C2C270FEF2AE}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{10C3ACC7-6C0C-4F35-ADFB-AE0F200A8583}]
"(Default)" = "IPresenceCapability"

[HKCU\Software\Classes\Wow6432Node\Interface\{DA7CF784-67DF-429C-82FB-9AFD99F6CCCB}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{E6B3F5FA-4208-4C37-AE07-F6435B68D693}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{81C9D13F-A4F9-4E13-92D3-BB271E8DF3D2}]
"(Default)" = "IPreviousConversationCollection"

[HKCU\Software\Classes\Interface\{64B7E9AD-D920-4EAA-95C7-9D95DE9ACE24}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{21629AB6-9557-4985-9237-49177F618692}]
"(Default)" = "IContextEventData"

[HKCU\Software\Classes\Interface\{21629AB6-9557-4985-9237-49177F618692}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{4875C050-BA9C-4A05-891E-E7B0A9463664}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{EF5C00E4-75E2-4D39-B358-0ED9CB14F3CB}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{ED5040FA-8F8F-4876-BF6D-9C62F5EFFD5B}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{3417D640-3976-4CB6-BC82-54E5E2E10784}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{6A7FF112-42CE-4D03-8922-D02AC6C5759F}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{DBA05C15-1C07-4A76-8248-08D8416A24E3}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{339D28C6-3D1A-45D4-BA14-A56742749A43}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{00E22CBB-3170-453A-AE62-EAFBC75A9F8D}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{36CDC166-4F21-46AD-A60E-8551F26C1D41}]
"(Default)" = "_IParticipant2Callback"

[HKCU\Software\Classes\Interface\{95B9A382-EA50-45E4-965E-BA61E7213DBA}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{FF037274-455A-4E34-B5D1-D42DB866F9B7}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{8665FD95-7720-4F9E-B605-6ABCBD7EDFF4}]
"(Default)" = "IParticipantPropertyDictionary"

[HKCU\Software\Classes\Wow6432Node\Interface\{3690D374-3779-4EFC-B8E8-20642C01529A}]
"(Default)" = "ISharingResource"

[HKCU\Software\Classes\Interface\{F97BED54-E434-4020-A197-F15AEA9D9C95}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{A58F54D2-9786-4309-964D-96549AEC7611}]
"(Default)" = "IShareableContentCollection"

[HKCU\Software\Classes\Interface\{1B04D929-11E4-46C2-9162-EA4F2758C3A7}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{C31FB52D-9E9E-45AD-A102-5218E1685B78}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{3DEBDC7E-811F-4304-BDD7-7D98C732026C}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{C22CE6BF-3A47-46B7-8544-44305BADFEF9}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{08DDF5C4-FA12-4978-B26E-C6D23C453413}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{B28F2007-3926-49CF-9101-4CCB9574049B}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{628D7BDD-45AB-404D-8505-B3ADC15F454D}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{4AA93AA8-898C-45EE-8E5C-1A86739B3F96}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{62B932E9-7847-4D78-BEEE-5D58BF815B03}]
"(Default)" = "IContactPositionChangedEventData"

[HKCU\Software\Classes\Interface\{DD181E97-EEE0-4D65-BAD1-16866D0C7953}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{62074904-8D06-43FE-A531-E63DF7FDC2E7}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{D992371E-5161-453B-97E6-6E7C67BC075E}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{EF5C00E4-75E2-4D39-B358-0ED9CB14F3CB}]
"(Default)" = "IConversationContextCollectionEventData"

[HKCU\Software\Classes\Wow6432Node\Interface\{663C61F4-A9DA-4A6F-A606-F142F665DF61}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{DD31376E-E529-43F2-B3B4-E379EBD28E2A}]
"(Default)" = "IAccessEntryCollectionChangedEventData"

[HKCU\Software\Classes\Interface\{50D86EE2-288F-44F5-8144-69F6E3B24B90}]
"(Default)" = "_IContactManagerEvents"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDetectedUrl" = ""

[HKCU\Software\Classes\Wow6432Node\Interface\{88C688B0-3908-4C56-A2E8-F90AB705C536}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{8FE9A23D-72BC-4EA3-A5AF-E37F75EAD8A2}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{D4B240B9-059B-4D13-8997-31B282B3BD43}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{8C9B6953-33CC-4A04-9DA4-F71AE79DA0C0}]
"(Default)" = "_IUCOfficeIntegrationEvents"

[HKCU\Software\Classes\Wow6432Node\Interface\{4D120020-CE64-43C5-9F84-7A7B2360388F}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{F644C610-A146-4A56-8338-A69C45C71CEF}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{21C41EDE-7ED8-4D97-9B0D-DD785781AF9B}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{4875C050-BA9C-4A05-891E-E7B0A9463664}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{DC4BC923-6A52-4F02-9F8A-547B606955E7}]
"(Default)" = "_IAccessPermissionEvents"

[HKCU\Software\Classes\Interface\{EBD19735-0CB5-4AF3-8E05-B0140CF9D545}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{064E6072-5592-4D13-AFDB-55F5A494E137}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{8E73E7E1-90CE-4D3B-B5B7-71E87B2E8BA5}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{4D120020-CE64-43C5-9F84-7A7B2360388F}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{3959E5C6-75CC-448E-9A18-9F163FF47646}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{90B49A60-72AF-4360-9F9B-916DB7504A3C}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{4DA899D3-FAC7-4F43-8E4A-1987988FBC9B}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{0FDB5B86-DD44-41BF-A443-317FD19BBF3D}]
"(Default)" = "_IRoomManagerCallback"

[HKCU\Software\Classes\Wow6432Node\Interface\{8684D3AD-7061-4056-A894-EBF1270ADB9B}]
"(Default)" = "_IApplicationSharingModalityCallback"

[HKCU\Software\Classes\Interface\{CA62E6F3-3E6D-451B-AEAA-6A1B7AACF8D4}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{7CC306E9-2546-4101-82AB-29613AD6F7A7}]
"(Default)" = "ICallParkOrbit"

[HKCU\Software\Classes\Wow6432Node\Interface\{7BF20B14-58D1-494B-B301-9B16BACC9610}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{4290152C-75C9-47C8-AA12-814818360B3F}]
"(Default)" = "IModalityPropertyChangedEventData"

[HKCU\Software\Classes\Interface\{F7EE956B-A713-48D3-AFEF-0A28F37740B3}]
"(Default)" = "IAsynchronousOperation"

[HKCU\Software\Classes\Wow6432Node\Interface\{ACD2FDB9-98ED-4283-AAE8-3CD989EBD9AE}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{DEDDD7BD-4763-41D2-9AAA-B2C143457CA4}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{89C7EB8E-42BC-4C9F-BB34-88CDE83CCB37}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{71A054B3-4D4B-4643-B14F-4572494B19E7}]
"(Default)" = "IScheduledConference"

[HKCU\Software\Classes\Interface\{7693221D-7E9F-47D3-8782-6437CF3D4C0C}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{B0B0E8F8-32DA-4CB0-A124-D1E35891D53A}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{4BACB4B8-1236-42B8-BDA1-D1533148780D}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{70DCCE38-90BF-4428-A34F-3A6082F29E50}]
"(Default)" = "IParticipantPropertyChangedEventData"

[HKCU\Software\Classes\Interface\{02DD541F-C863-4295-92AB-A4CF29F5D841}]
"(Default)" = "IConversationWindow2"

[HKCU\Software\Classes\Wow6432Node\Interface\{CE16D540-B9E8-4742-8659-9A7A318AFB92}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{E82737B9-B2BE-4AFD-B649-C9F665627F20}]
"(Default)" = "IDeviceCollectionEventData"

[HKCU\Software\Classes\Interface\{EE9F3E74-AC61-469E-80D6-E22BF4EEFF5C}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"AutoDetect" = "1"

[HKCU\Software\Classes\Wow6432Node\Interface\{4BACB4B8-1236-42B8-BDA1-D1533148780D}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{109D32CE-E09F-46F5-9ECB-01E1D273B7DA}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{9B3A702D-5BE1-4FCE-ADB3-EBBD23E078C3}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{F87AFD9A-9BF8-4AC4-953E-33C4D2035D33}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{FA7971EF-1E41-429F-8C79-DAC5F88D444B}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "0"

[HKCU\Software\Classes\Wow6432Node\Interface\{2495B94C-38AF-439B-BBA0-0AD38D959CE4}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{8E839AF9-9508-475A-AA47-3EE8A946B75E}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{7356D7BB-FD71-4554-84A1-3BBE28726551}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{B22EDBEA-9E61-4703-82BE-01C05619B6D6}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{4FE44049-4E44-4109-B234-4E4EFC135A86}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{C0034194-F7B6-43EB-B0E0-7852FC8E7BFA}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{4AA93AA8-898C-45EE-8E5C-1A86739B3F96}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{76428270-36FA-4236-8BDF-AADB39FD1371}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{88C688B0-3908-4C56-A2E8-F90AB705C536}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{04378C72-E58F-47C0-8621-901B85CA2ED4}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{E664682C-CBA5-4C7C-A65B-9CD046F24CBD}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{A0C3E9BA-C622-45A2-9FED-2C662F3F489A}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{ABF012A2-2068-4B4D-80D7-6D386BA7C8A2}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{011B320C-9AC1-4DDE-B595-3D0014472E2F}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{EFEC2816-F16D-48D8-9306-26C810F0EA55}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{FD02E775-CB9D-4CE3-9243-115C81E5F11C}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{D804BA85-DB0F-49EE-B723-DCDF0425BD9F}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{311DDE48-ED7D-46FA-9E0A-2E314B7FEF7C}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{0FDB5B86-DD44-41BF-A443-317FD19BBF3D}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{E66CA1CC-9DB0-467E-9C60-6A832ACD6780}]
"(Default)" = "IVideoChannel"

[HKCU\Software\Classes\Wow6432Node\Interface\{62074904-8D06-43FE-A531-E63DF7FDC2E7}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{F8DF0B4B-A4CE-476B-81D3-9FBA98461B62}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{AAFE380B-B079-4B55-B81B-A9401D77B776}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{1566FA3C-FD24-41DB-A2B8-6232F89783DE}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{74B6CAF0-755E-454D-A819-D0E439EF5296}]
"(Default)" = "IPublicCloudProviderInfo"

[HKCU\Software\Classes\Interface\{300E56A3-CE08-4EB3-9F48-505AA162C9DA}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{3C8210C8-8578-47C6-87A9-FA1AD2BA9873}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{9AB20314-B258-48F8-B659-AD250DFA20F5}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{DF414A68-5051-4465-AAE2-4F301315734E}]
"(Default)" = "IPreviousConversation"

[HKCU\Software\Classes\Wow6432Node\Interface\{B0C10F94-CAB6-4821-9643-D781885A46AF}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{2F8C3E58-436B-42DB-8924-6C394B37DCA2}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{FD9000B3-479F-4B16-9D63-70A49E078946}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{340C54A6-35CF-4971-B540-72D7F040AC24}]
"(Default)" = "IDistributionGroup"

[HKCU\Software\Classes\Interface\{EFEC2816-F16D-48D8-9306-26C810F0EA55}]
"(Default)" = "IContactInformationChangedEventData"

[HKCU\Software\Classes\Interface\{30F974FB-1F7B-49D3-8DA4-01694BA474D2}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{02DD541F-C863-4295-92AB-A4CF29F5D841}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{D60B1701-766D-401E-8586-83E0C9106BE0}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{7452BD0F-65CB-4A5E-AC37-E2BEA1F43DD9}]
"(Default)" = "IRoomParticipantsEventData"

[HKCU\Software\Classes\Interface\{4CB70415-BA71-491E-B12D-155D85CBDFF1}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{B3FF95BD-B743-498C-9973-7F8A2A78576A}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{CA478B44-4FCE-4082-8700-8CEC69FB50E1}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{4CB70415-BA71-491E-B12D-155D85CBDFF1}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{7B39CB77-4AEB-42D7-B351-CB5472C1C6AD}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{339D28C6-3D1A-45D4-BA14-A56742749A43}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{17635563-2FA5-46AD-8F47-3F0FF958ECE2}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{F423726D-0E9B-4B55-9569-E79865210F69}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{B00F2520-029C-47D0-B4E8-8FBEF47CAA7E}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{F97973D7-9436-4A3E-A802-F6EA172A0425}]
"(Default)" = "IGroup"

[HKCU\Software\Classes\Wow6432Node\Interface\{70DCCE38-90BF-4428-A34F-3A6082F29E50}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{4C675532-6D55-49DD-8C8E-3C1CC5624CF2}]
"(Default)" = "IConversationHistoryItemAddedEventData"

[HKCU\Software\Classes\Interface\{219DC126-9A48-483F-80C2-3F22B3B47829}]
"(Default)" = "_IScheduledConferenceManagerCallback"

[HKCU\Software\Classes\Interface\{2209E091-5B90-4CAF-8582-CC5979883376}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{1FF8AA01-D8AF-4B2B-B254-BEFEFABAF2D6}]
"(Default)" = "IConferenceInfoCollection"

[HKCU\Software\Classes\Wow6432Node\Interface\{9274DBDC-43CE-45AA-A817-414A4494AD28}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{D0DBB17D-565E-486C-A47B-BA32DC1FAD0A}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{603E2454-725A-4679-A6A8-363B21633CB2}]
"(Default)" = "IRoomMessageDictionary"

[HKCU\Software\Classes\Interface\{10FDD9BA-0CBA-4958-B6C8-D0912BF2703F}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{4023052E-E3B7-48A3-BCB3-CA2234D9BAEE}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{E4E1D0AF-5B70-45AF-9A0E-F548D8FBD17C}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{6964B116-8FE6-4C19-9052-0EAA74460A58}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{26F15083-86DB-4663-89ED-A0ABC896B9A1}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{0CA9BAE8-DD28-4929-A821-4D00F11203CC}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{F7EE956B-A713-48D3-AFEF-0A28F37740B3}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{50D86EE2-288F-44F5-8144-69F6E3B24B90}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{AC10D6E9-4A8C-4484-B8F4-CA1E36347AAE}]
"(Default)" = "IApplicationSharingModality"

[HKCU\Software\Classes\Wow6432Node\Interface\{DD181E97-EEE0-4D65-BAD1-16866D0C7953}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{2D3D62CA-E9F6-4F94-8EBD-5FABAB29E6A5}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Skype\Phone]
"SkypePath" = "%Program Files% (x86)\Skype\Phone\Skype.exe"

[HKCU\Software\Classes\Interface\{AAFE380B-B079-4B55-B81B-A9401D77B776}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{68B1FC26-B48F-4D5F-B041-8E246676D836}]
"(Default)" = "_IVoiceMailCallback"

[HKCU\Software\Classes\Wow6432Node\Interface\{76DE1CD8-F278-48A1-A391-E5BEB8F428E6}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{8AFFB8CE-5404-4280-BCA3-E2E4388E6D73}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{6A222195-F65E-467F-8F77-EB180BD85288}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{5E7AB04C-E4B8-49FB-85FF-9E2BCA2899D3}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{6964B116-8FE6-4C19-9052-0EAA74460A58}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{BE026CD2-7E82-4F7C-8762-F6B02F496174}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{89C7EB8E-42BC-4C9F-BB34-88CDE83CCB37}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{ACD2FDB9-98ED-4283-AAE8-3CD989EBD9AE}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{2209E091-5B90-4CAF-8582-CC5979883376}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{36CDC166-4F21-46AD-A60E-8551F26C1D41}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{420A24E2-5C31-4262-9BD5-058682300ED6}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{533891F1-A460-43E6-8BDA-6D0D2C13ADDE}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{0678C83E-F580-4D99-902F-930699B28BE8}]
"(Default)" = "IConversationWindowActionAvailabilityChangedEventData"

[HKCU\Software\Classes\Wow6432Node\Interface\{420A24E2-5C31-4262-9BD5-058682300ED6}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{ACABFA1C-0738-4C4D-AF7E-326873CF4ACE}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{4AA93AA8-898C-45EE-8E5C-1A86739B3F96}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{DEDDD7BD-4763-41D2-9AAA-B2C143457CA4}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{4E8DC7E0-04B8-470B-BDFA-F520099B975F}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{9E0F8FCA-D9C9-47CD-87F4-5554217DFFCC}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{9397FF55-EE06-4F02-8F2A-BE3AE249D4BB}]
"(Default)" = "IConversationHistoryActionAvailabilityEventData"

[HKCU\Software\Classes\Interface\{1566FA3C-FD24-41DB-A2B8-6232F89783DE}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{9B3A702D-5BE1-4FCE-ADB3-EBBD23E078C3}]
"(Default)" = "IClientStateChangedEventData"

[HKCU\Software\Classes\Interface\{B26F6403-761E-48D4-84E2-619C17EAEB13}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{3CD1DB65-D85B-4912-8536-6BD8E19F1738}]
"(Default)" = "IVideoChannelCollection"

[HKCU\Software\Classes\Interface\{E0E8B413-BB57-4B58-B1FB-288F3A269E35}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{06437ABB-C419-4B11-A474-1A2B02FBD646}]
"(Default)" = "_ISelfEvents"

[HKCU\Software\Classes\Wow6432Node\Interface\{A0984F01-5D2C-4302-87A0-69BE7B015143}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{1124AA59-B6F3-4EB1-B79A-E7F53B388B8D}\TypeLib]
"Version" = "1.0"

[HKCU\Software\IM Providers\Skype]
"ProcessId" = "3328"

[HKCU\Software\Classes\Interface\{E664682C-CBA5-4C7C-A65B-9CD046F24CBD}]
"(Default)" = "ISignInDelayedEventData"

[HKCU\Software\Classes\Wow6432Node\Interface\{74B6CAF0-755E-454D-A819-D0E439EF5296}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{F8DF0B4B-A4CE-476B-81D3-9FBA98461B62}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{64561371-77A2-4BD4-A909-E6DEB1B5C6CF}]
"(Default)" = "_IClientEvents"

[HKCU\Software\Classes\Interface\{7CC306E9-2546-4101-82AB-29613AD6F7A7}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{DAA5FDE3-A81C-4F23-80B6-C47B52C649BF}]
"(Default)" = "IContactEndpointCollection"

[HKCU\Software\Classes\Interface\{A766520D-F700-4BF5-8428-56BD914C1C40}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{AF2ABA54-F591-42BA-8004-20944C9FB4D7}]
"(Default)" = "_IConversationWindow2Events"

[HKCU\Software\Classes\Wow6432Node\Interface\{E66CA1CC-9DB0-467E-9C60-6A832ACD6780}]
"(Default)" = "IVideoChannel"

[HKCU\Software\Classes\Wow6432Node\Interface\{95B8D3E8-F3D5-4DC0-BCFE-AB80C835DEA0}]
"(Default)" = "IContactSubscription"

[HKCU\Software\Classes\Wow6432Node\Interface\{3690D374-3779-4EFC-B8E8-20642C01529A}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{9112CE9B-3704-48C0-86DC-7A7B0F34D7A3}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{A0C3E9BA-C622-45A2-9FED-2C662F3F489A}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{38E5EC21-81A1-45A7-94D6-B812976231A4}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{3F60CFF7-BE3F-4404-8395-C02D0CDD318E}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{D9D04B55-D820-4D5B-A690-658A49368478}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{17635563-2FA5-46AD-8F47-3F0FF958ECE2}]
"(Default)" = "IContentCollectionChangedEventData"

[HKCU\Software\Classes\Wow6432Node\Interface\{DF414A68-5051-4465-AAE2-4F301315734E}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{FA7971EF-1E41-429F-8C79-DAC5F88D444B}]
"(Default)" = "_IConversationHistoryEvents"

[HKCU\Software\Classes\Wow6432Node\Interface\{4875C050-BA9C-4A05-891E-E7B0A9463664}]
"(Default)" = "IParticipant"

[HKCU\Software\Classes\Wow6432Node\Interface\{B1C6ECC3-1EA7-495D-9337-02FE4FB723F0}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{25025B1B-0084-44D1-B383-9FFC9A99ABCD}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{DA7CF784-67DF-429C-82FB-9AFD99F6CCCB}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{F87AFD9A-9BF8-4AC4-953E-33C4D2035D33}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{806D3227-4CB8-47C4-9864-7D4DF4F44069}]
"(Default)" = "_IAutomationCallback"

[HKCU\Software\Classes\Interface\{8F04E92D-EE26-4B64-B9C1-56DD90816810}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{3CD1DB65-D85B-4912-8536-6BD8E19F1738}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{9244D573-914F-4C1F-93F6-31609A95CBED}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{5FA92EA7-6E6E-4A82-8F0D-107FEAF5A75D}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{30F974FB-1F7B-49D3-8DA4-01694BA474D2}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{21C41EDE-7ED8-4D97-9B0D-DD785781AF9B}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{C7ACB102-B692-49CC-92DA-5824822C7B96}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{4DA899D3-FAC7-4F43-8E4A-1987988FBC9B}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{A9AAB6A0-54B9-4419-AAAF-6B26DFAC1585}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{86225E5C-7595-4D1C-985D-8A0458D714C0}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{0CA9BAE8-DD28-4929-A821-4D00F11203CC}]
"(Default)" = "_IChannelEvents"

[HKCU\Software\Classes\Interface\{B1C6ECC3-1EA7-495D-9337-02FE4FB723F0}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{4DA899D3-FAC7-4F43-8E4A-1987988FBC9B}]
"(Default)" = "ISelf"

[HKCU\Software\Classes\Interface\{CE16D540-B9E8-4742-8659-9A7A318AFB92}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{AE3A7C39-9C30-4E0F-BAE4-D8344EF377EA}]
"(Default)" = "_IContentSharingModalityEvents"

[HKCU\Software\Classes\Interface\{232F1CAB-5351-4E48-8A87-2185445F712D}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{DF414A68-5051-4465-AAE2-4F301315734E}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{AA186C92-181E-417F-B150-FCA0F367E0FC}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{BE6086A1-D436-4834-89EE-3CA4F8596A58}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{D60B1701-766D-401E-8586-83E0C9106BE0}]
"(Default)" = "IParticipant2"

[HKCU\Software\Classes\Wow6432Node\Interface\{663C61F4-A9DA-4A6F-A606-F142F665DF61}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{FD02E775-CB9D-4CE3-9243-115C81E5F11C}]
"(Default)" = "IParticipantCollection"

[HKCU\Software\Classes\Wow6432Node\Interface\{00E22CBB-3170-453A-AE62-EAFBC75A9F8D}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{209DA899-15F1-499A-B8B5-A847EAA899AE}]
"(Default)" = "IRepresentationInfo"

[HKCU\Software\Classes\Interface\{FD9000B3-479F-4B16-9D63-70A49E078946}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{1B04D929-11E4-46C2-9162-EA4F2758C3A7}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{65B71572-5338-43C8-9E4C-F1DFC6711AD1}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{4CB70415-BA71-491E-B12D-155D85CBDFF1}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{330639F2-E399-48CB-863F-56A50A27A138}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9C99CCBB-10A0-4B2A-A5BE-4CAC43F74632}]
"WpadDecisionReason" = "1"

[HKCU\Software\Classes\Interface\{339D28C6-3D1A-45D4-BA14-A56742749A43}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{10FDD9BA-0CBA-4958-B6C8-D0912BF2703F}]
"(Default)" = "IContact2"

[HKCU\Software\Classes\Interface\{87084018-7E74-4F92-AB39-1CF03188580E}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{F5996C71-77AB-4020-9776-C2C270FEF2AE}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{4C675532-6D55-49DD-8C8E-3C1CC5624CF2}]
"(Default)" = "IConversationHistoryItemAddedEventData"

[HKCU\Software\Classes\Wow6432Node\Interface\{8E73E7E1-90CE-4D3B-B5B7-71E87B2E8BA5}]
"(Default)" = "_IRoomUserEvents"

[HKCU\Software\Classes\Wow6432Node\Interface\{50D86EE2-288F-44F5-8144-69F6E3B24B90}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{87084018-7E74-4F92-AB39-1CF03188580E}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{26F15083-86DB-4663-89ED-A0ABC896B9A1}]
"(Default)" = "IScheduledConferenceManager"

[HKCU\Software\Classes\Interface\{06437ABB-C419-4B11-A474-1A2B02FBD646}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{B26F6403-761E-48D4-84E2-619C17EAEB13}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{B3C5872E-591C-4A74-9F84-B00EF970A838}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{3959E5C6-75CC-448E-9A18-9F163FF47646}]
"(Default)" = "IActiveAudioDeviceChangedEventData"

[HKCU\Software\Classes\Interface\{A0984F01-5D2C-4302-87A0-69BE7B015143}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{66D1FFC0-C234-4F3D-ABAA-98222A69E525}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{3F60CFF7-BE3F-4404-8395-C02D0CDD318E}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{3C8210C8-8578-47C6-87A9-FA1AD2BA9873}]
"(Default)" = "IShareableContentPropertyChangedEventData"

[HKCU\Software\Classes\Wow6432Node\Interface\{3C8210C8-8578-47C6-87A9-FA1AD2BA9873}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{1F8EBE6F-7993-42CE-980A-A2F03793BE71}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{1566FA3C-FD24-41DB-A2B8-6232F89783DE}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{94093301-8854-408E-8138-C7C3D2DACA1F}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{D804BA85-DB0F-49EE-B723-DCDF0425BD9F}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{6A986B5D-E5EC-4395-AD2D-0E62B72DA776}]
"(Default)" = "_IParticipantEvents"

[HKCU\Software\Classes\Interface\{A58F54D2-9786-4309-964D-96549AEC7611}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{B335AE5E-E4EA-49D3-B03B-646A96FE66D3}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{0FDB5B86-DD44-41BF-A443-317FD19BBF3D}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{A4E1D1E4-7839-473B-95FA-5D33DDC0D2DD}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{70986DCE-4AA8-4DFB-9A45-4BFCF7A206F5}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{E5CFF4A5-83A8-4FD8-8DAA-77A3E2288D4A}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{61C747F6-157C-4CAE-A37C-EC4352175860}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{744BAB86-B15F-4BD5-B7DD-476B0CE0162A}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{37C7F935-E215-46D2-82A3-A451840EC733}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{ED5040FA-8F8F-4876-BF6D-9C62F5EFFD5B}]
"(Default)" = "IModalityDictionary"

[HKCU\Software\Classes\Wow6432Node\Interface\{DBA05C15-1C07-4A76-8248-08D8416A24E3}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{9D4D3D10-DEBC-40C6-ACF9-527986CB42BC}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{18BA13C7-A64E-4301-BA51-D1BFB3C1C9D5}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{26F15083-86DB-4663-89ED-A0ABC896B9A1}]
"(Default)" = "IScheduledConferenceManager"

[HKCU\Software\Classes\Interface\{85109845-6AE2-4B6B-9524-65BA203E5B7D}]
"(Default)" = "IContact"

[HKCU\Software\Classes\Interface\{68DA8699-6C6E-4390-BD82-709FF1DC1702}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{1566FA3C-FD24-41DB-A2B8-6232F89783DE}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{4D120020-CE64-43C5-9F84-7A7B2360388F}]
"(Default)" = "IRoomJoinStateChangedEventData"

[HKCU\Software\Classes\Interface\{9E0F8FCA-D9C9-47CD-87F4-5554217DFFCC}]
"(Default)" = "_IConversationWindowEvents"

[HKCU\Software\Classes\Wow6432Node\Interface\{F0B791FA-434B-49F2-B84E-05619EBE6BEB}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{C6605772-3D9D-44A7-B43A-4590E6B43EE3}]
"(Default)" = "_IGroupCallback"

[HKCU\Software\Classes\Wow6432Node\Interface\{E4E1D0AF-5B70-45AF-9A0E-F548D8FBD17C}]
"(Default)" = "IAVModality"

[HKCU\Software\Classes\Interface\{F0CE810F-E36F-4CD8-A836-515B9A6E09FC}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{E24C2484-C70D-44AB-8A4E-F1585A17A3E1}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{08DDF5C4-FA12-4978-B26E-C6D23C453413}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{BC9F5F40-D315-40C1-B1C6-CEA0646E18E2}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{064E6072-5592-4D13-AFDB-55F5A494E137}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{1FF0E6F1-2FE4-4E29-A123-557AF0DB6927}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{464D5228-9F68-4B1F-B430-156A104E2B85}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{EFEC2816-F16D-48D8-9306-26C810F0EA55}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{DC63D621-11C8-4490-B017-B8C57EE1BE25}]
"(Default)" = "IAddress"

[HKCU\Software\Classes\Interface\{C22CE6BF-3A47-46B7-8544-44305BADFEF9}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{F719ED75-B7BD-45D3-9097-254509226F20}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{FD9000B3-479F-4B16-9D63-70A49E078946}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{26F15083-86DB-4663-89ED-A0ABC896B9A1}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{0BDB9057-28AE-4BF0-AFF0-12A148E51637}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{1124AA59-B6F3-4EB1-B79A-E7F53B388B8D}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{B3C5872E-591C-4A74-9F84-B00EF970A838}]
"(Default)" = "IConferenceInfo"

[HKCU\Software\Classes\Wow6432Node\Interface\{DAB42E13-500A-409A-AC34-C1BF4719EE2E}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{89C7EB8E-42BC-4C9F-BB34-88CDE83CCB37}]
"(Default)" = "IRoomManagerStateChangedEventData"

[HKCU\Software\Classes\Wow6432Node\Interface\{E66CA1CC-9DB0-467E-9C60-6A832ACD6780}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{3CD1DB65-D85B-4912-8536-6BD8E19F1738}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{464D5228-9F68-4B1F-B430-156A104E2B85}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{08DDF5C4-FA12-4978-B26E-C6D23C453413}]
"(Default)" = "_IDeviceManagerCallback"

[HKCU\Software\Classes\Wow6432Node\Interface\{4023052E-E3B7-48A3-BCB3-CA2234D9BAEE}]
"(Default)" = "IShareableContentActionAvailabilityChangedEventData"

[HKCU\Software\Classes\Wow6432Node\Interface\{FA7971EF-1E41-429F-8C79-DAC5F88D444B}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{36CDC166-4F21-46AD-A60E-8551F26C1D41}]
"(Default)" = "_IParticipant2Callback"

[HKCU\Software\Classes\Wow6432Node\Interface\{94093301-8854-408E-8138-C7C3D2DACA1F}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{95B9A382-EA50-45E4-965E-BA61E7213DBA}]
"(Default)" = "_IAudioChannelCallback"

[HKCU\Software\Classes\Interface\{00E22CBB-3170-453A-AE62-EAFBC75A9F8D}]
"(Default)" = "IConversationPropertyDictionary"

[HKCU\Software\Classes\Interface\{3187885C-A8AF-4D4B-8E80-F4B9D447A7B2}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{C0034194-F7B6-43EB-B0E0-7852FC8E7BFA}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{DAB42E13-500A-409A-AC34-C1BF4719EE2E}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{26F15083-86DB-4663-89ED-A0ABC896B9A1}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{7B39CB77-4AEB-42D7-B351-CB5472C1C6AD}]
"(Default)" = "IChannel2"

[HKCU\Software\Classes\Wow6432Node\Interface\{02DD541F-C863-4295-92AB-A4CF29F5D841}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{E0E8B413-BB57-4B58-B1FB-288F3A269E35}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{F0B791FA-434B-49F2-B84E-05619EBE6BEB}]
"(Default)" = "ICredentialRequestedEventData"

[HKCU\Software\Classes\Wow6432Node\Interface\{35CE3A44-C636-4D31-BC95-B9370C2251B9}]
"(Default)" = "IFavoriteContacts"

[HKCU\Software\Classes\Interface\{B8FD4A53-E7E6-4995-A5B5-1306C7584964}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{DAA5FDE3-A81C-4F23-80B6-C47B52C649BF}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{DEDDD7BD-4763-41D2-9AAA-B2C143457CA4}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{F0CE810F-E36F-4CD8-A836-515B9A6E09FC}]
"(Default)" = "IContactInformationDictionary"

[HKCU\Software\Classes\Interface\{899B846A-8887-45D6-B8F5-8AAA0BFDF722}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{C4D95336-5949-4D13-AAC8-82039E5CBCFC}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{84340964-7820-4EBC-BCD3-702926DE23E8}]
"(Default)" = "_IContentSharingModalityCallback"

[HKCU\Software\Classes\Wow6432Node\Interface\{AF2ABA54-F591-42BA-8004-20944C9FB4D7}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{AAFE380B-B079-4B55-B81B-A9401D77B776}]
"(Default)" = "IPowerPointContent"

[HKCU\Software\Classes\Interface\{68DA8699-6C6E-4390-BD82-709FF1DC1702}]
"(Default)" = "IRoomUser"

[HKCU\Software\Classes\Wow6432Node\Interface\{1FF8AA01-D8AF-4B2B-B254-BEFEFABAF2D6}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{628D7BDD-45AB-404D-8505-B3ADC15F454D}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{81C9D13F-A4F9-4E13-92D3-BB271E8DF3D2}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{603E2454-725A-4679-A6A8-363B21633CB2}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{8F04E92D-EE26-4B64-B9C1-56DD90816810}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{B1F5BCD8-69A6-4FC3-9EF0-9BD4AD999061}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{DA7CF784-67DF-429C-82FB-9AFD99F6CCCB}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{D2BFC7D7-A64F-48EF-BF90-C3C7E684D89C}]
"(Default)" = "IDistributionGroupExpansionStateChangedEventData"

[HKCU\Software\Classes\Interface\{85109845-6AE2-4B6B-9524-65BA203E5B7D}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{855AD949-E2EB-473D-AAF2-9800008EA303}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{209DA899-15F1-499A-B8B5-A847EAA899AE}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{F87AFD9A-9BF8-4AC4-953E-33C4D2035D33}]
"(Default)" = "IPreviousConversationsManagerConnectionStateChangedEventData"

[HKCU\Software\Classes\Interface\{37C7F935-E215-46D2-82A3-A451840EC733}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{8C9B6953-33CC-4A04-9DA4-F71AE79DA0C0}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{7CD92461-CA4F-4BEB-A636-8BBCC192E60F}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{A0984F01-5D2C-4302-87A0-69BE7B015143}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{AB2D1A67-2B3D-4E25-B21C-03F4BFC4C2BE}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{48B3099D-841D-4CAA-9202-5787596E2BD2}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{6A7FF112-42CE-4D03-8922-D02AC6C5759F}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{B22EDBEA-9E61-4703-82BE-01C05619B6D6}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{10FDD9BA-0CBA-4958-B6C8-D0912BF2703F}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{25A47938-5C31-4F43-9108-DA01EE5869C0}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{806D3227-4CB8-47C4-9864-7D4DF4F44069}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{B0B0E8F8-32DA-4CB0-A124-D1E35891D53A}]
"(Default)" = "IAudioDevice"

[HKCU\Software\Classes\Interface\{899B846A-8887-45D6-B8F5-8AAA0BFDF722}]
"(Default)" = "IActiveContentChangedEventData"

[HKCU\Software\Classes\Wow6432Node\Interface\{C63F58CB-EF11-4934-AA3B-2D69244F0780}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{899B846A-8887-45D6-B8F5-8AAA0BFDF722}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{064E6072-5592-4D13-AFDB-55F5A494E137}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{55A21CF3-A2B3-484E-BE2A-14280F501289}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{340C54A6-35CF-4971-B540-72D7F040AC24}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{B0B0E8F8-32DA-4CB0-A124-D1E35891D53A}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{00E22CBB-3170-453A-AE62-EAFBC75A9F8D}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{ACABFA1C-0738-4C4D-AF7E-326873CF4ACE}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{80EDBF3A-812E-42B5-A67F-6CC6D9A19A6C}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{B28F2007-3926-49CF-9101-4CCB9574049B}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{56F7DEC0-59CA-47C6-9F35-D5066A702B39}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{9D4D3D10-DEBC-40C6-ACF9-527986CB42BC}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{F5996C71-77AB-4020-9776-C2C270FEF2AE}]
"(Default)" = "IConversationHistory"

[HKCU\Software\Classes\Interface\{E2C6D6E0-52EF-47A2-BDA9-9D6A7A29A391}]
"(Default)" = "_IRoomManagerEvents"

[HKCU\Software\Classes\Wow6432Node\Interface\{10D66B39-5E4B-4C98-AAC6-D0458FEB1BDB}]
"(Default)" = "_IModalityEvents"

[HKCU\Software\Classes\Interface\{109D32CE-E09F-46F5-9ECB-01E1D273B7DA}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{8A88C016-AA5D-4EAE-9C79-7AA5C360ED76}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{2209E091-5B90-4CAF-8582-CC5979883376}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{9AB20314-B258-48F8-B659-AD250DFA20F5}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{87084018-7E74-4F92-AB39-1CF03188580E}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{EFEC2816-F16D-48D8-9306-26C810F0EA55}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{6A986B5D-E5EC-4395-AD2D-0E62B72DA776}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Local Settings\MuiCache\2B\52C64B7E\@%SystemRoot%\system32]
"dnsapi.dll,-103" = "Domain Name System (DNS) Server Trust"

[HKCU\Software\Classes\Wow6432Node\Interface\{BE026CD2-7E82-4F7C-8762-F6B02F496174}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{AB2D1A67-2B3D-4E25-B21C-03F4BFC4C2BE}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{B28F2007-3926-49CF-9101-4CCB9574049B}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{AB2D1A67-2B3D-4E25-B21C-03F4BFC4C2BE}]
"(Default)" = "IConversationManagerEventData"

[HKCU\Software\Classes\Interface\{90B49A60-72AF-4360-9F9B-916DB7504A3C}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{12480BD4-072F-4763-B9FB-41B2CA54F9CD}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{C22CE6BF-3A47-46B7-8544-44305BADFEF9}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{082EE280-726E-417F-99CB-81A0CCBFF883}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{25D64AEA-0E65-49CB-8D6D-65DB0AC1AF65}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{1A8A9402-E89F-40AE-88A8-B328391684B6}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{B0C10F94-CAB6-4821-9643-D781885A46AF}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{DBA05C15-1C07-4A76-8248-08D8416A24E3}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{FD02E775-CB9D-4CE3-9243-115C81E5F11C}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{E2C6D6E0-52EF-47A2-BDA9-9D6A7A29A391}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{995F992C-9DEF-47B9-BF11-81813C0C0E28}]
"(Default)" = "ISearchProviderStateChangedEventData"

[HKCU\Software\Classes\Interface\{48B3099D-841D-4CAA-9202-5787596E2BD2}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{F97BED54-E434-4020-A197-F15AEA9D9C95}]
"(Default)" = "IConversationWindowNeedsAttentionEventData"

[HKCU\Software\Classes\Wow6432Node\Interface\{FD9000B3-479F-4B16-9D63-70A49E078946}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{5418E2AB-EB9A-4659-B4DC-28DE633B2B8F}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{F97BED54-E434-4020-A197-F15AEA9D9C95}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{3CD1DB65-D85B-4912-8536-6BD8E19F1738}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{569E04F2-D286-4903-9642-44D850310956}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{DD31376E-E529-43F2-B3B4-E379EBD28E2A}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{DAC6D77B-12F7-405C-BB33-002D6D4007F3}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{064E6072-5592-4D13-AFDB-55F5A494E137}]
"(Default)" = "IParticipantCollectionChangedEventData"

[HKCU\Software\Classes\Wow6432Node\Interface\{2D3D62CA-E9F6-4F94-8EBD-5FABAB29E6A5}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{855AD949-E2EB-473D-AAF2-9800008EA303}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{D0984CEF-E323-4574-B07B-5C970C9CAEE0}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{8684D3AD-7061-4056-A894-EBF1270ADB9B}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{6B551C9E-DE81-41DF-A0AE-39F0AF11D508}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{F719ED75-B7BD-45D3-9097-254509226F20}]
"(Default)" = "_ICustomGroupEvents"

[HKCU\Software\Classes\Wow6432Node\Interface\{E0E8B413-BB57-4B58-B1FB-288F3A269E35}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{57C3CB4D-C794-456F-846D-0E1ECA78BD00}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{3DEBDC7E-811F-4304-BDD7-7D98C732026C}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{E24C2484-C70D-44AB-8A4E-F1585A17A3E1}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{FB67275C-4D9E-4C32-9793-A96749884FC1}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{18A9A79A-CBC7-4F8B-8B2B-9B40CA75EC3C}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{25025B1B-0084-44D1-B383-9FFC9A99ABCD}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{2D3D62CA-E9F6-4F94-8EBD-5FABAB29E6A5}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{B00F2520-029C-47D0-B4E8-8FBEF47CAA7E}]
"(Default)" = "IVideoViewInformationDictionary"

[HKCU\Software\Classes\Interface\{DAC6D77B-12F7-405C-BB33-002D6D4007F3}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{ED5040FA-8F8F-4876-BF6D-9C62F5EFFD5B}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{7B39CB77-4AEB-42D7-B351-CB5472C1C6AD}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{DC63D621-11C8-4490-B017-B8C57EE1BE25}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{8AFFB8CE-5404-4280-BCA3-E2E4388E6D73}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{0CA9BAE8-DD28-4929-A821-4D00F11203CC}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{E24C2484-C70D-44AB-8A4E-F1585A17A3E1}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9C99CCBB-10A0-4B2A-A5BE-4CAC43F74632}]
"WpadNetworkName" = "Network 3"

[HKCU\Software\Classes\Interface\{21629AB6-9557-4985-9237-49177F618692}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{9B3A702D-5BE1-4FCE-ADB3-EBBD23E078C3}]
"(Default)" = "IClientStateChangedEventData"

[HKCU\Software\Classes\Interface\{9274DBDC-43CE-45AA-A817-414A4494AD28}]
"(Default)" = "IDeviceManager"

[HKCU\Software\Classes\Interface\{603E2454-725A-4679-A6A8-363B21633CB2}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{AA41EE75-F9C5-42F7-8D17-1D92D6BA4D92}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{76428270-36FA-4236-8BDF-AADB39FD1371}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{9E0F8FCA-D9C9-47CD-87F4-5554217DFFCC}]
"(Default)" = "_IConversationWindowEvents"

[HKCU\Software\Classes\Interface\{7CD92461-CA4F-4BEB-A636-8BBCC192E60F}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{68B1FC26-B48F-4D5F-B041-8E246676D836}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{E82737B9-B2BE-4AFD-B649-C9F665627F20}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{D9D04B55-D820-4D5B-A690-658A49368478}]
"(Default)" = "_IVoiceMailsManagerCallback"

[HKCU\Software\Classes\Interface\{B1C6ECC3-1EA7-495D-9337-02FE4FB723F0}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{9274DBDC-43CE-45AA-A817-414A4494AD28}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{ACD2FDB9-98ED-4283-AAE8-3CD989EBD9AE}]
"(Default)" = "_IAVModalityEvents"

[HKCU\Software\Classes\Wow6432Node\Interface\{3690D374-3779-4EFC-B8E8-20642C01529A}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{A9AAB6A0-54B9-4419-AAAF-6B26DFAC1585}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{3187885C-A8AF-4D4B-8E80-F4B9D447A7B2}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{DCDEA425-B5F2-4719-A3B4-69FFB9770BE6}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{3959E5C6-75CC-448E-9A18-9F163FF47646}]
"(Default)" = "IActiveAudioDeviceChangedEventData"

[HKCU\Software\Classes\Interface\{B8FD4A53-E7E6-4995-A5B5-1306C7584964}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{80EDBF3A-812E-42B5-A67F-6CC6D9A19A6C}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{ACD2FDB9-98ED-4283-AAE8-3CD989EBD9AE}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\TypeLib\{B9AA1F11-F480-4054-A84E-B5D9277E40A8}\1.0\HELPDIR]
"(Default)" = "%Program Files% (x86)\Skype\Phone\Skype.exe\"

[HKCU\Software\Classes\Wow6432Node\Interface\{62074904-8D06-43FE-A531-E63DF7FDC2E7}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{ABF012A2-2068-4B4D-80D7-6D386BA7C8A2}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{DF414A68-5051-4465-AAE2-4F301315734E}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{2C59A886-ACD3-46BB-8BAC-7C1C59FB2E0D}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{90B49A60-72AF-4360-9F9B-916DB7504A3C}]
"(Default)" = "IAlertLevelChangedEventData"

[HKCU\Software\Classes\Wow6432Node\Interface\{9274DBDC-43CE-45AA-A817-414A4494AD28}]
"(Default)" = "IDeviceManager"

[HKCU\Software\Classes\Wow6432Node\Interface\{18A9A79A-CBC7-4F8B-8B2B-9B40CA75EC3C}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{92A9EB9B-85EE-444E-A302-00C3C945BAA4}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{1B04D929-11E4-46C2-9162-EA4F2758C3A7}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{76428270-36FA-4236-8BDF-AADB39FD1371}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{F8DF0B4B-A4CE-476B-81D3-9FBA98461B62}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{10FDD9BA-0CBA-4958-B6C8-D0912BF2703F}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{7818A3F7-674B-477E-99E8-54774579A8E7}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{330639F2-E399-48CB-863F-56A50A27A138}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{76DE1CD8-F278-48A1-A391-E5BEB8F428E6}]
"(Default)" = "IRoomManager"

[HKCU\Software\Classes\Interface\{F5996C71-77AB-4020-9776-C2C270FEF2AE}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{C79E4169-535F-4A41-8DE2-C65A90D9503D}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{DC4BC923-6A52-4F02-9F8A-547B606955E7}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{74B6CAF0-755E-454D-A819-D0E439EF5296}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{70986DCE-4AA8-4DFB-9A45-4BFCF7A206F5}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{65B71572-5338-43C8-9E4C-F1DFC6711AD1}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{DC4BC923-6A52-4F02-9F8A-547B606955E7}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{57CC2235-96C5-49FA-B92B-350486C6CF52}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{7818A3F7-674B-477E-99E8-54774579A8E7}]
"(Default)" = "IExchangeECPUrlChangedEventData"

[HKCU\Software\Classes\Interface\{EBD19735-0CB5-4AF3-8E05-B0140CF9D545}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{E664682C-CBA5-4C7C-A65B-9CD046F24CBD}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{086F0E9D-A416-40F9-877C-F1C82DC1A6AD}]
"(Default)" = "IVideoViewInformationChangedEventData"

[HKCU\Software\Classes\Wow6432Node\Interface\{AA41EE75-F9C5-42F7-8D17-1D92D6BA4D92}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{9AB20314-B258-48F8-B659-AD250DFA20F5}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{15D4461D-C7EB-45CB-B214-F1C45FED1DB2}]
"(Default)" = "IPreviousConversationsManagerDictionary"

[HKCU\Software\Classes\Wow6432Node\Interface\{ACD2FDB9-98ED-4283-AAE8-3CD989EBD9AE}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{899B846A-8887-45D6-B8F5-8AAA0BFDF722}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{12480BD4-072F-4763-B9FB-41B2CA54F9CD}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{2C59A886-ACD3-46BB-8BAC-7C1C59FB2E0D}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{25D64AEA-0E65-49CB-8D6D-65DB0AC1AF65}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{E6B3F5FA-4208-4C37-AE07-F6435B68D693}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{81C9D13F-A4F9-4E13-92D3-BB271E8DF3D2}]
"(Default)" = "IPreviousConversationCollection"

[HKCU\Software\Classes\Interface\{15D4461D-C7EB-45CB-B214-F1C45FED1DB2}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{2EDAF003-14A6-4FAF-8A72-99526D048D63}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{478DDA59-64C0-4429-AC8A-F10A940B52CC}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{37C7F935-E215-46D2-82A3-A451840EC733}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{DD31376E-E529-43F2-B3B4-E379EBD28E2A}]
"(Default)" = "IAccessEntryCollectionChangedEventData"

[HKCU\Software\Classes\Interface\{D4B240B9-059B-4D13-8997-31B282B3BD43}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{56F7DEC0-59CA-47C6-9F35-D5066A702B39}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{BC9F5F40-D315-40C1-B1C6-CEA0646E18E2}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{9397FF55-EE06-4F02-8F2A-BE3AE249D4BB}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{3F60CFF7-BE3F-4404-8395-C02D0CDD318E}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{1FF8AA01-D8AF-4B2B-B254-BEFEFABAF2D6}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{B22EDBEA-9E61-4703-82BE-01C05619B6D6}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{56A868B4-0AD4-11CE-B03A-0020AF0BA770}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{D9D04B55-D820-4D5B-A690-658A49368478}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{68DA8699-6C6E-4390-BD82-709FF1DC1702}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{9397FF55-EE06-4F02-8F2A-BE3AE249D4BB}]
"(Default)" = "IConversationHistoryActionAvailabilityEventData"

[HKCU\Software\Classes\Interface\{3C8210C8-8578-47C6-87A9-FA1AD2BA9873}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{C6605772-3D9D-44A7-B43A-4590E6B43EE3}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{66D1FFC0-C234-4F3D-ABAA-98222A69E525}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{F8DF0B4B-A4CE-476B-81D3-9FBA98461B62}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{D60B1701-766D-401E-8586-83E0C9106BE0}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{219DC126-9A48-483F-80C2-3F22B3B47829}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{6A986B5D-E5EC-4395-AD2D-0E62B72DA776}]
"(Default)" = "_IParticipantEvents"

[HKCU\Software\Classes\Wow6432Node\Interface\{E664682C-CBA5-4C7C-A65B-9CD046F24CBD}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{74B6CAF0-755E-454D-A819-D0E439EF5296}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{A766520D-F700-4BF5-8428-56BD914C1C40}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{81C9D13F-A4F9-4E13-92D3-BB271E8DF3D2}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{F719ED75-B7BD-45D3-9097-254509226F20}]
"(Default)" = "_ICustomGroupEvents"

[HKCU\Software\Classes\Interface\{C12F0DE5-9A7D-425C-B391-8BE004EAA2F6}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{00E22CBB-3170-453A-AE62-EAFBC75A9F8D}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{B1C6ECC3-1EA7-495D-9337-02FE4FB723F0}]
"(Default)" = "_IContactEvents"

[HKCU\Software\Classes\Wow6432Node\Interface\{DAB42E13-500A-409A-AC34-C1BF4719EE2E}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{DAC6D77B-12F7-405C-BB33-002D6D4007F3}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{C7ACB102-B692-49CC-92DA-5824822C7B96}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{02DD541F-C863-4295-92AB-A4CF29F5D841}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{08DDF5C4-FA12-4978-B26E-C6D23C453413}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{F0B791FA-434B-49F2-B84E-05619EBE6BEB}]
"(Default)" = "ICredentialRequestedEventData"

[HKCU\Software\Classes\Interface\{F0B791FA-434B-49F2-B84E-05619EBE6BEB}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{09028936-CD20-43EF-98CF-56726ADDBA34}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{89C7EB8E-42BC-4C9F-BB34-88CDE83CCB37}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{F87AFD9A-9BF8-4AC4-953E-33C4D2035D33}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{4AA93AA8-898C-45EE-8E5C-1A86739B3F96}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{62B932E9-7847-4D78-BEEE-5D58BF815B03}]
"(Default)" = "IContactPositionChangedEventData"

[HKCU\Software\Classes\Interface\{C0034194-F7B6-43EB-B0E0-7852FC8E7BFA}]
"(Default)" = "IPhonesChangedEventData"

[HKCU\Software\Classes\Wow6432Node\Interface\{744BAB86-B15F-4BD5-B7DD-476B0CE0162A}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{4E8DC7E0-04B8-470B-BDFA-F520099B975F}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{E5CFF4A5-83A8-4FD8-8DAA-77A3E2288D4A}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{2EDAF003-14A6-4FAF-8A72-99526D048D63}]
"(Default)" = "IAutomation"

[HKCU\Software\Classes\Wow6432Node\Interface\{08E1E9CF-A7E4-43BE-AE8E-B223CE71E46E}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{4D120020-CE64-43C5-9F84-7A7B2360388F}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{311DDE48-ED7D-46FA-9E0A-2E314B7FEF7C}]
"(Default)" = "_IContactCallback"

[HKCU\Software\Classes\Interface\{D2BFC7D7-A64F-48EF-BF90-C3C7E684D89C}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{1FF0E6F1-2FE4-4E29-A123-557AF0DB6927}]
"(Default)" = "IContactEndpoint"

[HKCU\Software\Classes\Wow6432Node\Interface\{05789509-AFA1-4E90-B4FA-1A7820DB9796}]
"(Default)" = "IRoomCollection"

[HKCU\Software\Classes\Interface\{AE3A7C39-9C30-4E0F-BAE4-D8344EF377EA}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{B22EDBEA-9E61-4703-82BE-01C05619B6D6}]
"(Default)" = "ILocalSharedResourcesChangedEventData"

[HKCU\Software\Classes\Interface\{65B71572-5338-43C8-9E4C-F1DFC6711AD1}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{C4D95336-5949-4D13-AAC8-82039E5CBCFC}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{06437ABB-C419-4B11-A474-1A2B02FBD646}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{FA7971EF-1E41-429F-8C79-DAC5F88D444B}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{61C747F6-157C-4CAE-A37C-EC4352175860}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{C31FB52D-9E9E-45AD-A102-5218E1685B78}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{DD181E97-EEE0-4D65-BAD1-16866D0C7953}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{0BDB9057-28AE-4BF0-AFF0-12A148E51637}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{CA62E6F3-3E6D-451B-AEAA-6A1B7AACF8D4}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{BC9F5F40-D315-40C1-B1C6-CEA0646E18E2}]
"(Default)" = "IRoomUserChangedEventData"

[HKCU\Software\Classes\Interface\{DAA5FDE3-A81C-4F23-80B6-C47B52C649BF}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{3C8210C8-8578-47C6-87A9-FA1AD2BA9873}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{C63F58CB-EF11-4934-AA3B-2D69244F0780}]
"(Default)" = "_IConversationEvents"

[HKCU\Software\Classes\Interface\{DF414A68-5051-4465-AAE2-4F301315734E}]
"(Default)" = "IPreviousConversation"

[HKCU\Software\Classes\Interface\{B00F2520-029C-47D0-B4E8-8FBEF47CAA7E}]
"(Default)" = "IVideoViewInformationDictionary"

[HKCU\Software\Classes\Interface\{BC9F5F40-D315-40C1-B1C6-CEA0646E18E2}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{B28F2007-3926-49CF-9101-4CCB9574049B}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{FF037274-455A-4E34-B5D1-D42DB866F9B7}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{6964B116-8FE6-4C19-9052-0EAA74460A58}]
"(Default)" = "_IConversation2Callback"

[HKCU\Software\Classes\Interface\{8E839AF9-9508-475A-AA47-3EE8A946B75E}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{B3C5872E-591C-4A74-9F84-B00EF970A838}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{0CA9BAE8-DD28-4929-A821-4D00F11203CC}]
"(Default)" = "_IChannelEvents"

[HKCU\Software\Classes\Interface\{109D32CE-E09F-46F5-9ECB-01E1D273B7DA}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{71A054B3-4D4B-4643-B14F-4572494B19E7}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{340C54A6-35CF-4971-B540-72D7F040AC24}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{06437ABB-C419-4B11-A474-1A2B02FBD646}]
"(Default)" = "_ISelfEvents"

[HKCU\Software\Classes\Wow6432Node\Interface\{EBD19735-0CB5-4AF3-8E05-B0140CF9D545}]
"(Default)" = "IPreviousConversationBatchEventData"

[HKCU\Software\Classes\Wow6432Node\Interface\{9112CE9B-3704-48C0-86DC-7A7B0F34D7A3}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{DCDEA425-B5F2-4719-A3B4-69FFB9770BE6}]
"(Default)" = "IRecentContacts"

[HKCU\Software\Classes\Wow6432Node\Interface\{DBA05C15-1C07-4A76-8248-08D8416A24E3}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{3C8210C8-8578-47C6-87A9-FA1AD2BA9873}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{18A9A79A-CBC7-4F8B-8B2B-9B40CA75EC3C}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{DD181E97-EEE0-4D65-BAD1-16866D0C7953}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{A58F54D2-9786-4309-964D-96549AEC7611}]
"(Default)" = "IShareableContentCollection"

[HKCU\Software\Classes\Interface\{7818A3F7-674B-477E-99E8-54774579A8E7}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{A766520D-F700-4BF5-8428-56BD914C1C40}]
"(Default)" = "IRoom"

[HKCU\Software\Classes\Wow6432Node\Interface\{66D1FFC0-C234-4F3D-ABAA-98222A69E525}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{6A7FF112-42CE-4D03-8922-D02AC6C5759F}]
"(Default)" = "ISharingResourceList"

[HKCU\Software\Classes\Wow6432Node\Interface\{C22CE6BF-3A47-46B7-8544-44305BADFEF9}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{10FDD9BA-0CBA-4958-B6C8-D0912BF2703F}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{7CD92461-CA4F-4BEB-A636-8BBCC192E60F}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{B22EDBEA-9E61-4703-82BE-01C05619B6D6}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{81C9D13F-A4F9-4E13-92D3-BB271E8DF3D2}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{C413A27F-601E-4261-B9E3-0EB966F4E7D1}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{464D5228-9F68-4B1F-B430-156A104E2B85}]
"(Default)" = "IPreviousHistoryRetrievalStateChangedEventData"

[HKCU\Software\Classes\Wow6432Node\Interface\{FF037274-455A-4E34-B5D1-D42DB866F9B7}]
"(Default)" = "IConversationWindowInformationChangedEventData"

[HKCU\Software\Classes\Interface\{57C3CB4D-C794-456F-846D-0E1ECA78BD00}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{04378C72-E58F-47C0-8621-901B85CA2ED4}]
"(Default)" = "IConversationContext"

[HKCU\Software\Classes\Wow6432Node\Interface\{10C3ACC7-6C0C-4F35-ADFB-AE0F200A8583}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{A58F54D2-9786-4309-964D-96549AEC7611}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{3187885C-A8AF-4D4B-8E80-F4B9D447A7B2}]
"(Default)" = "_IShareableContentCallback"

[HKCU\Software\Classes\Wow6432Node\Interface\{3C8D7146-35EA-4133-B2F6-C1FC2401A091}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{0FDB5B86-DD44-41BF-A443-317FD19BBF3D}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{FA7971EF-1E41-429F-8C79-DAC5F88D444B}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{8F04E92D-EE26-4B64-B9C1-56DD90816810}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{E2C6D6E0-52EF-47A2-BDA9-9D6A7A29A391}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{569E04F2-D286-4903-9642-44D850310956}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{E0E8B413-BB57-4B58-B1FB-288F3A269E35}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{2209E091-5B90-4CAF-8582-CC5979883376}]
"(Default)" = "IConversationWindowStateChangedEventData"

[HKCU\Software\Classes\Wow6432Node\Interface\{E6B3F5FA-4208-4C37-AE07-F6435B68D693}]
"(Default)" = "IContactManager"

[HKCU\Software\Classes\Interface\{340C54A6-35CF-4971-B540-72D7F040AC24}]
"(Default)" = "IDistributionGroup"

[HKCU\Software\Classes\Interface\{0C81EC90-9469-4ED4-ACAD-ADB86E11039C}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{D4B240B9-059B-4D13-8997-31B282B3BD43}]
"(Default)" = "IModality"

[HKCU\Software\Classes\Interface\{10D66B39-5E4B-4C98-AAC6-D0458FEB1BDB}]
"(Default)" = "_IModalityEvents"

[HKCU\Software\Classes\Interface\{CA478B44-4FCE-4082-8700-8CEC69FB50E1}]
"(Default)" = "IShareableContentPropertyDictionary"

[HKCU\Software\Classes\Wow6432Node\Interface\{E5CFF4A5-83A8-4FD8-8DAA-77A3E2288D4A}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{FB67275C-4D9E-4C32-9793-A96749884FC1}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{18BA13C7-A64E-4301-BA51-D1BFB3C1C9D5}]
"(Default)" = "IVoiceMailBatchEventData"

[HKCU\Software\Classes\Wow6432Node\Interface\{48B3099D-841D-4CAA-9202-5787596E2BD2}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{899B846A-8887-45D6-B8F5-8AAA0BFDF722}]
"(Default)" = "IActiveContentChangedEventData"

[HKCU\Software\Classes\Wow6432Node\Interface\{086F0E9D-A416-40F9-877C-F1C82DC1A6AD}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{DD31376E-E529-43F2-B3B4-E379EBD28E2A}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{F644C610-A146-4A56-8338-A69C45C71CEF}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{E2C6D6E0-52EF-47A2-BDA9-9D6A7A29A391}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{8665FD95-7720-4F9E-B605-6ABCBD7EDFF4}]
"(Default)" = "IParticipantPropertyDictionary"

[HKCU\Software\Classes\Interface\{06437ABB-C419-4B11-A474-1A2B02FBD646}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{A766520D-F700-4BF5-8428-56BD914C1C40}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{9112CE9B-3704-48C0-86DC-7A7B0F34D7A3}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{70986DCE-4AA8-4DFB-9A45-4BFCF7A206F5}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{A9AAB6A0-54B9-4419-AAAF-6B26DFAC1585}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{8665FD95-7720-4F9E-B605-6ABCBD7EDFF4}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{10C3ACC7-6C0C-4F35-ADFB-AE0F200A8583}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{D5C1C8FB-DC8A-45A3-AAA3-53B89D43CDE4}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{D0984CEF-E323-4574-B07B-5C970C9CAEE0}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{65B71572-5338-43C8-9E4C-F1DFC6711AD1}]
"(Default)" = "IAccessEntry"

[HKCU\Software\Classes\Wow6432Node\Interface\{EC9773AD-7D22-4B03-B949-5E9055AF0F19}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{4CB70415-BA71-491E-B12D-155D85CBDFF1}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{995F992C-9DEF-47B9-BF11-81813C0C0E28}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{AA186C92-181E-417F-B150-FCA0F367E0FC}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{65B71572-5338-43C8-9E4C-F1DFC6711AD1}]
"(Default)" = "IAccessEntry"

[HKCU\Software\Classes\Wow6432Node\Interface\{7452BD0F-65CB-4A5E-AC37-E2BEA1F43DD9}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{04378C72-E58F-47C0-8621-901B85CA2ED4}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{0678C83E-F580-4D99-902F-930699B28BE8}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{25A47938-5C31-4F43-9108-DA01EE5869C0}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{378CD767-1B64-4A0E-A941-8F52869FC9DF}]
"(Default)" = "ISearchResult"

[HKCU\Software\Classes\Wow6432Node\Interface\{DAA5FDE3-A81C-4F23-80B6-C47B52C649BF}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{EC9773AD-7D22-4B03-B949-5E9055AF0F19}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{B0C10F94-CAB6-4821-9643-D781885A46AF}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{35CE3A44-C636-4D31-BC95-B9370C2251B9}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{71A054B3-4D4B-4643-B14F-4572494B19E7}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{CA7EEB7A-7DC3-4FFE-A174-23DB5A003C04}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{CA478B44-4FCE-4082-8700-8CEC69FB50E1}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{DAA5FDE3-A81C-4F23-80B6-C47B52C649BF}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{4DA899D3-FAC7-4F43-8E4A-1987988FBC9B}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{26C8D96D-7D22-4E9E-948A-EDCCB4CA9C64}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{4FE44049-4E44-4109-B234-4E4EFC135A86}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{8665FD95-7720-4F9E-B605-6ABCBD7EDFF4}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{25A47938-5C31-4F43-9108-DA01EE5869C0}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{663C61F4-A9DA-4A6F-A606-F142F665DF61}]
"(Default)" = "IConversationWindowActions"

[HKCU\Software\Classes\Wow6432Node\Interface\{8665FD95-7720-4F9E-B605-6ABCBD7EDFF4}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{FF037274-455A-4E34-B5D1-D42DB866F9B7}]
"(Default)" = "IConversationWindowInformationChangedEventData"

[HKCU\Software\Classes\Interface\{C12F0DE5-9A7D-425C-B391-8BE004EAA2F6}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{B335AE5E-E4EA-49D3-B03B-646A96FE66D3}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{25D64AEA-0E65-49CB-8D6D-65DB0AC1AF65}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{8FE9A23D-72BC-4EA3-A5AF-E37F75EAD8A2}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{6A986B5D-E5EC-4395-AD2D-0E62B72DA776}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{5E7AB04C-E4B8-49FB-85FF-9E2BCA2899D3}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{D2BFC7D7-A64F-48EF-BF90-C3C7E684D89C}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{311DDE48-ED7D-46FA-9E0A-2E314B7FEF7C}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{8AFFB8CE-5404-4280-BCA3-E2E4388E6D73}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{081793DA-7221-45C3-8AFA-3A2E6E464670}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{744BAB86-B15F-4BD5-B7DD-476B0CE0162A}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{09028936-CD20-43EF-98CF-56726ADDBA34}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{8C9B6953-33CC-4A04-9DA4-F71AE79DA0C0}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{95B9A382-EA50-45E4-965E-BA61E7213DBA}]
"(Default)" = "_IAudioChannelCallback"

[HKCU\Software\Classes\Interface\{94093301-8854-408E-8138-C7C3D2DACA1F}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{38E5EC21-81A1-45A7-94D6-B812976231A4}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{90B49A60-72AF-4360-9F9B-916DB7504A3C}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{B00F2520-029C-47D0-B4E8-8FBEF47CAA7E}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{D992371E-5161-453B-97E6-6E7C67BC075E}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{A0984F01-5D2C-4302-87A0-69BE7B015143}]
"(Default)" = "IConferenceRegionalAccessInformationCollection"

[HKCU\Software\Classes\Wow6432Node\Interface\{84340964-7820-4EBC-BCD3-702926DE23E8}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{478DDA59-64C0-4429-AC8A-F10A940B52CC}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{71A054B3-4D4B-4643-B14F-4572494B19E7}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{AF2ABA54-F591-42BA-8004-20944C9FB4D7}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{464D5228-9F68-4B1F-B430-156A104E2B85}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{953AE732-F53A-4116-AC1B-0321B3FB3DBA}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{082EE280-726E-417F-99CB-81A0CCBFF883}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{478DDA59-64C0-4429-AC8A-F10A940B52CC}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{21C41EDE-7ED8-4D97-9B0D-DD785781AF9B}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{92D7E7A8-48D8-4166-8911-630AE02B2B93}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{420A24E2-5C31-4262-9BD5-058682300ED6}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{5FA92EA7-6E6E-4A82-8F0D-107FEAF5A75D}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{ACD2FDB9-98ED-4283-AAE8-3CD989EBD9AE}]
"(Default)" = "_IAVModalityEvents"

[HKCU\Software\Classes\Wow6432Node\Interface\{9918673D-4D74-41CF-8840-D4996395A34C}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{082EE280-726E-417F-99CB-81A0CCBFF883}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{DD181E97-EEE0-4D65-BAD1-16866D0C7953}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "46 00 00 00 4E 00 00 00 09 00 00 00 00 00 00 00"

[HKCU\Software\Classes\Interface\{663C61F4-A9DA-4A6F-A606-F142F665DF61}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{9112CE9B-3704-48C0-86DC-7A7B0F34D7A3}]
"(Default)" = "IUtilities2"

[HKCU\Software\Classes\Interface\{B26F6403-761E-48D4-84E2-619C17EAEB13}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{50D86EE2-288F-44F5-8144-69F6E3B24B90}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{95B8D3E8-F3D5-4DC0-BCFE-AB80C835DEA0}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{4DA899D3-FAC7-4F43-8E4A-1987988FBC9B}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{082EE280-726E-417F-99CB-81A0CCBFF883}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{ABF012A2-2068-4B4D-80D7-6D386BA7C8A2}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{F97BED54-E434-4020-A197-F15AEA9D9C95}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{8A88C016-AA5D-4EAE-9C79-7AA5C360ED76}]
"(Default)" = "IConversationContextCollection"

[HKCU\Software\Classes\Wow6432Node\Interface\{76DE1CD8-F278-48A1-A391-E5BEB8F428E6}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{D5C1C8FB-DC8A-45A3-AAA3-53B89D43CDE4}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{95B8D3E8-F3D5-4DC0-BCFE-AB80C835DEA0}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{A58F54D2-9786-4309-964D-96549AEC7611}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{0678C83E-F580-4D99-902F-930699B28BE8}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{35CE3A44-C636-4D31-BC95-B9370C2251B9}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{F7EE956B-A713-48D3-AFEF-0A28F37740B3}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{E24C2484-C70D-44AB-8A4E-F1585A17A3E1}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{21629AB6-9557-4985-9237-49177F618692}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{DD31376E-E529-43F2-B3B4-E379EBD28E2A}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{C7ACB102-B692-49CC-92DA-5824822C7B96}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{BD891697-C93E-4A0B-9B6C-004BD81B6EE8}]
"(Default)" = "IConferenceSettingDictionary"

[HKCU\Software\Classes\Wow6432Node\Interface\{8057F99D-292C-4371-926B-5312E61A3A40}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{C22CE6BF-3A47-46B7-8544-44305BADFEF9}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{1566FA3C-FD24-41DB-A2B8-6232F89783DE}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{DEDDD7BD-4763-41D2-9AAA-B2C143457CA4}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{109D32CE-E09F-46F5-9ECB-01E1D273B7DA}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{1B04D929-11E4-46C2-9162-EA4F2758C3A7}]
"(Default)" = "IClientSettings"

[HKCU\Software\Classes\Wow6432Node\Interface\{10D66B39-5E4B-4C98-AAC6-D0458FEB1BDB}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{6B551C9E-DE81-41DF-A0AE-39F0AF11D508}]
"(Default)" = "_IShareableContentEvents"

[HKCU\Software\Classes\Wow6432Node\Interface\{35CE3A44-C636-4D31-BC95-B9370C2251B9}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{05789509-AFA1-4E90-B4FA-1A7820DB9796}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{C79E4169-535F-4A41-8DE2-C65A90D9503D}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{E2C6D6E0-52EF-47A2-BDA9-9D6A7A29A391}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{DCDEA425-B5F2-4719-A3B4-69FFB9770BE6}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{F719ED75-B7BD-45D3-9097-254509226F20}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{7B39CB77-4AEB-42D7-B351-CB5472C1C6AD}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{64561371-77A2-4BD4-A909-E6DEB1B5C6CF}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{7B39CB77-4AEB-42D7-B351-CB5472C1C6AD}]
"(Default)" = "IChannel2"

[HKCU\Software\Classes\Wow6432Node\Interface\{ACABFA1C-0738-4C4D-AF7E-326873CF4ACE}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{B3C5872E-591C-4A74-9F84-B00EF970A838}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{C63F58CB-EF11-4934-AA3B-2D69244F0780}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{8A88C016-AA5D-4EAE-9C79-7AA5C360ED76}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{08DDF5C4-FA12-4978-B26E-C6D23C453413}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{0678C83E-F580-4D99-902F-930699B28BE8}]
"(Default)" = "IConversationWindowActionAvailabilityChangedEventData"

[HKCU\Software\Classes\Interface\{B1F5BCD8-69A6-4FC3-9EF0-9BD4AD999061}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{94093301-8854-408E-8138-C7C3D2DACA1F}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{81C9D13F-A4F9-4E13-92D3-BB271E8DF3D2}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{25D64AEA-0E65-49CB-8D6D-65DB0AC1AF65}]
"(Default)" = "IClientSettingsChangedEventData"

[HKCU\Software\Classes\Wow6432Node\Interface\{89C7EB8E-42BC-4C9F-BB34-88CDE83CCB37}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{9AB20314-B258-48F8-B659-AD250DFA20F5}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{53D014C1-54DB-42B3-9DFD-8E231EF2C356}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{5E7AB04C-E4B8-49FB-85FF-9E2BCA2899D3}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{081793DA-7221-45C3-8AFA-3A2E6E464670}]
"(Default)" = "IRoomMessagesEventData"

[HKCU\Software\Classes\Interface\{56A868B4-0AD4-11CE-B03A-0020AF0BA770}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{06437ABB-C419-4B11-A474-1A2B02FBD646}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{9397FF55-EE06-4F02-8F2A-BE3AE249D4BB}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{C0034194-F7B6-43EB-B0E0-7852FC8E7BFA}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{70986DCE-4AA8-4DFB-9A45-4BFCF7A206F5}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{61C747F6-157C-4CAE-A37C-EC4352175860}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{FF037274-455A-4E34-B5D1-D42DB866F9B7}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{61C747F6-157C-4CAE-A37C-EC4352175860}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{011B320C-9AC1-4DDE-B595-3D0014472E2F}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{05789509-AFA1-4E90-B4FA-1A7820DB9796}]
"(Default)" = "IRoomCollection"

[HKCU\Software\Classes\Wow6432Node\Interface\{94093301-8854-408E-8138-C7C3D2DACA1F}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{1A8A9402-E89F-40AE-88A8-B328391684B6}]
"(Default)" = "INamedPropertyList"

[HKCU\Software\Classes\Interface\{628D7BDD-45AB-404D-8505-B3ADC15F454D}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{C413A27F-601E-4261-B9E3-0EB966F4E7D1}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{855AD949-E2EB-473D-AAF2-9800008EA303}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{953AE732-F53A-4116-AC1B-0321B3FB3DBA}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{84340964-7820-4EBC-BCD3-702926DE23E8}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{95B9A382-EA50-45E4-965E-BA61E7213DBA}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{1B04D929-11E4-46C2-9162-EA4F2758C3A7}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{10FDD9BA-0CBA-4958-B6C8-D0912BF2703F}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{CA62E6F3-3E6D-451B-AEAA-6A1B7AACF8D4}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{B00F2520-029C-47D0-B4E8-8FBEF47CAA7E}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{B1F5BCD8-69A6-4FC3-9EF0-9BD4AD999061}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{09028936-CD20-43EF-98CF-56726ADDBA34}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{8F04E92D-EE26-4B64-B9C1-56DD90816810}]
"(Default)" = "IFollowedRoomsChangedEventData"

[HKCU\Software\Classes\Wow6432Node\Interface\{081793DA-7221-45C3-8AFA-3A2E6E464670}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{855AD949-E2EB-473D-AAF2-9800008EA303}]
"(Default)" = "IConversationContextList"

[HKCU\Software\Microsoft\ActiveMovie\devenum]
"Version" = "7"

[HKCU\Software\Classes\Wow6432Node\Interface\{53D014C1-54DB-42B3-9DFD-8E231EF2C356}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{464D5228-9F68-4B1F-B430-156A104E2B85}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{300E56A3-CE08-4EB3-9F48-505AA162C9DA}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{2F8C3E58-436B-42DB-8924-6C394B37DCA2}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{CA7EEB7A-7DC3-4FFE-A174-23DB5A003C04}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{88C688B0-3908-4C56-A2E8-F90AB705C536}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{7693221D-7E9F-47D3-8782-6437CF3D4C0C}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{8FE9A23D-72BC-4EA3-A5AF-E37F75EAD8A2}]
"(Default)" = "IParticipationStateChangedEventData"

[HKCU\Software\Classes\Interface\{7CD92461-CA4F-4BEB-A636-8BBCC192E60F}]
"(Default)" = "ISearchResults2"

[HKCU\Software\Classes\Wow6432Node\Interface\{4D120020-CE64-43C5-9F84-7A7B2360388F}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{18BA13C7-A64E-4301-BA51-D1BFB3C1C9D5}]
"(Default)" = "IVoiceMailBatchEventData"

[HKCU\Software\Classes\Interface\{CA7EEB7A-7DC3-4FFE-A174-23DB5A003C04}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{744BAB86-B15F-4BD5-B7DD-476B0CE0162A}]
"(Default)" = "IDelegatorClientCollectionEventData"

[HKCU\Software\Classes\Wow6432Node\Interface\{85109845-6AE2-4B6B-9524-65BA203E5B7D}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{B0C10F94-CAB6-4821-9643-D781885A46AF}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{EF5C00E4-75E2-4D39-B358-0ED9CB14F3CB}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{61C747F6-157C-4CAE-A37C-EC4352175860}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{64B7E9AD-D920-4EAA-95C7-9D95DE9ACE24}]
"(Default)" = "IConferenceApplicationProperties"

[HKCU\Software\Classes\Interface\{663C61F4-A9DA-4A6F-A606-F142F665DF61}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{806D3227-4CB8-47C4-9864-7D4DF4F44069}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{F97973D7-9436-4A3E-A802-F6EA172A0425}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{1124AA59-B6F3-4EB1-B79A-E7F53B388B8D}]
"(Default)" = "IParticipantActionAvailabilityChangedEventData"

[HKCU\Software\Classes\Interface\{71A054B3-4D4B-4643-B14F-4572494B19E7}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{3C43A2BE-BA4A-41E8-8F93-A9DC5F091892}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{A4E1D1E4-7839-473B-95FA-5D33DDC0D2DD}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{68DA8699-6C6E-4390-BD82-709FF1DC1702}]
"(Default)" = "IRoomUser"

[HKCU\Software\Classes\Interface\{38E5EC21-81A1-45A7-94D6-B812976231A4}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{76DE1CD8-F278-48A1-A391-E5BEB8F428E6}]
"(Default)" = "IRoomManager"

[HKCU\Software\Classes\Interface\{A58F54D2-9786-4309-964D-96549AEC7611}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{AA41EE75-F9C5-42F7-8D17-1D92D6BA4D92}]
"(Default)" = "IApplicationRegistration"

[HKCU\Software\Classes\Interface\{C31FB52D-9E9E-45AD-A102-5218E1685B78}]
"(Default)" = "IConversationManager"

[HKCU\Software\Classes\Interface\{219DC126-9A48-483F-80C2-3F22B3B47829}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{064E6072-5592-4D13-AFDB-55F5A494E137}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{68B1FC26-B48F-4D5F-B041-8E246676D836}]
"(Default)" = "_IVoiceMailCallback"

[HKCU\Software\Classes\Wow6432Node\Interface\{04378C72-E58F-47C0-8621-901B85CA2ED4}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{081793DA-7221-45C3-8AFA-3A2E6E464670}]
"(Default)" = "IRoomMessagesEventData"

[HKCU\Software\Classes\Wow6432Node\Interface\{0FDB5B86-DD44-41BF-A443-317FD19BBF3D}]
"(Default)" = "_IRoomManagerCallback"

[HKCU\Software\Classes\Interface\{25A47938-5C31-4F43-9108-DA01EE5869C0}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{25A47938-5C31-4F43-9108-DA01EE5869C0}]
"(Default)" = "IVoiceMail"

[HKCU\Software\Classes\Interface\{65B71572-5338-43C8-9E4C-F1DFC6711AD1}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{BC9F5F40-D315-40C1-B1C6-CEA0646E18E2}]
"(Default)" = "IRoomUserChangedEventData"

[HKCU\Software\Classes\Wow6432Node\Interface\{56A868B4-0AD4-11CE-B03A-0020AF0BA770}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{D0984CEF-E323-4574-B07B-5C970C9CAEE0}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{7818A3F7-674B-477E-99E8-54774579A8E7}\TypeLib]
"Version" = "1.0"

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Trojan deletes the following value(s) in system registry:

The process syesubc3_p2v3.exe:2304 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies]
"CachePrefix" = "Cookie:"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionTime" = "32 16 6D B8 98 3B D0 01"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f3-c8-bd]
"WpadDecision" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"AutoDetect" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9C99CCBB-10A0-4B2A-A5BE-4CAC43F74632}]
"WpadDecision" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History]
"CachePrefix" = "Visited:"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content]
"CachePrefix" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f3-c8-bd]
"WpadDecisionReason" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionReason" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9C99CCBB-10A0-4B2A-A5BE-4CAC43F74632}]
"WpadNetworkName" = "Network 3"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDetectedUrl" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "46 00 00 00 4A 00 00 00 09 00 00 00 00 00 00 00"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecision" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9C99CCBB-10A0-4B2A-A5BE-4CAC43F74632}]
"WpadDecisionReason" = "1"

"WpadDecisionTime" = "A4 50 1E BA 98 3B D0 01"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f3-c8-bd]
"WpadDecisionTime" = "A4 50 1E BA 98 3B D0 01"

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Trojan deletes the following value(s) in system registry:

The process RunDll32.exe:2524 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionTime" = "9F DC A8 9D 98 3B D0 01"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f3-c8-bd]
"WpadDecision" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9C99CCBB-10A0-4B2A-A5BE-4CAC43F74632}]
"WpadDecision" = "0"

[HKLM\System\CurrentControlSet\Control\Session Manager]
"PendingFileRenameOperations" = "\??\%Program Files% (x86)\Google\Update\1.3.24.15, , \??\C:\Users\"%CurrentUserName%"\AppData\Local\Temp\VMwareDnD\327c54aa\python.dll, , \??\C:\Users\"%CurrentUserName%"\AppData\Local\Temp\VMwareDnD\327c54aa\, , \??\C:\Users\"%CurrentUserName%"\AppData\Local\Temp\OpenCandy_Why_Is_This_Here.txt,"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f3-c8-bd]
"WpadDecisionReason" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionReason" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9C99CCBB-10A0-4B2A-A5BE-4CAC43F74632}]
"WpadNetworkName" = "Network 3"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDetectedUrl" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "46 00 00 00 48 00 00 00 09 00 00 00 00 00 00 00"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecision" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9C99CCBB-10A0-4B2A-A5BE-4CAC43F74632}]
"WpadDecisionReason" = "1"

"WpadDecisionTime" = "E9 A2 44 AD 98 3B D0 01"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f3-c8-bd]
"WpadDecisionTime" = "E9 A2 44 AD 98 3B D0 01"

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Trojan deletes the following value(s) in system registry:

The Trojan disables automatic startup of the application by deleting the following autorun value:

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\RunOnce]
"OCDLMgr"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"OCDLMgr"

The process uTorrent.exe:2888 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"AutoDetect" = "1"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\AudioCompressionManager\DriverCache\msacm.msadpcm]
"fdwSupport" = "1"
"aFormatTagCache" = "01 00 00 00 10 00 00 00 02 00 00 00 32 00 00 00"

[HKCU\Software\BitTorrent\uTorrent]
"OfferProvider" = "OpenCandy"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History]
"CachePrefix" = "Visited:"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f3-c8-bd]
"WpadDecisionReason" = "1"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\AudioCompressionManager\DriverCache\msacm.msg711]
"cFormatTags" = "3"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\AudioCompressionManager\DriverCache\msacm.imaadpcm]
"fdwSupport" = "1"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\AudioCompressionManager\DriverCache\msacm.msadpcm]
"cFormatTags" = "2"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\AudioCompressionManager\DriverCache\msacm.msg711]
"cFilterTags" = "0"
"fdwSupport" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDetectedUrl" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "0"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\AudioCompressionManager\DriverCache\msacm.imaadpcm]
"cFilterTags" = "0"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\AudioCompressionManager\DriverCache\msacm.msgsm610]
"fdwSupport" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionTime" = "A4 50 1E BA 98 3B D0 01"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\AudioCompressionManager\DriverCache\msacm.msgsm610]
"cFormatTags" = "2"

[HKCU\Software\Classes\Local Settings\MuiCache\2A\52C64B7E]
"LanguageList" = "en-US, en"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9C99CCBB-10A0-4B2A-A5BE-4CAC43F74632}]
"WpadDecision" = "0"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\AudioCompressionManager\DriverCache\msacm.msgsm610]
"aFormatTagCache" = "01 00 00 00 10 00 00 00 31 00 00 00 14 00 00 00"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content]
"CachePrefix" = ""

[HKLM\SOFTWARE\Wow6432Node\Microsoft\AudioCompressionManager\DriverCache\msacm.imaadpcm]
"aFormatTagCache" = "01 00 00 00 10 00 00 00 11 00 00 00 14 00 00 00"

[HKCU\Software\BitTorrent\uTorrent]
"OfferViaCAU" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9C99CCBB-10A0-4B2A-A5BE-4CAC43F74632}]
"WpadDecisionReason" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f3-c8-bd]
"WpadDecisionTime" = "02 2C 7E BF 98 3B D0 01"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\AudioCompressionManager\DriverCache\msacm.msadpcm]
"cFilterTags" = "0"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\AudioCompressionManager\DriverCache\msacm.msgsm610]
"cFilterTags" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULATION]
"utorrent.exe" = "9000"

[HKCU\Software\Classes\Local Settings\MuiCache\2A\52C64B7E\@%SystemRoot%\system32]
"dnsapi.dll,-103" = "Domain Name System (DNS) Server Trust"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "46 00 00 00 4C 00 00 00 09 00 00 00 00 00 00 00"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\AudioCompressionManager\DriverCache\msacm.imaadpcm]
"cFormatTags" = "2"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f3-c8-bd]
"WpadDecision" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies]
"CachePrefix" = "Cookie:"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionReason" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9C99CCBB-10A0-4B2A-A5BE-4CAC43F74632}]
"WpadNetworkName" = "Network 3"
"WpadDecisionTime" = "02 2C 7E BF 98 3B D0 01"

[HKCU\Software\BitTorrent\uTorrent]
"OfferName" = ""

[HKCU\Software\Classes\Local Settings\MuiCache\2A\52C64B7E\@%SystemRoot%\system32]
"p2pcollab.dll,-8042" = "Peer to Peer Trust"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecision" = "0"

[HKCU\Software\BitTorrent\uTorrent]
"OfferAccepted" = "1"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\AudioCompressionManager\DriverCache\msacm.msg711]
"aFormatTagCache" = "01 00 00 00 10 00 00 00 06 00 00 00 12 00 00 00"

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Trojan deletes the following value(s) in system registry:

The process uTorrent.exe:2492 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKCU\Software\Classes\Local Settings\MuiCache\29\52C64B7E]
"LanguageList" = "en-US, en"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"AutoDetect" = "1"

[HKCU\Software\Classes\btdna]
"Content Type" = "application/x-btdna"

[HKCU\Software\BitTorrent\engine]
"portTimestamp" = "1422517975"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f3-c8-bd]
"WpadDecisionReason" = "1"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer]
"GlobalAssocChangedCounter" = "38"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9C99CCBB-10A0-4B2A-A5BE-4CAC43F74632}]
"WpadNetworkName" = "Network 3"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDetectedUrl" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "0"

[HKCU\Software\Classes\btdna\DefaultIcon]
"(Default)" = "%Program Files% (x86)\uTorrent\uTorrent.exe ,0"

[HKCU\Software\Microsoft\Internet Explorer\DOMStorage\Total]
"(Default)" = "91475"

[HKCU\Software\Classes\btdna\shell\open\command]
"(Default)" = "%Program Files% (x86)\uTorrent\uTorrent.exe /DNA"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionTime" = "0E E1 3A 71 98 3B D0 01"

[HKCU\Software\BitTorrent\engine]
"Port" = "49505"

[HKCU\Software\Microsoft\Internet Explorer\DOMStorage\bittorrent.com]
"(Default)" = "14"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9C99CCBB-10A0-4B2A-A5BE-4CAC43F74632}]
"WpadDecision" = "0"

[HKLM\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\2796BAE63F1801E277261BA0D77770028F20EEE4]
"Blob" = "0F 00 00 00 01 00 00 00 14 00 00 00 5D 82 AD B9"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content]
"CachePrefix" = ""

[HKCU\Software\BitTorrent\engine]
"controlPortTimestamp" = "1422517975"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Cached]
"{17FE9752-0B5A-4665-84CD-569794602F5C} {7F9185B0-CB92-43C5-80A9-92277A4F7B54} 0xFFFF" = "01 00 00 00 00 00 00 00 87 E2 C0 9B 98 3B D0 01"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9C99CCBB-10A0-4B2A-A5BE-4CAC43F74632}]
"WpadDecisionReason" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f3-c8-bd]
"WpadDecisionTime" = "D4 06 0E 99 98 3B D0 01"

[HKCU\Software\Classes\btdna]
"URL Protocol" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History]
"CachePrefix" = "Visited:"

[HKCU\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULATION]
"utorrent.exe" = "8000"

[HKCU\Software\Classes\btdna\shell]
"(Default)" = "open"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "46 00 00 00 42 00 00 00 09 00 00 00 00 00 00 00"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f3-c8-bd]
"WpadDecision" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies]
"CachePrefix" = "Cookie:"

[HKCU\Software\Classes\btdna]
"(Default)" = "btdna URI"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionReason" = "1"

[HKCU\Software\BitTorrent\engine]
"trayIcon" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecision" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9C99CCBB-10A0-4B2A-A5BE-4CAC43F74632}]
"WpadDecisionTime" = "D4 06 0E 99 98 3B D0 01"

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

To automatically run itself each time Windows is booted, the Trojan adds the following link to its file to the system registry autorun key:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Run]
"uTorrent" = "%Program Files% (x86)\uTorrent\uTorrent.exe /MINIMIZED"

The Trojan deletes the following value(s) in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f3-c8-bd]
"WpadDetectedUrl"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDetectedUrl"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyOverride"
"AutoDetect"

[HKCU\Software\BitTorrent\engine]
"portTimestamp"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

[HKCU\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULATION]
"uTorrent.exe"

[HKCU\Software\BitTorrent\engine]
"controlPortTimestamp"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyServer"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9C99CCBB-10A0-4B2A-A5BE-4CAC43F74632}]
"WpadDetectedUrl"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"AutoConfigURL"

[HKCU\Software\BitTorrent\engine]
"port"

[HKLM\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates]
"2796BAE63F1801E277261BA0D77770028F20EEE4"

The process utt501D.tmp.exe:1120 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

The process utt501D.tmp.exe:2972 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKCU\Software\Classes\Local Settings\MuiCache\29\52C64B7E]
"LanguageList" = "en-US, en"

[HKCU\Software\Classes\.btinstall]
"Content Type" = "application/x-bittorrent-appinst"

[HKCU\Software\Classes\Applications\uTorrent.exe\shell\open\command]
"(Default)" = "C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\uTorrent.exe %1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"AutoDetect" = "1"

[HKCR\MIME\Database\Content Type\application/x-bittorrent-app]
"Extension" = ".btapp"

[HKCU\Software\Classes\Magnet]
"(Default)" = "Magnet URI"

[HKCU\Software\Classes\.btinstall]
"(Default)" = "uTorrent"

[HKCU\Software\Classes\bittorrent]
"URL Protocol" = ""

[HKCU\Software\BitTorrent\uTorrent]
"OfferProvider" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History]
"CachePrefix" = "Visited:"

[HKCU\Software\Classes\Magnet]
"URL Protocol" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f3-c8-bd]
"WpadDecisionReason" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\uTorrent]
"MajorVersion" = "3"
"DisplayVersion" = "3.4.2.37754"

[HKCR\MIME\Database\Content Type\application/x-bittorrent-appinst]
"Extension" = ".btinstall"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer]
"GlobalAssocChangedCounter" = "39"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9C99CCBB-10A0-4B2A-A5BE-4CAC43F74632}]
"WpadNetworkName" = "Network 3"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDetectedUrl" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\uTorrent]
"VersionMinor" = "4"

[HKCU\Software\Classes\Magnet\shell\open\command]
"(Default)" = "C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\uTorrent.exe %1"

[HKCU\Software\Classes\bittorrent]
"(Default)" = "bittorrent URI"

[HKCU\Software\Classes\.btsearch]
"(Default)" = "uTorrent"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionTime" = "9F DC A8 9D 98 3B D0 01"

[HKCU\Software\Classes\Magnet\DefaultIcon]
"(Default)" = "C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\maindoc.ico"

[HKCU\Software\Classes\MIME\Database\Content Type\application/x-bittorrent-app]
"Extension" = ".btapp"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9C99CCBB-10A0-4B2A-A5BE-4CAC43F74632}]
"WpadDecision" = "0"

[HKCU\Software\Classes\MIME\Database\Content Type\application/x-bittorrent-key]
"Extension" = ".btkey"

[HKCU\Software\Classes\uTorrent\DefaultIcon]
"(Default)" = "C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\maindoc.ico"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content]
"CachePrefix" = ""

[HKCU\Software\Classes\uTorrent\Content Type]
"(Default)" = "application/x-bittorrent"

[HKCU\Software\Classes\Magnet]
"Content Type" = "application/x-magnet"

[HKCU\Software\Classes\.btkey]
"(Default)" = "uTorrent"

[HKCU\Software\BitTorrent\uTorrent]
"OfferViaCAU" = "0"

[HKCU\Software\Classes\MIME\Database\Content Type\application/x-bittorrent]
"Extension" = ".torrent"

[HKCU\Software\BitTorrent\uTorrent]
"Revision" = "37754"

[HKCR\MIME\Database\Content Type\application/x-bittorrent-skin]
"Extension" = ".btskin"

[HKCU\Software\Classes\Magnet\shell]
"(Default)" = "open"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9C99CCBB-10A0-4B2A-A5BE-4CAC43F74632}]
"WpadDecisionReason" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f3-c8-bd]
"WpadDecisionTime" = "81 8B 30 96 98 3B D0 01"

[HKCU\Software\Classes\.btapp]
"Content Type" = "application/x-bittorrent-app"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\uTorrent]
"DisplayIcon" = "%Program Files% (x86)\uTorrent\uTorrent.exe,0"

[HKCU\Software\Classes\MIME\Database\Content Type\application/x-bittorrent-appinst]
"Extension" = ".btinstall"

[HKCU\Software\Classes\.torrent]
"(Default)" = "uTorrent"

[HKCU\Software\Classes\bittorrent\DefaultIcon]
"(Default)" = "C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\maindoc.ico"

[HKCU\Software\Classes\MIME\Database\Content Type\application/x-bittorrentsearchdescription xml]
"Extension" = ".btsearch"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\uTorrent]
"DisplayName" = "Ã‚ÂµTorrent"
"VersionMajor" = "3"

[HKCU\Software\Classes\.btskin]
"Content Type" = "application/x-bittorrent-skin"

[HKCU\Software\Classes\MIME\Database\Content Type\application/x-bittorrent-skin]
"Extension" = ".btskin"

[HKCU\Software\BitTorrent]
"computerid" = "29 E7 96 5A B9 55 5F 22 BC 12 BA 52 DB 28 82 37"

[HKCU\Software\Classes\.torrent]
"Content Type" = "application/x-bittorrent"

[HKCR\MIME\Database\Content Type\application/x-bittorrent-key]
"Extension" = ".btkey"

[HKCU\Software\Classes\uTorrent\shell]
"(Default)" = "open"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "46 00 00 00 47 00 00 00 09 00 00 00 00 00 00 00"

[HKCU\Software\Classes\.btsearch\OpenWithProgids]
"uTorrent" = ""

[HKCU\Software\Classes\bittorrent]
"Content Type" = "application/x-bittorrent-protocol"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\uTorrent]
"MinorVersion" = "4"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f3-c8-bd]
"WpadDecision" = "0"

[HKCU\Software\Classes\.torrent\OpenWithProgids]
"uTorrent" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies]
"CachePrefix" = "Cookie:"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\uTorrent]
"InstallLocation" = "%Program Files% (x86)\uTorrent"
"NoRepair" = "1"

[HKCU\Software\Classes\bittorrent\shell]
"(Default)" = "open"

[HKCU\Software\Classes\.btsearch]
"Content Type" = "application/x-bittorrentsearchdescription xml"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\uTorrent]
"NoModify" = "1"
"URLInfoAbout" = "http://www.utorrent.com"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionReason" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\uTorrent]
"UninstallString" = "%Program Files% (x86)\uTorrent\uTorrent.exe /UNINSTALL"
"Publisher" = "BitTorrent Inc."

[HKCU\Software\Classes\Applications\uTorrent.exe\shell]
"(Default)" = "open"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9C99CCBB-10A0-4B2A-A5BE-4CAC43F74632}]
"WpadDecisionTime" = "81 8B 30 96 98 3B D0 01"

[HKCU\Software\Classes\.btskin]
"(Default)" = "uTorrent"

[HKCU\Software\Classes\uTorrent\shell\open\command]
"(Default)" = "C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\uTorrent.exe %1"

[HKCU\Software\BitTorrent\uTorrent]
"OfferName" = ""

[HKCU\Software\Classes\bittorrent\shell\open\command]
"(Default)" = "C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\uTorrent.exe %1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecision" = "0"

[HKCU\Software\Classes\.btapp]
"(Default)" = "uTorrent"

[HKCU\Software\BitTorrent\uTorrent]
"OfferAccepted" = "0"

[HKCU\Software\Classes\.btkey]
"Content Type" = "application/x-bittorrent-key"

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

To automatically run itself each time Windows is booted, the Trojan adds the following link to its file to the system registry autorun key:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Run]
"uTorrent" = "C:\Users\"%CurrentUserName%"\AppData\Local\Temp\utt501D.tmp.exe /MINIMIZED"

The Trojan deletes the following registry key(s):

[HKCU\Software\Classes\.torrent\OpenWithProgids]
[HKCR\.torrent\OpenWithProgIDs]
[HKCU\Software\Classes\.btsearch\OpenWithProgids]
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\uTorrent]

The Trojan deletes the following value(s) in system registry:

Dropped PE files

MD5	File path
858af4eacefc93bca142e303fda4ff08	c:\Program Files (x86)\Common Files\Skype\Skype4COM.dll
46b8396ff47c12dac2f34c0ed86bfda2	c:\Program Files (x86)\Skype\Browser\SkypeBrowserHost.exe
46f13dd0d5ce30292b9017ce61de8866	c:\Program Files (x86)\Skype\Phone\RtmCodecs.dll
a32029cb01ff6759c7e7a0c06881e4e2	c:\Program Files (x86)\Skype\Phone\RtmMediaManager.dll
4b437109913f71ada74f63d0f15f5082	c:\Program Files (x86)\Skype\Phone\RtmPal.dll
fd030c57a83e4286d830cb2a466eb6e7	c:\Program Files (x86)\Skype\Phone\RtmPltfm.dll
7d6e1809c844b1d2aa02b6dcf1950084	c:\Program Files (x86)\Skype\Phone\Skype.exe
dde51467cb93f6415cc7df4988fdfaa0	c:\Program Files (x86)\Skype\Updater\Updater.dll
a9c057a9463c25490cf99ea8df8a4b35	c:\Program Files (x86)\Skype\Updater\Updater.exe
51eb2e82672b3c17fd16338307f1cf5f	c:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\SkypeSetupFull[1].exe
e62ca8a3edc38dce5d93588599abc222	c:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\YandexSearch[1].exe
e62ca8a3edc38dce5d93588599abc222	c:\Users\"%CurrentUserName%"\AppData\Local\Temp\7F4987FB1A6E43d69E3E94B29EB75926\YandexSearch.exe
9e7e65d9fed7ce4684c708366ff8d4b1	c:\Users\"%CurrentUserName%"\AppData\Local\Temp\sender.exe
8e461cd7ff046263ac7d56c615436480	c:\Users\"%CurrentUserName%"\AppData\Local\Temp\utt501D.tmp.exe
7a9bf84ae6f5793548177fb6998ce922	c:\Users\"%CurrentUserName%"\AppData\Local\Temp\utt7436.tmp
7ba737b4050ff77a859a9e5b494261b0	c:\Users\"%CurrentUserName%"\AppData\Local\Yandex\yapin\Yandex.exe
a7de5b7d6efefa7474b0f99c054f60b2	c:\Users\"%CurrentUserName%"\AppData\Roaming\OpenCandy\OpenCandy_FAF9D0CB233142BC9B2A763734709B2E\du73i.exe
7d92f9cf0e121e7fb72da522f7fcd6cb	c:\Users\"%CurrentUserName%"\AppData\Roaming\OpenCandy\OpenCandy_FAF9D0CB233142BC9B2A763734709B2E\syesubc3_p2v3.exe
8e461cd7ff046263ac7d56c615436480	c:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\uTorrent.exe
8e461cd7ff046263ac7d56c615436480	c:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\updates\3.4.2_37754.exe
00b0ace97eaa8a8f1cc1867e49b1fe74	c:\Windows\Installer\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}\SkypeIcon.exe
fd5cabbe52272bd76007b68186ebaf00	c:\Windows\SysWOW64\msvcp120.dll
034ccadc1c073e4216e9466b720f9849	c:\Windows\SysWOW64\msvcr120.dll
69837e50c50561a083a72a5f8ea1f6a2	c:\Windows\SysWOW64\vccorlib120.dll
fd5cabbe52272bd76007b68186ebaf00	c:\Windows\System32\msvcp120.dll
034ccadc1c073e4216e9466b720f9849	c:\Windows\System32\msvcr120.dll
69837e50c50561a083a72a5f8ea1f6a2	c:\Windows\System32\vccorlib120.dll

HOSTS file anomalies

No changes have been detected.

Rootkit activity

No anomalies have been detected.

Propagation

VersionInfo

Company Name: BitTorrent, Inc.
Product Name: HD Player
Product Version: 3.1.0.26616
Legal Copyright: (c)2011 BitTorrent, Inc. All Rights Reserved.
Legal Trademarks:
Original Filename: uTorrent.exe
Internal Name: uTorrent.exe
File Version: 3.1.0.26616
File Description:
Comments:
Language: Language Neutral

PE Sections

Name	Virtual Address	Virtual Size	Raw Size	Entropy	Section MD5
UPX0	4096	1331200	0	0	d41d8cd98f00b204e9800998ecf8427e
UPX1	1335296	618496	618496	5.54488	931270048f28a7effddfbd117303ee4b
.rsrc	1953792	110592	110592	1.83393	120f8c7f948397b1fbe2ee01b13a9e52

Dropped from:

Downloaded by:

Similar by SSDeep:

Similar by Lavasoft Polymorphic Checker:

Total found: 1
f7ffbc0d7a555b3dfa5556968206d8ae

URLs

URL	IP
hxxp://update.utorrent.com/installstats.php?v=102852600&h=uVVfIm5t2vDPyT6P&w=1DB10106&bu=0&pr=0&cmp=0&tbexists&tbe=0&cd=0&view=win32	67.215.246.203
hxxp://update.utorrent.com/installoffer.php?h=uVVfIm5t2vDPyT6P&v=102852600&w=1DB10106&l=en&c=US&w64=1&db=iexplore.exe&cl=uTorrent&svp=4	67.215.246.203
hxxp://bittorrent.vo.llnwd.net/offers/LowTempRec_InstallPath.bmp
hxxp://update.utorrent.com/installstats.php?v=102852600&h=uVVfIm5t2vDPyT6P&w=1DB10106&bu=0&pr=0&cmp=0&showwarning&view=win32	67.215.246.203
hxxp://update.utorrent.com/installstats.php?v=102852600&h=uVVfIm5t2vDPyT6P&w=1DB10106&bu=0&pr=0&cmp=0&showinstall&view=win32	67.215.246.203
hxxp://bittorrent.vo.llnwd.net/utorrent-onboarding/welcome.btapp
hxxp://bittorrent.vo.llnwd.net/utorrent-onboarding/plus.btapp
hxxp://update.utorrent.com/installstats.php?v=102852600&h=uVVfIm5t2vDPyT6P&w=1DB10106&bu=1&pr=0&cmp=0&torrent_offer&&toroffer=1&view=win32	67.215.246.203
hxxp://bittorrent.vo.llnwd.net/utorrent-onboarding/player.btapp
hxxp://update.utorrent.com/installstats.php?v=102852600&h=uVVfIm5t2vDPyT6P&w=1DB10106&bu=1&pr=0&cmp=0&installresult&installresult=30079&exit=1374&view=win32	67.215.246.203
hxxp://bittorrent.vo.llnwd.net/featuredcontent/featuredcontent.btapp
hxxp://bittorrent.vo.llnwd.net/utorrent-onboarding/welcome.btapp?h=uVVfIsRBsnvPyT6P&v=102852600&ol=en&ul=&tk=main&c=uTorrent
hxxp://bittorrent.vo.llnwd.net/utorrent-onboarding/player.btapp?h=uVVfIsRBsnvPyT6P&v=102852600&ol=en&ul=&tk=main&c=uTorrent
hxxp://bittorrent.vo.llnwd.net/discoverContent/discoverContent.btapp?h=uVVfIsRBsnvPyT6P&v=102852600&ol=en&ul=&tk=main&c=uTorrent
hxxp://bittorrent.vo.llnwd.net/sites/default/files/bittorrent2_favicon.ico
hxxp://bittorrent.vo.llnwd.net/utorrent-onboarding/plus.btapp?h=uVVfIsRBsnvPyT6P&v=102852600&ol=en&ul=&tk=main&c=uTorrent
hxxp://update.utorrent.com/checkupdate.php?v=102852600&i=64&l=en&svp=4&svn_revno=26616&tk=main&sids=0,0,0,0,0&lv=0_0_&c=US&w=1DB10106&t=3&h=uVVfIsRBsnvPyT6P&mts=31&nat_state=255&sctl=1&shdi=1&at=-1&def_tor=1&w64=1&ie=9.10.9200.16521&hn=1&xim=3&xrsb=3&view=win32&plus=3&dul=5368709120&ssb=67&utpmtu=2,512&memstats=14897152,14&polena=0&peerpol_U=0,0	67.215.246.203
hxxp://com-utorrent-prod-bench-290894750.us-east-1.elb.amazonaws.com/track/?data=eyJldmVudCI6ICJBcHBJbnN0YWxsSW5pdGlhdGVkIiwgInByb3BlcnRpZXMiOiB7ImRpc3RpbmN0X2lkIjoidVZWZklzUkJzbnZQeVQ2UCIsImgiOiJ1VlZmSXNSQnNudlB5VDZQIiwidiI6IjI2NjE2IiwiYyI6InV0IiwidG9rZW4iOiI5MDc5YmE5ZGRmNWZiM2E5NzE3YTUxMjAyNTE4NjYxMiIsInN2cCI6IjQiLCJ2aWV3Ijoid2luMzIiLCJidWNrZXQiOiJBcHAiLCJhcHBuYW1lIjoiQXBwIn19&ip=1
hxxp://com-utorrent-prod-bench-290894750.us-east-1.elb.amazonaws.com/track/?data=eyJldmVudCI6ICJBcHBJbnN0YWxsZWQiLCAicHJvcGVydGllcyI6IHsiZGlzdGluY3RfaWQiOiJ1VlZmSXNSQnNudlB5VDZQIiwiaCI6InVWVmZJc1JCc252UHlUNlAiLCJ2IjoiMjY2MTYiLCJjIjoidXQiLCJ0b2tlbiI6IjkwNzliYTlkZGY1ZmIzYTk3MTdhNTEyMDI1MTg2NjEyIiwic3ZwIjoiNCIsInZpZXciOiJ3aW4zMiIsImJ1Y2tldCI6IkZlYXR1cmVkIENvbnRlbnQiLCJhcHBuYW1lIjoiRmVhdHVyZWQgQ29udGVudCJ9fQ==&ip=1
hxxp://mininova.org/favicon.ico
hxxp://com-utorrent-prod-bench-290894750.us-east-1.elb.amazonaws.com/track/?data=eyJldmVudCI6ICJBcHBJbnZva2VkIiwgInByb3BlcnRpZXMiOiB7ImRpc3RpbmN0X2lkIjoidVZWZklzUkJzbnZQeVQ2UCIsImgiOiJ1VlZmSXNSQnNudlB5VDZQIiwidiI6IjI2NjE2IiwiYyI6InV0IiwidG9rZW4iOiI5MDc5YmE5ZGRmNWZiM2E5NzE3YTUxMjAyNTE4NjYxMiIsInN2cCI6IjQiLCJ2aWV3Ijoid2luMzIiLCJidWNrZXQiOiJGZWF0dXJlZCBDb250ZW50IiwiYXBwbmFtZSI6IkZlYXR1cmVkIENvbnRlbnQifX0=&ip=1
hxxp://d3abeplup23idj.cloudfront.net/current/index.html
hxxp://bittorrent.vo.llnwd.net/featuredcontent/featuredcontent.btapp?h=uVVfIsRBsnvPyT6P&v=102852600&ol=en&ul=&tk=main&c=uTorrent
hxxp://a1621.g.akamai.net/msdownload/update/v3/static/trustedr/en/disallowedcertstl.cab?72a4d528eea0d9c3
hxxp://a1621.g.akamai.net/msdownload/update/v3/static/trustedr/en/authrootstl.cab?e5b34d45c90ec0e9
hxxp://ocsp.godaddy.com.akadns.net//MEQwQjBAMD4wPDAJBgUrDgMCGgUABBTkIInKBAzXkF0Qh0pel3lfHJ9GPAQU0sSw0pHUTBFxs2HLPaH+3ahq1OMCAxvnFQ==	188.121.36.239
hxxp://ocsp.godaddy.com.akadns.net//MEIwQDA+MDwwOjAJBgUrDgMCGgUABBQdI2+OBkuXH93foRUj4a7lAr4rGwQUOpqFBxBnKLbv9r0FQW4gwZTaD94CAQc=	188.121.36.239
hxxp://e8218.ce.akamaiedge.net/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRIt2RJ89X++hEzqoBeQg8PymQ2UQQUANhaTCXBIuWLMe9tuvPMXynxDWECEDWXMYfzhzoHMn7OWAybfto=
hxxp://e6845.ce.akamaiedge.net/crls/secureca.crl
hxxp://www.public-trust.com/cgi-bin/CRL/2018/cdp.crl	64.18.20.10
hxxp://e8218.ce.akamaiedge.net/MFEwTzBNMEswSTAJBgUrDgMCGgUABBS56bKHAoUD+Oyl+0LhPg9JxyQm4gQUf9Nlp8Ld7LvwMAnzQzn6Aq8zMTMCEG7MeqWnAyAJuM689OlS1JE=
hxxp://e8218.ce.akamaiedge.net/MEQwQjBAMD4wPDAJBgUrDgMCGgUABBSxtDkXkBa3l3lQEfFgudSiPNvt7gQUAPkqw0GRtsnCuD5V8sCXEROgByACAwI6dg==
hxxp://www.public-trust.com/CRL/Omniroot2025.crl	64.18.20.10
hxxp://gs1.wac.v2cdn.net/PublicSureServerSV.crl
hxxp://clients.l.google.com/ocsp/MEkwRzBFMEMwQTAJBgUrDgMCGgUABBTy4Gr5hYodjXCbSRkjeqm1Gih+ZAQUSt0GFhu89mi1dvWBtrtiGrpagS8CCDvOtHeRG3Tt
hxxp://e8218.ce.akamaiedge.net/MFEwTzBNMEswSTAJBgUrDgMCGgUABBQMgSk4dLKWKRB+2DViUmQEUw3ggwQUDURcFlNEwYJ+HSCrJfQBY9i+eaUCECyLOOAjYRltRQP8lkAE25w=
hxxp://clients.l.google.com/ocsp/MEkwRzBFMEMwQTAJBgUrDgMCGgUABBTy4Gr5hYodjXCbSRkjeqm1Gih+ZAQUSt0GFhu89mi1dvWBtrtiGrpagS8CCAaHMqBTgR3n
hxxp://clients.l.google.com/ocsp/MEkwRzBFMEMwQTAJBgUrDgMCGgUABBTy4Gr5hYodjXCbSRkjeqm1Gih+ZAQUSt0GFhu89mi1dvWBtrtiGrpagS8CCCUoyoQiZhRO
hxxp://cs9.wac.edgecastcdn.net/MFEwTzBNMEswSTAJBgUrDgMCGgUABBTfqhLjKLEJQZPin0KCzkdAQpVYowQUsT7DaQP4v0cB1JgmGggC72NkK8MCEATh56TcXPLzbcArQrhdFZ8=
hxxp://a1158.b.akamai.net/MFUwUzBRME8wTTAJBgUrDgMCGgUABBS856ddZAq5lE7vDJmoUDW1u98SMAQU3WyAfLq1MhelhEFA8NIEZhMvqZACFH3grgP85kRknyWy3HvBBgwssPUi
hxxp://e6845.ce.akamaiedge.net/ThawtePremiumServerCA.crl
hxxp://clients.l.google.com/ocsp/MEkwRzBFMEMwQTAJBgUrDgMCGgUABBTy4Gr5hYodjXCbSRkjeqm1Gih+ZAQUSt0GFhu89mi1dvWBtrtiGrpagS8CCG+vFYDQCqlf
hxxp://bittorrent.vo.llnwd.net/langpacks/langpack-3227801ut.win.zip
hxxp://bittorrent.vo.llnwd.net/3.4.2/utorrent.37754.stable34-OC_CC217.exe?au=1&hash=4cecde076e1a0d5ae95751f0e5e78ae21b7177d4
hxxp://e8218.ce.akamaiedge.net/MFEwTzBNMEswSTAJBgUrDgMCGgUABBQwF4prw9S7mCbCEHD/yl6nWPkczAQUe1tFz6/Oy3r9MZIaarbzRutXSFACEE1fLDQIskwgzW1QfiRNyew=
hxxp://a1961.g.akamai.net/ncsi.txt
hxxp://e8218.ce.akamaiedge.net/MFEwTzBNMEswSTAJBgUrDgMCGgUABBQxsL2eHTbKwjJcY2gHLbXTx2GdSQQUp6KDuzRFQD381TBPErk+oQGf9tsCECIQyRlmbgM/IEg/eUN97YQ=
hxxp://cs9.wac.edgecastcdn.net/MFEwTzBNMEswSTAJBgUrDgMCGgUABBTPJvUY+sl+j4yzQuAcL2oQno5fCgQUUWj/kK8CB3U8zNllZGKiErhZcjsCEA4+lH/AZNdKUrE413GQiB8=
hxxp://e8218.ce.akamaiedge.net/MFEwTzBNMEswSTAJBgUrDgMCGgUABBS56bKHAoUD+Oyl+0LhPg9JxyQm4gQUf9Nlp8Ld7LvwMAnzQzn6Aq8zMTMCEFIA5aolVvwahu2WydRLM8c=
hxxp://e8218.ce.akamaiedge.net/MFEwTzBNMEswSTAJBgUrDgMCGgUABBTSqZMG5M8TA9rdzkbCnNwuMAd5VgQUz5mp6nsm9EvJjo/X8AUm7+PSp50CEFcywVdOavgo4bT5Ors07Qg=
hxxp://cs9.wac.edgecastcdn.net/MFEwTzBNMEswSTAJBgUrDgMCGgUABBTfqhLjKLEJQZPin0KCzkdAQpVYowQUsT7DaQP4v0cB1JgmGggC72NkK8MCEApfEU0DWxeRF9Lv1AOMPzs=
hxxp://cs9.wac.edgecastcdn.net/MFEwTzBNMEswSTAJBgUrDgMCGgUABBTtSK3dy3sA4g6EKqm0CfGsMDTPlgQUUOpzidsp+xCPnuUBINTeeZlIg/cCEAJwu3i4ZpYdN6xM1SVvBys=
hxxp://a1158.b.akamai.net/MFUwUzBRME8wTTAJBgUrDgMCGgUABBS856ddZAq5lE7vDJmoUDW1u98SMAQU3WyAfLq1MhelhEFA8NIEZhMvqZACFGozgiJkrf5JafrJHx/pwJ6+De+O
hxxp://update.utorrent.com/installoffer.php?h=uVVfIsRBsnvPyT6P&v=109417338&w=1DB10106&l=en&c=US&w64=1&db=iexplore.exe&cl=uTorrent&au=1&tsub=1&svp=4&cmp=217&ocmp=217	67.215.246.203
hxxp://com-utorrent-prod-bench-290894750.us-east-1.elb.amazonaws.com/e?i=21
hxxp://update.utorrent.li/installstats.php?cl=uTorrent&v=109417338&h=uVVfIsRBsnvPyT6P&w=1DB10106&bu=0&pr=26616&cmp=217&ocmp=217&offerretrievedfromserver&pid=2972&cau=1&ServerOfferRetrieved=1&sec_offs=oc&view=win32	82.221.103.245
hxxp://update.utorrent.li/installstats.php?cl=uTorrent&v=109417338&h=uVVfIsRBsnvPyT6P&w=1DB10106&bu=0&pr=26616&cmp=217&ocmp=217&showtbexists&pid=2972&cau=1&tbe=0&cd=0&view=win32	82.221.103.245
hxxp://api.opencandy.com/?clientv=29&cltzone=120&language=en,en&method=get_offers&mstime=0.093&os=WIN6.1SP1-64&product_key=cb00343115ffdf69411419d8a9ceff1a&v=1.0&signature=2ef4f981775d427b661aecadbef1c9ce	162.209.122.21
hxxp://a469.d.akamai.net/templates/7861/0/59317.png
hxxp://update.utorrent.li/installstats.php?cl=uTorrent&v=109417338&h=uVVfIsRBsnvPyT6P&w=1DB10106&bu=0&pr=26616&cmp=217&ocmp=217&mismexecute&pid=2972&cau=1&download=0&execute=0&error=mism execute succeeded&mismreturn=0&mismresult=provider:9,search:1,homepage:1&view=win32	82.221.103.245
hxxp://bittorrent.vo.llnwd.net/offers/spigot-yandex-20140709.bmp
hxxp://update.utorrent.li/updatestats.php?cl=uTorrent&v=109417338&h=uVVfIsRBsnvPyT6P&k=&ip=8&con=31&dl=78&error=&dlurl=http://llsw.download3.utorrent.com/offers/spigot-yandex-20140709.bmp&svp=4&pid=2972&sz=24878&bin=bmp&p1=192.168.139.2&m1=0&p2=192.168.50.10&m2=0&p3=193.138.244.233&m3=1&p4=193.138.244.106&m4=1&p5=46.164.136.181&m5=1&p6=80.91.160.129&m6=9&p7=195.22.214.108&m7=39&p8=89.221.34.75&m8=39&p9=89.221.34.75&m9=39&p10=87.248.216.137&m10=39&p11=69.28.172.105&m11=41&p12=87.248.217.253&m12=39	82.221.103.245
hxxp://a1363.dscg.akamai.net/pki/crl/products/microsoftrootcert.crl
hxxp://a1363.dscg.akamai.net/pki/crl/products/WinPCA.crl
hxxp://a1363.dscg.akamai.net/pki/crl/products/MicrosoftTimeStampPCA.crl
hxxp://www.mybrowserbar.com/images/pixel.gif?yxds=1&yxhp=1&yxov=1&cnid=435371	174.36.215.20
hxxp://hostedocsp.globalsign.com/MFQwUjBQME4wTDAJBgUrDgMCGgUABBQmECJms4f7i5EbxtN7NbzQCBwAdAQUUa8kJpz0aCJXgCYrO0ZiFXsezKUCE1oAAHevvgBk+xJc0C0AAQAAd68=
hxxp://update.utorrent.li/installstats.php?cl=uTorrent&v=109417338&h=uVVfIsRBsnvPyT6P&w=1DB10106&bu=0&pr=26616&cmp=217&ocmp=217&offerapicurrentoffer&pid=2972&cau=1&OfferProvider=OpenCandy&Offer=NotProvided&Accepted=1&view=win32	82.221.103.245
hxxp://update.utorrent.li/installstats.php?cl=uTorrent&v=109417338&h=uVVfIsRBsnvPyT6P&w=1DB10106&bu=0&pr=26616&cmp=217&ocmp=217&showtorrentoffer&pid=2972&cau=1&toroffer=0&torofferid=&view=win32	82.221.103.245
hxxp://api.opencandy.com/?accepted_ind=1&clientv=29&max=1&method=track_offer_result&mstime=56.519&offer_id=7861&offer_shown_secs=0&opt_shown_count=0&product_key=cb00343115ffdf69411419d8a9ceff1a&ready=1&session_key=20bcba5375d77d545a33b67dd4cffcac&skipped_offer_ids=&v=1.0&signature=e0babf7f70951361d14271ecc28d37a6	162.209.122.21
hxxp://update.utorrent.li/installstats.php?cl=uTorrent&v=109417338&h=uVVfIsRBsnvPyT6P&w=1DB10106&bu=0&pr=26616&cmp=217&ocmp=217&wizardcomplete&pid=2972&cau=1&view=win32	82.221.103.245
hxxp://update.utorrent.li/installstats.php?cl=uTorrent&v=109417338&h=uVVfIsRBsnvPyT6P&w=1DB10106&bu=0&pr=26616&cmp=217&ocmp=217&gettbofferresult&pid=2972&cau=1&tbofferresult=3&exit=1375&cbtoolbar=1&cbhomepage=1&tb=spigot-yandex&view=win32	82.221.103.245
hxxp://a469.d.akamai.net/p/1217/dc/du73i.exe
hxxp://api.opencandy.com/?clientv=29&method=track_product_installed&mstime=56.534&product_key=cb00343115ffdf69411419d8a9ceff1a&session_key=20bcba5375d77d545a33b67dd4cffcac&v=1.0&signature=8e7639490d4e8c53036c7a002c2c83d0	162.209.122.21
hxxp://d2adxpv8ev13tq.cloudfront.net/pro/utorrent/index.html
hxxp://d3abeplup23idj.cloudfront.net/onboarding/utorrent?url=http://bundles.bittorrent.com/
hxxp://api.opencandy.com/?clientv=29&method=track_offer_downloaded&mstime=57.112&offer_downloaded_secs=0.000&offer_id=7861&package_md5=a7de5b7d6efefa7474b0f99c054f60b2&product_key=cb00343115ffdf69411419d8a9ceff1a&session_key=20bcba5375d77d545a33b67dd4cffcac&v=1.0&signature=7ac9bab2171992149cfd1701d6529bd9	162.209.122.21
hxxp://bittorrent.vo.llnwd.net/utorrent-onboarding/welcome-upsell.btapp
hxxp://a469.d.akamai.net/p/883/ius/syesubc3_p2v3.exe
hxxp://api.opencandy.com/?clientv=29&method=track_offer_installed&mstime=57.564&offer_id=7861&product_key=cb00343115ffdf69411419d8a9ceff1a&session_key=20bcba5375d77d545a33b67dd4cffcac&v=1.0&signature=4d214a3f235afce893a978d15ec894dd	162.209.122.21
hxxp://update.utorrent.li/installstats.php?cl=uTorrent&v=109417338&h=uVVfIsRBsnvPyT6P&w=1DB10106&bu=0&pr=26616&cmp=217&ocmp=217&installresult&pid=2972&cau=1&installresult=0&exit=1&au=0&view=win32	82.221.103.245
hxxp://bittorrent.vo.llnwd.net/offers/spigot-yandex-en-20140708.exe
hxxp://api.opencandy.com/?clientv=53&inst_id=&method=track_encapsulated_offer_downloaded&mstime=0.328&offer_downloaded_secs=0.000&offer_id=7861&package_md5=7d92f9cf0e121e7fb72da522f7fcd6cb&product_key=cb00343115ffdf69411419d8a9ceff1a&session_key=20bcba5375d77d545a33b67dd4cffcac&sswnt=&tm=2015-01-29 07:53:50.912&v=1.0&signature=bf23998977e1918159e90da64f83a069	162.209.122.21
hxxp://www.skype.akadns.net/go/getskype-trackable550
hxxp://cdn.yandex.net/yandex-pack/downloader/info.rss
hxxp://update.utorrent.li/updatestats.php?cl=uTorrent&v=109417338&h=uVVfIsRBsnvPyT6P&k=&ip=8&con=31&dl=203&error=&dlurl=http://llsw.download3.utorrent.com/offers/spigot-yandex-en-20140708.exe&svp=4&pid=2972&sz=157480&bin=toolbar&p1=192.168.139.2&m1=0&p2=192.168.50.10&m2=0&p3=193.138.244.233&m3=0&p4=193.138.244.106&m4=1&p5=46.164.136.181&m5=1&p6=80.91.160.129&m6=9&p7=195.22.214.108&m7=37&p8=89.221.34.75&m8=38&p9=89.221.34.181&m9=40&p10=87.248.216.137&m10=38&p11=87.248.217.254&m11=38	82.221.103.245
hxxp://cache-kiev04.cdn.yandex.net/downloader.yandex.net/yandex-pack/downloader/info.rss	141.8.174.89
hxxp://cdn.yandex.net/yandex-pack/spigot-62/YandexSearch.exe
hxxp://cache-kiev04.cdn.yandex.net/downloader.yandex.net/yandex-pack/spigot-62/YandexSearch.exe	141.8.174.89
hxxp://a1306.cl.akamai.net/0dce4e856bdf8239787df5c367298d54/partner/trackable/550/SkypeSetupFull.exe
hxxp://e8218.ce.akamaiedge.net/MFEwTzBNMEswSTAJBgUrDgMCGgUABBTSqZMG5M8TA9rdzkbCnNwuMAd5VgQUz5mp6nsm9EvJjo/X8AUm7+PSp50CEDZn4Vi1JMj/v+U4FyeG8eI=
hxxp://mdata.yandex.ru/status.xml?clid=2154477&uuid={38F8EDE5-D9EB-46FB-8442-4F4D9BE9B350}&vnt=6.1x64&top=2.0&file-no=45 25 6 15 111 129 121 42 41 43 40 89 17 18 12 11 13 10 21 24 22 20 104 123 124 125 102
hxxp://clck.yandex.ru/click/dtype=stred/pid=12/cid=72435/path=dwnldr/p=spigot-62/cnt=0/dt=0/ct=1/rt=5/*	93.158.134.14
hxxp://update.utorrent.li/installstats.php?cl=uTorrent&v=109417338&h=uVVfIsRBsnvPyT6P&w=1DB10106&bu=0&pr=26616&cmp=217&ocmp=217&gettbinstallresult&pid=2972&cau=1&tbinstallresult=3&cbtoolbar=1&cbhomepage=1&error=0&msg=&tb=spigot-yandex&url=http://llsw.download3.utorrent.com/offers/spigot-yandex-en-20140708.exe&prog=100&t=&view=win32	82.221.103.245
hxxp://bittorrent.vo.llnwd.net/discoverContent/discoverContent.btapp?h=uVVfIsRBsnvPyT6P&v=109417338&ol=en&ul=&tk=stable34&c=uTorrent
hxxp://bittorrent.vo.llnwd.net/utorrent-onboarding/player.btapp?h=uVVfIsRBsnvPyT6P&v=109417338&ol=en&ul=&tk=stable34&c=uTorrent
hxxp://bittorrent.vo.llnwd.net/utorrent-onboarding/welcome-upsell.btapp?h=uVVfIsRBsnvPyT6P&v=109417338&ol=en&ul=&tk=stable34&c=uTorrent
hxxp://bittorrent.vo.llnwd.net/utorrent-onboarding/welcome.btapp?h=uVVfIsRBsnvPyT6P&v=109417338&ol=en&ul=&tk=stable34&c=uTorrent
hxxp://bittorrent.vo.llnwd.net/featuredcontent/featuredcontent.btapp?h=uVVfIsRBsnvPyT6P&v=109417338&ol=en&ul=&tk=stable34&c=uTorrent
hxxp://utorrent.com/download/langpacks/dl.php?build=37754&ref=client&client=utorrent&sys_l=en&sel_l=-1&tk=stable34	98.143.146.7
hxxp://com-utorrent-prod-bench-290894750.us-east-1.elb.amazonaws.com/e?i=32
hxxp://bittorrent.vo.llnwd.net/favicon.ico
hxxp://com-utorrent-prod-bench-290894750.us-east-1.elb.amazonaws.com/e?i=29
hxxp://update.bittorrent.com/time.php	67.215.246.204
hxxp://com-utorrent-prod-bench-290894750.us-east-1.elb.amazonaws.com/e?i=38
hxxp://bittorrent.vo.llnwd.net/network/index.html?adt=5&browser=ie&clientdata=utorrent\|3.4.2.37754\|217&page=torrent&site=33049
hxxp://bittorrent.vo.llnwd.net/network/index.html?adt=1224&browser=ie&clientdata=utorrent\|3.4.2.37754\|217&page=torrent&site=33049
hxxp://bittorrent.vo.llnwd.net/network/assets/base64.js
hxxp://bittorrent.vo.llnwd.net/network/assets/jquery-1.11.2.js
hxxp://bittorrent.vo.llnwd.net/network/assets/bench.js
hxxp://d2eri39gz1mfk5.cloudfront.net/control/tags/ut.json	54.230.200.39
hxxp://d145enxyh9g9og.cloudfront.net/control/feature/tags/ut.json
hxxp://bittorrent.hs.llnwd.net/download/langpacks/dl.php?build=37754&ref=client&client=utorrent&sys_l=en&sel_l=-1&tk=stable34
hxxp://static.adzerk.net.cdn.cloudflare.net/ados.js
hxxp://update.utorrent.com/checkupdate.php?s=1&cl=uTorrent&v=109417338&qv=109417338&l=en&svp=4&svn_revno=37754&tk=stable34&cmp=217&ocmp=217&period=7&sids=0,0,0,0,0&lv=0_0_&def_tor_changed=1&c=US&w=1DB10106&t=3&h=uVVfIsRBsnvPyT6P&mts=31&flc=1&ac=3&nat_state=255&it=11&pc=25&sctl=1&shdi=1&xai=1&def_tor=1&w64=1&doainstalled=0&ie=9.10.9200.16521&hn=2&xim=3&insvr=109417338&sss=1&rsb=5&rtsb=11&view=win32&cmp=217&ocmp=217&db=iexplore.exe&plus=3&pupsell=1&secp=OpenCandy&secres=1&seccau=1&adc=1&ch_up=1?fg=4000&t_up=6269&t_down=3411966&mt=3755866&ssb=132&ssu=11644473650&xseq=2&cau_time=0	67.215.246.203
hxxp://bittorrent.hs.llnwd.net/scripts/dl.php?build=37754&ref=client&client=utorrent&sys_l=en&sel_l=-1&tk=stable34
hxxp://bittorrent-954311581.us-east-1.elb.amazonaws.com/ados?t=1422518040742&request={"Placements":[{"A":5682,"S":33049,"D":"bt_ap_div","AT":5,"Properties":{"browser":"ie","clientdata":"utorrent\|3.4.2.37754\|217","page":"torrent","flash":"none"}}],"Keywords":"browser%3Die%2C%20clientdata%3Dutorrent%7C3.4.2.37754%7C217%2C%20page%3Dtorrent%2C%20flash%3Dnull","Referrer":"","IsAsync":false}
hxxp://bittorrent-954311581.us-east-1.elb.amazonaws.com/ados?t=1422518040825&request={"Placements":[{"A":5682,"S":33049,"D":"bt_ap_div","AT":1224,"Properties":{"browser":"ie","clientdata":"utorrent\|3.4.2.37754\|217","page":"torrent","flash":"none"}}],"Keywords":"browser%3Die%2C%20clientdata%3Dutorrent%7C3.4.2.37754%7C217%2C%20page%3Dtorrent%2C%20flash%3Dnull","Referrer":"","IsAsync":false}
hxxp://static.adzerk.net.cdn.cloudflare.net/Advertisers/34e5de599eb245f89dc65ea4e8e2c989.jpg
hxxp://d2adxpv8ev13tq.cloudfront.net/images/mobile-icon.png
hxxp://static.adzerk.net.cdn.cloudflare.net/Advertisers/a05ac8e903c14e74befdd8b8426a754e.jpg
hxxp://bittorrent-954311581.us-east-1.elb.amazonaws.com/i.gif?e=eyJhdiI6Mzg1ODIsImF0Ijo1LCJidCI6MCwiY20iOjU3NDczLCJjdCI6ImdhbWluZyIsImNoIjo4Nzg1LCJjciI6NjUyOTU1LCJkaSI6IjNhN2QyZDQyOTlmOTRlNTBiNmQxYWU4MGNhNjBmZmE4IiwiZG0iOjEsImZjIjo2NzM1MzQsImZsIjoyNDc0MDQsImlwIjoiMTkzLjEzOC4yNDQuMjMxIiwia3ciOiJicm93c2VyPWllLGNsaWVudGRhdGE9dXRvcnJlbnR8My40LjIuMzc3NTR8MjE3LHBhZ2U9dG9ycmVudCxmbGFzaD1udWxsIiwibnciOjU2ODIsInBjIjozLjUsInByIjo2MjU1NywicnQiOjYsInN0IjozMzA0OSwidHIiOnRydWUsInVrIjoidWUxLWUzZTlkMzdlNDg3ZjRmOTM4NjUyOTIzMTBjN2Q3MWRlIiwidHMiOjE0MjI1MTgwNDExNDgsImJmIjp0cnVlLCJmcSI6MX0&s=4ZvSTpnHDsqWQeRzN5_dwzXEF24
hxxp://com-utorrent-staging-bench-1119534433.us-east-1.elb.amazonaws.c/e?i=1005&e=eyJldmVudE5hbWUiOiJhcC5hZHRhZyIsImFjdGlvbiI6ImxvYWRlZCIsImFkdCI6IjUiLCJicm93c2VyIjoiaWUiLCJjbGllbnRkYXRhIjoidXRvcnJlbnQlN2MzJTJlNCUyZTIlMmUzNzc1NCU3YzIxNyIsInBhZ2UiOiJ0b3JyZW50Iiwic2l0ZSI6IjMzMDQ5In0=&callback=jQuery1112030972456739033316_1422518040734&_=1422518040735
hxxp://com-utorrent-staging-bench-1119534433.us-east-1.elb.amazonaws.c/e?i=1005&e=eyJldmVudE5hbWUiOiJhcC5hZHRhZyIsImFjdGlvbiI6ImxvYWRlZCIsImFkdCI6IjEyMjQiLCJicm93c2VyIjoiaWUiLCJjbGllbnRkYXRhIjoidXRvcnJlbnQlN2MzJTJlNCUyZTIlMmUzNzc1NCU3YzIxNyIsInBhZ2UiOiJ0b3JyZW50Iiwic2l0ZSI6IjMzMDQ5In0=&callback=jQuery111206608094501731674_1422518040820&_=1422518040821
hxxp://ui.skype.akadns.net/ui/0/7.1.0.105.550/en/getnewestversion?defaultbrowser=ie
hxxp://a1363.dscg.akamai.net/pki/crl/products/MicCodSigPCA_08-31-2010.crl
hxxp://e8218.ce.akamaiedge.net/MFEwTzBNMEswSTAJBgUrDgMCGgUABBTSqZMG5M8TA9rdzkbCnNwuMAd5VgQUz5mp6nsm9EvJjo/X8AUm7+PSp50CECAKfRxMDvODER0cHOAslgg=
hxxp://api.opencandy.com/?clientv=53&inst_id=&method=track_encapsulated_offer_installed&mstime=17.129&offer_id=7861&product_key=cb00343115ffdf69411419d8a9ceff1a&session_key=20bcba5375d77d545a33b67dd4cffcac&tm=2015-01-29 07:54:07.604&v=1.0&signature=07ef4bf0998e39efe6f0dfe0e701086a	162.209.122.21
hxxp://ui.skype.akadns.net/ui/0/7.1.0.105.550/en/installed
hxxp://cs1.wpc.v0cdn.net/pki/mscorp/crl/mswww(6).crl
hxxp://cs1.wpc.v0cdn.net/pki/mscorp/crl/MSIT Machine Auth CA 2(1).crl
hxxp://e8218.ce.akamaiedge.net/MEQwQjBAMD4wPDAJBgUrDgMCGgUABBSxtDkXkBa3l3lQEfFgudSiPNvt7gQUAPkqw0GRtsnCuD5V8sCXEROgByACAwI20A==
hxxp://e8218.ce.akamaiedge.net/MEQwQjBAMD4wPDAJBgUrDgMCGgUABBQ/m36Fj2BE19VBYXRO62zrgIYp0gQUQnlUG2HNVSs+Y9U8SFf1n/tFzkoCAwLVNg==
hxxp://bittorrent.vo.llnwd.net/network/index-edge.html?tag=ant&adt=5&browser=ie&clientdata=utorrent\|3.4.2.37754\|217&page=torrent&site=33049
hxxp://bittorrent.vo.llnwd.net/network/index-edge.html?tag=ant&adt=1224&browser=ie&clientdata=utorrent\|3.4.2.37754\|217&page=torrent&site=33049
hxxp://bittorrent.vo.llnwd.net/network/base64.js
hxxp://bittorrent.vo.llnwd.net/network/jquery-1.11.1.min.js
hxxp://clients.l.google.com/analytics.js
hxxp://clients.l.google.com/r/collect?v=1&_v=j32&a=1298203212&t=pageview&_s=1&dl=http://cdn.bitmedianetwork.com/network/index-edge.html?tag=ant&adt=5&browser=ie&clientdata=utorrent%7c3%2e4%2e2%2e37754%7c217&page=torrent&site=33049&ul=en-us&de=windows-1252&sd=24-bit&sr=1716x901&vp=300x250&je=1&_u=MEAAAEQAI~&jid=209490301&cid=281852828.1422518160&tid=UA-54512734-1&_r=1&z=1554186047
hxxp://clients.l.google.com/collect?v=1&_v=j32&a=193293625&t=pageview&_s=1&dl=http://cdn.bitmedianetwork.com/network/index-edge.html?tag=ant&adt=1224&browser=ie&clientdata=utorrent%7c3%2e4%2e2%2e37754%7c217&page=torrent&site=33049&ul=en-us&de=windows-1252&sd=24-bit&sr=1716x901&vp=908x34&je=1&_u=MACAAEQAI~&jid=&cid=281852828.1422518160&tid=UA-54512734-1&z=723704758
hxxp://bittorrent-954311581.us-east-1.elb.amazonaws.com/ados?t=1422518160374&request={"Placements":[{"A":5682,"S":33049,"D":"bt_ap_div","AT":5,"Properties":{"tag":"ant","browser":"ie","clientdata":"utorrent\|3.4.2.37754\|217","page":"torrent","flash":"none"}}],"Keywords":"tag%3Dant%2C%20browser%3Die%2C%20clientdata%3Dutorrent%7C3.4.2.37754%7C217%2C%20page%3Dtorrent%2C%20flash%3Dnull","Referrer":"","IsAsync":false}
hxxp://bittorrent-954311581.us-east-1.elb.amazonaws.com/ados?t=1422518160394&request={"Placements":[{"A":5682,"S":33049,"D":"bt_ap_div","AT":1224,"Properties":{"tag":"ant","browser":"ie","clientdata":"utorrent\|3.4.2.37754\|217","page":"torrent","flash":"none"}}],"Keywords":"tag%3Dant%2C%20browser%3Die%2C%20clientdata%3Dutorrent%7C3.4.2.37754%7C217%2C%20page%3Dtorrent%2C%20flash%3Dnull","Referrer":"","IsAsync":false}
hxxp://bittorrent-954311581.us-east-1.elb.amazonaws.com/i.gif?e=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&s=o44H8CGPE4orm3qHj4UiOpBehNA
hxxp://bittorrent-954311581.us-east-1.elb.amazonaws.com/i.gif?e=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&s=EaoFTV_2sr7NxncVCs9bZJtyhJs
hxxp://com-utorrent-prod-bench-290894750.us-east-1.elb.amazonaws.com/e?i=1005&e=eyJldmVudE5hbWUiOiJhcC5hZHRhZyIsImFjdGlvbiI6ImxvYWRlZCIsInRhZyI6ImFudCIsImFkdCI6IjEyMjQiLCJicm93c2VyIjoiaWUiLCJjbGllbnRkYXRhIjoidXRvcnJlbnQlN2MzJTJlNCUyZTIlMmUzNzc1NCU3YzIxNyIsInBhZ2UiOiJ0b3JyZW50Iiwic2l0ZSI6IjMzMDQ5In0=&callback=jQuery1111011064228616044735_1422518160387&_=1422518160388
hxxp://com-utorrent-prod-bench-290894750.us-east-1.elb.amazonaws.com/e?i=1005&e=eyJldmVudE5hbWUiOiJhcC5hZHRhZyIsImFjdGlvbiI6ImxvYWRlZCIsInRhZyI6ImFudCIsImFkdCI6IjUiLCJicm93c2VyIjoiaWUiLCJjbGllbnRkYXRhIjoidXRvcnJlbnQlN2MzJTJlNCUyZTIlMmUzNzc1NCU3YzIxNyIsInBhZ2UiOiJ0b3JyZW50Iiwic2l0ZSI6IjMzMDQ5In0=&callback=jQuery1111028903432009117824_1422518160328&_=1422518160329
hxxp://static.adzerk.net.cdn.cloudflare.net/Advertisers/e68bceb105fd4a3d832d7a1ff6cec13a.jpg
hxxp://e8218.ce.akamaiedge.net/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRIt2RJ89X++hEzqoBeQg8PymQ2UQQUANhaTCXBIuWLMe9tuvPMXynxDWECEGVSJuGyLhjhWQ8phawi51w=
hxxp://e8218.ce.akamaiedge.net/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSpuCE3aK3GivZPzGQJ6L5BRyZofwQUl9BrqCZwyKE/lB8ILcQ1m6ShHvICEAxNF3PJUX7iAOhAP2oGxcI=
hxxp://e6845.ce.akamaiedge.net/pca3.crl
hxxp://e8218.ce.akamaiedge.net/MFEwTzBNMEswSTAJBgUrDgMCGgUABBQ/xkCfyHfJr7GQ6M658NRZ4SHo/AQUCPVR6Pv+PT1kNnxoz1t4qN+5xTcCEGC2x6sSmevembHfY1acIZk=
hxxp://e8218.ce.akamaiedge.net/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSpuCE3aK3GivZPzGQJ6L5BRyZofwQUl9BrqCZwyKE/lB8ILcQ1m6ShHvICEGwkCSV07gf3g5QOsqmf+MY=
hxxp://e8218.ce.akamaiedge.net/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSpuCE3aK3GivZPzGQJ6L5BRyZofwQUl9BrqCZwyKE/lB8ILcQ1m6ShHvICEEES5jLHsYoCmjofrIA6uJ8=
hxxp://static.ap.bittorrent.com/Advertisers/e68bceb105fd4a3d832d7a1ff6cec13a.jpg	104.16.12.8
hxxp://crl.microsoft.com/pki/crl/products/microsoftrootcert.crl	87.245.202.16
hxxp://www.bittorrent.com/sites/default/files/bittorrent2_favicon.ico	87.248.217.253
hxxp://ocsp.verisign.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBTSqZMG5M8TA9rdzkbCnNwuMAd5VgQUz5mp6nsm9EvJjo/X8AUm7+PSp50CEFcywVdOavgo4bT5Ors07Qg=	23.43.139.27
hxxp://apps.bittorrent.com/discoverContent/discoverContent.btapp?h=uVVfIsRBsnvPyT6P&v=109417338&ol=en&ul=&tk=stable34&c=uTorrent	87.248.217.254
hxxp://cdn.bitmedianetwork.com/network/assets/base64.js	87.248.217.253
hxxp://www.bittorrent.com/favicon.ico	87.248.217.253
hxxp://download.skype.com/0dce4e856bdf8239787df5c367298d54/partner/trackable/550/SkypeSetupFull.exe	213.155.152.233
hxxp://cdn.bitmedianetwork.com/network/jquery-1.11.1.min.js	87.248.217.253
hxxp://yogi.apps.bittorrent.com/track/?data=eyJldmVudCI6ICJBcHBJbnN0YWxsZWQiLCAicHJvcGVydGllcyI6IHsiZGlzdGluY3RfaWQiOiJ1VlZmSXNSQnNudlB5VDZQIiwiaCI6InVWVmZJc1JCc252UHlUNlAiLCJ2IjoiMjY2MTYiLCJjIjoidXQiLCJ0b2tlbiI6IjkwNzliYTlkZGY1ZmIzYTk3MTdhNTEyMDI1MTg2NjEyIiwic3ZwIjoiNCIsInZpZXciOiJ3aW4zMiIsImJ1Y2tldCI6IkZlYXR1cmVkIENvbnRlbnQiLCJhcHBuYW1lIjoiRmVhdHVyZWQgQ29udGVudCJ9fQ==&ip=1	50.19.226.113
hxxp://bench.staging.utorrent.com/e?i=1005&e=eyJldmVudE5hbWUiOiJhcC5hZHRhZyIsImFjdGlvbiI6ImxvYWRlZCIsImFkdCI6IjEyMjQiLCJicm93c2VyIjoiaWUiLCJjbGllbnRkYXRhIjoidXRvcnJlbnQlN2MzJTJlNCUyZTIlMmUzNzc1NCU3YzIxNyIsInBhZ2UiOiJ0b3JyZW50Iiwic2l0ZSI6IjMzMDQ5In0=&callback=jQuery111206608094501731674_1422518040820&_=1422518040821	107.22.253.201
hxxp://cdn.bitmedianetwork.com/network/index.html?adt=5&browser=ie&clientdata=utorrent\|3.4.2.37754\|217&page=torrent&site=33049	87.248.217.253
hxxp://www.google-analytics.com/analytics.js	173.194.113.206
hxxp://sd.symcd.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBQMgSk4dLKWKRB+2DViUmQEUw3ggwQUDURcFlNEwYJ+HSCrJfQBY9i+eaUCECyLOOAjYRltRQP8lkAE25w=	23.43.139.27
hxxp://ocsp.verisign.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRIt2RJ89X++hEzqoBeQg8PymQ2UQQUANhaTCXBIuWLMe9tuvPMXynxDWECEGVSJuGyLhjhWQ8phawi51w=	23.43.139.27
hxxp://downloader.yandex.net/yandex-pack/downloader/info.rss	5.45.205.235
hxxp://apps.bittorrent.com/utorrent-onboarding/welcome.btapp?h=uVVfIsRBsnvPyT6P&v=102852600&ol=en&ul=&tk=main&c=uTorrent	87.248.217.254
hxxp://apps.bittorrent.com/featuredcontent/featuredcontent.btapp?h=uVVfIsRBsnvPyT6P&v=102852600&ol=en&ul=&tk=main&c=uTorrent	87.248.217.254
hxxp://vassg141.ocsp.omniroot.com/MFUwUzBRME8wTTAJBgUrDgMCGgUABBS856ddZAq5lE7vDJmoUDW1u98SMAQU3WyAfLq1MhelhEFA8NIEZhMvqZACFGozgiJkrf5JafrJHx/pwJ6+De+O	88.221.132.153
hxxp://cdn.bitmedianetwork.com/network/assets/bench.js	87.248.217.253
hxxp://bench.utorrent.com/e?i=21	54.243.189.241
hxxp://cdn.bitmedianetwork.com/network/assets/jquery-1.11.2.js	87.248.217.253
hxxp://bench.utorrent.com/e?i=29	54.243.189.241
hxxp://apps.bittorrent.com/featuredcontent/featuredcontent.btapp	87.248.217.254
hxxp://apps.bittorrent.com/utorrent-onboarding/plus.btapp	87.248.217.254
hxxp://www.mininova.org/favicon.ico	80.94.76.5
hxxp://crl.thawte.com/ThawtePremiumServerCA.crl	23.43.133.163
hxxp://apps.bittorrent.com/utorrent-onboarding/welcome.btapp	87.248.217.254
hxxp://ocsp.godaddy.com//MEIwQDA+MDwwOjAJBgUrDgMCGgUABBQdI2+OBkuXH93foRUj4a7lAr4rGwQUOpqFBxBnKLbv9r0FQW4gwZTaD94CAQc=	188.121.36.239
hxxp://gtssl-ocsp.geotrust.com/MEQwQjBAMD4wPDAJBgUrDgMCGgUABBQ/m36Fj2BE19VBYXRO62zrgIYp0gQUQnlUG2HNVSs+Y9U8SFf1n/tFzkoCAwLVNg==	23.43.139.27
hxxp://mscrl.microsoft.com/pki/mscorp/crl/MSIT Machine Auth CA 2(1).crl	68.232.34.200
hxxp://bundles.bittorrent.com/onboarding/utorrent?url=http://bundles.bittorrent.com/	54.192.203.158
hxxp://clients1.google.com/ocsp/MEkwRzBFMEMwQTAJBgUrDgMCGgUABBTy4Gr5hYodjXCbSRkjeqm1Gih+ZAQUSt0GFhu89mi1dvWBtrtiGrpagS8CCG+vFYDQCqlf	173.194.113.199
hxxp://downloader.yandex.net/yandex-pack/spigot-62/YandexSearch.exe	5.45.205.235
hxxp://ui.skype.com/ui/0/7.1.0.105.550/en/getnewestversion?defaultbrowser=ie	157.56.114.104
hxxp://apps.bittorrent.com/utorrent-onboarding/welcome-upsell.btapp	87.248.217.254
hxxp://apps.bittorrent.com/utorrent-onboarding/player.btapp?h=uVVfIsRBsnvPyT6P&v=109417338&ol=en&ul=&tk=stable34&c=uTorrent	87.248.217.254
hxxp://llsw.download3.utorrent.com/3.4.2/utorrent.37754.stable34-OC_CC217.exe?au=1&hash=4cecde076e1a0d5ae95751f0e5e78ae21b7177d4	87.248.217.253
hxxp://ocsp.verisign.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSpuCE3aK3GivZPzGQJ6L5BRyZofwQUl9BrqCZwyKE/lB8ILcQ1m6ShHvICEGwkCSV07gf3g5QOsqmf+MY=	23.43.139.27
hxxp://engine.bitmedianetwork.com/ados?t=1422518040825&request={"Placements":[{"A":5682,"S":33049,"D":"bt_ap_div","AT":1224,"Properties":{"browser":"ie","clientdata":"utorrent\|3.4.2.37754\|217","page":"torrent","flash":"none"}}],"Keywords":"browser%3Die%2C%20clientdata%3Dutorrent%7C3.4.2.37754%7C217%2C%20page%3Dtorrent%2C%20flash%3Dnull","Referrer":"","IsAsync":false}	107.21.255.97
hxxp://update.utorrent.li/updatestats.php?cl=uTorrent&v=109417338&h=uVVfIsRBsnvPyT6P&k=&ip=8&con=31&dl=203&error=&dlurl=http://llsw.download3.utorrent.com/offers/spigot-yandex-en-20140708.exe&svp=4&pid=2972&sz=157480&bin=<NULL>toolbar&p1=192.168.139.2&m1=0&p2=192.168.50.10&m2=0&p3=193.138.244.233&m3=0&p4=193.138.244.106&m4=1&p5=46.164.136.181&m5=1&p6=80.91.160.129&m6=9&p7=195.22.214.108&m7=37&p8=89.221.34.75&m8=38&p9=89.221.34.181&m9=40&p10=87.248.216.137&m10=38&p11=87.248.217.254&m11=38	82.221.103.245
hxxp://cdn.ap.bittorrent.com/control/tags/ut.json	54.230.200.65
hxxp://mscrl.microsoft.com/pki/mscorp/crl/mswww(6).crl	68.232.34.200
hxxp://update.utorrent.li/installstats.php?cl=uTorrent&v=109417338&h=uVVfIsRBsnvPyT6P&w=1DB10106&bu=0&pr=26616&cmp=217&ocmp=217&showtorrentoffer&pid=2972&cau=1&toroffer=0&torofferid=<NULL>&view=win32	82.221.103.245
hxxp://crl.microsoft.com/pki/crl/products/WinPCA.crl	87.245.202.16
hxxp://ocsp.thawte.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBQwF4prw9S7mCbCEHD/yl6nWPkczAQUe1tFz6/Oy3r9MZIaarbzRutXSFACEE1fLDQIskwgzW1QfiRNyew=	23.43.139.27
hxxp://apps.bittorrent.com/utorrent-onboarding/player.btapp?h=uVVfIsRBsnvPyT6P&v=102852600&ol=en&ul=&tk=main&c=uTorrent	87.248.217.254
hxxp://cdn.bitmedianetwork.com/network/index.html?adt=1224&browser=ie&clientdata=utorrent\|3.4.2.37754\|217&page=torrent&site=33049	87.248.217.253
hxxp://apps.bittorrent.com/featuredcontent/featuredcontent.btapp?h=uVVfIsRBsnvPyT6P&v=109417338&ol=en&ul=&tk=stable34&c=uTorrent	87.248.217.254
hxxp://www.google-analytics.com/collect?v=1&_v=j32&a=193293625&t=pageview&_s=1&dl=http://cdn.bitmedianetwork.com/network/index-edge.html?tag=ant&adt=1224&browser=ie&clientdata=utorrent%7c3%2e4%2e2%2e37754%7c217&page=torrent&site=33049&ul=en-us&de=windows-1252&sd=24-bit&sr=1716x901&vp=908x34&je=1&_u=MACAAEQAI~&jid=&cid=281852828.1422518160&tid=UA-54512734-1&z=723704758	173.194.113.206
hxxp://crl.microsoft.com/pki/crl/products/MicCodSigPCA_08-31-2010.crl	87.245.202.16
hxxp://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab?e5b34d45c90ec0e9	87.245.202.35
hxxp://apps.bittorrent.com/utorrent-onboarding/welcome-upsell.btapp?h=uVVfIsRBsnvPyT6P&v=109417338&ol=en&ul=&tk=stable34&c=uTorrent	87.248.217.254
hxxp://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBTtSK3dy3sA4g6EKqm0CfGsMDTPlgQUUOpzidsp+xCPnuUBINTeeZlIg/cCEAJwu3i4ZpYdN6xM1SVvBys=	93.184.220.29
hxxp://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBTfqhLjKLEJQZPin0KCzkdAQpVYowQUsT7DaQP4v0cB1JgmGggC72NkK8MCEApfEU0DWxeRF9Lv1AOMPzs=	93.184.220.29
hxxp://ll.download3.utorrent.com/offers/LowTempRec_InstallPath.bmp	87.248.217.253
hxxp://yogi.apps.bittorrent.com/track/?data=eyJldmVudCI6ICJBcHBJbnZva2VkIiwgInByb3BlcnRpZXMiOiB7ImRpc3RpbmN0X2lkIjoidVZWZklzUkJzbnZQeVQ2UCIsImgiOiJ1VlZmSXNSQnNudlB5VDZQIiwidiI6IjI2NjE2IiwiYyI6InV0IiwidG9rZW4iOiI5MDc5YmE5ZGRmNWZiM2E5NzE3YTUxMjAyNTE4NjYxMiIsInN2cCI6IjQiLCJ2aWV3Ijoid2luMzIiLCJidWNrZXQiOiJGZWF0dXJlZCBDb250ZW50IiwiYXBwbmFtZSI6IkZlYXR1cmVkIENvbnRlbnQifX0=&ip=1	50.19.226.113
hxxp://apps.bittorrent.com/utorrent-onboarding/player.btapp	87.248.217.254
hxxp://ocsp.verisign.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSpuCE3aK3GivZPzGQJ6L5BRyZofwQUl9BrqCZwyKE/lB8ILcQ1m6ShHvICEEES5jLHsYoCmjofrIA6uJ8=	23.43.139.27
hxxp://ll.download3.utorrent.com/langpacks/langpack-3227801ut.win.zip	87.248.217.253
hxxp://ocsp.geotrust.com/MEQwQjBAMD4wPDAJBgUrDgMCGgUABBSxtDkXkBa3l3lQEfFgudSiPNvt7gQUAPkqw0GRtsnCuD5V8sCXEROgByACAwI20A==	23.43.139.27
hxxp://engine.bitmedianetwork.com/ados?t=1422518040742&request={"Placements":[{"A":5682,"S":33049,"D":"bt_ap_div","AT":5,"Properties":{"browser":"ie","clientdata":"utorrent\|3.4.2.37754\|217","page":"torrent","flash":"none"}}],"Keywords":"browser%3Die%2C%20clientdata%3Dutorrent%7C3.4.2.37754%7C217%2C%20page%3Dtorrent%2C%20flash%3Dnull","Referrer":"","IsAsync":false}	107.21.255.97
hxxp://crl.omniroot.com/PublicSureServerSV.crl	93.184.220.20
hxxp://utclient.utorrent.com/pro/utorrent/index.html	54.239.168.117
hxxp://utclient.utorrent.com/images/mobile-icon.png	54.239.168.117
hxxp://engine.bitmedianetwork.com/i.gif?e=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&s=4ZvSTpnHDsqWQeRzN5_dwzXEF24	107.21.255.97
hxxp://bundles.bittorrent.com/current/index.html	54.192.203.158
hxxp://ocsp.godaddy.com//MEQwQjBAMD4wPDAJBgUrDgMCGgUABBTkIInKBAzXkF0Qh0pel3lfHJ9GPAQU0sSw0pHUTBFxs2HLPaH+3ahq1OMCAxvnFQ==	188.121.36.239
hxxp://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBTfqhLjKLEJQZPin0KCzkdAQpVYowQUsT7DaQP4v0cB1JgmGggC72NkK8MCEATh56TcXPLzbcArQrhdFZ8=	93.184.220.29
hxxp://crl.geotrust.com/crls/secureca.crl	23.43.133.163
hxxp://g.symcd.com/MEQwQjBAMD4wPDAJBgUrDgMCGgUABBSxtDkXkBa3l3lQEfFgudSiPNvt7gQUAPkqw0GRtsnCuD5V8sCXEROgByACAwI6dg==	23.43.139.27
hxxp://ocsp.verisign.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBS56bKHAoUD+Oyl+0LhPg9JxyQm4gQUf9Nlp8Ld7LvwMAnzQzn6Aq8zMTMCEFIA5aolVvwahu2WydRLM8c=	23.43.139.27
hxxp://vassg141.ocsp.omniroot.com/MFUwUzBRME8wTTAJBgUrDgMCGgUABBS856ddZAq5lE7vDJmoUDW1u98SMAQU3WyAfLq1MhelhEFA8NIEZhMvqZACFH3grgP85kRknyWy3HvBBgwssPUi	88.221.132.153
hxxp://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/disallowedcertstl.cab?72a4d528eea0d9c3	87.245.202.35
hxxp://engine.bitmedianetwork.com/ados?t=1422518160394&request={"Placements":[{"A":5682,"S":33049,"D":"bt_ap_div","AT":1224,"Properties":{"tag":"ant","browser":"ie","clientdata":"utorrent\|3.4.2.37754\|217","page":"torrent","flash":"none"}}],"Keywords":"tag%3Dant%2C%20browser%3Die%2C%20clientdata%3Dutorrent%7C3.4.2.37754%7C217%2C%20page%3Dtorrent%2C%20flash%3Dnull","Referrer":"","IsAsync":false}	107.21.255.97
hxxp://www.skype.com/go/getskype-trackable550	157.56.198.10
hxxp://ocsp.verisign.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBTSqZMG5M8TA9rdzkbCnNwuMAd5VgQUz5mp6nsm9EvJjo/X8AUm7+PSp50CECAKfRxMDvODER0cHOAslgg=	23.43.139.27
hxxp://cdn.bitmedianetwork.com/network/base64.js	87.248.217.253
hxxp://ocsp.verisign.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBQ/xkCfyHfJr7GQ6M658NRZ4SHo/AQUCPVR6Pv+PT1kNnxoz1t4qN+5xTcCEGC2x6sSmevembHfY1acIZk=	23.43.139.27
hxxp://engine.bitmedianetwork.com/ados?t=1422518160374&request={"Placements":[{"A":5682,"S":33049,"D":"bt_ap_div","AT":5,"Properties":{"tag":"ant","browser":"ie","clientdata":"utorrent\|3.4.2.37754\|217","page":"torrent","flash":"none"}}],"Keywords":"tag%3Dant%2C%20browser%3Die%2C%20clientdata%3Dutorrent%7C3.4.2.37754%7C217%2C%20page%3Dtorrent%2C%20flash%3Dnull","Referrer":"","IsAsync":false}	107.21.255.97
hxxp://static.ap.bittorrent.com/Advertisers/34e5de599eb245f89dc65ea4e8e2c989.jpg	104.16.12.8
hxxp://www.utorrent.com/download/langpacks/dl.php?build=37754&ref=client&client=utorrent&sys_l=en&sel_l=-1&tk=stable34	95.140.224.171
hxxp://ocsp.verisign.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRIt2RJ89X++hEzqoBeQg8PymQ2UQQUANhaTCXBIuWLMe9tuvPMXynxDWECEDWXMYfzhzoHMn7OWAybfto=	23.43.139.27
hxxp://bench.staging.utorrent.com/e?i=1005&e=eyJldmVudE5hbWUiOiJhcC5hZHRhZyIsImFjdGlvbiI6ImxvYWRlZCIsImFkdCI6IjUiLCJicm93c2VyIjoiaWUiLCJjbGllbnRkYXRhIjoidXRvcnJlbnQlN2MzJTJlNCUyZTIlMmUzNzc1NCU3YzIxNyIsInBhZ2UiOiJ0b3JyZW50Iiwic2l0ZSI6IjMzMDQ5In0=&callback=jQuery1112030972456739033316_1422518040734&_=1422518040735	107.22.253.201
hxxp://static.ap.bittorrent.com/ados.js	104.16.12.8
hxxp://engine.bitmedianetwork.com/i.gif?e=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&s=EaoFTV_2sr7NxncVCs9bZJtyhJs	107.21.255.97
hxxp://ocsp.verisign.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBS56bKHAoUD+Oyl+0LhPg9JxyQm4gQUf9Nlp8Ld7LvwMAnzQzn6Aq8zMTMCEG7MeqWnAyAJuM689OlS1JE=	23.43.139.27
hxxp://cdn3.opencandy.com/templates/7861/0/59317.png	195.12.225.82
hxxp://crl.microsoft.com/pki/crl/products/MicrosoftTimeStampPCA.crl	87.245.202.16
hxxp://apps.bittorrent.com/utorrent-onboarding/plus.btapp?h=uVVfIsRBsnvPyT6P&v=102852600&ol=en&ul=&tk=main&c=uTorrent	87.248.217.254
hxxp://cdn.bitmedianetwork.com/network/index-edge.html?tag=ant&adt=5&browser=ie&clientdata=utorrent\|3.4.2.37754\|217&page=torrent&site=33049	87.248.217.253
hxxp://cdn3.opencandy.com/p/1217/dc/du73i.exe	195.12.225.82
hxxp://bench.utorrent.com/e?i=1005&e=eyJldmVudE5hbWUiOiJhcC5hZHRhZyIsImFjdGlvbiI6ImxvYWRlZCIsInRhZyI6ImFudCIsImFkdCI6IjUiLCJicm93c2VyIjoiaWUiLCJjbGllbnRkYXRhIjoidXRvcnJlbnQlN2MzJTJlNCUyZTIlMmUzNzc1NCU3YzIxNyIsInBhZ2UiOiJ0b3JyZW50Iiwic2l0ZSI6IjMzMDQ5In0=&callback=jQuery1111028903432009117824_1422518160328&_=1422518160329	54.243.189.241
hxxp://llsw.download3.utorrent.com/offers/spigot-yandex-en-20140708.exe	87.248.217.253
hxxp://clients1.google.com/ocsp/MEkwRzBFMEMwQTAJBgUrDgMCGgUABBTy4Gr5hYodjXCbSRkjeqm1Gih+ZAQUSt0GFhu89mi1dvWBtrtiGrpagS8CCDvOtHeRG3Tt	173.194.113.199
hxxp://cdp1.public-trust.com/CRL/Omniroot2025.crl	64.18.20.10
hxxp://bench.utorrent.com/e?i=1005&e=eyJldmVudE5hbWUiOiJhcC5hZHRhZyIsImFjdGlvbiI6ImxvYWRlZCIsInRhZyI6ImFudCIsImFkdCI6IjEyMjQiLCJicm93c2VyIjoiaWUiLCJjbGllbnRkYXRhIjoidXRvcnJlbnQlN2MzJTJlNCUyZTIlMmUzNzc1NCU3YzIxNyIsInBhZ2UiOiJ0b3JyZW50Iiwic2l0ZSI6IjMzMDQ5In0=&callback=jQuery1111011064228616044735_1422518160387&_=1422518160388	54.243.189.241
hxxp://llsw.download3.utorrent.com/offers/spigot-yandex-20140709.bmp	87.248.217.253
hxxp://yogi.apps.bittorrent.com/track/?data=eyJldmVudCI6ICJBcHBJbnN0YWxsSW5pdGlhdGVkIiwgInByb3BlcnRpZXMiOiB7ImRpc3RpbmN0X2lkIjoidVZWZklzUkJzbnZQeVQ2UCIsImgiOiJ1VlZmSXNSQnNudlB5VDZQIiwidiI6IjI2NjE2IiwiYyI6InV0IiwidG9rZW4iOiI5MDc5YmE5ZGRmNWZiM2E5NzE3YTUxMjAyNTE4NjYxMiIsInN2cCI6IjQiLCJ2aWV3Ijoid2luMzIiLCJidWNrZXQiOiJBcHAiLCJhcHBuYW1lIjoiQXBwIn19&ip=1	50.19.226.113
hxxp://apps.bittorrent.com/discoverContent/discoverContent.btapp?h=uVVfIsRBsnvPyT6P&v=102852600&ol=en&ul=&tk=main&c=uTorrent	87.248.217.254
hxxp://static.ap.bittorrent.com/Advertisers/a05ac8e903c14e74befdd8b8426a754e.jpg	104.16.12.8
hxxp://bench.utorrent.com/e?i=38	54.243.189.241
hxxp://clients1.google.com/ocsp/MEkwRzBFMEMwQTAJBgUrDgMCGgUABBTy4Gr5hYodjXCbSRkjeqm1Gih+ZAQUSt0GFhu89mi1dvWBtrtiGrpagS8CCAaHMqBTgR3n	173.194.113.199
hxxp://www.utorrent.com/scripts/dl.php?build=37754&ref=client&client=utorrent&sys_l=en&sel_l=-1&tk=stable34	95.140.224.171
hxxp://ocsp.verisign.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSpuCE3aK3GivZPzGQJ6L5BRyZofwQUl9BrqCZwyKE/lB8ILcQ1m6ShHvICEAxNF3PJUX7iAOhAP2oGxcI=	23.43.139.27
hxxp://soft.export.yandex.ru/status.xml?clid=2154477&uuid={38F8EDE5-D9EB-46FB-8442-4F4D9BE9B350}&vnt=6.1x64&top=2.0&file-no=45 25 6 15 111 129 121 42 41 43 40 89 17 18 12 11 13 10 21 24 22 20 104 123 124 125 102	93.158.134.108
hxxp://cdn.bitmedianetwork.com/network/index-edge.html?tag=ant&adt=1224&browser=ie&clientdata=utorrent\|3.4.2.37754\|217&page=torrent&site=33049	87.248.217.253
hxxp://update.utorrent.li/updatestats.php?cl=uTorrent&v=109417338&h=uVVfIsRBsnvPyT6P&k=&ip=8&con=31&dl=78&error=&dlurl=http://llsw.download3.utorrent.com/offers/spigot-yandex-20140709.bmp&svp=4&pid=2972&sz=24878&bin=<NULL>bmp&p1=192.168.139.2&m1=0&p2=192.168.50.10&m2=0&p3=193.138.244.233&m3=1&p4=193.138.244.106&m4=1&p5=46.164.136.181&m5=1&p6=80.91.160.129&m6=9&p7=195.22.214.108&m7=39&p8=89.221.34.75&m8=39&p9=89.221.34.75&m9=39&p10=87.248.216.137&m10=39&p11=69.28.172.105&m11=41&p12=87.248.217.253&m12=39	82.221.103.245
hxxp://apps.bittorrent.com/utorrent-onboarding/welcome.btapp?h=uVVfIsRBsnvPyT6P&v=109417338&ol=en&ul=&tk=stable34&c=uTorrent	87.248.217.254
hxxp://cdn.ap.bittorrent.com/control/feature/tags/ut.json	54.230.200.65
hxxp://ocsp.msocsp.com/MFQwUjBQME4wTDAJBgUrDgMCGgUABBQmECJms4f7i5EbxtN7NbzQCBwAdAQUUa8kJpz0aCJXgCYrO0ZiFXsezKUCE1oAAHevvgBk+xJc0C0AAQAAd68=	108.162.232.198
hxxp://crl.verisign.com/pca3.crl	23.43.133.163
hxxp://cdn3.opencandy.com/p/883/ius/syesubc3_p2v3.exe	195.12.225.82
hxxp://engine.bitmedianetwork.com/i.gif?e=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&s=o44H8CGPE4orm3qHj4UiOpBehNA	107.21.255.97
hxxp://www.google-analytics.com/r/collect?v=1&_v=j32&a=1298203212&t=pageview&_s=1&dl=http://cdn.bitmedianetwork.com/network/index-edge.html?tag=ant&adt=5&browser=ie&clientdata=utorrent%7c3%2e4%2e2%2e37754%7c217&page=torrent&site=33049&ul=en-us&de=windows-1252&sd=24-bit&sr=1716x901&vp=300x250&je=1&_u=MEAAAEQAI~&jid=209490301&cid=281852828.1422518160&tid=UA-54512734-1&_r=1&z=1554186047	173.194.113.206
hxxp://bench.utorrent.com/e?i=32	54.243.189.241
hxxp://clients1.google.com/ocsp/MEkwRzBFMEMwQTAJBgUrDgMCGgUABBTy4Gr5hYodjXCbSRkjeqm1Gih+ZAQUSt0GFhu89mi1dvWBtrtiGrpagS8CCCUoyoQiZhRO	173.194.113.199
hxxp://ui.skype.com/ui/0/7.1.0.105.550/en/installed	157.56.114.104
ipv4only.arpa	192.0.0.171
cdn.optimizely.com	23.64.228.211
dnn506yrbagrg.cloudfront.net	54.230.203.127
content-bundles-url-shortener.herokuapp.com	107.21.232.31
bam.nr-data.net	50.31.164.166
www.msftncsi.com	87.245.202.10
js-agent.newrelic.com	23.235.43.175
connect.facebook.net	23.64.223.139
s3.amazonaws.com	54.231.244.8
platform.twitter.com	199.96.57.6
ajax.googleapis.com	64.233.165.95
fonts.googleapis.com	64.233.164.95
fonts.gstatic.com	173.194.113.216
stats.g.doubleclick.net	173.194.71.157
d1m8s5h8cyrbdy.cloudfront.net	54.230.201.175
router.utorrent.com	82.221.103.244
d1mh11hmkkdpin.cloudfront.net	54.230.202.167
api.trap.skype.net	168.63.15.132
router.bittorrent.com	67.215.246.10
apps.skypeassets.com	23.64.143.48
www.facebook.com	31.13.93.3
a.config.skype.com	137.116.224.167
time.windows.com	134.170.185.211
d3jos6ckms8wtd.cloudfront.net	54.230.201.250
beacon-2.newrelic.com	50.31.164.168
ieonline.microsoft.com	204.79.197.200
s-static.ak.facebook.com

IDS verdicts (Suricata alerts: Emerging Threats ET ruleset)

SURICATA UDPv4 invalid checksum
SURICATA IPv4 invalid checksum
ET P2P Bittorrent P2P Client User-Agent (uTorrent)
ET P2P BTWebClient UA uTorrent in use
ET P2P BitTorrent DHT ping request
ET POLICY Executable served from Amazon S3
ET MALWARE W32/OpenCandy Adware Checkin
ET TROJAN VMProtect Packed Binary Inbound via HTTP - Likely Hostile
SURICATA STREAM SHUTDOWN RST invalid ack
SURICATA STREAM Packet with invalid ack
ET POLICY curl User-Agent Outbound
ET CHAT Skype User-Agent detected
ET POLICY User-Agent (NSIS_Inetc (Mozilla)) - Sometimes used by hostile installers

Traffic

GET /?clientv=29&method=track_offer_downloaded&mstime=57.112&offer_downloaded_secs=0.000&offer_id=7861&package_md5=a7de5b7d6efefa7474b0f99c054f60b2&product_key=cb00343115ffdf69411419d8a9ceff1a&session_key=20bcba5375d77d545a33b67dd4cffcac&v=1.0&signature=7ac9bab2171992149cfd1701d6529bd9 HTTP/1.1

Host: api.opencandy.com

Accept: */*


HTTP/1.1 200 OK

Date: Thu, 29 Jan 2015 07:53:50 GMT

Server: Apache

X-Robots-Tag: noindex

Last-Modified: Thu, 29 Jan 2015 07:53:50 GMT

Cache-Control: no-store, no-cache, must-revalidate

Cache-Control: post-check=0, pre-check=0

Pragma: no-cache

Connection: close

Transfer-Encoding: chunked

Content-Type: text/xml
66..<?xml version="1.0"?><track_offer_downloaded><opera
tion>Completed</operation></track_offer_downloaded>..0.
.

GET /pro/utorrent/index.html HTTP/1.1

Host: utclient.utorrent.com

User-Agent: BTWebClient/3420(37754)

Accept-Encoding: gzip

Connection: Close


HTTP/1.1 200 OK

Content-Type: text/html

Content-Length: 765

Connection: close

Date: Tue, 16 Dec 2014 20:04:58 GMT

x-amz-meta-s3cmd-attrs: uid:107/gname:jenkins/uname:jenkins/gid:120/mode:33188/mtime:1418760067/atime:1418760067/ctime:1418760067

Cache-Control: s-maxage=300

Last-Modified: Tue, 16 Dec 2014 20:01:09 GMT

ETag: "96ca7656ad5f8bd2371c5514deb0b099"

Accept-Ranges: bytes

Server: AmazonS3

Age: 151

X-Cache: Hit from cloudfront

Via: 1.1 ad1289c08e15a848e5c2bc019529785a.cloudfront.net (CloudFront)

X-Amz-Cf-Id: aIZHqqfsukQVBRoXTdR2gsre1MSR74wtRbE8ZRdrn0ZqLcqlZNKVmg==
<html>..<head>...<script type='text/javascript' src='..
/commonjs/jq.js'> </script>...<script type='text/javascrip
t' src='../commonjs/proactive.js?ver=1'></script>...<scrip
t type="text/javascript">....$.ajax({.....url: "hXXp://VVV.utorrent
.com/scripts/headers.php",.....dataType: 'jsonp',.....success: functio
n(headers) {......country = headers['Geoip-Country-Code'];.......//Red
irect US visitors......if(country == 'US'){.......setToUS();......}...
..}....});...</script>...<script src="//cdn.optimizely.com/js
/240758443.js"></script>...<link href="../commoncss/index.
css" rel="stylesheet" type="text/css"/>....<meta charset=utf-8&g
t;...<title>Default : Pro Upgrade App</title>..</head&g
t;..<body>...<iframe id='ifr' width='100%' height='100%'> 
</iframe>..</body>.</html>...

POST /e?i=32 HTTP/1.1

Host: bench.utorrent.com

User-Agent: BTWebClient/3420(37754)

Accept-Encoding: gzip

Connection: Close

Content-Length: 199

{"h":"uVVfIsRBsnvPyT6P","cl":"uTorrent","v":109417338,"l":"en","w":"6.1","cts":1422518040,"eventName":"changed_settings","tags":[ 112692, 101310, 29570, 12918, 32665, 193967, 93089, 144014, 231856 ]}
HTTP/1.1 200 OK

Content-Type: text/html

Date: Thu, 29 Jan 2015 07:54:00 GMT

Server: nginx

X-Powered-By: PHP/5.4.30

Content-Length: 21

Connection: Close
{"response_code":200}..

GET /?clientv=29&cltzone=120&language=en,en&method=get_offers&mstime=0.093&os=WIN6.1SP1-64&product_key=cb00343115ffdf69411419d8a9ceff1a&v=1.0&signature=2ef4f981775d427b661aecadbef1c9ce HTTP/1.1

Host: api.opencandy.com

Accept: */*


HTTP/1.1 200 OK

Date: Thu, 29 Jan 2015 07:52:53 GMT

Server: Apache

X-Robots-Tag: noindex

Last-Modified: Thu, 29 Jan 2015 07:52:53 GMT

Cache-Control: no-store, no-cache, must-revalidate

Cache-Control: post-check=0, pre-check=0

Pragma: no-cache

Connection: close

Transfer-Encoding: chunked

Content-Type: text/xml
2000..<?xml version="1.0"?>.<get_offers>.    <installer
_md5s>.        <md5>0</md5>.    </installer_md5s>
.    <session_key>20bcba5375d77d545a33b67dd4cffcac</session_k
ey><product_name><![CDATA[BitTorrent]]></product_nam
e>.    <offer id="7861" instance_id="59317" language="en" advert
iser_id="883"> .        <name><![CDATA[Skype]]></nam
e>.        <exclusions tags="cat_chat,cat_phone,prn_skype"/>.
        <filters applies="" keys=""/>.        <package_url>
;hXXp://cdn3.opencandy.com/p/1217/dc/du73i.exe</package_url>.   
     <package_md5>a7de5b7d6efefa7474b0f99c054f60b2</package_m
d5>.        <package_filesize>160216</package_filesize>
.        <package_tool_version/>.<styles><image_source 
name="imgsrc">hXXp://cdn3.opencandy.com/templates/7861/0/59317.png&
lt;/image_source></styles>.        <banner_title><![
CDATA[Install Skype]]></banner_title>.        <banner_desc
ription><![CDATA[Recommended by BitTorrent]]></banner_desc
ription>.<panel>.                         <image name="bac
kground-on" imagesource="imgsrc" size="471,220" position="0,0" normali
magefrom="0,0"/>....<panel id="1" name="install" Type="Radio" de
fault="2" tabstopgroup="tackage_url>.        <package_md5>a7d
e5b7d6efefa7474b0f99c054f60b2</package_md5>.        <package_
filesize>160216</package_filesize>.        <package_to<<< skipped >>>

GET /utorrent-onboarding/player.btapp?h=uVVfIsRBsnvPyT6P&v=109417338&ol=en&ul=&tk=stable34&c=uTorrent HTTP/1.1

Host: apps.bittorrent.com

User-Agent: BTWebClient/3420(37754)

Accept-Encoding: gzip

If-Modified-Since: Tue, 08 Oct 2013 00:53:35 GMT

Connection: Close


HTTP/1.1 304 Not Modified

Content-Type: binary/octet-stream

Age: 102166

Date: Thu, 29 Jan 2015 07:54:00 GMT

Connection: close

POST /e?i=21 HTTP/1.1

Host: bench.utorrent.com

User-Agent: BTWebClient/3420(37754)

Accept-Encoding: gzip

Connection: Close

Content-Length: 367

{"h":"uVVfIsRBsnvPyT6P","cl":"uTorrent","v":109417338,"l":"en","w":"6.1","cts":1422517990,"eventName":"silent_autoupdate","launched_target":0,"updated":0,"relocated":0,"versions": [{"path":"updates\\3.4.2_37754.exe","version":"109417338","blacklisted":"0","crash_count":"0","opt_out":"0","running":""}], "action":"Initial download", "g_version":109417338, "no_sau":0}
HTTP/1.1 200 OK

Content-Type: text/html

Date: Thu, 29 Jan 2015 07:52:51 GMT

Server: nginx

X-Powered-By: PHP/5.4.30

Content-Length: 21

Connection: Close
{"response_code":200}..

GET /onboarding/utorrent?url=http://bundles.bittorrent.com/ HTTP/1.1

Host: bundles.bittorrent.com

User-Agent: BTWebClient/3420(37754)

Accept-Encoding: gzip

Connection: Close


HTTP/1.1 301 Moved Permanently

Server: CloudFront

Date: Thu, 29 Jan 2015 07:54:00 GMT

Content-Type: text/html

Content-Length: 183

Connection: close

Location: hXXps://bundles.bittorrent.com/onboarding/utorrent?url=http://bundles.bittorrent.com/

X-Cache: Redirect from cloudfront

Via: 1.1 f989b812753677758cd8909391e239ac.cloudfront.net (CloudFront)

X-Amz-Cf-Id: khYXzKune_crRgk2Kksy3nwyr3rhGYkYLX-u8sDaL9jwi2GrZgsmdw==
<html>..<head><title>301 Moved Permanently</title
></head>..<body bgcolor="white">..<center><h1&
gt;301 Moved Permanently</h1></center>..<hr><cent
er>CloudFront</center>..</body>..</html>....

GET /featuredcontent/featuredcontent.btapp?h=uVVfIsRBsnvPyT6P&v=109417338&ol=en&ul=&tk=stable34&c=uTorrent HTTP/1.1

Host: apps.bittorrent.com

User-Agent: BTWebClient/3420(37754)

Accept-Encoding: gzip

If-Modified-Since: Tue, 08 Oct 2013 01:06:32 GMT

Connection: Close


HTTP/1.1 304 Not Modified

Content-Type: binary/octet-stream

Age: 43644

Date: Thu, 29 Jan 2015 07:54:00 GMT

Connection: close

GET /featuredcontent/featuredcontent.btapp HTTP/1.1

Host: apps.bittorrent.com

User-Agent: BTWebClient/3100(26616)

Accept-Encoding: gzip

Connection: Close


HTTP/1.1 200 OK

x-amz-id-2: JLf4zUBRoqBXBDBjfve/uHltng Q ELqNYBqeYViaCPXwJ7nucxUVIHW8t1J/T7a

x-amz-request-id: A7AD945356B10B11

Accept-Ranges: bytes

Content-Type: binary/octet-stream

Server: AmazonS3

Age: 43559

Date: Thu, 29 Jan 2015 07:52:35 GMT

Last-Modified: Tue, 08 Oct 2013 01:06:32 GMT

Content-Length: 33737

Connection: close
PK..........mB.A..............btappUT...WPAQ..xQux.............].;..0.
D{...@...]>..>=2..,.m..Q..#H.r.73/.....d.A.b...V$.1...T...yB.W/.
HT.J?.......L..D..k................6......|.....bq.....1....Q.3:.n....
..J...U...... ~.PK...........BX..f............index.htmlUT...B.xQB.xQu
x...............Mo.0.....`.mI.........t.a...R.E..r.B..D.....Q..6.v....
.|......_.-n~...J.....{.9......S(.\....<.e...N..z-kZ.. .]...:a.f)..
..... ....k#0a....0..?Q...5rr[...E.......N.....).G^..L.e.`t....:.7.p..
=.'........._..`...e0.|..M.UTp.j.a3*.:C..........h-...@b...G.%.G..8...
`..Yy..v...7TM..a..S.(.gH....pI.I.4}Q...=..`...l.&...BSx E.V6.:t..TtJ-
...b'{...V...h<.M..r....*.......\.m4..s._.~....U.........}b.B.4j[.Z
....i.......(m`...fs...N8:?.7`.d..T.w(oF..G.........t...sA..s.......)a
....|4<../f...r...u.c6..t...M.o..B...=..)....d~..~9.....b.x=.q..d.j
..... .bY....<a.....%b;..UW.J.p%..........#Y..).....#a.4.9.o=h..i..
..hG:.SlZbZ5d^......P._..li.G....d....H.............oPK........%..B..6
..~..sl......main.jsUT...f.xQ..xQux..............}.{.F..."b.)......f@A
\..$3.....yK1Y\.A..M.....o...>..)';.b.h4.......v............x...~..
...b6....uR~..q...u..?=l. ..2..I:.wE..<.p8..M.M..|.....V.h5...8..So
.>.^DA<...A$..un.~.w..o.n6.:..t#O.A2...u..........6]..S..Q......
.s8.........sj>..a.~]. .....m.J.O..._>/.I....C..s\..<........
.y^$........G.ZM{q..(,..Y...)yY.;.8H......m^..K.,W..~M..).x.....8c..Go
.....zU.9>......-......qQVX.$.Mk.!W@....,...7........y..hAzTh...p.I
..L.`....i...x...a.^..w2.TT.y..Cz.....f.z.W. <z#.....U.Ad..TT..<<< skipped >>>

GET /network/index-edge.html?tag=ant&adt=5&browser=ie&clientdata=utorrent|3.4.2.37754|217&page=torrent&site=33049 HTTP/1.1

Accept: application/x-ms-application, image/jpeg, application/xaml xml, image/gif, image/pjpeg, application/x-ms-xbap, */*

Accept-Language: en-US

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/6.0)

Accept-Encoding: gzip, deflate

Host: cdn.bitmedianetwork.com

Connection: Keep-Alive


HTTP/1.1 200 OK

x-amz-id-2: X1yCkQA9gObcW/qTcttpVMxK4aV4f34itW6SmyTB3FUbBqdoFtC8IDv1pU/C/0Yo

x-amz-request-id: 834696C9127096F7

Cache-Control: public,max-age=1200,s-max-age=1800

Content-Type: text/html

Server: AmazonS3

Content-Encoding: gzip

Vary: Accept-Encoding

Age: 10294

Date: Thu, 29 Jan 2015 07:56:00 GMT

Last-Modified: Fri, 23 Jan 2015 21:05:11 GMT

Expires: Thu, 29 Jan 2015 05:24:26 GMT

Content-Length: 2473

Connection: keep-alive
............ks.H....X......c..e..{.|{.........i...D............7.u% M.
..{.....wo>......<.88W_.........LP..E.}]..k<6...E...|.0.xQ(X(
\.......h.[....z&d....-}!dA}...>i...9..<,-E .O.h.'3..,. [....H.y
1_."6....=..=]Q.j......0.Y.>.q......e&.9Y...Qhr ."kj.....o|h..E..].
4...%..........0.s...)....4.`.u......a/....M.s0Z..Z.....![.k*...P7....
.M.....VJt..).) y..D.o.....}7.6M6..:....;.......m.3.....k6.;..^f......
.-?..l....2Z..zmO...4...Q....'.9.F#s....R......y.=v:.G....t).2r.B.!.:e
 .....,%..G....h.cL.v.E...!...K.o....?{...'.E[.,d.B..B.X2J-....\Y...%.
....eB.......5.6....V.AQ...9`;8..[-....9.. e.#@.......J..%......@<D
P/.$......2..9.3...:.QT..[....\...v.y....Fcof'....4.d.pa./v.....8.P&Y.
...V...4.w)..k.......... .?4.<8z......F.UxB.@~..........#.l.T..;$.8
.a.OX...4.@.[-.K6...^.'....n...X$.*._......S...,..O....M ......".(..d.
.(d&.mQ...?L.T.D..=."}.EQG.G...DT5.*$$.].>....E]U........./.....2HX
a...'WX.._...A1..|....I.t....a.NE...3...c1...,..c.....vE.wU.x.. .>.
.<...../W....c. I.c8.-.n..4Wj..Mb..H..Ae...>9.;....9 {..p.@%.X!.
......q:..|.. .........gHm,......8DJ.wk....;...I~~D...a9......w..u:...
.?.OB..Yn....Q.!|.'o..H....^L.l..#.*....i.g....U...........'.tN.x.....
......8..t...lu.......:..u:.i.(%...{.k..Q..N..S.....f8..!N..=._.&..F..
up..........z.....Qtp....qzu..Y....#..:5x.}..v....]9.....}t{]....{...J
.{...E.-.>........YG....s2..#...<.6*|.....$.X....`g$.e~..g.k...|
!6f4..R..E...X.]&....*..f7I..r.._*..K,.0c.VX....|4.h2....T.r&......*`.
).".MM..&.2....}Qc.i|..y.. .....W.......CW.R7X.....N..x>.h..2.;<<< skipped >>>

GET /network/jquery-1.11.1.min.js HTTP/1.1

Accept: */*

Referer: hXXp://cdn.bitmedianetwork.com/network/index-edge.html?tag=ant&adt=5&browser=ie&clientdata=utorrent|3.4.2.37754|217&page=torrent&site=33049

Accept-Language: en-US

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/6.0)

Accept-Encoding: gzip, deflate

Host: cdn.bitmedianetwork.com

Connection: Keep-Alive


HTTP/1.1 200 OK

x-amz-id-2: kjVT9JbL6VkmVE/TUQDiyJrb4nGyOm11BlJQqKqtYI9b79i2kSU7MPyBnqt0GRLU

x-amz-request-id: 7EA90BB87ED81DED

Cache-Control: public,max-age=1200,s-max-age=1800

Content-Type: application/javascript

Server: AmazonS3

Content-Encoding: gzip

Vary: Accept-Encoding

Age: 35137

Date: Thu, 29 Jan 2015 07:56:00 GMT

Last-Modified: Wed, 21 Jan 2015 20:56:49 GMT

Expires: Wed, 28 Jan 2015 22:30:23 GMT

Content-Length: 33266

Connection: keep-alive
............y{.F./....".....E:.=......$.u..$.....$$n")......~. ...s...
.....t7z.......i...ow......?......,8{6.|,...#....n.'.r..g_..>...EN.
..],..X..........2.......:.....E..M...-.....vOd.....v....Q......X...j.
...6.<.S.c....v}..*..>.n.[.S....w....%g..*.2..~No.K/.m...vuF....
........".:....X...y.....I.gY4..<..;..(.)[..d/..............S1.....
.....~[.f..^................-"O..'.Q.]...~.....r.9G...~._......./..~:.
....'.3..b......D....*O......R..7.R...P.^$....#..-...z...E..Z.......w.
~...bW,.~.<.(V..<......6y. l...Y.X..n....W.@..n..DI<.Lb..'=..
e..P.M.jeX.W.$..T.ULi$.b; .h......B...x.=.u......x _..H..H.y.:..>..
%!Wm.l.F.U.N...d.W.0..)...R.*..^...9.U....f..z...>...i...OUP...*.H.
Y.|He...)wVLdQ/..X.4.....3....nz..c^.l2...T..O..,...X[....p*v..B...#v.
.:z..Z".S{j'.....61$ZL..\.bJ..L.x09.hG..!m}...~.u..)PX.^/.de.......Y..
.....D.....e..}..5....F.$......f.p........P..V.....R.._.Y.: .$.....T..
Y'.2t....Z.a.. 9.t.P..U..7:%.A............I.'X....uq....Gz..k.d.4|....
.....T.@3.p.#.4...P..^._..M.....K?...b.H....zIX...Q..^$.C.....M....P..
.^o\`$to..e.{:.....u.j....WO...RA....?.S.4..v...\y....h..e..I.])..|.lw
...u...M..?_n..r..{..;..%..s...._;...5.......3..!...y..^%...S.mi.}....
....\K....I..'....u........m.H.?.v..)......W......pf....$i...M....N..@
..V..5Nz..6..&..8......<..y.u>...:M...I..Q:.R.V.c..B./..Vd..m..;
.J.)..u....E.,..(...$f;..G..g..F..V......cV....d.3.1...5........8b....
..P.....[...1}:......e1*$Z..~y.&...g@.bD.0H.Ers,.DR..B.....t[r..a!....
{.W........:.9..gWj.,.....Q|..M.=..........bM.e..1.../h....9..H.@d<<< skipped >>>

GET /network/jquery-1.11.1.min.js HTTP/1.1

Accept: */*

Referer: hXXp://cdn.bitmedianetwork.com/network/index-edge.html?tag=ant&adt=1224&browser=ie&clientdata=utorrent|3.4.2.37754|217&page=torrent&site=33049

Accept-Language: en-US

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/6.0)

Accept-Encoding: gzip, deflate

Host: cdn.bitmedianetwork.com

Connection: Keep-Alive


HTTP/1.1 200 OK

x-amz-id-2: kjVT9JbL6VkmVE/TUQDiyJrb4nGyOm11BlJQqKqtYI9b79i2kSU7MPyBnqt0GRLU

x-amz-request-id: 7EA90BB87ED81DED

Cache-Control: public,max-age=1200,s-max-age=1800

Content-Type: application/javascript

Server: AmazonS3

Content-Encoding: gzip

Vary: Accept-Encoding

Age: 35137

Date: Thu, 29 Jan 2015 07:56:00 GMT

Last-Modified: Wed, 21 Jan 2015 20:56:49 GMT

Expires: Wed, 28 Jan 2015 22:30:23 GMT

Content-Length: 33266

Connection: keep-alive
............y{.F./....".....E:.=......$.u..$.....$$n")......~. ...s...
.....t7z.......i...ow......?......,8{6.|,...#....n.'.r..g_..>...EN.
..],..X..........2.......:.....E..M...-.....vOd.....v....Q......X...j.
...6.<.S.c....v}..*..>.n.[.S....w....%g..*.2..~No.K/.m...vuF....
........".:....X...y.....I.gY4..<..;..(.)[..d/..............S1.....
.....~[.f..^................-"O..'.Q.]...~.....r.9G...~._......./..~:.
....'.3..b......D....*O......R..7.R...P.^$....#..-...z...E..Z.......w.
~...bW,.~.<.(V..<......6y. l...Y.X..n....W.@..n..DI<.Lb..'=..
e..P.M.jeX.W.$..T.ULi$.b; .h......B...x.=.u......x _..H..H.y.:..>..
%!Wm.l.F.U.N...d.W.0..)...R.*..^...9.U....f..z...>...i...OUP...*.H.
Y.|He...)wVLdQ/..X.4.....3....nz..c^.l2...T..O..,...X[....p*v..B...#v.
.:z..Z".S{j'.....61$ZL..\.bJ..L.x09.hG..!m}...~.u..)PX.^/.de.......Y..
.....D.....e..}..5....F.$......f.p........P..V.....R.._.Y.: .$.....T..
Y'.2t....Z.a.. 9.t.P..U..7:%.A............I.'X....uq....Gz..k.d.4|....
.....T.@3.p.#.4...P..^._..M.....K?...b.H....zIX...Q..^$.C.....M....P..
.^o\`$to..e.{:.....u.j....WO...RA....?.S.4..v...\y....h..e..I.])..|.lw
...u...M..?_n..r..{..;..%..s...._;...5.......3..!...y..^%...S.mi.}....
....\K....I..'....u........m.H.?.v..)......W......pf....$i...M....N..@
..V..5Nz..6..&..8......<..y.u>...:M...I..Q:.R.V.c..B./..Vd..m..;
.J.)..u....E.,..(...$f;..G..g..F..V......cV....d.3.1...5........8b....
..P.....[...1}:......e1*$Z..~y.&...g@.bD.0H.Ers,.DR..B.....t[r..a!....
{.W........:.9..gWj.,.....Q|..M.=..........bM.e..1.../h....9..H.@d<<< skipped >>>

GET /installstats.php?cl=uTorrent&v=109417338&h=uVVfIsRBsnvPyT6P&w=1DB10106&bu=0&pr=26616&cmp=217&ocmp=217&mismexecute&pid=2972&cau=1&download=0&execute=0&error=mism execute succeeded&mismreturn=0&mismresult=provider:9,search:1,homepage:1&view=win32 HTTP/1.1

Accept-Encoding: gzip

User-Agent: uTorrent(37754)/3.4.2

Host: update.utorrent.li

Cache-Control: no-cache


HTTP/1.1 200 OK

Server: nginx/1.4.7

Date: Thu, 29 Jan 2015 07:52:54 GMT

Content-Type: text/html

Transfer-Encoding: chunked

Connection: close

X-Powered-By: PHP/5.4.30

0..

GET /pki/crl/products/MicCodSigPCA_08-31-2010.crl HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: crl.microsoft.com


HTTP/1.1 200 OK

Content-Type: application/pkix-crl

Last-Modified: Wed, 28 Jan 2015 06:05:55 GMT

Accept-Ranges: bytes

ETag: "75565c7ac03ad01:0"

Server: Microsoft-IIS/8.0

VTag: 791666644800000000

P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI"

X-Powered-By: ASP.NET

Content-Length: 554

Cache-Control: max-age=900

Date: Thu, 29 Jan 2015 07:54:03 GMT

Connection: keep-alive

0..&0......0...*.H........0y1.0...U....US1.0...U....Washington1.0...U.
...Redmond1.0...U....Microsoft Corporation1#0!..U....Microsoft Code Si
gning PCA..150127173215Z..150428055215Z.a0_0...U.#..0..........X..7.3.
..L...0... .....7.........0...U......Y0... .....7......150427174215Z0.
..*.H......................YIw.. ..(..y..O.G].B.."?.@...[1.}.X...]...e
.J....pP.I....!6...%.D.k...>c.|R.?.i..yt.z..B.........b....n..m5...
0....2..I!)v....z....y.#pXz.DO.....mF...e.'e...@.%...6./.bPZ...=....bp
..j....lo....4........T9j...S.7Q.@.W..@.. ...M....z....Q...{u. .W..HTT
P/1.1 200 OK..Content-Type: application/pkix-crl..Last-Modified: Wed, 
28 Jan 2015 06:05:55 GMT..Accept-Ranges: bytes..ETag: "75565c7ac03ad01
:0"..Server: Microsoft-IIS/8.0..VTag: 791666644800000000..P3P: CP="ALL
 IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT
 COM INT NAV ONL PHY PRE PUR UNI"..X-Powered-By: ASP.NET..Content-Leng
th: 554..Cache-Control: max-age=900..Date: Thu, 29 Jan 2015 07:54:03 G
MT..Connection: keep-alive..0..&0......0...*.H........0y1.0...U....US1
.0...U....Washington1.0...U....Redmond1.0...U....Microsoft Corporation
1#0!..U....Microsoft Code Signing PCA..150127173215Z..150428055215Z.a0
_0...U.#..0..........X..7.3...L...0... .....7.........0...U......Y0...
 .....7......150427174215Z0...*.H......................YIw.. ..(..y..O
.G].B.."?.@...[1.}.X...]...e.J....pP.I....!6...%.D.k...>c.|R.?.i..y
t.z..B.........b....n..m5...0....2..I!)v....z....y.#pXz.DO.....mF...e.
'e...@.%...6./.bPZ...=....bp..j....lo....4........T9j...S.7Q.@.W..

<<< skipped >>>

GET /images/mobile-icon.png HTTP/1.1

Host: utclient.utorrent.com

User-Agent: BTWebClient/3420(37754)

Accept-Encoding: gzip

If-Modified-Since: Sun, 1 Jan 1982 00:00:00 GMT

Connection: Close


HTTP/1.1 200 OK

Content-Type: image/png

Content-Length: 1263

Connection: close

Date: Tue, 09 Dec 2014 00:31:46 GMT

x-amz-meta-cb-modifiedtime: Tue, 11 Mar 2014 23:12:00 GMT

Last-Modified: Tue, 11 Mar 2014 23:12:21 GMT

ETag: "4280089022fce23da2c64031bf137c08"

Accept-Ranges: bytes

Server: AmazonS3

Age: 41957

X-Cache: Hit from cloudfront

Via: 1.1 2b7e0587e76bdc8afc2d63bea659b942.cloudfront.net (CloudFront)

X-Amz-Cf-Id: Jl_zdSPJEmKM0KBN0XPvoUk3Cxlk2BTwW9eeMnbwwUU8LpzwqGb4ww==
.PNG........IHDR................a....tEXtSoftware.Adobe ImageReadyq.e&
lt;...kiTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCe
hiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk=
"Adobe XMP Core 5.5-c021 79.154911, 2013/10/29-11:47:16        "> &
lt;rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#">
 <rdf:Description rdf:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap
/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#"
 xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xm
p.did:01801174072068119FB483BB6AA6447E" xmpMM:DocumentID="xmp.did:9E4A
8AB99C4311E3BC81E4BD1BE0F00E" xmpMM:InstanceID="xmp.iid:9E4A8AB89C4311
E3BC81E4BD1BE0F00E" xmp:CreatorTool="Adobe Photoshop CC (Macintosh)"&g
t; <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:3637b3de-885b-4f94-
b5ae-3e362ec1613c" stRef:documentID="xmp.did:01801174072068119FB483BB6
AA6447E"/> </rdf:Description> </rdf:RDF> </x:xmpmeta
> <?xpacket end="r"?>m.......IDATx.b..........hb.P....,.... ^
..Z@,.....:.7. .f.7.Oeddpfecb`cgb......_..........`....P...T,....d3.h.
..v...# .f@..f ......... ..Y.D.08..| ..f.. .... ...3.....00B.......1..
.>...L..R.......?.._>.aB.. ..C...X...@!.....z. ...$q...?&.4..:d6
.\F..-...~..*~....2.H} ..@A..).P..d&.8........0.a.........IEND.B`...<<< skipped >>>

GET /track/?data=eyJldmVudCI6ICJBcHBJbnN0YWxsZWQiLCAicHJvcGVydGllcyI6IHsiZGlzdGluY3RfaWQiOiJ1VlZmSXNSQnNudlB5VDZQIiwiaCI6InVWVmZJc1JCc252UHlUNlAiLCJ2IjoiMjY2MTYiLCJjIjoidXQiLCJ0b2tlbiI6IjkwNzliYTlkZGY1ZmIzYTk3MTdhNTEyMDI1MTg2NjEyIiwic3ZwIjoiNCIsInZpZXciOiJ3aW4zMiIsImJ1Y2tldCI6IkZlYXR1cmVkIENvbnRlbnQiLCJhcHBuYW1lIjoiRmVhdHVyZWQgQ29udGVudCJ9fQ==&ip=1 HTTP/1.1

X-ClientID: uVVfIsRBsnvPyT6P

User-Agent: uTorrent/3100(26616)

Host: yogi.apps.bittorrent.com

Cache-Control: no-cache


HTTP/1.1 200 OK

Content-Type: application/octet-stream

Date: Thu, 29 Jan 2015 07:52:35 GMT

Server: nginx/1.4.7

Content-Length: 0

Connection: keep-alive

HTTP/1.1 200 OK..Content-Type: application/octet-stream..Date: Thu, 29
 Jan 2015 07:52:35 GMT..Server: nginx/1.4.7..Content-Length: 0..Connec
tion: keep-alive..

GET /favicon.ico HTTP/1.1

Host: VVV.mininova.org

User-Agent: BTWebClient/3420(37754)

Accept-Encoding: gzip

If-Modified-Since: Sat, 30 Oct 2010 22:57:22 GMT

Connection: Close


HTTP/1.1 304 Not Modified

Cache-control: public, max-age=25920000

Expires: Wed, 25 Nov 2015 07:54:01 GMT

Content-Type: image/x-icon

Accept-Ranges: bytes

ETag: "103585109"

Last-Modified: Sat, 30 Oct 2010 22:57:22 GMT

Connection: close

Date: Thu, 29 Jan 2015 07:54:01 GMT

POST /e?i=38 HTTP/1.1

Host: bench.utorrent.com

User-Agent: BTWebClient/3420(37754)

Accept-Encoding: gzip

Connection: Close

Content-Length: 178

{"h":"uVVfIsRBsnvPyT6P","cl":"uTorrent","v":109417338,"l":"en","w":"6.1","cts":1422518159,"eventName":"PageRequested","adtype":5,"geo":"ua","time":"09:56:00","date":"2015-01-29"}
HTTP/1.1 200 OK

Content-Type: text/html

Date: Thu, 29 Jan 2015 07:56:00 GMT

Server: nginx

X-Powered-By: PHP/5.4.30

Content-Length: 21

Connection: Close
{"response_code":200}..

GET /discoverContent/discoverContent.btapp?h=uVVfIsRBsnvPyT6P&v=102852600&ol=en&ul=&tk=main&c=uTorrent HTTP/1.1

Host: apps.bittorrent.com

User-Agent: BTWebClient/3100(26616)

Accept-Encoding: gzip

If-Modified-Since: Tue, 08 Oct 2013 01:06:34 GMT

Connection: Close


HTTP/1.1 304 Not Modified

Content-Type: binary/octet-stream

Age: 123173

Date: Thu, 29 Jan 2015 07:52:36 GMT

Connection: close

GET /click/dtype=stred/pid=12/cid=72435/path=dwnldr/p=spigot-62/cnt=0/dt=0/ct=1/rt=5/* HTTP/1.1

User-Agent: curl/1.1

Host: clck.yandex.ru

Accept: *.*


HTTP/1.1 200 Ok

Content-Type: image/gif

Cache-Control: no-cache

Content-Length: 43

GIF89a.............!.......,...........L..;..

GET /ThawtePremiumServerCA.crl HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: crl.thawte.com


HTTP/1.1 200 OK

Server: Apache

ETag: "39808ea12d05cd56b1932fd04ab6da2a:1422480042"

Last-Modified: Wed, 28 Jan 2015 21:20:42 GMT

Date: Thu, 29 Jan 2015 07:52:42 GMT

Content-Length: 12067

Connection: keep-alive

Content-Type: application/pkix-crl

0./.0...0...*.H........0..1.0...U....ZA1.0...U....Western Cape1.0...U.
...Cape Town1.0...U....Thawte Consulting cc1(0&..U....Certification Se
rvices Division1!0...U....Thawte Premium Server CA1(0&..*.H........pre
mium-server@thawte.com..150128210056Z..150207210056Z0.-.0!....f....p..
........100129104213Z0!....l.C`..L.%|\.T...130819183955Z0!....T..W...p
.[..%...100322161038Z0!....hx.....k...7....130919164724Z0!....$#.R|..$
.....j..130926101045Z0!...!P..6{.lS.@...5..130927150657Z0!...Da\v.....
.....%..130920062728Z0!...>.e..-...s[.2I...140418142220Z0!....dU...
(...=...*..140801114607Z0!........d.{#E..9`...130926061856Z0!....6..q.
'tT..1.Q...130926062249Z0!.....cXzF..(O0.|.N..131002103626Z0!.........
...>..i....130528164218Z0!..........#.P.......130716072254Z0!.....W
........JH....130924125316Z0!.....%.......R......100801221434Z0!.....M
..HK.....x....130926060355Z0!....k."..z......64..130919082450Z0!...N..
D...0....`H2..130829152308Z0!......Q..m...A..j...100226190909Z0!.....-
...k......h...130930085951Z0!...... ...7. .UA.I..130927152007Z0!.....}
.L....\/..$^..100407191443Z0!....1....c...s.>9t..100215170304Z0!...
W..._....%..I....130926063253Z0!..._._~gq.I.)q6@g...131025034600Z0!...
..=X>...]..h5@...130920130332Z0!.............U.<....100318180248
Z0!... .(........n.S...130923202627Z0!.....k(....k4.......130919073042
Z0!....rF..O..#^.......100312081338Z0!.....:...B..=]Hsx_..130920011556
Z0!....uJdm..'...\G....130523054519Z0!....]h..g.o....@\ ..100107184454
Z0!...z..1).Ht.........100323155426Z0!.... ....z.i.a.nl...10031221

<<< skipped >>>

GET /favicon.ico HTTP/1.1

Host: VVV.bittorrent.com

User-Agent: BTWebClient/3420(37754)

Accept-Encoding: gzip

If-Modified-Since: Sun, 1 Jan 1982 00:00:00 GMT

Connection: Close


HTTP/1.1 404 Not Found

Server: nginx/1.4.7

Content-Type: text/html

Age: 2

Date: Thu, 29 Jan 2015 07:54:00 GMT

Expires: Thu, 29 Jan 2015 07:54:08 GMT

Content-Length: 168

Connection: close
<html>..<head><title>404 Not Found</title><
/head>..<body bgcolor="white">..<center><h1>404 N
ot Found</h1></center>..<hr><center>nginx/1.4.
7</center>..</body>..</html>....

GET /utorrent-onboarding/plus.btapp?h=uVVfIsRBsnvPyT6P&v=102852600&ol=en&ul=&tk=main&c=uTorrent HTTP/1.1

Host: apps.bittorrent.com

User-Agent: BTWebClient/3100(26616)

Accept-Encoding: gzip

If-Modified-Since: Tue, 08 Oct 2013 00:53:59 GMT

Connection: Close


HTTP/1.1 304 Not Modified

Content-Type: binary/octet-stream

Age: 121275

Date: Thu, 29 Jan 2015 07:52:36 GMT

Connection: close

GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBTfqhLjKLEJQZPin0KCzkdAQpVYowQUsT7DaQP4v0cB1JgmGggC72NkK8MCEATh56TcXPLzbcArQrhdFZ8= HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: ocsp.digicert.com


HTTP/1.1 200 OK

Accept-Ranges: bytes

Cache-Control: max-age=510983

Content-Type: application/ocsp-response

Date: Thu, 29 Jan 2015 07:52:41 GMT

Etag: "54c9b362-1d7"

Expires: Wed, 04 Feb 2015 19:52:41 GMT

Last-Modified: Thu, 29 Jan 2015 04:13:22 GMT

Server: ECS (ams/49A8)

X-Cache: HIT

Content-Length: 471
0..........0..... .....0......0...0.......>.i...G...&....cd ...2015
0128200000Z0s0q0I0... ............(..A...B..G@B.X....>.i...G...&...
.cd ........\..m. B.]......20150128200000Z....20150204200000Z0...*.H..
...........AX.M....;.H|........#.......l.t^K4....m_|....-J~Z......... 
(.*.`.$)$.*].J..UE..n..RO.....(<...w..w7...[.\.`.X....U..a!..iD.t97
..x....3..FA...O....iG...1....v...J..X.8./......!..%9z .q..tkT....._..
...2...k..-..v.._..R].3H.|.S... E.Qc........*.j{p.&..4z....<HTTP/1.
1 200 OK..Accept-Ranges: bytes..Cache-Control: max-age=510983..Content
-Type: application/ocsp-response..Date: Thu, 29 Jan 2015 07:52:41 GMT.
.Etag: "54c9b362-1d7"..Expires: Wed, 04 Feb 2015 19:52:41 GMT..Last-Mo
dified: Thu, 29 Jan 2015 04:13:22 GMT..Server: ECS (ams/49A8)..X-Cache
: HIT..Content-Length: 471..0..........0..... .....0......0...0.......
>.i...G...&....cd ...20150128200000Z0s0q0I0... ............(..A...B
..G@B.X....>.i...G...&....cd ........\..m. B.]......20150128200000Z
....20150204200000Z0...*.H.............AX.M....;.H|........#.......l.t
^K4....m_|....-J~Z......... (.*.`.$)$.*].J..UE..n..RO.....(<...w..w
7...[.\.`.X....U..a!..iD.t97..x....3..FA...O....iG...1....v...J..X.8./
......!..%9z .q..tkT....._.....2...k..-..v.._..R].3H.|.S... E.Qc......
..*.j{p.&..4z....<....
<<< skipped >>>

GET /control/feature/tags/ut.json HTTP/1.1

Host: cdn.ap.bittorrent.com

User-Agent: BTWebClient/3420(37754)

Accept-Encoding: gzip

Connection: Close


HTTP/1.1 200 OK

Content-Type: application/json

Content-Length: 581

Connection: close

Date: Tue, 09 Dec 2014 14:38:08 GMT

Last-Modified: Tue, 18 Nov 2014 23:12:59 GMT

ETag: "a3b69f81e52fe9952ebde99141a8fe4d"

Accept-Ranges: bytes

Server: AmazonS3

Age: 50445

X-Cache: Hit from cloudfront

Via: 1.1 3abf650c7bf73e47515000bddf3f05c0.cloudfront.net (CloudFront)

X-Amz-Cf-Id: TYCEHXfB8Rqv9Ttei1GBCdC5G0wY6_zjQ9iTgOI2wUJqPOqU-WXFbQ==
{.."commonrules": [...{...."version": 0,...."ruleHash": "a898a52419c1d
20f6490fbcd1e6b3fd0d5a72c29",...."contactInterval": 60...}..],.."bundl
esrules": [...{...."bundlesBadgeEnabled": 1,...."rollout_f": "100.0",.
..."bundlesTabEnabled": 0,...."name": "default",...."rollout": 100,...
."enabled": 1,...."bundlesTrayNotifyEnabled": 1,...."bundlesNodeEnable
d": 1...},...{...."campaignCodes": [.....601....],...."bundlesTabEnabl
ed": 1,...."name": "campaign_601"...}..],.."corerules": [...{...."roll
out_f": "100.0",...."name": "default",...."streamingEnabled": 1,...."r
ollout": 100...}..].}..

GET /installstats.php?cl=uTorrent&v=109417338&h=uVVfIsRBsnvPyT6P&w=1DB10106&bu=0&pr=26616&cmp=217&ocmp=217&gettbinstallresult&pid=2972&cau=1&tbinstallresult=3&cbtoolbar=1&cbhomepage=1&error=0&msg=&tb=spigot-yandex&url=http://llsw.download3.utorrent.com/offers/spigot-yandex-en-20140708.exe&prog=100&t=&view=win32 HTTP/1.1

Accept-Encoding: gzip

User-Agent: uTorrent(37754)/3.4.2

Host: update.utorrent.li

Cache-Control: no-cache


HTTP/1.1 200 OK

Server: nginx/1.4.7

Date: Thu, 29 Jan 2015 07:53:58 GMT

Content-Type: text/html

Transfer-Encoding: chunked

Connection: close

X-Powered-By: PHP/5.4.30

0..

GET /e?i=1005&e=eyJldmVudE5hbWUiOiJhcC5hZHRhZyIsImFjdGlvbiI6ImxvYWRlZCIsImFkdCI6IjUiLCJicm93c2VyIjoiaWUiLCJjbGllbnRkYXRhIjoidXRvcnJlbnQlN2MzJTJlNCUyZTIlMmUzNzc1NCU3YzIxNyIsInBhZ2UiOiJ0b3JyZW50Iiwic2l0ZSI6IjMzMDQ5In0=&callback=jQuery1112030972456739033316_1422518040734&_=1422518040735 HTTP/1.1

Accept: */*

Referer: hXXp://cdn.bitmedianetwork.com/network/index.html?adt=5&browser=ie&clientdata=utorrent|3.4.2.37754|217&page=torrent&site=33049

Accept-Language: en-US

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/6.0)

Accept-Encoding: gzip, deflate

Host: bench.staging.utorrent.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Content-Type: text/html

Date: Thu, 29 Jan 2015 07:54:01 GMT

Server: nginx

X-Powered-By: PHP/5.4.30

Content-Length: 65

Connection: keep-alive

jQuery1112030972456739033316_1422518040734({"response_code":200})HTTP/
1.1 200 OK..Content-Type: text/html..Date: Thu, 29 Jan 2015 07:54:01 G
MT..Server: nginx..X-Powered-By: PHP/5.4.30..Content-Length: 65..Conne
ction: keep-alive..jQuery1112030972456739033316_1422518040734({"respon
se_code":200})..

GET /utorrent-onboarding/player.btapp?h=uVVfIsRBsnvPyT6P&v=102852600&ol=en&ul=&tk=main&c=uTorrent HTTP/1.1

Host: apps.bittorrent.com

User-Agent: BTWebClient/3100(26616)

Accept-Encoding: gzip

If-Modified-Since: Tue, 08 Oct 2013 00:53:35 GMT

Connection: Close


HTTP/1.1 304 Not Modified

Content-Type: binary/octet-stream

Age: 102082

Date: Thu, 29 Jan 2015 07:52:36 GMT

Connection: close

GET /MFUwUzBRME8wTTAJBgUrDgMCGgUABBS856ddZAq5lE7vDJmoUDW1u98SMAQU3WyAfLq1MhelhEFA8NIEZhMvqZACFGozgiJkrf5JafrJHx/pwJ6+De+O HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: vassg141.ocsp.omniroot.com


HTTP/1.1 200 OK

Server: nginx

Content-Type: application/ocsp-response

Content-Length: 1765

Last-Modified: Thu, 29 Jan 2015 07:48:15 GMT

ETag: "e66a9ce3f162129952a5bdffcb01b00099fbe555"

Cache-Control: public, no-transform, must-revalidate, max-age=339761

Expires: Mon, 02 Feb 2015 06:15:25 GMT

Date: Thu, 29 Jan 2015 07:52:44 GMT

Connection: keep-alive

0..........0..... .....0......0...0..........[us..Ni......f....2015012
9074815Z0w0u0M0... ...........]d...N....P5....0...l.|..2...A@...f./...
.j3."d..Ii...............20150129074815Z....20150202074815Z0...*.H....
.........;S......R..%v. ..!b..ha;C}U.~....Cd.#....j...&u.k...S.v......
.o.A.........*..4..9....J.(`...[mA.jb3.-x5.s.(.CxY-$..2..B.v.v....e#'.
.Q....{r.....X...U. .........pXE..w..2D.;2."...}......!0.{u..... ..U..
..?..!S.n=...h.1.yRp6.D.H`.mg.....5Cfg,...4D#..|...j.......0...0...0..
.........=......Ri..\..(.{..0...*.H........0..1.0...U....NL1.0...U....
Amsterdam1%0#..U....Verizon Enterprise Solutions1.0...U....Cybertrust1
.0,..U...%Verizon Akamai SureServer CA G14-SHA10...140410115548Z..1504
10115548Z0..1.0...U....NL1.0...U....Amsterdam1%0#..U....Verizon Enterp
rise Solutions1.0...U....Cybertrust1806..U.../Verizon Akamai SureServe
r CA G14-SHA1 Responder0.."0...*.H.............0.........f..).1.......
......Z.45..l. IB..r`...f....h.....h..._i'...J....|.c....E.D0bg.b.v...
.......:Q....W._U.w..3....i...k........t.....m.CO$..j@.....>..Q.m..
....1/Z.r......L..a.n..;..KoIY.......fk{..c..d...IU.......zy.X...zp...
F.1..F......b...Z...=9.o...N.fL.%Z.........H0..D0... .....0......0L..U
. .E0C0A.. .....>..0402.. ........&hXXps://secure.omniroot.com/repo
sitory0~.. ........r0p06.. .....0..*hXXps://cacert.a.omniroot.com/vass
g141.crt06.. .....0..*hXXps://cacert.a.omniroot.com/vassg141.der0...U.
..........0...U.%..0... .......0...U.#..0....l.|..2...A@...f./..0...U.
.........[us..Ni......f..0...*.H.............Fk:..%..H.:.|P.;..-3.

<<< skipped >>>

GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBRIt2RJ89X++hEzqoBeQg8PymQ2UQQUANhaTCXBIuWLMe9tuvPMXynxDWECEDWXMYfzhzoHMn7OWAybfto= HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: ocsp.verisign.com


HTTP/1.1 200 OK

Server: nginx/1.4.7

Content-Type: application/ocsp-response

Content-Length: 1453

content-transfer-encoding: binary

Cache-Control: max-age=489755, public, no-transform, must-revalidate

Last-Modified: Tue, 27 Jan 2015 23:51:54 GMT

Expires: Tue, 3 Feb 2015 23:51:54 GMT

Date: Thu, 29 Jan 2015 07:52:38 GMT

Connection: keep-alive
0..........0..... .....0......0...0......T3t.%..O.E..~..F.=....2015012
7235154Z0s0q0I0... ........H.dI.....3..^B...d6Q....ZL%."..1.m..._)..a.
.5.1...:.2~.X..~.....20150127235154Z....20150203235154Z0...*.H........
......M.(...3........wG..8..GbW.....%J.X=..4.:..0.~x...UK.v.q....{G-R.
N..Tm.G........].Ly./.0....2...P>...,.&..*m...0......Y.'.h.0*..^...
...E....[8.u..8........)....\.S..d..........,.)......B... ...N......~.
P.....d....e.z..Wk.....N$[_...e..[....0.8....f...(.?1G....0...0...0..3
......./...b.v..-....l}0...*.H........0_1.0...U....US1.0...U....VeriSi
gn, Inc.1705..U....Class 3 Public Primary Certification Authority0...1
41202000000Z..151216235959Z0..1.0...U....US1.0...U....Symantec Corpora
tion1.0...U....Symantec Trust Network1?0=..U...6Symantec Class 3 PCA -
 G1 OCSP Responder Certificate 30.."0...*.H.............0..........'..
....Y..x.3B1.7..Q..`..d.. ....s..t.$a.....j2R.{ ,*..c{.3.....H..3-; ).
....0._...*..9M..V...... ...{m...-.......)..tR..{D....~...M...T..pS.p.
.^|o....S..v.).).....r.v.qo$......C.V!....@.h#qh...u1T.].G0.]E...=._..
.... ........TE...Sa.s4........r...3.............0..0...U....0.0l..U. 
.e0c0a..`.H...E....0R0&.. .........hXXp://VVV.symauth.com/cps0(.. ....
...0...hXXp://VVV.symauth.com/rpa0...U.%..0... .......0...U........0..
. .....0......0!..U....0...0.1.0...U....TGV-B-2730...*.H.............$
..H......oU....Y!.z{*.V.M..u.._z..3>.. 0....3..m.....e.......a..D..
.........e..F6:.y.....di.......<y.Z.......x}..q.2....UZ1 :,.
...
<<< skipped >>>

GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBS56bKHAoUD+Oyl+0LhPg9JxyQm4gQUf9Nlp8Ld7LvwMAnzQzn6Aq8zMTMCEG7MeqWnAyAJuM689OlS1JE= HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: ocsp.verisign.com


HTTP/1.1 200 OK

Server: nginx/1.4.7

Content-Type: application/ocsp-response

Content-Length: 1762

content-transfer-encoding: binary

Cache-Control: max-age=463045, public, no-transform, must-revalidate

Last-Modified: Tue, 27 Jan 2015 16:27:13 GMT

Expires: Tue, 3 Feb 2015 16:27:13 GMT

Date: Thu, 29 Jan 2015 07:52:38 GMT

Connection: keep-alive

0..........0..... .....0......0...0......;O}a.!..u...au..eUNp..2015012
7162713Z0s0q0I0... ...................B.>.I.$&.....e......0..C9...3
13..n.z... ......R......20150127162713Z....20150203162713Z0...*.H.....
...............A....H...#...At.(..lE.........W..s.U......UV;..?.).)p.j
M........#.K:P..#YN%....Q.5r.].I...9.(}.....C.qS]!.n..ZO@..~:_.L..e..H
X0...#3k.q..N8..>....._..9.. ...d..FGw......PW.%..V.?J..B..]5..{...
"j...%.,%.h.]..k6/...6.5..%Yu...7...z2]......8.WS...Y.l.e....0...0...0
...........2...'U.BM...g.B0...*.H........0..1.0...U....US1.0...U....Ve
riSign, Inc.1.0...U....VeriSign Trust Network1:08..U...1(c) 2006 VeriS
ign, Inc. - For authorized use only1E0C..U...<VeriSign Class 3 Publ
ic Primary Certification Authority - G50...141202000000Z..151216235959
Z0..1.0...U....US1.0...U....Symantec Corporation1.0...U....Symantec Tr
ust Network1?0=..U...6Symantec Class 3 PCA - G5 OCSP Responder Certifi
cate 30.."0...*.H.............0...............2&..PL...,..2....:..tH..
.`JG.%..*...s.c%...?t..J..0.q....~..k@X.l.i....0..kk..h.9"1.5?..s.....
3[...u......]...R0..Z}....l..I.Y.....j\H.q...#.uw.4qz.#.J.....@2$"..$l
.B.......D.ye..(..2.........@...... ...."... E..0M,..b{.^..s'....f.6.p
r4.J........'j..........0...0...U.......0.0l..U. .e0c0a..`.H...E....0R
0&.. .........hXXp://VVV.symauth.com/cps0(.. .......0...hXXp://VVV.sym
auth.com/rpa0...U.%..0... .......0...U...........0... .....0......0!..
U....0...0.1.0...U....TGV-B-2760...U......;O}a.!..u...au..eUNp0...U.#.
.0.....e......0..C9...3130...*.H.............(.&..Dgr.Ve..#...5.N.

<<< skipped >>>

GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBS56bKHAoUD+Oyl+0LhPg9JxyQm4gQUf9Nlp8Ld7LvwMAnzQzn6Aq8zMTMCEFIA5aolVvwahu2WydRLM8c= HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: ocsp.verisign.com


HTTP/1.1 200 OK

Server: nginx/1.4.7

Content-Type: application/ocsp-response

Content-Length: 1762

content-transfer-encoding: binary

Cache-Control: max-age=440898, public, no-transform, must-revalidate

Last-Modified: Tue, 27 Jan 2015 10:17:02 GMT

Expires: Tue, 3 Feb 2015 10:17:02 GMT

Date: Thu, 29 Jan 2015 07:52:43 GMT

Connection: keep-alive

0..........0..... .....0......0...0......;O}a.!..u...au..eUNp..2015012
7101702Z0s0q0I0... ...................B.>.I.$&.....e......0..C9...3
13..R...%V.......K3.....20150127101702Z....20150203101702Z0...*.H.....
........A8~....@.........C..l..2....#:....U.^.....`.DE.....!F....7..u.
.Q.r...!R......?......ajn...k.....K.(..ZmP..QK@........W.R..HP........
F..,...]%..zA.<..I.....K.?...Y.`.....\............:B.\......d....R.
e|..t.~.$...>3./m>.@.....ZM{?.....N......%b.{UUb>.t.q..4/....
0...0...0...........2...'U.BM...g.B0...*.H........0..1.0...U....US1.0.
..U....VeriSign, Inc.1.0...U....VeriSign Trust Network1:08..U...1(c) 2
006 VeriSign, Inc. - For authorized use only1E0C..U...<VeriSign Cla
ss 3 Public Primary Certification Authority - G50...141202000000Z..151
216235959Z0..1.0...U....US1.0...U....Symantec Corporation1.0...U....Sy
mantec Trust Network1?0=..U...6Symantec Class 3 PCA - G5 OCSP Responde
r Certificate 30.."0...*.H.............0...............2&..PL...,..2..
..:..tH...`JG.%..*...s.c%...?t..J..0.q....~..k@X.l.i....0..kk..h.9"1.5
?..s.....3[...u......]...R0..Z}....l..I.Y.....j\H.q...#.uw.4qz.#.J....
.@2$"..$l.B.......D.ye..(..2.........@...... ...."... E..0M,..b{.^..s'
....f.6.pr4.J........'j..........0...0...U.......0.0l..U. .e0c0a..`.H.
..E....0R0&.. .........hXXp://VVV.symauth.com/cps0(.. .......0...http:
//VVV.symauth.com/rpa0...U.%..0... .......0...U...........0... .....0.
.....0!..U....0...0.1.0...U....TGV-B-2760...U......;O}a.!..u...au..eUN
p0...U.#..0.....e......0..C9...3130...*.H.............(.&..Dgr.Ve.

<<< skipped >>>

GET /pro/utorrent/index.html HTTP/1.1

Host: utclient.utorrent.com

User-Agent: BTWebClient/3420(37754)

Accept-Encoding: gzip

Connection: Close


HTTP/1.1 200 OK

Content-Type: text/html

Content-Length: 765

Connection: close

Date: Tue, 16 Dec 2014 20:04:58 GMT

x-amz-meta-s3cmd-attrs: uid:107/gname:jenkins/uname:jenkins/gid:120/mode:33188/mtime:1418760067/atime:1418760067/ctime:1418760067

Cache-Control: s-maxage=300

Last-Modified: Tue, 16 Dec 2014 20:01:09 GMT

ETag: "96ca7656ad5f8bd2371c5514deb0b099"

Accept-Ranges: bytes

Server: AmazonS3

Age: 141

X-Cache: Hit from cloudfront

Via: 1.1 ad1289c08e15a848e5c2bc019529785a.cloudfront.net (CloudFront)

X-Amz-Cf-Id: zTvEUukPAmoo4egPgshHB7-wk811eyPVbVUanLUeVlKZYXhDuKkgbg==
<html>..<head>...<script type='text/javascript' src='..
/commonjs/jq.js'> </script>...<script type='text/javascrip
t' src='../commonjs/proactive.js?ver=1'></script>...<scrip
t type="text/javascript">....$.ajax({.....url: "hXXp://VVV.utorrent
.com/scripts/headers.php",.....dataType: 'jsonp',.....success: functio
n(headers) {......country = headers['Geoip-Country-Code'];.......//Red
irect US visitors......if(country == 'US'){.......setToUS();......}...
..}....});...</script>...<script src="//cdn.optimizely.com/js
/240758443.js"></script>...<link href="../commoncss/index.
css" rel="stylesheet" type="text/css"/>....<meta charset=utf-8&g
t;...<title>Default : Pro Upgrade App</title>..</head&g
t;..<body>...<iframe id='ifr' width='100%' height='100%'> 
</iframe>..</body>.</html>...

GET /discoverContent/discoverContent.btapp?h=uVVfIsRBsnvPyT6P&v=102852600&ol=en&ul=&tk=main&c=uTorrent HTTP/1.1

Host: apps.bittorrent.com

User-Agent: BTWebClient/3100(26616)

Accept-Encoding: gzip

Connection: Close


HTTP/1.1 200 OK

x-amz-id-2: IYCxTq9aPXwSkqfOyrX7WvXlD8hOm5lxZvIN4mUvIVAsBbt6gf9HKQMO6h 4L4Kw

x-amz-request-id: 0EECFCB80D3F44DC

Accept-Ranges: bytes

Content-Type: binary/octet-stream

Server: AmazonS3

Age: 123172

Date: Thu, 29 Jan 2015 07:52:35 GMT

Last-Modified: Tue, 08 Oct 2013 01:06:34 GMT

Content-Length: 266548

Connection: close
PK.........}E?..H.............btapp].... .......D.12.].9{..U.. c..%.S6
[:..Q.../6...)2F.m,>E5.E.j./;.zx^.Q......f...JA..Y....H../'m:.[.}..
..pX,....W...4..DP.. .....Y@}jD..X.y..PK.........}E?................cs
s/PK.........}E?. ..I...........css/0_reset.css}R.n.0.}^...[`.P8..]0$.
...mk....tY.....6y(.D.H...G..hHi....3..n...5.-.........9..T/..p.<7.
..M...n...\....Z...)}.(..U$..p....Xb.].. .7..[./X_..a}.h....p.|b.!....
6. .wg..R.*......X.U. 6(.Cr......=>..C.*:.<.....V.. .}..#E.}j...
$..D....<H..q... a...<a..@..(.. ..N.r.q.N!.Dkr.bL.;$..K.....Ba..
....\|.".......!.v..j}P........VV`........]'.IKa........o.&!.}..S;....
..-B...\d)%....~H...s..pD.t6H.<....a..W..>f.2....%.Y..[.8...D..P
.j.....e..[.-.$O.;t.7.S.Rp|(...]...o<........1Y.<x......_..p....
.Z..A.I.Q.I~.R.O.^.......mhc.1 ZI6./(1)?....j..E...4.B...gnj-.1b.h....
.3.<vsbA....=h;......}.Y..@..PK.........}E?........:.......css/1_gr
oup.css.....0.D.~."."T.k<..=....d5Kc"q[.....T...6....,.B..\,.@....x
.I..M...........De.z..g..Y3..Gy..X.i.o.ye....4 5.......z..........m.r.
...q..W..u.-..(...n....`...L.pka......~.PK.........}E?`...Z...........
css/2_grid.css.XQ..0.~............Q.....m6..<....(CG.X.....(H.4..}b
.R.6E3..RVR...b.f.@.....N..... ?.jt..QL.c.3.......n.!.....r[......b.._
C{..qza.?..)..0.'...h..>ts. J..'4..R%......4F7.Zw...m..k.....N.RT.a
.@.3.>3.%....a.).....n...s.n....g...Br........"!.!.>..>..yD2.
|..U..!NU.:.. y.......t*.!v|..]....e........)u.....rQ..U...i.z4k@.&.^.
...$.0........X.N".tx......DbLa.b.$....0..U1Y.:.q.J.`..*..</u..<<< skipped >>>

GET /e?i=1005&e=eyJldmVudE5hbWUiOiJhcC5hZHRhZyIsImFjdGlvbiI6ImxvYWRlZCIsInRhZyI6ImFudCIsImFkdCI6IjEyMjQiLCJicm93c2VyIjoiaWUiLCJjbGllbnRkYXRhIjoidXRvcnJlbnQlN2MzJTJlNCUyZTIlMmUzNzc1NCU3YzIxNyIsInBhZ2UiOiJ0b3JyZW50Iiwic2l0ZSI6IjMzMDQ5In0=&callback=jQuery1111011064228616044735_1422518160387&_=1422518160388 HTTP/1.1

Accept: */*

Referer: hXXp://cdn.bitmedianetwork.com/network/index-edge.html?tag=ant&adt=1224&browser=ie&clientdata=utorrent|3.4.2.37754|217&page=torrent&site=33049

Accept-Language: en-US

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/6.0)

Accept-Encoding: gzip, deflate

Host: bench.utorrent.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Content-Type: text/html

Date: Thu, 29 Jan 2015 07:56:01 GMT

Server: nginx

X-Powered-By: PHP/5.4.30

Content-Length: 65

Connection: keep-alive

jQuery1111011064228616044735_1422518160387({"response_code":200})HTTP/
1.1 200 OK..Content-Type: text/html..Date: Thu, 29 Jan 2015 07:56:01 G
MT..Server: nginx..X-Powered-By: PHP/5.4.30..Content-Length: 65..Conne
ction: keep-alive..jQuery1111011064228616044735_1422518160387({"respon
se_code":200})..

GET /analytics.js HTTP/1.1

Accept: */*

Referer: hXXp://cdn.bitmedianetwork.com/network/index-edge.html?tag=ant&adt=5&browser=ie&clientdata=utorrent|3.4.2.37754|217&page=torrent&site=33049

Accept-Language: en-US

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/6.0)

Accept-Encoding: gzip, deflate

Host: VVV.google-analytics.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Date: Thu, 29 Jan 2015 07:46:42 GMT

Expires: Thu, 29 Jan 2015 09:46:42 GMT

Last-Modified: Fri, 16 Jan 2015 00:55:08 GMT

X-Content-Type-Options: nosniff

Content-Type: text/javascript

Vary: Accept-Encoding

Content-Encoding: gzip

Server: Golfe2

Content-Length: 11479

Age: 558

Alternate-Protocol: 80:quic,p=0.02

Cache-Control: public, max-age=7200
...........}iw.;..w..P.vW..2.NN.....'.I...,.$cb....1....gK.*0....^}.jk
...,%<..T......B..H....j....G...p`..8I.{.=...L&&{.;7.i&....N...;oT(
E...M6.....tlN.t..8.K....P.5t.V%....R.@.L.-3...$8..:....O.@...L..p..b.
.jldf...9.4.=.R.^..{.4..4...AS#Ip:.P.=*6..(.0..C%1.@......^....#3..i..
V.`....@.1.'4..0..a.ZL..M8.g4..l..(9.......N..)wA..5.......{....4...(.
%...\.R.=*........?...$.#....A7...I...F*....0..Q.>..~.....Q...4.c.N
 .Q...<.y....=.....4..F..@.%:..ue6....M{$.T...M .'..a..~Am._./.....
..5...|...&;.M..D.f...yW..ubZ..e...Tjsn.B'.sIm.;.%J^hT.....t..l:....&g
t;.T.j*..FM..gZ..2...za.2..M..S.d8..d.P...S..#..ZS.J...4U...m.I.g6.Tu.
6..4iw..[.l...0m.....e6.Ghk..[}wW..~Tj%].;.{........x.................
.2U......g...p.s<....W..j....{..|.... V.r.GX.Y...;.i.y'.....O0...1&
..c4j....f.P.l........lf.AA.`..O..8[Y.=L........u.*..7vR6<.-.~..-.k
>.?W5t.b..wj.D..o.wC....-?U...4.vF..........Z.%.D...LV.#[..Vu..o...
...u..<uw. ..F@..........0z.4.f._..'uJ..Q..d.../.\LK.D7s.j...I(...M
U..0..eF~.X...p.Ai......%4........O.....M230..mP..5%*..5(3..:......0..
P.......MtC..3....\..m.xl...f.....#....6...>K..K...@.')vM&j..e.h..,
(.U..C^H.C.rr=PD.@wx.R:.*&.E....d...q......{@D.h.].4u.C..i..?=4t.M.. .
|...vG.4.F.......N.Ig.......$.....;....\^^.AD..i'.!......I.>1...7.?
....V.x.xs...I...:.=.k...f.o..........D.f..o..I....J"u..6in.C...u?....
8.s.k.b...ts}}0.. ..Q:.....d..|.X...TB'..R|..F..j].<:CD....!.L..j.t
...P.....O{LH.F.%...?..DDS.z...?1w....S.I..P~T.#.....R......?. RLh....
R..1...=jy.....j.jm.y.8u.(...}..%........F....&}..r..`..k.t..,...V<<< skipped >>>

GET /collect?v=1&_v=j32&a=193293625&t=pageview&_s=1&dl=http://cdn.bitmedianetwork.com/network/index-edge.html?tag=ant&adt=1224&browser=ie&clientdata=utorrent%7c3%2e4%2e2%2e37754%7c217&page=torrent&site=33049&ul=en-us&de=windows-1252&sd=24-bit&sr=1716x901&vp=908x34&je=1&_u=MACAAEQAI~&jid=&cid=281852828.1422518160&tid=UA-54512734-1&z=723704758 HTTP/1.1

Accept: */*

Referer: hXXp://cdn.bitmedianetwork.com/network/index-edge.html?tag=ant&adt=1224&browser=ie&clientdata=utorrent|3.4.2.37754|217&page=torrent&site=33049

Accept-Language: en-US

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/6.0)

Accept-Encoding: gzip, deflate

Host: VVV.google-analytics.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Pragma: no-cache

Expires: Mon, 07 Aug 1995 23:30:00 GMT

Access-Control-Allow-Origin: *

Last-Modified: Sun, 17 May 1998 03:00:00 GMT

X-Content-Type-Options: nosniff

Content-Type: image/gif

Date: Tue, 27 Jan 2015 21:42:00 GMT

Server: Golfe2

Content-Length: 35

Age: 123240

Alternate-Protocol: 80:quic,p=0.02

Cache-Control: private, no-cache, no-cache=Set-Cookie, proxy-revalidate

GIF89a.............,...........D..;HTTP/1.1 200 OK..Pragma: no-cache..
Expires: Mon, 07 Aug 1995 23:30:00 GMT..Access-Control-Allow-Origin: *
..Last-Modified: Sun, 17 May 1998 03:00:00 GMT..X-Content-Type-Options
: nosniff..Content-Type: image/gif..Date: Tue, 27 Jan 2015 21:42:00 GM
T..Server: Golfe2..Content-Length: 35..Age: 123240..Alternate-Protocol
: 80:quic,p=0.02..Cache-Control: private, no-cache, no-cache=Set-Cooki
e, proxy-revalidate..GIF89a.............,...........D..;..

GET /cgi-bin/CRL/2018/cdp.crl HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: VVV.public-trust.com


HTTP/1.1 200 OK

Server: Apache/2.2.15 (CentOS)

Last-Modified: Tue, 20 Jan 2015 06:15:01 GMT

ETag: "200c0-409-50d0f5bed6e6c"

Accept-Ranges: bytes

Content-Type: application/x-pkcs7-crl

Connection: Keep-Alive

Date: Thu, 29 Jan 2015 07:54:18 GMT

Content-Length: 1033

0...0..n...0...*.H........0u1.0...U....US1.0...U....GTE Corporation1'0
%..U....GTE CyberTrust Solutions, Inc.1#0!..U....GTE CyberTrust Global
 Root..141217194339Z..150419194839Z0...0....'.x..110110211653Z0....'..
..141119195306Z0....'B...141119195752Z0....'....141119200006Z0....'.:.
.071121154528Z0....'.v..080219183346Z0....'....080514142515Z0....'....
080515170349Z0....'....080924143337Z0....'#...081203144336Z0....''j..0
90209174351Z0....'b...100414181148Z0....'....080917150432Z0....'#...08
1203144209Z0....'#...081203144241Z0....'#...081203144304Z0....'%u..081
203144409Z0....'/9..090318130930Z0....'8...090715181853Z0....'TU..1001
13191852Z0....'k...101130163724Z0....'.B..111107193907Z0....'@...14111
9200409Z0....'....080917150312Z0....'....140709175318Z0....'....141210
173900Z0....'-E..141119195854Z0....'....141119200037Z0....'F...1412171
93909Z0....'F...141217193956Z..0.0...U........0...*.H............ ....
.....0.g97a.b...5.h.....<......G...}.E/.y1.n..>... ...........U.
.O../..1...~t[I/y.:.....s.#E....b.1.k.._........y#*...:Ol..HTTP/1.1 20
0 OK..Server: Apache/2.2.15 (CentOS)..Last-Modified: Tue, 20 Jan 2015 
06:15:01 GMT..ETag: "200c0-409-50d0f5bed6e6c"..Accept-Ranges: bytes..C
ontent-Type: application/x-pkcs7-crl..Connection: Keep-Alive..Date: Th
u, 29 Jan 2015 07:54:18 GMT..Content-Length: 1033..0...0..n...0...*.H.
.......0u1.0...U....US1.0...U....GTE Corporation1'0%..U....GTE CyberTr
ust Solutions, Inc.1#0!..U....GTE CyberTrust Global Root..141217194339
Z..150419194839Z0...0....'.x..110110211653Z0....'....141119195306Z

<<< skipped >>>

GET /p/883/ius/syesubc3_p2v3.exe HTTP/1.1

Connection: Keep-Alive

Accept: */*

Host: cdn3.opencandy.com


HTTP/1.1 200 OK

x-amz-id-2: xNCmgbKONvfgx5 RRgRMcRb1frHlCmgEKEijmSnvfPmKY4GgeouPoUxKwUnk9M7F

x-amz-request-id: C1E1581CD4970CB4

Last-Modified: Tue, 16 Dec 2014 16:59:02 GMT

ETag: "7d92f9cf0e121e7fb72da522f7fcd6cb"

Accept-Ranges: bytes

Content-Type: binary/octet-stream

Content-Length: 65008

Server: AmazonS3

Cache-Control: max-age=70

Date: Thu, 29 Jan 2015 07:53:50 GMT

Connection: keep-alive

MZ......................@.............................................
..!..L.!This program cannot be run in DOS mode....$.......A{.k...8...8
...8.b<8...8.b,8...8...8...8...8...8..%8...8.."8...8Rich...8.......
.PE..L.....GO.................n.......B...8............@..............
...................I=....@.................................4..........
.............8...........d............................................
........................................text....m.......n.............
..... ..`.rdata..b*.......,...r..............@..@.data....~...........
...............@....ndata.......0...........................rsrc......
.........................@..@.reloc..2...........................@..B.
......................................................................
......................................................................
......................................................................
......................................................................
...............................................U....\.}..t .}.F.E.u..H
.....-G..H.P.u..u..u.....@..K...SV.5.-G.W.E.P.u.....@..e...E..E.P.u...
..@..}..e....D.@........FR..VV..U... M..........M........E...FQ.....NU
..M.......M...VT..U........FP..E...............E.P.M...H.@..E..P.E..E.
P.u.....@..u....E..9}...n....~X.te.v4..L.@..E...tU.}.j.W.E......E.....
..P.@..vXW..T.@..u..5X.@.W..h ....E..E.Pj.h..F.W....@..u.W...u....E.P.
u.....@._^3.[.....L$...-G...i. @...T.....tUVW.q.3.;5.-G.sD..i. @...D..
S.....t.G.....t...O..t .....u...3....3...F. @..;5.-G.r.[_^...U..QQ

<<< skipped >>>

GET /featuredcontent/featuredcontent.btapp?h=uVVfIsRBsnvPyT6P&v=102852600&ol=en&ul=&tk=main&c=uTorrent HTTP/1.1

Host: apps.bittorrent.com

User-Agent: BTWebClient/3100(26616)

Accept-Encoding: gzip

If-Modified-Since: Tue, 08 Oct 2013 01:06:32 GMT

Connection: Close


HTTP/1.1 304 Not Modified

Content-Type: binary/octet-stream

Age: 43560

Date: Thu, 29 Jan 2015 07:52:36 GMT

Connection: close

GET /?clientv=53&inst_id=&method=track_encapsulated_offer_downloaded&mstime=0.328&offer_downloaded_secs=0.000&offer_id=7861&package_md5=7d92f9cf0e121e7fb72da522f7fcd6cb&product_key=cb00343115ffdf69411419d8a9ceff1a&session_key=20bcba5375d77d545a33b67dd4cffcac&sswnt=&tm=2015-01-29 07:53:50.912&v=1.0&signature=bf23998977e1918159e90da64f83a069 HTTP/1.1

Cache-Control: no-cache

Connection: Keep-Alive

Pragma: no-cache

Accept: */*

Host: api.opencandy.com


HTTP/1.1 200 OK

Date: Thu, 29 Jan 2015 07:53:51 GMT

Server: Apache

X-Robots-Tag: noindex

Last-Modified: Thu, 29 Jan 2015 07:53:51 GMT

Cache-Control: no-store, no-cache, must-revalidate

Cache-Control: post-check=0, pre-check=0

Pragma: no-cache

Connection: close

Transfer-Encoding: chunked

Content-Type: text/xml
66..<?xml version="1.0"?><track_offer_downloaded><opera
tion>Completed</operation></track_offer_downloaded>..0.
.

GET /sites/default/files/bittorrent2_favicon.ico HTTP/1.1

Host: VVV.bittorrent.com

User-Agent: BTWebClient/3100(26616)

Accept-Encoding: gzip

Connection: Close


HTTP/1.1 404 Not Found

Server: nginx/1.4.7

Content-Type: text/html

Age: 5

Date: Thu, 29 Jan 2015 07:52:35 GMT

Expires: Thu, 29 Jan 2015 07:52:40 GMT

Content-Length: 168

Connection: close
<html>..<head><title>404 Not Found</title><
/head>..<body bgcolor="white">..<center><h1>404 N
ot Found</h1></center>..<hr><center>nginx/1.4.
7</center>..</body>..</html>....

GET //MEQwQjBAMD4wPDAJBgUrDgMCGgUABBTkIInKBAzXkF0Qh0pel3lfHJ9GPAQU0sSw0pHUTBFxs2HLPaH+3ahq1OMCAxvnFQ== HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: ocsp.godaddy.com


HTTP/1.1 200 OK

Date: Thu, 29 Jan 2015 07:52:36 GMT

Server: Apache

Content-Transfer-Encoding: Binary

Cache-Control: max-age=121270, public, no-transform, must-revalidate

Last-Modified: Thu, 29 Jan 2015 07:20:09 GMT

Expires: Fri, 30 Jan 2015 19:20:09 GMT

ETag: "fdc58dd67846d48bf3e9d56d187fe67b12d44b6d"

P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"

Content-Length: 1816

Connection: close

Content-Type: application/ocsp-response
0..........0..... .....0......0...0..-...0..1.0...U....US1.0...U....Ar
izona1.0...U....Scottsdale1.0...U....GoDaddy.com, LLC1-0 ..U...$http:/
/certs.godaddy.com/repository/1.0,..U...%Go Daddy Class 2 Validation A
uthority..20150129072009Z0f0d0<0... ......... ......]..J^.y_..F<
........L.q.a.=....j...........20150129072009Z....20150130192009Z0...*
.H..............#.zJ....'....j.....7s..'.....a]..f.gam..].l.{yl.5U.._.
..`;.....$...E.....`.....y9@/k"o.*.T.7.:8... E.9..............|...^...
..Sj.f{m....L.Y.H.9.......(..d8.3=.....E@@=.\.%v..6.-...5~.....s.a.L..
s..]...O*.1....[;..5.d.f...3F.k....i.y..^.6./.SH......'T.H.......0...0
...0.......... .0...*.H........0c1.0...U....US1!0...U....The Go Daddy 
Group, Inc.110/..U...(Go Daddy Class 2 Certification Authority0...1404
01070000Z..150401070000Z0..1.0...U....US1.0...U....Arizona1.0...U....S
cottsdale1.0...U....GoDaddy.com, LLC1-0 ..U...$hXXp://certs.godaddy.co
m/repository/1.0,..U...%Go Daddy Class 2 Validation Authority0.."0...*
.H.............0..........J<V_....7p\.....^.'...Y.C.BPX..$.?.......
#..S....'=.....D..h-.n.....#....n..M...c..:E.x..Q.&..2w..{..oq...y....
...K..@bH....7&.G.U.....G.{.Cj....S.|.).(....... .....}4.[r........N..
.......1B.zp..L.....Eq.G$a.A...9..... /.B.....G..e....7.\=QcN......Xw.
.4].........0...0...U.......0.0...U...........0...U.%..0... ......... 
.......0...U.......dK...Z5...NP.\.S.~.0...U.#..0.........L.q.a.=....j.
.0... .....0......02..U... 0)0'.%.#.!hXXp://crl.godaddy.com/gdroot.crl
0M..U. .F0D0B..`.H...m....0301.. ........%hXXps://certs.godaddy.co<<< skipped >>>

GET /ui/0/7.1.0.105.550/en/installed HTTP/1.1

User-Agent: Skype. 7.1

Host: ui.skype.com

Cache-Control: no-cache


HTTP/1.1 200 OK

Date: Thu, 29 Jan 2015 07:54:09 GMT

Server: Apache

Last-Modified: Fri, 12 Dec 2014 16:30:08 GMT

Accept-Ranges: bytes

Content-Length: 0

X-Debug: Served from cache

Connection: close

Content-Type: text/plain; charset=utf-8

Content-Language: en

GET /0dce4e856bdf8239787df5c367298d54/partner/trackable/550/SkypeSetupFull.exe HTTP/1.1

User-Agent: NSIS_Inetc (Mozilla)

Host: download.skype.com

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 200 OK

Server: nginx

Content-Type: application/octet-stream

Content-Length: 40728672

Last-Modified: Wed, 28 Jan 2015 08:48:32 GMT

ETag: "54c8a260-26d7860"

Accept-Ranges: bytes

Cache-Control: max-age=86400

Date: Thu, 29 Jan 2015 07:53:51 GMT

Connection: keep-alive

MZP.....................@.............................................
..!..L.!..This program must be run under Win32..$7....................
......................................................................
..............................................PE..L....-.T............
......h.......$..K....$..`....@...................................m...
.......@...................................`...............:m.`>...
...............................0W..................................&..
.................UPX0......$.............................UPX1......h..
.$...h.................@....rsrc........`........h.............@......
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
..........3.07.UPX!.....m.,.H..m'....h..b..&%.=........x^...~...{.k...
..>..,.dQEu.Q.._=.. ...f..P*=.<.0..=..j....I,\.......-P..C.uO...
M......}.]..X..T........6..bvM1.*=z.c.^.........I.Uu....$r%....K......
...c.Z.M.6....8q.kW._..k..b.z...%#F.o...-=....G......x.2.......L^....U
.......(.M.0...)i].BdW9xR.4('..C.x.7.........H....=.l..6%.z...lo.w.8..
..X...Y..\...t.G8..R8_.6i^:V.".Q[.....E..2....3Km.hG...^_T.......=0S..
...f.au2&...v.=e.p....".}<o"_m..wF%E.s^....ib...F.s?..%..$.....APt-
.4P.K.161.'|.&.G.......(.,o.*..]l..5.....~-F...S....%...$..7g....

<<< skipped >>>

GET /MEQwQjBAMD4wPDAJBgUrDgMCGgUABBSxtDkXkBa3l3lQEfFgudSiPNvt7gQUAPkqw0GRtsnCuD5V8sCXEROgByACAwI6dg== HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: g.symcd.com


HTTP/1.1 200 OK

Server: nginx/1.4.7

Content-Type: application/ocsp-response

Content-Length: 1363

content-transfer-encoding: binary

Cache-Control: max-age=537124, public, no-transform, must-revalidate

Last-Modified: Wed, 28 Jan 2015 13:01:57 GMT

Expires: Wed, 4 Feb 2015 13:01:57 GMT

Date: Thu, 29 Jan 2015 07:52:39 GMT

Connection: keep-alive
0..O......H0..D.. .....0.....50..10......7).nj./P(.3.\\.;.B....2015012
8130157Z0f0d0<0... ..........9.....yP..`...<.......*.A.....>U
....... ...:v....20150128130157Z....20150204130157Z0...*.H............
.t.L~...vz..h.22..lK.iK...'ec...FR.... ....!..q*......1E..5r*,...]M..|
'..`e.UJ..S.._.jnGy......tT~.f..8.N.g0.V....!3........E...]b..........
d..6.......z?.........Y....6........a%......T|...-]D.2[.......4.%.A.w.
...................2. Jsa.Jb.R,.f.....>J....6o.....0...0..}0..e....
....:}0...*.H........0B1.0...U....US1.0...U....GeoTrust Inc.1.0...U...
.GeoTrust Global CA0...141201130534Z..151216130534Z02100...U...'GeoTru
st Global CA TGV OCSP Responder 30.."0...*.H.............0............
\.hpc..J.a.j-.t......F`Aw...)L.YE.2..~..-...2.Y(.".CZ.w..T..Y. syd....
.x..YE..<....lwv.:J.76>U....uF.a.|8N.. ..1p...`f.X...B>x.....
.........6..m.&...'..W.plK....[.m.V..h..lI.........?~.....>.|'....o
...A!.Pm.*.N ...<.....3...*|.x._..1..m.W<*....._S.............0.
.0...U.#..0....z.h.....d..}.}e...N0... .....0......0...U.%..0... .....
..0...U...........0...U.......0.0!..U....0...0.1.0...U....TGV-B-2830..
.*.H.............~....2!...V..0...Y....L..k....z}~a.3Y.x..dS.L...Dk$a.
..nR9_......B......m....Y....U.5....'.....<{....v&=.2].....j*.r(7..
.=..w.I...z....\.#.J.ac.....I.[.[....6.X....0...g.3d...z.i.H..f...v...
..\.....^.N..1.J<.)`Z.....4.-.E..n.E.~t....v.e.T...?. ......i..%...
.<<< skipped >>>

GET /MEQwQjBAMD4wPDAJBgUrDgMCGgUABBQ/m36Fj2BE19VBYXRO62zrgIYp0gQUQnlUG2HNVSs+Y9U8SFf1n/tFzkoCAwLVNg== HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: gtssl-ocsp.geotrust.com


HTTP/1.1 200 OK

Server: nginx/1.4.7

Content-Type: application/ocsp-response

Content-Length: 1359

content-transfer-encoding: binary

Cache-Control: max-age=470821, public, no-transform, must-revalidate

Last-Modified: Tue, 27 Jan 2015 18:39:42 GMT

Expires: Tue, 3 Feb 2015 18:39:42 GMT

Date: Thu, 29 Jan 2015 07:54:11 GMT

Connection: keep-alive
0..K......D0..@.. .....0.....10..-0...,0*1(0&..U....GeoTrust SSL TGV O
CSP Responder..20150127183942Z0f0d0<0... ........?.~..`D..AatN.l...
)...ByT.a.U >c.<HW...E.J....6....20150127183942Z....201502031839
42Z0...*.H.............j..&.D..O)Yp...M.=.....F...V..v.....=.qP.r..Au.
...`j.t..c...h......hdj.....#...D.s:..;...(..e...q#?)..K..A...T..d....
.l.2N..p...!..`.....%...f..hy.......*...f."._..A...`.......5]. 1......
yif....;.y`%b....k.vb..&..#.H;.1c._........A.A...n... ..Cq.?^6...L....
..k0..g0..c0..K..........0...*.H........0@1.0...U....US1.0...U....GeoT
rust, Inc.1.0...U....GeoTrust SSL CA0...140502165328Z..150522165328Z0*
1(0&..U....GeoTrust SSL TGV OCSP Responder0.."0...*.H.............0...
........S.O.].&...4.......PU.HE..L....P.AH(l...o.V...b*....c.r.5^...'.
79.e<N]^n......<p....\H..0.#[".....B.A....K%?"...Q...z.\X.~.b...
.X{.R..d.e..3.p.1...]!xX?.N.X.O...`v!39..V..VK9U....|.fV.7v.....F.3..^
.E'....C..M..4Ur......B ...>..d... ...w.....p..9$....y{........|0z0
...U.#..0...ByT.a.U >c.<HW...E.J0... .....0......0...U.%..0... .
......0...U...........0!..U....0...0.1.0...U....TGV-B-1210...*.H......
.......]E...n...a..b.M.(B....S......H~...h.2....{pK..#...0.........A..
.L).....).f|d:..@.9;r....B.$..1.LH...`....S.<.y..$..N./!.....e?z2T.
'.....0..h.,b.D..... ....d.G..*[R`2J...g....6.!.........#.......T.LF:q
,...2..S.9....5..u!.y.RP..;H`.....S..}.F..$3Se...N.....5..<<< skipped >>>

GET /favicon.ico HTTP/1.1

Host: VVV.mininova.org

User-Agent: BTWebClient/3420(37754)

Accept-Encoding: gzip

If-Modified-Since: Sat, 30 Oct 2010 22:57:22 GMT

Connection: Close


HTTP/1.1 304 Not Modified

Cache-control: public, max-age=25920000

Expires: Wed, 25 Nov 2015 07:54:00 GMT

Content-Type: image/x-icon

Accept-Ranges: bytes

ETag: "103585109"

Last-Modified: Sat, 30 Oct 2010 22:57:22 GMT

Connection: close

Date: Thu, 29 Jan 2015 07:54:00 GMT

GET /utorrent-onboarding/player.btapp?h=uVVfIsRBsnvPyT6P&v=102852600&ol=en&ul=&tk=main&c=uTorrent HTTP/1.1

Host: apps.bittorrent.com

User-Agent: BTWebClient/3100(26616)

Accept-Encoding: gzip

Connection: Close


HTTP/1.1 200 OK

x-amz-id-2: kLnNrkgfGAUNBhBwOUtnTaaAPMzN4DSdXHzrxkam8f6mjZV0Qi/hOlv0ELXd7rpV

x-amz-request-id: 04253D8D9662B60E

Accept-Ranges: bytes

Content-Type: binary/octet-stream

Server: AmazonS3

Age: 102081

Date: Thu, 29 Jan 2015 07:52:35 GMT

Last-Modified: Tue, 08 Oct 2013 00:53:35 GMT

Content-Length: 3097

Connection: close
PK.........c.@!m@.............btappUT....8.O7N.Oux.............-.1.. .
.{^.....L...u.M....G..>v.i..f4.6....V/pO...q...S_...d..(..%.5.B.yp.
.H..Rk..$rb&.......*.......d....959...=&.`@.....(F..)Jz.....1.}....9..
PK.........c.@v.7.`...........main.cssUT....8.O7N.Oux..............S.n
.0.}. ".....[7e_c..k............i....9....`u...p.'4U..lH)...,.|.....Jn
.H...B.bm..:j.R...l@CU...cC.....IK._........,.K.b...<.I.F.]....A...
F|#...../.%.$...q8.........-.9%....3......h9 -V...)....gB../.Z.V@.&[..
a...!6..\)..QX....f...Qh.......H.....].ZD6....H(-.pSt...sH o^..nu.hB..
.a.ou......Ng.cEw.`....=_.............H..6..Y.>..7.}!.w...W.W'.....
....PK.........c.@..yI....6.......icon.bmpUT....8.O7N.Oux.............
U....@...>*....<..E.....;....{..Q.....yU-....<...D..4w..@/...
.c..................wf??...S.&...q.......}7k..).v..Z..l.R.8..;..;9..'.
.{:=yO.....{.E.>.`"...9..|$..G...#.H...<..<...:x......|!_....
|Y..[K...D.TP.Nk..;~......O679'...;~......w....;~....s.w....;~....S.w.
...;~....3.w....;~.....8~......w.....6...s._..?............N.~..X.....
./.)./../../.....K.....k........./../../..L...........%$../../../..|.G
.x.....-...........?............?............?..r.........,.|.e..?....
.....s...$xY...O..6.V.S....n....V/...k...x....2.....4.P....C..9.ka_.lC
3Ms..S.3.|..2....2......|..C.oS.y.iZ.......i..[.A.T_?.u......p.......F
=..i...u.G.......7..Y..M../PK.........u.@.W.@....m.......index.htmlUT.
...M.O.N.Oux..............U.r.0.}._..a...;i.\.0.r..tH..G...je.#.I...r.
.0I.O.v..v.J..........R...Y.. .ZF.....I.........Xt. ......'..n1...<<< skipped >>>

GET /installstats.php?v=102852600&h=uVVfIm5t2vDPyT6P&w=1DB10106&bu=0&pr=0&cmp=0&showinstall&view=win32 HTTP/1.1

Accept-Encoding: gzip

User-Agent: uTorrent/3100(26616)

Host: update.utorrent.com

Cache-Control: no-cache


HTTP/1.1 200 OK

Server: nginx/1.4.7

Date: Thu, 29 Jan 2015 07:52:02 GMT

Content-Type: text/html

Transfer-Encoding: chunked

Connection: close

X-Powered-By: PHP/5.4.30

0..

GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBTfqhLjKLEJQZPin0KCzkdAQpVYowQUsT7DaQP4v0cB1JgmGggC72NkK8MCEApfEU0DWxeRF9Lv1AOMPzs= HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: ocsp.digicert.com


HTTP/1.1 200 OK

Accept-Ranges: bytes

Cache-Control: max-age=512415

Content-Type: application/ocsp-response

Date: Thu, 29 Jan 2015 07:52:43 GMT

Etag: "54c9b8d3-1d7"

Expires: Wed, 04 Feb 2015 19:52:43 GMT

Last-Modified: Thu, 29 Jan 2015 04:36:35 GMT

Server: ECS (ams/D1DC)

X-Cache: HIT

Content-Length: 471
0..........0..... .....0......0...0.......>.i...G...&....cd ...2015
0128200000Z0s0q0I0... ............(..A...B..G@B.X....>.i...G...&...
.cd ...._.M.[........?;....20150128200000Z....20150204200000Z0...*.H..
...........vo5.....{..`0.......^..DN.....5%...mu...9..:.%.k.....l..)..
.....,.&.y.....d.G.).B]y.......(.:M r.....bl,7...].#..'^/\....5i....9.
.Q..Z".\7.2%..K..8.6..Y.."0..y..`...^s7........x......e2.ft..9.y.;....
%..Q.^.a..$..uG.......v..O.^.....pk.d.Q.....A#u..J..r...ZHTTP/1.1 200 
OK..Accept-Ranges: bytes..Cache-Control: max-age=512415..Content-Type:
 application/ocsp-response..Date: Thu, 29 Jan 2015 07:52:43 GMT..Etag:
 "54c9b8d3-1d7"..Expires: Wed, 04 Feb 2015 19:52:43 GMT..Last-Modified
: Thu, 29 Jan 2015 04:36:35 GMT..Server: ECS (ams/D1DC)..X-Cache: HIT.
.Content-Length: 471..0..........0..... .....0......0...0.......>.i
...G...&....cd ...20150128200000Z0s0q0I0... ............(..A...B..G@B.
X....>.i...G...&....cd ...._.M.[........?;....20150128200000Z....20
150204200000Z0...*.H.............vo5.....{..`0.......^..DN.....5%...mu
...9..:.%.k.....l..).......,.&.y.....d.G.).B]y.......(.:M r.....bl,7..
.].#..'^/\....5i....9..Q..Z".\7.2%..K..8.6..Y.."0..y..`...^s7........x
......e2.ft..9.y.;....%..Q.^.a..$..uG.......v..O.^.....pk.d.Q.....A#u.
.J..r...Z....
<<< skipped >>>

GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBTtSK3dy3sA4g6EKqm0CfGsMDTPlgQUUOpzidsp+xCPnuUBINTeeZlIg/cCEAJwu3i4ZpYdN6xM1SVvBys= HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: ocsp.digicert.com


HTTP/1.1 200 OK

Accept-Ranges: bytes

Cache-Control: max-age=517736

Content-Type: application/ocsp-response

Date: Thu, 29 Jan 2015 07:52:44 GMT

Etag: "54c9db8f-1d7"

Expires: Wed, 04 Feb 2015 19:52:44 GMT

Last-Modified: Thu, 29 Jan 2015 07:04:47 GMT

Server: ECS (ams/49CA)

X-Cache: HIT

Content-Length: 471
0..........0..... .....0......0...0......P.s..)...... ..y.H....2015012
9065000Z0s0q0I0... .........H...{....*.....04....P.s..)...... ..y.H...
..p.x.f..7.L.%o. ....20150129065000Z....20150205070500Z0...*.H........
.....xP...p\.|\...2h.gC...2.....N.n.....\..fs.\.C.I^.0...C..e.zZ.G..O2
.G..i.....m^........v...........%..$.K.a...|.B".X.E.....W......C./..q.
.......u&- .l{.z..h.wt.l....\......T..6<.k.p....Z......v.?.h^)Rq.a.
.:.H...'....n.N.D..B...`..z..e.,.[.-T.!.]x..\.......0MHTTP/1.1 200 OK.
.Accept-Ranges: bytes..Cache-Control: max-age=517736..Content-Type: ap
plication/ocsp-response..Date: Thu, 29 Jan 2015 07:52:44 GMT..Etag: "5
4c9db8f-1d7"..Expires: Wed, 04 Feb 2015 19:52:44 GMT..Last-Modified: T
hu, 29 Jan 2015 07:04:47 GMT..Server: ECS (ams/49CA)..X-Cache: HIT..Co
ntent-Length: 471..0..........0..... .....0......0...0......P.s..)....
.. ..y.H....20150129065000Z0s0q0I0... .........H...{....*.....04....P.
s..)...... ..y.H.....p.x.f..7.L.%o. ....20150129065000Z....20150205070
500Z0...*.H.............xP...p\.|\...2h.gC...2.....N.n.....\..fs.\.C.I
^.0...C..e.zZ.G..O2.G..i.....m^........v...........%..$.K.a...|.B".X.E
.....W......C./..q........u&- .l{.z..h.wt.l....\......T..6<.k.p....
Z......v.?.h^)Rq.a..:.H...'....n.N.D..B...`..z..e.,.[.-T.!.]x..\......
.0M..<<< skipped >>>

GET /download/langpacks/dl.php?build=37754&ref=client&client=utorrent&sys_l=en&sel_l=-1&tk=stable34 HTTP/1.1

Host: utorrent.com

User-Agent: BTWebClient/3420(37754)

Accept-Encoding: gzip

Connection: Close


HTTP/1.1 301 Moved Permanently

Server: nginx/1.4.7

Date: Thu, 29 Jan 2015 07:54:00 GMT

Content-Type: text/html

Content-Length: 184

Connection: close

Location: hXXp://VVV.utorrent.com/download/langpacks/dl.php?build=37754&ref=client&client=utorrent&sys_l=en&sel_l=-1&tk=stable34
<html>..<head><title>301 Moved Permanently</title
></head>..<body bgcolor="white">..<center><h1&
gt;301 Moved Permanently</h1></center>..<hr><cent
er>nginx/1.4.7</center>..</body>..</html>....

GET /utorrent-onboarding/player.btapp HTTP/1.1

Accept-Encoding: gzip

User-Agent: uTorrent/3100(26616)

Host: apps.bittorrent.com

Cache-Control: no-cache


HTTP/1.1 200 OK

x-amz-id-2: kLnNrkgfGAUNBhBwOUtnTaaAPMzN4DSdXHzrxkam8f6mjZV0Qi/hOlv0ELXd7rpV

x-amz-request-id: 04253D8D9662B60E

Accept-Ranges: bytes

Content-Type: binary/octet-stream

Server: AmazonS3

Age: 102079

Date: Thu, 29 Jan 2015 07:52:33 GMT

Last-Modified: Tue, 08 Oct 2013 00:53:35 GMT

Content-Length: 3097

Connection: keep-alive
PK.........c.@!m@.............btappUT....8.O7N.Oux.............-.1.. .
.{^.....L...u.M....G..>v.i..f4.6....V/pO...q...S_...d..(..%.5.B.yp.
.H..Rk..$rb&.......*.......d....959...=&.`@.....(F..)Jz.....1.}....9..
PK.........c.@v.7.`...........main.cssUT....8.O7N.Oux..............S.n
.0.}. ".....[7e_c..k............i....9....`u...p.'4U..lH)...,.|.....Jn
.H...B.bm..:j.R...l@CU...cC.....IK._........,.K.b...<.I.F.]....A...
F|#...../.%.$...q8.........-.9%....3......h9 -V...)....gB../.Z.V@.&[..
a...!6..\)..QX....f...Qh.......H.....].ZD6....H(-.pSt...sH o^..nu.hB..
.a.ou......Ng.cEw.`....=_.............H..6..Y.>..7.}!.w...W.W'.....
....PK.........c.@..yI....6.......icon.bmpUT....8.O7N.Oux.............
U....@...>*....<..E.....;....{..Q.....yU-....<...D..4w..@/...
.c..................wf??...S.&...q.......}7k..).v..Z..l.R.8..;..;9..'.
.{:=yO.....{.E.>.`"...9..|$..G...#.H...<..<...:x......|!_....
|Y..[K...D.TP.Nk..;~......O679'...;~......w....;~....s.w....;~....S.w.
...;~....3.w....;~.....8~......w.....6...s._..?............N.~..X.....
./.)./../../.....K.....k........./../../..L...........%$../../../..|.G
.x.....-...........?............?............?..r.........,.|.e..?....
.....s...$xY...O..6.V.S....n....V/...k...x....2.....4.P....C..9.ka_.lC
3Ms..S.3.|..2....2......|..C.oS.y.iZ.......i..[.A.T_?.u......p.......F
=..i...u.G.......7..Y..M../PK.........u.@.W.@....m.......index.htmlUT.
...M.O.N.Oux..............U.r.0.}._..a...;i.\.0.r..tH..G...je.#.I...r.
.0I.O.v..v.J..........R...Y.. .ZF.....I.........Xt. ......'..n1...<<< skipped >>>

GET /utorrent-onboarding/plus.btapp HTTP/1.1

Accept-Encoding: gzip

User-Agent: uTorrent/3100(26616)

Host: apps.bittorrent.com

Cache-Control: no-cache


HTTP/1.1 200 OK

x-amz-id-2: w92tvyYPHLbd7AvVHC6/WekTc/vvXgf8rOEs/qdgma/nhQVu3Vx8HaDusxre/3cM

x-amz-request-id: 37CF7ADD838850D0

Accept-Ranges: bytes

Content-Type: binary/octet-stream

Server: AmazonS3

Age: 121272

Date: Thu, 29 Jan 2015 07:52:33 GMT

Last-Modified: Tue, 08 Oct 2013 00:53:59 GMT

Content-Length: 51758

Connection: keep-alive
PK...........?4.u.............btapp5.1.. .EwN.......C....P. .D9~..Z...
......e.:.8....T}..9!...{/...F..Ap.T\...Z....".....v;....o@1..N..d.*".
.]..'e.3.P....Q..2;...Q.5j...<.aA`\.%nY..y..PK.........`,?hu(y....6
.......icon.bmp..=..0...........z.v..]..F]s1&...5./.-.? .H...~I...k...
....g6... .a.....|.DG..O<.....T X"|.rl..c.......6.*..1...[...N.i.68
.@..b.VKz.=X..u....H.4..-.....g...........w}_@.{...e._..S....?k. ....O
PK...........?.R......O.......index.html..An.0.E.s...e....].1..$.....K
H{.Y......<X..Jr:x....R....m..P..x.....D".o...b....~..............1
....6....xq..,......`A..Q.if.R......Q/....U..Y;....G.J.8..ye..2Ld..Z..
..>g......).`...M...43y._|G.......2m.{F...7....PK...........?......
..........lib/PK.........~.?Y@......>.......lib/index.jsU.Ak.!.....
..'.R.=6...@...P.u1..`t;.....^.....>..sf..,........'.....i...o....z
..y........ ..?3&.j.P....A....Y....`.}..&a._^.r..gp.9u..z}vO`{..DUK...
..9.M.n.ywmC...hLB..u.H....../.'..q.zW.P.......},.....p(m.z.M1..G>x
...PK...........?................local/PK...........?................l
ocal/img/PK........M..?................local/img/basic/PK........xQe=.
.~N*...*.......local/img/basic/x.png.PNG........IHDR............._x.u.
...tEXtSoftware.Adobe ImageReadyq.e<....IDATx...KHTQ.....h...4K....
...d.....0.A.4.D."X...(.\.. j....P[..!.$m...tb4..G...<N.o....;.....
s.....|.9.hB..)K.(...,..S.$....W...]....._.'.)NW..Q<.-.r..&.b}}....
.yfeeYJJJ,....q....i.O.dB..........D.!177g...I..L....%.v{L...f........
C_...S{...%4n.......X"od...d....Z.{AA.X\\4.....".c..dkyy.....j....<<< skipped >>>

GET /discoverContent/discoverContent.btapp?h=uVVfIsRBsnvPyT6P&v=109417338&ol=en&ul=&tk=stable34&c=uTorrent HTTP/1.1

Host: apps.bittorrent.com

User-Agent: BTWebClient/3420(37754)

Accept-Encoding: gzip

If-Modified-Since: Tue, 08 Oct 2013 01:06:34 GMT

Connection: Close


HTTP/1.1 304 Not Modified

Content-Type: binary/octet-stream

Age: 123258

Date: Thu, 29 Jan 2015 07:54:01 GMT

Connection: close

GET /discoverContent/discoverContent.btapp?h=uVVfIsRBsnvPyT6P&v=109417338&ol=en&ul=&tk=stable34&c=uTorrent HTTP/1.1

Host: apps.bittorrent.com

User-Agent: BTWebClient/3420(37754)

Accept-Encoding: gzip

If-Modified-Since: Tue, 08 Oct 2013 01:06:34 GMT

Connection: Close


HTTP/1.1 304 Not Modified

Content-Type: binary/octet-stream

Age: 123257

Date: Thu, 29 Jan 2015 07:54:00 GMT

Connection: close

GET /control/tags/ut.json HTTP/1.1

Host: cdn.ap.bittorrent.com

User-Agent: BTWebClient/3420(37754)

Accept-Encoding: gzip

Accept-Language: en-US

Connection: Close


HTTP/1.1 200 OK

Content-Type: application/json

Content-Length: 4783

Connection: close

Date: Thu, 22 Jan 2015 23:12:15 GMT

Last-Modified: Thu, 22 Jan 2015 23:06:36 GMT

ETag: "10aa8946b16c85203217f45ebe7cbd65"

Accept-Ranges: bytes

Server: AmazonS3

Age: 31301

X-Cache: Hit from cloudfront

Via: 1.1 2d2eb60d814c8202a5a69fa957cd569d.cloudfront.net (CloudFront)

X-Amz-Cf-Id: lfUb3ojw3akrxmZMDwqcT1VbADu8mehWQ8T8Ia7zLg31h4ncvVyNPw==

{..    "version": 67,..    "adrules": [..        {..            "name"
: "default",..            "contactRate": 60,..            "adRefreshRa
te": 360,..            "lrecRefreshRate": 360,..            "ftRefresh
Rate": 360,..            "resetAds": 0,..            "rollout": 100,..
            "enabled": 1,..            "ftEnabled": 1,..            "l
recEnabled": 1,..            "sendConversion": 0,..            "lrecXB
utton":0..        },..        {..            "name": "refresh_360",.. 
           "adRefreshRate": 360,..            "lrecRefreshRate": 360,.
.            "ftRefreshRate": 360,..            "adRefreshRatePattern"
:[21600],..            "resetAds": 0,..            "rollout": 100,..  
          "enabled": 1,..            "ftEnabled": 1,..            "lre
cEnabled": 1,..            "sendConversion": 0,..            "countrie
s": "cn,ee,es,hk,iq,ir,kr,kz,pr,tw,ua,ua,co,ve"..        },..        {
..            "name": "refresh_60",..            "adRefreshRate": 60,.
.            "lrecRefreshRate": 60,..            "ftRefreshRate": 60,.
.            "adRefreshRatePattern":[3600],..            "resetAds": 0
,..            "rollout": 100,..            "enabled": 1,..           
 "ftEnabled": 1,..            "lrecEnabled": 1,..            "sendConv
ersion": 0,..            "countries": "bg,hu,jp,lt,ph,pk,ro,rs,sa,th,e
g"..        },..        {..            "name": "refresh_30",..        
     "adRefreshRate": 30,..           "lrecRefreshRate": 30,..        
    "ftRefreshRate": 30,..            "adRefreshRatePattern":[1800

<<< skipped >>>

POST /e?i=38 HTTP/1.1

Host: bench.utorrent.com

User-Agent: BTWebClient/3420(37754)

Accept-Encoding: gzip

Connection: Close

Content-Length: 178

{"h":"uVVfIsRBsnvPyT6P","cl":"uTorrent","v":109417338,"l":"en","w":"6.1","cts":1422518040,"eventName":"PageRequested","adtype":0,"geo":"us","date":"2015-01-29","time":"09:54:00"}
HTTP/1.1 200 OK

Content-Type: text/html

Date: Thu, 29 Jan 2015 07:54:00 GMT

Server: nginx

X-Powered-By: PHP/5.4.30

Content-Length: 21

Connection: Close
{"response_code":200}..

GET /yandex-pack/downloader/info.rss HTTP/1.1

Accept: */*

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: downloader.yandex.net

Connection: Keep-Alive


HTTP/1.1 302 Moved Temporarily

Server: nginx/1.6.2

Date: Thu, 29 Jan 2015 07:53:51 GMT

Transfer-Encoding: chunked

Connection: keep-alive

Keep-Alive: timeout=5

Location: hXXp://cache-kiev04.cdn.yandex.net/downloader.yandex.net/yandex-pack/downloader/info.rss

Expires: Thu, 01 Jan 1970 00:00:01 GMT

Cache-Control: no-cache

Cache-Control: no-store,no-cache,must-revalidate

Pragma: no-cache

0..HTTP/1.1 302 Moved Temporarily..Server: nginx/1.6.2..Date: Thu, 29 
Jan 2015 07:53:51 GMT..Transfer-Encoding: chunked..Connection: keep-al
ive..Keep-Alive: timeout=5..Location: hXXp://cache-kiev04.cdn.yandex.n
et/downloader.yandex.net/yandex-pack/downloader/info.rss..Expires: Thu
, 01 Jan 1970 00:00:01 GMT..Cache-Control: no-cache..Cache-Control: no
-store,no-cache,must-revalidate..Pragma: no-cache..0......

GET /yandex-pack/spigot-62/YandexSearch.exe HTTP/1.1

Accept: */*

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: downloader.yandex.net

Connection: Keep-Alive


HTTP/1.1 302 Moved Temporarily

Server: nginx/1.6.2

Date: Thu, 29 Jan 2015 07:53:51 GMT

Transfer-Encoding: chunked

Connection: keep-alive

Keep-Alive: timeout=5

Location: hXXp://cache-kiev04.cdn.yandex.net/downloader.yandex.net/yandex-pack/spigot-62/YandexSearch.exe

Expires: Thu, 01 Jan 1970 00:00:01 GMT

Cache-Control: no-cache

Cache-Control: no-store,no-cache,must-revalidate

Pragma: no-cache

0..HTTP/1.1 302 Moved Temporarily..Server: nginx/1.6.2..Date: Thu, 29 
Jan 2015 07:53:51 GMT..Transfer-Encoding: chunked..Connection: keep-al
ive..Keep-Alive: timeout=5..Location: hXXp://cache-kiev04.cdn.yandex.n
et/downloader.yandex.net/yandex-pack/spigot-62/YandexSearch.exe..Expir
es: Thu, 01 Jan 1970 00:00:01 GMT..Cache-Control: no-cache..Cache-Cont
rol: no-store,no-cache,must-revalidate..Pragma: no-cache..0..

GET /templates/7861/0/59317.png HTTP/1.1

Host: cdn3.opencandy.com

Accept: */*


HTTP/1.1 200 OK

x-amz-id-2: iBUCQvwrGXxUQVBv6Dii97/ rOalh3w7TeGvPX5A5W3vlRbVbnVK9T rD53dqZu4rmH7/UyTggQ=

x-amz-request-id: 19C50A802EFB3439

Last-Modified: Sun, 25 Jan 2015 21:33:07 GMT

ETag: "308b28548f2604ee1e8f56bacfad8f31"

Accept-Ranges: bytes

Content-Type: image/png

Content-Length: 18721

Server: AmazonS3

Cache-Control: max-age=300

Date: Thu, 29 Jan 2015 07:52:53 GMT

Connection: keep-alive
.PNG........IHDR............."4.... .IDATx...y..U...g.L.2..!.. ,..0.d.
.#..:...(""OQ...<..p.!.....HdG......A..-.=@.q..L..l....=S]]U]....|?
..tw.]....=uo..G.1(..(.R:*2?D....m..O.].....I.^]\.....Q.EQ. ..Q.qM.5..
........O|...UQ.E.C..5.v.pO.P'..........f...N.=`.p...7..Y.j\.EQ.8.....
.....2.k..6.#\.N'...;..)R.{..S.).*`...U.i......9......]^...P..(....0..
n..H.v........w..1S .....w......g#p*..'.n.1.|R........T..f.p .....P.j\
.EQ.8...t[.p4.E`..x.......Lw.{..Lb..5.}&...b..W............M3&K..I....
.n.......b.........m....WEQ.%...5.....f.....nu.J..7... .O..`"..p....g.
I.....@..W......yx........*..(q.7....aGq..Ml..k..........k`....0.5/.P6
EQ.e.R..}6!..\`.I...Q9S...5....sm=<...U..Ft[./...U.....>.....0..
.y.3...8..onQ..5....8}z..=.....Q.a..2R.U2}|..=...{H/.fMO.<.x..FU.Au
..TS.........^..w..v...OO,..z|..^...n.5......;.......(....x...A...T...
.........6\.V'...#2.m..1o..l2.>.=w.j&U....*... ....1ep....\m.4....r
.{R..\{...4...:..;......\..R..28o.j.?}.....u....w;....,.44........E%.{
...t..a....*..(..k\.....)..=......*..O..h......s|.a... .........=}.foR
.gX.>..p...|k..........].....f..n....=...I..V..w..b.......,.4..2,.2
T...N..JQ.EYO.Z.U.....M.H..%]\.~.k{`......U}Fo.. ..........s|......<
;.qO.k;...Uf.......V.lZ...p...&..'M..3..ep...l..J.{..,.:.e/?........-.
.O.a.M....r..i,?|i-kz..ev..ig....HQ.EQ<xGc..On.A.`...:....n_....;..
.............'..2.u.q|...B......V..og.?.gL........[....>...].YE.k.8
{~..yd%.;..l>....Uq..1}.._....[....xku/./...y.y...)..6...RX.ch...5=
..8 ....(....z..?...P..].q.VU|j.r..^\....W2.....AWN.W~f,_...e...O.<<< skipped >>>

GET /ocsp/MEkwRzBFMEMwQTAJBgUrDgMCGgUABBTy4Gr5hYodjXCbSRkjeqm1Gih+ZAQUSt0GFhu89mi1dvWBtrtiGrpagS8CCDvOtHeRG3Tt HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: clients1.google.com


HTTP/1.1 200 OK

Content-Type: application/ocsp-response

Date: Tue, 27 Jan 2015 03:56:28 GMT

Expires: Sat, 31 Jan 2015 03:56:28 GMT

Server: ocsp_responder

Content-Length: 463

X-XSS-Protection: 1; mode=block

X-Frame-Options: SAMEORIGIN

Age: 186971

Alternate-Protocol: 80:quic,p=0.02

Cache-Control: public, max-age=345600

0..........0..... .....0......0...0......J......h.v....b..Z./..2015012
7010420Z0k0i0A0... ..........j.....p.I.#z...(~d..J......h.v....b..Z./.
.;..w..t.....20150127010420Z....20150203010420Z0...*.H.............P.;
.J.......@t.. .I*...|....h.2....Y...V..>...d..F.0 .kTL..$..2.Z.4..h
e .%.oQ.Z......E..9x...h..........!..qD.T{ ...........M..... ......3kc
d).:J.T......../....F...F.....d......."....n.N...J.|....ca..1....r.2t~
.y...i...Z..E...-I.....i.Pl.....,.z2E......#O.HTTP/1.1 200 OK..Content
-Type: application/ocsp-response..Date: Tue, 27 Jan 2015 03:56:28 GMT.
.Expires: Sat, 31 Jan 2015 03:56:28 GMT..Server: ocsp_responder..Conte
nt-Length: 463..X-XSS-Protection: 1; mode=block..X-Frame-Options: SAME
ORIGIN..Age: 186971..Alternate-Protocol: 80:quic,p=0.02..Cache-Control
: public, max-age=345600..0..........0..... .....0......0...0......J..
....h.v....b..Z./..20150127010420Z0k0i0A0... ..........j.....p.I.#z...
(~d..J......h.v....b..Z./..;..w..t.....20150127010420Z....201502030104
20Z0...*.H.............P.;.J.......@t.. .I*...|....h.2....Y...V..>.
..d..F.0 .kTL..$..2.Z.4..he .%.oQ.Z......E..9x...h..........!..qD.T{ .
..........M..... ......3kcd).:J.T......../....F...F.....d......."....n
.N...J.|....ca..1....r.2t~.y...i...Z..E...-I.....i.Pl.....,.z2E......#
O.....

<<< skipped >>>

GET /ocsp/MEkwRzBFMEMwQTAJBgUrDgMCGgUABBTy4Gr5hYodjXCbSRkjeqm1Gih+ZAQUSt0GFhu89mi1dvWBtrtiGrpagS8CCAaHMqBTgR3n HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: clients1.google.com


HTTP/1.1 200 OK

Content-Type: application/ocsp-response

Date: Tue, 27 Jan 2015 03:49:59 GMT

Expires: Sat, 31 Jan 2015 03:49:59 GMT

Server: ocsp_responder

Content-Length: 463

X-XSS-Protection: 1; mode=block

X-Frame-Options: SAMEORIGIN

Age: 187362

Alternate-Protocol: 80:quic,p=0.02

Cache-Control: public, max-age=345600
0..........0..... .....0......0...0......J......h.v....b..Z./..2015012
7010212Z0k0i0A0... ..........j.....p.I.#z...(~d..J......h.v....b..Z./.
...2.S.......20150127010212Z....20150203010212Z0...*.H.............@K.
.O.4....0"...j....5rR.@H&....z....`y.....X.:..{U.x..]K.W7.Dr.e=Qy.$D..
..o,....y.{.^.....0.Nt.y"....D.......5..4....*,T.....$..\]....<P.C@
.t.....|.......M=.\..%s6......w.....^ .....A1...8....ZJ.......o.,..l.&
gt;.n..p.. .6.>.L.$.....C...x.k]5..3....G......C.....


GET /ocsp/MEkwRzBFMEMwQTAJBgUrDgMCGgUABBTy4Gr5hYodjXCbSRkjeqm1Gih+ZAQUSt0GFhu89mi1dvWBtrtiGrpagS8CCAaHMqBTgR3n HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: clients1.google.com


HTTP/1.1 200 OK

Content-Type: application/ocsp-response

Date: Tue, 27 Jan 2015 03:49:59 GMT

Expires: Sat, 31 Jan 2015 03:49:59 GMT

Server: ocsp_responder

Content-Length: 463

X-XSS-Protection: 1; mode=block

X-Frame-Options: SAMEORIGIN

Age: 187362

Alternate-Protocol: 80:quic,p=0.02

Cache-Control: public, max-age=345600
0..........0..... .....0......0...0......J......h.v....b..Z./..2015012
7010212Z0k0i0A0... ..........j.....p.I.#z...(~d..J......h.v....b..Z./.
...2.S.......20150127010212Z....20150203010212Z0...*.H.............@K.
.O.4....0"...j....5rR.@H&....z....`y.....X.:..{U.x..]K.W7.Dr.e=Qy.$D..
..o,....y.{.^.....0.Nt.y"....D.......5..4....*,T.....$..\]....<P.C@
.t.....|.......M=.\..%s6......w.....^ .....A1...8....ZJ.......o.,..l.&
gt;.n..p.. .6.>.L.$.....C...x.k]5..3....G......C.HTTP/1.1 200 OK..C
ontent-Type: application/ocsp-response..Date: Tue, 27 Jan 2015 03:49:5
9 GMT..Expires: Sat, 31 Jan 2015 03:49:59 GMT..Server: ocsp_responder.
.Content-Length: 463..X-XSS-Protection: 1; mode=block..X-Frame-Options
: SAMEORIGIN..Age: 187362..Alternate-Protocol: 80:quic,p=0.02..Cache-C
ontrol: public, max-age=345600..0..........0..... .....0......0...0...
...J......h.v....b..Z./..20150127010212Z0k0i0A0... ..........j.....p.I
.#z...(~d..J......h.v....b..Z./....2.S.......20150127010212Z....201502
03010212Z0...*.H.............@K..O.4....0"...j....5rR.@H&....z....`y..
...X.:..{U.x..]K.W7.Dr.e=Qy.$D....o,....y.{.^.....0.Nt.y"....D.......5
..4....*,T.....$..\]....<P.C@.t.....|.......M=.\..%s6......w.....^ 
.....A1...8....ZJ.......o.,..l.>.n..p.. .6.>.L.$.....C...x.k]5..
3....G......C.....
<<< skipped >>>

GET /ocsp/MEkwRzBFMEMwQTAJBgUrDgMCGgUABBTy4Gr5hYodjXCbSRkjeqm1Gih+ZAQUSt0GFhu89mi1dvWBtrtiGrpagS8CCG+vFYDQCqlf HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: clients1.google.com


HTTP/1.1 200 OK

Content-Type: application/ocsp-response

Date: Tue, 27 Jan 2015 03:49:49 GMT

Expires: Sat, 31 Jan 2015 03:49:49 GMT

Server: ocsp_responder

Content-Length: 463

X-XSS-Protection: 1; mode=block

X-Frame-Options: SAMEORIGIN

Age: 187373

Alternate-Protocol: 80:quic,p=0.02

Cache-Control: public, max-age=345600
0..........0..... .....0......0...0......J......h.v....b..Z./..2015012
7010111Z0k0i0A0... ..........j.....p.I.#z...(~d..J......h.v....b..Z./.
.o......_....20150127010111Z....20150203010111Z0...*.H.............0Mn
.L......}.m....'.^..*....".y.>.#.p...,..L<4.UXB.0..c.........:..
_a..a...E.N%.....K)l..e/Is.....B.bA.)..e...:....4~...Bm.g.G..sA.g.M...
....P'_..1m.Pe,.%.....W........I^..)j...$x.!...@q...n......&...g.#....
.Ve....i....}.m...b.J.f.A.s...1^_I.....n.......W.HTTP/1.1 200 OK..Cont
ent-Type: application/ocsp-response..Date: Tue, 27 Jan 2015 03:49:49 G
MT..Expires: Sat, 31 Jan 2015 03:49:49 GMT..Server: ocsp_responder..Co
ntent-Length: 463..X-XSS-Protection: 1; mode=block..X-Frame-Options: S
AMEORIGIN..Age: 187373..Alternate-Protocol: 80:quic,p=0.02..Cache-Cont
rol: public, max-age=345600..0..........0..... .....0......0...0......
J......h.v....b..Z./..20150127010111Z0k0i0A0... ..........j.....p.I.#z
...(~d..J......h.v....b..Z./..o......_....20150127010111Z....201502030
10111Z0...*.H.............0Mn.L......}.m....'.^..*....".y.>.#.p...,
..L<4.UXB.0..c.........:.._a..a...E.N%.....K)l..e/Is.....B.bA.)..e.
..:....4~...Bm.g.G..sA.g.M.......P'_..1m.Pe,.%.....W........I^..)j...$
x.!...@q...n......&...g.#.....Ve....i....}.m...b.J.f.A.s...1^_I.....n.
......W...<<< skipped >>>

GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBTfqhLjKLEJQZPin0KCzkdAQpVYowQUsT7DaQP4v0cB1JgmGggC72NkK8MCEApfEU0DWxeRF9Lv1AOMPzs= HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: ocsp.digicert.com


HTTP/1.1 200 OK

Accept-Ranges: bytes

Cache-Control: max-age=512415

Content-Type: application/ocsp-response

Date: Thu, 29 Jan 2015 07:52:43 GMT

Etag: "54c9b8d3-1d7"

Expires: Wed, 04 Feb 2015 19:52:43 GMT

Last-Modified: Thu, 29 Jan 2015 04:36:35 GMT

Server: ECS (ams/D1DC)

X-Cache: HIT

Content-Length: 471
0..........0..... .....0......0...0.......>.i...G...&....cd ...2015
0128200000Z0s0q0I0... ............(..A...B..G@B.X....>.i...G...&...
.cd ...._.M.[........?;....20150128200000Z....20150204200000Z0...*.H..
...........vo5.....{..`0.......^..DN.....5%...mu...9..:.%.k.....l..)..
.....,.&.y.....d.G.).B]y.......(.:M r.....bl,7...].#..'^/\....5i....9.
.Q..Z".\7.2%..K..8.6..Y.."0..y..`...^s7........x......e2.ft..9.y.;....
%..Q.^.a..$..uG.......v..O.^.....pk.d.Q.....A#u..J..r...ZHTTP/1.1 200 
OK..Accept-Ranges: bytes..Cache-Control: max-age=512415..Content-Type:
 application/ocsp-response..Date: Thu, 29 Jan 2015 07:52:43 GMT..Etag:
 "54c9b8d3-1d7"..Expires: Wed, 04 Feb 2015 19:52:43 GMT..Last-Modified
: Thu, 29 Jan 2015 04:36:35 GMT..Server: ECS (ams/D1DC)..X-Cache: HIT.
.Content-Length: 471..0..........0..... .....0......0...0.......>.i
...G...&....cd ...20150128200000Z0s0q0I0... ............(..A...B..G@B.
X....>.i...G...&....cd ...._.M.[........?;....20150128200000Z....20
150204200000Z0...*.H.............vo5.....{..`0.......^..DN.....5%...mu
...9..:.%.k.....l..).......,.&.y.....d.G.).B]y.......(.:M r.....bl,7..
.].#..'^/\....5i....9..Q..Z".\7.2%..K..8.6..Y.."0..y..`...^s7........x
......e2.ft..9.y.;....%..Q.^.a..$..uG.......v..O.^.....pk.d.Q.....A#u.
.J..r...Z....
<<< skipped >>>

GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBTtSK3dy3sA4g6EKqm0CfGsMDTPlgQUUOpzidsp+xCPnuUBINTeeZlIg/cCEAJwu3i4ZpYdN6xM1SVvBys= HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: ocsp.digicert.com


HTTP/1.1 200 OK

Accept-Ranges: bytes

Cache-Control: max-age=510538

Content-Type: application/ocsp-response

Date: Thu, 29 Jan 2015 07:52:44 GMT

Etag: "54c9b15e-1d7"

Expires: Wed, 04 Feb 2015 19:52:44 GMT

Last-Modified: Thu, 29 Jan 2015 04:04:46 GMT

Server: ECS (ams/49E2)

X-Cache: HIT

Content-Length: 471
0..........0..... .....0......0...0......P.s..)...... ..y.H....2015012
9035000Z0s0q0I0... .........H...{....*.....04....P.s..)...... ..y.H...
..p.x.f..7.L.%o. ....20150129035000Z....20150205040500Z0...*.H........
.....6U...$@)...d5.z.u].VLx../.h.=D\E;.....1..I....K.u..55.._..i......
)..1.a...0...E.3rf..j.g.......kmG.j.w..,9.c....I./X.|....P.<o4rZ...
Rd...j;.\.F.... .?..(gw...Drf.]8..Ab%...F#.8i=c..h.2.tK.V......#....Wl
.c......[|X3.c5.....t...h.C..?..Q7..*,.T.I..Xx......AkHTTP/1.1 200 OK.
.Accept-Ranges: bytes..Cache-Control: max-age=510538..Content-Type: ap
plication/ocsp-response..Date: Thu, 29 Jan 2015 07:52:44 GMT..Etag: "5
4c9b15e-1d7"..Expires: Wed, 04 Feb 2015 19:52:44 GMT..Last-Modified: T
hu, 29 Jan 2015 04:04:46 GMT..Server: ECS (ams/49E2)..X-Cache: HIT..Co
ntent-Length: 471..0..........0..... .....0......0...0......P.s..)....
.. ..y.H....20150129035000Z0s0q0I0... .........H...{....*.....04....P.
s..)...... ..y.H.....p.x.f..7.L.%o. ....20150129035000Z....20150205040
500Z0...*.H.............6U...$@)...d5.z.u].VLx../.h.=D\E;.....1..I....
K.u..55.._..i......)..1.a...0...E.3rf..j.g.......kmG.j.w..,9.c....I./X
.|....P.<o4rZ...Rd...j;.\.F.... .?..(gw...Drf.]8..Ab%...F#.8i=c..h.
2.tK.V......#....Wl.c......[|X3.c5.....t...h.C..?..Q7..*,.T.I..Xx.....
.Ak..<<< skipped >>>

GET /network/index.html?adt=5&browser=ie&clientdata=utorrent|3.4.2.37754|217&page=torrent&site=33049 HTTP/1.1

Accept: application/x-ms-application, image/jpeg, application/xaml xml, image/gif, image/pjpeg, application/x-ms-xbap, */*

Accept-Language: en-US

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/6.0)

Accept-Encoding: gzip, deflate

Host: cdn.bitmedianetwork.com

Connection: Keep-Alive


HTTP/1.1 200 OK

x-amz-id-2: nhMRsRm1uHXyWpG7CiGWTSUkLD5EnECHlmCIdfqR1om4Xt2IuLRSsnusHxQVCWD9

x-amz-request-id: EC148F7C463B8332

Cache-Control: public,max-age=1200,s-max-age=1800

Content-Type: text/html

Server: AmazonS3

Content-Encoding: gzip

Vary: Accept-Encoding

Age: 35331

Date: Thu, 29 Jan 2015 07:54:00 GMT

Last-Modified: Fri, 23 Jan 2015 21:05:11 GMT

Expires: Wed, 28 Jan 2015 22:25:09 GMT

Content-Length: 1973

Connection: keep-alive
............ks.6......i..L..lK.....7.^.L...x<...$...# ):.... )...:=
........rqx.....?.#s../....B...F...BnbV|.2I..y,..d4.x2...|.....'..t..i
...d...%.....)E....g..M.F.d_e...h.....#.....L.`.=.^8..C!\~ ....Y.9.. .
.....K.....<.Rf..x.J.z4.&\.4.Y".0]th..o.]..O...I..=dDF..Y&....E.Z@.
(..K...W..(B#Ig.....&q.>........a$....x).....$$#2....D.C.|.2...bB..
2.....R...~.....D.i6...H.ow.;]&..i....6....qJ#.....-.! ...w?\}..._@...
H..C.....2.K3H..9.s.S.4.p...(....r.....,fm.R......9.....v{j9]k...lH...
...M$..,%.c.I..}j.4..-R.fJ^...............xm..)DDTRgH...Yi.7?....._.D@
....F*......W.......n.M..][......HtOL.)..S...&p..>...e.....h.B.....
...&....J..T.uO0.'..w\.c......3...A..q...[.B2!..:.Lp...|......~..G....
\.................5.].....0.`]3.....u|s...Z.}..xe.=..q......']..=..:.#
..>...|...].YK.S..!.x.3.....U,......6.\.."..7.....t..2.........p0..
......G$.....%.yR..i..Z...Oc*.c...^. ...P..$.......7..:.[. ..b_..=..e.
]mMW..D..KG.@.....B.._.T.YTZ......7.....I.\..%........,.`.q.t.n...I.vZ
........ve.%.F@..... ..O....pN\...K.....{..TPW......S...r6...5...c..2\
....3h..b. .)g.-s.].;..)}2.".h..8............>BMa6......I~f..T.i...
..!O..U.X.z.7.Ot..........(.Go.<..B...........Pd. ./....I.FK..0|..g
..D.....Ue.w.O.e.G_.l.....!....4b.?..M.Y.`.v.....8.........Rnd/...<
..Us..T....B....w`..'}......D. ..4Y..vR.#I.,..3.pC.CT.6..?. .p...Q.p.W
5.......O...l)..P.6...2A.....-.G....$.....U!.....:.q.o..:o.Y.V68......
....p..j!....^..A......sI..>$.y]Ri....]..tz.=U.=..m........}.&.....
.L.G......M....\.V?.D.b...H.-.F..V..........F.Tn......jl......e...<<< skipped >>>

GET /network/assets/jquery-1.11.2.js HTTP/1.1

Accept: */*

Referer: hXXp://cdn.bitmedianetwork.com/network/index.html?adt=5&browser=ie&clientdata=utorrent|3.4.2.37754|217&page=torrent&site=33049

Accept-Language: en-US

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/6.0)

Accept-Encoding: gzip, deflate

Host: cdn.bitmedianetwork.com

Connection: Keep-Alive


HTTP/1.1 200 OK

x-amz-id-2: biXtTgHXT5QARAFkSBfLxLRMxR8teUroCwJoT7wbl3NbHWAnDdnR/EKnqss5rltG

x-amz-request-id: CCF3849F2071B10C

Cache-Control: public,max-age=1200,s-max-age=1800

Content-Type: application/javascript

Server: AmazonS3

Content-Encoding: gzip

Vary: Accept-Encoding

Age: 58591

Date: Thu, 29 Jan 2015 07:54:00 GMT

Last-Modified: Fri, 23 Jan 2015 14:36:45 GMT

Expires: Wed, 28 Jan 2015 15:57:29 GMT

Content-Length: 84818

Connection: keep-alive
............kc.F.(.Y....3.-.z.....ulgFg....dv%e...........4.}..]...<
;.s..=7..F?....]...[...._..."...s.~8.f....d..........6:[,f.....a....n.
S|q..'.QZF....s..?..yI.>......b...-.....]........2.%.....q?J.QT,..y
4,..<;Y..9..c:I.2.E....6.....$..y...\.O7.K|.2Y................./..l
...2..D..tR.$.n4N.0.E..~o...q.G..YZ..i1ZN.hoo/j.'.......O..~.eV..e...Z
[......2.i...{Z....d..(.?g."..9.p..H.$....,.<.G.y... -.E..L...."%..
....t!..C../..E4*..XDY.....E4 ...9.......5*.K..;........b....F........
..,?.S* ...>....!l.b..U.2..6|\.v..).J.0N".c"3...O...d....M~[f.4n3J.
;1......S.V6.........'4...`g...F..... ..}h.& ..../S....txu......~....k
..9@:O..W.y1....F..z;..v.. ..<],.y..v.....WQ:...! S.FW....]R.....l=
.!...q...\...U,X/M.....R.v../....*..z....,..A.._$.]BH..$.&K.n.~N..*..`
ND............<...5.J.H....Y.%.S....d2I..OJ..{........W.._.K.."Z..a
...<=.5...".).>..Y..e?..l....a.?...!..\...7.y..x9...HG.#D...]~Z"
....m...k .C8..{~&.f..,|.O.%@8..v....:..6z.7.Z.~%O..{X .w.4..Sit..o...
.?{G.jq.kd........Y.q...{...:.P|I...=).......y.a.|{T*au..].6./.Oh?.:..
L.#.3@d&@.>...aL.g....x.=Ew..,........I...t*....(..#......E.:a....'
L\...uZ...Q.......7....@....|4/.....m.=_=}B._'p}.K.a.0.<.F..}M.....
.Zksz..m.rxT.-.....G_.o.o\V..f.TF|.,.gpDFIy.k-.3.V..i:....B.... }..:.M
..&\Ls...dv...^|x4Jz.<.l.f..Ox..\(.....^ ...<...y:.....xc..b.4.F
....$y..........%~..D.....'........R....x/F...!a...@.F..t...... .@>
..\$p(...Q:.-....... j...y.eM....)?.......Vk....-.vQ<......V.."8D.c
........y.......rz4%....%4}.c...Y1in..]6...."..k...bf...i...`}....<<< skipped >>>

GET /network/assets/bench.js HTTP/1.1

Accept: */*

Referer: hXXp://cdn.bitmedianetwork.com/network/index.html?adt=1224&browser=ie&clientdata=utorrent|3.4.2.37754|217&page=torrent&site=33049

Accept-Language: en-US

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/6.0)

Accept-Encoding: gzip, deflate

Host: cdn.bitmedianetwork.com

Connection: Keep-Alive


HTTP/1.1 200 OK

x-amz-id-2: GOqvyayaN MaqZafyDJBPcwGfTygHYHZc7JaJQJgjLHjKMnRrS1HQ4OiJKu26SNf

x-amz-request-id: 7F751AADBF63E199

Cache-Control: public,max-age=1200,s-max-age=1800

Content-Type: application/javascript

Server: AmazonS3

Content-Encoding: gzip

Vary: Accept-Encoding

Age: 58074

Date: Thu, 29 Jan 2015 07:54:00 GMT

Last-Modified: Fri, 23 Jan 2015 14:36:45 GMT

Expires: Wed, 28 Jan 2015 16:06:06 GMT

Content-Length: 566

Connection: keep-alive
...........T...0...W.....r.......B.....%. .cG...$g...{G.....=.H..7.Io.
....Nj....x5....Qc..3R.hM..7pAc).R..l.....Z....|..\.J...82.xI!.8m.*..&
gt;'.2a.;.N.T9...e..?..x{4.9..;.q.=..gK...@[.........h.......@...s..&g
t;......m ...s.........=Q..n..Z.;T=4.F........i=..M{U.A..T.~a....c...w
[I..r.l]I.G.h..S.z.c.;s.p...8aw...$..l.I....t.-.^,-....H:.-a..].:4}...
B.-~xO.5..\r.....].c.g..s..>?m...*eq...@..k...8..72.h!a.M.]..}..@..
%6..D..h.... ..J...?!p..d(.%......].....f......GC..X...J.b... .e\..M..
Y@.n5...B......7>...6B..1......z?...8x..M'.....a..}....i..?.......V
..u..9.n..R^......HTTP/1.1 200 OK..x-amz-id-2: GOqvyayaN MaqZafyDJBPcw
GfTygHYHZc7JaJQJgjLHjKMnRrS1HQ4OiJKu26SNf..x-amz-request-id: 7F751AADB
F63E199..Cache-Control: public,max-age=1200,s-max-age=1800..Content-Ty
pe: application/javascript..Server: AmazonS3..Content-Encoding: gzip..
Vary: Accept-Encoding..Age: 58074..Date: Thu, 29 Jan 2015 07:54:00 GMT
..Last-Modified: Fri, 23 Jan 2015 14:36:45 GMT..Expires: Wed, 28 Jan 2
015 16:06:06 GMT..Content-Length: 566..Connection: keep-alive.........
....T...0...W.....r.......B.....%. .cG...$g...{G.....=.H..7.Io.....Nj.
...x5....Qc..3R.hM..7pAc).R..l.....Z....|..\.J...82.xI!.8m.*..>'.2a
.;.N.T9...e..?..x{4.9..;.q.=..gK...@[.........h.......@...s..>.....
.m ...s.........=Q..n..Z.;T=4.F........i=..M{U.A..T.~a....c...w[I..r.l
]I.G.h..S.z.c.;s.p...8aw...$..l.I....t.-.^,-....H:.-a..].:4}...B.-~xO.
5..\r.....].c.g..s..>?m...*eq...@..k...8..72.h!a.M.]..}..@..%6..D..
h.... ..J...?!p..d(.%......].....f......GC..X...J.b... .e\..M..Y@.<<< skipped >>>

GET /featuredcontent/featuredcontent.btapp?h=uVVfIsRBsnvPyT6P&v=109417338&ol=en&ul=&tk=stable34&c=uTorrent HTTP/1.1

Host: apps.bittorrent.com

User-Agent: BTWebClient/3420(37754)

Accept-Encoding: gzip

If-Modified-Since: Tue, 08 Oct 2013 01:06:32 GMT

Connection: Close


HTTP/1.1 304 Not Modified

Content-Type: binary/octet-stream

Age: 43645

Date: Thu, 29 Jan 2015 07:54:01 GMT

Connection: close

GET /network/index.html?adt=1224&browser=ie&clientdata=utorrent|3.4.2.37754|217&page=torrent&site=33049 HTTP/1.1

Accept: application/x-ms-application, image/jpeg, application/xaml xml, image/gif, image/pjpeg, application/x-ms-xbap, */*

Accept-Language: en-US

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/6.0)

Accept-Encoding: gzip, deflate

Host: cdn.bitmedianetwork.com

Connection: Keep-Alive



{..TPW......S...r6...5...c..2\....3h..b. .)g.-s.].;..)}2.".h..8.......
.....>BMa6......I~f..T.i.....!O..U.X.z.7.Ot..........(.Go.<..B..
.........Pd. ./....I.FK..0|..g..D.....Ue.w.O.e.G_.l.....!....4b.?..M.Y
.`.v.....8.........Rnd/...<..Us..T....B....w`..'}......D. ..4Y..vR.
#I.,..3.pC.CT.6..?. .p...Q.p.W5.......O...l)..P.6...2A.....-.G....$...
..U!.....:.q.o..:o.Y.V68..........p..j!....^..A......sI..>$.y]Ri...
.]..tz.=U.=..m........}.&......L.G......M....\.V?.D.b...H.-.F..V......
....F.Tn......jl......e....1...tr.........v-e5~xr.......yFY..Z~.(.%g. 
ynD.'...E.2.$.X.X....'0........u..H...O.>....&L........%......i...#
..,(...........$...`......z..K .N{w...JQ0.....y.......Q.z`N@.... ~P.T4
..hr..j=z2o.........../.....0...:>N..N..y.......&..x.M.[.Hb.B...^.'
...E.3>...?..o3L......,.Q,....M......IA>..k..).Z.lX<....5_U..
:R<....y..Q....iC...^=..up.g.&.a.Sg.#.q..X..=.nS."i.o.O.v.W..P...u.
.o..m<.^t.g....b/. ..G.G.....(......N...<....=5 ......n.~.F....^
.........O......=..9......


GET /network/assets/base64.js HTTP/1.1

Accept: */*

Referer: hXXp://cdn.bitmedianetwork.com/network/index.html?adt=5&browser=ie&clientdata=utorrent|3.4.2.37754|217&page=torrent&site=33049

Accept-Language: en-US

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/6.0)

Accept-Encoding: gzip, deflate

Host: cdn.bitmedianetwork.com

Connection: Keep-Alive


HTTP/1.1 200 OK

x-amz-id-2: gdyddJn8MBLq3NZzdGahbSmbB85LX9yqsVCp1ZS magk3MhhLSusNjJrEEg6VwwlsqyagXrF0uA=

x-amz-request-id: 2A3985CFE14E5417

Cache-Control: public,max-age=1200,s-max-age=1800

Content-Type: application/javascript

Server: AmazonS3

Content-Encoding: gzip

Vary: Accept-Encoding

Age: 58075

Date: Thu, 29 Jan 2015 07:54:00 GMT

Last-Modified: Fri, 23 Jan 2015 14:36:45 GMT

Expires: Wed, 28 Jan 2015 16:06:05 GMT

Content-Length: 956

Connection: keep-alive
...........VkS.@..._..... .!.<f..}k[..K....TLhXDm...W.&,.b........{
...... ....#Xu...........[}..{.1.L..x..hp..r...............(.?...qp.".
..!...]...w'(....../^..z........?~.|rz..........~.....\...O<B.....}
..lg..[..F.P..._...\C.....b.K....Kl....CA..A8.#.s..!)Dc.Wq..B#...c.H..
}.E.h..E.l..z....P.5.....*_.._.`.8..x......h2....=....M.B.c2......n...
.k........2cJ...R..6...].RU....5.l.G...J.`.G........;..J.l.T.wr....T..
...'9:r.(.&.{.,..:Y.).......p..YBi.........2....|...5./..G.2...../Y .C
4.CN..7].@.D.....d...n.FV.1..\...._..s.t_).;z...~.."...mrqd.9.....Wg..
...hk._{._g._Y3..:.-ME.t..Tf.*.I...-yoR.A.R.....r........G.......O.H..
xF.,S.......@.......d..e.....6....~N.|...?;=,...W.uB...<....&.~.t..
;!Ub',hYecl.o...n.**.....W3Aez.K......fF@....F<.jZ5..%.......5.1...
Qw5...BX..&.7..!Hm&.../....<..8K).G.2iw..|[X. Mk1...[6.9...\...,..'
....gb*..L..M\"....Y.q'.,.g.?J........~N{......."....\8..4s...7MI..<
;Y...l..tV...e@`..E..Q:......Jb|.2).ijB...d.5D..q.(......|D.....>....

GET /network/assets/bench.js HTTP/1.1

Accept: */*

Referer: hXXp://cdn.bitmedianetwork.com/network/index.html?adt=5&browser=ie&clientdata=utorrent|3.4.2.37754|217&page=torrent&site=33049

Accept-Language: en-US

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/6.0)

Accept-Encoding: gzip, deflate

Host: cdn.bitmedianetwork.com

Connection: Keep-Alive


HTTP/1.1 200 OK

x-amz-id-2: GOqvyayaN MaqZafyDJBPcwGfTygHYHZc7JaJQJgjLHjKMnRrS1HQ4OiJKu26SNf

x-amz-request-id: 7F751AADBF63E199

Cache-Control: public,max-age=1200,s-max-age=1800

Content-Type: application/javascript

Server: AmazonS3

Content-Encoding: gzip

Vary: Accept-Encoding

Age: 58074

Date: Thu, 29 Jan 2015 07:54:00 GMT

Last-Modified: Fri, 23 Jan 2015 14:36:45 GMT

Expires: Wed, 28 Jan 2015 16:06:06 GMT

Content-Length: 566

Connection: keep-alive
...........T...0...W.....r.......B.....%. .cG...$g...{G.....=.H..7.Io.
....Nj....x5....Qc..3R.hM..7pAc).R..l.....Z....|..\.J...82.xI!.8m.*..&
gt;'.2a.;.N.T9...e..?..x{4.9..;.q.=..gK...@[.........h.......@...s..&g
t;......m ...s.........=Q..n..Z.;T=4.F........i=..M{U.A..T.~a....c...w
[I..r.l]I.G.h..S.z.c.;s.p...8aw...$..l.I....t.-.^,-....H:.-a..].:4}...
B.-~xO.5..\r.....].c.g..s..>?m...*eq...@..k...8..72.h!a.M.]..}..@..
%6..D..h.... ..J...?!p..d(.%......].....f......GC..X...J.b... .e\..M..
Y@.n5...B......7>...6B..1......z?...8x..M'.....a..}....i..?.......V
..u..9.n..R^..........


GET /network/assets/base64.js HTTP/1.1

Accept: */*

Referer: hXXp://cdn.bitmedianetwork.com/network/index.html?adt=1224&browser=ie&clientdata=utorrent|3.4.2.37754|217&page=torrent&site=33049

Accept-Language: en-US

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/6.0)

Accept-Encoding: gzip, deflate

Host: cdn.bitmedianetwork.com

Connection: Keep-Alive


HTTP/1.1 200 OK

x-amz-id-2: gdyddJn8MBLq3NZzdGahbSmbB85LX9yqsVCp1ZS magk3MhhLSusNjJrEEg6VwwlsqyagXrF0uA=

x-amz-request-id: 2A3985CFE14E5417

Cache-Control: public,max-age=1200,s-max-age=1800

Content-Type: application/javascript

Server: AmazonS3

Content-Encoding: gzip

Vary: Accept-Encoding

Age: 58075

Date: Thu, 29 Jan 2015 07:54:00 GMT

Last-Modified: Fri, 23 Jan 2015 14:36:45 GMT

Expires: Wed, 28 Jan 2015 16:06:05 GMT

Content-Length: 956

Connection: keep-alive
...........VkS.@..._..... .!.<f..}k[..K....TLhXDm...W.&,.b........{
...... ....#Xu...........[}..{.1.L..x..hp..r...............(.?...qp.".
..!...]...w'(....../^..z........?~.|rz..........~.....\...O<B.....}
..lg..[..F.P..._...\C.....b.K....Kl....CA..A8.#.s..!)Dc.Wq..B#...c.H..
}.E.h..E.l..z....P.5.....*_.._.`.8..x......h2....=....M.B.c2......n...
.k........2cJ...R..6...].RU....5.l.G...J.`.G........;..J.l.T.wr....T..
...'9:r.(.&.{.,..:Y.).......p..YBi.........2....|...5./..G.2...../Y .C
4.CN..7].@.D.....d...n.FV.1..\...._..s.t_).;z...~.."...mrqd.9.....Wg..
...hk._{._g._Y3..:.-ME.t..Tf.*.I...-yoR.A.R.....r........G.......O.H..
xF.,S.......@.......d..e.....6....~N.|...?;=,...W.uB...<....&.~.t..
;!Ub',hYecl.o...n.**.....W3Aez.K......fF@....F<.jZ5..%.......5.1...
Qw5...BX..&.7..!Hm&.../....<..8K).G.2iw..|[X. Mk1...[6.9...\...,..'
....gb*..L..M\"....Y.q'.,.g.?J........~N{......."....\8..4s...7MI..<
;Y...l..tV...e@`..E..Q:......Jb|.2).ijB...d.5D..q.(......|D.....>....

GET /network/assets/jquery-1.11.2.js HTTP/1.1

Accept: */*

Referer: hXXp://cdn.bitmedianetwork.com/network/index.html?adt=1224&browser=ie&clientdata=utorrent|3.4.2.37754|217&page=torrent&site=33049

Accept-Language: en-US

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/6.0)

Accept-Encoding: gzip, deflate

Host: cdn.bitmedianetwork.com

Connection: Keep-Alive


HTTP/1.1 200 OK

x-amz-id-2: biXtTgHXT5QARAFkSBfLxLRMxR8teUroCwJoT7wbl3NbHWAnDdnR/EKnqss5rltG

x-amz-request-id: CCF3849F2071B10C

Cache-Control: public,max-age=1200,s-max-age=1800

Content-Type: application/javascript

Server: AmazonS3

Content-Encoding: gzip

Vary: Accept-Encoding

Age: 58591

Date: Thu, 29 Jan 2015 07:54:00 GMT

Last-Modified: Fri, 23 Jan 2015 14:36:45 GMT

Expires: Wed, 28 Jan 2015 15:57:29 GMT

Content-Length: 84818

Connection: keep-alive
............kc.F.(.Y....3.-.z.....ulgFg....dv%e...........4.}..]...<
;.s..=7..F?....]...[...._..."...s.~8.f....d..........6:[,f.....a....n.
S|q..'.QZF....s..?..yI.>......b...-.....]........2.%.....q?J.QT,..y
4,..<;Y..9..c:I.2.E....6.....$..y...\.O7.K|.2Y................./..l
...2..D..tR.$.n4N.0.E..~o...q.G..YZ..i1ZN.hoo/j.'.......O..~.eV..e...Z
[......2.i...{Z....d..(.?g."..9.p..H.$....,.<.G.y... -.E..L...."%..
....t!..C../..E4*..XDY.....E4 ...9.......5*.K..;........b....F........
..,?.S* ...>....!l.b..U.2..6|\.v..).J.0N".c"3...O...d....M~[f.4n3J.
;1......S.V6.........'4...`g...F..... ..}h.& ..../S....txu......~....k
..9@:O..W.y1....F..z;..v.. ..<],.y..v.....WQ:...! S.FW....]R.....l=
.!...q...\...U,X/M.....R.v../....*..z....,..A.._$.]BH..$.&K.n.~N..*..`
ND............<...5.J.H....Y.%.S....d2I..OJ..{........W.._.K.."Z..a
...<=.5...".).>..Y..e?..l....a.?...!..\...7.y..x9...HG.#D...]~Z"
....m...k .C8..{~&.f..,|.O.%@8..v....:..6z.7.Z.~%O..{X .w.4..Sit..o...
.?{G.jq.kd........Y.q...{...:.P|I...=).......y.a.|{T*au..].6./.Oh?.:..
L.#.3@d&@.>...aL.g....x.=Ew..,........I...t*....(..#......E.:a....'
L\...uZ...Q.......7....@....|4/.....m.=_=}B._'p}.K.a.0.<.F..}M.....
.Zksz..m.rxT.-.....G_.o.o\V..f.TF|.,.gpDFIy.k-.3.V..i:....B.... }..:.M
..&\Ls...dv...^|x4Jz.<.l.f..Ox..\(.....^ ...<...y:.....xc..b.4.F
....$y..........%~..D.....'........R....x/F...!a...@.F..t...... .@>
..\$p(...Q:.-....... j...y.eM....)?.......Vk....-.vQ<......V.."8D.c
........y.......rz4%....%4}.c...Y1in..]6...."..k...bf...i...`}....<<< skipped >>>

GET /ados?t=1422518160374&request={"Placements":[{"A":5682,"S":33049,"D":"bt_ap_div","AT":5,"Properties":{"tag":"ant","browser":"ie","clientdata":"utorrent|3.4.2.37754|217","page":"torrent","flash":"none"}}],"Keywords":"tag%3Dant%2C%20browser%3Die%2C%20clientdata%3Dutorrent%7C3.4.2.37754%7C217%2C%20page%3Dtorrent%2C%20flash%3Dnull","Referrer":"","IsAsync":false} HTTP/1.1

Accept: */*

Referer: hXXp://cdn.bitmedianetwork.com/network/index-edge.html?tag=ant&adt=5&browser=ie&clientdata=utorrent|3.4.2.37754|217&page=torrent&site=33049

Accept-Language: en-US

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/6.0)

Accept-Encoding: gzip, deflate

Host: engine.bitmedianetwork.com

Connection: Keep-Alive

Cookie: azk=ue1-e3e9d37e487f4f93865292310c7d71de; azk-events=W3siYXYiOjM4NTgyLCJhdCI6NSwiYnQiOjAsImNtIjo1NzQ3MywiY3QiOiJnYW1pbmciLCJjaCI6ODc4NSwiY3IiOjY1Mjk1NSwiZGkiOiIzYTdkMmQ0Mjk5Zjk0ZTUwYjZkMWFlODBjYTYwZmZhOCIsImRtIjoxLCJmYyI6NjczNTM0LCJmbCI6MjQ3NDA0LCJpcCI6IjE5My4xMzguMjQ0LjIzMSIsImt3IjoiYnJvd3Nlcj1pZSxjbGllbnRkYXRhPXV0b3JyZW50fDMuNC4yLjM3NzU0fDIxNyxwYWdlPXRvcnJlbnQsZmxhc2g9bnVsbCIsIm53Ijo1NjgyLCJwYyI6My41LCJwciI6NjI1NTcsInJ0Ijo2LCJzdCI6MzMwNDksInRyIjp0cnVlLCJ1ayI6InVlMS1lM2U5ZDM3ZTQ4N2Y0ZjkzODY1MjkyMzEwYzdkNzFkZSIsInRzIjoxNDIyNTE4MDQxMTQ4LCJiZiI6dHJ1ZSwiY2kiOiI0OTM3YTA5MWRiZGI0ZjZmOTBmMjg0OTcwOGJmYjkxZSIsImN2IjoxfV0; _ga=GA1.2.281852828.14
HTTP/1.1 200 OK

Access-Control-Allow-Headers: accept, origin, content-type, content-length

Access-Control-Allow-Methods: GET,PUT,POST,DELETE,OPTIONS

Access-Control-Allow-Origin: *

Content-Encoding: gzip

Content-Type: application/javascript

Date: Thu, 29 Jan 2015 07:56:00 GMT

ETag: "1475665784"

P3P: CP="This is not a P3P policy! See hXXp://adzerk.com/ad-server-privacy for our privacy policy"

Server: nginx/1.1.19

Set-Cookie: azk=ue1-e3e9d37e487f4f93865292310c7d71de; Path=/; Expires=Fri, 29 Jan 2016 07:56:00 GMT

x-powered-by: adzerk bifrost/

x-served-by: engine-i-2bee05c4

Content-Length: 5361

Connection: keep-alive
...........]Ys...~._..............f14...4=AHJ.$$. .q.......m.q..kW.P*k
Ke&......kza.=k.#..7.f3.r.....2.......S>....H>....'..>..._.Wn
...O.8.........._l?.\.[#7^..._.q...K......MJ...%m.g ......b0f.W%.\....
........h&z..|....Q..N.......g YG..x...wY-.d..,.....-&f..L. .F...\....
...z...l=.....c?.1.c.mG..(.....&=.._A..........AN..a.....Aq.5....v|R..
....\.|'Ry.k%.v.....j...P..BN%.....B{TW.=lg...^7.<.......5URP.'...V
.]...,;'..../}{........e.._..........".... .\......Z[..!\oMi..0.vsm..P
[....7.zT14.."..0F.2......!~.\k.[1.|C3. .WA_.`.JQ1.0...b?l..\c:\~.....
........y...fSY_....L..R..J.O.>5..?....w.t.GaO..F....._ ....1....).
3.....=..y)....="...P.cS|.s.H..{&..`..Z.2.u]g..xQ./g.NiB.....qz>\.m
a....gT..y`. ..m....-..pd..0R...s`./'n.5......bP.HG..(.V......z.d4.j..
....%..V.......1r ...G...4..;Z...x.......\...IK.s~...U.........h...p..
..[....>..Ck4....a. .k..O.9~....l..6q.5g......Z...C..t.......!.w..3
w.......qm..="X<Qx....y..:l..n0..H....0.X..0o...S..5!.":.iS.....;&l
t;.wo................w?.....*. Rd.H.WxA..........|.........<....;..
...(.])..~...OLP|...g....~...L.G...........'..<6.......R..2. I,..;L
.{_,2...S?v)....q..c..G....n8s....-.n..=..o.):...F.m......y.e......{..
.;....{..........e.......>..DFT.."y=.I.,..G..p..}.Q;..bD.v..(X.!..r
}@.}..mB.:.X@.........\.PK....#D.MN......fP.*Fw.(.1.g.e..;...@......:k
=..../...;...;.....Bq..w.......WB..s....N..B.\..{T.uG...A0...l...."r.v
;.A..bl...m......).....p^\....?..;._...j.p}...f......{`... j...v%,u..s
Mw9.n4q....a........5.....s ..l.qM..j.i....2f0\Wpn.!.q.].....M....<<< skipped >>>

GET /i.gif?e=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&s=o44H8CGPE4orm3qHj4UiOpBehNA HTTP/1.1

Accept: */*

Referer: hXXp://cdn.bitmedianetwork.com/network/index-edge.html?tag=ant&adt=1224&browser=ie&clientdata=utorrent|3.4.2.37754|217&page=torrent&site=33049

Accept-Language: en-US

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/6.0)

Accept-Encoding: gzip, deflate

Host: engine.bitmedianetwork.com

Connection: Keep-Alive

Cookie: azk=ue1-e3e9d37e487f4f93865292310c7d71de; azk-events=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
HTTP/1.1 200 OK

Access-Control-Allow-Headers: accept, origin, content-type, content-length

Access-Control-Allow-Methods: GET,PUT,POST,DELETE,OPTIONS

Access-Control-Allow-Origin: *

Content-Type: image/gif

Date: Thu, 29 Jan 2015 07:56:01 GMT

P3P: CP="This is not a P3P policy! See hXXp://adzerk.com/ad-server-privacy for our privacy policy"

Server: nginx/1.1.19

Set-Cookie: azk=ue1-e3e9d37e487f4f93865292310c7d71de; Path=/; Expires=Fri, 29 Jan 2016 07:56:01 GMT

x-powered-by: adzerk bifrost/

x-served-by: engine-i-f1c8271e

Content-Length: 43

Connection: keep-alive

GIF89a.............!.......,...........D..;HTTP/1.1 200 OK..Access-Con
trol-Allow-Headers: accept, origin, content-type, content-length..Acce
ss-Control-Allow-Methods: GET,PUT,POST,DELETE,OPTIONS..Access-Control-
Allow-Origin: *..Content-Type: image/gif..Date: Thu, 29 Jan 2015 07:56
:01 GMT..P3P: CP="This is not a P3P policy! See hXXp://adzerk.com/ad-s
erver-privacy for our privacy policy"..Server: nginx/1.1.19..Set-Cooki
e: azk=ue1-e3e9d37e487f4f93865292310c7d71de; Path=/; Expires=Fri, 29 J
an 2016 07:56:01 GMT..x-powered-by: adzerk bifrost/..x-served-by: engi
ne-i-f1c8271e..Content-Length: 43..Connection: keep-alive..GIF89a.....
........!.......,...........D..;..

GET /downloader.yandex.net/yandex-pack/downloader/info.rss HTTP/1.1

Accept: */*

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Connection: Keep-Alive

Host: cache-kiev04.cdn.yandex.net


HTTP/1.1 200 OK

Server: nginx/1.6.2

Date: Thu, 29 Jan 2015 07:53:51 GMT

Content-Type: application/rss xml

Content-Length: 2417

Connection: keep-alive

ETag: "1735067826"

Last-Modified: Mon, 12 Jan 2015 10:09:39 GMT

Accept-Ranges: bytes
<?xml version="1.0" encoding="UTF-8"?>..<downloader version="
1">...<partneryandexbar>....<url>hXXp://downloader.yand
ex.net/yandex-pack/</url>....<name>YandexPackSetup.exe<
/name>..    <lt_name>YandexSearch.exe</lt_name>..    &l
t;partner name="vkmusic-elements">..            <url>hXXp://d
ownloader.yandex.net/yandex-pack/</url>..            <name>
;YandexPackSetup.exe</name>..            <lt_name>YandexSe
arch.exe</lt_name>..            <exp_path val="16">-extens
ion-exp1</exp_path>..            <exp_path val="16">-exten
sion-exp2</exp_path>..            <exp_path val="16">-exte
nsion-exp3</exp_path>..            <exp_path val="17">-bit
s1</exp_path>..            <exp_path val="17">-bits2</e
xp_path>..            <exp_path val="17">-bits3</exp_path&
gt;..    </partner>..    <partner name="disc-soft">..     
       <url>hXXp://downloader.yandex.net/yandex-pack/</url>
;..            <name>YandexPackSetup.exe</name>..         
   <lt_name>YandexSearch.exe</lt_name>..            <ex
p_path val="50">-accelerator-exp1</exp_path>..            <
;exp_path val="50">-accelerator-exp2</exp_path>..    </par
tner>..    <partner name="kmplayer-elements2">..            &
lt;url>hXXp://downloader.yandex.net/yandex-pack/</url>..     
       <name>YandexPackSetup.exe</name>..            &<<< skipped >>>

GET /downloader.yandex.net/yandex-pack/spigot-62/YandexSearch.exe HTTP/1.1

Accept: */*

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Connection: Keep-Alive

Host: cache-kiev04.cdn.yandex.net


HTTP/1.1 200 OK

Server: nginx/1.6.2

Date: Thu, 29 Jan 2015 07:53:51 GMT

Content-Type: application/x-msdos-program

Content-Length: 2669880

Connection: keep-alive

ETag: "689498825"

Last-Modified: Mon, 29 Dec 2014 12:57:10 GMT

Accept-Ranges: bytes

MZ......................@.............................................
..!..L.!This program cannot be run in DOS mode....$.......@...........
......o.......y.......~.G.....i...............p.......n.......k.....Ri
ch............................PE..L.....>T......................%..
...>a............@...........................(.....6.).............
........................T'..........li%...........(.8!................
..............................@.......................................
.....text...Q........................... ..`.rdata...u.......v........
..........@..@.data...$3...@......................@....rsrc...li%.....
.j%..2..............@..@..............................................
......................................................................
......................................................................
......................................................................
......................................................................
..................................................U..Q.M..E.P.M.......
M...H.B..E...]..............U..Q.M..E...H.B..M..".....].....U..Q.M..M.
......E....t..M.Q.J.......E...].......U...E...P.M.Q.U...R.E.P.)......]
................U...E...P.M.Q.U...R.E.P.c......]................U...E.
.M.f..f..]................U...E.P........]................U...E.P.M.Q.
U.R.E.P.H.......E.].U...E.P.M.Q.U.R.E.P.X.......E.].U......M.Q....5...
M...1..j.j..M.. ....E...].....U......M.Q....5...M...1..j.j..M.......E.
P.M.......E...].........U..Q.M.j.j..M........]..........U..Q.M..E.

<<< skipped >>>

GET /pki/crl/products/microsoftrootcert.crl HTTP/1.1

Cache-Control: max-age = 812

Connection: Keep-Alive

Accept: */*

If-Modified-Since: Thu, 23 Oct 2014 05:05:32 GMT

If-None-Match: "a2f3ff97eeecf1:0"

User-Agent: Microsoft-CryptoAPI/6.1

Host: crl.microsoft.com


HTTP/1.1 200 OK

Content-Type: application/pkix-crl

Last-Modified: Wed, 07 Jan 2015 06:02:43 GMT

Accept-Ranges: bytes

ETag: "88c4768d3f2ad01:0"

Server: Microsoft-IIS/8.0

VTag: 791450244700000000

P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI"

X-Powered-By: ASP.NET

Content-Length: 813

Cache-Control: max-age=900

Date: Thu, 29 Jan 2015 07:53:28 GMT

Connection: keep-alive
0..)0......0...*.H........0_1.0.....&...,d....com1.0.....&...,d....mic
rosoft1-0 ..U...$Microsoft Root Certificate Authority..150106214825Z..
150407100825Z0.0...a......../..100208014912Z._0]0...U.#..0......`@V'..
%..*..S.Y..0... .....7.......0...U......(0... .....7......150406215825
Z0...*.H..............vQ..r..L.Q.N..=#.......V;..r../\.m..<.."...F/
U....(:.....xm.....P.e.F..BE8......=...G....6t:...?...L..B.v..p.M.....
...z..Q.%J.6..I.......8...U. .g..=T=K....L..$w...^....y~..-a.'...*s#N.
o..Qs.$h..:duV'~....8.6..w..b3.... .~)...|.I.y".>R.nJq.ws...3.....f
}.E)\......EB.d\.2.....h...lMjT.7..lj.'lj.b....".L.Os6{.s...@....f.|7z
.. ......>..Q...(......._....UM.EN.@.K\]#..Y.*.......T. .C.....A'..
5FW.ETDvX..tE.....g5.....&..&.....x.^H;...../7..'9.t.I&<[.HX.j....Q
w......}...qy3..q`<.....LB.9w|....;..Qw..a ..=.C.:.........


GET /pki/crl/products/WinPCA.crl HTTP/1.1

Cache-Control: max-age = 900

Connection: Keep-Alive

Accept: */*

If-Modified-Since: Mon, 06 Oct 2014 05:06:02 GMT

If-None-Match: "3e1c83923e1cf1:0"

User-Agent: Microsoft-CryptoAPI/6.1

Host: crl.microsoft.com


HTTP/1.1 200 OK

Content-Type: application/pkix-crl

Last-Modified: Sun, 21 Dec 2014 06:03:02 GMT

Accept-Ranges: bytes

ETag: "d2e35dc7e31cd01:0"

Server: Microsoft-IIS/8.0

VTag: 27948442200000000

P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI"

X-Powered-By: ASP.NET

Content-Length: 561

Cache-Control: max-age=900

Date: Thu, 29 Jan 2015 07:53:28 GMT

Connection: keep-alive
0..-0......0...*.H........0..1.0...U....US1.0...U....Washington1.0...U
....Redmond1.0...U....Microsoft Corporation1 0)..U..."Microsoft Window
s Verification PCA..141220223154Z..150321105154Z._0]0...U.#..0.......p
............<.J0... .....7.......0...U......30... .....7......15032
0224154Z0...*.H.............h.~oH#i.J.vh_.....A'B..g...........F....9c
.{.m@Q.M.p...g.^ 4.r..Wv.Q.0.w..j....c9..w....I..%.~.l..F.......xo....
_...o...7BR.;<..\R/ .....b.(....~..]|.v.u.i.X.B....I......./*...P..
A..fi.}& .x.v{TFP[.G......A......L.o...)R.......V.u..V.../.Q..(L.]....
.uki~......


GET /pki/crl/products/MicrosoftTimeStampPCA.crl HTTP/1.1

Cache-Control: max-age = 900

Connection: Keep-Alive

Accept: */*

If-Modified-Since: Sat, 04 Oct 2014 05:06:12 GMT

If-None-Match: "58cddbea90dfcf1:0"

User-Agent: Microsoft-CryptoAPI/6.1

Host: crl.microsoft.com


HTTP/1.1 200 OK

Content-Type: application/pkix-crl

Last-Modified: Fri, 19 Dec 2014 06:02:00 GMT

Accept-Ranges: bytes

ETag: "9a9a44d511bd01:0"

Server: Microsoft-IIS/8.0

VTag: 279252244600000000

P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI"

X-Powered-By: ASP.NET

Content-Length: 550

Cache-Control: max-age=900

Date: Thu, 29 Jan 2015 07:53:28 GMT

Connection: keep-alive

0.."0......0...*.H........0w1.0...U....US1.0...U....Washington1.0...U.
...Redmond1.0...U....Microsoft Corporation1!0...U....Microsoft Time-St
amp PCA..141218221600Z..150319103600Z._0]0...U.#..0...#4..RFp..@.v.. .
.5..0... .....7.......0...U......10... .....7......150318222600Z0...*.
H............./..0Q~.r.}.E....&\....F.Z.C..#..F.s........<&\..9G..-
....j..N... .C.Fk....;l.....2.K5D.........-.>...(...g.0.S.[?...T4q&
gt;.ln...z..L.......5.5s@d.q.('..e...Y..Bo..q..........I....'....i>
..y:.eH@h`..\...UA.m#.~.. ;.3..d..;..<..........p..s..J..N `Az.....
.@..lHTTP/1.1 200 OK..Content-Type: application/pkix-crl..Last-Modifie
d: Fri, 19 Dec 2014 06:02:00 GMT..Accept-Ranges: bytes..ETag: "9a9a44d
511bd01:0"..Server: Microsoft-IIS/8.0..VTag: 279252244600000000..P3P: 
CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR S
AMo CNT COM INT NAV ONL PHY PRE PUR UNI"..X-Powered-By: ASP.NET..Conte
nt-Length: 550..Cache-Control: max-age=900..Date: Thu, 29 Jan 2015 07:
53:28 GMT..Connection: keep-alive..0.."0......0...*.H........0w1.0...U
....US1.0...U....Washington1.0...U....Redmond1.0...U....Microsoft Corp
oration1!0...U....Microsoft Time-Stamp PCA..141218221600Z..15031910360
0Z._0]0...U.#..0...#4..RFp..@.v.. ..5..0... .....7.......0...U......10
... .....7......150318222600Z0...*.H............./..0Q~.r.}.E....&\...
.F.Z.C..#..F.s........<&\..9G..-....j..N... .C.Fk....;l.....2.K5D..
.......-.>...(...g.0.S.[?...T4q>.ln...z..L.......5.5s@d.q.('..e.
..Y..Bo..q..........I....'....i>..y:.eH@h`..\...UA.m#.~.. ;.3..

<<< skipped >>>

GET /?clientv=29&method=track_offer_installed&mstime=57.564&offer_id=7861&product_key=cb00343115ffdf69411419d8a9ceff1a&session_key=20bcba5375d77d545a33b67dd4cffcac&v=1.0&signature=4d214a3f235afce893a978d15ec894dd HTTP/1.1

Host: api.opencandy.com

Accept: */*


HTTP/1.1 200 OK

Date: Thu, 29 Jan 2015 07:53:50 GMT

Server: Apache

X-Robots-Tag: noindex

Last-Modified: Thu, 29 Jan 2015 07:53:50 GMT

Cache-Control: no-store, no-cache, must-revalidate

Cache-Control: post-check=0, pre-check=0

Pragma: no-cache

Connection: close

Transfer-Encoding: chunked

Content-Type: text/xml
64..<?xml version="1.0"?><track_offer_installed><operat
ion>Completed</operation></track_offer_installed>..0..

GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBRIt2RJ89X++hEzqoBeQg8PymQ2UQQUANhaTCXBIuWLMe9tuvPMXynxDWECEGVSJuGyLhjhWQ8phawi51w= HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: ocsp.verisign.com


HTTP/1.1 200 OK

Server: nginx/1.4.7

Content-Type: application/ocsp-response

Content-Length: 1453

content-transfer-encoding: binary

Cache-Control: max-age=509248, public, no-transform, must-revalidate

Last-Modified: Wed, 28 Jan 2015 05:22:19 GMT

Expires: Wed, 4 Feb 2015 05:22:19 GMT

Date: Thu, 29 Jan 2015 07:56:25 GMT

Connection: keep-alive
0..........0..... .....0......0...0......T3t.%..O.E..~..F.=....2015012
8052219Z0s0q0I0... ........H.dI.....3..^B...d6Q....ZL%."..1.m..._)..a.
.eR&.....Y.)..".\....20150128052219Z....20150204052219Z0...*.H........
......q._#...U...Z..0.^..E..Q&j.%^..{[o..:Cd...A..*eM.d.....C..R.S....
j......1..5.eB$ n.........q_C.<xs...f;z...m<..Q.....F..2.G..(.n.
&iMR.f...H...C.....XC<o.}y..........A....{................@..$1..D.
...a....Y.![f.0..[.,..K..e....d..ZrZ..3..;JP2.M'...........L....0...0.
..0..3......./...b.v..-....l}0...*.H........0_1.0...U....US1.0...U....
VeriSign, Inc.1705..U....Class 3 Public Primary Certification Authorit
y0...141202000000Z..151216235959Z0..1.0...U....US1.0...U....Symantec C
orporation1.0...U....Symantec Trust Network1?0=..U...6Symantec Class 3
 PCA - G1 OCSP Responder Certificate 30.."0...*.H.............0.......
...'......Y..x.3B1.7..Q..`..d.. ....s..t.$a.....j2R.{ ,*..c{.3.....H..
3-; ).....0._...*..9M..V...... ...{m...-.......)..tR..{D....~...M...T.
.pS.p..^|o....S..v.).).....r.v.qo$......C.V!....@.h#qh...u1T.].G0.]E..
.=._...... ........TE...Sa.s4........r...3.............0..0...U....0.0
l..U. .e0c0a..`.H...E....0R0&.. .........hXXp://VVV.symauth.com/cps0(.
. .......0...hXXp://VVV.symauth.com/rpa0...U.%..0... .......0...U.....
...0... .....0......0!..U....0...0.1.0...U....TGV-B-2730...*.H........
.....$..H......oU....Y!.z{*.V.M..u.._z..3>.. 0....3..m.....e.......
a..D...........e..F6:.y.....di.......<y.Z.......x}..q.2....UZ1 :,font>....<<< skipped >>>

GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBSpuCE3aK3GivZPzGQJ6L5BRyZofwQUl9BrqCZwyKE/lB8ILcQ1m6ShHvICEAxNF3PJUX7iAOhAP2oGxcI= HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: ocsp.verisign.com


HTTP/1.1 200 OK

Server: nginx/1.4.7

Content-Type: application/ocsp-response

Content-Length: 1790

content-transfer-encoding: binary

Cache-Control: max-age=598855, public, no-transform, must-revalidate

Last-Modified: Thu, 29 Jan 2015 06:12:33 GMT

Expires: Thu, 5 Feb 2015 06:12:33 GMT

Date: Thu, 29 Jan 2015 07:56:25 GMT

Connection: keep-alive
0..........0..... .....0......0...0........6?s....V....OlL".O..2015012
9061233Z0s0q0I0... ..........!7h....O.d...AG&h.....k.&p..?...-.5......
..M.s.Q~...@?j.......20150129061233Z....20150205061233Z0...*.H........
.......H `._pIsjnQ...........{ .........&t.26OO.....[........-u-.1G...
....Es.....P..B.K,a=a6..i8.!.f...l.-.] .....:..`.40H.'p....4g]sJ`.n$..
.._P.t.t....E..u...T7U..X..*y.o I.l..S...X..L<..&.....y.m.4. ZB.(.t
:0...5C%.x7..o.Z..._/.X]h:D.D^_...O....@.....$.m..95hu...#0...0...0...
.......<o&S.-S..}...e.30...*.H........0..1.0...U....US1.0...U....Ve
riSign, Inc.1.0...U....VeriSign Trust Network1;09..U...2Terms of use a
t hXXps://VVV.verisign.com/rpa (c)09100...U...'VeriSign Class 3 Code S
igning 2009-2 CA0...141205000000Z..150305235959Z0..1.0...U....US1.0...
U....VeriSign, Inc.1.0...U....VeriSign Trust Network1;09..U...2Terms o
f use at hXXps://VVV.verisign.com/rpa (c)091<0:..U...3VeriSign Clas
s 3 Code Signing 2009-2 OCSP Responder0.."0...*.H.............0.......
..{(..t....2.Vf.....&;6).i*FK....W@....F....jnb.w._p.E.6.|.mk....(....
......p...........X.DF....^0N....b9.:..J. ZK.".^..\..p.'.$..JA..~QG.d.
}...r...gv... f...z.#..}..J...r9h.........LI-..^.......PUD.h<.l....
(n..i.....E.....2....^./Y......Y.m...'...hz..y..E..........0...0...U..
..0.0....U. ...0..0....`.H...E....0..0(.. .........hXXps://VVV.verisig
n.com/CPS0b.. .......0V0...VeriSign, Inc.0.....=VeriSign's CPS incorp.
 by reference liab. ltd. (c)97 VeriSign0...U.%..0... .......0...U.....
...0... .....0......0"..U....0...0.1.0...U....TGV-B-24710...*.H...<<< skipped >>>

GET /installstats.php?cl=uTorrent&v=109417338&h=uVVfIsRBsnvPyT6P&w=1DB10106&bu=0&pr=26616&cmp=217&ocmp=217&showtorrentoffer&pid=2972&cau=1&toroffer=0&torofferid=<NULL>&view=win32 HTTP/1.1

Accept-Encoding: gzip

User-Agent: uTorrent(37754)/3.4.2

Host: update.utorrent.li

Cache-Control: no-cache


HTTP/1.1 200 OK

Server: nginx/1.4.7

Date: Thu, 29 Jan 2015 07:53:49 GMT

Content-Type: text/html

Transfer-Encoding: chunked

Connection: close

X-Powered-By: PHP/5.4.30

0..

GET /installstats.php?v=102852600&h=uVVfIm5t2vDPyT6P&w=1DB10106&bu=0&pr=0&cmp=0&tbexists&tbe=0&cd=0&view=win32 HTTP/1.1

Accept-Encoding: gzip

User-Agent: uTorrent/3100(26616)

Host: update.utorrent.com

Cache-Control: no-cache


HTTP/1.1 200 OK

Server: nginx/1.4.7

Date: Thu, 29 Jan 2015 07:51:31 GMT

Content-Type: text/html

Transfer-Encoding: chunked

Connection: close

X-Powered-By: PHP/5.4.30

0..

GET /?accepted_ind=1&clientv=29&max=1&method=track_offer_result&mstime=56.519&offer_id=7861&offer_shown_secs=0&opt_shown_count=0&product_key=cb00343115ffdf69411419d8a9ceff1a&ready=1&session_key=20bcba5375d77d545a33b67dd4cffcac&skipped_offer_ids=&v=1.0&signature=e0babf7f70951361d14271ecc28d37a6 HTTP/1.1

Host: api.opencandy.com

Accept: */*


HTTP/1.1 200 OK

Date: Thu, 29 Jan 2015 07:53:49 GMT

Server: Apache

X-Robots-Tag: noindex

Last-Modified: Thu, 29 Jan 2015 07:53:49 GMT

Cache-Control: no-store, no-cache, must-revalidate

Cache-Control: post-check=0, pre-check=0

Pragma: no-cache

Connection: close

Transfer-Encoding: chunked

Content-Type: text/xml
5e..<?xml version="1.0"?><track_offer_result><operation
>Completed</operation></track_offer_result>..0..

GET /offers/spigot-yandex-en-20140708.exe HTTP/1.1

Host: llsw.download3.utorrent.com

User-Agent: BTWebClient/3420(37754)

Accept-Encoding: gzip

Connection: Close


HTTP/1.1 200 OK

Server: nginx/1.4.7

Content-Type: application/octet-stream

Cache-Control: max-age=14400

Accept-Ranges: bytes

Age: 10096

Date: Thu, 29 Jan 2015 07:53:50 GMT

Last-Modified: Fri, 25 Jul 2014 17:50:03 GMT

Expires: Thu, 29 Jan 2015 09:05:34 GMT

Content-Length: 157480

Connection: close

MZ......................@.............................................
..!..L.!This program cannot be run in DOS mode....$........>..._...
_..._...';.._...'-.._....*.._...'*.._...'=.._..._..._...'$.._...':.._.
..'?.._..Rich._..........................PE..L......S.................
........... .............@.......................................@....
.............................4........................N..(.......`...@
...............................8...@..................................
..........text............................... ..`.rdata...V.......X...
...............@..@.data...hR...0......................@....rsrc......
..........$..............@..@.reloc..t".......$...*..............@..B.
......................................................................
......................................................................
......................................................................
......................................................................
...............................................V..v.f.0f;1u.@@AAJu.3.^
....f;.^.....@.U...u..u..u..u...{...E....].U...u..u..u..u..or...E....]
...`.A...s..V....`.A...s...D$..t.V..{..Y..^....j....A..U......u...r...
e...u..N...l.A...-............V..j.j..N...l.A...3....^."s...y$.r..A...
A..V........D$..t.V..{..Y..^...V.t$....x.....x.A...^.....x.A......V...
.x.A.......D$..t.V..z..Y..^...V.t$....3.......A...^.......A..Q...V....
..A..C....D$..t.V.xz..Y..^...V.t$............A...^...j....A..7......u.
.}.W..q...e.....W.N...l.A...,............j....A......j...~....Y.u.

<<< skipped >>>

GET /status.xml?clid=2154477&uuid={38F8EDE5-D9EB-46FB-8442-4F4D9BE9B350}&vnt=6.1x64&top=2.0&file-no=45
25
6
15
111
129
121
42
41
43
40
89
17
18
12
11
13
10
21
24
22
20
104
123
124
125
102 HTTP/1.1

Connection: Keep-Alive

User-Agent: StatisticsEx/1.0

Host: soft.export.yandex.ru


HTTP/1.1 200 OK

Server: nginx/1.4.7

Date: Thu, 29 Jan 2015 07:53:57 GMT

Content-Type: text/xml

Content-Length: 64

Last-Modified: Thu, 11 Dec 2014 08:06:16 GMT

Connection: keep-alive

Keep-Alive: timeout=120

Accept-Ranges: bytes
<?xml version="1.0" encoding="windows-1251"?>.<page>.ok.&l
t;/page>...

POST /e?i=29 HTTP/1.1

Host: bench.utorrent.com

User-Agent: BTWebClient/3420(37754)

Accept-Encoding: gzip

Connection: Close

Content-Length: 145

{"h":"uVVfIsRBsnvPyT6P","cl":"uTorrent","v":109417338,"l":"en","w":"6.1","cts":1422518039,"eventName":"flash", "flash version": "not_installed" }
HTTP/1.1 200 OK

Content-Type: text/html

Date: Thu, 29 Jan 2015 07:54:00 GMT

Server: nginx

X-Powered-By: PHP/5.4.30

Content-Length: 21

Connection: Close
{"response_code":200}..

GET /e?i=1005&e=eyJldmVudE5hbWUiOiJhcC5hZHRhZyIsImFjdGlvbiI6ImxvYWRlZCIsInRhZyI6ImFudCIsImFkdCI6IjUiLCJicm93c2VyIjoiaWUiLCJjbGllbnRkYXRhIjoidXRvcnJlbnQlN2MzJTJlNCUyZTIlMmUzNzc1NCU3YzIxNyIsInBhZ2UiOiJ0b3JyZW50Iiwic2l0ZSI6IjMzMDQ5In0=&callback=jQuery1111028903432009117824_1422518160328&_=1422518160329 HTTP/1.1

Accept: */*

Referer: hXXp://cdn.bitmedianetwork.com/network/index-edge.html?tag=ant&adt=5&browser=ie&clientdata=utorrent|3.4.2.37754|217&page=torrent&site=33049

Accept-Language: en-US

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/6.0)

Accept-Encoding: gzip, deflate

Host: bench.utorrent.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Content-Type: text/html

Date: Thu, 29 Jan 2015 07:56:01 GMT

Server: nginx

X-Powered-By: PHP/5.4.30

Content-Length: 65

Connection: keep-alive

jQuery1111028903432009117824_1422518160328({"response_code":200})HTTP/
1.1 200 OK..Content-Type: text/html..Date: Thu, 29 Jan 2015 07:56:01 G
MT..Server: nginx..X-Powered-By: PHP/5.4.30..Content-Length: 65..Conne
ction: keep-alive..jQuery1111028903432009117824_1422518160328({"respon
se_code":200})..

GET /onboarding/utorrent?url=http://bundles.bittorrent.com/ HTTP/1.1

Host: bundles.bittorrent.com

User-Agent: BTWebClient/3420(37754)

Accept-Encoding: gzip

Connection: Close


HTTP/1.1 301 Moved Permanently

Server: CloudFront

Date: Thu, 29 Jan 2015 07:53:50 GMT

Content-Type: text/html

Content-Length: 183

Connection: close

Location: hXXps://bundles.bittorrent.com/onboarding/utorrent?url=http://bundles.bittorrent.com/

X-Cache: Redirect from cloudfront

Via: 1.1 f989b812753677758cd8909391e239ac.cloudfront.net (CloudFront)

X-Amz-Cf-Id: gaHFvc0kEvocMyaKntsUx8YRjxwl3q-ila5PfvDhCSmw_EmDJq_4iA==
<html>..<head><title>301 Moved Permanently</title
></head>..<body bgcolor="white">..<center><h1&
gt;301 Moved Permanently</h1></center>..<hr><cent
er>CloudFront</center>..</body>..</html>....

GET /?clientv=29&method=track_product_installed&mstime=56.534&product_key=cb00343115ffdf69411419d8a9ceff1a&session_key=20bcba5375d77d545a33b67dd4cffcac&v=1.0&signature=8e7639490d4e8c53036c7a002c2c83d0 HTTP/1.1

Host: api.opencandy.com

Accept: */*


HTTP/1.1 200 OK

Date: Thu, 29 Jan 2015 07:53:50 GMT

Server: Apache

X-Robots-Tag: noindex

Last-Modified: Thu, 29 Jan 2015 07:53:50 GMT

Cache-Control: no-store, no-cache, must-revalidate

Cache-Control: post-check=0, pre-check=0

Pragma: no-cache

Connection: close

Transfer-Encoding: chunked

Content-Type: text/xml
68..<?xml version="1.0"?><track_product_installed><oper
ation>Completed</operation></track_product_installed>..
0..

GET /installoffer.php?h=uVVfIsRBsnvPyT6P&v=109417338&w=1DB10106&l=en&c=US&w64=1&db=iexplore.exe&cl=uTorrent&au=1&tsub=1&svp=4&cmp=217&ocmp=217 HTTP/1.1

Accept-Encoding: gzip

User-Agent: uTorrent(37754)/3.4.2

Host: update.utorrent.com

Cache-Control: no-cache


HTTP/1.1 200 OK

Server: nginx/1.4.7

Date: Thu, 29 Jan 2015 07:52:51 GMT

Content-Type: text/html

Transfer-Encoding: chunked

Connection: close

X-Powered-By: PHP/5.4.30

Expires: Thu, 21 Jul 1980 00:00:00 GMT

Cache-Control: private

Last-Modified: Thu, 29 Jan 2015 07:52:51 GMT

938..d16:secondary_offersl2:oce2:oci1e3:adki1e8:toolbar0d5:title24:Fre
e Yandex Search Offer8:subtitle0:13:body_text_rtf95:{\rtf1\ansi\ansicp
g1252\u181?Torrent suggests you install the Yandex settings described 
below.}11:footer_text258:By clicking "Accept" and selecting one or mor
e of the checkboxes above, you are verifying that you have read and ac
cepted our <a href="hXXp://legal.yandex.ru/confidential/">Privac
y Policy</a> and <a href="hXXp://legal.yandex.ru/termsofuse/"
>Terms of Use</a>.2:id13:spigot-yandex9:image_url68:hXXp://ll
sw.download3.utorrent.com/offers/spigot-yandex-20140709.bmp10:image_ha
sh20:...Rw...U......J...'9:image_sig256:...g........U.....{.m.=...o!.h
f.K........./... 2. ......r"kv.*..t>....m...;.C.v..S...7.s.s...2...
@..Ef.w0..&4..'..X.F$.}p.U.........K.....v...F..._u..:.pX.`...0.`.....
Y....a.....9...g...=..-.!#......].V$._..SD_.c.... .v...,9...A...7..g.-
.4.\!.\KZ}kK(."1...10:image_sizei353958e10:offer_urlsl71:hXXp://llsw.d
ownload3.utorrent.com/offers/spigot-yandex-en-20140708.exe71:hXXp://ll
sw.download3.utorrent.com/offers/spigot-yandex-en-20140708.exe66:http:
//download3.utorrent.com/offers/spigot-yandex-en-20140708.exe58:http:/
/67.215.246.206/offers/spigot-yandex-en-20140708.exee10:offer_hash20:.
lM1.....u..x..dp...9:offer_sig256:..F..pc...l.,.A4.."P...lX./.V.../...
.5`..|.....|0!........h.oo....U.eY.m.g.s..!}@...7h......^..WM..R...s..
.Hul...m.D$.......v.c.....f9._. ...8yZxq....(7..Y..:-..@(.8...#.i.Iq.&
lt;.j.J..^....8.7.D.gK...[.P.5K.G..eX.J..R..*...'. .{..5}....6.../

<<< skipped >>>

GET /installstats.php?cl=uTorrent&v=109417338&h=uVVfIsRBsnvPyT6P&w=1DB10106&bu=0&pr=26616&cmp=217&ocmp=217&gettbofferresult&pid=2972&cau=1&tbofferresult=3&exit=1375&cbtoolbar=1&cbhomepage=1&tb=spigot-yandex&view=win32 HTTP/1.1

Accept-Encoding: gzip

User-Agent: uTorrent(37754)/3.4.2

Host: update.utorrent.li

Cache-Control: no-cache


HTTP/1.1 200 OK

Server: nginx/1.4.7

Date: Thu, 29 Jan 2015 07:53:49 GMT

Content-Type: text/html

Transfer-Encoding: chunked

Connection: close

X-Powered-By: PHP/5.4.30

0..

GET /ados.js HTTP/1.1

Accept: */*

Referer: hXXp://cdn.bitmedianetwork.com/network/index.html?adt=1224&browser=ie&clientdata=utorrent|3.4.2.37754|217&page=torrent&site=33049

Accept-Language: en-US

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/6.0)

Accept-Encoding: gzip, deflate

Host: static.ap.bittorrent.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Date: Thu, 29 Jan 2015 07:54:00 GMT

Content-Type: application/javascript

Transfer-Encoding: chunked

Connection: keep-alive

Set-Cookie: __cfduid=dd68a323942e898079a008132f5c3133d1422518040; expires=Fri, 29-Jan-16 07:54:00 GMT; path=/; domain=.bittorrent.com; HttpOnly

x-amz-id-2: YW0dKNIs6gu4cEjjIg1By4Qv1kI3/VaqeNYq4slo1iSw6 uAA4tqrIfNKEMkUjOpXZDxuHQrdXg=

x-amz-request-id: 0AC7C381FDA77959

x-amz-version-id: 9qThRlvpjh7OnqTS0mQqUT5ISgnVRwXu

Cache-Control: public, max-age=604800

Last-Modified: Tue, 27 Jan 2015 21:50:18 GMT

ETag: W/"8a1bd0dc12eef2b70395aae16973b6bd"

CF-Cache-Status: HIT

Expires: Thu, 05 Feb 2015 07:54:00 GMT

Server: cloudflare-nginx

CF-RAY: 1b03dbfa543a0c83-AMS

Content-Encoding: gzip
1e6c.............=m{.6... .=w!.....i ...N..n.dcw..I.C....".......{... 
H.Js.........`^..`Hw..O4.<,hL.n.q6.Sz.q6 .n..N..;..Q......#B.!'.>
;}.............je..9.....,*...N.n..qZ.yJ......s.i?]..[..h6&...vf< 2
h...`....B.xw.0......YX.....nq..."L......#.}B._.......4...vv...a...,-.
].....d...v.....9.EO.F..yA..Ni..1.}t..<IV...g.........z..Y..0.w4J.*
.....-..`8..z=....y.y..#.....o{..|...}....|...v..1...N|.._.......p>
.c.=.C.x<......Q8./.........Z....o.;....?..I8.Y........;gx........a
!>..1..S.8.................8.: ..Y....YA]..t..i.;I..'iL.A.@j..,h^.1
GN.i.....$...!}.........A8RH..EA.8..9.....v.....;.e.....,...)24Cw...u.
.E....V^[p.... .i^p06.2Kb...._..?......,....,...._Xb... z3.EF4>y".F
. p..O4*.j.2..r.cL........q...N.&..4.....V.5 .K.....0.J.})pT8....T....
K...IY......../....D.$.Ie.BK..a...!0.\M.Y;@.?....B......"..p6Kn., ..NB
^r......U .._...wY.;`.....].N.9`..L.I...K.....x. ..9......#g0L.6...>
;e,u._6{mp.6.X..9}g.....=..p.........3mZ.:.<5.`..9....Y..ww...lt...
_I...k.tf...E.......O...w...[.V ....(.",U.....0.w.........[..W.w..d4..
n%.u...Z9}..Q].&u.....A.....6T;...e .R...0.r...9........p.R...P....SV 
....8.,..C...It....]0..l..h.p...av.[.....'.. .......5I.5y.y.].*;.[I...
8...8}!..WS.,.9mR..(.P.e.s.`..[|*...0.2Va...D..e{.*.k.EP......`..t.R..
.dp5....1MhAq....\F.P..n....r}...A....l.FK..D.w'../.!D.Jh 7..........#
.........-g.3v.C..?h.....8...~>..|..._.........w....!..o.....i...sz
?......p.s4...Q....O.#.N_......z.#.72..G...................O.]....N..n
;..YA.TLH.z.{...L.O..YNo."\..#l........y.z.....O.O.t.i..,}...O.l<<< skipped >>>

GET /Advertisers/a05ac8e903c14e74befdd8b8426a754e.jpg HTTP/1.1

Accept: */*

Referer: hXXp://cdn.bitmedianetwork.com/network/index.html?adt=5&browser=ie&clientdata=utorrent|3.4.2.37754|217&page=torrent&site=33049

Accept-Language: en-US

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/6.0)

Accept-Encoding: gzip, deflate

Host: static.ap.bittorrent.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Date: Thu, 29 Jan 2015 07:54:01 GMT

Content-Type: image/jpeg

Content-Length: 39121

Connection: keep-alive

Set-Cookie: __cfduid=d276e9503d267c2cacf9979a7f0ef43811422518041; expires=Fri, 29-Jan-16 07:54:01 GMT; path=/; domain=.bittorrent.com; HttpOnly

x-amz-id-2: oMTI4j1Ug1S3oMnt2FOLaM/rLZRp Vc2P3bZtX58iR9BhnmzJ ZW4lfKmiDNMTzQzxOv1dFcDMs=

x-amz-request-id: DCA0E9805A763319

x-amz-version-id: null

Expires: Fri, 29 Jan 2016 13:42:47 GMT

Cache-Control: public, max-age=31556926

Last-Modified: Thu, 04 Dec 2014 23:21:25 GMT

ETag: "ee34319d4cd15e380f24193718afd121"

CF-Cache-Status: HIT

Accept-Ranges: bytes

Server: cloudflare-nginx

CF-RAY: 1b03dbfe84e40c83-AMS
......Exif..II*.................Ducky.......F.....mhXXp://ns.adobe.com
/xap/1.0/.<?xpacket begin="..." id="W5M0MpCehiHzreSzNTczkc9d"?> 
<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c06
0 61.134777, 2010/02/12-17:32:00        "> <rdf:RDF xmlns:rdf="h
ttp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rd
f:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="
hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="hXXp://ns.a
dobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:CE52511B2DBEE2119
DD2A4EEACF9F1A8" xmpMM:DocumentID="xmp.did:7A96764ADF3D11E29464EB73452
F26A9" xmpMM:InstanceID="xmp.iid:7A967649DF3D11E29464EB73452F26A9" xmp
:CreatorTool="Adobe Photoshop CS5 Windows"> <xmpMM:DerivedFrom s
tRef:instanceID="xmp.iid:F49BF15D3CDFE2119ED2F6E5F182FDF8" stRef:docum
entID="xmp.did:CE52511B2DBEE2119DD2A4EEACF9F1A8"/> </rdf:Descrip
tion> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>
....Adobe.d...........................................................
......................................................................
..................,...................................................
..........................................!.1A".Q.a.2.q.B.#3...Rb.45..
..r.C$6FV...Tdî....Scs...D&.'(....H......................!1..AQ..a.q
.."2......B#.Rb..3$D.CS...r....%E............?............&.._Y....-mQ
.H...Wp&.=....B$.I_....|.!....[HU.T......X..@..:.'T.P.:..gi..sh...Eg..
|...-.,.7.H#;...?D...(:|N...u ...K........,g.\........`.<..Y.;.<<< skipped >>>

GET /utorrent-onboarding/welcome.btapp HTTP/1.1

Accept-Encoding: gzip

User-Agent: uTorrent/3100(26616)

Host: apps.bittorrent.com

Cache-Control: no-cache


HTTP/1.1 200 OK

x-amz-id-2: q4A5uTKzbuRrV 8vbxvWmwC492YT8tm/bapqiEdLld6elD3WwcCB5t7CEwsqkuT8

x-amz-request-id: 2904DFF274ECE445

Accept-Ranges: bytes

Content-Type: binary/octet-stream

Server: AmazonS3

Age: 188918

Date: Thu, 29 Jan 2015 07:52:29 GMT

Last-Modified: Tue, 08 Oct 2013 00:52:24 GMT

Content-Length: 27955

Connection: keep-alive
PK.........q.>.p..............btapp5.1.. ..{^...0N.Q.K.....b#a8.G..
..S.4....`...Af9@.e.....d.)#.....d..O.".9(.pr.c.d.f.Z;..|d>8...v.k.
.8.b....).[CLP.E.]y^..f..B..N.$p...i.........PK.........L|>...9....
........empty_movie.gifGIF89a.............!.......,...................
..........H...........L................L*......J......j............N..
...................(8HXhx..........)9IYiy..........*:JZjz.......... ;K
[k{..........,<L\l|..........-=M]m}...........>N^n~........../?O
_o..........0......<.0....1...;PK.........Y.>.Pi-....T.......ind
ex.html.W.n.6..?OqU.:.f).K.5........".....Z:Yt(R%)..0`......H....C....
..........oo?....V".8......$@..D@...@_\.e..L..I..b.*X.Yn....Z.'pc....Q
KnY..w.Q$.....D.....$...afL.vQc.X.... .9. .F....$...5......ym7eM......
.....6...M.<.(5..jn.LU...>6..K.z......r.V....i..............k...
.Jk...o....c.tN.....}.l*.m..}8....5V....>..-...Ff. .%.*.....#.c}.&g
t;^......~rn.$.A#s,..|@..}...*k*....k.n.f.s~8.N..Q..D.....@.bS3.......
.&... X.pYi...r.%B.&...v.`.._.....f.$f....1riQK.$-..-....k.2...).I....
..)a.......!9..6....g.b.......8.RT.Xg..0......1...yS.K.L.........._.._
<NV...9.$.. G'.ll.LB.v..n..&..=.=.*..I......._'`_..I.5..N.-e.~e...Q
L....'._#.g..pv.{.suOQ...lTh{. .8j.}<V..~r>..'......^....c_S.Iy.
.@..i.qx..SPhU.....y..Ry..c.A...]9].D......&.`c.P(....R#..nV.k.....q.d
....2.R.....w..L.LU....hU../.<....j.x.j...2..!.h....7.Y.).!F.......
v.v.....M5....y5iG..3....2(.e..<{E.....iqvN.&h...]..Oz...36sC....l'
..R...&.9...o4.|...`y.C.....K......k...e..._.c..d{.R.. ...c:...WI.<<< skipped >>>

GET /utorrent-onboarding/player.btapp HTTP/1.1

Accept-Encoding: gzip

User-Agent: uTorrent/3100(26616)

Host: apps.bittorrent.com

Cache-Control: no-cache


HTTP/1.1 200 OK

x-amz-id-2: kLnNrkgfGAUNBhBwOUtnTaaAPMzN4DSdXHzrxkam8f6mjZV0Qi/hOlv0ELXd7rpV

x-amz-request-id: 04253D8D9662B60E

Accept-Ranges: bytes

Content-Type: binary/octet-stream

Server: AmazonS3

Age: 102075

Date: Thu, 29 Jan 2015 07:52:29 GMT

Last-Modified: Tue, 08 Oct 2013 00:53:35 GMT

Content-Length: 3097

Connection: keep-alive
PK.........c.@!m@.............btappUT....8.O7N.Oux.............-.1.. .
.{^.....L...u.M....G..>v.i..f4.6....V/pO...q...S_...d..(..%.5.B.yp.
.H..Rk..$rb&.......*.......d....959...=&.`@.....(F..)Jz.....1.}....9..
PK.........c.@v.7.`...........main.cssUT....8.O7N.Oux..............S.n
.0.}. ".....[7e_c..k............i....9....`u...p.'4U..lH)...,.|.....Jn
.H...B.bm..:j.R...l@CU...cC.....IK._........,.K.b...<.I.F.]....A...
F|#...../.%.$...q8.........-.9%....3......h9 -V...)....gB../.Z.V@.&[..
a...!6..\)..QX....f...Qh.......H.....].ZD6....H(-.pSt...sH o^..nu.hB..
.a.ou......Ng.cEw.`....=_.............H..6..Y.>..7.}!.w...W.W'.....
....PK.........c.@..yI....6.......icon.bmpUT....8.O7N.Oux.............
U....@...>*....<..E.....;....{..Q.....yU-....<...D..4w..@/...
.c..................wf??...S.&...q.......}7k..).v..Z..l.R.8..;..;9..'.
.{:=yO.....{.E.>.`"...9..|$..G...#.H...<..<...:x......|!_....
|Y..[K...D.TP.Nk..;~......O679'...;~......w....;~....s.w....;~....S.w.
...;~....3.w....;~.....8~......w.....6...s._..?............N.~..X.....
./.)./../../.....K.....k........./../../..L...........%$../../../..|.G
.x.....-...........?............?............?..r.........,.|.e..?....
.....s...$xY...O..6.V.S....n....V/...k...x....2.....4.P....C..9.ka_.lC
3Ms..S.3.|..2....2......|..C.oS.y.iZ.......i..[.A.T_?.u......p.......F
=..i...u.G.......7..Y..M../PK.........u.@.W.@....m.......index.htmlUT.
...M.O.N.Oux..............U.r.0.}._..a...;i.\.0.r..tH..G...je.#.I...r.
.0I.O.v..v.J..........R...Y.. .ZF.....I.........Xt. ......'..n1...<<< skipped >>>

GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBSpuCE3aK3GivZPzGQJ6L5BRyZofwQUl9BrqCZwyKE/lB8ILcQ1m6ShHvICEGwkCSV07gf3g5QOsqmf+MY= HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: ocsp.verisign.com


HTTP/1.1 200 OK

Server: nginx/1.4.7

Content-Type: application/ocsp-response

Content-Length: 1790

content-transfer-encoding: binary

Cache-Control: max-age=568350, public, no-transform, must-revalidate

Last-Modified: Wed, 28 Jan 2015 21:47:43 GMT

Expires: Wed, 4 Feb 2015 21:47:43 GMT

Date: Thu, 29 Jan 2015 07:56:28 GMT

Connection: keep-alive
0..........0..... .....0......0...0........6?s....V....OlL".O..2015012
8214743Z0s0q0I0... ..........!7h....O.d...AG&h.....k.&p..?...-.5......
.l$.%t...............20150128214743Z....20150204214743Z0...*.H........
.....ETI..}..0.5yi.W...v.ln..I..G.3i.......{.....Y.o..4......./..=..K%
...%..^..[L.q..c.....K.>..(...QHl...(<..N..a.l.9.MC?x.u.>.u.t
.|..A(.G.VK.l ...3.......q...UNj...[.O.;2...U.a..acxT/...?....3!....|.
..e...*z.-g}.V...[s..P."......KT..).QE.mQ...x..h.=.pi.}uaz.....#0...0.
..0..........<o&S.-S..}...e.30...*.H........0..1.0...U....US1.0...U
....VeriSign, Inc.1.0...U....VeriSign Trust Network1;09..U...2Terms of
 use at hXXps://VVV.verisign.com/rpa (c)09100...U...'VeriSign Class 3 
Code Signing 2009-2 CA0...141205000000Z..150305235959Z0..1.0...U....US
1.0...U....VeriSign, Inc.1.0...U....VeriSign Trust Network1;09..U...2T
erms of use at hXXps://VVV.verisign.com/rpa (c)091<0:..U...3VeriSig
n Class 3 Code Signing 2009-2 OCSP Responder0.."0...*.H.............0.
........{(..t....2.Vf.....&;6).i*FK....W@....F....jnb.w._p.E.6.|.mk...
.(..........p...........X.DF....^0N....b9.:..J. ZK.".^..\..p.'.$..JA..
~QG.d.}...r...gv... f...z.#..}..J...r9h.........LI-..^.......PUD.h<
.l....(n..i.....E.....2....^./Y......Y.m...'...hz..y..E..........0...0
...U....0.0....U. ...0..0....`.H...E....0..0(.. .........hXXps://VVV.v
erisign.com/CPS0b.. .......0V0...VeriSign, Inc.0.....=VeriSign's CPS i
ncorp. by reference liab. ltd. (c)97 VeriSign0...U.%..0... .......0...
U........0... .....0......0"..U....0...0.1.0...U....TGV-B-24710...<<< skipped >>>

GET /favicon.ico HTTP/1.1

Host: VVV.mininova.org

User-Agent: BTWebClient/3100(26616)

Accept-Encoding: gzip

Connection: Close


HTTP/1.1 200 OK

Cache-control: public, max-age=25920000

Expires: Wed, 25 Nov 2015 07:52:35 GMT

Content-Type: image/x-icon

Accept-Ranges: bytes

ETag: "103585109"

Last-Modified: Sat, 30 Oct 2010 22:57:22 GMT

Content-Length: 318

Connection: close

Date: Thu, 29 Jan 2015 07:52:35 GMT

..............(.......(....... .......................................
.p6......J .......f.......M...|..............v?.......W.DDDDDDDDA.....
..A.......A.......A"q...".A"q...".A"q...".A"..%.".A"ar#.(.A"/..m .A..(
U...A.......A.......A.......A.......DDDDDDDD..........................
........................................

GET /crls/secureca.crl HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: crl.geotrust.com


HTTP/1.1 200 OK

Server: Apache

ETag: "b291f81383e258af7457c40c69aba934:1422515422"

Last-Modified: Thu, 29 Jan 2015 07:10:22 GMT

Date: Thu, 29 Jan 2015 07:52:38 GMT

Content-Length: 878

Connection: keep-alive

Content-Type: application/pkix-crl

0..j0...0...*.H........0N1.0...U....US1.0...U....Equifax1-0 ..U...$Equ
ifax Secure Certificate Authority..150129070300Z..150208070300Z0..R0..
..X...140427081922Z0....v...140618150003Z0........140429180917Z0......
..140709194633Z0........140416233935Z0........140521155053Z0.....)..14
0617185515Z0....Bf..120627171053Z0.....3..020515130611Z0.....#..140606
204021Z0........100729164439Z0........140606222139Z0....%...0205141811
57Z0....S...140423105438Z0........140725020038Z0........100729164732Z0
....M\..140430000442Z0.....-..140617185011Z0....uU..150118022133Z0....
V...140624123102Z0........120627171025Z0........100301134531Z0........
140618143256Z0........120627171017Z0.....>..140711125531Z0....[...1
00730213120Z0....j...140226123519Z0...*.H............|lM.$.IQ..:.7.-L.
...=.).....D....]...".-..b..F./C.QqfBp......L10{.0w.6..N`<.T...*:D.
......c..N.pb....&.vnHN....y......w\5..B..Y.HTTP/1.1 200 OK..Server: A
pache..ETag: "b291f81383e258af7457c40c69aba934:1422515422"..Last-Modif
ied: Thu, 29 Jan 2015 07:10:22 GMT..Date: Thu, 29 Jan 2015 07:52:38 GM
T..Content-Length: 878..Connection: keep-alive..Content-Type: applicat
ion/pkix-crl..0..j0...0...*.H........0N1.0...U....US1.0...U....Equifax
1-0 ..U...$Equifax Secure Certificate Authority..150129070300Z..150208
070300Z0..R0....X...140427081922Z0....v...140618150003Z0........140429
180917Z0........140709194633Z0........140416233935Z0........1405211550
53Z0.....)..140617185515Z0....Bf..120627171053Z0.....3..020515130611Z0
.....#..140606204021Z0........100729164439Z0........140606222139Z0

<<< skipped >>>

GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBQMgSk4dLKWKRB+2DViUmQEUw3ggwQUDURcFlNEwYJ+HSCrJfQBY9i+eaUCECyLOOAjYRltRQP8lkAE25w= HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: sd.symcd.com


HTTP/1.1 200 OK

Server: nginx/1.4.7

Content-Type: application/ocsp-response

Content-Length: 1730

content-transfer-encoding: binary

Cache-Control: max-age=522096, public, no-transform, must-revalidate

Last-Modified: Wed, 28 Jan 2015 08:50:05 GMT

Expires: Wed, 4 Feb 2015 08:50:05 GMT

Date: Thu, 29 Jan 2015 07:52:40 GMT

Connection: keep-alive

0..........0..... .....0......0...0......P).Niz5............?..2015012
8085005Z0s0q0I0... ..........)8t..).~.5bRd.S......D\.SD..~. .%..c..y..
.,.8.#a.mE...@.......20150128085005Z....20150204085005Z0...*.H........
......oP... .SB..9......W.u.c...._.P.....P...-...R.C....hk06i....#@.J.
].f .#.d.5...23V.....?.c..l.t^....F......:X....H,.i^l....(.;..7.T.3S.\
F7.AwL..'....6x*..7v..p.r]..Og.EV....K..i.........oR. .CmB.&..S9......
%w7..U..... Dp;..h....$.Gz!.2..Q....].`...g............0...0...0......
....]../g.0.h.....$C0...*.H........0..1.0...U....US1.0...U....VeriSign
, Inc.1.0...U....VeriSign Trust Network1;09..U...2Terms of use at http
s://VVV.verisign.com/rpa (c)101/0-..U...&VeriSign Class 3 Secure Serve
r CA - G30...141204000000Z..150304235959Z0..1.0...U....US1.0...U....Ve
riSign, Inc.1.0...U....VeriSign Trust Network1>0<..U...5VeriSign
 Class 3 Secure Server CA - G3 OCSP Responder0.."0...*.H.............0
............Q..>.]....b...........G[..sz_:.eM.J..m)....J.KV..W....e
.M...C.......8.|...^...S./.r.KOv.&...OVW....rG.@...e...:S4....R..&"...
...l.....1&..nY..p.....4...L`.g...E#t....Mw....1.O.....i..e.b.qa...p..
...$...b...V....#.M3......|..B.R..:@UtY@:s..h.........me..........0...
0...U....0.0....U. ...0..0....`.H...E....0..0(.. .........hXXps://VVV.
verisign.com/CPS0b.. .......0V0...VeriSign, Inc.0.....=VeriSign's CPS 
incorp. by reference liab. ltd. (c)97 VeriSign0...U.%..0... .......0..
.U........0... .....0......0"..U....0...0.1.0...U....TGV-B-24570...*.H
.............y.boc.....2<.-..O...ehR.............. .....n....'c

<<< skipped >>>

GET /MFUwUzBRME8wTTAJBgUrDgMCGgUABBS856ddZAq5lE7vDJmoUDW1u98SMAQU3WyAfLq1MhelhEFA8NIEZhMvqZACFGozgiJkrf5JafrJHx/pwJ6+De+O HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: vassg141.ocsp.omniroot.com


HTTP/1.1 200 OK

Server: nginx

Content-Type: application/ocsp-response

Content-Length: 1765

Last-Modified: Thu, 29 Jan 2015 07:48:15 GMT

ETag: "e66a9ce3f162129952a5bdffcb01b00099fbe555"

Cache-Control: public, no-transform, must-revalidate, max-age=339761

Expires: Mon, 02 Feb 2015 06:15:25 GMT

Date: Thu, 29 Jan 2015 07:52:44 GMT

Connection: keep-alive

0..........0..... .....0......0...0..........[us..Ni......f....2015012
9074815Z0w0u0M0... ...........]d...N....P5....0...l.|..2...A@...f./...
.j3."d..Ii...............20150129074815Z....20150202074815Z0...*.H....
.........;S......R..%v. ..!b..ha;C}U.~....Cd.#....j...&u.k...S.v......
.o.A.........*..4..9....J.(`...[mA.jb3.-x5.s.(.CxY-$..2..B.v.v....e#'.
.Q....{r.....X...U. .........pXE..w..2D.;2."...}......!0.{u..... ..U..
..?..!S.n=...h.1.yRp6.D.H`.mg.....5Cfg,...4D#..|...j.......0...0...0..
.........=......Ri..\..(.{..0...*.H........0..1.0...U....NL1.0...U....
Amsterdam1%0#..U....Verizon Enterprise Solutions1.0...U....Cybertrust1
.0,..U...%Verizon Akamai SureServer CA G14-SHA10...140410115548Z..1504
10115548Z0..1.0...U....NL1.0...U....Amsterdam1%0#..U....Verizon Enterp
rise Solutions1.0...U....Cybertrust1806..U.../Verizon Akamai SureServe
r CA G14-SHA1 Responder0.."0...*.H.............0.........f..).1.......
......Z.45..l. IB..r`...f....h.....h..._i'...J....|.c....E.D0bg.b.v...
.......:Q....W._U.w..3....i...k........t.....m.CO$..j@.....>..Q.m..
....1/Z.r......L..a.n..;..KoIY.......fk{..c..d...IU.......zy.X...zp...
F.1..F......b...Z...=9.o...N.fL.%Z.........H0..D0... .....0......0L..U
. .E0C0A.. .....>..0402.. ........&hXXps://secure.omniroot.com/repo
sitory0~.. ........r0p06.. .....0..*hXXps://cacert.a.omniroot.com/vass
g141.crt06.. .....0..*hXXps://cacert.a.omniroot.com/vassg141.der0...U.
..........0...U.%..0... .......0...U.#..0....l.|..2...A@...f./..0...U.
.........[us..Ni......f..0...*.H.............Fk:..%..H.:.|P.;..-3.

<<< skipped >>>

GET /utorrent-onboarding/welcome-upsell.btapp HTTP/1.1

Host: apps.bittorrent.com

User-Agent: BTWebClient/3420(37754)

Accept-Encoding: gzip

Connection: Close


HTTP/1.1 200 OK

x-amz-id-2: HCpaeLg6Uh9Sm3sk0S53QKUErij9Jl2BjFcA7W08S2omUK1lk3TxpoRJFmDYmH X

x-amz-request-id: A7F6CC8B72CD7AE0

Accept-Ranges: bytes

Content-Type: binary/octet-stream

Server: AmazonS3

Age: 189010

Date: Thu, 29 Jan 2015 07:53:50 GMT

Last-Modified: Tue, 08 Oct 2013 00:54:05 GMT

Content-Length: 28315

Connection: close
PK.........}?@................btappUT...4}(O..(Oux.............5.1.. .
.{^..b.N.Q.K.)...b#a8.G....S.4....`...Af..4........Q...S....G>..|.I
...1...]..j..............}q.b....u. ..<oE..N..w..D..A....GA..U.w.5W
=..`...PK.........L|>...9............empty_movie.gifUT......M..(Oux
.............GIF89a.............!.......,.............................
H...........L................L*......J......j............N............
.........(8HXhx..........)9IYiy..........*:JZjz.......... ;K[k{.......
...,<L\l|..........-=M]m}...........>N^n~........../?O_o........
..0......<.0....1...;PK.........Y.>.Pi-....T.......index.htmlUT.
.....M..(Oux..............W.n.6....8U.:.f)....IC.d..vk..C...-.Yt(R%)_0
..k...$;.l.r.!.......|.F...~.....k(m%R...-@09I..AJ.dyz....Z.Y..A...-..
....V`....r.7.i.y....Epy..E....hJD.@..H..q.f..`.5&........3..i${..L. ,
X#..~k...v[...XK...,.Jkk.:...-..R....&.T.i..c.M?7...Ix...6aE.NM..Q p..
.p...Q.......Z.5J..7..P..b:'.".........n...}..r....t.....q_...r%.dU...
Wxx..n....8trT....FH..42..K...O..;_...r.M.^.t.7._...p...B.%..o........
..D.0g...nL.`..e.U .....5.`.....i....?...)..Q.:n...E-....b......Be.y.R
j..C..<.R..lB..g$/*4.L5@...... p....'.xCE.....E...E...NQ.?.'..`..`.
B.Qp{.4.Rv.....qi.....F.....^....I*.......C.. ..~0C.%.D3......N-..'.@6
N....l....DPh|R?o18.....{..E..#..sU"w...9.*............_h)....p*.WZ._.
.B.....w.....tV?k.%..V.......U!.....S..N..).......J.aa...R.<.[.....
.c.i/.f....z.|t.Sd......K....$1U.....|.d'x.T.....(./yoV4.....;...iG...
.;..(..7..C.O....."...F.....1.8e..E.Zr(.M.P.....T........v.....9c.<<< skipped >>>

GET /ados?t=1422518040825&request={"Placements":[{"A":5682,"S":33049,"D":"bt_ap_div","AT":1224,"Properties":{"browser":"ie","clientdata":"utorrent|3.4.2.37754|217","page":"torrent","flash":"none"}}],"Keywords":"browser%3Die%2C%20clientdata%3Dutorrent%7C3.4.2.37754%7C217%2C%20page%3Dtorrent%2C%20flash%3Dnull","Referrer":"","IsAsync":false} HTTP/1.1

Accept: */*

Referer: hXXp://cdn.bitmedianetwork.com/network/index.html?adt=1224&browser=ie&clientdata=utorrent|3.4.2.37754|217&page=torrent&site=33049

Accept-Language: en-US

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/6.0)

Accept-Encoding: gzip, deflate

Host: engine.bitmedianetwork.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Access-Control-Allow-Headers: accept, origin, content-type, content-length

Access-Control-Allow-Methods: GET,PUT,POST,DELETE,OPTIONS

Access-Control-Allow-Origin: *

Content-Encoding: gzip

Content-Type: application/javascript

Date: Thu, 29 Jan 2015 07:54:01 GMT

ETag: "-1180081922"

P3P: CP="This is not a P3P policy! See hXXp://adzerk.com/ad-server-privacy for our privacy policy"

Server: nginx/1.1.19

Set-Cookie: azk=ue1-0339186081b141daad6f24eaf936ed98; Path=/; Expires=Fri, 29 Jan 2016 07:54:01 GMT

x-powered-by: adzerk bifrost/

x-served-by: engine-i-2bee05c4

Content-Length: 2721

Connection: keep-alive
............[s.H....W........*.TjK1...dIH.6[*.....JH.......c..5...S~Q.
..i.s......:......h;Y.......Dfd.=.p..?..I4.s...........`..G. 9..8.....
..d.(.~..<.p.fA^,V...E.{..,.. ...Z.#U....U...6../vz......3.; ".EQ7n
..9,...\/.FZf[..K....].....1 .*\o..YG.....p.Z:....$r,-.Z*r`N;.y#.1Nj..
...f......s...;.KU4*. .W...u.*o.=..K..j.......l...:.Z..2O..<..i[...
.3Kg...V.xY.n....x.<N...h...../;........(w.m..|........N..}v&{.h...
...9...JXSA..........~..9.`...J..>.z. =.....Q.Q..P...n.X].....t...V
.u..8V3..:.X=..U...^....h.0.NW|.7.....5.....x.."..C.)....M{.\.(.E.l...
....|...PT..?l.....U..A...D3..d.".&.T...i.....(\.S.....q$-:F...^4.....
I.@D.e r.4 ..UT...J..C.JT..qV...v]..r....;.....z...:.h.....k.......9..
..f...K..e.j.F.Km..s.a.)L....f@.F.3..........h0D..9O...).......k4.f...
.>.d".....H.....du..55Dj^yrg.DIH.aY..VABo.=.b.H.Eq....,..WL....W..&
lt;. .e....}~..H7Z.......:w..\....W...b..2...V..6X..:X.W.r| .@...cya*.
......)`}Y.;..K....../.Enr.5..{....1.o.:..........X../y....c.[C.Sb....
.O.-..,Q.fx...$...n2?......?.......p..7.......}..'......%q..V.9.X.[>
;.#.eD.$..N...`...K.N.......oJ.^4?.?.....&.......I..................8.
.u@4....x..y.1.....O@........`...^]......A....'0.Cw.._...N...N...uz..9
^...C.C.P|B.1.N5..g%..$.j,..y......j.~.Ut..sw@.ZK.3......*.q?.M-..f.e.
...8...J.W#B....s.....k..dQ'.5.K...]s... T.....7..............EH.Oe.gG
...$...v.....!n5d|I.}.....F.|.0..7.N.c..C....O...].xP.....nM..e..x...O
......ur.(...2....FNFd. J..^...G./.x.|.v.'OL.... .Q.wEYZ....3.h.H.....
........I2....Ul_........uy<.....\;-9w-..?.z..d.&.G.=...qS.(.0.<<< skipped >>>

GET /i.gif?e=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&s=4ZvSTpnHDsqWQeRzN5_dwzXEF24 HTTP/1.1

Accept: */*

Referer: hXXp://cdn.bitmedianetwork.com/network/index.html?adt=5&browser=ie&clientdata=utorrent|3.4.2.37754|217&page=torrent&site=33049

Accept-Language: en-US

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/6.0)

Accept-Encoding: gzip, deflate

Host: engine.bitmedianetwork.com

Connection: Keep-Alive

Cookie: azk=ue1-e3e9d37e487f4f93865292310c7d71de


HTTP/1.1 200 OK

Access-Control-Allow-Headers: accept, origin, content-type, content-length

Access-Control-Allow-Methods: GET,PUT,POST,DELETE,OPTIONS

Access-Control-Allow-Origin: *

Content-Type: image/gif

Date: Thu, 29 Jan 2015 07:54:01 GMT

P3P: CP="This is not a P3P policy! See hXXp://adzerk.com/ad-server-privacy for our privacy policy"

Server: nginx/1.1.19

Set-Cookie: azk=ue1-e3e9d37e487f4f93865292310c7d71de; Path=/; Expires=Fri, 29 Jan 2016 07:54:01 GMT

Set-Cookie: azk-events=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; Path=/; Expires=Sat, 28 Feb 2015 07:54:01 GMT

x-powered-by: adzerk bifrost/

x-served-by: engine-us-east-1b-06

Content-Length: 43

Connection: keep-alive

GIF89a.............!.......,...........D..;HTTP/1.1 200 OK..Access-Con
trol-Allow-Headers: accept, origin, content-type, content-length..Acce
ss-Control-Allow-Methods: GET,PUT,POST,DELETE,OPTIONS..Access-Control-
Allow-Origin: *..Content-Type: image/gif..Date: Thu, 29 Jan 2015 07:54
:01 GMT..P3P: CP="This is not a P3P policy! See hXXp://adzerk.com/ad-s
erver-privacy for our privacy policy"..Server: nginx/1.1.19..Set-Cooki
e: azk=ue1-e3e9d37e487f4f93865292310c7d71de; Path=/; Expires=Fri, 29 J
an 2016 07:54:01 GMT..Set-Cookie: azk-events=W3siYXYiOjM4NTgyLCJhdCI6N
SwiYnQiOjAsImNtIjo1NzQ3MywiY3QiOiJnYW1pbmciLCJjaCI6ODc4NSwiY3IiOjY1Mjk
1NSwiZGkiOiIzYTdkMmQ0Mjk5Zjk0ZTUwYjZkMWFlODBjYTYwZmZhOCIsImRtIjoxLCJmY
yI6NjczNTM0LCJmbCI6MjQ3NDA0LCJpcCI6IjE5My4xMzguMjQ0LjIzMSIsImt3IjoiYnJ
vd3Nlcj1pZSxjbGllbnRkYXRhPXV0b3JyZW50fDMuNC4yLjM3NzU0fDIxNyxwYWdlPXRvc
nJlbnQsZmxhc2g9bnVsbCIsIm53Ijo1NjgyLCJwYyI6My41LCJwciI6NjI1NTcsInJ0Ijo
2LCJzdCI6MzMwNDksInRyIjp0cnVlLCJ1ayI6InVlMS1lM2U5ZDM3ZTQ4N2Y0ZjkzODY1M
jkyMzEwYzdkNzFkZSIsInRzIjoxNDIyNTE4MDQxMTQ4LCJiZiI6dHJ1ZSwiY2kiOiI0OTM
3YTA5MWRiZGI0ZjZmOTBmMjg0OTcwOGJmYjkxZSIsImN2IjoxfV0; Path=/; Expires=
Sat, 28 Feb 2015 07:54:01 GMT..x-powered-by: adzerk bifrost/..x-served
-by: engine-us-east-1b-06..Content-Length: 43..Connection: keep-alive.
.GIF89a.............!.......,...........D..;..

<<< skipped >>>

POST /e?i=21 HTTP/1.1

Host: bench.utorrent.com

User-Agent: BTWebClient/3420(37754)

Accept-Encoding: gzip

Connection: Close

Content-Length: 366

{"h":"uVVfIsRBsnvPyT6P","cl":"uTorrent","v":109417338,"l":"en","w":"6.1","cts":1422518039,"eventName":"silent_autoupdate","launched_target":0,"updated":0,"relocated":0,"versions": [{"path":"updates\\3.4.2_37754.exe","version":"109417338","blacklisted":"0","crash_count":"0","opt_out":"0","running":""}], "action":"RunningElevated", "g_version":109417338, "no_sau":0}
HTTP/1.1 200 OK

Content-Type: text/html

Date: Thu, 29 Jan 2015 07:54:00 GMT

Server: nginx

X-Powered-By: PHP/5.4.30

Content-Length: 21

Connection: Close
{"response_code":200}..

GET /images/pixel.gif?yxds=1&yxhp=1&yxov=1&cnid=435371 HTTP/1.1

Accept-Encoding: gzip

User-Agent: uTorrent(37754)/3.4.2

Host: VVV.mybrowserbar.com

Cache-Control: no-cache


HTTP/1.1 200 OK

Date: Thu, 29 Jan 2015 07:53:35 GMT

Server: Apache

Accept-Ranges: bytes

Content-Length: 1093

Cache-Control: no-cache, no-store, must-revalidate, max-age=0, proxy-revalidate, no-transform

Pragma: no-cache

Expires: Thu, 01 Jan 1970 00:00:00 GMT

Content-Type: image/gif
GIF89a.............!..XMP DataXMP<?xpacket begin="..." id="W5M0MpCe
hiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk=
"Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00        "> &
lt;rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#">
 <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1
.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http:/
/ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photo
shop CS5 Windows" xmpMM:InstanceID="xmp.iid:68AF816F211411E187C8D4C48A
462294" xmpMM:DocumentID="xmp.did:68AF8170211411E187C8D4C48A462294">
; <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:68AF816D211411E187C8
D4C48A462294" stRef:documentID="xmp.did:68AF816E211411E187C8D4C48A4622
94"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> 
<?xpacket end="r"?>.............................................
......................................................................
...............~}|{zyxwvutsrqponmlkjihgfedcba`_^]\[ZYXWVUTSRQPONMLKJIH
GFEDCBA@?>=<;:9876543210/.-, *)('&%$#"! ........................
.........!.......,...........D..;HTTP/1.1 200 OK..Date: Thu, 29 Jan 20
15 07:53:35 GMT..Server: Apache..Accept-Ranges: bytes..Content-Length:
 1093..Cache-Control: no-cache, no-store, must-revalidate, max-age=0, 
proxy-revalidate, no-transform..Pragma: no-cache..Expires: Thu, 01 Jan
 1970 00:00:00 GMT..Content-Type: image/gif..GIF89a.............!..XMP
 DataXMP<?xpacket begin="..." id="W5M0MpCehiHzreSzNTczkc9d"?><<< skipped >>>

POST /e?i=32 HTTP/1.1

Host: bench.utorrent.com

User-Agent: BTWebClient/3420(37754)

Accept-Encoding: gzip

Connection: Close

Content-Length: 181

{"h":"uVVfIsRBsnvPyT6P","cl":"uTorrent","v":109417338,"l":"en","w":"6.1","cts":1422518039,"eventName":"DisplayCard","display_card" : "VMware SVGA 3D (Microsoft Corporation - WDDM)"}
HTTP/1.1 200 OK

Content-Type: text/html

Date: Thu, 29 Jan 2015 07:54:00 GMT

Server: nginx

X-Powered-By: PHP/5.4.30

Content-Length: 21

Connection: Close
{"response_code":200}..

GET /utorrent-onboarding/welcome.btapp?h=uVVfIsRBsnvPyT6P&v=102852600&ol=en&ul=&tk=main&c=uTorrent HTTP/1.1

Host: apps.bittorrent.com

User-Agent: BTWebClient/3100(26616)

Accept-Encoding: gzip

If-Modified-Since: Tue, 08 Oct 2013 00:52:24 GMT

Connection: Close


HTTP/1.1 304 Not Modified

Content-Type: binary/octet-stream

Age: 188925

Date: Thu, 29 Jan 2015 07:52:36 GMT

Connection: close

GET /CRL/Omniroot2025.crl HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: cdp1.public-trust.com


HTTP/1.1 200 OK

Server: Apache/2.2.15 (CentOS)

Last-Modified: Thu, 29 Jan 2015 06:15:01 GMT

ETag: "2015b-6ca-50dc46885cd67"

Accept-Ranges: bytes

Content-Type: application/x-pkcs7-crl

Connection: Keep-Alive

Date: Thu, 29 Jan 2015 07:54:19 GMT

Content-Length: 1738

0...0......0...*.H........0Z1.0...U....IE1.0...U....Baltimore1.0...U..
..CyberTrust1"0 ..U....Baltimore CyberTrust Root..141203203511Z..15042
8204011Z0...0....'k...120111220757Z0....'k...120111220847Z0....'.C..13
0130174530Z0....'....130807173059Z0....'....140122185220Z0....'....140
212185542Z0....'....141112202254Z0....'....100217174732Z0....'#...1003
03201301Z0....'!...100312202204Z0....''q..100414175202Z0....'L...11022
4181251Z0....'Pn..110309142119Z0....'....100216203312Z0....'#...100303
201213Z0....'3#..100908172555Z0....''n..101208175627Z0....''m..1012081
75749Z0....''p..101208175916Z0....'H...110114162156Z0#...'X>..11081
5145134Z0.0...U.......0#...'Z2..110818184101Z0.0...U.......0....'g...1
20111164333Z0....'g...120111164409Z0....'g...120111164519Z0....'....10
0216213519Z0....''s..100414175225Z0....''k..100414181839Z0....'3"..100
908172705Z0....'3$..100908172728Z0....''o..101208175645Z0....''l..1012
08175727Z0....'H...110119195142Z0....'Nz..110302154045Z0....'c...11120
7220933Z0....'g...120111164445Z0....''r..100414175143Z0....'8...101012
182723Z0....'e...120111163041Z0....'VJ..110714160903Z0....'s...1301231
62633Z0....'....130904190524Z0....'....131024214319Z0....'....14012917
2435Z0....'....140129172453Z0....'....131024214310Z0....'....131101204
601Z0....'....140219171632Z0....'.^..140409155638Z0....'i...1407091719
30Z0....'/:..141119193302Z0....'k...120111220827Z0....'8...14071619120
3Z0....'....131219195909Z0....'....140219171545Z..0.0...U........0...*
.H.............7.im~...|.....3........]..Cm...Y.[.......c.J[.....^

<<< skipped >>>

GET /p/1217/dc/du73i.exe HTTP/1.1

Host: cdn3.opencandy.com

Accept: */*


HTTP/1.1 200 OK

x-amz-id-2: nKGrM0Ha1JllzypvW8Kv85IlqH0yU5eazeoEgoZoLOHy2XC2apVQOP/n19yDi5zktwwfGKK2bZs=

x-amz-request-id: 12824192AFF53745

Last-Modified: Thu, 08 Jan 2015 18:20:19 GMT

ETag: "a7de5b7d6efefa7474b0f99c054f60b2"

Accept-Ranges: bytes

Content-Type: binary/octet-stream

Content-Length: 160216

Server: AmazonS3

Cache-Control: max-age=204

Date: Thu, 29 Jan 2015 07:53:49 GMT

Connection: keep-alive

MZ......................@.............................................
..!..L.!This program cannot be run in DOS mode....$.......{...?...?...
?...6.f.*...?.......6.`.#...6...0...6.q.m...6.v.....!.a.>...6.d.>
;...Rich?...........PE..L...h..T.................@... ......pT... ...`
....@.................................).....@.........................
.........t.......`...............T......dw............................
..........................................................UPX0........
............................UPX1.....@... ...8..................@....r
src.... ...`.......<..............@................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
................3.07.UPX!.....0..Kz...;..p4......&.......SW...x.S....0
l.....u....h...o()|.....Y3.9=&.uHVj($.Ai.....Y;.t0..H...~....].4..WW.~
... .3;...4......F$..3..5.^.p....m._[.j........o...u....3..E....,...~$
.t.. .FK.....t.P...Y....v..M...E....<HV.................W..........
.%h...Q...e.h.........3..]................9_.vZ;w....D.G........9.t..E
.=-."....t...P........S#w...}.. ..F0r.(;.t.....k._......v6..O..w....\.
"...h.oH.;m.; ....r............N.........>.....hW...M..j...L...Gu..
e..N....B....j....f.....#'(..n........}.C.;.v#.s.......v..U...t..B

<<< skipped >>>

GET /MEQwQjBAMD4wPDAJBgUrDgMCGgUABBSxtDkXkBa3l3lQEfFgudSiPNvt7gQUAPkqw0GRtsnCuD5V8sCXEROgByACAwI20A== HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: ocsp.geotrust.com


HTTP/1.1 200 OK

Server: nginx/1.4.7

Content-Type: application/ocsp-response

Content-Length: 1363

content-transfer-encoding: binary

Cache-Control: max-age=448946, public, no-transform, must-revalidate

Last-Modified: Tue, 27 Jan 2015 12:32:12 GMT

Expires: Tue, 3 Feb 2015 12:32:12 GMT

Date: Thu, 29 Jan 2015 07:54:10 GMT

Connection: keep-alive
0..O......H0..D.. .....0.....50..10......7).nj./P(.3.\\.;.B....2015012
7123212Z0f0d0<0... ..........9.....yP..`...<.......*.A.....>U
....... ...6.....20150127123212Z....20150203123212Z0...*.H............
.F..W..A.w.{.u.....&-...o.4.g.K..~.C.f...pg0.].d..ICi"..0.4R?.0.Wm.[..
.Q.......[...f..z.....$.Z.L.a.@....#....H0...t..YL.a(..S n...!../D..H.
.crEM:.2...k..p....s...L..,.."..`gSApJpi.gZ.s..P.%o ^..n.....Gf[G..lQ.
.Wr....F........=x..4.k/..b...|".P.M8.1.3.....-....0...0..}0..e.......
.:}0...*.H........0B1.0...U....US1.0...U....GeoTrust Inc.1.0...U....Ge
oTrust Global CA0...141201130534Z..151216130534Z02100...U...'GeoTrust 
Global CA TGV OCSP Responder 30.."0...*.H.............0............\.h
pc..J.a.j-.t......F`Aw...)L.YE.2..~..-...2.Y(.".CZ.w..T..Y. syd.....x.
.YE..<....lwv.:J.76>U....uF.a.|8N.. ..1p...`f.X...B>x........
......6..m.&...'..W.plK....[.m.V..h..lI.........?~.....>.|'....o...
A!.Pm.*.N ...<.....3...*|.x._..1..m.W<*....._S.............0..0.
..U.#..0....z.h.....d..}.}e...N0... .....0......0...U.%..0... .......0
...U...........0...U.......0.0!..U....0...0.1.0...U....TGV-B-2830...*.
H.............~....2!...V..0...Y....L..k....z}~a.3Y.x..dS.L...Dk$a...n
R9_......B......m....Y....U.5....'.....<{....v&=.2].....j*.r(7...=.
.w.I...z....\.#.J.ac.....I.[.[....6.X....0...g.3d...z.i.H..f...v.....\
.....^.N..1.J<.)`Z.....4.-.E..n.E.~t....v.e.T...?. ......i..%....<<< skipped >>>

GET /ados?t=1422518040742&request={"Placements":[{"A":5682,"S":33049,"D":"bt_ap_div","AT":5,"Properties":{"browser":"ie","clientdata":"utorrent|3.4.2.37754|217","page":"torrent","flash":"none"}}],"Keywords":"browser%3Die%2C%20clientdata%3Dutorrent%7C3.4.2.37754%7C217%2C%20page%3Dtorrent%2C%20flash%3Dnull","Referrer":"","IsAsync":false} HTTP/1.1

Accept: */*

Referer: hXXp://cdn.bitmedianetwork.com/network/index.html?adt=5&browser=ie&clientdata=utorrent|3.4.2.37754|217&page=torrent&site=33049

Accept-Language: en-US

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/6.0)

Accept-Encoding: gzip, deflate

Host: engine.bitmedianetwork.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Access-Control-Allow-Headers: accept, origin, content-type, content-length

Access-Control-Allow-Methods: GET,PUT,POST,DELETE,OPTIONS

Access-Control-Allow-Origin: *

Content-Encoding: gzip

Content-Type: application/javascript

Date: Thu, 29 Jan 2015 07:54:01 GMT

ETag: "-209486538"

P3P: CP="This is not a P3P policy! See hXXp://adzerk.com/ad-server-privacy for our privacy policy"

Server: nginx/1.1.19

Set-Cookie: azk=ue1-e3e9d37e487f4f93865292310c7d71de; Path=/; Expires=Fri, 29 Jan 2016 07:54:01 GMT

x-powered-by: adzerk bifrost/

x-served-by: engine-i-79a41b88

Content-Length: 5898

Connection: keep-alive
...........]is.F..~...|.I..M...I.n..bi..$...-....I.......4Z-[.d.3.*...
.i...O..,.s...u.q.....9.Z.=.vy!.........\..^.Vr>.Nx.g./.[....Wn....
..l..o....?t...Y.:.9tg..d..=.~.........q........j.4-E......u.w........
W.&......x..9}......QGp..B.XnC}j...Z...f.....Jj.....0.j.P..|5...v.W.P.
\EF..K..7...<.m.P7Q..U...O.8..0J...%...6H*A>.^.PV. ...zL...~..#.
.I .m.a..N.vk...}....N}a...5.KJ.3..4W..S58..\...o..........Ud....c.N{5
..XCxN.$...W.fhO.....J.d.x....\..y..9Q.,Sm,}...W...i.=.............%qB
5.....}..i...E..._9.]........(A.U..R..Wp..S9*.c...B.&...D.0.=..7..m<
;..M..kn=Q...L:...?....'.x.".8...,...#....O....l.~......:xDP.....y..2.
..w.......M.6.._."...2..<R...s..Tby.....]lvZ.J....<....l.C5..F^.
[....v..Z......z...C ..f..X\96..S....S..9&..<w.Vl.paE...0.N.<5;.
..).5 E...FYF..L.X....5Y.......^...6...m....3qCz1=3.y.0.-w.3s.sg. .Vh.
.{..,L.......s....43.....s..9.i.\..#.z..d.....Q.u..d.O...".LF0m....fyW
.-.s...x.1E..V.7..V..;....1....]o.&.K.{.E...&.Y.W.1{e}...]!.....I..W.?
...........:].W.a...C{...?............t~.i....eoY.M.......G.q).J.....z
.L.....Z..\f.........N...b...N.. ..{...tF..r..\.'...px....'.8$>....
..wo@l{[..j..)......Cl..4?rG........'.........T..].......O,.........q!
C.w...X..1.I..0...z..[..#.6..Ws6....9....T5;Q.z.8..K..9.%..H..F0`.....
c...a5w....4"._.Fp_...]!h.c...Y.P.c.7..z........A...D.`C. ....R.X..CP.
....SC;`.Fc.X....@......v..r.\.0_..NM... ..x...Nx........6....5...s.|.
.......6 .....F.....59(....A9.c.$....<k.=..C....i.FN.....Dg.....,.]
.$...8.5)..|.a=..Rs%xF....84.P.o..qn..AAwa.M...o... OB..Y.....}.tg<<< skipped >>>

GET /pki/mscorp/crl/mswww(6).crl HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: mscrl.microsoft.com


HTTP/1.1 200 OK

Accept-Ranges: bytes

Cache-Control: max-age=6481

Content-Type: application/pkix-crl

Date: Thu, 29 Jan 2015 07:54:09 GMT

Etag: "0a58795ee22d01:0"

Last-Modified: Sun, 28 Dec 2014 22:35:30 GMT

P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI"

Server: ECAcc (fcn/40A2)

VTag: 279293025600000000

X-Cache: HIT

X-Powered-By: ASP.NET

Content-Length: 727
0...0.....0...*.H........0'1%0#..U....Microsoft Internet Authority..14
1228212529Z..150411214529Z.a0_0...U.#..0...*M..]4~...3..'.p~g..0... ..
...7.........0...U......Y0... .....7......150328213529Z0...*.H........
............A..u3.P .w#^..lt....W..K..|..V...).B.3;.....:......r.....m
. -...=z.,S.ve....U....x.b.`.....v.t..'._k...3z.BXIY.Ewy....Q. qw..._o
A>a.F.2ba.o.......1k"......!. .YT.{.?g~sja...."I......Jp.8.8a`."YU.
&!Us.X.O.Z^a...j....%....a.\..f.<zu....M....m...<..gZ.ZC^.o.(.&g
t;..J.f...*.T........0...lx......34..w..F..k.W.p.o'..TN..V/(....Fc.0.m
.S.$n.Fc....kh..6..&.....*1Q...........A....#.BKvhg....~{....#.,F.72..
.Ei..&.A:...b9.x.G..ti.2...F>e..n.K...t...0..X.@...t?.2%..k.......h
...av0...n]y.....V.....d...w..v.k..cgP...A....


GET /pki/mscorp/crl/MSIT Machine Auth CA 2(1).crl HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: mscrl.microsoft.com


HTTP/1.1 200 OK

Accept-Ranges: bytes

Cache-Control: max-age=6480

Content-Type: application/pkix-crl

Date: Thu, 29 Jan 2015 07:54:09 GMT

Etag: "139be5f1683bd01:0"

Last-Modified: Thu, 29 Jan 2015 02:11:51 GMT

P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI"

Server: ECAcc (fcn/40B2)

VTag: 438318144200000000

X-Cache: HIT

X-Powered-By: ASP.NET

Content-Length: 69945
0...40.......0...*.H........0..1.0.....&...,d....com1.0.....&...,d....
microsoft1.0.....&...,d....corp1.0.....&...,d....redmond1.0...U....MSI
T Machine Auth CA 2..150129020121Z..150206022121Z0....0)..).......gm..
130612124252Z0.0...U.......0)....RY....y...130611103656Z0.0...U.......
0)....L!....y...130611103656Z0.0...U.......0)..'h@.....A...13061109550
8Z0.0...U.......0)..'h0d....A...130611095508Z0.0...U.......0)....c....
.yZ..130611095506Z0.0...U.......0)..........q...130611093440Z0.0...U..
.....0)..........q...130611093440Z0.0...U.......0)..........q...130611
093439Z0.0...U.......0)..a.......y8..130611061840Z0.0...U.......0)...0
......yv..130610145612Z0.0...U.......0).....A....yi..130610114044Z0.0.
..U.......0)..........y(..130610023302Z0.0...U.......0)..uFn.....x...1
30608225145Z0.0...U.......0)..uC3Y....x...130608001552Z0.0...U.......0
)..b.......m'..130607141639Z0.0...U.......0)..g.g.....P...130607141639
Z0.0...U.......0)..b..x....m&..130607141638Z0.0...U.......0)....*.....
T...130607141638Z0.0...U.......0)..q.#.....x...130607103718Z0.0...U...
....0)..d..3....w...130607020031Z0.0...U.......0)...._.....@...1306061
72528Z0.0...U.......0)..BH5.....tG..130606040613Z0.0...U.......0)..i9.
O....w...130605164108Z0.0...U.......0)..R.}9....]...130605124356Z0.0..
.U.......0)..OB......7...130605124356Z0.0...U.......0)..g.b.....w...13
0605115807Z0.0...U.......0)..b(1q....w...130604175935Z0.0...U.......0)
..b'......w...130604175935Z0.0...U.......0)..b..)....w...130604120448Z
0.0...U.......0)..^*P.....vG..130604120448Z0.0...U.......0)..DZ...<<< skipped >>>

GET /utorrent-onboarding/welcome.btapp?h=uVVfIsRBsnvPyT6P&v=109417338&ol=en&ul=&tk=stable34&c=uTorrent HTTP/1.1

Host: apps.bittorrent.com

User-Agent: BTWebClient/3420(37754)

Accept-Encoding: gzip

If-Modified-Since: Tue, 08 Oct 2013 00:52:24 GMT

Connection: Close


HTTP/1.1 304 Not Modified

Content-Type: binary/octet-stream

Age: 189010

Date: Thu, 29 Jan 2015 07:54:01 GMT

Connection: close

GET /offers/spigot-yandex-20140709.bmp HTTP/1.1

Host: llsw.download3.utorrent.com

User-Agent: BTWebClient/3420(37754)

Accept-Encoding: gzip

Connection: Close


HTTP/1.1 200 OK

Server: nginx/1.4.7

Content-Type: image/x-ms-bmp

Cache-Control: max-age=3600

Accept-Ranges: bytes

Age: 1277

Date: Thu, 29 Jan 2015 07:52:54 GMT

Last-Modified: Wed, 09 Jul 2014 18:20:55 GMT

Expires: Thu, 29 Jan 2015 08:31:37 GMT

Content-Length: 24878

Connection: close

BM.a......6...(...k...:..... ......`..................................
......................................................................
......................................................................
......................................................................
......................................................................
...................................................................w..
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
..................................................................

<<< skipped >>>

GET /msdownload/update/v3/static/trustedr/en/disallowedcertstl.cab?72a4d528eea0d9c3 HTTP/1.1

Connection: Keep-Alive

Accept: */*

If-Modified-Since: Thu, 03 Jul 2014 23:34:12 GMT

If-None-Match: "0b2464b1797cf1:0"

User-Agent: Microsoft-CryptoAPI/6.1

Host: ctldl.windowsupdate.com


HTTP/1.1 304 Not Modified

Content-Type: application/octet-stream

Last-Modified: Thu, 03 Jul 2014 23:34:12 GMT

ETag: "0b2464b1797cf1:0"

Cache-Control: max-age=86400

Date: Thu, 29 Jan 2015 07:52:36 GMT

Connection: keep-alive

....

GET /msdownload/update/v3/static/trustedr/en/authrootstl.cab?e5b34d45c90ec0e9 HTTP/1.1

Connection: Keep-Alive

Accept: */*

If-Modified-Since: Wed, 12 Mar 2014 20:20:10 GMT

If-None-Match: "0b96c77303ecf1:0"

User-Agent: Microsoft-CryptoAPI/6.1

Host: ctldl.windowsupdate.com


HTTP/1.1 200 OK

Cache-Control: max-age=604800

Content-Type: application/octet-stream

Last-Modified: Fri, 12 Sep 2014 18:47:05 GMT

Accept-Ranges: bytes

ETag: "805a83f2b9cecf1:0"

Server: Microsoft-IIS/8.5

X-Powered-By: ASP.NET

X-Powered-By: ARR/2.5

X-Powered-By: ASP.NET

Content-Length: 56928

Date: Thu, 29 Jan 2015 07:52:36 GMT

Connection: keep-alive
MSCF....`.......,...................I.................,E.Y .authroot.s
tl..Y-..8..CK...<T...g.v!M.d..f.%d..}K..5..F. ...T..%.,YJ.,!T......
_..x.<=O.....yy....;3..>.|..~..\.....|......;..8..~.za...."A...q
.......g..m......<X........j"I........!..-w.....w....P...H..(.?}..2
.N. .u..a. ...=.C..D.F>rC.. ..|).=.. ..3b.8H.M...(...u8.%...W.g...\
YB.m:.....dE.........V....$....Dn:....0...S."...o..q.....K...I..K...(x
%....>A.R...`.0 .........<`L0mp...%....y.....g.n...R0Op..<..,
....`0$z.@..&.x"....T..H...<........~..E..".....<<.\B(.......
..............@.....L.........KNAy8/"...f.......k..Jm7j....R.5q....Rz.
.!@...].......Y.[........4.. .D8..&...t.J^O..Q.._..1.J.m5<'k.,....%
T....i.\.;.;q..S./ 8.?Bu.............}D.Q....L....*..[.."e......15m...
_.0.M........#..v!..<...@..?sc.y....*.....tX[........{.W4.Q...^u@..
*..QP.......~.L9N....2r...4.....B..-\(...b.d...K...O.8..Un.......V.<
;.......A...V.....(..s..f..q.{N0.hS.,..;M.|G|.@.M.._.....7._6...C.0...
A;L....%...M=Y.....f.JV.(.5.....0..?*...KZ....jM...8.6U...#...ew.?..?.
..........WE.Or..O>..{.'W2.........3m.O.u..Z8....H4@.w}.o:?~....]&l
t;!...%....}@.d...L.p.a.g ..K."..N1!%..S.bT.H.-.....e..`.0$...0t..DX..
{.....#./...8.5..M...T.......D......V\C.zy.....3E:..>.{..).QW......
q....9..n..1....8%,.........r.p@.>. ...Q.?.p..7.?..7...&..!........
.`. .=....Sf..q.l.A.....L...t.}g..;...f....=.e.~.z....C..*R....H-..=..
.f..(t'.."....F...g._....n.J..U.4vr`}.....1..o@.....@.#...R. L8....z..
].|......3..y..-./....K..6{...s.<R`.}6....?.......-..@.g..S....<<< skipped >>>

GET /ocsp/MEkwRzBFMEMwQTAJBgUrDgMCGgUABBTy4Gr5hYodjXCbSRkjeqm1Gih+ZAQUSt0GFhu89mi1dvWBtrtiGrpagS8CCCUoyoQiZhRO HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: clients1.google.com


HTTP/1.1 200 OK

Content-Type: application/ocsp-response

Date: Tue, 27 Jan 2015 03:50:40 GMT

Expires: Sat, 31 Jan 2015 03:50:40 GMT

Server: ocsp_responder

Content-Length: 463

X-XSS-Protection: 1; mode=block

X-Frame-Options: SAMEORIGIN

Age: 187321

Alternate-Protocol: 80:quic,p=0.02

Cache-Control: public, max-age=345600
0..........0..... .....0......0...0......J......h.v....b..Z./..2015012
7010508Z0k0i0A0... ..........j.....p.I.#z...(~d..J......h.v....b..Z./.
.%(.."f.N....20150127010508Z....20150203010508Z0...*.H................
;>..@.......'.N..F....5..V'...O=.w...bX..... .8nN..Y..7b.b..W..}0..
b..\y.P.....Q...CU.8H.j....W.H.!Q.gY.O..0v?....qP.{~t...U....T.lP.YJ..
3....#N.:.<V.........^#T/<o.k...P...0'Z..|c..........m.lj.BFE...
..l"_.......*.....N......>..*u... .......V...?..v.."HTTP/1.1 200 OK
..Content-Type: application/ocsp-response..Date: Tue, 27 Jan 2015 03:5
0:40 GMT..Expires: Sat, 31 Jan 2015 03:50:40 GMT..Server: ocsp_respond
er..Content-Length: 463..X-XSS-Protection: 1; mode=block..X-Frame-Opti
ons: SAMEORIGIN..Age: 187321..Alternate-Protocol: 80:quic,p=0.02..Cach
e-Control: public, max-age=345600..0..........0..... .....0......0...0
......J......h.v....b..Z./..20150127010508Z0k0i0A0... ..........j.....
p.I.#z...(~d..J......h.v....b..Z./..%(.."f.N....20150127010508Z....201
50203010508Z0...*.H................;>..@.......'.N..F....5..V'...O=
.w...bX..... .8nN..Y..7b.b..W..}0..b..\y.P.....Q...CU.8H.j....W.H.!Q.g
Y.O..0v?....qP.{~t...U....T.lP.YJ..3....#N.:.<V.........^#T/<o.k
...P...0'Z..|c..........m.lj.BFE.....l"_.......*.....N......>..*u..
. .......V...?..v.."....
<<< skipped >>>

GET /ocsp/MEkwRzBFMEMwQTAJBgUrDgMCGgUABBTy4Gr5hYodjXCbSRkjeqm1Gih+ZAQUSt0GFhu89mi1dvWBtrtiGrpagS8CCG+vFYDQCqlf HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: clients1.google.com


HTTP/1.1 200 OK

Content-Type: application/ocsp-response

Date: Tue, 27 Jan 2015 03:49:49 GMT

Expires: Sat, 31 Jan 2015 03:49:49 GMT

Server: ocsp_responder

Content-Length: 463

X-XSS-Protection: 1; mode=block

X-Frame-Options: SAMEORIGIN

Age: 187373

Alternate-Protocol: 80:quic,p=0.02

Cache-Control: public, max-age=345600
0..........0..... .....0......0...0......J......h.v....b..Z./..2015012
7010111Z0k0i0A0... ..........j.....p.I.#z...(~d..J......h.v....b..Z./.
.o......_....20150127010111Z....20150203010111Z0...*.H.............0Mn
.L......}.m....'.^..*....".y.>.#.p...,..L<4.UXB.0..c.........:..
_a..a...E.N%.....K)l..e/Is.....B.bA.)..e...:....4~...Bm.g.G..sA.g.M...
....P'_..1m.Pe,.%.....W........I^..)j...$x.!...@q...n......&...g.#....
.Ve....i....}.m...b.J.f.A.s...1^_I.....n.......W.HTTP/1.1 200 OK..Cont
ent-Type: application/ocsp-response..Date: Tue, 27 Jan 2015 03:49:49 G
MT..Expires: Sat, 31 Jan 2015 03:49:49 GMT..Server: ocsp_responder..Co
ntent-Length: 463..X-XSS-Protection: 1; mode=block..X-Frame-Options: S
AMEORIGIN..Age: 187373..Alternate-Protocol: 80:quic,p=0.02..Cache-Cont
rol: public, max-age=345600..0..........0..... .....0......0...0......
J......h.v....b..Z./..20150127010111Z0k0i0A0... ..........j.....p.I.#z
...(~d..J......h.v....b..Z./..o......_....20150127010111Z....201502030
10111Z0...*.H.............0Mn.L......}.m....'.^..*....".y.>.#.p...,
..L<4.UXB.0..c.........:.._a..a...E.N%.....K)l..e/Is.....B.bA.)..e.
..:....4~...Bm.g.G..sA.g.M.......P'_..1m.Pe,.%.....W........I^..)j...$
x.!...@q...n......&...g.#.....Ve....i....}.m...b.J.f.A.s...1^_I.....n.
......W...<<< skipped >>>

GET /installstats.php?cl=uTorrent&v=109417338&h=uVVfIsRBsnvPyT6P&w=1DB10106&bu=0&pr=26616&cmp=217&ocmp=217&offerretrievedfromserver&pid=2972&cau=1&ServerOfferRetrieved=1&sec_offs=oc&view=win32 HTTP/1.1

Accept-Encoding: gzip

User-Agent: uTorrent(37754)/3.4.2

Host: update.utorrent.li

Cache-Control: no-cache


HTTP/1.1 200 OK

Server: nginx/1.4.7

Date: Thu, 29 Jan 2015 07:52:52 GMT

Content-Type: text/html

Transfer-Encoding: chunked

Connection: close

X-Powered-By: PHP/5.4.30

0..

GET /MFQwUjBQME4wTDAJBgUrDgMCGgUABBQmECJms4f7i5EbxtN7NbzQCBwAdAQUUa8kJpz0aCJXgCYrO0ZiFXsezKUCE1oAAHevvgBk+xJc0C0AAQAAd68= HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: ocsp.msocsp.com


HTTP/1.1 200 OK

Date: Thu, 29 Jan 2015 07:53:48 GMT

Content-Type: application/ocsp-response

Content-Length: 1757

Connection: keep-alive

Set-Cookie: __cfduid=d6cf6b2c0b36fbfb176c70ab605bc5f5c1422518028; expires=Fri, 29-Jan-16 07:53:48 GMT; path=/; domain=.msocsp.com; HttpOnly

Last-Modified: Sun, 25 Jan 2015 22:17:12 GMT

Expires: Mon, 02 Feb 2015 07:53:47 GMT

ETag: "0b21c26e98383f224b6f87a8cc056c614ef210aa"

Cache-Control: public, max-age=345599

CF-Cache-Status: HIT

Server: cloudflare-nginx

CF-RAY: 1b03dbad696b01b1-FRA
0..........0..... .....0......0...0..........<.|7...@N6p.I.e|..2015
0125221712Z0..0..0L0... ........&."f........{5.....t..Q.$&..h"W.& ;Fb.
{.....Z..w...d..\.-....w.....20150125221712Z....20150129221712Z."0 0..
. .....0......20140125221712Z0...*.H.............X'C.G/r..p..5....$...
...r.......oS.I..A..<bZ.. .d............ .<o...%....6.......\$I.
D...i....,.h.e.GE...9$]..#.......K;.....JK.........*`te@~..s..<py.'
. G..x.6..E..B'..e....,..UCL.0..q..<=)?...n.#........$u......O...T.
..:./_).K$......)..=.....U...H..p&.xe....0...0...0..........Z..~..M..&
lt;ZYJ....~.0...*.H........0..1.0...U....US1.0...U....Washington1.0...
U....Redmond1.0...U....Microsoft Corporation1.0...U....Microsoft IT1.0
...U....Microsoft IT SSL SHA20...141229205745Z..150314205745Z0!1.0...U
....Should be ignore by CA0.."0...*.H.............0...........&!(..$.K
...."=f....x.d.._s.....j....9`..l.Z..............^f..u......-e.&.bG.(i
.Q...........bEy...^7A...A..c....CF-&...e.7..7F....."..w...y.:..`.w{~.
.D.x*.......x3Os......q...... S.fB .ig.....L..3......4E..}..7...M....e
 ...6.M.O.....<5:......r.....]..A.5........0..0...U..........<.|
7...@N6p.I.e|0...U.#..0...Q.$&..h"W.& ;Fb.{...0...U...........0...U.%.
.0... .......0... .....7....0.0... .......0... .....0......0...*.H....
..............sa....^`.U.h.....(c[..j.|. ..#....3.5.?..L.....Z....J...
...*.w...w.$.z..Y.d.....l.....G#.....o.\t.......(.B =..P..T....0./P...
..z.3....L.O3....z...Wxo..~.OeH....c.i.@."..?d.......=v(.....m..LN..PP
....<.}T.X......K.&e.S...|....% ...(F.=k..~.j..C......4.....c..<<< skipped >>>

GET /installstats.php?cl=uTorrent&v=109417338&h=uVVfIsRBsnvPyT6P&w=1DB10106&bu=0&pr=26616&cmp=217&ocmp=217&showtbexists&pid=2972&cau=1&tbe=0&cd=0&view=win32 HTTP/1.1

Accept-Encoding: gzip

User-Agent: uTorrent(37754)/3.4.2

Host: update.utorrent.li

Cache-Control: no-cache


HTTP/1.1 200 OK

Server: nginx/1.4.7

Date: Thu, 29 Jan 2015 07:52:52 GMT

Content-Type: text/html

Transfer-Encoding: chunked

Connection: close

X-Powered-By: PHP/5.4.30

0..

POST /e?i=29 HTTP/1.1

Host: bench.utorrent.com

User-Agent: BTWebClient/3420(37754)

Accept-Encoding: gzip

Connection: Close

Content-Length: 171

{"h":"uVVfIsRBsnvPyT6P","cl":"uTorrent","v":109417338,"l":"en","w":"6.1","cts":1422518039,"eventName":"dimensions", "appsize": [ 1200, 600 ], "screensize": [ 1716, 901 ] }
HTTP/1.1 200 OK

Content-Type: text/html

Date: Thu, 29 Jan 2015 07:54:00 GMT

Server: nginx

X-Powered-By: PHP/5.4.30

Content-Length: 21

Connection: Close
{"response_code":200}..

GET /PublicSureServerSV.crl HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: crl.omniroot.com


HTTP/1.1 200 OK

Accept-Ranges: bytes

Cache-Control: max-age=864000

Content-Type: application/x-pkcs7-crl

Date: Thu, 29 Jan 2015 07:52:39 GMT

Etag: "2b0015-4701f-8151ee00"

Expires: Sun, 08 Feb 2015 07:52:39 GMT

Last-Modified: Thu, 29 Jan 2015 03:58:48 GMT

Server: ECS (ams/D18C)

X-Cache: HIT

X-Cntnt-Length: 290847

Content-Length: 290847

0..p.0..o....0...*.H........0F1.0...U....Cybertrust Inc1 0)..U..."Cybe
rtrust Public SureServer SV CA..150129034320Z..150208034320Z0..nR0....
..... .Lz...101018164835Z0.........,.)5...101116173409Z0.........,U..I
..101116165848Z0.........,U./...101116173007Z0.........,U.h...10111617
2944Z0.........,V.bC..101116193600Z0.........,V.[H..101116193534Z0....
.....,V3Y)..101116193648Z0.........,V5._..101116193745Z0.........,Vg.z
..101116194901Z0.........,Vh....101116194922Z0.........,Vn.4..10111619
5619Z0.........,Vqvg..101116195553Z0.........,_..(..101118145747Z0....
.....-..4...110315204303Z0........../P....120206141831Z0..........I..@
..120124180322Z0..........JP....110222182509Z0..........Jf/Y..12021314
2815Z0..........Jf.P..120213142915Z0..........OT....120221131614Z0....
......YQ.1..120220131256Z0..........Y`?W..120220131507Z0..........Yuu.
..120220131416Z0..........^..^..111007192320Z0..........`.w...12021314
4727Z0..........`.y...120213145412Z0..........`.&...120130163851Z0....
......hlG...120213145015Z0..........h.....120130140408Z0............j.
..120110213653Z0...........}....110406160143Z0............$...11040100
5006Z0................110401005536Z0............W...120308151704Z0....
.........h..120228141105Z0................110314145902Z0............`.
..110322142311Z0................110322142551Z0............lb..12011021
3802Z0.............0..130201130700Z0............OB..110321165802Z0....
.........o..110321172720Z0...........g.:..120221183148Z0...........Ud.
..110516131110Z0............h5..120229174140Z0................1202

<<< skipped >>>

GET /network/index-edge.html?tag=ant&adt=1224&browser=ie&clientdata=utorrent|3.4.2.37754|217&page=torrent&site=33049 HTTP/1.1

Accept: application/x-ms-application, image/jpeg, application/xaml xml, image/gif, image/pjpeg, application/x-ms-xbap, */*

Accept-Language: en-US

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/6.0)

Accept-Encoding: gzip, deflate

Host: cdn.bitmedianetwork.com

Connection: Keep-Alive


HTTP/1.1 200 OK

x-amz-id-2: X1yCkQA9gObcW/qTcttpVMxK4aV4f34itW6SmyTB3FUbBqdoFtC8IDv1pU/C/0Yo

x-amz-request-id: 834696C9127096F7

Cache-Control: public,max-age=1200,s-max-age=1800

Content-Type: text/html

Server: AmazonS3

Content-Encoding: gzip

Vary: Accept-Encoding

Age: 10294

Date: Thu, 29 Jan 2015 07:56:00 GMT

Last-Modified: Fri, 23 Jan 2015 21:05:11 GMT

Expires: Thu, 29 Jan 2015 05:24:26 GMT

Content-Length: 2473

Connection: keep-alive
............ks.H....X......c..e..{.|{.........i...D............7.u% M.
..{.....wo>......<.88W_.........LP..E.}]..k<6...E...|.0.xQ(X(
\.......h.[....z&d....-}!dA}...>i...9..<,-E .O.h.'3..,. [....H.y
1_."6....=..=]Q.j......0.Y.>.q......e&.9Y...Qhr ."kj.....o|h..E..].
4...%..........0.s...)....4.`.u......a/....M.s0Z..Z.....![.k*...P7....
.M.....VJt..).) y..D.o.....}7.6M6..:....;.......m.3.....k6.;..^f......
.-?..l....2Z..zmO...4...Q....'.9.F#s....R......y.=v:.G....t).2r.B.!.:e
 .....,%..G....h.cL.v.E...!...K.o....?{...'.E[.,d.B..B.X2J-....\Y...%.
....eB.......5.6....V.AQ...9`;8..[-....9.. e.#@.......J..%......@<D
P/.$......2..9.3...:.QT..[....\...v.y....Fcof'....4.d.pa./v.....8.P&Y.
...V...4.w)..k.......... .?4.<8z......F.UxB.@~..........#.l.T..;$.8
.a.OX...4.@.[-.K6...^.'....n...X$.*._......S...,..O....M ......".(..d.
.(d&.mQ...?L.T.D..=."}.EQG.G...DT5.*$$.].>....E]U........./.....2HX
a...'WX.._...A1..|....I.t....a.NE...3...c1...,..c.....vE.wU.x.. .>.
.<...../W....c. I.c8.-.n..4Wj..Mb..H..Ae...>9.;....9 {..p.@%.X!.
......q:..|.. .........gHm,......8DJ.wk....;...I~~D...a9......w..u:...
.?.OB..Yn....Q.!|.'o..H....^L.l..#.*....i.g....U...........'.tN.x.....
......8..t...lu.......:..u:.i.(%...{.k..Q..N..S.....f8..!N..=._.&..F..
up..........z.....Qtp....qzu..Y....#..:5x.}..v....]9.....}t{]....{...J
.{...E.-.>........YG....s2..#...<.6*|.....$.X....`g$.e~..g.k...|
!6f4..R..E...X.]&....*..f7I..r.._*..K,.0c.VX....|4.h2....T.r&......*`.
).".MM..&.2....}Qc.i|..y.. .....W.......CW.R7X.....N..x>.h..2.;<<< skipped >>>

GET /network/base64.js HTTP/1.1

Accept: */*

Referer: hXXp://cdn.bitmedianetwork.com/network/index-edge.html?tag=ant&adt=5&browser=ie&clientdata=utorrent|3.4.2.37754|217&page=torrent&site=33049

Accept-Language: en-US

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/6.0)

Accept-Encoding: gzip, deflate

Host: cdn.bitmedianetwork.com

Connection: Keep-Alive


HTTP/1.1 200 OK

x-amz-id-2: Jp0204g/rPm1RI GLFsIz1YKdlDpoeF0rVi3tsSvJcTKcYyVhTMnaHja9FUOyjFJ

x-amz-request-id: AABEB24F2C2D1733

Cache-Control: public,max-age=1200,s-max-age=1800

Content-Type: application/javascript

Server: AmazonS3

Content-Encoding: gzip

Vary: Accept-Encoding

Age: 55344

Date: Thu, 29 Jan 2015 07:56:00 GMT

Last-Modified: Wed, 21 Jan 2015 20:56:49 GMT

Expires: Wed, 28 Jan 2015 16:53:36 GMT

Content-Length: 1965

Connection: keep-alive
...........Y{s.....Oq.i#...`cW......{......G......V6..w.g_...yt.......
=..i...._...3..^JF{.....A.......s.o...w...?......^.g.U1...09.]..(%3...
I...x}..,.t....R.r{.x..q....'..$J{..v.@.. .IH...-. Q.!|...,...6..pS...
j.A..4.#s.........`d)..&.O.#>...Y.)..9..$E......4......'.....{.1..]
1>....c......".$.P..0O.....I...9.....R......,.Y. .....G..aDf.<}*
W.d....*..#D.... ..b.b...'......G)."......[/Is......Wg.o.s...}...7?.xq
.........xS.....wo..(^...4..X......{....o.=.H.O.)...4.#..FDq.qs.....l!
.....~![wA.9.=..g...v..z.V../..Z.$..I..Y...n0..V.a...S.;..!.%.L4...E.D
~...m..\.?..h\...-d!.....@_.e...s3..h.c....%H.....././...-....[a:k....
....?..e...O.*.......0..d..m.gR............bG...?..9F=....7@.X.[.....&
gt;...,...A.._..-.c.z.#.........;..;..;......T..........(..L....wu.1.w
..d<............z......7/DT.4. Q:;.&d..|b..mU.R9M%\...T.._mo o...DW
...6.'WH.:.W0..9}..X'..y....G%....b0..%...rAp.Z...u......x.d..d....07B
......)y....z....\=..@....}@D...&......."...02....S.{.Z.......i...'.*.
.i..'VAz}9y...Mon..X....i.D.Sh........I..V...TDt.a.a..\..E...U....\(T.
...,.S/ .F?.KP...e.nQZp...]....9*.s.TObm........4..4..Qn..M.1....B../.
..Gm.T..&.Z.....4..lK..... ].9Bu..G..z}.z. ..........K.gl..D.8.T..le|P
".n.N3........a...TP.....>.........>......x.2M..uX.~.G.&yX?.....
8.....q......}....1..J... %......6>....Q.PL..B..s. n~.............M
....6..j....o...E.....;"Ub...../[.F.?.....?]..v=kx.Zc.O..5lU..`F4.]...
...j........`.Xa.&?.........~...._.9.XE...Y..u..u..:..0..:lf.".x...0R)
....bG.>P.OA......b...I..e.....#.h.IE.>..x.TK4.G......F.....<<< skipped >>>

GET /network/base64.js HTTP/1.1

Accept: */*

Referer: hXXp://cdn.bitmedianetwork.com/network/index-edge.html?tag=ant&adt=1224&browser=ie&clientdata=utorrent|3.4.2.37754|217&page=torrent&site=33049

Accept-Language: en-US

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/6.0)

Accept-Encoding: gzip, deflate

Host: cdn.bitmedianetwork.com

Connection: Keep-Alive


HTTP/1.1 200 OK

x-amz-id-2: Jp0204g/rPm1RI GLFsIz1YKdlDpoeF0rVi3tsSvJcTKcYyVhTMnaHja9FUOyjFJ

x-amz-request-id: AABEB24F2C2D1733

Cache-Control: public,max-age=1200,s-max-age=1800

Content-Type: application/javascript

Server: AmazonS3

Content-Encoding: gzip

Vary: Accept-Encoding

Age: 55344

Date: Thu, 29 Jan 2015 07:56:00 GMT

Last-Modified: Wed, 21 Jan 2015 20:56:49 GMT

Expires: Wed, 28 Jan 2015 16:53:36 GMT

Content-Length: 1965

Connection: keep-alive
...........Y{s.....Oq.i#...`cW......{......G......V6..w.g_...yt.......
=..i...._...3..^JF{.....A.......s.o...w...?......^.g.U1...09.]..(%3...
I...x}..,.t....R.r{.x..q....'..$J{..v.@.. .IH...-. Q.!|...,...6..pS...
j.A..4.#s.........`d)..&.O.#>...Y.)..9..$E......4......'.....{.1..]
1>....c......".$.P..0O.....I...9.....R......,.Y. .....G..aDf.<}*
W.d....*..#D.... ..b.b...'......G)."......[/Is......Wg.o.s...}...7?.xq
.........xS.....wo..(^...4..X......{....o.=.H.O.)...4.#..FDq.qs.....l!
.....~![wA.9.=..g...v..z.V../..Z.$..I..Y...n0..V.a...S.;..!.%.L4...E.D
~...m..\.?..h\...-d!.....@_.e...s3..h.c....%H.....././...-....[a:k....
....?..e...O.*.......0..d..m.gR............bG...?..9F=....7@.X.[.....&
gt;...,...A.._..-.c.z.#.........;..;..;......T..........(..L....wu.1.w
..d<............z......7/DT.4. Q:;.&d..|b..mU.R9M%\...T.._mo o...DW
...6.'WH.:.W0..9}..X'..y....G%....b0..%...rAp.Z...u......x.d..d....07B
......)y....z....\=..@....}@D...&......."...02....S.{.Z.......i...'.*.
.i..'VAz}9y...Mon..X....i.D.Sh........I..V...TDt.a.a..\..E...U....\(T.
...,.S/ .F?.KP...e.nQZp...]....9*.s.TObm........4..4..Qn..M.1....B../.
..Gm.T..&.Z.....4..lK..... ].9Bu..G..z}.z. ..........K.gl..D.8.T..le|P
".n.N3........a...TP.....>.........>......x.2M..uX.~.G.&yX?.....
8.....q......}....1..J... %......6>....Q.PL..B..s. n~.............M
....6..j....o...E.....;"Ub...../[.F.?.....?]..v=kx.Zc.O..5lU..`F4.]...
...j........`.Xa.&?.........~...._.9.XE...Y..u..u..:..0..:lf.".x...0R)
....bG.>P.OA......b...I..e.....#.h.IE.>..x.TK4.G......F.....<<< skipped >>>

GET /updatestats.php?cl=uTorrent&v=109417338&h=uVVfIsRBsnvPyT6P&k=&ip=8&con=31&dl=78&error=&dlurl=http://llsw.download3.utorrent.com/offers/spigot-yandex-20140709.bmp&svp=4&pid=2972&sz=24878&bin=<NULL>bmp&p1=192.168.139.2&m1=0&p2=192.168.50.10&m2=0&p3=193.138.244.233&m3=1&p4=193.138.244.106&m4=1&p5=46.164.136.181&m5=1&p6=80.91.160.129&m6=9&p7=195.22.214.108&m7=39&p8=89.221.34.75&m8=39&p9=89.221.34.75&m9=39&p10=87.248.216.137&m10=39&p11=69.28.172.105&m11=41&p12=87.248.217.253&m12=39 HTTP/1.1

Host: update.utorrent.li

User-Agent: BTWebClient/3420(37754)

Accept-Encoding: gzip

Connection: Close


HTTP/1.1 200 OK

Server: nginx/1.4.7

Date: Thu, 29 Jan 2015 07:52:54 GMT

Content-Type: text/html

Transfer-Encoding: chunked

Connection: close

X-Powered-By: PHP/5.4.30

Expires: Thu, 21 Jul 1980 00:00:00 GMT

Cache-Control: no-store, no-cache, must-revalidate, private

Pragma: no-cache

0..

GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBQ/xkCfyHfJr7GQ6M658NRZ4SHo/AQUCPVR6Pv+PT1kNnxoz1t4qN+5xTcCEGC2x6sSmevembHfY1acIZk= HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: ocsp.verisign.com


HTTP/1.1 200 OK

Server: nginx/1.4.7

Content-Type: application/ocsp-response

Content-Length: 1697

content-transfer-encoding: binary

Cache-Control: max-age=368304, public, no-transform, must-revalidate

Last-Modified: Mon, 26 Jan 2015 14:11:56 GMT

Expires: Mon, 2 Feb 2015 14:11:56 GMT

Date: Thu, 29 Jan 2015 07:56:26 GMT

Connection: keep-alive
0..........0..... .....0......0...0...A0?1=0;..U...4VeriSign Class 3 C
ode Signing 2004 CA OCSP Responder..20150126141156Z0s0q0I0... ........
?.@..w.........Y.!......Q...==d6|h.[x....7..`..........cV.!.....201501
26141156Z....20150202141156Z0...*.H.................D.<.\.T.WC.5...
.L.2JOnW....E.&Ao=..f...|..N .H1.^Z[a~.f... SUXu.p....~....xU96>`2.
o..cw.Z:_:T..........h.u....>.3..U.F.8`..\d.........z.p...S.\..@UZb
S.&.x6...9..j.>....!..-bdI. .'.......... :V.....HL$.h9v...."K.9d...
F8...G.m.d#^..p..."..)N(..D&1.K....b....0...0...0..{.........[..I|....
.Zm..0...*.H........0..1.0...U....US1.0...U....VeriSign, Inc.1.0...U..
..VeriSign Trust Network1;09..U...2Terms of use at hXXps://VVV.verisig
n.com/rpa (c)041.0,..U...%VeriSign Class 3 Code Signing 2004 CA0...140
428000000Z..150729235959Z0?1=0;..U...4VeriSign Class 3 Code Signing 20
04 CA OCSP Responder0.."0...*.H.............0.........Y....h..@..>.
....%.-.....O...' y.........x..Gw.xF.....?..Z..u,.X.&..........3C..H.l
.....f..;]s!.\"v...|....].@.....K7m2...N......-S.I......5n...G7. ..W..
..n..*..-f?EY.......UN...r...........-_.%..,P;b.....)(.P.4...,.%....&l
t;..6.....[r^X.EV..S...5#'Y.. .TD...........0...0...U.......0.0...U.%.
.0... .......0...U...........0... .....0......0f..U. ._0]0[..`.H...E..
..0L0#.. .........hXXps://d.symcb.com/cps0%.. .......0...hXXps://d.sym
cb.com/rpa0!..U....0...0.1.0...U....TGV-B-1080...U......"...?....`>
q..i1o...0...U.#..0.....Q...==d6|h.[x....70...*.H.............B8@.$..w
o......E.....P52"b*@'C\.y.(...n....h.f..7f.....v...pb<...]..|..<<< skipped >>>

GET /ados?t=1422518160394&request={"Placements":[{"A":5682,"S":33049,"D":"bt_ap_div","AT":1224,"Properties":{"tag":"ant","browser":"ie","clientdata":"utorrent|3.4.2.37754|217","page":"torrent","flash":"none"}}],"Keywords":"tag%3Dant%2C%20browser%3Die%2C%20clientdata%3Dutorrent%7C3.4.2.37754%7C217%2C%20page%3Dtorrent%2C%20flash%3Dnull","Referrer":"","IsAsync":false} HTTP/1.1

Accept: */*

Referer: hXXp://cdn.bitmedianetwork.com/network/index-edge.html?tag=ant&adt=1224&browser=ie&clientdata=utorrent|3.4.2.37754|217&page=torrent&site=33049

Accept-Language: en-US

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/6.0)

Accept-Encoding: gzip, deflate

Host: engine.bitmedianetwork.com

Connection: Keep-Alive

Cookie: azk=ue1-e3e9d37e487f4f93865292310c7d71de; azk-events=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; _ga=GA1.2.281852
HTTP/1.1 200 OK

Access-Control-Allow-Headers: accept, origin, content-type, content-length

Access-Control-Allow-Methods: GET,PUT,POST,DELETE,OPTIONS

Access-Control-Allow-Origin: *

Content-Encoding: gzip

Content-Type: application/javascript

Date: Thu, 29 Jan 2015 07:56:00 GMT

ETag: "937618"

P3P: CP="This is not a P3P policy! See hXXp://adzerk.com/ad-server-privacy for our privacy policy"

Server: nginx/1.1.19

Set-Cookie: azk=ue1-e3e9d37e487f4f93865292310c7d71de; Path=/; Expires=Fri, 29 Jan 2016 07:56:00 GMT

x-powered-by: adzerk bifrost/

x-served-by: engine-us-east-1a-03

Content-Length: 2645

Connection: keep-alive
.............s..........;...n.<.wj....8.QQ.;.,^...*.ak..{.3yL&ff..L
f.%.~.......#[{]s....z.v..7..v..)...[....?.Zq8.2.;..c..............z.d
..._~..y..?;a..^h.~./....e.K..<...../:..*.Z....l....h.S#.u.:.w.cgyh
b...f...B ....^.IM.Y9.......=...!.W`...z.i..%/..PM:.Sop.a.....h....'.K
U.A..kR.j!..AF...N.B......%m;.."...>....m%j.j..`/.j.G.H).!]'ca...[.
.....v............mlc|..........n...t .zt...tYM.v.d.....#...p.x.l.8r..
%..3v.%.C'ua.#\.iz.......s..[..F.].....{*....\...?^W.l.v]cTZz.PKz6s...
IOW9-..=....F....1.....J.Vp...........9t.%Z!7.....7.-9.-...Mn.N....7.{
.S?..G'GCw..2...-q..$..Q.#..7.>.X.....k.F..ma*..U..~<..#...D$.&g
t;..j..>6..O.U<........DI....B. 9\.....n.m.a...x|.e...t.9$.a..s.
Z.q s.....Q.f.E..4.}{......d.s;.e....Kk.YY........p..s}.7;C .....hK...
9;Uo..a.Pa.6..f..3m,I..v'..EyC....R.....Z.q5..I..e./....^...z....tqc&l
t;.........U..&s..6k.z....Mfg!..}....*f...O...oa....,..k.E<c9..|...
..?.....os..c...i......~...0Fv|c..........?"t=.:-..G......Z..A..8vy4.9
.j......~F...I...r.(...f.......q...].A.u......Q~sr.@_k..w.?..bE...c$..
1?.G.B.....`..^^..?.~Sa.T?...]....G...<C..-..gomo....0. .<.{p...
.pC..m.......>..d..u.`....p..jU.k.gz.............>xOo..cX...>
s^..?Oj.B....<.E.,'.......$..cD.QI..1......-..9.......-z......t.R..
 P. ..V...B.G...sKRsKo......`J..\y...Ei....x....@.P.>...\.8.......5
...WhR..\..ul0V.. .p.... w..... .6F...V.,[r..:.\Qv;..`.. ..e.v.....3.Z
:se....1.\..<..9.L.<.=..e..]..q.B.`/.iA..F#.z5n.^M.B.VQ...G.....
.L:(......}...ULd..X..|9......E.4g...d.....;2....QT....[p.7.L2....<<< skipped >>>

GET /i.gif?e=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&s=EaoFTV_2sr7NxncVCs9bZJtyhJs HTTP/1.1

Accept: */*

Referer: hXXp://cdn.bitmedianetwork.com/network/index-edge.html?tag=ant&adt=5&browser=ie&clientdata=utorrent|3.4.2.37754|217&page=torrent&site=33049

Accept-Language: en-US

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/6.0)

Accept-Encoding: gzip, deflate

Host: engine.bitmedianetwork.com

Connection: Keep-Alive

Cookie: azk=ue1-e3e9d37e487f4f93865292310c7d71de; azk-events=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
HTTP/1.1 200 OK

Access-Control-Allow-Headers: accept, origin, content-type, content-length

Access-Control-Allow-Methods: GET,PUT,POST,DELETE,OPTIONS

Access-Control-Allow-Origin: *

Content-Type: image/gif

Date: Thu, 29 Jan 2015 07:56:01 GMT

P3P: CP="This is not a P3P policy! See hXXp://adzerk.com/ad-server-privacy for our privacy policy"

Server: nginx/1.1.19

Set-Cookie: azk=ue1-e3e9d37e487f4f93865292310c7d71de; Path=/; Expires=Fri, 29 Jan 2016 07:56:01 GMT

x-powered-by: adzerk bifrost/

x-served-by: engine-us-east-1e-12

Content-Length: 43

Connection: keep-alive

GIF89a.............!.......,...........D..;HTTP/1.1 200 OK..Access-Con
trol-Allow-Headers: accept, origin, content-type, content-length..Acce
ss-Control-Allow-Methods: GET,PUT,POST,DELETE,OPTIONS..Access-Control-
Allow-Origin: *..Content-Type: image/gif..Date: Thu, 29 Jan 2015 07:56
:01 GMT..P3P: CP="This is not a P3P policy! See hXXp://adzerk.com/ad-s
erver-privacy for our privacy policy"..Server: nginx/1.1.19..Set-Cooki
e: azk=ue1-e3e9d37e487f4f93865292310c7d71de; Path=/; Expires=Fri, 29 J
an 2016 07:56:01 GMT..x-powered-by: adzerk bifrost/..x-served-by: engi
ne-us-east-1e-12..Content-Length: 43..Connection: keep-alive..GIF89a..
...........!.......,...........D..;..

GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBRIt2RJ89X++hEzqoBeQg8PymQ2UQQUANhaTCXBIuWLMe9tuvPMXynxDWECEDWXMYfzhzoHMn7OWAybfto= HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: ocsp.verisign.com


HTTP/1.1 200 OK

Server: nginx/1.4.7

Content-Type: application/ocsp-response

Content-Length: 1453

content-transfer-encoding: binary

Cache-Control: max-age=489755, public, no-transform, must-revalidate

Last-Modified: Tue, 27 Jan 2015 23:51:54 GMT

Expires: Tue, 3 Feb 2015 23:51:54 GMT

Date: Thu, 29 Jan 2015 07:52:38 GMT

Connection: keep-alive
0..........0..... .....0......0...0......T3t.%..O.E..~..F.=....2015012
7235154Z0s0q0I0... ........H.dI.....3..^B...d6Q....ZL%."..1.m..._)..a.
.5.1...:.2~.X..~.....20150127235154Z....20150203235154Z0...*.H........
......M.(...3........wG..8..GbW.....%J.X=..4.:..0.~x...UK.v.q....{G-R.
N..Tm.G........].Ly./.0....2...P>...,.&..*m...0......Y.'.h.0*..^...
...E....[8.u..8........)....\.S..d..........,.)......B... ...N......~.
P.....d....e.z..Wk.....N$[_...e..[....0.8....f...(.?1G....0...0...0..3
......./...b.v..-....l}0...*.H........0_1.0...U....US1.0...U....VeriSi
gn, Inc.1705..U....Class 3 Public Primary Certification Authority0...1
41202000000Z..151216235959Z0..1.0...U....US1.0...U....Symantec Corpora
tion1.0...U....Symantec Trust Network1?0=..U...6Symantec Class 3 PCA -
 G1 OCSP Responder Certificate 30.."0...*.H.............0..........'..
....Y..x.3B1.7..Q..`..d.. ....s..t.$a.....j2R.{ ,*..c{.3.....H..3-; ).
....0._...*..9M..V...... ...{m...-.......)..tR..{D....~...M...T..pS.p.
.^|o....S..v.).).....r.v.qo$......C.V!....@.h#qh...u1T.].G0.]E...=._..
.... ........TE...Sa.s4........r...3.............0..0...U....0.0l..U. 
.e0c0a..`.H...E....0R0&.. .........hXXp://VVV.symauth.com/cps0(.. ....
...0...hXXp://VVV.symauth.com/rpa0...U.%..0... .......0...U........0..
. .....0......0!..U....0...0.1.0...U....TGV-B-2730...*.H.............$
..H......oU....Y!.z{*.V.M..u.._z..3>.. 0....3..m.....e.......a..D..
.........e..F6:.y.....di.......<y.Z.......x}..q.2....UZ1 :,.
...
<<< skipped >>>

GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBS56bKHAoUD+Oyl+0LhPg9JxyQm4gQUf9Nlp8Ld7LvwMAnzQzn6Aq8zMTMCEG7MeqWnAyAJuM689OlS1JE= HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: ocsp.verisign.com


HTTP/1.1 200 OK

Server: nginx/1.4.7

Content-Type: application/ocsp-response

Content-Length: 1762

content-transfer-encoding: binary

Cache-Control: max-age=463045, public, no-transform, must-revalidate

Last-Modified: Tue, 27 Jan 2015 16:27:13 GMT

Expires: Tue, 3 Feb 2015 16:27:13 GMT

Date: Thu, 29 Jan 2015 07:52:38 GMT

Connection: keep-alive

0..........0..... .....0......0...0......;O}a.!..u...au..eUNp..2015012
7162713Z0s0q0I0... ...................B.>.I.$&.....e......0..C9...3
13..n.z... ......R......20150127162713Z....20150203162713Z0...*.H.....
...............A....H...#...At.(..lE.........W..s.U......UV;..?.).)p.j
M........#.K:P..#YN%....Q.5r.].I...9.(}.....C.qS]!.n..ZO@..~:_.L..e..H
X0...#3k.q..N8..>....._..9.. ...d..FGw......PW.%..V.?J..B..]5..{...
"j...%.,%.h.]..k6/...6.5..%Yu...7...z2]......8.WS...Y.l.e....0...0...0
...........2...'U.BM...g.B0...*.H........0..1.0...U....US1.0...U....Ve
riSign, Inc.1.0...U....VeriSign Trust Network1:08..U...1(c) 2006 VeriS
ign, Inc. - For authorized use only1E0C..U...<VeriSign Class 3 Publ
ic Primary Certification Authority - G50...141202000000Z..151216235959
Z0..1.0...U....US1.0...U....Symantec Corporation1.0...U....Symantec Tr
ust Network1?0=..U...6Symantec Class 3 PCA - G5 OCSP Responder Certifi
cate 30.."0...*.H.............0...............2&..PL...,..2....:..tH..
.`JG.%..*...s.c%...?t..J..0.q....~..k@X.l.i....0..kk..h.9"1.5?..s.....
3[...u......]...R0..Z}....l..I.Y.....j\H.q...#.uw.4qz.#.J.....@2$"..$l
.B.......D.ye..(..2.........@...... ...."... E..0M,..b{.^..s'....f.6.p
r4.J........'j..........0...0...U.......0.0l..U. .e0c0a..`.H...E....0R
0&.. .........hXXp://VVV.symauth.com/cps0(.. .......0...hXXp://VVV.sym
auth.com/rpa0...U.%..0... .......0...U...........0... .....0......0!..
U....0...0.1.0...U....TGV-B-2760...U......;O}a.!..u...au..eUNp0...U.#.
.0.....e......0..C9...3130...*.H.............(.&..Dgr.Ve..#...5.N.

<<< skipped >>>

GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBTSqZMG5M8TA9rdzkbCnNwuMAd5VgQUz5mp6nsm9EvJjo/X8AUm7+PSp50CEFcywVdOavgo4bT5Ors07Qg= HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: ocsp.verisign.com


HTTP/1.1 200 OK

Server: nginx/1.4.7

Content-Type: application/ocsp-response

Content-Length: 1725

content-transfer-encoding: binary

Cache-Control: max-age=368024, public, no-transform, must-revalidate

Last-Modified: Mon, 26 Jan 2015 14:04:54 GMT

Expires: Mon, 2 Feb 2015 14:04:54 GMT

Date: Thu, 29 Jan 2015 07:52:43 GMT

Connection: keep-alive

0..........0..... .....0......0...0......u\..3Oo?U...H.....O!..2015012
6140454Z0s0q0I0... ...................F....0.yV......{&.K......&......
.W2.WNj.(...:.4......20150126140454Z....20150202140454Z0...*.H........
.....h........ [..g}G]..1.. ..,..P`...Vw..X.`..k...i6.f........: .....
b...j. uV...b......@.....JV.....<....%-..K.&M:"z... ...:.).&.e...HL
.M..T8. .....VY..E|:.9`J.`j..s).S.f.5.cv......OtEK.....j.lbv.G|... ...
.Mi.........fl.|..X...-..M..&.p..j.Q...0.B_.'.....1.......0...0...0...
......./...nj0...}..i..0...*.H........0..1.0...U....US1.0...U....VeriS
ign, Inc.1.0...U....VeriSign Trust Network1;09..U...2Terms of use at h
ttps://VVV.verisign.com/rpa (c)101.0,..U...%VeriSign Class 3 Code Sign
ing 2010 CA0...141204000000Z..150304235959Z0..1.0...U....US1.0...U....
VeriSign, Inc.1.0...U....VeriSign Trust Network1:08..U...1VeriSign Cla
ss 3 Code Signing 2010 OCSP Responder0.."0...*.H.............0........
.4.4...........o....?..f.........I.!.b.L...L..U.........rM.,.....=..cR
4d.~*..k..x......=.WT.<.A2n1.qZyM.M..Q_...8....9....d.... ...'.....
....h..Z..I...(.b.jK..DO.ra..gb..j..A.(....mrzU.w.......Bv...l.:s..L..
..y.....u..n.)W......Y!....Q...,.i|.....:.Mu..DD1.........0...0...U...
.0.0....U. ...0..0....`.H...E....0..0(.. .........hXXps://VVV.verisign
.com/CPS0b.. .......0V0...VeriSign, Inc.0.....=VeriSign's CPS incorp. 
by reference liab. ltd. (c)97 VeriSign0...U.%..0... .......0...U......
..0... .....0......0"..U....0...0.1.0...U....TGV-B-24600...*.H........
......pjd....VpE.6.tO..@.....7.=.. ...........hi.......>....Q.?

<<< skipped >>>

GET /MFQwUjBQME4wTDAJBgUrDgMCGgUABBQmECJms4f7i5EbxtN7NbzQCBwAdAQUUa8kJpz0aCJXgCYrO0ZiFXsezKUCE1oAAHevvgBk+xJc0C0AAQAAd68= HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: ocsp.msocsp.com


HTTP/1.1 200 OK

Date: Thu, 29 Jan 2015 07:53:48 GMT

Content-Type: application/ocsp-response

Content-Length: 1757

Connection: keep-alive

Set-Cookie: __cfduid=d2fbe74c998d39fdf5ccbc995870a76f61422518028; expires=Fri, 29-Jan-16 07:53:48 GMT; path=/; domain=.msocsp.com; HttpOnly

Last-Modified: Sun, 25 Jan 2015 22:17:12 GMT

Expires: Mon, 02 Feb 2015 07:53:47 GMT

ETag: "0b21c26e98383f224b6f87a8cc056c614ef210aa"

Cache-Control: public, max-age=345599

CF-Cache-Status: HIT

Server: cloudflare-nginx

CF-RAY: 1b03dbad6ffd0485-FRA
0..........0..... .....0......0...0..........<.|7...@N6p.I.e|..2015
0125221712Z0..0..0L0... ........&."f........{5.....t..Q.$&..h"W.& ;Fb.
{.....Z..w...d..\.-....w.....20150125221712Z....20150129221712Z."0 0..
. .....0......20140125221712Z0...*.H.............X'C.G/r..p..5....$...
...r.......oS.I..A..<bZ.. .d............ .<o...%....6.......\$I.
D...i....,.h.e.GE...9$]..#.......K;.....JK.........*`te@~..s..<py.'
. G..x.6..E..B'..e....,..UCL.0..q..<=)?...n.#........$u......O...T.
..:./_).K$......)..=.....U...H..p&.xe....0...0...0..........Z..~..M..&
lt;ZYJ....~.0...*.H........0..1.0...U....US1.0...U....Washington1.0...
U....Redmond1.0...U....Microsoft Corporation1.0...U....Microsoft IT1.0
...U....Microsoft IT SSL SHA20...141229205745Z..150314205745Z0!1.0...U
....Should be ignore by CA0.."0...*.H.............0...........&!(..$.K
...."=f....x.d.._s.....j....9`..l.Z..............^f..u......-e.&.bG.(i
.Q...........bEy...^7A...A..c....CF-&...e.7..7F....."..w...y.:..`.w{~.
.D.x*.......x3Os......q...... S.fB .ig.....L..3......4E..}..7...M....e
 ...6.M.O.....<5:......r.....]..A.5........0..0...U..........<.|
7...@N6p.I.e|0...U.#..0...Q.$&..h"W.& ;Fb.{...0...U...........0...U.%.
.0... .......0... .....7....0.0... .......0... .....0......0...*.H....
..............sa....^`.U.h.....(c[..j.|. ..#....3.5.?..L.....Z....J...
...*.w...w.$.z..Y.d.....l.....G#.....o.\t.......(.B =..P..T....0./P...
..z.3....L.O3....z...Wxo..~.OeH....c.i.@."..?d.......=v(.....m..LN..PP
....<.}T.X......K.&e.S...|....% ...(F.=k..~.j..C......4.....c..<<< skipped >>>

GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBQwF4prw9S7mCbCEHD/yl6nWPkczAQUe1tFz6/Oy3r9MZIaarbzRutXSFACEE1fLDQIskwgzW1QfiRNyew= HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: ocsp.thawte.com


HTTP/1.1 200 OK

Server: nginx/1.4.7

Content-Type: application/ocsp-response

Content-Length: 1503

content-transfer-encoding: binary

Cache-Control: max-age=449303, public, no-transform, must-revalidate

Last-Modified: Tue, 27 Jan 2015 12:37:06 GMT

Expires: Tue, 3 Feb 2015 12:37:06 GMT

Date: Thu, 29 Jan 2015 07:52:42 GMT

Connection: keep-alive
0..........0..... .....0......0...0......&Km...."....}....,.c..2015012
7123706Z0s0q0I0... ........0..k....&..p..^.X.....{[E....z.1..j..F.WHP.
.M_,4..L .mP~$M......20150127123706Z....20150203123706Z0...*.H........
.....z=.5.....x...r.b>C.7.B.q..C.6.y%...._.......U.>.q.3......!.
....kR../H.6....SFG.(F[;.)..Et.dzq.....^Rf|...........}..F..g>.....
nH............`..wjA....v@.P.../....D...5~1.F....r6......b./..`S.?.t..
.W..;4lXx........?..d......&q.b.l.f.[.^....#..*..Y2.O..... .....0...0.
..0............I...*....^n...0...*.H........0..1.0...U....US1.0...U...
.thawte, Inc.1(0&..U....Certification Services Division1806..U.../(c) 
2006 thawte, Inc. - For authorized use only1.0...U....thawte Primary R
oot CA0...141202000000Z..151216235959Z0_1.0...U....US1.0...U....thawte
, Inc.1907..U...0thawte Primary Root OCSP Responder Certificate 30.."0
...*.H.............0.........x...F83..,.D.,2D.;JGc.|_.k.....B.7.....G}
.M.s.....S.i.Uu.h.Aq..v...4:l..U.......T7l...~vl...r....{*..........V.
o..8|.B..^.a.. ...z....x..s...\[Y....<....'> ..YC..7.zVk.$...o3.
.kao]c...>C./bPX.......I..Oc.....NN......g.....,/..]......qN.....V!
<.3.)...y#.........i0g0...U.%..0... .......0... .....0......0...U..
.....0.0...U...........0!..U....0...0.1.0...U....TGV-B-2770...*.H.....
...........lt..\..z. ..N.f.!.S5d?J.&....r...D........L.`.s.p...HC.L.8f
... .........GA7......P..Z.%.../............z.n.6~I...].).....W...W\|.
uya..:...^...hW..7.Z.uc.'....:.xL...HS.....>.........5......%....3S
....h........U....o.C.\.t.....G.._.C0(l.E9..6UTxg.gF ..;...
<<< skipped >>>

GET /analytics.js HTTP/1.1

Accept: */*

Referer: hXXp://cdn.bitmedianetwork.com/network/index-edge.html?tag=ant&adt=1224&browser=ie&clientdata=utorrent|3.4.2.37754|217&page=torrent&site=33049

Accept-Language: en-US

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/6.0)

Accept-Encoding: gzip, deflate

Host: VVV.google-analytics.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Date: Thu, 29 Jan 2015 07:46:42 GMT

Expires: Thu, 29 Jan 2015 09:46:42 GMT

Last-Modified: Fri, 16 Jan 2015 00:55:08 GMT

X-Content-Type-Options: nosniff

Content-Type: text/javascript

Vary: Accept-Encoding

Content-Encoding: gzip

Server: Golfe2

Content-Length: 11479

Age: 558

Alternate-Protocol: 80:quic,p=0.02

Cache-Control: public, max-age=7200
...........}iw.;..w..P.vW..2.NN.....'.I...,.$cb....1....gK.*0....^}.jk
...,%<..T......B..H....j....G...p`..8I.{.=...L&&{.;7.i&....N...;oT(
E...M6.....tlN.t..8.K....P.5t.V%....R.@.L.-3...$8..:....O.@...L..p..b.
.jldf...9.4.=.R.^..{.4..4...AS#Ip:.P.=*6..(.0..C%1.@......^....#3..i..
V.`....@.1.'4..0..a.ZL..M8.g4..l..(9.......N..)wA..5.......{....4...(.
%...\.R.=*........?...$.#....A7...I...F*....0..Q.>..~.....Q...4.c.N
 .Q...<.y....=.....4..F..@.%:..ue6....M{$.T...M .'..a..~Am._./.....
..5...|...&;.M..D.f...yW..ubZ..e...Tjsn.B'.sIm.;.%J^hT.....t..l:....&g
t;.T.j*..FM..gZ..2...za.2..M..S.d8..d.P...S..#..ZS.J...4U...m.I.g6.Tu.
6..4iw..[.l...0m.....e6.Ghk..[}wW..~Tj%].;.{........x.................
.2U......g...p.s<....W..j....{..|.... V.r.GX.Y...;.i.y'.....O0...1&
..c4j....f.P.l........lf.AA.`..O..8[Y.=L........u.*..7vR6<.-.~..-.k
>.?W5t.b..wj.D..o.wC....-?U...4.vF..........Z.%.D...LV.#[..Vu..o...
...u..<uw. ..F@..........0z.4.f._..'uJ..Q..d.../.\LK.D7s.j...I(...M
U..0..eF~.X...p.Ai......%4........O.....M230..mP..5%*..5(3..:......0..
P.......MtC..3....\..m.xl...f.....#....6...>K..K...@.')vM&jP>.=.
...B.L*u.Oj...,.AI.=Q....l..|fl.......... ".h..$.M.../......P..>I.$
...p.9....p...i.B,G......TLi#.7.;^.....?..X.x.!E.O$.... K. ...N..*..".
..E..8...A.P....O..".r.9.^.xk9".=......U._.....).R.n......ME`.X..S..xE
..[Rq....\B.$...%*."./.x......3[.<.i.e.$..\...........h.../....d*.x
.....^H......M.G.aa..N.'.U\S.$.&q..-..(.g........@.Qv:.^.2...YXp.}[{..
...].C. .N...ul..-.w..R#k.QYz...o...<.|/.l..wjQc............d..<<< skipped >>>

GET /r/collect?v=1&_v=j32&a=1298203212&t=pageview&_s=1&dl=http://cdn.bitmedianetwork.com/network/index-edge.html?tag=ant&adt=5&browser=ie&clientdata=utorrent%7c3%2e4%2e2%2e37754%7c217&page=torrent&site=33049&ul=en-us&de=windows-1252&sd=24-bit&sr=1716x901&vp=300x250&je=1&_u=MEAAAEQAI~&jid=209490301&cid=281852828.1422518160&tid=UA-54512734-1&_r=1&z=1554186047 HTTP/1.1

Accept: */*

Referer: hXXp://cdn.bitmedianetwork.com/network/index-edge.html?tag=ant&adt=5&browser=ie&clientdata=utorrent|3.4.2.37754|217&page=torrent&site=33049

Accept-Language: en-US

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/6.0)

Accept-Encoding: gzip, deflate

Host: VVV.google-analytics.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Access-Control-Allow-Origin: *

Date: Thu, 29 Jan 2015 07:56:00 GMT

Pragma: no-cache

Expires: Fri, 01 Jan 1990 00:00:00 GMT

Cache-Control: no-cache, no-store, must-revalidate

Last-Modified: Sun, 17 May 1998 03:00:00 GMT

X-Content-Type-Options: nosniff

Content-Type: image/gif

Server: Golfe2

Content-Length: 35

Alternate-Protocol: 80:quic,p=0.02

GIF89a.............,...........D..;HTTP/1.1 200 OK..Access-Control-All
ow-Origin: *..Date: Thu, 29 Jan 2015 07:56:00 GMT..Pragma: no-cache..E
xpires: Fri, 01 Jan 1990 00:00:00 GMT..Cache-Control: no-cache, no-sto
re, must-revalidate..Last-Modified: Sun, 17 May 1998 03:00:00 GMT..X-C
ontent-Type-Options: nosniff..Content-Type: image/gif..Server: Golfe2.
.Content-Length: 35..Alternate-Protocol: 80:quic,p=0.02..GIF89a.......
......,...........D..;..

GET /utorrent-onboarding/plus.btapp HTTP/1.1

Accept-Encoding: gzip

User-Agent: uTorrent/3100(26616)

Host: apps.bittorrent.com

Cache-Control: no-cache


HTTP/1.1 200 OK

x-amz-id-2: w92tvyYPHLbd7AvVHC6/WekTc/vvXgf8rOEs/qdgma/nhQVu3Vx8HaDusxre/3cM

x-amz-request-id: 37CF7ADD838850D0

Accept-Ranges: bytes

Content-Type: binary/octet-stream

Server: AmazonS3

Age: 121268

Date: Thu, 29 Jan 2015 07:52:29 GMT

Last-Modified: Tue, 08 Oct 2013 00:53:59 GMT

Content-Length: 51758

Connection: keep-alive
PK...........?4.u.............btapp5.1.. .EwN.......C....P. .D9~..Z...
......e.:.8....T}..9!...{/...F..Ap.T\...Z....".....v;....o@1..N..d.*".
.]..'e.3.P....Q..2;...Q.5j...<.aA`\.%nY..y..PK.........`,?hu(y....6
.......icon.bmp..=..0...........z.v..]..F]s1&...5./.-.? .H...~I...k...
....g6... .a.....|.DG..O<.....T X"|.rl..c.......6.*..1...[...N.i.68
.@..b.VKz.=X..u....H.4..-.....g...........w}_@.{...e._..S....?k. ....O
PK...........?.R......O.......index.html..An.0.E.s...e....].1..$.....K
H{.Y......<X..Jr:x....R....m..P..x.....D".o...b....~..............1
....6....xq..,......`A..Q.if.R......Q/....U..Y;....G.J.8..ye..2Ld..Z..
..>g......).`...M...43y._|G.......2m.{F...7....PK...........?......
..........lib/PK.........~.?Y@......>.......lib/index.jsU.Ak.!.....
..'.R.=6...@...P.u1..`t;.....^.....>..sf..,........'.....i...o....z
..y........ ..?3&.j.P....A....Y....`.}..&a._^.r..gp.9u..z}vO`{..DUK...
..9.M.n.ywmC...hLB..u.H....../.'..q.zW.P.......},.....p(m.z.M1..G>x
...PK...........?................local/PK...........?................l
ocal/img/PK........M..?................local/img/basic/PK........xQe=.
.~N*...*.......local/img/basic/x.png.PNG........IHDR............._x.u.
...tEXtSoftware.Adobe ImageReadyq.e<....IDATx...KHTQ.....h...4K....
...d.....0.A.4.D."X...(.\.. j....P[..!.$m...tb4..G...<N.o....;.....
s.....|.9.hB..)K.(...,..S.$....W...]....._.'.)NW..Q<.-.r..&.b}}....
.yfeeYJJJ,....q....i.O.dB..........D.!177g...I..L....%.v{L...f........
C_...S{...%4n.......X"od...d....Z.{AA.X\\4.....".c..dkyy.....j....<<< skipped >>>

GET /offers/LowTempRec_InstallPath.bmp HTTP/1.1

Host: ll.download3.utorrent.com

User-Agent: BTWebClient/3100(26616)

Accept-Encoding: gzip

Connection: Close


HTTP/1.1 200 OK

Server: nginx/1.4.7

Content-Type: image/x-ms-bmp

Cache-Control: max-age=3600

Accept-Ranges: bytes

Age: 1138

Date: Thu, 29 Jan 2015 07:51:31 GMT

Last-Modified: Fri, 16 Jan 2015 20:57:03 GMT

Expires: Thu, 29 Jan 2015 08:32:33 GMT

Content-Length: 82340

Connection: close
BM.A......2...(...................r=..............................s...
.U..c.z..:..S.T.............~-k......>..R.6..j..g.>..3b..Qo.I. .
.<N..GZ.,...:....4H.|4C..^p......#?.U...4.... 2.K...D...<.......
.4D.. 8.....x.....&..9G.k....$/..",.. 7..,6..,5.L....$-..:E..4<..4&
lt;..@G.T...D....59..PU......#$..#$..7<..69..km.p...d...\...T...L..
.D...<...4...,...l...$...d.......\...."!.<...4....,,.X....,,..('
..-,..,,..44..54.l##..........*%.....z...i........................*$.A
...v0,.rOM.w...l...d.......|...t...l...d....$...$...$...,$..$...-$..,$
..qn.....\...T...\....6(..5).[-(..MF.................L...D........ ...
$...$..T....un.........|...t...l...<...."......|...t....-...$...$..
.-...-..\....,..|0"..7*..NA..\O..c[.....d...4....$..k...<........(.
.|...\....0..T....$...$..d...z$.......,...@*..$...$...(..t...K....,...
8.......,..S....K,......$..l....,...,...$..d...\....8.......\1........
..,...7.......H...A...8...T$..-..T....H...A...K$..W3..wM..7...P,.....~
/...i:..wO...c..F..tA...o6..[...y...o....?..t....*...F...p......v.....
.......................C.......".......N.................(J.%HJHHHGGHG
GGFFEEEDE..HHJH ...JHHH....J..H..7OH..G...F.G.F..EED.{..z..kkkjjkj..k.
.z{...F........G{..{.{{....{.z................k....kzz........-......k
zk.zk..............zFFF.F...FEk...........)..zzz.z..........z.kkzz.z..
zz..k.zkzzz..z..{...{.R...5..............z..{....{{.{{zz...zz{.{......
........J...................F....E...kk.j..j..kkk...k.kkj........k..EE
.D.E.FFEEE.DE....E.E..{....{{zk..3J.H.J.H..7..JJHH....JHJJ....JHJH<<< skipped >>>

GET /installstats.php?v=102852600&h=uVVfIm5t2vDPyT6P&w=1DB10106&bu=1&pr=0&cmp=0&torrent_offer&&toroffer=1&view=win32 HTTP/1.1

Accept-Encoding: gzip

User-Agent: uTorrent/3100(26616)

Host: update.utorrent.com

Cache-Control: no-cache


HTTP/1.1 200 OK

Server: nginx/1.4.7

Date: Thu, 29 Jan 2015 07:52:29 GMT

Content-Type: text/html

Transfer-Encoding: chunked

Connection: close

X-Powered-By: PHP/5.4.30

0..

GET /ui/0/7.1.0.105.550/en/getnewestversion?defaultbrowser=ie HTTP/1.1

User-Agent: 7.1.0.105

Host: ui.skype.com

Cache-Control: no-cache


HTTP/1.1 200 OK

Date: Thu, 29 Jan 2015 07:54:03 GMT

Server: Apache

Cache-control: no-cache, must revalidate

Pragma: no-cache

Expires: 0

Set-Cookie: SC=CC=:CCY=:LC=en:TM=1422518043:TS=1422518043:TZ=:VER=0/7.1.0.105/550; expires=Fri, 29-Jan-16 07:54:03 GMT; path=/; domain=.skype.com;

Content-Length: 9

Connection: close

Content-Type: text/html; charset=utf-8

Content-Language: en

7.0.0.102..

GET /utorrent-onboarding/welcome-upsell.btapp?h=uVVfIsRBsnvPyT6P&v=109417338&ol=en&ul=&tk=stable34&c=uTorrent HTTP/1.1

Host: apps.bittorrent.com

User-Agent: BTWebClient/3420(37754)

Accept-Encoding: gzip

Connection: Close


HTTP/1.1 200 OK

x-amz-id-2: HCpaeLg6Uh9Sm3sk0S53QKUErij9Jl2BjFcA7W08S2omUK1lk3TxpoRJFmDYmH X

x-amz-request-id: A7F6CC8B72CD7AE0

Accept-Ranges: bytes

Content-Type: binary/octet-stream

Server: AmazonS3

Age: 189020

Date: Thu, 29 Jan 2015 07:54:00 GMT

Last-Modified: Tue, 08 Oct 2013 00:54:05 GMT

Content-Length: 28315

Connection: close
PK.........}?@................btappUT...4}(O..(Oux.............5.1.. .
.{^..b.N.Q.K.)...b#a8.G....S.4....`...Af..4........Q...S....G>..|.I
...1...]..j..............}q.b....u. ..<oE..N..w..D..A....GA..U.w.5W
=..`...PK.........L|>...9............empty_movie.gifUT......M..(Oux
.............GIF89a.............!.......,.............................
H...........L................L*......J......j............N............
.........(8HXhx..........)9IYiy..........*:JZjz.......... ;K[k{.......
...,<L\l|..........-=M]m}...........>N^n~........../?O_o........
..0......<.0....1...;PK.........Y.>.Pi-....T.......index.htmlUT.
.....M..(Oux..............W.n.6....8U.:.f)....IC.d..vk..C...-.Yt(R%)_0
..k...$;.l.r.!.......|.F...~.....k(m%R...-@09I..AJ.dyz....Z.Y..A...-..
....V`....r.7.i.y....Epy..E....hJD.@..H..q.f..`.5&........3..i${..L. ,
X#..~k...v[...XK...,.Jkk.:...-..R....&.T.i..c.M?7...Ix...6aE.NM..Q p..
.p...Q.......Z.5J..7..P..b:'.".........n...}..r....t.....q_...r%.dU...
Wxx..n....8trT....FH..42..K...O..;_...r.M.^.t.7._...p...B.%..o........
..D.0g...nL.`..e.U .....5.`.....i....?...)..Q.:n...E-....b......Be.y.R
j..C..<.R..lB...KC...6......1..;.=..KQ)c.....!...RcJ5.yWH......i.J.
..jq.c..8Y..v...(/..N...R.......:.L..z.s.T48.*..Q........7.....I.c.y..
o.`.....?........pv.9...S.|.'[.....>..F..U.......I@.a)....u}..7T.R.
...5..o...o..ZUp.j.zQ..T^...n........D.fGa...J....B.$.D....u..\.......
$.......././N...fJd."n..@...|q.....o....F....f.YE.G.|....N..1...N....F
h/?..l.T.=L..W.vtl8.i=.(.r[&...W4..OJ..g..a.V[.....d..36sC....l/.&<<< skipped >>>

GET /3.4.2/utorrent.37754.stable34-OC_CC217.exe?au=1&hash=4cecde076e1a0d5ae95751f0e5e78ae21b7177d4 HTTP/1.1

Host: llsw.download3.utorrent.com

User-Agent: BTWebClient/3100(26616)

Accept-Encoding: gzip

Connection: Close


HTTP/1.1 200 OK

Server: nginx/1.4.7

Content-Type: application/octet-stream

Cache-Control: max-age=86400

Accept-Ranges: bytes

Age: 28256

Date: Thu, 29 Jan 2015 07:52:42 GMT

Last-Modified: Tue, 13 Jan 2015 00:00:27 GMT

Expires: Fri, 30 Jan 2015 00:01:46 GMT

Content-Length: 1677904

Connection: close
MZ......................@................................... .........
..!..L.!This program cannot be run in DOS mode....$........I...({..({.
.({..y...({.?....({..z...({..z...({..z...){."4u..({..P..j({..P...({..P
...({..P...({..P...({..(z.4*{..P...){..z...({..(...({..P...({.Rich.({.
........PE..L....1.T..........................%.@.8...%...8...@.......
...................0?.....y#........................................:.
......8..............r..P(............................................
8.H...........................................UPX0......%.............
................UPX1..........%.....................@....rsrc.........
8.....................@....opcandy......:.............................
......................................................................
......................................................................
......................................................................
......................................................................
.......3.00.UPX!.......p.....h8.;.....4.I..u...(.<.....n."....]..\.
\}<..w#._.........|..g.2H....FU.o,.....v...AT8-i5.'.......{j...hk{H
s...72.(....@.&.../.~5.h.L.Y.....V........ $8Z}9.4f.X..2.Q......fdi.|.
{l.O34n7...aN.......-..,J..]......pH..@g~.\e....P./.....1.....7...=.&.
e6.v]\b.(N>A.H..[....%r.g.....w.3.Z.........8.*.vd...U.zL.o.B......
...........3..)..b..'.....u.30.M..O.k.I.b?...w....g..E...f.......f.C5*
/....r.....oKYB.="...p....q._7q`.jW..A...q.`.~.fp.^u\..@.'.dC.....:..{
Al....q.r{...u.  Z.........w......6;......Q..........<.e'..I!..<<< skipped >>>

GET /langpacks/langpack-3227801ut.win.zip HTTP/1.1

Host: ll.download3.utorrent.com

User-Agent: BTWebClient/3100(26616)

Accept-Encoding: gzip

Connection: Close


HTTP/1.1 200 OK

Server: nginx/1.4.7

Content-Type: application/zip

Cache-Control: max-age=86400

Accept-Ranges: bytes

Age: 33650

Date: Thu, 29 Jan 2015 07:52:42 GMT

Last-Modified: Tue, 08 Jul 2014 18:47:58 GMT

Expires: Thu, 29 Jan 2015 22:31:52 GMT

Content-Length: 1341373

Connection: close
PK...........D.....j..........Ukrainian!uk.txt...rTW..._.z........_.[Q
eB.\.7.l$..e..)...C*S.....DH..8..CQR..1..]..8. ..JtIE........ .9..>
Wfb.j..q..B.\k...e.q..7...~.A._......s..~.?...o....vK.T.........F..^oo
..>.;&.&..........Wn.w.V.[. ..Cy.......}....~.y....k.dsM.@S\.t.>
.....?y.....Bm.\.....8W.N.\.\.R./......ZU\J.i.z..o...l.t.*f..Q..JWEm.P
..]:{V.W.W ..D|....|*..uQ,\KE...s3..|.......W....J:S/..E.R .b=.OG.DZ..
..........\..K#"W.....Wl1'.^...N.....5;..O...rY..J."7] \.....\)...SL.|
.2=...y1]._.......b.*.s%Q......W.Z.....Cr.*..T..J p.tyn.^K .DL..aC.Myc
Zro.....33)..u7....TvF......9..Rz...W..c...!?...j...(.\M..j.c....L.j5.
.D.!..~d..k...J....'g..VsW..EZ.. r.....[jK.'...?6..r.,.........S..n%B.
......(7...h?;Xio...........A.q..l../.jq.9.......-.q..3............./r
........[T.${.......s..j.....n...C..hB/Q>...a.f..m?.=...Z..........
.!G..J....7zp.ot.^Q......$.l.9...w.._.A........=..K.s..._.D.....!e.l..
K^.NSC........S((q...}....y.<RvGv....,o;. .......)n..Z.^Ep.^@.Z..=~
._.]......j.z.;L^$...#....VM........(...CK...=..'......!...0f.C..g....
..p.e.....8....'L..f9....`...6..[.Px,.2.....[zNa~.k.Y.....#!.~.F..xK`.
..w..0.0.p?<..Y$.......&^.....%....`...(..![......BS.V.....J.v.|,/.
W[g,.ryy6.7..c..B.\.NaS?..ih/ML..>4-.@.*y....o......>...a.zx.z.?
... ..........4F4?.t...d7....J.PM.d....bO....9..1S...\JA....;"..\.V..-
.z[........7`.a..........Q..0..}r......i<.`'...p8.3....w...'..OrR^.
,5p.[(.`.m.L..gl.t5.I..G.X.(.;.Ur:....m.O..a/..G.\..KH.2...<..g.X..
.gGN...M.BHNKC.!H..M. i.G.i.#x"....F.n@.H.k7.......4.......k.C...N<<< skipped >>>

GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBSpuCE3aK3GivZPzGQJ6L5BRyZofwQUl9BrqCZwyKE/lB8ILcQ1m6ShHvICEEES5jLHsYoCmjofrIA6uJ8= HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: ocsp.verisign.com


HTTP/1.1 200 OK

Server: nginx/1.4.7

Content-Type: application/ocsp-response

Content-Length: 1790

content-transfer-encoding: binary

Cache-Control: max-age=375268, public, no-transform, must-revalidate

Last-Modified: Mon, 26 Jan 2015 16:07:09 GMT

Expires: Mon, 2 Feb 2015 16:07:09 GMT

Date: Thu, 29 Jan 2015 07:56:31 GMT

Connection: keep-alive
0..........0..... .....0......0...0........6?s....V....OlL".O..2015012
6160709Z0s0q0I0... ..........!7h....O.d...AG&h.....k.&p..?...-.5......
.A..2.....:...:......20150126160709Z....20150202160709Z0...*.H........
.....YN....hk%......F..;&.j...q....O...Hs.Y.k.D......PnsK|....Z...!...
n..o...X.._.g.t%a...pgL7....^..W..6.M.WN.P.C...<......yQ.<.p....
$..R...?....R..aB....\..v.2A.Ha.c[..2.E......Qow....}.G......P|X.0j...
.......x.u.^e=/..p.G..... n..Z65....0..1....p...............#0...0...0
..........<o&S.-S..}...e.30...*.H........0..1.0...U....US1.0...U...
.VeriSign, Inc.1.0...U....VeriSign Trust Network1;09..U...2Terms of us
e at hXXps://VVV.verisign.com/rpa (c)09100...U...'VeriSign Class 3 Cod
e Signing 2009-2 CA0...141205000000Z..150305235959Z0..1.0...U....US1.0
...U....VeriSign, Inc.1.0...U....VeriSign Trust Network1;09..U...2Term
s of use at hXXps://VVV.verisign.com/rpa (c)091<0:..U...3VeriSign C
lass 3 Code Signing 2009-2 OCSP Responder0.."0...*.H.............0....
.....{(..t....2.Vf.....&;6).i*FK....W@....F....jnb.w._p.E.6.|.mk....(.
.........p...........X.DF....^0N....b9.:..J. ZK.".^..\..p.'.$..JA..~QG
.d.}...r...gv... f...z.#..}..J...r9h.........LI-..^.......PUD.h<.l.
...(n..i.....E.....2....^./Y......Y.m...'...hz..y..E..........0...0...
U....0.0....U. ...0..0....`.H...E....0..0(.. .........hXXps://VVV.veri
sign.com/CPS0b.. .......0V0...VeriSign, Inc.0.....=VeriSign's CPS inco
rp. by reference liab. ltd. (c)97 VeriSign0...U.%..0... .......0...U..
......0... .....0......0"..U....0...0.1.0...U....TGV-B-24710...*.H<<< skipped >>>

POST /e?i=38 HTTP/1.1

Host: bench.utorrent.com

User-Agent: BTWebClient/3420(37754)

Accept-Encoding: gzip

Connection: Close

Content-Length: 118

{"h":"uVVfIsRBsnvPyT6P","cl":"uTorrent","v":109417338,"l":"en","w":"6.1","cts":1422518040,"eventName":"Ads","FT":"on"}
HTTP/1.1 200 OK

Content-Type: text/html

Date: Thu, 29 Jan 2015 07:54:00 GMT

Server: nginx

X-Powered-By: PHP/5.4.30

Content-Length: 21

Connection: Close
{"response_code":200}..

GET /go/getskype-trackable550 HTTP/1.1

User-Agent: NSIS_Inetc (Mozilla)

Host: VVV.skype.com

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 302 Found

Date: Thu, 29 Jan 2015 07:53:51 GMT

Server: Apache

Location: hXXp://download.skype.com/0dce4e856bdf8239787df5c367298d54/partner/trackable/550/SkypeSetupFull.exe

Vary: User-Agent

X-Frame-Options: SAMEORIGIN

Cache-Control: max-age=0, private, no-store, no-cache, must-revalidate

Pragma: no-cache

Content-Length: 0

Keep-Alive: timeout=3

Connection: Keep-Alive

Content-Type: text/html; charset=utf-8

HTTP/1.1 302 Found..Date: Thu, 29 Jan 2015 07:53:51 GMT..Server: Apach
e..Location: hXXp://download.skype.com/0dce4e856bdf8239787df5c367298d5
4/partner/trackable/550/SkypeSetupFull.exe..Vary: User-Agent..X-Frame-
Options: SAMEORIGIN..Cache-Control: max-age=0, private, no-store, no-c
ache, must-revalidate..Pragma: no-cache..Content-Length: 0..Keep-Alive
: timeout=3..Connection: Keep-Alive..Content-Type: text/html; charset=
utf-8..

GET //MEIwQDA+MDwwOjAJBgUrDgMCGgUABBQdI2+OBkuXH93foRUj4a7lAr4rGwQUOpqFBxBnKLbv9r0FQW4gwZTaD94CAQc= HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: ocsp.godaddy.com


HTTP/1.1 200 OK

Date: Thu, 29 Jan 2015 07:52:36 GMT

Server: Apache

Content-Transfer-Encoding: Binary

Cache-Control: max-age=120327, public, no-transform, must-revalidate

Last-Modified: Thu, 29 Jan 2015 07:03:37 GMT

Expires: Fri, 30 Jan 2015 19:03:37 GMT

ETag: "b5e9a4cfee841e077cf76b8fd26b59985aedd992"

P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"

Content-Length: 1853

Connection: close

Content-Type: application/ocsp-response

0..9......20..... .....0......0...0..-...0..1.0...U....US1.0...U....Ar
izona1.0...U....Scottsdale1.0...U....GoDaddy.com, LLC1-0 ..U...$http:/
/certs.godaddy.com/repository/100...U...'Go Daddy Root Validation Auth
ority - G2..20150129070337Z0d0b0:0... .........#o..K......#..... ...:.
...g(.....An ............20150129070337Z....20150130190337Z0...*.H....
...........X......=.q7.....L.U..C...-.P..=#"r..6..;.......x.&X..j....&
lt;....pS.R".aU.......L.............>.L'moQ.f3.a......h.:n.......&N
.fWr.g........9.........X.....T.P....?57e.uke.....J.}...HV...._.'.N..P
..R.._'..1.{...W9.n..5..vXw..m..>y..k..XK.W.tY8..z..p.8G.@q......0.
..0...0...........0...*.H........0..1.0...U....US1.0...U....Arizona1.0
...U....Scottsdale1.0...U....GoDaddy.com, Inc.110/..U...(Go Daddy Root
 Certificate Authority - G20...140401070000Z..150401070000Z0..1.0...U.
...US1.0...U....Arizona1.0...U....Scottsdale1.0...U....GoDaddy.com, LL
C1-0 ..U...$hXXp://certs.godaddy.com/repository/100...U...'Go Daddy Ro
ot Validation Authority - G20.."0...*.H.............0...........~.....
...l&nbOp..|%..T8..v...p.........(..........|...L..d3z.......)..."y1U^
N.t...].a..v...d.$3H1T_.;.<~.*o...VWC....u.....{.7.8*Y...J.9.l.Ur..
2-.2.v....0E...d;cJ...5I..3.5.........R..^.c~O% ..)...P....H;.../.."c.
.{.VG...?...h...b3... i......-.B.Q%. ............0...0...U.......0.0..
.U...........0...U.%..0... ......... .......0...U.......v6Q.lE3c|l[.`.
.~.[.0...U.#..0...:....g(.....An .....0... .....0......05..U....0,0*.(
.&.$hXXp://crl.godaddy.com/gdroot-g2.crl0M..U. .F0D0B..`.H...m....

<<< skipped >>>

GET /utorrent-onboarding/welcome.btapp HTTP/1.1

Accept-Encoding: gzip

User-Agent: uTorrent/3100(26616)

Host: apps.bittorrent.com

Cache-Control: no-cache


HTTP/1.1 200 OK

x-amz-id-2: aezaFwYy1bjq8DhHpTe7Xh5riDKtW2Nny8L2oGe/sfJfrhUaBgQxMA33FSpX7y7syg3sljF7N5Y=

x-amz-request-id: BE0F985334FB4D79

Accept-Ranges: bytes

Content-Type: binary/octet-stream

Server: AmazonS3

Age: 188922

Date: Thu, 29 Jan 2015 07:52:33 GMT

Last-Modified: Tue, 08 Oct 2013 00:52:24 GMT

Content-Length: 27955

Connection: keep-alive
PK.........q.>.p..............btapp5.1.. ..{^...0N.Q.K.....b#a8.G..
..S.4....`...Af9@.e.....d.)#.....d..O.".9(.pr.c.d.f.Z;..|d>8...v.k.
.8.b....).[CLP.E.]y^..f..B..N.$p...i.........PK.........L|>...9....
........empty_movie.gifGIF89a.............!.......,...................
..........H...........L................L*......J......j............N..
...................(8HXhx..........)9IYiy..........*:JZjz.......... ;K
[k{..........,<L\l|..........-=M]m}...........>N^n~........../?O
_o..........0......<.0....1...;PK.........Y.>.Pi-....T.......ind
ex.html.W.n.6..?OqU.:.f).K.5........".....Z:Yt(R%)..0`......H....C....
..........oo?....V".8......$@..D@...@_\.e..L..I..b.*X.Yn....Z.'pc....Q
KnY..w.Q$.....D.....$...afL.vQc.X.... .9. .F....$...5......ym7eM......
.....6...M.<.(5..jn.LU...>6..K.z......r.V....i..............k...
.Jk...o....c.tN.....}.l*.m..}8....5V....>..-...Ff. .%.*.....#.c}.&g
t;^......~rn.$.A#s,..|@..}...*k*....k.n.f.s~8.N..Q..D.....@.bS3.......
.&... X.pYi...r.%B.&...v.`.._.....f.$f....1riQK.$-..-....k.2...).I....
..)a.......!9..6....g.b.......8.RT.Xg..0......1...yS.K.L.........._.._
<NV...9.$.. G'.ll.LB.v..n..&..=.=.*..I......._'`_..I.5..N.-e.~e...Q
L....'._#.g..pv.{.suOQ...lTh{. .8j.}<V..~r>..'......^....c_S.Iy.
.@..i.qx..SPhU.....y..Ry..c.A...]9].D......&.`c.P(....R#..nV.k.....q.d
....2.R.....w..L.LU....hU../.<....j.x.j...2..!.h....7.Y.).!F.......
v.v.....M5....y5iG..3....2(.e..<{E.....iqvN.&h...]..Oz...36sC....l'
..R...&.9...o4.|...`y.C.....K......k...e..._.c..d{.R.. ...c:...WI.<<< skipped >>>

GET /utorrent-onboarding/player.btapp?h=uVVfIsRBsnvPyT6P&v=109417338&ol=en&ul=&tk=stable34&c=uTorrent HTTP/1.1

Host: apps.bittorrent.com

User-Agent: BTWebClient/3420(37754)

Accept-Encoding: gzip

If-Modified-Since: Tue, 08 Oct 2013 00:53:35 GMT

Connection: Close


HTTP/1.1 304 Not Modified

Content-Type: binary/octet-stream

Age: 102167

Date: Thu, 29 Jan 2015 07:54:01 GMT

Connection: close

GET /utorrent-onboarding/welcome-upsell.btapp?h=uVVfIsRBsnvPyT6P&v=109417338&ol=en&ul=&tk=stable34&c=uTorrent HTTP/1.1

Host: apps.bittorrent.com

User-Agent: BTWebClient/3420(37754)

Accept-Encoding: gzip

If-Modified-Since: Tue, 08 Oct 2013 00:54:05 GMT

Connection: Close


HTTP/1.1 304 Not Modified

Content-Type: binary/octet-stream

Age: 189021

Date: Thu, 29 Jan 2015 07:54:01 GMT

Connection: close

GET /ados.js HTTP/1.1

Accept: */*

Referer: hXXp://cdn.bitmedianetwork.com/network/index.html?adt=5&browser=ie&clientdata=utorrent|3.4.2.37754|217&page=torrent&site=33049

Accept-Language: en-US

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/6.0)

Accept-Encoding: gzip, deflate

Host: static.ap.bittorrent.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Date: Thu, 29 Jan 2015 07:54:00 GMT

Content-Type: application/javascript

Transfer-Encoding: chunked

Connection: keep-alive

Set-Cookie: __cfduid=d614c7e13c587f911a3ebaf64ea99238c1422518040; expires=Fri, 29-Jan-16 07:54:00 GMT; path=/; domain=.bittorrent.com; HttpOnly

x-amz-id-2: YW0dKNIs6gu4cEjjIg1By4Qv1kI3/VaqeNYq4slo1iSw6 uAA4tqrIfNKEMkUjOpXZDxuHQrdXg=

x-amz-request-id: 0AC7C381FDA77959

x-amz-version-id: 9qThRlvpjh7OnqTS0mQqUT5ISgnVRwXu

Cache-Control: public, max-age=604800

Last-Modified: Tue, 27 Jan 2015 21:50:18 GMT

ETag: W/"8a1bd0dc12eef2b70395aae16973b6bd"

CF-Cache-Status: HIT

Expires: Thu, 05 Feb 2015 07:54:00 GMT

Server: cloudflare-nginx

CF-RAY: 1b03dbfa56310c29-AMS

Content-Encoding: gzip
1e6c.............=m{.6... .=w!.....i ...N..n.dcw..I.C....".......{... 
H.Js.........`^..`Hw..O4.<,hL.n.q6.Sz.q6 .n..N..;..Q......#B.!'.>
;}.............je..9.....,*...N.n..qZ.yJ......s.i?]..[..h6&...vf< 2
h...`....B.xw.0......YX.....nq..."L......#.}B._.......4...vv...a...,-.
].....d...v.....9.EO.F..yA..Ni..1.}t..<IV...g.........z..Y..0.w4J.*
.....-..`8..z=....y.y..#.....o{..|...}....|...v..1...N|.._.......p>
.c.=.C.x<......Q8./.........Z....o.;....?..I8.Y........;gx........a
!>..1..S.8.................8.: ..Y....YA]..t..i.;I..'iL.A.@j..,h^.1
GN.i.....$...!}.........A8RH..EA.8..9.....v.....;.e.....,...)24Cw...u.
.E....V^[p.... .i^p06.2Kb...._..?......,....,...._Xb... z3.EF4>y".F
. p..O4*.j.2..r.cL........q...N.&..4.....V.5 .K.....0.J.})pT8....T....
K...IY......../....D.$.Ie.BK..a...!0.\M.Y;@.?....B......"..p6Kn., ..NB
^r......U .._...wY.;`.....].N.9`..L.I...K.....x. ..9......#g0L.6...>
;e,u._6{mp.6.X..9}g.....=..p.........3mZ.:.<5.`..9....Y..ww...lt...
_I...k.tf...E.......O...w...[.V ....(.",U.....0.w.........[..W.w..d4..
n%.u...Z9}..Q].&u.....A.....6T;...e .R...0.r...9........p.R...P....SV 
....8.,..C...It....]0..l..h.p...av.[.....'.. .......5I.5y.y.].*;.[I...
8...8}!..WS.,.9mR..(.P.e.s.`..[|*...0.2Va...D..e{.*.k.EP......`..t.R..
.dp5....1MhAq....\F.P..n....r}...A....l.FK..D.w'../.!D.Jh 7..........#
.........-g.3v.C..?h.....8...~>..|..._.........w....!..o.....i...sz
?......p.s4...Q....O.#.N_......z.#.72..G...................O.]....N..n
;..YA.TLH.z.{...L.O..YNo."\..#l........y.z.....O.O.t.i..,}...O.l<<< skipped >>>

GET /Advertisers/34e5de599eb245f89dc65ea4e8e2c989.jpg HTTP/1.1

Accept: */*

Referer: hXXp://cdn.bitmedianetwork.com/network/index.html?adt=1224&browser=ie&clientdata=utorrent|3.4.2.37754|217&page=torrent&site=33049

Accept-Language: en-US

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/6.0)

Accept-Encoding: gzip, deflate

Host: static.ap.bittorrent.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Date: Thu, 29 Jan 2015 07:54:01 GMT

Content-Type: image/jpeg

Content-Length: 30346

Connection: keep-alive

Set-Cookie: __cfduid=d67da778ecc58daf9592214e8ea85dee91422518041; expires=Fri, 29-Jan-16 07:54:01 GMT; path=/; domain=.bittorrent.com; HttpOnly

x-amz-id-2: htpZ2l7zDIDR149eAvuvDbg6zaEhu2dQima3NP3Uo4yqJBbdVflwh0SNEXEk8/0CyZ s6q/jq k=

x-amz-request-id: 84E614F9B07F2AD1

x-amz-version-id: null

Expires: Fri, 29 Jan 2016 13:42:47 GMT

Cache-Control: public, max-age=31556926

Last-Modified: Thu, 04 Dec 2014 18:34:38 GMT

ETag: "d1d5f11990dbe93aa17a5840431123c9"

CF-Cache-Status: HIT

Accept-Ranges: bytes

Server: cloudflare-nginx

CF-RAY: 1b03dbfe06cd0c29-AMS
......Exif..II*.................Ducky.......Z......hXXp://ns.adobe.com
/xap/1.0/.<?xpacket begin="..." id="W5M0MpCehiHzreSzNTczkc9d"?> 
<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.5-c02
1 79.155772, 2014/01/13-19:44:00        "> <rdf:RDF xmlns:rdf="h
ttp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rd
f:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="
hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="hXXp://ns.a
dobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:5055326d-2031-4e4
5-9e19-3b09ec0d963c" xmpMM:DocumentID="xmp.did:C34027CF65BB11E49690C81
8C4211714" xmpMM:InstanceID="xmp.iid:C34027CE65BB11E49690C818C4211714"
 xmp:CreatorTool="Adobe Photoshop CC 2014 (Windows)"> <xmpMM:Der
ivedFrom stRef:instanceID="xmp.iid:0ab7774b-b5e7-9f41-a5f5-4877704b668
2" stRef:documentID="adobe:docid:photoshop:7d91dfff-64ed-11e4-bcc9-c31
43edeea63"/> </rdf:Description> </rdf:RDF> </x:xmpme
ta> <?xpacket end="r"?>...&Adobe.d................3..:<..S
n..v..................................................................
......................................................................
....."..............."................................................
..................................!12. .03..A"B4..#5@PCD&6............
............!1.A"..Qa2.q.B#3....Rbr.$4.5E.....Cs..6 ....D....Sc..t.0..
%u&F....................!1A.. .B.0.2@Qaq..."P.....3C..R...D.#.........
...........!1AQa..q........ 0@.................k..*..F.......:..*.<<< skipped >>>

GET /installstats.php?cl=uTorrent&v=109417338&h=uVVfIsRBsnvPyT6P&w=1DB10106&bu=0&pr=26616&cmp=217&ocmp=217&installresult&pid=2972&cau=1&installresult=0&exit=1&au=0&view=win32 HTTP/1.1

Accept-Encoding: gzip

User-Agent: uTorrent(37754)/3.4.2

Host: update.utorrent.li

Cache-Control: no-cache


HTTP/1.1 200 OK

Server: nginx/1.4.7

Date: Thu, 29 Jan 2015 07:53:50 GMT

Content-Type: text/html

Transfer-Encoding: chunked

Connection: close

X-Powered-By: PHP/5.4.30

0..

GET /favicon.ico HTTP/1.1

Host: VVV.bittorrent.com

User-Agent: BTWebClient/3420(37754)

Accept-Encoding: gzip

If-Modified-Since: Sun, 1 Jan 1982 00:00:00 GMT

Connection: Close


HTTP/1.1 404 Not Found

Server: nginx/1.4.7

Content-Type: text/html

Age: 3

Date: Thu, 29 Jan 2015 07:54:01 GMT

Expires: Thu, 29 Jan 2015 07:54:08 GMT

Content-Length: 168

Connection: close
<html>..<head><title>404 Not Found</title><
/head>..<body bgcolor="white">..<center><h1>404 N
ot Found</h1></center>..<hr><center>nginx/1.4.
7</center>..</body>..</html>....

POST /e?i=38 HTTP/1.1

Host: bench.utorrent.com

User-Agent: BTWebClient/3420(37754)

Accept-Encoding: gzip

Connection: Close

Content-Length: 120

{"h":"uVVfIsRBsnvPyT6P","cl":"uTorrent","v":109417338,"l":"en","w":"6.1","cts":1422518040,"eventName":"Ads","LRec":"on"}
HTTP/1.1 200 OK

Content-Type: text/html

Date: Thu, 29 Jan 2015 07:54:00 GMT

Server: nginx

X-Powered-By: PHP/5.4.30

Content-Length: 21

Connection: Close
{"response_code":200}..

GET /download/langpacks/dl.php?build=37754&ref=client&client=utorrent&sys_l=en&sel_l=-1&tk=stable34 HTTP/1.1

Host: VVV.utorrent.com

User-Agent: BTWebClient/3420(37754)

Accept-Encoding: gzip

Connection: Close


HTTP/1.1 301 Moved Permanently

Server: nginx/1.4.7

Date: Thu, 29 Jan 2015 07:54:00 GMT

Content-Type: text/html

Location: hXXp://VVV.utorrent.com/scripts/dl.php?build=37754&ref=client&client=utorrent&sys_l=en&sel_l=-1&tk=stable34

Content-Length: 184

Connection: close
<html>..<head><title>301 Moved Permanently</title
></head>..<body bgcolor="white">..<center><h1&
gt;301 Moved Permanently</h1></center>..<hr><cent
er>nginx/1.4.7</center>..</body>..</html>....

GET /?clientv=53&inst_id=&method=track_encapsulated_offer_installed&mstime=17.129&offer_id=7861&product_key=cb00343115ffdf69411419d8a9ceff1a&session_key=20bcba5375d77d545a33b67dd4cffcac&tm=2015-01-29 07:54:07.604&v=1.0&signature=07ef4bf0998e39efe6f0dfe0e701086a HTTP/1.1

Cache-Control: no-cache

Connection: Keep-Alive

Pragma: no-cache

Accept: */*

Host: api.opencandy.com


HTTP/1.1 200 OK

Date: Thu, 29 Jan 2015 07:54:07 GMT

Server: Apache

X-Robots-Tag: noindex

Last-Modified: Thu, 29 Jan 2015 07:54:07 GMT

Cache-Control: no-store, no-cache, must-revalidate

Cache-Control: post-check=0, pre-check=0

Pragma: no-cache

Connection: close

Transfer-Encoding: chunked

Content-Type: text/xml
64..<?xml version="1.0"?><track_offer_installed><operat
ion>Completed</operation></track_offer_installed>..0..

GET /utorrent-onboarding/plus.btapp?h=uVVfIsRBsnvPyT6P&v=102852600&ol=en&ul=&tk=main&c=uTorrent HTTP/1.1

Host: apps.bittorrent.com

User-Agent: BTWebClient/3100(26616)

Accept-Encoding: gzip

Connection: Close



local/img/basic/x.png.PNG........IHDR............._x.u....tEXtSoftware
.Adobe ImageReadyq.e<....IDATx...KHTQ.....h...4K.......d.....0.A.4.
D."X...(.\.. j....P[..!.$m...tb4..G...<N.o....;.....s.....|.9.hB..)
K.(...,..S.$....W...]....._.'.)NW..Q<.-.r..&.b}}.....yfeeYJJJ,....q
....i.O.dB..........D.!177g...I..L....%.v{L...f........C_...S{...%4n..
.....X"od...d....Z.{AA.X\\4.....".c..dkyy.....j....R....N.nppP.WTT$...
*d.E....e........3.Fb$.K@2;;.7................4..,.....~...>&. ....
l.|^.7*....,CCC.......O....] 6...=..p8....kll.....]-Hy..(.:........x1Q
.,....Q[.....{..H.7n......6.mii....U...!.JKK.2$.s...........".....W.$=
==.........."......ihh0d.I;........8e.. .......Nt..Qq.#...F.....[[[_Q_
l.I.y.....zDG.....)..D..........m)..[e....p...........[XX.}}}...;.....
.r!v{.../a..\.ijv....:......|..PVVV6....bl.......}.2..e.%..8.......t..
........`c~@.vP.....K...~..i....Lp.;...RUUU^YY....d.......&&&\..&...;.
........"..(.....Y,..g.$..0..v.zDB?.....pL'.%.~.`!...q.er.2yc.....si..
n3{....9.....P*{...4...'....g.c..O"..J.,]..).ES.]...Y..O.<!.A.{..I1
 {g..R$...3.,..rg...IS/:...F..0...tf].......IEND.B`.PK.........{.?.3@.
............local/img/bg.gif.TgX.P..[...j.ni.........:...m....$H.[q..{
oEq....{.JK).......}...G..}..{.{....*.. ...{..Y..T......:..nG.;.m..:.^
..W.R.....[=Y).tW.7..a.....y.^g...#.....3S.........3m^G......s._]..\..
OVV. .i...k..?@..Pb...C:...&.g.(|.....S.@@..........u.03..1....c42-..=
.bBM...g0.d.%h.$.1-......C P.ab.`(7.p5.$........0 F....D"...0.C..B.|D.
..(......(m4..T..b=9.c.#.A....x...FB.L&.r..|......f..t`Q.%Nk(.....<<< skipped >>>

GET /checkupdate.php?v=102852600&i=64&l=en&svp=4&svn_revno=26616&tk=main&sids=0,0,0,0,0&lv=0_0_&c=US&w=1DB10106&t=3&h=uVVfIsRBsnvPyT6P&mts=31&nat_state=255&sctl=1&shdi=1&at=-1&def_tor=1&w64=1&ie=9.10.9200.16521&hn=1&xim=3&xrsb=3&view=win32&plus=3&dul=5368709120&ssb=67&utpmtu=2,512&memstats=14897152,14&polena=0&peerpol_U=0,0 HTTP/1.1

Host: update.utorrent.com

User-Agent: BTWebClient/3100(26616)

Accept-Encoding: gzip

Connection: Close


HTTP/1.1 200 OK

Server: nginx/1.4.7

Date: Thu, 29 Jan 2015 07:52:35 GMT

Content-Type: text/html

Content-Length: 2056

Connection: close

X-Powered-By: PHP/5.4.30

Expires: Thu, 21 Jul 1980 00:00:00 GMT

Cache-Control: private

Last-Modified: Thu, 29 Jan 2015 07:52:35 GMT
d5:u.url128:hXXp://llsw.download3.utorrent.com/3.4.2/utorrent.37754.st
able34-OC_CC217.exe?au=1&hash=4cecde076e1a0d5ae95751f0e5e78ae21b7177d4
5:u.sizi1677904e5:u.veri109417338e5:u.sha20:L...n..Z.WQ......qw.5:u.si
g256:.....P......r.!...:8.................d...<d...w.Fz...iNm=.Z...
....C..O...7e7/3<km.K......J....%..'..,.F`.. .-V.X]Z.f...?....l..@.
M.Y$....F..0U#7.rD....}.pd..A`.....6..P..\..'..|@Dbx#...K0....<.`..
...l.0t....v<6.^.>=...........x l.:.........|8..H..e....w...5:l.
url69:hXXp://ll.download3.utorrent.com/langpacks/langpack-3227801ut.wi
n.zip5:l.sizi1341373e5:l.veri3227801e5:l.sha20:Ig.]...;C./(Jt.9fl= 5:l
.sig256:1!..%...h....K....7.x....7..@V9.X5~W...)|.8.0..>.9x..J.%...
*...x......9......}.......CY.......}@...L..c_.=....f`g...R......K.V8Z^
.B{4.......(hT.KIv.z....G.-..... . ....3eu...h.H...V..=...M_....FP.P..
)./.L.....yQ....3..>..>...d...a..ES..N...U..f..&a........5:u.msg
615:A new stable version of ..Torrent 3.4.2 (build 37754) is available
. Would you like to download and install it?..New in this version:..- 
Better UI Performance..- Stability improvements and various bug fixes.
.<a href="hXXp://forum.utorrent.com/topic/88607-340-stable/">Cli
ck here to view the complete list of changes in this release.</a>
;..By clicking "Yes", you acknowledge that you have read and agree to 
the <a href="hXXp://VVV.bittorrent.com/legal/eula">End User Lice
nse Agreement</a> and <a href="hXXp://VVV.bittorrent.com/lega
l/privacy">Privacy Policy</a>...This will also download t<<< skipped >>>

GET /pca3.crl HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: crl.verisign.com


HTTP/1.1 200 OK

Server: Apache

ETag: "66304c4a5660ab8615727e6bb27b3cdb:1418950819"

Last-Modified: Fri, 19 Dec 2014 01:00:19 GMT

Date: Thu, 29 Jan 2015 07:56:26 GMT

Content-Length: 933

Connection: keep-alive

Content-Type: application/pkix-crl

0...0...0...*.H........0_1.0...U....US1.0...U....VeriSign, Inc.1705..U
....Class 3 Public Primary Certification Authority..141210000000Z..150
331235959Z0..x0!...v....a_>..2......020924164823Z0!.....A.....{2..Y
.#..140129175709Z0!...,.|.|...<...j ...080605174907Z0!...`y..q.....
..fh...020923171400Z0!...?A....a.nF`.P....020923171548Z0!............R
.e.53..010207212458Z0!..!......Y...ISi....010706171411Z0!..$-..I{r....
u<._...080403172226Z0!..&.."?..y..51}..1..010706172118Z0!..4....2..
..{W......080605175030Z0!..B....c............070411175910Z0!..H.Py...N
....* ....010207212031Z0!..N....-.1Gq.@...C..040401175251Z0!..Y......w
`G........070411175657Z0!..Z`..H.@B....Z.*q..080403172017Z0!..l....I..
.Y..] .c..010706171749Z0"......T=deQ...1u.]...010207212247Z0".....p..1
..7<.....e..010207211822Z0...*.H............5..v...V.._)....A... ..
..>.5]....6.(.0uFW.*:T...6$.....R...Y.N.k........%Jn..I.j*.6.3~...r
../=l..?...9..V0..@Tk......fn?....0.A.HTTP/1.1 200 OK..Server: Apache.
.ETag: "66304c4a5660ab8615727e6bb27b3cdb:1418950819"..Last-Modified: F
ri, 19 Dec 2014 01:00:19 GMT..Date: Thu, 29 Jan 2015 07:56:26 GMT..Con
tent-Length: 933..Connection: keep-alive..Content-Type: application/pk
ix-crl..0...0...0...*.H........0_1.0...U....US1.0...U....VeriSign, Inc
.1705..U....Class 3 Public Primary Certification Authority..1412100000
00Z..150331235959Z0..x0!...v....a_>..2......020924164823Z0!.....A..
...{2..Y.#..140129175709Z0!...,.|.|...<...j ...080605174907Z0!...`y
..q.......fh...020923171400Z0!...?A....a.nF`.P....020923171548Z0!.

<<< skipped >>>

GET /installstats.php?cl=uTorrent&v=109417338&h=uVVfIsRBsnvPyT6P&w=1DB10106&bu=0&pr=26616&cmp=217&ocmp=217&wizardcomplete&pid=2972&cau=1&view=win32 HTTP/1.1

Accept-Encoding: gzip

User-Agent: uTorrent(37754)/3.4.2

Host: update.utorrent.li

Cache-Control: no-cache


HTTP/1.1 200 OK

Server: nginx/1.4.7

Date: Thu, 29 Jan 2015 07:53:49 GMT

Content-Type: text/html

Transfer-Encoding: chunked

Connection: close

X-Powered-By: PHP/5.4.30

0..

GET /Advertisers/e68bceb105fd4a3d832d7a1ff6cec13a.jpg HTTP/1.1

Accept: */*

Referer: hXXp://cdn.bitmedianetwork.com/network/index-edge.html?tag=ant&adt=5&browser=ie&clientdata=utorrent|3.4.2.37754|217&page=torrent&site=33049

Accept-Language: en-US

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/6.0)

Accept-Encoding: gzip, deflate

Host: static.ap.bittorrent.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Date: Thu, 29 Jan 2015 07:56:01 GMT

Content-Type: image/jpeg

Content-Length: 125078

Connection: keep-alive

Set-Cookie: __cfduid=dc58e9a59d8db785af56293ba46bc29961422518161; expires=Fri, 29-Jan-16 07:56:01 GMT; path=/; domain=.bittorrent.com; HttpOnly

x-amz-id-2: V7AyPTJxvsZV7h38tL9 aRz6v45Z/aan4y2s9GCgj8Srt2XbBmnkd1AIoyxGlfxi

x-amz-request-id: 78CB61F7A1D28EE4

x-amz-version-id: null

Expires: Fri, 29 Jan 2016 13:44:47 GMT

Cache-Control: public, max-age=31556926

Last-Modified: Fri, 05 Dec 2014 02:22:36 GMT

ETag: "845837842f7dd8f39378db349a8335e2"

CF-Cache-Status: HIT

Accept-Ranges: bytes

Server: cloudflare-nginx

CF-RAY: 1b03deeb2f580737-AMS
......Exif..II*.................Ducky.......d.....ohXXp://ns.adobe.com
/xap/1.0/.<?xpacket begin="..." id="W5M0MpCehiHzreSzNTczkc9d"?> 
<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c01
1 66.145661, 2012/02/06-14:56:27        "> <rdf:RDF xmlns:rdf="h
ttp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rd
f:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="
hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="hXXp://ns.a
dobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:80C5AE9DEBDCE3118
A678B8EFB4A341A" xmpMM:DocumentID="xmp.did:097DD1EFDCFA11E38153D5B7A71
797B8" xmpMM:InstanceID="xmp.iid:097DD1EEDCFA11E38153D5B7A71797B8" xmp
:CreatorTool="Adobe Photoshop CS6 (Windows)"> <xmpMM:DerivedFrom
 stRef:instanceID="xmp.iid:80C5AE9DEBDCE3118A678B8EFB4A341A" stRef:doc
umentID="xmp.did:80C5AE9DEBDCE3118A678B8EFB4A341A"/> </rdf:Descr
iption> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?&g
t;...&Adobe.d...............@K......f.................................
......................................................................
............................................,.............D...........
......................................................................
...!."#...1. 023.PABC$DEH4'(&.........................!..1".AQ2#.aB.q.
R3$5....b....4%.6..r.CT.... 0..S.D...u.&.....s.dtE....................
...!.1AQ.aq"........2B...R#. .br3.......$C.D.0.cs.4...S.t.P`T.........
...........!1AQaq.......... 0P@..................o.ffff..3.yd1n.*/<<< skipped >>>

GET /MFUwUzBRME8wTTAJBgUrDgMCGgUABBS856ddZAq5lE7vDJmoUDW1u98SMAQU3WyAfLq1MhelhEFA8NIEZhMvqZACFH3grgP85kRknyWy3HvBBgwssPUi HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: vassg141.ocsp.omniroot.com


HTTP/1.1 200 OK

Server: nginx

Content-Type: application/ocsp-response

Content-Length: 1765

Last-Modified: Thu, 29 Jan 2015 07:46:29 GMT

ETag: "6633454246275902a537844600ba902e1d964642"

Cache-Control: public, no-transform, must-revalidate, max-age=339642

Expires: Mon, 02 Feb 2015 06:13:24 GMT

Date: Thu, 29 Jan 2015 07:52:42 GMT

Connection: keep-alive

0..........0..... .....0......0...0..........[us..Ni......f....2015012
9074629Z0w0u0M0... ...........]d...N....P5....0...l.|..2...A@...f./...
.}.....Dd.%..{...,.."....20150129074629Z....20150202074629Z0...*.H....
.........{.~.R._.g.`T.,....D.W.. "...Ta..*.e.....E......=......gfMbz.%
z.....S.f...zi..#..F...tbu....sb.@.:ynA~.|.......JN.H.~@......Y.8x....
.6. YNR.....@..u5.C...,'..N ..cs\..!..ws.a.}......mov..........A.7.f.X
...a....W.,.&|...6..E1rx......k\s.f..@...|~.......F.a.%....0...0...0..
.........=......Ri..\..(.{..0...*.H........0..1.0...U....NL1.0...U....
Amsterdam1%0#..U....Verizon Enterprise Solutions1.0...U....Cybertrust1
.0,..U...%Verizon Akamai SureServer CA G14-SHA10...140410115548Z..1504
10115548Z0..1.0...U....NL1.0...U....Amsterdam1%0#..U....Verizon Enterp
rise Solutions1.0...U....Cybertrust1806..U.../Verizon Akamai SureServe
r CA G14-SHA1 Responder0.."0...*.H.............0.........f..).1.......
......Z.45..l. IB..r`...f....h.....h..._i'...J....|.c....E.D0bg.b.v...
.......:Q....W._U.w..3....i...k........t.....m.CO$..j@.....>..Q.m..
....1/Z.r......L..a.n..;..KoIY.......fk{..c..d...IU.......zy.X...zp...
F.1..F......b...Z...=9.o...N.fL.%Z.........H0..D0... .....0......0L..U
. .E0C0A.. .....>..0402.. ........&hXXps://secure.omniroot.com/repo
sitory0~.. ........r0p06.. .....0..*hXXps://cacert.a.omniroot.com/vass
g141.crt06.. .....0..*hXXps://cacert.a.omniroot.com/vassg141.der0...U.
..........0...U.%..0... .......0...U.#..0....l.|..2...A@...f./..0...U.
.........[us..Ni......f..0...*.H.............Fk:..%..H.:.|P.;..-3.

<<< skipped >>>

POST /e?i=21 HTTP/1.1

Host: bench.utorrent.com

User-Agent: BTWebClient/3420(37754)

Accept-Encoding: gzip

Connection: Close

Content-Length: 251

{"h":"uVVfIsRBsnvPyT6P","cl":"uTorrent","v":109417338,"l":"en","w":"6.1","cts":1422517990,"eventName":"silent_autoupdate","status":"Manually ran target version outside of install dir", "action":"ManualTargetOutside", "g_version":109417338, "no_sau":0}
HTTP/1.1 200 OK

Content-Type: text/html

Date: Thu, 29 Jan 2015 07:52:51 GMT

Server: nginx

X-Powered-By: PHP/5.4.30

Content-Length: 21

Connection: Close
{"response_code":200}..

GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBS56bKHAoUD+Oyl+0LhPg9JxyQm4gQUf9Nlp8Ld7LvwMAnzQzn6Aq8zMTMCEFIA5aolVvwahu2WydRLM8c= HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: ocsp.verisign.com


HTTP/1.1 200 OK

Server: nginx/1.4.7

Content-Type: application/ocsp-response

Content-Length: 1762

content-transfer-encoding: binary

Cache-Control: max-age=440847, public, no-transform, must-revalidate

Last-Modified: Tue, 27 Jan 2015 10:17:02 GMT

Expires: Tue, 3 Feb 2015 10:17:02 GMT

Date: Thu, 29 Jan 2015 07:54:05 GMT

Connection: keep-alive

0..........0..... .....0......0...0......;O}a.!..u...au..eUNp..2015012
7101702Z0s0q0I0... ...................B.>.I.$&.....e......0..C9...3
13..R...%V.......K3.....20150127101702Z....20150203101702Z0...*.H.....
........A8~....@.........C..l..2....#:....U.^.....`.DE.....!F....7..u.
.Q.r...!R......?......ajn...k.....K.(..ZmP..QK@........W.R..HP........
F..,...]%..zA.<..I.....K.?...Y.`.....\............:B.\......d....R.
e|..t.~.$...>3./m>.@.....ZM{?.....N......%b.{UUb>.t.q..4/....
0...0...0...........2...'U.BM...g.B0...*.H........0..1.0...U....US1.0.
..U....VeriSign, Inc.1.0...U....VeriSign Trust Network1:08..U...1(c) 2
006 VeriSign, Inc. - For authorized use only1E0C..U...<VeriSign Cla
ss 3 Public Primary Certification Authority - G50...141202000000Z..151
216235959Z0..1.0...U....US1.0...U....Symantec Corporation1.0...U....Sy
mantec Trust Network1?0=..U...6Symantec Class 3 PCA - G5 OCSP Responde
r Certificate 30.."0...*.H.............0...............2&..PL...,..2..
..:..tH...`JG.%..*...s.c%...?t..J..0.q....~..k@X.l.i....0..kk..h.9"1.5
?..s.....3[...u......]...R0..Z}....l..I.Y.....j\H.q...#.uw.4qz.#.J....
.@2$"..$l.B.......D.ye..(..2.........@...... ...."... E..0M,..b{.^..s'
....f.6.pr4.J........'j..........0...0...U.......0.0l..U. .e0c0a..`.H.
..E....0R0&.. .........hXXp://VVV.symauth.com/cps0(.. .......0...http:
//VVV.symauth.com/rpa0...U.%..0... .......0...U...........0... .....0.
.....0!..U....0...0.1.0...U....TGV-B-2760...U......;O}a.!..u...au..eUN
p0...U.#..0.....e......0..C9...3130...*.H.............(.&..Dgr.Ve.

<<< skipped >>>

GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBTSqZMG5M8TA9rdzkbCnNwuMAd5VgQUz5mp6nsm9EvJjo/X8AUm7+PSp50CECAKfRxMDvODER0cHOAslgg= HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: ocsp.verisign.com



.:s..L....y.....u..n.)W......Y!....Q...,.i|.....:.Mu..DD1.........0...
0...U....0.0....U. ...0..0....`.H...E....0..0(.. .........hXXps://VVV.
verisign.com/CPS0b.. .......0V0...VeriSign, Inc.0.....=VeriSign's CPS 
incorp. by reference liab. ltd. (c)97 VeriSign0...U.%..0... .......0..
.U........0... .....0......0"..U....0...0.1.0...U....TGV-B-24600...*.H
..............pjd....VpE.6.tO..@.....7.=.. ...........hi.......>...
.Q.?c\.M{.PHFPO)D/R^...q:P@> ..Wq....>..@.?.2......Ya..k%L..`...
TmgI.2:xpy...mLr@D.....3..;/..8Sw.8.;r...7....F....K...g@..J..._.(....
q .'?.t....j....M...,Oj.;.6...0KRr}.v........{....].L....z..w.......

GET /scripts/dl.php?build=37754&ref=client&client=utorrent&sys_l=en&sel_l=-1&tk=stable34 HTTP/1.1

Host: VVV.utorrent.com

User-Agent: BTWebClient/3420(37754)

Accept-Encoding: gzip

Connection: Close


HTTP/1.1 200 OK

Server: nginx/1.4.7

Content-Type: application/x-utorrent-language

Content-Disposition: attachment; filename=utorrent.lng

Cache-Control: max-age=3600

Accept-Ranges: bytes

Age: 2327

Date: Thu, 29 Jan 2015 07:54:00 GMT

Last-Modified: Tue, 18 Nov 2014 11:06:43 GMT

Expires: Thu, 29 Jan 2015 08:15:13 GMT

Content-Length: 1337470

Connection: close
PK.........XrE.....j..........Ukrainian!uk.txt...rTW..._.z........_.[Q
eB.\.7.l$..e..)...C*S.....DH..8..CQR..1..]..8. ..JtIE........ .9..>
Wfb.j..q..B.\k...e.q..7...~.A._......s..~.?...o....vK.T.........F..^oo
..>.;&.&..........Wn.w.V.[. ..Cy.......}....~.y....k.dsM.@S\.t.>
.....?y.....Bm.\.....8W.N.\.\.R./......ZU\J.i.z..o...l.t.*f..Q..JWEm.P
..]:{V.W.W ..D|....|*..uQ,\KE...s3..|.......W....J:S/..E.R .b=.OG.DZ..
..........\..K#"W.....Wl1'.^...N.....5;..O...rY..J."7] \.....\)...SL.|
.2=...y1]._.......b.*.s%Q......W.Z.....Cr.*..T..J p.tyn.^K .DL..aC.Myc
Zro.....33)..u7....TvF......9..Rz...W..c...!?...j...(.\M..j.c....L.j5.
.D.!..~d..k...J....'g..VsW..EZ.. r.....[jK.'...?6..r.,.........S..n%B.
......(7...h?;Xio...........A.q..l../.jq.9.......-.q..3............./r
........[T.${.......s..j.....n...C..hB/Q>...a.f..m?.=...Z..........
.!G..J....7zp.ot.^Q......$.l.9...w.._.A........=..K.s..._.D.....!e.l..
K^.NSC........S((q...}....y.<RvGv....,o;. .......)n..Z.^Ep.^@.Z..=~
._.]......j.z.;L^$...#....VM........(...CK...=..'......!...0f.C..g....
..p.e.....8....'L..f9....`...6..[.Px,.2.....[zNa~.k.Y.....#!.~.F..xK`.
..w..0.0.p?<..Y$.......&^.....%....`...(..![......BS.V.....J.v.|,/.
W[g,.ryy6.7..c..B.\.NaS?..ih/ML..>4-.@.*y....o......>...a.zx.z.?
... ..........4F4?.t...d7....J.PM.d....bO....9..1S...\JA....;"..\.V..-
.z[........7`.a..........Q..0..}r......i<.`'...p8.3....w...'..OrR^.
,5p.[(.`.m.L..gl.t5.I..G.X.(.;.Ur:....m.O..a/..G.\..KH.2...<..g.X..
.gGN...M.BHNKC.!H..M. i.G.i.#x"....F.n@.H.k7.......4.......k.C...N<<< skipped >>>

GET /current/index.html HTTP/1.1

Accept: application/x-ms-application, image/jpeg, application/xaml xml, image/gif, image/pjpeg, application/x-ms-xbap, */*

Accept-Language: en-US

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)

Accept-Encoding: gzip, deflate

Host: bundles.bittorrent.com

Connection: Keep-Alive


HTTP/1.1 301 Moved Permanently

Server: CloudFront

Date: Thu, 29 Jan 2015 07:52:35 GMT

Content-Type: text/html

Content-Length: 183

Connection: keep-alive

Location: hXXps://bundles.bittorrent.com/current/index.html

X-Cache: Redirect from cloudfront

Via: 1.1 7922e01ab53e8f36477272573223ab35.cloudfront.net (CloudFront)

X-Amz-Cf-Id: 2q9fOP9p-t7pDkttFV-Gv4xHjEHAAkPmUgJspM6kRoM8sxBTPVqJ6Q==
<html>..<head><title>301 Moved Permanently</title
></head>..<body bgcolor="white">..<center><h1&
gt;301 Moved Permanently</h1></center>..<hr><cent
er>CloudFront</center>..</body>..</html>..HTTP/1.
1 301 Moved Permanently..Server: CloudFront..Date: Thu, 29 Jan 2015 07
:52:35 GMT..Content-Type: text/html..Content-Length: 183..Connection: 
keep-alive..Location: hXXps://bundles.bittorrent.com/current/index.htm
l..X-Cache: Redirect from cloudfront..Via: 1.1 7922e01ab53e8f364772725
73223ab35.cloudfront.net (CloudFront)..X-Amz-Cf-Id: 2q9fOP9p-t7pDkttFV
-Gv4xHjEHAAkPmUgJspM6kRoM8sxBTPVqJ6Q==..<html>..<head><
title>301 Moved Permanently</title></head>..<body bg
color="white">..<center><h1>301 Moved Permanently</h
1></center>..<hr><center>CloudFront</center>
;..</body>..</html>....

GET /utorrent-onboarding/welcome.btapp?h=uVVfIsRBsnvPyT6P&v=109417338&ol=en&ul=&tk=stable34&c=uTorrent HTTP/1.1

Host: apps.bittorrent.com

User-Agent: BTWebClient/3420(37754)

Accept-Encoding: gzip

If-Modified-Since: Tue, 08 Oct 2013 00:52:24 GMT

Connection: Close


HTTP/1.1 304 Not Modified

Content-Type: binary/octet-stream

Age: 189009

Date: Thu, 29 Jan 2015 07:54:00 GMT

Connection: close

GET /ThawtePremiumServerCA.crl HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: crl.thawte.com


HTTP/1.1 200 OK

Server: Apache

ETag: "39808ea12d05cd56b1932fd04ab6da2a:1422480042"

Last-Modified: Wed, 28 Jan 2015 21:20:42 GMT

Date: Thu, 29 Jan 2015 07:52:43 GMT

Content-Length: 12067

Connection: keep-alive

Content-Type: application/pkix-crl

0./.0...0...*.H........0..1.0...U....ZA1.0...U....Western Cape1.0...U.
...Cape Town1.0...U....Thawte Consulting cc1(0&..U....Certification Se
rvices Division1!0...U....Thawte Premium Server CA1(0&..*.H........pre
mium-server@thawte.com..150128210056Z..150207210056Z0.-.0!....f....p..
........100129104213Z0!....l.C`..L.%|\.T...130819183955Z0!....T..W...p
.[..%...100322161038Z0!....hx.....k...7....130919164724Z0!....$#.R|..$
.....j..130926101045Z0!...!P..6{.lS.@...5..130927150657Z0!...Da\v.....
.....%..130920062728Z0!...>.e..-...s[.2I...140418142220Z0!....dU...
(...=...*..140801114607Z0!........d.{#E..9`...130926061856Z0!....6..q.
'tT..1.Q...130926062249Z0!.....cXzF..(O0.|.N..131002103626Z0!.........
...>..i....130528164218Z0!..........#.P.......130716072254Z0!.....W
........JH....130924125316Z0!.....%.......R......100801221434Z0!.....M
..HK.....x....130926060355Z0!....k."..z......64..130919082450Z0!...N..
D...0....`H2..130829152308Z0!......Q..m...A..j...100226190909Z0!.....-
...k......h...130930085951Z0!...... ...7. .UA.I..130927152007Z0!.....}
.L....\/..$^..100407191443Z0!....1....c...s.>9t..100215170304Z0!...
W..._....%..I....130926063253Z0!..._._~gq.I.)q6@g...131025034600Z0!...
..=X>...]..h5@...130920130332Z0!.............U.<....100318180248
Z0!... .(........n.S...130923202627Z0!.....k(....k4.......130919073042
Z0!....rF..O..#^.......100312081338Z0!.....:...B..=]Hsx_..130920011556
Z0!....uJdm..'...\G....130523054519Z0!....]h..g.o....@\ ..100107184454
Z0!...z..1).Ht.........100323155426Z0!.... ....z.i.a.nl...10031221

<<< skipped >>>

GET /updatestats.php?cl=uTorrent&v=109417338&h=uVVfIsRBsnvPyT6P&k=&ip=8&con=31&dl=203&error=&dlurl=http://llsw.download3.utorrent.com/offers/spigot-yandex-en-20140708.exe&svp=4&pid=2972&sz=157480&bin=<NULL>toolbar&p1=192.168.139.2&m1=0&p2=192.168.50.10&m2=0&p3=193.138.244.233&m3=0&p4=193.138.244.106&m4=1&p5=46.164.136.181&m5=1&p6=80.91.160.129&m6=9&p7=195.22.214.108&m7=37&p8=89.221.34.75&m8=38&p9=89.221.34.181&m9=40&p10=87.248.216.137&m10=38&p11=87.248.217.254&m11=38 HTTP/1.1

Host: update.utorrent.li

User-Agent: BTWebClient/3420(37754)

Accept-Encoding: gzip

Connection: Close


HTTP/1.1 200 OK

Server: nginx/1.4.7

Date: Thu, 29 Jan 2015 07:53:51 GMT

Content-Type: text/html

Transfer-Encoding: chunked

Connection: close

X-Powered-By: PHP/5.4.30

Expires: Thu, 21 Jul 1980 00:00:00 GMT

Cache-Control: no-store, no-cache, must-revalidate, private

Pragma: no-cache

0..

GET /utorrent-onboarding/welcome.btapp?h=uVVfIsRBsnvPyT6P&v=102852600&ol=en&ul=&tk=main&c=uTorrent HTTP/1.1

Host: apps.bittorrent.com

User-Agent: BTWebClient/3100(26616)

Accept-Encoding: gzip

Connection: Close


HTTP/1.1 200 OK

x-amz-id-2: aezaFwYy1bjq8DhHpTe7Xh5riDKtW2Nny8L2oGe/sfJfrhUaBgQxMA33FSpX7y7syg3sljF7N5Y=

x-amz-request-id: BE0F985334FB4D79

Accept-Ranges: bytes

Content-Type: binary/octet-stream

Server: AmazonS3

Age: 188924

Date: Thu, 29 Jan 2015 07:52:35 GMT

Last-Modified: Tue, 08 Oct 2013 00:52:24 GMT

Content-Length: 27955

Connection: close
PK.........q.>.p..............btapp5.1.. ..{^...0N.Q.K.....b#a8.G..
..S.4....`...Af9@.e.....d.)#.....d..O.".9(.pr.c.d.f.Z;..|d>8...v.k.
.8.b....).[CLP.E.]y^..f..B..N.$p...i.........PK.........L|>...9....
........empty_movie.gifGIF89a.............!.......,...................
..........H...........L................L*......J......j............N..
...................(8HXhx..........)9IYiy..........*:JZjz.......... ;K
[k{..........,<L\l|..........-=M]m}...........>N^n~........../?O
_o..........0......<.0....1...;PK.........Y.>.Pi-....T.......ind
ex.html.W.n.6..?OqU.:.f).K.5........".....Z:Yt(R%)..0`......H....C....
..........oo?....V".8......$@..D@...@_\.e..L..I..b.*X.Yn....Z.'pc....Q
KnY..w.Q$.....D.....$...afL.vQc.X.... .9. .F....$...5......ym7eM......
.....6...M.<.(5..jn.LU...>6..K.z......r.V....i..............k...
.Jk...o....c.tN.....}.l*.m..}8....5V....>..-...Ff. .%.*.....#.c}.&g
t;^......~rn.$.A#s,..|@..}...*k*....k.n.f.s~8.N..Q..D.....@.bS3.......
.&... X.pYi...r.%B.&...v.`.._.....f.$f....1riQK.$-..-....k.2...).I....
..)a.......!9..6....g.b.......8.RT.Xg..0......1...yS.K.L.........._.._
<NV...9.$.. G'.ll.LB.v..n..&..=.=.*..I......._'`_..I.5..N.-e.~e...Q
L....'._#.g..pv.{.suOQ...lTh{. .8j.}<V..~r>..'......^....c_S.Iy.
.@..i.qx..SPhU.....y..Ry..c.A...]9].D......&.`c.P(....R#..nV.k.....q.d
....2.R.....w..L.LU....hU../.<....j.x.j...2..!.h....7.Y.).!F.......
v.v.....M5....y5iG..3....2(.e..<{E.....iqvN.&h...]..Oz...36sC....l'
..R...&.9...o4.|...`y.C.....K......k...e..._.c..d{.R.. ...c:...WI.<<< skipped >>>

GET /installstats.php?v=102852600&h=uVVfIm5t2vDPyT6P&w=1DB10106&bu=1&pr=0&cmp=0&installresult&installresult=30079&exit=1374&view=win32 HTTP/1.1

Accept-Encoding: gzip

User-Agent: uTorrent/3100(26616)

Host: update.utorrent.com

Cache-Control: no-cache


HTTP/1.1 200 OK

Server: nginx/1.4.7

Date: Thu, 29 Jan 2015 07:52:34 GMT

Content-Type: text/html

Transfer-Encoding: chunked

Connection: close

X-Powered-By: PHP/5.4.30

0..

GET /installoffer.php?h=uVVfIm5t2vDPyT6P&v=102852600&w=1DB10106&l=en&c=US&w64=1&db=iexplore.exe&cl=uTorrent&svp=4 HTTP/1.1

Accept-Encoding: gzip

User-Agent: uTorrent/3100(26616)

Host: update.utorrent.com

Cache-Control: no-cache


HTTP/1.1 200 OK

Server: nginx/1.4.7

Date: Thu, 29 Jan 2015 07:51:31 GMT

Content-Type: text/html

Transfer-Encoding: chunked

Connection: close

X-Powered-By: PHP/5.4.30

Expires: Thu, 21 Jul 1980 00:00:00 GMT

Cache-Control: private

Last-Modified: Thu, 29 Jan 2015 07:51:31 GMT

3fb..d16:secondary_offersl2:oc3:adke2:oci1e3:adki1e16:content_offer_id
7:LowTemp17:content_offer_img26:LowTempRec_InstallPath.bmp17:content_o
ffer_url113:hXXp://apps.bittorrent.com/featuredcontent/featuredcontent
.btapp?offer=hXXp://bundles.bittorrent.com/inclient/yes21:content_offe
r_alttext162:Download the free music Bundle from Gramatik and more..Yo
u Get:..Lowtemporary Volume 1 Compilation..10 Lowtemp Records albums..
Exclusive new singles and remixes22:content_offer_checkbox41:Yes, I'd 
love to check out this download!21:content_offer_checkedi1e22:content_
offer_autoexeci0e19:content_offer_title32:Check out our new Bundle Rel
ease22:content_offer_subtitle34:Special Offer for BitTorrent Users20:c
ontent_offer_footer248:By clicking "Next" and installing this torrent 
bundle, you agree to the BitTorrent, Inc. <a href="hXXps://bundles.
bittorrent.com/btfaq#terms-of-services">Terms of Service</a> 
and <a href="hXXp://VVV.bittorrent.com/legal/privacy">Privacy Po
licy</a>.13:toolbar_counti0e4:ctid0:2:tsi1422517891e1:c2:uae..0.
.

GET /e?i=1005&e=eyJldmVudE5hbWUiOiJhcC5hZHRhZyIsImFjdGlvbiI6ImxvYWRlZCIsImFkdCI6IjEyMjQiLCJicm93c2VyIjoiaWUiLCJjbGllbnRkYXRhIjoidXRvcnJlbnQlN2MzJTJlNCUyZTIlMmUzNzc1NCU3YzIxNyIsInBhZ2UiOiJ0b3JyZW50Iiwic2l0ZSI6IjMzMDQ5In0=&callback=jQuery111206608094501731674_1422518040820&_=1422518040821 HTTP/1.1

Accept: */*

Referer: hXXp://cdn.bitmedianetwork.com/network/index.html?adt=1224&browser=ie&clientdata=utorrent|3.4.2.37754|217&page=torrent&site=33049

Accept-Language: en-US

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/6.0)

Accept-Encoding: gzip, deflate

Host: bench.staging.utorrent.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Content-Type: text/html

Date: Thu, 29 Jan 2015 07:54:01 GMT

Server: nginx

X-Powered-By: PHP/5.4.30

Content-Length: 64

Connection: keep-alive

jQuery111206608094501731674_1422518040820({"response_code":200})HTTP/1
.1 200 OK..Content-Type: text/html..Date: Thu, 29 Jan 2015 07:54:01 GM
T..Server: nginx..X-Powered-By: PHP/5.4.30..Content-Length: 64..Connec
tion: keep-alive..jQuery111206608094501731674_1422518040820({"response
_code":200})..

POST /e?i=29 HTTP/1.1

Host: bench.utorrent.com

User-Agent: BTWebClient/3420(37754)

Accept-Encoding: gzip

Connection: Close

Content-Length: 149

{"h":"uVVfIsRBsnvPyT6P","cl":"uTorrent","v":109417338,"l":"en","w":"6.1","cts":1422518040,"eventName":"cfu","action":"uTorrent.3.4.02.1.37754","i":0}
HTTP/1.1 200 OK

Content-Type: text/html

Date: Thu, 29 Jan 2015 07:54:00 GMT

Server: nginx

X-Powered-By: PHP/5.4.30

Content-Length: 21

Connection: Close
{"response_code":200}..

POST /e?i=21 HTTP/1.1

Host: bench.utorrent.com

User-Agent: BTWebClient/3420(37754)

Accept-Encoding: gzip

Connection: Close

Content-Length: 246

{"h":"uVVfIsRBsnvPyT6P","cl":"uTorrent","v":109417338,"l":"en","w":"6.1","cts":1422517990,"eventName":"silent_autoupdate","launched_target":0,"updated":0,"relocated":0,"versions": [], "action":"RunningElevated", "g_version":109417338, "no_sau":0}
HTTP/1.1 200 OK

Content-Type: text/html

Date: Thu, 29 Jan 2015 07:52:51 GMT

Server: nginx

X-Powered-By: PHP/5.4.30

Content-Length: 21

Connection: Close
{"response_code":200}..

GET /installstats.php?v=102852600&h=uVVfIm5t2vDPyT6P&w=1DB10106&bu=0&pr=0&cmp=0&showwarning&view=win32 HTTP/1.1

Accept-Encoding: gzip

User-Agent: uTorrent/3100(26616)

Host: update.utorrent.com

Cache-Control: no-cache


HTTP/1.1 200 OK

Server: nginx/1.4.7

Date: Thu, 29 Jan 2015 07:51:39 GMT

Content-Type: text/html

Transfer-Encoding: chunked

Connection: close

X-Powered-By: PHP/5.4.30

0..

GET /track/?data=eyJldmVudCI6ICJBcHBJbnN0YWxsSW5pdGlhdGVkIiwgInByb3BlcnRpZXMiOiB7ImRpc3RpbmN0X2lkIjoidVZWZklzUkJzbnZQeVQ2UCIsImgiOiJ1VlZmSXNSQnNudlB5VDZQIiwidiI6IjI2NjE2IiwiYyI6InV0IiwidG9rZW4iOiI5MDc5YmE5ZGRmNWZiM2E5NzE3YTUxMjAyNTE4NjYxMiIsInN2cCI6IjQiLCJ2aWV3Ijoid2luMzIiLCJidWNrZXQiOiJBcHAiLCJhcHBuYW1lIjoiQXBwIn19&ip=1 HTTP/1.1

X-ClientID: uVVfIsRBsnvPyT6P

User-Agent: uTorrent/3100(26616)

Host: yogi.apps.bittorrent.com

Cache-Control: no-cache


HTTP/1.1 200 OK

Content-Type: application/octet-stream

Date: Thu, 29 Jan 2015 07:52:35 GMT

Server: nginx/1.4.7

Content-Length: 0

Connection: keep-alive

....

GET /track/?data=eyJldmVudCI6ICJBcHBJbnZva2VkIiwgInByb3BlcnRpZXMiOiB7ImRpc3RpbmN0X2lkIjoidVZWZklzUkJzbnZQeVQ2UCIsImgiOiJ1VlZmSXNSQnNudlB5VDZQIiwidiI6IjI2NjE2IiwiYyI6InV0IiwidG9rZW4iOiI5MDc5YmE5ZGRmNWZiM2E5NzE3YTUxMjAyNTE4NjYxMiIsInN2cCI6IjQiLCJ2aWV3Ijoid2luMzIiLCJidWNrZXQiOiJGZWF0dXJlZCBDb250ZW50IiwiYXBwbmFtZSI6IkZlYXR1cmVkIENvbnRlbnQifX0=&ip=1 HTTP/1.1

X-ClientID: uVVfIsRBsnvPyT6P

User-Agent: uTorrent/3100(26616)

Host: yogi.apps.bittorrent.com

Cache-Control: no-cache


HTTP/1.1 200 OK

Content-Type: application/octet-stream

Date: Thu, 29 Jan 2015 07:52:35 GMT

Server: nginx/1.4.7

Content-Length: 0

Connection: keep-alive

HTTP/1.1 200 OK..Content-Type: application/octet-stream..Date: Thu, 29
 Jan 2015 07:52:35 GMT..Server: nginx/1.4.7..Content-Length: 0..Connec
tion: keep-alive..

The Trojan connects to the servers at the folowing location(s):

IEXPLORE.EXE_1872:

.text

`.data

.idata

.rsrc

@.reloc

u\j.Xf9

j.Xf9

USER32.dll

api-ms-win-downlevel-shell32-l1-1-0.dll

IEFRAME.dll

SHELL32.dll

iexplore.pdb

api-ms-win-downlevel-shlwapi-l1-1-0.dll

iertutil.dll

api-ms-win-downlevel-advapi32-l1-1-0.dll

KERNEL32.dll

msvcrt.dll

_wcmdln

_amsg_exit

RegOpenKeyExW

RegCloseKey

<!-- Note: This manifest needs to be kept in sync with iexplore.exe.manifest -->

<assemblyIdentity version="5.1.0.0"

name="Microsoft.InternetExplorer"

<windowsSettings>

<dpiAware xmlns="hXXp://schemas.microsoft.com/SMI/2005/WindowsSettings">true</dpiAware>

</windowsSettings>

<!--The ID below indicates application support for Windows 8 -->

<supportedOS Id="{4a2f28e3-53b9-4441-ba9c-d69d4a4a6e38}"/>

KEYW

.ENNNG.

a.ry.v

l.igM4

?1%SGf

xh.JW^

.97777"7" " " !

3.... ))

8888888888888

8888888888

.lPV)

úW1

.ApX/

H.ZAf

ð[U

%s!FK

1YYYY1YY9GEAA=77YRNNNW:.VT1

888777777

Y.hilkRROMLK=C,

..(((($$

3...((((%

3....(.''$

3.2...((((%

33.2....(,'

55323222...

(%&'00443445?

00.,,,4(

000.,,9(

0020..9(

003200;(

(#'( (''''!'!

Microsoft.InternetExplorer.Default

Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\iexplore.exe

{28fb17e0-d393-439d-9a21-9474a070473a}

imm32.dll

Software\Microsoft\Active Setup\Installed Components\{89820200-ECBD-11cf-8B85-00AA005B4383}

Kernel32.dll

"%s" %s

kernel32.dll

IEXPLORE.EXE

{00000000-0000-0000-0000-000000000000}

\\?\Volume

Imaging_CreateWebPagePreview_Perftrack

Browseui_Tabs_Tearoff_BetweenWindows

Browseui_Tabs_Tearoff_BetweenWindows_TabProc

Frame_URLEntered

Imaging_CreateWebPagePreview

WS_ExecuteQuery

Shdocvw_BaseBrowser_FireEvent_WindowStateChanged

IdleTask_Execution_Time

Shdocvw_BaseBrowser_FireEvent_BeforeScriptExecute

IMTravelLogMVC_TravelURL

10.00.9200.16521 (win8_gdr_soc_ie.130216-2100)

Windows

10.00.9200.16521

IEXPLORE.EXE_2332:

.text

`.data

.idata

.rsrc

@.reloc

u\j.Xf9

j.Xf9

USER32.dll

api-ms-win-downlevel-shell32-l1-1-0.dll

IEFRAME.dll

SHELL32.dll

iexplore.pdb

api-ms-win-downlevel-shlwapi-l1-1-0.dll

iertutil.dll

api-ms-win-downlevel-advapi32-l1-1-0.dll

KERNEL32.dll

msvcrt.dll

_wcmdln

_amsg_exit

RegOpenKeyExW

RegCloseKey

<!-- Note: This manifest needs to be kept in sync with iexplore.exe.manifest -->

<assemblyIdentity version="5.1.0.0"

name="Microsoft.InternetExplorer"

<windowsSettings>

<dpiAware xmlns="hXXp://schemas.microsoft.com/SMI/2005/WindowsSettings">true</dpiAware>

</windowsSettings>

<!--The ID below indicates application support for Windows 8 -->

<supportedOS Id="{4a2f28e3-53b9-4441-ba9c-d69d4a4a6e38}"/>

KEYW

.ENNNG.

a.ry.v

l.igM4

?1%SGf

xh.JW^

.97777"7" " " !

3.... ))

8888888888888

8888888888

.lPV)

úW1

.ApX/

H.ZAf

ð[U

%s!FK

1YYYY1YY9GEAA=77YRNNNW:.VT1

888777777

Y.hilkRROMLK=C,

..(((($$

3...((((%

3....(.''$

3.2...((((%

33.2....(,'

55323222...

(%&'00443445?

00.,,,4(

000.,,9(

0020..9(

003200;(

(#'( (''''!'!

Microsoft.InternetExplorer.Default

Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\iexplore.exe

{28fb17e0-d393-439d-9a21-9474a070473a}

imm32.dll

Software\Microsoft\Active Setup\Installed Components\{89820200-ECBD-11cf-8B85-00AA005B4383}

Kernel32.dll

"%s" %s

kernel32.dll

IEXPLORE.EXE

{00000000-0000-0000-0000-000000000000}

\\?\Volume

Imaging_CreateWebPagePreview_Perftrack

Browseui_Tabs_Tearoff_BetweenWindows

Browseui_Tabs_Tearoff_BetweenWindows_TabProc

Frame_URLEntered

Imaging_CreateWebPagePreview

WS_ExecuteQuery

Shdocvw_BaseBrowser_FireEvent_WindowStateChanged

IdleTask_Execution_Time

Shdocvw_BaseBrowser_FireEvent_BeforeScriptExecute

IMTravelLogMVC_TravelURL

10.00.9200.16521 (win8_gdr_soc_ie.130216-2100)

Windows

10.00.9200.16521

uTorrent.exe_2888_rwx_00401000_00387000:

t.Wj _ |$

SSSSh

tgf9.tb

SShLU^

SShlU^

SSSSShDV^

SShhl^

D$ SSh

D$0SShhl^

u.Whtj^

D$<SShXt^

SShXt^

YSShXF^

FH<.tP<[tL<\tH<*tD<|t@<^t<<$t8

j.Xf;

PSSh$

uùA

UDP0u

HTTPu

SSSh`{i

9HTTPu#f

PSSSSSSh

t.Ht$

>HTTPu

D$0PSSh

L$.QP

Zu.Vj<j

tFj.Zf;

D$LSSh

SSh,z_

(9;t%S

%uoSh

<. UDPu

<. TCPuS

keyA

keyB

SSSSSSSSh

SShLW`

l$ j%X

Bj%Xf9CH

>httpum

SSSSSSSh

t$|hH%c

Uhx%c

?httpu

L$(SSh

Ph0%c

PSSh0]c

D$()D$0SSh

Cj.Xf9D$`u

FHSSh

F\ FTP

F| FtP

F| FtPWWW

j.Yf;

_tcPVj@

.PjRW

L$$SShX5e

Error downloading file. Msg: %s.

Error downloading file. Msg: Empty download.

Error downloading file. Msg: Could not save downloaded file.

autoexecutestart

mismexecute

kernel32.dll

hXXp://utclient.utorrent.com/pro/utorrent/index.html

hXXps://activate.utorrent.com

hXXp://events.bittorrent.com/startConversion

hXXp://cdn.ap.bittorrent.com/control/tags/bt.json

hXXp://cdn.ap.bittorrent.com/control/tags/ut.json

hXXp://cdn.ap.bittorrent.com/control/tags/staging_bt.json

hXXp://cdn.ap.bittorrent.com/control/tags/staging_ut.json

hXXp://apps.bittorrent.com/conduit/eula/ByChoosingToInstall.html

%u %d %S

CollectToolbarPreferences: _ACTIVE_BROWSER: %S

provider:%S,search:%d,homepage:%d

mism execute succeeded

CollectToolbarPreferences: mism execute succeeded

CollectToolbarPreferences: mism execute FAILED

toolbar%d

hXXp://update.utorrent.com/uninstall?type=%s-%U&h=%s&v=%d

content_offer_url

attempted_to_receive_server_search_url

"elevated":%d, "message":"%S", "error_code":%d

hXXp://VVV.utorrent.com

IsYandexInstalled %s

GetConduitInstalledState: Found key: HKEY_LOCAL_MACHINE %S

GetConduitInstalledState: HKEY_LOCAL_MACHINE %S = %d

GetConduitInstalledState: Found key: HKEY_CLASSES_ROOT %S

GetConduitInstalledState: installed=%d visible=%d enabled=%d

IsConduitInstalled: %d

GetToolbarDict: %s, id: %s

GetToolbarDict: count=%d

GetToolbarDict: Found %s in '%s' key

GetToolbarDict: DID NOT find %s in '%s' key

ask-surf-firefox

ask-surf-chrome

ask-firefox

ask-chrome

IsConduitToolbarOffer %s

checkboxes: %s

TBDownloadCallback err: %s size: %I64d

TBDownloadCallback write FAILED: %S

TBDownloadCallback write OK: %S

Using default offer? [%S]

passed_hash_check? %s

base_parameter: [%S]

chrome_param

TBDownloadCallback: flag: %s

toolbar commandline: %s

TBDownloadCallback: RAN %S %S RETURN: %d

offer_urls

WhichConduitSettingsAreActive: %s

ShowYandexOffer: %d

ShowYandexSearchOffer: %d

ShowConduitBing: %d

ShowConduitGoogle: %d

image_url

&bin=%stoolbar

TBRequestThread Parsed OK?: %s

TBRequestThread FAILED. err: %S

content_offer_autoexec

offer_retrieved: %s

empty_offer: %s

default_offer: %s

showToolbar: %s

onOfferDownload: Using default offer. g_is_default_offer: %s

onOfferDownload: %s

eula_url

hXXp://%%s/offers/%s

hXXp://update.utorrent.com/installoffer.php

RetrieveOffer browser %S

db=%U

cl=%s

tsub=%d

RetrieveOffer %s

The source code, design, and structure of the Software are trade secrets. You will not disassemble, decompile, or reverse engineer itor otherwise attempt to discover the source code of the Software, in whole or in part, except to the extent expressly permitted by law, or distribute it. You will not use the Software for illegal purposes. You will comply with all export laws. The Software is licensed, not sold.

The Software accelerates downloads by enabling your computer to grab pieces of files from other BitTorrent users simultaneously. Your use of the Software to download files will, in turn, enable other users to download pieces of those files from you, thereby maximizing download speeds for all users. In the Software, only files that you are explicitly downloading or sharing or have downloaded or shared through BitTorrent will be made available to others. You consent to other users' use of your network connection to download portions of such files from you. At any time, you may uninstall the Software through the Add/Remove Programs control panel utility. In addition, for the BitTorrent or

BitTorrent, Inc. disclaims any responsibility for harm resulting from the Software or any software or content downloaded using the Software, whether or not BitTorrent, Inc. approved such software or content. BitTorrent, Inc. approval does not guarantee that software or content from an approved partner will function, sound, or appear as offered or hoped, or be complete, accurate, or free from bugs, errors, viruses, or other harmful content. BitTorrent, Inc. expressly disclaims all warranties and conditions, express or implied, including any implied warranties and conditions of merchantability, fitness for a particular purpose, and noninfringement, and any warranties and conditions arising out of course of dealing or usage of trade regarding the Software or any software or content you download using the Software. No advice or information, whether oral or written, obtained from BitTorrent, Inc. or elsewhere will create any warranty or condition not expressly stated in this agreement. Some jurisdictions do not allow certain limitations on implied warranties, so the above limitation may not apply to you to its full extent.

BitTorrent, Inc.'s total liability to you from all causes of action and under all theories of liability will be limited to $50.00. In no event and under no theory of liability will BitTorrent, Inc. be liable to you for any special, incidental, exemplary, or consequential damages arising out of or in connection with this agreement or the software whether or not BitTorrent, Inc. has been advised of the possibility of such damages. The foregoing limitations will survive even if any limited remedy specified is found to have failed of its essential purpose. Some jurisdictions do not allow the limitation or exclusion of liability for incidental or consequential damages, so the above limitation or exclusion may not apply to you to its full extent.

In an attempt to provide increased value to our visitors, we may choose various third party web sites or services to link to, and/or frame within, the Sites or Services. We may also include offers from third parties as part of the installation process for our software, which in some instances may include but is not limited to offers made through SweetLabs, Inc. (OpenCandy), whose End User License Agreement is hXXp://VVV.opencandy.com/eulas/b/sneula.html. We also participate in co-branding and other relationships to offer e-commerce and other services and features to our users. However, even if the third party is affiliated with us, we have no control over these sites or services, each of which has separate privacy and data collection practices independent of us. We have no responsibility or liability for these independent policies or actions, and are not responsible for the privacy practices or the content of any such web sites or services. These linked sites or services are only for your convenience and you therefore access them at your own risk.

These BitTorrent, Inc. terms will be governed by and construed in accordance with the laws of California, USA, without regard to conflicts of law rules. The United Nations Convention on Contracts for the International Sale of Goods will not apply. The failure by either party to enforce any provision will not constitute a waiver. Any waiver, modification, or amendment of the BitTorrent, Inc. terms will be effective only if signed. If any provision is held to be unenforceable, it will be enforced to the maximum extent possible and will not diminish other provisions. BitTorrent, Inc. may make changes to these terms from time to time. When these changes are made, BitTorrent, Inc. will make a new copy of the terms available at VVV.bittorrent.com/legal/eula. You understand and agree that if you use the Software after the date on which the terms have changed, BitTorrent, Inc. will treat your use as acceptance of the updated terms. You agree that BitTorrent, Inc. may provide you with notices, including those regarding changes to the terms, by postings on VVV.bittorrent.com/legal/eula. This and the Privacy Policy at VVV.bittorrent.com/legal/privacy are BitTorrent, Inc.'s complete and exclusive understanding with you regarding your use of the Software as an end user, except that sometimes additional terms or product requirements (including age requirements) may apply. Additional terms will be available with the relevant Software, and those additional terms become part of your agreement with us if you use those Software.

If you have any questions, contact us at legal@bittorrent.com.

onPageInit:DLG_OFFER_NON_GOOGLE: checkbox %d %s [%s]

Result: %s

&bin=%sbmp

hXXp://apps.bittorrent.com/utorrent-onboarding/welcome-upsell.btapp

hXXp://apps.bittorrent.com/utorrent-onboarding/player.btapp

hXXp://bundles.bittorrent.com/onboarding/utorrent?url=http://bundles.bittorrent.com/

no toolbar url

bundled_url

%s %s

ShellExecuteExW

shell32.dll

cbhomepage=%d

cbsearch=%d

cbtoolbar=%d

cbrevert=%d

au=%d

installresult=%d

exit=%d

au=%u

tbe=%d

cd=%d

tbofferresult=%d

tb=%s

tbinstallresult=%d

error=%d

msg=%U

url=%U

prog=%u

toroffer=%d

torofferid=%s

&shoffer=%d

cancellastpage=%U

ServerOfferRetrieved=%d

sec_offs=%U

OfferError=%U

OfferProvider=%U

OfferType=%U

Offer=%U

Accepted=%d

toroffername=%s

torexecresult=%d

download=%d

execute=%d

error=%U

mismreturn=%d

mismresult=%U

view=%s

SendStaticURLThread

3.4.2.37754

uTCBTWebClient

had_version_already = %s

running_from_install_dir = %s

Target version = %d

HasPendingUpdate = %s

IsThisTargetVersion = %s

IsThisTargetVersion_2 = %s

"status":"Manually ran non target version","from_install_dir":"%d"

IsThisVersionBlacklisted = %s

client_manager.IsThisVersionBlacklisted() || client_manager.DidOptOutOfThisVersion() && running_from_install_dir

g_version < target_version = %d

res == %d

Cancel Downgrade -- cvm.RemoveRunningVersion

2012-12-04 23:04:37 -0800

BTWebClient

hXXp://apps.bittorrent.com/webui/version.json

hXXp://beta.bundles.bittorrent.com/onboarding/utorrent?url=http://beta.bundles.bittorrent.com/

beta.bundles.bittorrent.com

bundles.bittorrent.com

hXXp://beta.%s

INSTALL_FAIL_USER_CANCEL -- cvm.RemoveRunningVersion

update.utorrent.com

hXXp://

()$^.* ?[]|\-{},:=!

(. ?)://([^/:] )(?::([0-9] ))?([^?]*)(?:\?(.*))?

Not a recognizable URL: "

https

HttpRequest redirect to HTTPS. Not supported

HTTP/1.1

] ([0-9] )[

HttpRequest status line not recognizable "

user32.dll

SetThreadExecutionState

dwmapi.dll

advapi32.dll

Failed to read from file: %s

"%s":[ %d ]

wininet.dll

rpcrt4.dll

Can't create UUID - %d

Can't get computer name - %d %d

Awininet.dll

InternetOpenUrlA

HttpQueryInfoA

%s(%d)/%s

%d.%d

Accept-Language: %s

DNS lookup can't resolve host '%s'

HTTP/1.1

hXXp://%s%s%s

%s(%d)

Host: %s%s

User-Agent: %s

Accept-Encoding:%s

Referer: %s

Authorization: Basic %s

If-Modified-Since: %s

If-None-Match: %s

X-Requested-With: XMLHttpRequest

%U=%U

Content-Length: %d

Content-Type: application/x-www-form-urlencoded

HTTP/1.

https:

max-age=%d

DownloadURL(%s) called.

hXXps://

application/vnd.rn-realmedia-vbr

image/vnd.microsoft.icon

%3s, d %3s M d:d:d GMT

Can't validate '%s' because no digits were encountered

Can't validate '%s' - error %d %s

NA-%d

%d.%d.%d.%d.%d.%s

d10:.fileguard40:%H

d10:.fileguard40:

]: %s: %d

%d/%d blocks. %d/%d bytes.

Can't decode encoded encryption key in magnet URL %s

magnet:?xt=urn:btih:%H&dn=%U

&key=%s

&tr=%U

&ws=%U

&as=%U

diskio.sparse_files

btapps.show_apps

streaming.safety_factor

streaming.failover_rate_factor

streaming.failover_set_percentage

tray.show

tray.single_click

bind_port

gui.report_problems

gui.persistent_labels

gui.compat_diropen

gui.alternate_color

gui.transparent_graph_legend

sys.prevent_standby

sys.enable_wine_hacks

use_udp_trackers

upnp.external_tcp_port

upnp.external_udp_port

upnp.external_ip

finish_cmd

state_cmd

license_key

s_url

offers.content_offer_url

offers.content_offer_autoexec

asdlurl

rand_port_on_start

logger.log_upnp_to_file

net.bind_ip

net.outgoing_ip

net.outgoing_port

net.outgoing_max_port

net.low_cpu

net.calc_overhead

net.calc_rss_overhead

net.calc_tracker_overhead

net.max_halfopen

net.diffserv_codepoint

net.limit_excludeslocal

net.upnp_tcp_only

net.disable_incoming_ipv6

net.ratelimit_utp

net.friendly_name

net.update_secure

isp.bep22

isp.primary_dns

isp.secondary_dns

isp.fqdn

isp.peer_policy_enable

isp.peer_policy_url

isp.peer_policy_date

isp.peer_policy_expy

isp.peer_policy_override

ipfilter.enable

dht.collect_feed

dht.rate

gui.log_date

boss_key

boss_key_salt

use_boss_key_pw

boss_key_pw

rss.update_interval

rss.smart_repack_filter

rss.feed_as_default_label

bt.save_resume_rate

bt.magnetlink_check_existing_files

gui.sg_mode

gui.delete_to_trash

gui.default_del_action

gui.speed_in_title

gui.limits_in_statusbar

gui.graphic_progress

gui.piecebar_progress

gui.show_status_icon_in_dl_list

gui.tall_category_list

gui.wide_toolbar

gui.show_gate_explaination

gui.show_gate_delete

gui.show_gate_notify

gui.find_pane

gui.toolbar_labels

gui.category_list_spaces

streaming.preview_player

streaming.playback_player

streaming.peer_timeout

streaming.buffer_size

streaming.generate_previews

streaming.popout_left

streaming.popout_top

streaming.popout_right

streaming.popout_bottom

btapps.auto_update_btapps

btapps.auto_update_btinstalls

btapps.install_unsigned_apps

btapps.reveal_app

btapps.skin_url

btapps.enable_activex

gui.pro_installed

gui.show_devices

gui.show_plus_upsell

gui.show_plus_av_upsell

gui.show_plus_conv_upsell

gui.plus_upsell_foreground

gui.show_plus_upsell_nodes

stats.first_time_user

stats.installed_from_bundle

stats.video1.time_watched

stats.video2.time_watched

stats.video3.time_watched

stats.video1.finished

stats.video2.finished

stats.video3.finished

stats.welcome_page_useful

gui.enable_ratings

gui.enable_comments

magnet.download_wait

gui.combine_listview_status_done

gui.update_rate

selfcert

plus.transcode_queue_parallel

plus.transcode_delete_transcripts

resume.enable_resume_dir

resume.dir_only

distributed_share.enable

distributed_share.tracker

udp://dishes-dev.trnt.us:8080

distributed_share.server_host

dishes.utorrent.com

distributed_share.pinned

distributed_share.server_port

distributed_share.auth_key

distributed_share.skip_authentication

distributed_share.initial_update

distributed_share.churn_delay

distributed_share.churn_threshold

silent_auto_update_exe

next_market_share_report

max_speed_down_tcp

max_speed_up_tcp

gui.last_tree_node

webui.ssdp_uuid

offers.lifetime_impressions_ft

offers.lifetime_impressions_lrec

offers.lifetime_ad_req_errors

campaigncode.txt

.fileguard

Validating value '%s' for setting %d type %d

Invalid Username/Password

Can't set SO_REUSEADDR option on socket %d - %d %s

Can't bind connecting socket %d to IP %A - %d %s

%s:%s

Proxy-Authorization: Basic %s

CONNECT %s:%d HTTP/1.0

CONNECT %A HTTP/1.0

WSAEnumNetworkEvents error (%d)

Bound listening socket %d to IP %A

Can't listen on socket %d IP %A

*** TCP, uTP buffer stats ***

Error code: HTTP %d

utp.log

looking up dishes: %s %i

[%s] %s

%d:%d

%s('invalid request')

Can't parse authorization header %s

Can't find device pairing for ID %S

HTTP/1.1 301 Moved Permanently

Location: %s

HTTP/1.1 u %s

WWW-Authenticate: Basic realm="%s"

HTTP/1.1 %d %s

Connection: %s

Content-Type: %s

%s%s%s%s%s%s%s%s%s%s%s%s

%sContent-Length: %u

%sConnection: close

Can't accept invalid address '%s'

Can't accept invalid dot notation mask '%s'

Can't accept IP '%s' with invalid mask '%s'

Iphlpapi.dll

GetExtendedTcpTable

4.2.2.1

.payload

.options

update_url

update_url_btinstall

badging_url

file:///%S\apps\%S\index.html

PlusKeyInjected

{"event": "%s", "properties": {

"distinct_id":"%s",

"h":"%s",

"v":"%d",

"c":"%S",

"token":"%s",

"svp":"%d",

"view":"%s",

"cc":%d,

"bucket":"%S",

"%s":"%S"

hXXp://yogi.apps.bittorrent.com/track/?data=%s&ip=1

X-ClientID: %s

bitdefender.btinstall

Sending autoupdate stats [%s]

ip=%s

dlurl=%U

POST /e?i=%d HTTP/1.1

"%s":%s,

"%s":%s

"%s":"%s",

"%s":"%s"

"%s":%d,

"%s":%d

"%s":%u,

"%s":%u

"%s":%Lu,

"%s":%Lu

hXXp://bench.utorrent.com

[u:u][%s]

&license=%U

http%s://%U:%U@%s:%d/attach?name=%U&clientid=%U&version=%d&p=%d&ip=%I%s

proxy = hXXp://localhost:%d/proxy/0/; expires = %s GMT

hXXp://localhost

-%c%c%s-

127.0.0.1

%s:%d

0.0.0.0

"peer_id":"%s", "addr":"%A"

"markpt":"%s"

"trigger":%u

,"%u":%u

,"%s":%u

,"%s":%Lu

,"%u": [

%d.%d.%d

%s/%d%d%d(%d)

%d%d%d

%d%d%d%s

%s/%s

Pairing request rejected - unsupported

ntdll.dll

udp://

cmdline

%S: is 100%% completed

verified signature with embedded certificate for identity:%s

verified signature for trusted identity: %s

update-url

gate-info-url

certificate

url-list

Windows-

website

name.utf-8

path.utf-8

WARNING: avoiding connecting to web seed because it's blocked by policy '%s'

tracker: failure reason="%s"

port

for torrent file: %s

got tracker error response: %s

got HTTP tracker response for: %s

tracker response: %s

tracker warning: %s

got udp tracker error response: %s

got UDP tracker response for: %s

****** REQ(%s): for torrent file '%S' connecting to tracker: %S

tracker not tracking: %s

&ip=%U

%S%cinfo_hash=%.20U&peer_id=%.20U&port=%d&uploaded=%Ld&downloaded=%Ld&left=%Ld&corrupt=%Ld&key=%.8X%s&numwant=%d&compact=1&no_peer_id=1%s

tracker request: %s

for tracker %s

tracker: failure reason="%S"

valid scrape from %S

%.*S/scrape%S%cinfo_hash=%.20U

Initiating UDP scrape for torrent file: %s

Tracker URL: %s

Initiating TCP scrape for torrent file: %s

gate_url

%s?h=%s

%s?info_hash=%h&h=%s&gate_type=%s

****** update url: %s

****** gate url: %s

Could not download metadata for torrent %H (%S): %S

http:

%S: is %.2f%% completed

Adding '%S' as storage path for '%S'

.torrent

** Saving '%S' as root folder for '%S'

meta_vlc_supported

download_url

app_url

feed_url

web_seeding_enabled

gate_info_url

tfurl

webseeds

PPRIO_HTTP

Can't accept '%s' as argument

router.utorrent.com

router.bittorrent.com

hr.hdtv

hr.pdtv

webrip

ac3.5.1

dd.dd.dd

dddd.dd.dd

Initiating RSS download of url %s

POST /e?i=%s HTTP/1.0

{"eventName":"ut_prof_ip","b":%Ld,"r":%d,"sequenceID":%d,"clientID":"%s","uniqueID":"%s","st":[

hXXp://bench.utorrent.com/e?i=%s

%S:%s

Server: %s

Content-Disposition: attachment; filename="%s"; size=%Lu

Date: %s

ETag: "%s"

Last-Modified: %s

HTTP/1.1 %s

%s%s%s%s%s%sConnection: close

%s%s%s

HTTP/1.1 %d Error

Certification Services Division1!0

premium-server@thawte.com0

*.utorrent.com0

/hXXp://crl.thawte.com/ThawteServerPremiumCA.crl0

hXXp://ocsp.thawte.com0

.RH(Y

)hXXp://svr-ov-crl.thawte.com/ThawteOV.crl0

Certification Services Division1806

GoDaddy.com, Inc.1301

*hXXp://certificates.godaddy.com/repository100.

'Go Daddy Secure Certification Authority1

079692870

*.bittorrent.com1!0

*.bittorrent.com0

"hXXp://crl.godaddy.com/gds1-14.crl0S

 hXXp://certificates.godaddy.com/repository/0

hXXp://ocsp.godaddy.com/0J

>hXXp://certificates.godaddy.com/repository/gd_intermediate.crt0

*.bittorrent.com

bittorrent.com0

*.utorrent.li1!0

*.utorrent.li0

"hXXp://crl.godaddy.com/gds1-82.crl0S

*.utorrent.li

utorrent.li0

Security.dll

Secur32.dll

1.2.840.113549.1.1.5

1.3.6.1.5.5.7.3.1

1.3.6.1.4.1.311.10.3.3

2.16.840.1.113730.4.1

1.3.6.1.5.5.7.3.2

10.0.0.0

192.168.0.0

169.254.0.0

172.16.0.0

127.0.0.0

%u.%u.%u.%u.in-addr.arpa

%x.%x.%x.%x.%x.%x.%x.%x.%x.%x.%x.%x.%x.%x.%x.%x.%x.%x.%x.%x.%x.%x.%x.%x.%x.%x.%x.%x.%x.%x.%x.%x.ip6.arpa

DEBUG: Marking %a as %s

DEBUG: IP %a is already cached. Returning %s

DEBUG: Initiating tracker prefs resolve %s

DEBUG: Hostname %s is already cached. Returning %a

DEBUG: Hostname %s cache error %d

DEBUG: Initiating resolve %s

DEBUG: Reverse %s lookup %a (FQDN: %d)

DEBUG: Reverse lookup done: %s

_bittorrent-tracker._tcp.%s

DEBUG: Processing TXT: %s

DEBUG: Resolving %s service %u

DnsApi.dll

utorrent.com

Windows

OS info: name %s release %s version %s machine %s

255.255.255.255

,"os":"%d.%d.%d.%d.%d.%s"

UTP_GET_UDP_MTU

UTP_GET_UDP_OVERHEAD

<html><head><title>µTorrent Search</title></head><frameset rows="90px,*"><frame src="hXXp://search.utorrent.com/bntop.html" frameborder="0" marginheight="0" marginwidth="0" scrolling="no" noresize="noresize" /><frame src="hXXp://search.conduit.com/Results.aspx?ctid=CT3083945&searchsource=45&&%s" frameborder="0" /></frameset></html>

js%d();

HTTP/1.0 200 OK

features/device_pairing/supported_types

Can't install web UI archive version (%d)

Can't install default UI version (%d)

version.txt

{ "name": "%s", "version": %s }

%s(%s)

GET /favicon.ico

Can't accept non-IPv4 address as IP match for %s

Can't match using invalid subnet mask %s

Found valid subnet mask %s %x

Ignoring filter IP containing invalid CIDR notation %s

IP matches IPv4 restriction %s%s%s

Can't match using IPv4 filter %s%s%s mip %x mask %x

Can't accept non-IPv6 restriction address %s

IP matches IPv6 restriction %s%s

Can't match using IPv6 filter %s%s

Can't support device pairing request lacking a PIN

Can't support invalid PIN '%s'

Can't support invalid PIN value %Ld

Can't support device pairing type '%s'

hXXp://apps.bittorrent.com/torque/pairing/style.%s%scss

<html><head><link rel="stylesheet" type="text/css" href="%s"></head><body><script>var key = "%s";var source = "%s";</script><h3>%s wants access to %s</h3><p>If you click yes, this site will have access to your data</p><input type="button" value="Allow" onclick="window.parent.postMessage(key,'*')" /><input type="button" value="Deny" onclick="window.parent.postMessage('denied','*')" /></body></html>

HTTP/1.1 200 OK

HTTP: IP %a: GET %.200s

HTTP: IP %a: Blocked: GET %.100s

"headers": { "Content-Type": %s

, "Set-Cookie": %s

"html":%s

"error": %s

,[%S,%J,%J,%I,%I,%I,%B,%I,%I,%I,%I,%J

,[%s,%s,%s,%I,%I,%S,%S,%I,%I,%I,%I,%I,%I,%I,%I,%I,%I,%I,%I,%I,%I,%I]

autoexec

autoexec_hide_ui

Can't accept value '%s' for torrent property '%s'

Can't accept overflow value '%s' for torrent property '%s'

Can't accept negative value '%s' for torrent property '%s'

Can't accept value '%s' for unknown torrent property '%s'

{"hash": %s

,"trackers": %S

,"autoexec": %I

,"autoexec_hide_ui": %I

password

,"code": %I, "message": %s

Can't recognize torrent hash '%s'

Can't accept file number '%s'

Can't use file number '%s' - invalid for selected torrent

{"name":%S, "hash":%H, "sid":%s, "complete":%B, "completed_on":%J, "primary_label":%S, "files": [

{"name":%S, "fileno":%J, "length":%J, "complete":%B, "type":%s, "fullpath":%S,

{"name":%S, "fileno":%J, "length":%J, "complete":%B, "type":%s,

"codecs": [%s,%s]

{"name":%S, "fileno":%J, "media":%s, "length":%J, "complete":%B, "type":%s,

,"error": %S

add-url

get-url

add-unknown-url

Ignoring setting %d name %s value %s

{ "name": %s

app_update_url

,[%s,%I,%S,{"access":%s}]

, {"path": %s, "available": "%J"}

webui

, %s : [

, "name" : %s, "version" :

,{"guid":%s, "created":%J, "updated":%J, "peer_ip":%a, "sock_ip":%a, "reported_ip":%s, "user_agent":%s, "persistent":true, "custom":%s }

,{"guid":%s, "created":%J, "updated":%J, "peer_ip":%a, "sock_ip":%a, "reported_ip":%s, "user_agent":%s, "persistent":%B, "custom":%s }

Can't log out session - invalid GUID %s specified

Can't log out requester's session %s

%s out current session %s

[%S,%s,%s]

,"token": %s

Can't accept configuration change from other than administrative login

webui.uconnect_question_opted_out

webui.uconnect_username

webui.uconnect_password

webui.uconnect_enable

, "movetorrent":{"target":%S, "status":%d}

[%H,%I,%S,%J,%I,%J,%J,%I,%I,%I,%I,%S,%I,%I,%I,%I,%I,%I,%J,%s,%s,%S,%s,%J,%J,%s,%S,%I,%s]

[%S, %I]

[%I,%B,%B,%B,%B,%I,%S,%I,[

[%S,%S,%s,%I,%I,%J,%I,%I,%I,%I,%B,%B]

[%I,%I,%S,%S,%S,%S,%I,%I,%S,%I,%I,%I,%I,%S,%B,%B]

getmsg

%s({"encbody":"

,"GUID":"%s"

,"x-bt-seq":"%s"

<script src="/static/js/bt.js"></script>

.html

token.html

HTTP/1.1 304 Not Modified

<meta http-equiv="refresh" content="1" />Please wait while the µTorrent WebUI is installed... You will be automatically redirected.

index.html

The µTorrent WebUI does not seem to be installed. Click <a href="download_webui">here</a> to try to install it, or see the <a href="hXXp://utorrent.com/webui-guide.php">guide</a> for more details.

index.html?error=1

<b>There was a problem installing µTorrent WebUI, please see the µTorrent log for more details.</b></br></br>

download_webui

HTTP/1.1 404 Not Found

%s({response:%s, guid:"%s"})

%s({ "sessionid": "%s", "message": "%s", "code": %d })

%s({ "message": "%s", "code": %d })

Can't create session for device ID %s

Can't accept remote pairing key

Can't accept device pairing key '%s'

Can't process pair connection authentication request without pairing key

/gui/guest.html

Unable to listen for HTTP traffic on port %d

Unable to listen for HTTP traffic on v6 port %d

%s({ "pairing_key": "%s", "pairing_type": %d, "code": %d })

UDP setsockopt(SO_RCVBUF, %d) failed: %d

UDP setsockopt(SO_SNDBUF, %d) failed: %d

DEBUG: ICMP%s is not available on this platform

%sversion-%s

hXXp://utorrent.com/webui/webui-%s-%s.zip

Web UI archive entity tag '%s'

Could not match any version from json %s

Attempting to download file %s to %S

Attempting to download web UI archive from %s to %S

Moving %S to %S

Moving %S back to %S

Attempting to read archived file %s

webui.enable

webui.enable_guest

webui.enable_listen

webui.token_auth

webui.token_auth_filter

webui.username

webui.password

webui.hashword

webui.uconnect_hashword

webui.uconnect_username_anonymous

webui.uconnect_hashword_anonymous

webui.uconnect_computername

webui.allow_pairing

webui.salt

webui.guest

webui.restrict

webui.port

webui.cookie

webui.pair_hashes

webui.download_folders

webui.raptor_host

raptor.utorrent.com

webui.raptor_port

webui.raptor_secure

webui.talon_host

remote.utorrent.com

webui.talon_port

webui.talon_secure

webui.uconnect_toolbar_ever

webui.uconnect_enable_ever

webui.uconnect_connected_ever

webui.uconnect_actions_count

webui.uconnect_actions_list_count

webui.uconnect_cred_status

webui.update_message

webui.proxy_auth

webui.update_url

hXXp://pr.apps.bittorrent.com/client-webui/3.4/client-webui.json

%p %s d %s

MTU [PROBE] floor:%d ceiling:%d current:%d

MTU [PROBE-TIMEOUT] floor:%d ceiling:%d current:%d

Packet timeout. Resend. seq_nr:%u. timeout:%u max_window:%u cur_window_packets:%d

MTU [DONE] floor:%d ceiling:%d current:%d

MTU [RESET] floor:%d ceiling:%d current:%d

Packet %u lost. Resending

actual_delay:%u our_delay:%d their_delay:%u off_target:%d max_window:%u delay_base:%u delay_sum:%d target_delay:%d acked_bytes:%u cur_window:%u scaled_gain:%f rtt:%u rate:%u wnduser:%u rto:%u timeout:%d get_microseconds:%I64u cur_window_packets:%u packet_size:%u their_delay_base:%u their_actual_delay:%u average_delay:%d clock_drift:%d clock_drift_raw:%d delay_penalty:%d current_delay_sum:%I64ucurrent_delay_samples:%d average_delay_base:%d last_maxed_out_window:%I64u opt_sndbuf:%d current_ms:%I64u

MTU [DUPACK] floor:%d ceiling:%d current:%d

MTU [ACK] floor:%d ceiling:%d current:%d

UTP_Connect conn_seed:%u packet_size:%u (B) target_delay:%u (ms) delay_history:%u delay_base_history:%u (minutes)

MTU [ICMP] floor:%d ceiling:%d current:%d

msg_type

8:msg_typei%ue

5:piecei%ue

5:added%d:

7:added.f%d:

6:added6%d:

8:added6.f%d:

7:dropped%d:

8:dropped6%d:

d1:eiÞ

12:complete_agoiÞ

11:upload_onlyiÞ

11:lt_donthaveiÞ

12:ut_holepunchiÞ

11:ut_metadataiÞ

6:ut_pexiÞ

10:ut_commentiÞ

13:metadata_sizeiÞ

1:piÞ4:reqqiÞ%s1:v%d:%s2:ypiÞ

%s: scrape response had %d torrents, request had %d

unsupported action

UDP Tracker disabled

UTrackAnnounce(%s) called.

UTrackScrape(%s) called.

UDP Trackers disabled.

Invalid tracker URL.

[%u] log closed

?proxy.proxy

proxy.type

proxy.port

proxy.auth

proxy.resolve

proxy.username

proxy.password

%s Remote disconnected: reset by proxy

http_pending_limit

min_http_connections

%H:%Lx:%x

Content-Disposition: attachment; filename="%s"

Content-Disposition: %s

%s%s%s%sServer: BitTorrentProxy/1.0

%s([""

%s; filename="%s"

queue.dont_count_slow_dl

queue.dont_count_slow_ul

queue.slow_dl_threshold

queue.slow_ul_threshold

queue.use_seed_peer_ratio

queue.prio_no_seeds

queue.switchtime

queue.switchtime_prio

queue.started_bonus

bt.tcp_rate_control

gui.graph_tcp_rate_control

gui.graph_overhead

gui.graph_legend

bt.ratelimit_tcp_only

bt.prioritize_partial_pieces

bt.transp_disposition

net.utp_target_delay

net.utp_packet_size_interval

net.utp_receive_target_delay

net.utp_initial_packet_size

net.utp_dynamic_packet_size

net.discoverable

bt.enable_pulse

bt.pulse_weight

bt.extra_ul_rand

bt.extra_ul_max

bt.prio_piece_thres

bt.few_pieces_thres

bt.http_pending_limit

bt.dl_queue_factor

bt.ul_queue_factor

bt.scrape_stopped

bt.compact_allocation

bt.progressive_piece_picker

bt.progressive_piece_span_mb

bt.enable_tracker

bt.use_dns_tracker_prefs

bt.read_only_on_complete

bt.multiscrape

bt.send_have_to_seed

bt.set_sockbuf

bt.rcv_max_sockbuf

bt.snd_max_sockbuf

bt.connect_speed

bt.prio_first_last_piece

bt.randomize_peer_id

bt.determine_encoded_rate_for_streamables

streaming.min_buffer_piece

bt.sequential_download

bt.sequential_files

bt.allow_same_ip

bt.use_similar_torrent_data

bt.no_connect_to_services

bt.no_connect_to_services_list

bt.ban_threshold

bt.use_ban_ratio

bt.ban_ratio

bt.use_rangeblock

bt.graceful_shutdown

bt.shutdown_tracker_timeout

bt.shutdown_upnp_timeout

peer.lazy_bitfield

peer.lazy_bitfield_mode

peer.lazy_bitfield_factor

peer.lazy_bitfield_nohave

peer.resolve_country

peer.disconnect_inactive

peer.disconnect_inactive_interval

choker.interval_auto

choker.interval

choker.interval_optim

choker.slots_auto

diskio.flush_files

zz.countries.nerd.dk

%I.%s

DEBUG: Skipping torrent peer resolve: %t 0xX %d

"url"

diskio.no_zero

diskio.use_partfile

diskio.smart_hash

diskio.smart_sparse_hash

diskio.coalesce_writes

diskio.coalesce_write_size

diskio.rsize_factor

diskio.max_write_queue

diskio.cache_reduce_minutes

diskio.cache_stripe

diskio.quick_hash

diskio.mark_of_the_web

diskio.minimize_kernel_caching

diskio.all_writes_sync

cache.override

cache.override_size

cache.reduce

cache.write

cache.writeout

cache.writeimm

cache.read

cache.read_turnoff

cache.read_prune

cache.read_thrash

JT_IMPORT

Error: COMPACT_NOT_FOUND. P=%d,T=%d

keyhash

Saving serialized device pairing set with %lu pairings at %S

Can't create pairing from hierarchy at %u from %S

Can't load non-dictionary hierarchy at %u into pairing set from %S

Can't load non-list hierarchy into pairing set from %S

%s serialized device pairing set (%lu devices) from %S

** Generated %d character session cookie: GUID=%s

reported_ip

global_key

Searching for device pair session with id %s

Can't accept id %s as a GUID

** FileStorage::SetFolderRoot(%S) failed with _folder '%S'

** FileStorage::SetFolderRoot(%S) failed: _folder is NULL or empty.

** FileStorage::SetFolderRoot(%S): setting for folder '%S'

Warning: Delete to trash failed for %S. Error: %d. Deleting permanently.

"to_trash":%d, "error_code":%d

%s:%H:%d:%s

%s: %s

239.255.255.250

Created SSDP UUID %s

The external port cannot be wild-carded

The port mapping entry specified conflicts with a mapping assigned previously to another client

Internal and External port values must be the same

The NAT implementation only supports permanent lease times on port mappings

ExternalPort must be a wildcard and cannot be a specific port

UPnP: Discovered host: %s

UPnP: Checking cached host %s

UPnP: Cached host %s (%I) is not part of our subnet %I/%I.

UPnP: Queueing cached host %s

UPnP: Unable to bind to UPnP port: %d

UPnP: Joined multicast group

M-SEARCH * HTTP/1.1

HOST: 239.255.255.250:1900

NOTIFY * HTTP/1.1

LOCATION: hXXp://%A

SERVER: %s/%s UPnP/1.1 %s/%s

NTS: %s

USN: uuid:%s

FRIENDLYNAME:%S

HH:%s

%s(%s)(%s)

CACHE-CONTROL: max-age = %d

LOCATION:hXXp://%A

USN:uuid:%s

recvfrom ERROR: %d

UPnP: Found location from upnp notify: %s

urlbase

controlurl

eventsuburl

scpdurl

NewExternalPort

NewInternalPort

hXXp://%s:%d/%s

UPnP: The device "%s" is not a UPnP router (%s)

AddPortMapping

DeletePortMapping

GetGenericPortMappingEntry

<s:Envelope xmlns:s="hXXp://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="hXXp://schemas.xmlsoap.org/soap/encoding/">

<u:%s xmlns:u="%s">

<NewRemoteHost></NewRemoteHost><NewExternalPort>%d</NewExternalPort><NewProtocol>%s</NewProtocol><NewInternalPort>%d</NewInternalPort><NewInternalClient>%I</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>%s (%s)</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration>

<NewRemoteHost></NewRemoteHost><NewExternalPort>%d</NewExternalPort><NewProtocol>%s</NewProtocol>

<NewPortMappingIndex>%d</NewPortMappingIndex>

</u:%s>

GET %s HTTP/1.1

Host: %s:%d

POST %s HTTP/1.1

HOST: %s:%d

CONTENT-LENGTH: %d

SOAPACTION: "%s#%s"

%s port %d -> %I:%d

%s port %d

UPnP: %s is already mapped. Not re-mapping.

UPnP: Removed %s

UPnP: ERROR removing %s: (%d) %s

UPnP: Mapped %s

UPnP: %s mapped successfully.

UPnP: Host '%s' added to cache.

UPnP: ERROR mapping %s. Deleting mapping and trying again: (%d) %s

UPnP: ERROR mapping %s: (%d) %s

UPnP: Device error "%s": (%d) %S

UPnP: Could not map UPnP Port on this pass, retrying.

UPnP: Could not detect external IP on this pass, retrying.

UPnP: Unable to map port %I:%d with UPnP.

Unsupported Version

Not Authorized/Refused (e.g. box supports mapping, but user has turned feature off)

Unsupported opcode

NAT-PMP: error: %s

NAT-PMP: %s %s port %d -> %I:%d

NAT-PMP: Unable to map port with NAT-PMP.

"period":%d,

"n_samples":%d

,"active_seeds":"%s"

,"active_downloads":"%s"

,"up_tcp":"%s"

,"down_tcp":"%s"

,"up_utp":"%s"

,"down_utp":"%s"

,"up_tcp_max":%u

,"up_utp_max":%u

,"down_tcp_max":%u

,"down_utp_max":%u

UPnP(XP): Removed TCP port %d

UPnP(XP): Removed UDP port %d

UPnP(XP): %s port %d -> %I:%d is already mapped. Not re-mapping.

UPnP(XP): %s port %d -> %I:%d mapped successfully.

-----BEGIN CERTIFICATE-----

com.bittorrent

%s trusted

5:owner%d:%s4:text%d:%s9:timestampi%Lde4:likeiÞ

8:msg_typeiÞ

3:numiÞ

6:filter%d:

%A: [%s (%:.1d)] picked no blocks

239.192.152.143

BT-SEARCH * HTTP/1.1

Host: 239.192.152.143:6771

Port: %u

Infohash: %s

port:

keys

hXXp://update.utorrent.com/streamstats.php?t=%Ld&bb=%Ld&b=%Ld&s=%Ld&ft=%d&fb=%Ld&v=%dx%d&fe=%U&u=%d&nu=%d&nuc=%d&iu=%d&ps=%d&cc=%d&fs=%d&pt=%d&cpt=%d&nr=%d&cnr=%d&pl="%s"&tid=%x&fid=%x&timeout=%d&buffer=%d%s&svp=%d

CbDP.jR6YD6wAj2ByQWxQxQZ7.9J9xkn2.Uqb3zVm16vQyizprhBw9hi80psatZ8k54vwZfiIeEHZVsDnyqeWSSIpWso.wh5GD4OFgdhVI3

iqJ7nFZ4bGCRjE1F.FXEwL085Zb0kLM2TdHDaVVCdq0cKxvnH/0FLskJTKlDtt6sDl89dc//aEULTVFGtcbA/tDzc.bnFE.DWthQOu2n2JwKjgKfgCR2lZFWXdnWmoOh

Ewl2hcjiutMd3Fu2lgFnUXWSc67TVyy2vwYCKoS9MLsrdJVT9RgWTCuEqWJrfB6uE3LsE9GkOlaZabS7M29sj5TnzUqOLJMjiwEzArfiLr9WbMRANlF68N5AVLcPWvNx6Zjl3m5Scp0BzJBz9TkgfhzKJZ.WtP3Mv/67I/0wmRZ

F//////////oG/QeY5emZJ4ncABWDmSqIa2JWYAPynq0Wk.fZiJco9HIWXvZZG4tU.L6RFDEaCRC2iARV9V53TFuJLjRL72HUI5jNPYNdx6z4n2wQOtxMiB/rosz0QtxUuuQ/jQYP.bhfya4NnB7.P9A6PHxEPJWV//////////

3NUKQ2Re4P5BEK0TLg2dX3gETNNNECPoe92h4OVMaDn3Xo/0QdjgG/EvM.hiVV1BdIGklSI14HA38Mpe5k04juR5/EXMU0r1WtsLhNXwKBlf2zEfoOh0zVmDvqInpU695f29Iy7sNW3U5RIogcs740oUp2Kdv5wuITwnIx84cnO.e467/IV1lPnvMCr0pd1dgS0a.RV5eBJr03Q65Xy61R

dUyyhxav9tgnyIg65wHxkzkb7VIPh4o0lkwfOKiPp4rVJrzLRYVBtb76gKlaO7ef5LYGEw3G.4E0jbMxcYBetDy2YdpiP/3GWJInoBbvYHIRO9uBuxgsFKTKWu7RnR7yTau/IrFTdQ4LY/q.AvoCzMxV0PKvD9Odso/LFIItn8PbTov3VMn/ZEH2SqhtpBUkWtmcIkEflhX/YY/fkBKfBbe27/zUaKUUZEUYZ2H2nlCL60.JIPeZJSzsu/xHDVcx

2iQzj1CagQc/5ctbuJYLWlhtAsPHc7xWVyCPAKFRLWKADpASkqe9djWPFWTNTdeJtL8nAhImCn3Sr/IAdQ1FrGw0WvQUstPx3FO9KNcXOwisOQ1VlL.gheAHYfbYyBaxXL.NcJx9TUwgWDT0hRzFzqSrdGGTN3FgSTA1v4QnHtEygNj3eZ.u0MThqWUaDiP87nqha7XnT66bkTCkQ8.7T8L4KZjIImrNrUftedTTBi.WCi.zlrBxDuOM0da0JbUkQlXqvp0yvJAPpC11nxmmZOAbQOywZGmu9nhZNuwTlxjfIro0FOdthaDTuZRL9VL7MRPUDo/DQEyW.d4H.UIlzp

///////////93zgY8MZ2DCJ6Oek0t1pHAG9E28fdp7G22xwcEnER8b5A27cED0JTxvKPiyqwGnimAmfjybyKDq/XDMrjKS95v8MrTc9UViRqJ4BffZVjQml/NBRq1hVjxZXh.rg9dwMkdoGHV4iVvaaePb7iv5izmW1ykA5ZlmMOsaWs75NJccaMFwZz9CzVWsLT8zoZhPOSOlDM88LIkvxLAGTmbfPjPmmrJagyc0JnT6m8oXWXV3AGNaOkDiuxuvvtB1WEXWER9uEYx0UYZxN5NV1lJ5B9tYlBzfLO5nWvbKbywfLgvHNI9XYO.WKG5NAEMeggn2sjCnSD151wCwXL8QlV7BfaxFk515ZRxmgAwd5NNGOCVREN3uMcuUJ7g/MkZDi9CzSUZ9JWIYLXdSxZqYOQqkvhyI/w1jcA26JOTW9pFiXgP58VAnWNUo0Ck.4NLtfXNMnt2OZ0kjb6uWZYJw1qvQinGzjR/E3z48vBWj4WgJhIol//////////

F//////////oG/QeY5emZJ4ncABWDmSqIa2JWYAPynq0Wk.fZiJco9HIWXvZZG4tU.L6RFDEaCRC2iARV9V53TFuJLjRL72HUI5jNPYNdx6z4n2wQOtxMiB/rosz0QtxUuuQ/jQYP.bhfya4NnB7.P9A6PHxEHRFS80VBYXOxy5cDf8DXnLqvff5Z.e/IJFNuDbNIFSewsM76BpLY25KhkUrIa7S9QMRMSCDKvAl9W4yNHi2CeO8Nmoa5v6BZREE.EUTomO3eO3coU3ekm7ee.rnLtmRqnIoTuho/QLM1SOEPL9VEgLQkKLqYOOcFe541LoZbgAgiGjhJCN3GHGUZEeLI6htnowPEpxXGHOs.yAYkfnLrq637spbm.5fk7anwlrhepR2JFN7eoKu4ebOPtEuz8c6jBkQ/4l.WRPYWXas7O2Spx8QcHI7oiO5tiW3BlX5rTwOLriTmc8mBhPHk88ua.WTEMhCKFRM/pW/H2EIuBH8AaX204QSZmIfuVcruXncX2zkbiccSCd66hquZmQb6WqjXKBsYM3wSegr4pesxl2smJUZlakZlmK7xxAfYXyMKTEQy1TcRAMJw2Gmw8ZEw66KLldxHzXAN3EujUlk1lTTY5mI1pG1f4drR1QgPEqwfYDZzt1Xl.tt92cm8zDz3N9D0OncV//////////

///////////93zgY8MZ2DCJ6Oek0t1pHAG9E28fdp7G22xwcEnER8b5A27cED0JTxvKPiyqwGnimAmfjybyKDq/XDMrjKS95v8MrTc9UViRqJ4BffZVjQml/NBRq1hVjxZXh.rg9dwMkdoGHV4iVvaaePb7iv5izmW1ykA5ZlmMOsaWs75NJccaMFwZz9CzVWsLT8zoZhPOSOlDM88LIkvxLAGTmbfPjPmmrJagyc0JnT6m8oXWXV3AGNaOkDiuxuvvtB1WEXWER9uEYx0UYZxN5NV1lJ5B9tYlBzfLO5nWvbKbywfLgvHNI9XYO.WKG5NAEMeggn2sjCnSD151wCwXL8QlV7BfaxFk515ZRxmgAwd5NNGOCVREN3uMcuUJ7g/MkZDi9CzSUZ9JWIYLXdSxZqYOQqkvhyI/w1jcA26JOTW9pFiXgP58VAnWNUo0Ck.4NLtfXNMnt2OZ0kjb6uWZYJw1qvQinGzjR/E3z48vBWj4WgI480HfoF1AdX.RNY76Q4BswMoQPmoSOQlJYF1gKQ3Is5GlQ9OFfoYhKJEZRkyBR1DwE.IwE/1GVligcA7nPHqvhm5sPifPFe933eYCxeOPHM.Vj7s4fSCxYrw.u6zrs8N187D06aIVLi5gfaxJgc8sFtS66/xVSaAR0ZqtqDSaq0eIIDiFwjD9yS2R1rDooO2P6tibr7dOzkZUz.F.K1gsUKmxbspWlGJ01hh1gK.sG9zWn5vSdi8PQYHZQFjlhpviKxKJERBhErBiRstyKH.RC9Kip855HAzUlGc.uz04tZDA/MOFA0SPBakpmCkeLqN8T0/I2ryvkTFxsrLvmBqQO38Arg40na0iSdbddoN..n.Zp8wbwVZRCYBuF7KMt/rXQnKlK1x8hGLIgp8zjVhz8uTWKp5xI3u0tuAUN5Uxoc.Ce1g7LYxV5sdRrKAezYX./yEiPpB6Z4zLSsbR9x2xobZ8uV.ZNRZm4Q0G.ZsO/I63k4hyjMmjqTDRcbFaURSn09F//////////

3//////////yaFsg8XQC8qnCPYYu3S7D4f0au8YcVCT08BlgOx4viYKKe8UOuq1DtlbHcppJf36p0h2ctoNnGtJ.4rRMrHmaNaXRLsObv.nlHCGkccD.rh2/zSjlG6j.tkE6lxMecVfQwV915yIn/cIIXcKUpaMpt207oueME/1PZQI3OSLTEQQHO/gFqapr.3PLqZtAEjbXnYyrOWXLAxdjKf1t2Mbcrd33LEIhoO1F5qR0ZA625yCf1UHYuspZlZddSi60w60vidWwBi1wAFjSLTy6zCKidUAylsbLWN63cLINpgbMhb5T8c69Zw1H0LSevQYgh4BQqp5mq4K7epg5KXgzySkcJi.uK4MDll2ehgSLTT1WnzivSFXQRXvCUhzQwCsmaprnwCbE1A9M6TpkFI9XhIxclnB/e6sOe8PDXs0dC.o6faKXyh61Tx80oxuHTNUc5TR7S9YC2wsKRY2E9Fe7Jbgp53srlyuFqGZak2qI2f8GW16d8y4gU7vjU8SPeGlRfR9fd39nXgzE8y6fHeDBOL2zebW.dAAjHCwDkxmji4texvBexy51..ogOeV5b7Jcl0NPcoba.WaCEY8pkXXb5Rv.qVOIbmpkBNhxWRtNOXS4WSq0QH9zMmMgcJjEgOZO/TmOR/jzoGfi2FJVGroJG2X98sm/gqqdnm9i7KtB9W9aRUoNKUTZswDxtu/vG6hPvJ3kNRE2z1C06ki6fJxP0ds34NboUmXbg96De.s.lFcnJjHCvikixKknlRVnH7vimbIpCWKL4hrwz2RxZq0JUCqhzPWye1nakIxF0owXNHSXq3z8BNpcvq/lRLNd0lHfWCWhMeG36G2noUMUV9Vxx7wFCZgNf.Dio8lWyTHRV/M5h5IzG7iYj1LAhCZsr.lqZXs1JCNj8FW3VWfvSLxlARuoW6eTMBjyNQTlLGgZsA7x/mwndCiQCJrLpQLidiBlAMCZX/wDTkF0He13wFPZz8OEuIlorR2tHqrkQK.HvjlX5PTAEIRnB.vUGuTtosgJBVZDY.nD1pkJ6wEyWojesTqm1q7wU/Yln7xILszfDhf2HcEgjZd5hazMWq8xHqA/79U2EF5ilZdMKju/sullo4YjaY8Yu4f0Dy1nFhLwWQ8/37D7FyP6pgC6jBoyY6BuE5tVgTIt.Ym8VeUMWp0.rRtJe6Appriw9ufcqg4/W/HFWjtp4Eu7IhQZP5b.YPe2LTmMJp7CK8HeKT.Qj86LtjVg6nrH2zVkTDS/hpQyCUpw9eDP16zEk7dv902KEBI1niruYQ02xLxZWhoHaDflm2RaULMEH7LdVfgfumKE9sLfJVo1zMw82vRd5WoO3TcEtJt///////////

TEMP_PASSWD.conf

TEMP_PASSWD

.btsearch

.btinstall

.btapp

.btskin

Setting value of setting %s key %d to %s

Cookie: %s

%s/%s/%s

%s%s/%s

psapi.dll

"name": "%s"%c %s%c %s

%s %dx%d

"video_codec": "%s", "video_bitrate": %d, "fps": %d, "video_x": %d, "video_y": %d

%s %dkbps

"audio_codec": "%s", "bitrate": %d, "sample_rate": %d

rss_feed_url

streaming_url

Failed btapp function %S, reason '%s'

JS> %S

\u00x

AVI header too large in %S

Can't find AVI header chunk in %S

4:port

12:implied_porti1e

DHT: %s

Received: %u requests (%u B), %u replies (%u B), %u no quota (%u B), %u invalid (%u B)

Sent: %u requests (%u), %u replies (%u)

Num buckets: %d. My DHT ID: %s

Bucket %d: %.8X%.8X%.8X%.8X%.8X (nodes: %d replacement-nodes: %d, span: %d)

%dm %ds

Total peers: %d (in replacement cache %d)

Outstanding add nodes: %d

%d: %s/%s: %d peers

Total peers: %d

Total torrents: %d

5:nodes%d:

1:vliÞiÞiÞiÞiÞe

1:t%d:

1:v4:%c%c%c%c

1:n%d:%.*s

d1:eli%ue%u:%se

1:k%d:

3:sig%d:

%d:%s

5:token%d:

4:voteiÞ

implied_port

Ft ad unit will next refresh in %d seconds

Lrec ad unit will next refresh in %d seconds

AdUnitManager::CanInitViaSettings? EnableAds? %d lrec %d ft %d

ftEnabled = %d

lrecEnabled = %d

ftRefreshRatePattern = [%s]

lrecRefreshRatePattern = [%s]

adRefreshRatePattern = [%s]

ftAdId = %d

lrecAdId = %d

contactRate = %d

send_conversion = %d

cfu EnableAds? %d cfu lrec %d cfu banner %d; user lrec %d user banner %d

offers.adcookie

offers.ad_user_key

offers.server_ad_site

offers.server_ad_logging

offers.cfu_left_rail_offer_enabled

offers.cfu_sponsored_torrent_offer_enabled

offers.stat_sent_time

offers.lifetime_clicks_ft

offers.lifetime_clicks_lrec

offers.lifetime_ad_autoexec_errors

offers.lifetime_ad_image_errors

offers.lifetime_ad_missing_errors

offers.ad_traffic_tag

offers.site_id

offers.adcontrol

offers.firebuglite

offers.send_conversion

offers.enabled

offers.ftEnabled

offers.lrecEnabled

offers.lrecXButton

offers.lrecXUpgradeUrl

offers.piSettings

offers.survey

offers.adRefreshRatePattern

offers.ftRefreshRatePattern

offers.lrecRefreshRatePattern

offers.lrecAdTypes

offers.ftAdTypes

offers.contactRate

offers.adUrl

hXXp://cdn.bitmedianetwork.com/network/index.html

offers.ftAdId

offers.lrecAdId

offers.geoip_country

offers.clientReceivedAdRulesFromServer

offers.graphicscard_check_timestamp

offer.log

offer2.log

------------- log opened %s

--lrec is disabled: user %d cfu %d

--ft is disabled: user %d cfu %d

adurl

--ParseAdControls skipping dict not matching client version %d.%d.%d

--ParseAdControls skipping dict not matching client campaign code %d

--ParseAdControls url

lrecXUpgradeUrl

--ParseAdRules name %s

--ParseAdRules skipping dict not matching client version %d.%d

--ParseAdRules skipping dict not matching client id %s

--ParseAdRules skipping dict not matching client country %s

--ParseAdRules skipping dict not matching client language %s

--ParseAdRules skipping dict not matching client campaign code %d

--ParseAdRules %s %d

--ParseAdRules %s %d

--ParseAdRules %s [%s]

hXXp://utclient.utorrent.com/offers/plus-xpromo-cc84/

https?:\/\/.*bitmedianetwork\.com.*

https?:\/\/.*bittorrent\.com.*

?456789:;<=

!"#$%&'()* ,-./0123

&&&&6666????

""""****

2222::::

$$$$\\\\

00006666

####====

0123456789

activation response (%d): body = %s, err = %S

activation response: signature = %s

{ "license_key": "%s", "fingerprint": "%s", "can_update_license": true }

activation request: %s

key %s%s%s

{ "license_key": "%s", "fingerprint": "%s" }

Opening help file: %S %S

hXXp://download.utorrent.com/help/utorrent-help-3421.zip

utorrent.chm

hXXp://VVV.utorrent.com?client=%s%s

hXXp://forum.utorrent.com?client=%s%s

hXXp://content.bittorrent.com?client=%s%s

hXXp://bit.ly/18x3YHD?client=%s%s

hXXp://VVV.utorrent.com/faq?client=%s%s

bittorrent.com

.btkey

onWmClose: %s

onWmClose: msg %d

hXXp://update.bittorrent.com/time.php

hXXp://VVV.facebook.com/utorrent

hXXp://twitter.com/utorrent

DoDestroy %s

"action":"%s.%d.%d.d.%d.d"

hXXp://bundles.bittorrent.com/feed.rss

hXXp://beta.bundles.bittorrent.com/feed.rss

[autorestart] Attempting to upgrade: (%S) -> (%S)

http%s://%s:%d%s

VVV.bittorrent.com

Can't connect to %s Remote - username or password incorrect/invalid

udp://tracker.openbittorrent.com:80/announce

udp://tracker.publicbt.com:80/announce

udp://tracker.ccc.de:80/announce

WM_ENDSESSION mode %d lparam %x

english.txt

MsgBoxData

TaskDialogIndirect

comctl32.dll

uxtheme.dll

ll.download3.utorrent.com

llsw.download3.utorrent.com

error %d

UxTheme.dll

inspsearch.com

%s/favicon.ico

file=%U

%S#hXXp://localhost:%d

Shell32.dll

?Mininova|hXXp://VVV.mininova.org/search/?cat=0&search=

update.utorrent.li

http%s://%s/checkupdate.php

hXXp://%s/updatestats.php

hXXp://%s/installstats.php

hXXp://%s/update_event.php

%s Updater

"g_version":%d, "action":"autoupdate window click", "choice":"%s", "no_sau":%d

u.url

u.siz

u.sha

u.sig

u.ver

l.url

l.siz

l.sha

l.sig

l.ver

u.msg

tb_badge_url

specialOfferAcceptUrl

cid=%s&cc=%d&l=%d

sv.id

sv.mode

sv.title

sv.url

sv.dur

sv.min

sv.max

sv.spcnt

IgnoreCheckNewVerCallback: error=%S,err=%d, reply=%s

Received search: %S

New search URL added (first check): %S

After removing duplicate previously seen searches: %S

served_search_list set to %S

After removing duplicate user searches: %S

search_list set to %S

CheckNewVerCallback: error=%S,err=%d, reply=%s

Got autoupdate response [%s]

searchUrls

trayOfferImageUrl

trayOfferTargetUrl

Got blacklist with %u items.

bv[%i]: %i (build %S)

MS_Windows

%u,%u,%u,%u,%u

tk=%U

sids=%s

&lv=%d_%d_%U

rgc=%d

pt=%s

ap=%s

incodecs=%s

outcodecs=%s

doainstalled=%U

ie=%S

secp=%U

secn=%U

cehh=%S

Sending autoupdate request [%s]

%s.%d.%d.d.%d.d

"tags":[ %s ]

Sending autoupdate exit ping [%s]

%s?h=%s&v=%d&ol=%U&ul=%U&tk=%U&c=%U

%s?license_key=%s&fingerprint=%s

hXXp://apps.bittorrent.com

Failed to connect to host at: %s

CrashMsgBoxThread

.opcandy

.bunndle

.opinstall

.adknow

Portuguese (Brazil)!ptBR

Portuguese (Portugal)!pt

hXXp://utorrent.com/download/langpacks/dl.php?build=37754&ref=client&client=utorrent&sys_l=%s&sel_l=%d&tk=%s

offers.featured_content_url

gui.last_preference_tab-1.8

gui.last_overview_tab-1.8

gui.last_bundle_visit

gui.last_badging_check

gui.bundle_rss_etag

gui.bundle_rss_last_modified

gui.cat_all_expanded

gui.cat_labels_expanded

gui.cat_rss_expanded

gui.cat_devices_expanded

gui.last_tree_node_installer

gui.granular_priority

gui.overhead_in_statusbar

gui.show_av_icon

gui.show_rss_favicons

gui.ulrate_menu

gui.dlrate_menu

gui.manual_ratemenu

gui.show_player_node

gui.use_fuzzy_dates

gui.show_notorrents_node

gui.find_pane_user_clicked

gui.bundles_tab_user_clicked

gui.auto_restart

webui.remote_enable

gui.dblclick_seed

gui.dblclick_dl

gui.color_progress_bars

gui.launch_plus_app

btapps.startup_app_url

btapps.startup_app_arg

vpn.dark_mode

offers.left_rail_offer_enabled

offers.sponsored_torrent_offer_enabled

offers.featured_content_badge_enabled

offers.featured_content_notifications_enabled

offers.featured_content_rss_enabled

offers.featured_content_rss_url

offers.featured_content_rss_update_interval

offers.featured_content_rss_randomize

offers.404_url

offers.days_to_show

ERROR VerifyVersion failed with: %S

{"path":"%s","version":"%d","blacklisted":"%d","crash_count":"%d","opt_out":"%d","running":"%s"}

Saving new version to %S

SaveExeFail

Saving new lang file to %S

Checking for update on %s

"dmver":%d, "cau":%d

"status":"%S"

LaunchTargetVersion removed non-existent target: %S

"status":"Removed missing target:%d"

Launching version: %d with command line: %S

Target path: %S

JSON dump: %s

LaunchVersion: ShellExecute returned %d.

"status":"ShellExecute returned:%d"

CopyVersionToInstallDir new_path = %S

CopyVersionToInstall failed on WaitForSingleObject: %d

"status":%d

Relocate Version didn't find updates\ in path: %S

Failed to CopyVersionToInstallDir %S

Launching %S with command line: %S

RelocateVersion: ShellExecute returned %d.

"status":"ShellExecute returned %d"

"launched_target":%d,"updated":%d,"relocated":%d,

Failed to create directory: %S

,"res":"%s"

"res":"ReportCAUSuccess"

"res":"%s"

%s, "action":"%s", "g_version":%d, "no_sau":%d

[OnSAUPingDone] Handle: 0x%x

[OnSAUPingDone] Error: %d -- %S

%s%s"action":"%s","nosau":%d,"dl":%Lu,"fv":%d,"ev":%d,"cau":%d

[SendSAUMetrics] %s: %s

[SendSAUMetrics] Handle: 0x%x

error:%d msg:%S

download.utorrent.com

download.bittorrent.com

nvappfilter.dll

nvlsp.dll

MxAVlsp.dll

ifw_xfilter.dll

Niphk.dll

SARAH.dll

imon.dll

MImp.dll

MIPro.dll

radhslib.dll

Naomi Web Filter

adguard.dll

HMIPCore.dll

dnsq.dll

jesterrun0.dll

protect.dll

laf1.dll

Win32/Hoax.Renos.NAV

laf2.dll

laf3.dll

laf4.dll

laf5.dll

t0.dll

Trojan-Downloader.Agent.Pto

t1.dll

ftp34.dll

'%s' (%s)

'%s' (%s) (known malware!)

virus.bd_state

invalid map<K, T> key

HttpOpenRequestA

HttpSendRequestA

\DBGHELP.DLL

DBGHELP.DLL

\%d-%s.%.4x.dmp

bench.utorrent.com

{"h":"%s","cl":"%s","v":%d,"l":"%s","w":"%s","cts":%Ld,"tsi":%Ld,"eventName":"crash","action":"%s.%d.%d.d.%d.d","plus":%d,"bad_dlls":"%s"%s}

can't load wininet.dll

/crash.php?cl=%s&ver=%dU&h=%s&p=%dU&pr=%dU&s=%dU&svp=%d&ov=%d&plus=%d

&dl=%s

HttpOpenRequest failed

HttpSendRequest failed

HttpQueryInfo failed

Error %d :

OV_COL_SOURCE_URL

player.btinstall

%Y-%m-%d

LRecXUpgradeUrl

%s%cplus=%d&client=%s&x-source=%s

update_%s

%s?starttime=%Ld

%s&starttime=%Ld

%s&badge=%d

file=%s

badcert

plus=%d&cid=%s&code=%d

RSS_COL_SOURCE_URL

hXXp://VVV.utorrent.com/help/guides/rss

hXXp://cdn.ap.bittorrent.com/control/feature/tags/ut.json

hXXp://cdn.ap.bittorrent.com/control/feature/tags/bt.json

hXXp://cdn.ap.bittorrent.com/control/feature/tags/staging_ut.json

hXXp://cdn.ap.bittorrent.com/control/feature/tags/staging_bt.json

winmm.dll

hXXp://remote.utorrent.com/send?btih=

%s%H&dn=%U&message=%U&sid=%s&cid=%U

%s%H&dn=%U&message=%U

hXXp://tinyurl.com/api-create.php?url=%U

ndt.iupui.lga02.measurement-lab.org

ndt.iupui.dfw01.measurement-lab.org

ndt.iupui.sea01.measurement-lab.org

100kb.test

500kb.test

1mb.test

2mb.test

7mb.test

15mb.test

30mb.test

75mb.test

100mb.test

150mb.test

ndt.iupui.par01.measurement-lab.org

ndt.iupui.ath01.measurement-lab.org

ndt.iupui.ams01.measurement-lab.org

ndt.iupui.ams02.measurement-lab.org

ndt.iupui.lhr01.measurement-lab.org

ndt.iupui.lax01.measurement-lab.org

ndt.iupui.nuq01.measurement-lab.org

ndt.iupui.mia01.measurement-lab.org

ndt.iupui.atl01.measurement-lab.org

ndt.iupui.ord01.measurement-lab.org

ndt.iupui.lga01.measurement-lab.org

hXXp://ll.VVV.bittorrent.com/llspeedtest/

hXXp://update.utorrent.com/speedstats.php?result=

%s%d:%d:%d:%d:%s

hXXp://utorrent.com/testport?plain=1

&port=%d

hXXp://ll.VVV.bittorrent.com/llspeedtest/speedtestobjects.txt

hXXp://update.utorrent.com/speedserverlist.php

hXXp://VVV.utorrent.com/testport.php?port=%d

tcp_upload_limit

tcp_download_limit

tcp_upload_rate

tcp_download_rate

graph_import

hXXps://VVV.facebook.com/connect/login_success.html

hXXp://VVV.facebook.com/connect/login_success.html

hXXps://VVV.facebook.com/login.php

hXXp://VVV.facebook.com/login.php

hXXps://VVV.facebook.com/connect/uiserver.php

hXXp://VVV.facebook.com/connect/uiserver.php

hXXps://VVV.facebook.com/dialog/permissions.request

hXXp://VVV.facebook.com/dialog/permissions.request

hXXps://VVV.facebook.com/checkpoint/

hXXp://VVV.facebook.com/checkpoint/

&scope=%S

client_id=%S&redirect_uri=%s&response_type=token&display=popup%s

hXXps://VVV.facebook.com/dialog/oauth

hXXp://VVV.facebook.com/dialog/oauth

&to=%S

app_id=%S&display=popup&message=%s&redirect_uri=%s%s

hXXps://VVV.facebook.com/dialog/apprequests

libvlc_video_set_key_input

libvlccore.dll

libvlc.dll

--http-reconnect

^  ;;;; \

;70>:3QLC@<52/*63.UPF#!

111111111111

`::83336873:

#''}''}''

PMSG

-03@1@30-

,5$8<445,

version.dll

PE_COL_PORT

%s%S,

hXXp://bundles.bittorrent.com/bundle_tab

hXXp://beta.bundles.bittorrent.com/bundle_tab

%s?torrent_hash=%h

&ext=%s

.mpeg

.alac

.mp4v

.divx

.flac

.rmvb

.webm

.dvr-ms

registerPurchase_keyMissing

btresource://%S/index.html

hXXp://VVV.apple.com/itunes

certifiedlabel

client.os.name:Windows

client.browser.name:%s

client.kernel.version:%s

client.version:3.3.13

client.utorrent.version:%d

read: got error: %d

Download Bytes: %lu, time: %f

Download: %s

Upload: got error: %d

Upload Bytes: %lu, time: %f

Upload: elasped time: %f

Upload: %s

123456 654321

hXXp://help.utorrent.com/customer/portal/articles/257678

invalid object key (must be a string)

object key and value must be separated by a colon (':')

after key and value, inside map, I expect ',' or '}'

function not supported

operation canceled

address_family_not_supported

operation_in_progress

operation_not_supported

protocol_not_supported

operation_would_block

address family not supported

broken pipe

inappropriate io control operation

not supported

operation in progress

operation not permitted

operation not supported

operation would block

protocol not supported

Visual C   CRT: Not enough memory to complete call to strerror.

Operation not permitted

Inappropriate I/O control operation

Broken pipe

operator

GetProcessWindowStation

missing Key

Unrecognized key format

Invalid key JSON

ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789 /orders.bittorrent.com

01234567

User-Agent: orderLib HttpRequest

BaseCreateTorr::OnDoneBitrate: error(%s): %u

BaseCreateTorr::OnDoneBitrate: parse error(%s): %u

BaseCreateTorr::OnDoneBitrate: success(%S) rate=%u, duration=%u, width=%u, height=%u

hXXp://%s/talon/seed/%S/content/%x

hXXp://%s

hXXp://VVV.mybrowserbar.com/images/pixel.gif?tb=1&cnid=%d

hXXp://download.mybrowserbar.com/kits/sds/SearchProtectionSetup.exe

.bittorrent.com

.utorrent.com

cleverbridge.com

.cleverbridge.com

NullRNG: NullRNG should only be passed to functions that don't need to generate random bytes

: this object doesn't support multiple channels

PK_Signer: key too short for this signature scheme

PK_MessageEncodingMethod: this signature scheme does not support message recovery

CryptoMaterial: this object does not support precomputation

Y:\jenkins-workspace\workspace\ut-build-slave-master\ut_win\Build\Win32\Release\utorrent.pdb

Crypt32.dll

CertFreeCertificateContext

PFXImportCertStore

PFXExportCertStoreEx

CertEnumCertificatesInStore

CertCloseStore

CertCreateSelfSignCertificate

CertOpenStore

CertStrToNameW

CertAddCertificateContextToStore

CertSetCertificateContextProperty

CryptMsgClose

CertFindCertificateInStore

CryptMsgGetParam

CertGetNameStringW

CertVerifyCertificateChainPolicy

CertGetCertificateChain

CertFreeCertificateChain

wintrust.dll

About %s

Publisher: %S

Release Date: %S

Version: %S

Description: %S

Update URL: %S

A single purchased copy of %s Plus can only be installed on a set number of computers. This copy has been installed on too many different computers.

Please either purchase a new copy for this computer, or contact us at hXXp://help.bittorrent.com if you think you're getting this message in error.

The directory you chose is not on the same drive as the %s client. It will not come along when you move the USB drive. Are you sure you want to continue?

Would you like to add "%s" to your search list?

%s application %s failed to copy to %s

This app was downloaded from %S

Installing %s

This %s app was downloaded from a website.

Title: %s

Are you sure you want to open the containing folders for %d torrents?

Are you sure you want to open the converted files for %d torrents?

Are you sure you want to open %d torrents?

Unable to find '%s'.

Error '%s' while downloading URL.

The contents of this torrent were verified to be free of viruses and spyware on %s

All files (*.*)

The app '%s' is requesting access to:

%s%s%s%s%s%s%s%s%s%s

Missing update url

Missing index.html

GetContentFile() does not contain [btinstall.txt]

App load failed (%s)

BtApp does not contain index.html

Are you sure you want to add %d torrents?

The installation of "%s" is complete

Can't open .torrent file: %s

Warning: Delete to trash failed for %s. Error: %d. Deleting permanently.

Failure: %s

Executing: %s

Unable to load "%s": %s!

Unable to save .torrent to '%s'.

Warning: %s

Checking auto portmap configuration ...

Checking queue ... we are #%d.

Unable to save to '%s'.

The directory you have selected contains more than 1000 files. The resulting .torrent will get very large. A better idea is to put the files into a compressed file and then share that file.

Please enter a valid tracker URL. Do you want to continue without having any trackers?

There was an error computing the hash: (%d) %s

The tracker protocol is invalid. udp, http and https are the only valid ones. Do you want to continue without having any trackers?

*.torrent

You have selected to share your entire My Documents folder and all its files. It is not advisable to do so unless you are certain you want to share all the contents, including possibly private documents.

The file or directory '%s' cannot be found. Please enter a different filename. Note that you can't share the root of a drive.

Select where to save the .torrent

Let Windows decide based on media type

%u Ratings

Click here to learn more about BitTorrent Certified devices

hXXp://VVV.bittorrent.com/certified-devices/

Plug USB into BitTorrent Certified playback device

Stream to BitTorrent Certified MOVE device

Make media playable in BitTorrent Certified devices

Check out these apps to experience %s\u00ae on tablets, mobile devices and more

Simple, secure access to your %s client on any device

%s\u00ae For Android

%s\u00ae For Mobile

%s\u00ae Remote

Webpage

BitTorrent Certified Device

BitTorrent Certified

Feed URL:

Enter Password

Web Seeds:

Website:

Website

Portable mode

The following options automate the configuration of some additional settings in Windows.

Torrent in Windows Firewall

Torrent when Windows starts up

.torrent (BitTorrent files)

.btsearch (BitTorrent Search Engine files)

Add Torrent from URL

Please enter the location of the .torrent you want to open:

Sports Fan

Windows Integration

Torrent when Windows Starts

&Boss-Key:

Use Boss-Key password

Location of .torrents

Store .torrents in:

Move .torrents for finished jobs to:

&Automatically load .torrents from:

&Delete loaded .torrents

Listening Port

Port used for incoming connections:

Random port

Enable &UPnP port mapping

&Randomize port each start

Enable &NAT-PMP port mapping

Add Windows &Firewall exception

Password:

Disable connections unsupported by the proxy

Apply rate limit to transport overhead

Enable UDP tracker support

IP/Hostname to report to tracker:

Enable &Web UI

&Password:

Alternative &listening port (default is the connection port):

Just enable the connection below, choose a computer name and password and remember to leave this computer on.

Visit hXXp://remote.utorrent.com/ and enter this computer name and password.

%1 stands for the command which is the chosen streamable file outputted by the build-in local loopback http server. You could add extra parameters for the player you selected.

Search Engines [Format: name|URL]

Current Port: (0:random)

Automatic Port Mapping (Recommended)

&Run speed test at: VVV.dslreports.com

Current Port: [0: auto]

&Test if port is forwarded properly

We recommend downloading a clean version directly from the content provider's website.

Web Seeds

%F - Name of downloaded file (for single file torrents)

%D - Directory where files are saved

%S - State of torrent

Update URL

Torrent, %d.%d.%d build %d is already installed. Would you like to downgrade to %d.%d.%d build %d?

Downloading %s ...

Failed to download your plus licence key. Please try again.

Failed to download your Pro licence key. Please try again.

unsupported piece size (%Z)

unsupported torrent size (%Z)

ffmpeg Process aborted with error %d. Unknown error

More information may be found in the transcript log at %%appdata%%\%S\media

File move target %s already exists. Overwrite?

Search the web for content

A web page showing results will launch

But you can alternately copy and paste Torrent URLs into the client.

There was an error opening %s.

There is no media player associated with the %s%sfile type.

Today is your lucky day! By entering your email you will be able to automatically unlock more free stuff from %s.

Before you delete %s, have you unlocked all the free content? One click and you'll get more.

The BitTorrent Bundle %s has new content available. Click update to get the new content!

The BitTorrent Bundle %s has new content that just downloaded. View the new content by clicking below!

You will leave uTorrent and your browser will open to unaffiliated Web sites.

%#Z (%d hashfails)

%d x %#z (have %u)

scrape not supported

%d of %d connected (%d in swarm)

Grid: %d days

%d days

Time (%s step)

Could not download help file. Error: %s

Invalid redirect (%S)

invalid http reply

invalid URL

Too many redirects (%S)

Installing %s ...

By clicking "I Agree", you acknowledge that you have read and agree to the End User License Agreement and <a href="hXXp://VVV.bittorrent.com/legal/privacy">Privacy Policy</a>.

Beware of online scams! A number of websites have taken our free

Torrent client and attempt to charge money for it through some sort of "fee" or "subscription" or else they install it for free but infect your computer with malicious code in the process. To protect yourself, be sure to only download our software from hXXp://VVV.utorrent.com. You should NEVER under any circumstances pay for free

Unsupported Operating System (OS)

This wizard will guide you through the installation of %s

, the #1 torrent download client on desktops and mobile devices worldwide. %s

Version: %s (Build %s) by BitTorrent, Inc.

This wizard will guide you through the installation of the official %s

torrent download client from BitTorrent Inc., the inventors of the BitTorrent protocol. %s

Version: %s (Build %s)

%s does not not support the Windows 2000 OS and may not

a newer Windows OS.

error: %d

Kill hanging %s processes?

There were errors loading the language file. Please see the file uTorrent.exe.log in the application directory.

The install of %s failed.

Log WebUI requests

Unable to copy .torrent from '%s' to '%s': (%d) %s

Choose where to download '%s' to:

Choose where to save %s

Failed to connect to %s Remote because your client is not compatible.

Some software installed on your computer prevents %s

from working properly. This is possibly caused by the following DLLs '%S %S'

Last %d days

(Login)

DHT: %d nodes%s

Torrents (*.torrent)

%s detected '%S' (%S) appears to be installed on your computer. That is known malware, and might cause %s to crash or behave strangely, including but not limited to using up all your RAM and freezing. Please run a virus/malware checker.

Would you like to make %s the default torrent application?

You appear to be running version d.d of the NVIDIA Network Access Management tool.

This version has known issues which may create problems with %s.

Please upgrade your NVIDIA software to at least version d.d.

Are you sure you want to exit %s?

Registration failure%S%S

Failure reclaiming account%S%S

Failure registering security question%S%S

D: %s%z/s

U: %s%z/s

Select a .torrent to open

%s: ERROR MSG: %s

%s: ERROR: received message type %d (expected %d)

Transferred last %d days: %#Z

Total Running Time: %d:%.2d:%.2d

Number of torrents added: %d

Program launched: %d times

Last launched: %s

# incoming conns since start: %d

# outgoing conns since start: %d

# handshake: %d

# connections: %d

# uTP connecting: %d

# TCP connecting: %d

# half-open: %d (%d queued)

Disk Cache overloaded %d %%

You should change the listen port.

A firewall/router is limiting your network traffic. You need to open up a port so others can connect to you.

%d(%d) downloading, %d(%d) seeding

D:%s U:%s - %s

Select a .torrent to update to

Be sure to exit %s before you unplug the USB drive!

Failed to connect to %s Remote %S%S%s

Press "OK" to review your login settings.

Failed to connect to %s Remote because the username or password was wrong.

Would you like to register a new account under the name "%S"?

Add Torrent from &URL...

&Bundle Webpage

&Learn more about %s Plus

&Learn more about %s Pro

&Get %s Plus

&Get %s Pro

Test hang report

Torrent &Webpage

Copy Stream &URL

%s - %z/s

%s %#Z of %#Z

%s - %s remaining

%s - Initializing download

%s - WARNING: Possibly insufficient sources

&Delete .torrent

D&elete .torrent   Data

Open URL in Bro&wser

Remove and d&elete .torrent   Data

Error moving file: %S (%d)

Failed to relocate file %s, %s

Today is your lucky day! %s will automatically update periodically - with new content delivered right to you.

In order to gain access to any free updates from %s, you have to keep it in your queue. Easy, right?

Bad port number

Bad Port number received

Checking for forwarded port

Server does not support this client

%s error: %s (%d)

Problem reading web100 variables.

Float denormal operand

Float invalid operation

Add Url

Bw.Alloc

Source URL

Are you sure you want to remove the %d selected torrents%s?

Are you sure you want to remove the selected torrent%s?

unsupported

Error: %s

Flushing to disk (%d)

Ready in %s

Please feel free to read our <a href="hXXp://VVV.bittorrent.com/legal/privacy">Privacy Policy</a>

%d days ago

%d hours ago

%d minutes ago

%d months ago

%d weeks ago

%d years ago

Failed to connect to %s Remote. This appears to have happened because you are running a peer blocking application such as PeerGuardian or PeerBlock. These programs are not currently compatible with %s Remote. You should either disable your peer blocking application, or disable %s Remote.

Port

Congratulations! Your software is turning into %s Plus as we speak, and all features will be ready to use in about a minute.

To learn about your new features, please refer to the %s Plus forums.

%s Plus Player is installing. Please try again shortly.

Upgrade to %s Plus to protect yourself from viruses hiding in torrents.

Upgrade to %s Plus to convert this file so it can be played.

Port Forward test complete. %s

Results: Port not open.

A single purchased copy of %s Pro can only be installed on a set number of computers. This copy has been installed on too many different computers.

Congratulations! Your software is turning into %s Pro as we speak, and all features will be ready to use in about a minute.

To learn about your new features, please refer to the %s Pro forums.

%s Pro Player is installing. Please try again shortly.

Upgrade to %s Pro to protect yourself from viruses hiding in torrents.

Upgrade to %s Pro to convert this file so it can be played.

%u Comments

RSS: Feed already exists "%s"

Really delete RSS Feed "%s"?

Really delete %d RSS Feeds?

Open URL in &Browser

Date of last match: %s

Last episodes matched: %s

Really delete RSS Filter "%s"?

Really delete %d history entries?

RSS: Smart filter has rejected "%S"

RSS: Unable to load "%S": %s

RSS: Unable to download "%s": %s

Failed to disconnect correctly. Error %d

Could not establish secure connection. Error %d

Could not initialize security context. Error %d

Could not decrypt data. Error %d

Could not send data. Error %d

Could not encrypt data. Error %d

Could not validate server cert chain

Transfer files converted for BT Certified Device.

The file '%s' could not be read.

The file '%s' could not be written to.

The file '%s' is in use by another process and can't be opened.

The file '%s' was not found.

Unknown error opening file '%s'

The file '%s' has been recovered.

You have to restart %s for the changes to take effect.

Executable (*.exe)

*.exe

More info is in the <a href="hXXp://VVV.utorrent.com/faq">FAQ</a> and at <a href="hXXp://portforward.com/">portforward.com</a>

PostMessage failed h:%d i:%d t:%d e:%d

Results: Port is not open (you are still able to download).

Port mapping will speed downloads and enable seeding. More info in FAQ and at portforward.com

Results: Port is open. Your network is properly configured.

This test will use <a href="hXXp://VVV.utorrent.com/faq#mlabs">Measurement Lab</a> tools to check and set your bandwidth limits.

If no location is near, you can test at <a href="hXXp://dslreports.com/speedtest/">dslreports</a> and input your upload speed.

%s Setup Guide

%s Bandwidth Configuration

%s will test your network and configure itself for best performance.

Please enter a valid port number from 0-65535.

This is a likely service port. Please choose another.

(You can change this setting in bt.no_connect_to_services_list)

Tried to redirect to invalid url

Will redirect to URL: %S

Automatic Shutdown will initiate in %d seconds.

Hibernating computer... %s

Restarting computer... %s

Shutting down computer... %s

Stand-by computer... %s

(Alternate speed test at <a href="hXXp://dslreports.com/speedtest/">dslreports</a>)

TCP upload rate

TCP download rate

import

TCP upload rate limit

TCP download rate limit

%s is still starting up

Web UI

HTTPS

Contains: "%s"

This operation cannot be undone.

A security question can be used later to transfer your %s Remote username to another computer. Would you like to create one now?

Ý %dh

%dh %dm

%dw Ý

%dy %dw

Enter the IP:port / [IPv6]:port of the peer to add:

Executable files (*.exe)

Download Complete|%s has finished downloading.

A BitTorrent Featured Bundle|%S

New Download from RSS|%s has started downloading.

New version|A new version of %s is now available!

!Error|There is not enough disk space to move %s to its final location

!Torrent Error|File: %s

Can't accept %S with invalid character '%S'

Can't accept %S with length %u greater than %d characters.

Please enter a %S.

Are you sure you want to remove the %d selected trackers?

You must enter a password to use %s Remote.

Could not contact the %s Remote service to register.

There is already a computer using the username "%S".

That was not the correct security answer for the username "%S". Try again.

Status: Reconnecting in %d seconds

Status: failed to load Secur32.dll or Security.dll

Uninstalling %s ...

Are you sure you'd like to uninstall %s?

This will remove the %s app only. None of your in-

%s failed to update. Please try again.

%s update failed. Unable to start the new process.

failed to launch exe %s

failed to acquire mutex %s

attempted downgrade %x -> %x

mismatching exe versions

%s Upgrade

This wizard will guide you through the %s upgrade process.

Updates are now build into %s, so you'll always have the latest and greatest stable version of the software including security enhancements, bug fixes and new features.

Updates are now built into %s, so you'll always have the latest and greatest stable version of the software including security enhancements, bug fixes and new features.

This wizard will guide you through the upgrade of %s by BitTorrent, Inc. - the world's premiere, feature-rich torrent client.

Password did not match.

Could not download WebUI file. Error: %s

Could not download WebUI information. Error: %s

WebUI file not found - attempting to download

%s has requested permissions on %s:

%s has requested access to %s.

cfgmgr32.dll

Acfgmgr32.dll

zcÁ

>012?456789:;<=

.?AUNoChannelSupport@BufferedTransformation@CryptoPP@@

.?AVKeyTooShort@PK_SignatureScheme@CryptoPP@@

.?AVInvalidKeyLength@PK_SignatureScheme@CryptoPP@@

.?AV?$ASN1CryptoMaterial@VPublicKey@CryptoPP@@@CryptoPP@@

.?AVX509PublicKey@CryptoPP@@

.?AVPublicKey@CryptoPP@@

.PAVRSAFunction@CryptoPP@@

C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\uTorrent.exe

d%%d%Ý%%d%%d%Ý%%d%%d%Ý%%d%%d%Ý%%d%%d%Ý%%d%%d%Ý%%d%%d%Ý%%d%%d%Ý%%d%%d%Ý%%d%%d%Ý%%d%%d%Ý%%d%%d%Ý%%d%%d%Ý%%d%%d%Ý%%d%%d%Ý%%d%%d%Ý%%

O&%dYVm

dg.uJ

R~R.vY

.Ot`T

.0%Uh

22222222222

hiTXtXML:com.adobe.xmp

" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c061 64.140949, 2010/12/07-10:57:01 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:B47FF0923C20681192B095FBA0BDE87C" xmpMM:DocumentID="xmp.did:A73C2BBE2C3A11E2AAF3FB98CA5D1086" xmpMM:InstanceID="xmp.iid:A73C2BBD2C3A11E2AAF3FB98CA5D1086" xmp:CreatorTool="Adobe Photoshop CS5.1 Macintosh"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:FA7F117407206811871FA3823ACE12F9" stRef:documentID="xmp.did:B47FF0923C20681192B095FBA0BDE87C"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>02

" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c061 64.140949, 2010/12/07-10:57:01 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:B47FF0923C20681192B095FBA0BDE87C" xmpMM:DocumentID="xmp.did:3A9F8C87223011E2BF0C8C1B3C994937" xmpMM:InstanceID="xmp.iid:3A9F8C86223011E2BF0C8C1B3C994937" xmp:CreatorTool="Adobe Photoshop CS5.1 Macintosh"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:01801174072068118DBBC9C0B36B2C90" stRef:documentID="xmp.did:B47FF0923C20681192B095FBA0BDE87C"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>

uB.Fw

p:\|w

J%U.\h

?j%FH

siTXtXML:com.adobe.xmp

" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.5-c014 79.151481, 2013/03/13-12:09:15 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:70e7a016-749f-4873-a97d-3ffa3c408cdb" xmpMM:DocumentID="xmp.did:EF44648C6CE511E3A46EC0A9C6415F84" xmpMM:InstanceID="xmp.iid:EF44648B6CE511E3A46EC0A9C6415F84" xmp:CreatorTool="Adobe Photoshop CC (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:12603d90-f86b-4177-8c48-f7d68043da6c" stRef:documentID="xmp.did:70e7a016-749f-4873-a97d-3ffa3c408cdb"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>GUW

" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.5-c014 79.151481, 2013/03/13-12:09:15 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:70e7a016-749f-4873-a97d-3ffa3c408cdb" xmpMM:DocumentID="xmp.did:EF4464906CE511E3A46EC0A9C6415F84" xmpMM:InstanceID="xmp.iid:EF44648F6CE511E3A46EC0A9C6415F84" xmp:CreatorTool="Adobe Photoshop CC (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:12603d90-f86b-4177-8c48-f7d68043da6c" stRef:documentID="xmp.did:70e7a016-749f-4873-a97d-3ffa3c408cdb"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>

" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.5-c014 79.151481, 2013/03/13-12:09:15 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:70e7a016-749f-4873-a97d-3ffa3c408cdb" xmpMM:DocumentID="xmp.did:2BFDB2AF69FD11E3A46EC0A9C6415F84" xmpMM:InstanceID="xmp.iid:2BFDB2AE69FD11E3A46EC0A9C6415F84" xmp:CreatorTool="Adobe Photoshop CC (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:12603d90-f86b-4177-8c48-f7d68043da6c" stRef:documentID="xmp.did:70e7a016-749f-4873-a97d-3ffa3c408cdb"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>]Q|

" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.5-c014 79.151481, 2013/03/13-12:09:15 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:70e7a016-749f-4873-a97d-3ffa3c408cdb" xmpMM:DocumentID="xmp.did:2BFDB2B369FD11E3A46EC0A9C6415F84" xmpMM:InstanceID="xmp.iid:2BFDB2B269FD11E3A46EC0A9C6415F84" xmp:CreatorTool="Adobe Photoshop CC (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:12603d90-f86b-4177-8c48-f7d68043da6c" stRef:documentID="xmp.did:70e7a016-749f-4873-a97d-3ffa3c408cdb"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>

Created with ajaxload.info

99999999

66666662

62222222

9999999555

[[[73322223

____[[[_

66666666

222222222

1.css

1.html

2.css

2.html

jq.js

]\D`;%F

%fko)

.Ht":

H6l.Emj

PeekNamedPipe

CreatePipe

GetCPInfo

WinExec

GetWindowsDirectoryW

GetProcessHeap

CryptDestroyKey

CryptGenKey

RegOpenKeyExW

RegEnumKeyExW

RegDeleteKeyW

RegCreateKeyExW

RegCloseKey

RegQueryInfoKeyW

ShellExecuteA

ShellExecuteW

SHFileOperationW

SHDeleteKeyW

MsgWaitForMultipleObjects

GetAsyncKeyState

keybd_event

RegisterHotKey

UnregisterHotKey

ExitWindowsEx

EnumWindows

CreateDialogIndirectParamW

EnumChildWindows

SetWindowsHookExW

UnhookWindowsHookEx

GetKeyNameTextW

MapVirtualKeyA

FindNextUrlCacheEntryW

FindCloseUrlCache

DeleteUrlCacheEntryW

FindFirstUrlCacheEntryExW

.text

`.rdata

@.data

.rsrc

%s\stats-%s.txt

chrome

firefox

Software\Classes\%s\shell\open\command

Software\Classes\%s\shell

Software\Classes\%s

Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\%s\OpenWithProgids\%s

Software\Classes\MIME\Database\Content Type\%s

MIME\Database\Content Type\%s

Software\Microsoft\Windows\CurrentVersion\Uninstall\uTorrent

uTorrent.exe

application/x-bittorrent-key

Software\Classes\Applications\uTorrent.exe

Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\uTorrent

INSTALLDEBUG: QueryDisplayVersion. Installed version: %s

%s%s%s%s

RunElevatedInstall: %s with params [%s]

%s /STARTAPP %s

%s /LAUNCHBUNDLEDURL %s

%s /LAUNCHBUNDLEDURLTYPE %s

%s /AUTOMATION

%s /MINIMIZED

%s /NOINSTALL /BRINGTOFRONT

dht.dat

flags.conf

ipfilter.dat

resume.dat

rss.dat

settings.dat

INSTALLDEBUG: Could not create installation directory [%s]

%d.%d.%d.%d

mURLInfoAbout

"%s" "%%1"

Software\Classes\.torrent\OpenWithProgids

Software\Classes\.btsearch\OpenWithProgids

Software\Classes\Applications\uTorrent.exe\shell

Software\Classes\Applications\uTorrent.exe\shell\open\command

INSTALLDEBUG: Version String returned: %s

INSTALLDEBUG: Parsed version : major: %d minor: %d tiny: %d build: %d

CLSID\{3041D03E-FD4B-44E0-B742-2D9B88305F98}

CLSID\{F0D4B239-DA4B-4daf-81E4-DFEE4931A4AA}

CLSID\{D4027C7F-154A-4066-A1AD-4243D8127440}

CLSID\{91397D20-1446-11D4-8AF4-0040CA1127B6}

{88c7f2aa-f93f-432c-8f0e-b7d85967a527}

{ad06fb5f-fef7-4a84-8c58-dca34f8e3d36}

{ef79f67a-6ad7-4715-a0f8-932fca442023}

{1d03a978-ac0c-4004-b9fd-9cf361c7bd3f}

{64ead72b-ffd4-4e01-aa3a-4c71665d73e4}

{29acf17c-1713-4286-8f40-bfd05f1e70c8}

{7b6de06c-7013-4a87-957e-d27d7b977d21}

{2d8d9acc-f6d7-4362-8876-a275ca929591}

{656461ef-40f6-4115-9ff1-bced9812ccbb}

{1fd59ce2-6236-467c-9539-3d8c93fea5e0}

{49C795C2-604A-4D18-AEB1-B3EBA27E5EA2}

{7473B6BD-4691-4744-A82B-7854EB3D70B6}

{B6AC5E3C-5CEB-4E72-B451-F0E1BA983C14}

{5BA8E555-8C08-4CC8-80E6-1F8CDD26AE3A}

{6DA66498-839A-42A7-8324-FF7D2A532835}

{4E871705-D1F3-49D9-814F-1E46E85986B0}

{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}

{db131c55-60c8-4adc-84dc-9e76ab06e2dc}

{05eeb91a-aef7-4f8a-978f-fb83e7b03f8e}

{4ae0c3d6-f713-4eed-bc65-25dc3ffdaac1}

{c840e246-6b95-475e-9bd7-caa1c7eca9f2}

{e0301295-ab3e-4af3-979f-3d453c5f9f48}

{87775fdb-6972-41f9-ae51-8326e38cb206}

{181f104b-b000-4010-bb18-41b8205f774d}

{03ea5b10-2efa-4311-ac10-04427b02d663}

{e9df9360-97f8-4690-afe6-996c80790da4}

CLSID\%s

SOFTWARE\Conduit\Platforms\%s

SOFTWARE\AppDataLow\Software\%s\toolbar\IE5

Software\Microsoft\Windows\CurrentVersion\Ext\Settings\%s

hXXp://VVV.mybrowserbar.com/images/pixel.gif?tb=%d&cnid=%s

hXXp://VVV.mybrowserbar.com/images/pixel.gif?yxds=%d&yxhp=%d&yxov=1&cnid=%s

,Riched20.dll

%s %S %S %S

%s %S

Initializing OfferAPI supported-> %d

Stoolbar_offer.benc

toolbar.benc

button label: %s

3.4.2

apps\featuredContent.btapp

apps\plus.btapp

apps\welcome-upsell.btapp

apps\player.btapp

INSTALLDEBUG: Unable to create firewall rules for path [%s]

path:[%s]

\uTorrent.exe

INSTALLDEBUG: Volume: %s, Drive: %s

INSTALLDEBUG: Returning early. Installed version: %d, Our version: %d

/PERFORMINSTALL %d "%s" %u

INSTALLDEBUG: Returning...installResult = (%d)

INSTALLDEBUG: running from installed path = %d running from different drive = %d

INSTALLDEBUG: DoInstall(%d, %s)

"%s" %s

netsh.exe

interface ipv6 set teredo %s

netsh.exe interface ipv6 set teredo %s

Could not setup teredo, result was: [%s]

netsh.exe interface ipv6 install

Could not install teredo, result was: [%s]

Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\%s

Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\%s\UserChoice

Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\%s\OpenWithProgids

Software\Classes\%s\OpenWithProgids

Software\Microsoft\Windows\Roaming\OpenWith\FileExts\%s\UserChoice

maindoc.ico

%s URI

URL Protocol

%s\%s

%s\shell

%s\shell\%s\command

%s\Application

%s\Progid

%s\UserChoice

%s\OpenWithProgids

Software\Microsoft\Windows\CurrentVersion\Run

TerminateSessionClientInstances failed; hp:0x%X result:%d

INSTALLDEBUG: Initial GetVolumeInformation failed and detected possible UNC path [%s] without appended [\]; calling again

"%s" /UNINSTALL

plus_license.btkey

RunAsAdministrator: %s with params [%s]

lRunAsAdministrator(error executing %s with params [%s]): Error: %d

RunAsAdministrator(error executing %s with params [%s]): Unexpected exit code %d (expecting %d)

DDE operation timed out.

DDE operation failed.

DDE operation is busy.

RunAsAdministrator(error %d executing %s with params [%s]): %s

Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Layers

%s is running in Vista compatibility mode which is known to cause problems. Please allow %s to fix this by clicking "Yes" in the next dialog.

REG DELETE "HKLM\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Layers" /v "%s" /f

/C %s

RemoveCompatibilityModeKey(removal from HKLM returned %s)

Software\Classes\.torrent

unknown control id = %d

Local\%s

(TCP-In)

(UDP-In)

Windows Media Player

\smplayer.exe %1

Player.Path

client.exe

netprofm.dll

bt.log

PORTABLE

Ads %s -- GdiPlus.dll %s

Settings path: [%s]

Setting log file to '%s'

Log file set to path:[%s]

dht_feed.dat

LAUNCHBUNDLEDURL

LAUNCHBUNDLEDURLTYPE

hXXp://bundles.bittorrent.com/inclient/yes

hXXp://apps.bittorrent.com/featuredcontent/featuredcontent.btapp

INSTALLDEBUG: /PERFORMINSTALL with flags [%d] and path [%s]

.btapp?

Version: %s

valid plus key, but not activated. Attempting activation...

{CF59774A-CE9D-454D-AF29-1556367E1AC7}

{E3DC5C2B-082C-4800-8C52-B9F655B94D2C}

c:\%u%u.tmp

full %s root %s

Created canonical path %s from %s

%s\*.*

Found %d entries using filter %s in directory %s

\\?\%s%s

\\?\%s

:\bf2.exe

bf2142.exe

crysis.exe

gw.exe

halo.exe

hl.exe

hl2.exe

ut2003.exe

ut2004.exe

wolfmp.exe

wow.exe

quake.exe

glquake.exe

qw.exe

glqw.exe

quake2.exe

quake3.exe

quake4.exe

iourbanterror.exe

goldslam.exe

nksp.exe

pilauncher.exe

pistory.exe

rnclient.exe

twelvesky.exe

domo.exe

dreamlords.exe

stoneage2.exe

projecttorque.bin

iexplore.exe

firefox.exe

mplayer.exe

mplayerc.exe

wmplayer.exe

vlc.exe

peerblock.exe

pg2.exe

pglite.exe

peerguardian.exe

%s.%u.tmp

%s.new

GetMaxFileSize() returning %Ld for "%s"

D%s.exe

0123456789._

\uac_test.tmp

\Sysnative\..\explorer.exe

\explorer.exe

iError %d

google chrome

HTTP Reply %d

%s-%s

HTTP Error %d

REDIRECT:%S%S%S

Proxy connect error: %s

Proxy error: %S

Mozilla/5.0 (Windows NT %s%s; Trident/%d.0; EIE10; ENUSMSN; rv:%s)

Mozilla/%d.0 (compatible; MSIE %s Windows NT %s%s; Trident/%d.0

Mozilla/5.0 (Windows NT %s%s; rv:%s) Gecko/20100101 Firefox/%s

Mozilla/5.0 (Windows NT %s%s) Chrome/%s

MSIE %s;

Google Chrome

Software\Wow6432Node\Mozilla\Mozilla Firefox

Software\Mozilla\Mozilla Firefox

chrome.exe

HTTP Error 404

cexe

rpmsg

%s.%u.%s

[%s] %s

[%.2d:%.2d:%.2d] %s

HFile not found during integrity check: %s

%s.old

File failed verification: %s

Failed file save: %s

Safely saved file '%s'

File passed integrity check: %s

Warning: file integrity check failed (%s): %s

Ignore this warning if you switched to 1.6.1 or older and back

Windows ran out of memory. Unable to allocate %d bytes.

Bits on Wheels/1.0.%d

Bits on Wheels/%c%c%c

%s/%d.%d%d%d

Torrent .NET

Unknown %c%c

%s/%d.%d.%d.%d

Unknown %c

BitTorrent %c.%c.%c

BitTorrent %c.%c%c.%c

%s %i.%i

BitSpirit v2 UDP0

BitSpirit v2 HTTPBT

Blizzard %d.%d

Burst! %c.%c.%c

FlashGet %u.%u

MLdonkey %c.%c.%c

Opera %c%c%c%c

E208.67.222.222

208.67.220.220

ENOTE: Settings file found in directory of executable; using that.

The file '%s' was damaged/missing. It has been recovered.

current.btskin

Settings integrity check failed (duplicate keys: %d count: %d), repaired: %s

Error 73: %d/%d/%d/%d

TCP Half Open limit: %d

TCP Sockets: %d, Half Open: %d (total %d)

TCP Pending: %d

Total Sockets: %d

Read buffers: %u (%u bytes), avg %u

Write buffers: %u (%u bytes), avg %u

TCP-halfopen

[%d]: %d %s %A mode: %d state: %d

*** %s

Elevation:Administrator!new:%s

HNetCfg.FwPolicy2

HNetCfg.FwRule

Allow %s network traffic with Edge Traversal

Can't open log file '%s': %d %s

HTTP: IP %a: Bad Range value

HTTP: IP %a: can't accept cookie - incorrect format

HTTP: IP %a: Bad authentication header

HTTP: IP %a: Bad username/password

1Can't handle name length %d (> %d) for archive %s

Can't read entry name from archive %s: %d %S

Can't seek %d farther in archive %s: %d %S

Can't handle entry with flags %x in archive %s

Can't handle header with mismatched sizes %d %d in archive %s

Can't handle header method %d != 8 in archive %s

Accepting entry for file %S in archive %s

Found %d files in archive %s

Can't open archive file %s

Can't read directory of archive file %s

Can't find requested file %s in archive %s

Can't handle decompressed size %d/%d >= %d for archive %s

Can't set pointer in archive file %s to %d

Can't read from archive file %s

Can't decompress entry in archive %s

Can't read header of %s

Can't set pointer in btinstall file %s to %d

Can't read sectiontable of %s

Can't read section %d of %s

icon.bmp

%s\apps\%s\%s

%H.btapp

RegKey: Could not write string valuename %s value %s; Error %d

RegKey: Could not write binary valuename %s length %d; Error %d

RegKey: Could not write DWORD valuename %s value %d; Error %d

RegKey: Could not delete value %s: %d

RegKey::DeleteKey fail (%d): %s

RegKey::DeleteTree fail (%d): %s

content-type = %S error code = %d

default.log

adnative.log

bench.log

performance.log

download.log

shutdown.log

activation.log

updates.log

cfu.log

sau_metrics.log

auto_restart.log

hang_report.log

delete.log

toolbar.log

speed_monitor.log

k%s/*.btapp

Fapps\%s

Error contacting WebUI proxy service: %s

HTTP Error 400

HTTP Error 401

HTTP Error

Got proxy service response (%S:%d, %Ld bytes): %S

Disconnected from WebUI proxy service

sConnecting to raptor at %S

Sent raptor attach cookie: %S

****** DELETING FILE: %s

*.dat

global_resume.dat

%H.dat

resume.dat.temp

TCP port bind failed %A: (%d) %s

invalid key size

license key expired

invalid key

Fwebui

couldn't download webui info

Furladder

load missing index.html

missing index.html

missing update url

failed to verify certificate

bad url

unsupported piece size

unsupported torrent size

Unable to save .torrent

no uconnect password

%s %d.%d

%s %d.%d.%d

NError parsing URL: %s

*** %s: PIECE %d FAILED HASH CHECK

%s: Piece %d complete

e%s: Unable to move: %s

Moved file storage for torrent '%s' to '%s'

HAdding job to move file storage for torrent '%s' from '%s' to '%s'

Could not move data to completed download folder. Error: [0x%X]

%s: HTTP invalid URL: %S

%s: HTTP preventing DNS lookup: %S

%s.alt

DNS resolution failed for %s %S

hXXp://%S/announce

Tracker reports an invalid external IP

Finished receiving metadata for '%s' in %d seconds

ERROR: Metadata for '%s' could not be loaded! ("%s")

BAN peer: Responsible for '%s' metadata not being loaded!

Got metadata size %u, pieces %u

Got metadata size %u when I already thought it was %u

Peer send unsolicited metadata message: chunk %d

dError: %s - %s

%s (%S)

H%s\%H.dat

rBanned %T until %S

*** Sending BTMSG_TF_SEEDING_DONE for torrent '%s'

%s.torrent

%s.%d.torrent

%s.loaded

Unable to rename/delete '%s'.

HTMP=%s

TEMP=%s

Loading settings from path '%s'

HR.HDTV

HR.PDTV

WebRip

Can't download url %s - %s

%s|%s

RSS Channel title %s

%s|%S

%dx%.*d-%dx%.*d

%dx%.*d

C=US,ST=CA,L=San Francisco,O=BitTorrent,OU=%s,CN=%s

activeds.dll

adsldpc.dll

apphelp.dll

atl.dll

authz.dll

bcrypt.dll

bcryptprimitives.dll

browseui.dll

clbcatq.dll

comdlg32.dll

comres.dll

comsvcs.dll

credssp.dll

credui.dll

crypt32.dll

cryptbase.dll

cryptdll.dll

cryptsp.dll

cryptui.dll

cscapi.dll

cscdll.dll

cscui.dll

devobj.dll

dhcpcsvc.dll

dhcpcsvc6.dll

dnsapi.dll

dot3api.dll

dot3dlg.dll

dssenh.dll

dui70.dll

duser.dll

eapolqec.dll

eappcfg.dll

eappprxy.dll

ehstorshell.dll

esent.dll

explorerframe.dll

fastprox.dll

firewallapi.dll

fltlib.dll

fwpuclnt.dll

gdi32.dll

gdiplus.dll

gpapi.dll

hnetcfg.dll

icmp.dll

iconcodecservice.dll

ieframe.dll

iertutil.dll

imagehlp.dll

imm32.dll

iphlpapi.dll

kernelbase.dll

linkinfo.dll

lpk.dll

mpr.dll

mprapi.dll

msacm32.dll

msasn1.dll

msctf.dll

msctfime.ime

msdart.dll

msi.dll

msimg32.dll

msls31.dll

msv1_0.dll

msvcp60.dll

msvcp80.dll

msvcr80.dll

msvcr90.dll

msvcrt.dll

mswsock.dll

msxml3.dll

napinsp.dll

ncrypt.dll

netapi32.dll

netman.dll

netshell.dll

nlaapi.dll

normaliz.dll

npmproxy.dll

nsi.dll

ntdsapi.dll

ntmarta.dll

ntshrui.dll

ole32.dll

oleacc.dll

oleaut32.dll

onex.dll

peerdist.dll

pnrpnsp.dll

profapi.dll

propsys.dll

qutil.dll

rasadhlp.dll

rasapi32.dll

rasman.dll

riched20.dll

rpcrtremote.dll

rsaenh.dll

rtutils.dll

samcli.dll

samlib.dll

schannel.dll

sechost.dll

secur32.dll

sensapi.dll

setupapi.dll

sfc.dll

sfc_os.dll

shdocvw.dll

shfolder.dll

shlwapi.dll

shunimpl.dll

slc.dll

srvcli.dll

ssdpapi.dll

sspicli.dll

sxs.dll

tapi32.dll

tiptsf.dll

upnp.dll

urlmon.dll

userenv.dll

usp10.dll

utorrent.exe

vfbasics.dll

vfcompat.dll

vrfcore.dll

wbemcomn.dll

webio.dll

windowscodecs.dll

winhttp.dll

winnsi.dll

winrnr.dll

winspool.drv

winsta.dll

wldap32.dll

wmi.dll

ws2_32.dll

ws2help.dll

wshbth.dll

wship6.dll

wshtcpip.dll

wsock32.dll

wtsapi32.dll

wzcsapi.dll

wzcsvc.dll

xmllite.dll

xpsp2res.dll

Checked %:.1d%% (Active Num:%d)

@%s %:.1d %%

A Web Page

Can't %s device pair for %s

Can't add torrent %S because it is a duplicate of an existing torrent

URL: %S: OK

uT HTTP add torrent %S completed

WebUI Proxy Error: %s

!Proxy: %s

Can't download to directory '%s' which is outside of download directory '%s'

Chose download directory '%s' from dir %d '%s' sub-path '%s'

uT HTTP add torrent %S completion failed - status: %s

/Can't add torrent: %s

Settings %s

uT HTTP can't add torrent '%s': %s

uT HTTP torrent add of '%s' succeeded

Can't save temporary torrent file '%s'

IpFilter invalid line: [%S]

Loaded ipfilter.dat (%d entries)

UDP port bind failed %A: (%d) %s

mICMP port bind failed %A: (%d) %s

Zwebui.zip

Web UI storage base '%s' archive path '%s'

Can't open web UI archive file '%s'

Can't read directory in web UI archive '%s'

Can't download web UI information - %s

S.tmp

Attempting to read unarchived file %s

%s%s%s%s%s

%A%s(%s):

%A%s:

[%s (%:.1d)]:

Requesting Metadata %d/%d

Disconnect: %s

Requesting %d:%d->%d

Rejecting %d:%d->%d

Cancelling %d:%d->%d

Send Have %d

Send Donthave %d

Got unchoke from %s (%A), for seed only torrent

Got unchoke from %s (%A), can't request immediately because request queue is full (%d)

Got Expected Reject: %d:%d->%d

Got Reject: %d:%d->%d

Got Reject Unrequested!: %d:%d->%d

Sending Piece %d:%d->%d

Got PieceRequest I don't have: %d:%d->%d

Got Bad Request in SS mode: %d:%d->%d

Got Request while choked: %d:%d->%d

Got Request: %d:%d->%d

Got Cancel: %d:%d->%d

Got Cancel In Queue: %d:%d->%d

Got Cancel Unrequested: %d:%d->%d

Got Piece: %d:%d->%d

Got OLD Piece: %d:%d->%d

Got Piece Unrequested: %d:%d->%d

Banning peer: too many pex messages. %d since %S

Got PEX: %d added/%d dropped

received metadata message from peer that didn't advertise support

Reading msg %d piece %d

Got request for metadata which I do not have %d %d/%d

Metadata requests exceeded maximum request limit %d

Got request for metadata which I have %d/%d

Got zero metadata size. %d/%d

Got unrequested or cancelled metadata! %d %d %d/%d

Got metadata %d/%d

Got reject for unrequested metadata %d %d %d/%d

Got reject for metadata %d %d/%d

Got request for metadata which I can not read %d %d/%d

Send PEX: %d added/%d dropped

Sent Holepunch failure(%u)

Got Holepunch failure(%u)

Bad lt_donthave message (invalid length): %d

Bad lt_donthave message (piece index exceeds maximum): %d

Got Donthave %d

Bad lt_donthave message (piece already not had): %d

Extension: ipv4:[%a] for '%s'

Extension: ipv6:[%a] for '%s'

Got Have %d

Got Bad Have %d

Got Suggest Piece %d

Got Allowed Fast %d

No supported crypto methods

Connecting: source: %S

Disconnect: Proxy connect error: %s

Peer error: %s

TCP connections are not allowed

Dropping peer that has metadata, though we still want it for %s

Exceeded 5 seconds for %s metadata chunk %d

Sending %d bytes of aggregated data

DNS resolution failed for tracker %S

blocking DNS lookup for %s

[DISTSHARE] Authentication key appears to be missing.

[DISTSHARE] Authentication key appears to be the wrong size: %i/%i bytes.

[DISTSHARE] Authentication key does not exist!

[DISTSHARE] Invalid Distributed Share response command %c

magnet:?xt=urn:btih:%S&tr=%S

_25,80,110,443,6666,6667

Checking if torrent data files already exist in %s

Torrent data files already exist in %s

Setting storage folder to '%s' for torrent '%s' (directory '%s')

Torrent '%s' storage at '%s', root at '%s'

IO Error:%d line:%d pos:%Ld count:%d actual:%d

Error opening "%s": %E

ReadFile error: %s:%Ld:%d:%d:%d

%S(%x): %x:%x (fs %x)

%s-devpair.dat

hCan't add duplicate device pairing %s

Adding device pairing with id %s name %s

Found device pairing %s at %d of %d

Can't match key hash to device pair %s

twebcache.dat

Expiring all device pairing sessions associated with device %s

The file "%s" is signed and the signature was verified.

The file "%s" is not signed.

An unknown error occurred trying to verify the signature of the "%s" file.

Verify Sig Error: 0x%x.

CertGetNameString failed.

CryptQueryObject failed with %x

CryptMsgGetParam failed with %x

CertFindCertificateInStore failed with %x

Signer certificate mismatch

ICMP.DLL

~%sPartFile_%LX.dat

thumbs.db

.DS_Store

%s.%d

Moving files from '%s' to '%s'

L%s\%s\%s

ffmpeg.exe

s%s\~~%s

%s.log

%S [%d]: %S

upnp_log.txt

UPnP: Unable to create socket: %d

UPnP: Unable to setsockopt: %d

UPnP: Could not join multicast group: %d

UPnP: Could not setup socket to send multicast packets: %d

UPnP: Could not set unicast TTL: %d

UPnP: Could not set multicast TTL: %d

DEBUG: UPnP: Send error [socket %p]: %d

DEBUG: UPnP: Not replying to Service Type [%S]

UPnP: Discovered new device: "%S" %S

%s: No longer have piece: %u

%s (%s)

bittorrent.crt

Lmedia%s%s

%s_(%s).%s

%s%s\%s

tracker.openbittorrent.com

tracker.publicbt.com

tracker.ccc.de

tracker.istole.it

RangeBlock detected range %S

Not yet supported

[nf]%s

%s does not exist in object

key does not exist in object

OEncoded rate %d duration %d for file %s

Need more header for file %s

Header is at the end in file %s

Unrecognized type for file %s

Need more media header for %s: will reparse.

Error %d parsing media header for %s

**** Successfully determined encoded rate of file %s

%s%cpreview%c%H_preview_%d.avi

transcode\ffmpeg.exe

"%s" -i "hXXp://pairing:%H@127.0.0.1:%d/proxy?sid=%x&file=%d&token=%H&pairing=%H&service=STREAMING" -vcodec copy -acodec copy -f avi -ss %d -to %d "%s"

%s%s|

Deleting original torrent file %s

Can't delete original torrent file %s

Can't download %s via HTTP - %s

NHTTP server

file %S redirected to %S

sHTTP Connecting to: %S

invalid http reply (%S)

invalid request or temporarily unavailable (%d)

invalid http response code (%d): %S (%S)

Got redirection response (%d) but no location header

Invalid redirection url: %S

Redirection limit (%d) reached (recursive redirections?)

HTTP response did not include content-length nor content-range

HTTP server sent more responses than it was requested to

Disconnect: a range of type %S is not supported

Invalid range in HTTP response (%d)

Invalid transfer encoding (%S)

The data received from the HTTP server was not the part that was requested

The size of the data received from the HTTP server did not match the requested size

Timed out. num_tries=%d

HTTP Reconnecting to: %S

HTTP Disconnect: Peer error: %s

content-length (%Lu) does not correspond to the requested length (%d)

B0rked reason: %s

IO Error:%d line:%d align:%d pos:%Ld count:%d actual:%d

-i %%s -y -f %s %s %s %%s

-vcodec %S -maxrate %dm -bufsize %dm -flags  loop -cmp  chroma -me_method hex -subq 5 -me_range 16 -b_strategy 1 -bf %d -flags2 %s%s%s%s%s -refs 2 -directpred 3 -trellis 1

-r %d

-s %dx%d

-crf %f

-b %d

-level %d

-acodec %S %s -ar %d -ab %d

-ac %d

Unknown error %S

Access denied %S

Unknown property %S

Read only property %S

Type mismatch %S

sendappmsg

sendmsg

fb_login

set_license_key

JAVASCRIPT LOG: %s

window.btapp = null; window.onunload = null;

set_webseed

hXXp://127.0.0.1:%d/proxy?sid=%x&file=%d

verify_rsa_signature_appkey

rsa_generate_key

web seed

key_expired

invalid_key

no_license_key

{A4D77A09-10EA-4574-8C09-9B6E1A21C95F}

Activation error: %s

HTTP %d

iPod Touch 1.Gen

iPod Touch 2.Gen

iPod Touch 3.Gen (8GB)

iPod Touch 3.Gen

iPod Touch 4.Gen

iutorrent.lng

eYour DNS server does not support AAAA lookups. Installing IPv6 is NOT recommended.

eKERNEL32.DLL

tray.ico

\hh.exe

ms-its:%s::%s

utorrent-342-37754.chm

utorrent-help.zip

LoadKnownFileType called with %s, %s, %s

btkey

Accepted launch|Type: %s Location: %s

Memory Compacting, system memory is low (%u%% CPU usage)

social.bmp

Unable to send crash report to server:

Error opening Windows firewall: 0x%X %s

[%dK]

2%d %s

transcode.btinstall

%s%s %d.%d

[Portable mode]

%s (build %d) [%d-bit]

main.ico

An older version of %s is running.

Please shut down %s and try again.

It seems like %s is already running, but not responding.

Please close all %s processes and try again.

Failed to unpack bundled btapp: %s to: %s

%s\BunndleOfferManager.dll

%s\ADKAppsOfferManager.dll

Delete file failed: %s error: %d

Installing '%s' to '%s'.

t.lang.txt

%s.lng

hXXp://VVV.bittorrent.com

hXXp://127.0.0.1:%d/search?q=%%s

shell32.dll,OpenAs_RunDLL %s

RUNDLL32.EXE

hXXp://127.0.0.1:%d/proxy?sid=%S&file=%d

http%:%/%/localhost%:%d%/proxy%?sid%=%S%&fast_if_no_peers=false%&file=%d&width=%d&height=%d

http%:%/%/localhost%:%d%/proxy%?sid%=%S%&fast_if_no_peers=false%&file=%d

/select,"%s"

\flash*.ocx

ping.exe

%s -n 2 127.0.0.1

%s /BRINGTOFRONT

BitTorrent|hXXp://VVV.bittorrent.com/search?client=%v&search=

Submit a crash report to the developers.

%s has crashed. A crash dump has been saved as:

uTorrent.exe /RECOVER "%s"

uTorrent.exe /RECOVER

%s has crashed. Unable to generate crash dump. %S%S

btinstall.txt

BTAPPS="%s\" PAIRINGKEY="%S"

INSTALLDEBUG: LoadFile of current exe failed

V8 bundle: Failed to open exe

ui.btapp

b.btapp

Installing bundle: %s to %s

apps.btapp

Failed to find bundled btapp: %s

Failed to install bundled btapp: %s to: %s

Bundled btapp "%s" is ill formed: %s

%u.%u.%u_%u

updates\%s.exe

lupdates\%x.lng

tupdates.dat

Software\Microsoft\Windows\CurrentVersion\Uninstall\%s

[unknown url]

Buggy DLL warning: %S (%S)

%s\VirusGuard\

BitTorrentAntivirus.exe

VirusGuard.exe

.DEFAULT\Software\SetID\Internal

Software\uTorrentPurchases\PurchasedKeys

TCan't parse webui description json: %S

tabs.bmp

toolbar.bmp

tstatus.bmp

VPAIDPlayer.swf

hXXp://update.utorrent.com/survey

<A HREF="%s">%s</A>

%s %d%%

%s %d %s

Failed to load skin: %s. SaveFile failed.

Failed to load skin: %s. Read from btresource failed.

%d (%d)

%d.%.3d

=.%%

id_%S

twindow.location="about:blank";

V. (%s)

/redirect.html#userinterface/preferences/general

/redirect.html#userinterface/preferences/uisettings

/redirect.html#userinterface/preferences/antivirus

/redirect.html#userinterface/preferences/directories

/redirect.html#userinterface/preferences/connection

/redirect.html#userinterface/preferences/bandwidth

/redirect.html#userinterface/preferences/bittorrent

/redirect.html#userinterface/preferences/transfercap

/redirect.html#userinterface/preferences/queueing

/redirect.html#userinterface/preferences/scheduler

/redirect.html#userinterface/preferences/uconnect

/redirect.html#userinterface/preferences/streaming

/redirect.html#userinterface/preferences/devices

/redirect.html#userinterface/preferences/paireddevices

/redirect.html#userinterface/preferences/label

/redirect.html#userinterface/preferences/advanced

/redirect.html#userinterface/preferences/advanced/uiextras

/redirect.html#userinterface/preferences/advanced/diskcache

/redirect.html#userinterface/preferences/webui

/redirect.html#userinterface/preferences/advanced/run_program

VhXXps://remote.utorrent.com

help.ico

%s, %d:00 - %d:59

hXXp://bit.ly/HTwxBj

"%s"%s

s%dx%.2d

@\\.\pipe\privateaccessvpn

V%s %d

%s %d

Tris: %d points [high score: %d]

%s (build %d)

V%s\%s\*.*

Vhttp:

hXXp://VVV.utorrent.com/faq.php

%.1f %s

yellow_check_8bit.ico

green_check_8bit.ico

red_cross_8bit.ico

\\.\X:

%s(%d). [%s] [%s]

W%s (%d)

10  %s

%s(%d). [%s]

App store install failed: %s

Got bogus main app. Update URL does not match download source.

%s != %s

%s\%S

%s\%s\%S

%s "%s"

W%sBunndleOfferManager.dll

9944A343-2613-4177-A30C-3D868D1D0D9F

C6D65593-16C7-44ED-BC08-B46F22EA7353

BunndleOfferManager.dll

%sADKAppsOfferManager.dll

Lflags.bmp

%d | %d

%d| %d

%S%S%S%S%S%S

(%d%%) %s

%dx%d

A: %S V: %S

&%d %s

hXXp://pairing:%H@127.0.0.1:%d/proxy?sid=%x&file=%d&token=%H&pairing=%H&service=STREAMING

L<a href="%s">%s</a>

.stepnumeral {

.stepcontent {

.stepheading {

.steptext {

.stepbox {

.devpointer {

.arrow {

.arrow-lblade-cover {

.arrow-lcutout {

.arrow-rblade-cover {

.arrow-rcutout {

.newdev-text {

.newdev-bevel {

.or-- {

|[%d Torrents]|

%s:\%s

%s (powered by %s)

Failed to post GUI Update message: %s

sFailed to load html resource %d

hXXp://pairing:%H@127.0.0.1:%d/fileserve?token=%H&pairing=%H

top: %d;

Device ID %s : %s

<html><body>Failed to load HTML resource %d</body></html>

$('body').ready(function() { devicehelper.initialize();

devicehelper.setClient("%s");

devicehelper.setText({

%s"%S":"%s"

notify.configure(%d,'%H'); devicehelper.setPort(%d); devicehelper.setPair('%H');

devicehelper.adddevice('%S', %d, '%d', '%s');

devicehelper.adddevice('devicesection', %d, '%d', '%s');

OCSetupHlp.dll

ADKAppsOfferManager.dll

<!DOCTYPE html> <html> <body style='padding: 16px 0px 0px 12px; margin: 0px'> <div id='errorBox' style='display: none; background: #f00'></div> <object id='player' height='30' width='40' classid='CLSID:6BF52A52-394A-11d3-B153-00C04F79FAA6'> <param name='enableErrorDialogs' value='0' /> <param name='autoStart' value='0' /> </object> <script language='javascript'> var player = document.getElementById('player'); var errorBox = document.getElementById('errorBox'); function clientSize() { var width, height; var adj_x = 12; var adj_y = 16; if(window.innerWidth || window.innerHeight) { return { width: window.innerWidth-adj_x, height: window.innerHeight-adj_y }; } var doc = window.document; var width = doc.documentElement.clientWidth || doc.body.clientWidth; var height = doc.documentElement.clientHeight || doc.body.clientHeight; return { width: width-adj_x, height: height-adj_y } } function resizediv() { var dim = clientSize(); player.style.height = dim.height   'px'; player.style.width = dim.width   'px'; errorBox.style.height = dim.height   'px'; errorBox.style.width = dim.width   'px'; } window.onresize = resizediv; document.body.style.overflow = 'hidden'; resizediv(); function playerError() { player.style.display = 'none'; errorBox.style.display = 'block'; errorBox.innerText = 'XXX An error occurred XXX'; } player.URL = '

'; player.controls.play(); </script> <script language='JScript' for='player' event='Error()'>playerError();</script> <script language='JScript' for='player' event='MediaError()'>playerError();</script> </body></html>

CLSID\{DC0C2640-1415-4644-875C-6F4D769839BA}

Z%s (%s:)

Zmscoree.dll

- floating point support not loaded

- CRT not initialized

- Attempt to initialize the CRT more than once.

2.cmd

portuguese-brazilian

USER32.DLL

window.onbeforeunload = null;

/cnid "%d" %S

hXXp://apps.bittorrent.com/cl_search/thanks.html

hXXp://apps.bittorrent.com/cl_search/thanksbundles.html

hXXp://featuredcontent.utorrent.com/

hXXp://featuredcontent.staging.utorrent.com

javascript:cbSslCertificatePop();

hXXp://VVV.facebook.com/plugins/like.php?

errorUrl

Script Error: line=%d char=%d code=%d message=%s url=%s

%cport=%d&pair=%H

%cport=%d

&frameaddr=%x

%clangs=%U

csrss.exe

smss.exe

svchost.exe

services.exe

explorer.exe

wininit.exe

lsass.exe

C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent

0438257705

Torrent 3.4.2 (build 37754) [32-bit]

Torrent 3.4.2

msctls_hotkey32

Remove it with Ad-Aware

Click (here) to download and install Ad-Aware Free Antivirus.
Update the definition files.
Run a full scan of your computer.

Manual removal*

Terminate malicious process(es) (How to End a Process With the Task Manager):

du73i.exe:3996
Yandex.exe:3208
SkypeSetupFull.exe:2652
MsiExec.exe:2576
MsiExec.exe:2088
MsiExec.exe:1188
MsiExec.exe:3828
utt568C.tmp.exe:2780
utt568C.tmp.exe:2984
%original file name%.exe:3584
%original file name%.exe:1640
syesubc3_p2v3.exe:2304
RunDll32.exe:2524
sender.exe:4064
YandexSearch.exe:3012
uTorrent.exe:2492
utt501D.tmp.exe:1120
utt501D.tmp.exe:2972
Delete the original Trojan file.
Delete or disinfect the following files created/modified by the Trojan:

C:\Users\"%CurrentUserName%"\AppData\Roaming\OpenCandy\OpenCandy_FAF9D0CB233142BC9B2A763734709B2E\syesubc3_p2v3.exe (4217 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Yandex.lnk (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\yapin\Yandex.website (493 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\yapin\Yandex.lnk (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Yandex.website (493 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\UB17W4OG.txt (127 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\7396C420A8E1BC1DA97F1AF0D10BAD21 (1072 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\7396C420A8E1BC1DA97F1AF0D10BAD21 (554 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\696F3DE637E6DE85B458996D49D759AD (568 bytes)
C:\ProgramData\Skype\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}\Skype.msi (355060 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\2.8.1.1418 (PARTNER)\MsiExec.exe@2576-3852-1.log (694 bytes)
C:\Windows\Installer\MSI7107.tmp (49 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Google\Chrome\User Data\Default\Preferences (33 bytes)
C:\Windows\Installer\MSI8BBC.tmp (167 bytes)
C:\Windows\Installer\MSI8C0C.tmp (167 bytes)
C:\Windows\Installer\MSI8B7D.tmp (167 bytes)
C:\Windows\Installer\MSI9818.tmp (167 bytes)
C:\ProgramData\Skype\SKY8BCA.tmp (5572 bytes)
C:\Windows\Installer\MSI8BDC.tmp (167 bytes)
C:\Windows\Installer\MSI8F0D.tmp (167 bytes)
C:\Windows\Installer\MSI96FD.tmp (167 bytes)
C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\7B8944BA8AD0EFDF0E01A43EF62BECD0_DBEBBB72D7CF896A67503824FF19F0BB (1 bytes)
C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\7D266D9E1E69FA1EEFB9699B009B34C8_0A9BFDD75B598C2110CBF610C078E6E6 (1504 bytes)
C:\Windows\Installer\MSI8F1D.tmp (167 bytes)
C:\Windows\Installer\MSI96AE.tmp (155 bytes)
C:\Windows\Installer\MSI8D66.tmp (167 bytes)
C:\Windows\Installer\MSI95F1.tmp (167 bytes)
C:\Windows\Installer\MSI971D.tmp (167 bytes)
C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\7D266D9E1E69FA1EEFB9699B009B34C8_0A9BFDD75B598C2110CBF610C078E6E6 (1 bytes)
C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\7B8944BA8AD0EFDF0E01A43EF62BECD0_DBEBBB72D7CF896A67503824FF19F0BB (1504 bytes)
C:\Windows\Installer\MSI6059.tmp (49 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Opera Software\Opera Stable x64\Bookmarks_20150129095355.backup (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\places.sqlite-wal (19187 bytes)
C:\Windows\Installer\MSI6FBC.tmp (221 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Opera Software\Opera Stable\Favicons (5137 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Google\Chrome\User Data\Default\History-journal (14544 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\2.8.1.1418 (PARTNER)\MsiExec.exe@3828-2052-1.log (150 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Opera Software\Opera Stable x64\Preferences_20150129095355.backup (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Opera Software\Opera Stable x64\favorites.db-journal (5062 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\2.8.1.1418 (PARTNER)\MsiExec.exe@3828-3868-1.log (250 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Google\Chrome\User Data\Default\Top Sites-journal (5380 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\prefs.js (12 bytes)
C:\Users\"%CurrentUserName%"\Favorites\Links\Yandex.url (284 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Chromium\User Data\Default\Favicons (4725 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Opera Software\Opera Stable x64\Web Data (609 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Chromium\User Data\Default\Top Sites-journal (5062 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Google\Chrome\User Data\Default\Bookmarks (785 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\2.8.1.1418 (PARTNER)\MsiExec.exe@3828-3332-1.log (258 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Chromium\User Data\Default\Web Data-journal (7534 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\searchplugins\yandex.com-095355.xml (9 bytes)
C:\Windows\Installer\MSI60EA.tmp (49 bytes)
C:\Windows\Installer\MSI6FCC.tmp (221 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\2.8.1.1418 (PARTNER)\MsiExec.exe@3828-3360-1.log (326 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Opera Software\Opera Stable\Web Data (609 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Yandex\ui (38 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\chromeappsstore.sqlite-journal (3302 bytes)
C:\Windows\Installer\MSI6089.tmp (49 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\2.8.1.1418 (PARTNER)\MsiExec.exe@3828-3872-1.log (254 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Internet Explorer\Services\www.yandex.com_20150129095355.ico (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Internet Explorer\Services\mail.yandex.com_20150129095357.ico (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Opera Software\Opera Stable x64\Web Data-journal (544 bytes)
C:\Windows\Installer\MSI610A.tmp (49 bytes)
C:\Windows\Installer\MSI5F5E.tmp (221 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\2.8.1.1418 (PARTNER)\browserconfig.properties (74 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Chromium\User Data\Default\History-journal (18998 bytes)
C:\Users\"%CurrentUserName%"\Favorites\Links\Mail.url (286 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\2.8.1.1418 (PARTNER)\Yandex.website (493 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Google\Chrome\User Data\Default\Preferences_20150129095355.backup (33 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Opera Software\Opera Stable\Preferences (238 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\etilqs_EIC8RzeArpKHUsh (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Internet Explorer\Services\www.yandex.com_20150129095357.ico (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\prefs.js_20150129095355.backup (4 bytes)
C:\Windows\Installer\MSI60A9.tmp (49 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Opera Software\Opera Stable\Bookmarks (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Opera Software\Opera Stable\Web Data-journal (544 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Opera Software\Opera Stable x64\Favicons (5137 bytes)
C:\Windows\Installer\MSI6FAB.tmp (221 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\vendor00000.xml (591 bytes)
C:\Windows\Installer\MSI602A.tmp (163 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\2.8.1.1418 (PARTNER)\region.properties (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Chromium\User Data\Default\Bookmarks (785 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Internet Explorer\Services\www.yandex.com_20150129095356.ico (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Chromium\User Data\Default\Preferences (732 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Opera Software\Opera Stable\Favicons-journal (32780 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\2.8.1.1418 (PARTNER)\MsiExec.exe@3828-3824-1.log (42637 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Mozilla\Firefox\Profiles\zwvbr04l.default\thumbnails\061150f69be1b6d86425899640d8e6fa.png (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\2.8.1.1418 (PARTNER)\stdout.log (40 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Chromium\User Data\First Run (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Google\Chrome\User Data\Default\Favicons-journal (37022 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Opera Software\Opera Stable\favorites.db (523 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Opera Software\Opera Stable\Bookmarks_20150129095355.backup (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\sender.exe (308 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Opera Software\Opera Stable\favorites.db-journal (5062 bytes)
C:\Windows\Installer\MSI7185.tmp (49 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\backup00000.reg (2196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Chromium\User Data\Default\Favicons-journal (32780 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Chromium\User Data\Local State (69 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\2.8.1.1418 (PARTNER)\MsiExec.exe@3828-1468-1.log (252 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Opera Software\Opera Stable\Preferences_20150129095355.backup (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\omni.ja_20150129095353.zip (44854 bytes)
C:\Windows\Installer\MSI60CA.tmp (49 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Opera Software\Opera Stable x64\Favicons-journal (32780 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\7F4987FB1A6E43d69E3E94B29EB75926\stat.log2780 (546 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\7F4987FB1A6E43d69E3E94B29EB75926\YandexSearch.exe (1480 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\YandexSearch[1].exe (301341 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\7B8944BA8AD0EFDF0E01A43EF62BECD0_84DF081C52E32C6CC02A8FC17AEFEC2C (1536 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\info[1].rss (827 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\7F4987FB1A6E43d69E3E94B29EB75926\seed.txt (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\7F4987FB1A6E43d69E3E94B29EB75926\downloader.log2984 (182756 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\7B8944BA8AD0EFDF0E01A43EF62BECD0_84DF081C52E32C6CC02A8FC17AEFEC2C (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\P6CE4YX9.txt (89 bytes)
C:\ProgramData\Microsoft\Windows\Start Menu\Ã‚ÂµTorrent.lnk (953 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Ã‚ÂµTorrent.lnk (971 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\apps\player.btapp.new (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\apps\welcome.btapp.new (27 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\settings.dat.new (136 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Crypto\RSA\S-1-5-21-2858020935-2156992550-3658131804-1003\d53e9de8694875b1d0ce04633ae07c71_c0322acd-5e5d-42f0-b163-c591ee6ff5b9 (80 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\apps\plus.btapp.new (51 bytes)
%Program Files% (x86)\uTorrent\uTorrent.exe (1472 bytes)
C:\Users\Public\Desktop\Ã‚ÂµTorrent.lnk (947 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\utt37F2.tmp.new (82 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\Q4YDVV9K.txt (89 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\5MGNFFGL.txt (89 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\utt366B.tmp.new (59 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Crypto\RSA\S-1-5-21-2858020935-2156992550-3658131804-1003\1f91d2d17ea675d4c2c3192e241743f9_c0322acd-5e5d-42f0-b163-c591ee6ff5b9 (105 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\capsLock.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\normal\msa-logos-135x25.png (727 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\white-on-black\exclamation_20x20.png (513 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\white-on-black\button-middle-35x35@2x.png (331 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\normal\back_20x20-inverted@2x.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\languages\uk.js (883 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\fonts\segoe-ui-semibold-arabic.eot (2071 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\fonts\segoe-ui-light-greek.eot (29 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\css\retina\login.css (9 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\languages\nl.js (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\fonts\segoe-ui-light-cyrillic.ttf (1927 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\49514950C94E8026A2B06312597DFF49_33A0493B3756EC93EB52782457685E27 (1360 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\backgroundNoCloud.png (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\languages\pt.js (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\normal\button-darker-right-35x35@2x.png (884 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\languages\da.js (1828 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\languages\tr.js (987 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\retina\caret_left@2x.png (588 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\black-on-white\skype-logo-136x60@2x.png (1416 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\languages\et.js (1259 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\black-on-white\capslock_20x20@2x.png (620 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\black-on-white\arrow_up_20x20@2x.png (578 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\black-on-white\arrow_up_20x20.png (436 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\normal\exclamation_20x20.png (720 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\connection.png (865 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\black-on-white\button-right-35x35.png (867 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\white-on-black\back_20x20-inverted@2x.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\css\platform\mac.css (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\black-on-white\logo-xbox-25x25.png (965 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\normal\logo-skype-25x25@2x.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\normal\skype-logo-136x60@2x.png (10 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\retina\messageTopShort@2x.png (374 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\black-on-white\exclamation_20x20.png (515 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\white-on-black\skype-logo-136x60.png (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\white-on-black\logo-win-25x25@2x.png (908 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\externalSettings[1].js (77 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\normal\loader_15fps.gif (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\white-on-black\logo-skype-25x25.png (822 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\white-on-black\capslock_20x20@2x.png (620 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\fonts\segoe-ui-semibold-greek.woff (1985 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\languages\no.js (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\fonts\segoe-ui-regular-latin.woff (2039 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\black-on-white\logo-win-25x25.png (533 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\49514950C94E8026A2B06312597DFF49_33A0493B3756EC93EB52782457685E27 (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\languages\lt.js (10 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\white-on-black\button-right-35x35@2x.png (743 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\languages\el.js (672 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\loader.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\normal\skype-logo-136x60.png (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\white-on-black\dropdown_32x32@2x.png (370 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\white-on-black\dropdown_hover_32x32.png (267 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\retina\msAccount@2x.png (97 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\languages\ru.js (1198 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\black-on-white\capslock_20x20.png (380 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\fonts\segoe-ui-semibold-hebrew.eot (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\white-on-black\back_20x20-inverted.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\fonts\segoe-ui-regular-greek.ttf (2955 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\fonts\segoe-ui-light-latin.eot (2286 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\black-on-white\caret_right.png (823 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\white-on-black\ticked_not_10x10.png (191 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\05EC48341C277FE5110E7DFAA91377DC_39AA32012A618D407F0206C60DD48EA1 (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\fonts\segoe-ui-regular-hebrew.woff (9 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\languages\cs.js (11 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\white-on-black\capslock_20x20.png (380 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\fonts\segoe-ui-semibold-greek.eot (1762 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\retina\messageTop@2x.png (344 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\retina\background@2x.png (1847 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\normal\logo-office-25x25.png (783 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\picture.jpg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\css\platform\win.css (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\languages\es.js (9 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\black-on-white\ticked_10x10@2x.png (345 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\normal\button-right-35x35@2x.png (759 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\loader.gif (1089 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\black-on-white\ticked_not_10x10@2x.png (201 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\css\platform\unix.css (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\retina\messageBottomShort@2x.png (391 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\white-on-black\ticked_not_10x10@2x.png (201 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\languages\fi.js (9 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\black-on-white\button-middle-35x35@2x.png (331 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\fonts\segoe-ui-light-latin.ttf (6401 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\normal\button-darker-left-35x35.png (545 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\icons.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\fonts\segoe-ui-light-hebrew.eot (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\fonts\segoe-ui-light-cyrillic.eot (1032 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\white-on-black\logo-office-25x25.png (722 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\messageTop.png (265 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\skype.png (697 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\msAccountOverlay.png (93 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\languages\ar.js (639 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\normal\arrow_up_20x20_8bit.png (220 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\0FTVHFMW.txt (124 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\black-on-white\caret_left.png (1338 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\msDefaultPicture.png (585 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\languages\bg.js (131 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\black-on-white\msa-logos-135x25.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\retina\skype@2x.png (560 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\fonts\segoe-ui-regular-arabic.ttf (2820 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\languages\ko.js (13 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login.md5 (34 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\white-on-black\logo-skype-25x25@2x.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\fonts\segoe-ui-light-arabic.eot (894 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Skype\shared_dynco\dc.db (284502 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\white-on-black\button-right-35x35.png (469 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\black-on-white\logo-xbox-25x25@2x.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\normal\loader_30fps.gif (1168 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\fonts\segoe-ui-light-greek.ttf (3156 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\white-on-black\arrow_up_20x20@2x.png (578 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\normal\logo-cloud-35x25@2x.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\normal\ticked_not_10x10@2x.png (201 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\inputfields.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\normal\button-left-35x35@2x.png (792 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\white-on-black\logo-xbox-25x25.png (956 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\black-on-white\dropdown_hover_32x32.png (256 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\languages\it.js (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\facebook.png (315 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\normal\back_20x20-inverted.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\normal\button-darker-left-35x35@2x.png (900 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\fonts\segoe-ui-regular-cyrillic.eot (1147 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\normal\dropdown_32x32.png (269 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\languages\de.js (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\white-on-black\skype-logo-136x60@2x.png (229 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\retina\backgroundNoCloud@2x.png (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\normal\button-right-35x35.png (475 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\normal\ticked_10x10@2x.png (423 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\fonts\segoe-ui-semibold-latin.eot (3130 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\black-on-white\button-left-35x35@2x.png (753 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\normal\button-darker-middle-35x35.png (233 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\fonts\segoe-ui-regular-greek.woff (244 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\normal\button-darker-right-35x35.png (542 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\fonts\segoe-ui-regular-hebrew.eot (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\normal\logo-skype-25x25.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\fonts\segoe-ui-regular-latin.ttf (4737 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\normal\caret_left.png (998 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\css\login.css (904 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\languages\zh-hant.js (970 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\buttons.png (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\6G3ZHSXE.txt (348 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\retina\icons@2x.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\skypelogo.png (1431 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\white-on-black\logo-office-25x25@2x.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\black-on-white\logo-skype-25x25.png (815 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\white-on-black\arrow_up_20x20.png (436 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\languages\ja.js (1229 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\messageBottomShort.png (279 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\black-on-white\exclamation_20x20@2x.png (796 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\fonts\segoe-ui-semibold-cyrillic.woff (319 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\retina\skypeicon@2x.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\retina\msAccountOverlay@2x.png (97 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\black-on-white\logo-office-25x25@2x.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\retina\msAccountColour@2x.png (132 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\normal\logo-xbox-25x25@2x.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\black-on-white\button-middle-35x35.png (230 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\languages\he.js (751 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\normal\logo-win-25x25.png (558 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\skypeicon.png (618 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\capsLockShort.png (328 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\black-on-white\button-left-35x35.png (469 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\black-on-white\back_20x20-inverted.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\fonts\segoe-ui-light-cyrillic.woff (1080 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\normal\msa-logos-135x25@2x.png (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\languages\sl.js (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\languages\vi.js (14 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\languages\hu.js (159 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\index.html (18 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\AC9005F5466BD463DF06D711B370595F (1152 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\black-on-white\dropdown_hover_32x32@2x.png (375 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\fonts\segoe-ui-semibold-greek.ttf (1933 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\black-on-white\back_20x20-inverted@2x.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\languages\id.js (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\black-on-white\ticked_not_10x10.png (191 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\normal\logo-win-25x25@2x.png (924 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\fonts\segoe-ui-semibold-cyrillic.ttf (1253 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\fonts\segoe-ui-semibold-hebrew.ttf (16 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\black-on-white\logo-cloud-35x25.png (837 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\fonts\segoe-ui-regular-arabic.woff (2926 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\898UU6QSUNZ2FRV1VN52.temp (893 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\4309200C3DBAD0F6F0DFACE9165FD092 (944 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\4309200C3DBAD0F6F0DFACE9165FD092 (727 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\js\login.js (4750 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Skype\shared_httpfe\queue.db (9692 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\languages\fr.js (9 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\black-on-white\skype-logo-136x60.png (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\normal\ticked_10x10.png (284 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\messageTopShort.png (256 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\normal\capslock_20x20@2x.png (781 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\fonts\segoe-ui-regular-cyrillic.woff (356 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\white-on-black\ticked_10x10.png (256 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\normal\back_20x20@2x.png (685 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\languages\zh-hans.js (11 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\fonts\segoe-ui-semibold-hebrew.woff (756 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\checkbox.png (551 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\white-on-black\back_20x20@2x.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\white-on-black\logo-cloud-35x25.png (839 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\retina\msDefaultPicture@2x.png (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\retina\buttons@2x.png (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\fonts\segoe-ui-regular-latin.eot (2674 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\normal\logo-office-25x25@2x.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\msAccount.png (93 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\languages\en.js (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\black-on-white\button-right-35x35@2x.png (698 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\9TC2H4SWYT5M60H4H6DY.temp (893 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\background.png (13 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\white-on-black\back_20x20.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\logoanim.gif (14 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\white-on-black\exclamation_20x20@2x.png (799 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\normal\dropdown_hover_32x32.png (270 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\retina\caret_right@2x.png (609 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\normal\arrow_up_20x20.png (514 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\retina\inputfields@2x.png (421 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\white-on-black\logo-win-25x25.png (519 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\fonts\segoe-ui-semibold-latin.woff (3956 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\AC9005F5466BD463DF06D711B370595F (69 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\black-on-white\dropdown_32x32.png (291 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\white-on-black\msa-logos-135x25.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\normal\dropdown_hover_32x32@2x.png (380 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\black-on-white\msa-logos-135x25@2x.png (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\normal\capslock_20x20.png (466 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Skype\shared.tmp (3111 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\languages\ro.js (9 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\05EC48341C277FE5110E7DFAA91377DC_39AA32012A618D407F0206C60DD48EA1 (1456 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\retina\plus@2x.png (905 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\black-on-white\logo-win-25x25@2x.png (911 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Skype\DataRv\offline-storage-ecs.data (24 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\fonts\segoe-ui-light-hebrew.ttf (1419 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\languages\sk.js (594 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\black-on-white\dropdown_32x32@2x.png (375 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\white-on-black\dropdown_hover_32x32@2x.png (581 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\normal\caret_right.png (995 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\16F1UBK8.txt (590 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\fonts\segoe-ui-semibold-arabic.ttf (3456 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\fonts\segoe-ui-semibold-arabic.woff (2319 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\fonts\segoe-ui-regular-hebrew.ttf (1682 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\black-on-white\back_20x20.png (399 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\fonts\segoe-ui-regular-cyrillic.ttf (1786 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\white-on-black\dropdown_32x32.png (267 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\retina\messageBottom@2x.png (477 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\fonts\segoe-ui-regular-arabic.eot (518 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\white-on-black\ticked_10x10@2x.png (345 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\black-on-white\ticked_10x10.png (257 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\msAccountColour.png (118 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\fonts\segoe-ui-light-hebrew.woff (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\fonts\segoe-ui-light-arabic.woff (2084 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\white-on-black\button-left-35x35.png (492 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\languages\pt-br.js (1506 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\retina\checkbox@2x.png (794 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\normal\button-middle-35x35@2x.png (334 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\black-on-white\logo-cloud-35x25@2x.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\fonts\segoe-ui-regular-greek.eot (1046 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\black-on-white\back_20x20@2x.png (582 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\languages\th.js (1890 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\normal\dropdown_32x32@2x.png (379 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\white-on-black\logo-xbox-25x25@2x.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\85ZLPQ8NL7TCNH41JIOQ.temp (893 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\white-on-black\logo-cloud-35x25@2x.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\messageBottom.png (301 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\white-on-black\msa-logos-135x25@2x.png (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\fonts\segoe-ui-semibold-latin.ttf (4318 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Skype\shared_httpfe\queue.db-journal (22756 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\normal\logo-cloud-35x25.png (924 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\normal\logo-xbox-25x25.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\languages\sr-latn.js (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\normal\exclamation_20x20@2x.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\normal\arrow_up_20x20@2x.png (792 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\normal\back_20x20.png (452 bytes)
%Program Files% (x86)\Skype\Updater\Updater.dll (102 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\white-on-black\button-left-35x35@2x.png (829 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\plus.png (605 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\VMBYYCQB7UUMTS1V2ZCX.temp (893 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\black-on-white\logo-office-25x25.png (718 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\dropdown.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\normal\button-left-35x35.png (489 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\retina\loader@2x.png (9 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\fonts\segoe-ui-light-latin.woff (3762 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Skype\shared_dynco\dc.db-journal (443115 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\normal\ticked_not_10x10.png (191 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\languages\pl.js (9 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\languages\sv.js (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\retina\facebook@2x.png (630 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\black-on-white\logo-skype-25x25@2x.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\fonts\segoe-ui-light-arabic.ttf (3174 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\normal\button-darker-middle-35x35@2x.png (335 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Skype\DataRv\offline-storage.data (90586 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\languages\hr.js (9 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\normal\button-middle-35x35.png (233 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\languages\ca.js (9 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\fonts\segoe-ui-light-greek.woff (1120 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\white-on-black\button-middle-35x35.png (230 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\retina\dropdown@2x.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\fonts\segoe-ui-semibold-cyrillic.eot (1952 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\languages\lv.js (114 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsz57D0.tmp\SkypeSetupFull.exe (2642483 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsz57D0.tmp\inetc.dll (53 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\SkypeSetupFull[1].exe (2470680 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\OpenCandy\OpenCandy_FAF9D0CB233142BC9B2A763734709B2E\du73i.exe (10150 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\statisticsex.log (940 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\{97DA2459-9AC9-49B0-BE2B-6F1E7E24D829}\YandexSearch.msi (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\YandexSearch00000.log (107946 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\e68bceb105fd4a3d832d7a1ff6cec13a[1].jpg (13188 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\e[3].htm (65 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\icon[3].ico (200 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\utt7A03.tmp (8715 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\IF4T96AA.txt (115 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\i[2].gif (43 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\apps\D944B3378FAB35793B7951FA53E41B2AB9CC462B (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\i[1].gif (43 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\icon[1].ico (200 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\ados[2].js (10762 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\bench[2].js (25 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\fileserve[1].js (42281 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\base64[1].js (3646 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\3MHSXO3P.txt (97 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\icon[1].ico (200 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\jquery-1.11.1.min[2].js (57088 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\7UMHIPWR.txt (1423 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\FTZX6ORL.txt (93 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\11MB6FBI.txt (92 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\e[1].htm (65 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\SFL57S44.txt (243 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\jquery-1.11.1.min[1].js (68659 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\93GPWKA6.txt (1422 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\index[2].htm (315 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\index-edge[2].htm (105 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\apps\featuredContent.btapp.new (41 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\dlimagecache\165F6EF40A81DD175FFAEA69E77ABFD30B27E71C (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\base64[1].js (145 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\B6TZJWVR.txt (115 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\ados[2].js (24580 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\apps\D944B3378FAB35793B7951FA53E41B2AB9CC462B\index.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\VJGII430.txt (96 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\updates.dat (1158 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\i[1].gif (43 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\utt7906.tmp.new (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\index-edge[1].htm (105 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\ados[1].js (22150 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\index[1].htm (315 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\jquery-1.11.2[1].js (146971 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\LJFTIZ1J.txt (91 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\ados[1].js (2626 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\apps\welcome-upsell.btapp (28 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\34e5de599eb245f89dc65ea4e8e2c989[1].jpg (2814 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\fileserve[1].png (200 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\icon[4].ico (200 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\base64[1].js (145 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\fileserve[1].css (73 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\i[1].gif (43 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\e[2].htm (64 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\LLRSP1MG.txt (115 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\apps\D944B3378FAB35793B7951FA53E41B2AB9CC462B\vid_thumb.jpg (23 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\apps\D944B3378FAB35793B7951FA53E41B2AB9CC462B\x.png (265 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\icon[2].ico (200 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\ados[1].js (19787 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Crypto\RSA\S-1-5-21-2858020935-2156992550-3658131804-1003\0c794867e265b94c871e3eaa0c0dcc7a_c0322acd-5e5d-42f0-b163-c591ee6ff5b9 (80 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\OEIIGI0A.txt (90 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\e[3].htm (65 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\jquery-1.11.2[1].js (152412 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\analytics[1].js (17192 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\apps\D944B3378FAB35793B7951FA53E41B2AB9CC462B\btapp (201 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\C5YC4Q6M.txt (115 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\PEH11AH6.txt (1423 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\icon[2].ico (200 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\utorrent.lng (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\collect[1].gif (35 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\analytics[2].js (17192 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\fileserve[1].js (917 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\bench[1].js (25 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\apps\D944B3378FAB35793B7951FA53E41B2AB9CC462B\empty_movie.gif (282 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\fileserve[1].js (505 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\apps\D944B3378FAB35793B7951FA53E41B2AB9CC462B\main.css (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\a05ac8e903c14e74befdd8b8426a754e[1].jpg (2835 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\base64[2].js (3646 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\apps\D944B3378FAB35793B7951FA53E41B2AB9CC462B\info_icon.png (250 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\apps.btapp (87898 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\91ECFED5143F7F4F4576655D8EFAB51C_5876942B8A1533861E194CE520DB3C48 (1504 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\7D1F03728133589A90656A87E482B21F (290 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\Tar350E.tmp (2784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\dlimagecache\10E6FBE4D921B475FA5FEC6E9A535A540D6FEED1 (318 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\public.31f3956980bc91d669c1e443d00b8ddc.gz[1].js (421406 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\887FDFEF9DC62EF73EB288690D5944B1_041C7BCA38AE473669C469148677703C (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\apps\3609FC884502A1DF0AA5D9D160C827BB1BD51FC9.btapp (1425 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\index[1].htm (183 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\MTP_ySUJH_bn48VBG8sNSnhCUOGz7vYGh680lGh-uXM[1].woff (14792 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\aDT[1].js (50969 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\e[2].htm (62 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\utt2F0E.tmp (11571 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\7B8944BA8AD0EFDF0E01A43EF62BECD0_251DAA28139FC527316726DEB16CC0E9 (1504 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\utt501D.tmp.exe (50 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\dht_feed.dat.new (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\282332204[1].js (103941 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\8059E9A0D314877E40FE93D8CCFB3C69_6974D89D7560C032FD086BB9AE092DD4 (2618 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\8059E9A0D314877E40FE93D8CCFB3C69_8BB8535855D9B94D8D1B596BEE16137C (463 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\7D266D9E1E69FA1EEFB9699B009B34C8_0A9BFDD75B598C2110CBF610C078E6E6 (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\jquery.min[1].js (47793 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\1DAF2884EC4DFA96BA4A58D4DBC9C406 (960 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\23B523C9E7746F715D33C6527C18EB9D (878 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\play-button.b2579dc0b8f3e62f1a204bfa79a4b481[1].png (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\8059E9A0D314877E40FE93D8CCFB3C69_E1083B58096402790BB1984C8AAEEC87 (1432 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\bundle-logo-large.b049e3f1e4aa142045d83cced5c97560[1].png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\DXI1ORHCpsQm3Vp6mXoaTXhCUOGz7vYGh680lGh-uXM[1].woff (14792 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\utt2EAF.tmp (7203 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\collect[1].gif (35 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\0adc57539238324f6687b0c0176a4cd1d792eb737b7aeba460a201664d6fab1c[1].htm (4294 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\ecommerce[1].js (25 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\8059E9A0D314877E40FE93D8CCFB3C69_A363FA4664764D069037AD000B6F9001 (2590 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\1DAF2884EC4DFA96BA4A58D4DBC9C406 (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\EB2C4AB8B68FFA4B7733A9139239A396_D76DB901EE986B889F30D8CC06229E2D (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\modernizr.c1f148ce451bd94fd43d6b446b4ca51e.gz[1].js (7309 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\btapp[1].htm (58 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\223DE96EE265046957A660ED7C9DD9E7_EFF9B9BA98DEAA773F261FA85A0B1771 (1688 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\index[1].html (107 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F12703B35B1F82C21160A92376087C84_912F99CA8D5FDC99CE2D346B99B73E21 (471 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\D47DBD2F9E3365FBBE008D71FB06716F_835A2FD7EE5F1F37B7872C78D42A88BF (2716 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F12703B35B1F82C21160A92376087C84_912F99CA8D5FDC99CE2D346B99B73E21 (1672 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\background[1].jpg (18910 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\887FDFEF9DC62EF73EB288690D5944B1_041C7BCA38AE473669C469148677703C (1904 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\828298824EA5549947C17DDABF6871F5_4A500E9AA7C5573906560F21D53A5861 (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\7D266D9E1E69FA1EEFB9699B009B34C8_8CA7164968F366C9A94AC8E71C4BDD9B (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\EB2C4AB8B68FFA4B7733A9139239A396_D76DB901EE986B889F30D8CC06229E2D (1720 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\Red Army Poster[1].jpg (9668 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\77EC63BDA74BD0D0E0426DC8F8008506 (56 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\resume.dat.new (141 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\logo.90a665e9dfacdeef6f53b7b899b21ead[1].png (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\23B523C9E7746F715D33C6527C18EB9D (1056 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\css[1].css (756 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\app.1422517976.tmp (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\utt2EAD.tmp (811 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\7D266D9E1E69FA1EEFB9699B009B34C8_0A9BFDD75B598C2110CBF610C078E6E6 (1504 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Crypto\RSA\S-1-5-21-2858020935-2156992550-3658131804-1003\215322cc5e79c842231ac4f88c1d0102_c0322acd-5e5d-42f0-b163-c591ee6ff5b9 (80 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Internet Explorer\DOMStore\DRT4YCWO\bundles.bittorrent[1].xml (1743 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\FB788E090BC1F3AA2FBC9E8FB2859601 (984 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\0adc57539238324f6687b0c0176a4cd1d792eb737b7aeba460a201664d6fab1c[1].json (2967 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\7B8944BA8AD0EFDF0E01A43EF62BECD0_251DAA28139FC527316726DEB16CC0E9 (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\apps\9D1685A791FDE8335C27D20650E32136BC84646F.btapp (33 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\2427C246DCF85A06DD675914EDA68038_EEE52A74DEE31B064E156E492FD05217 (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\Cab350D.tmp (56 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\public.761cb99c79e57c9367a7b524d29f8bf6.gz[1].css (118355 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\74BFD122C0875EC75DBE5C6DB4C59019 (24 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\8059E9A0D314877E40FE93D8CCFB3C69_8BB8535855D9B94D8D1B596BEE16137C (1432 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\all[1].js (102039 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\utt2EAE.tmp (15053 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\cJZKeOuBrn4kERxqtaUH3T8E0i7KZn-EPnyo3HZu7kw[1].woff (14792 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\828298824EA5549947C17DDABF6871F5_4A500E9AA7C5573906560F21D53A5861 (1312 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\fontawesome-webfont.7149833697a959306ec3012a8588dcfa[1].eot (22641 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\8059E9A0D314877E40FE93D8CCFB3C69_E1083B58096402790BB1984C8AAEEC87 (463 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\See Red Army in Theaters[1].jpg (2184 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\D47DBD2F9E3365FBBE008D71FB06716F_835A2FD7EE5F1F37B7872C78D42A88BF (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\analytics[1].js (21662 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\8059E9A0D314877E40FE93D8CCFB3C69_A363FA4664764D069037AD000B6F9001 (926 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\FOOR2L8O.txt (93 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\955CAB6FF6A24D5820D50B5BA1CF79C7_0D0504E280D4BC90041F089A5D901106 (1488 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\77EC63BDA74BD0D0E0426DC8F8008506 (370 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\2427C246DCF85A06DD675914EDA68038_EEE52A74DEE31B064E156E492FD05217 (1480 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Internet Explorer\MSIMGSIZ.DAT (2024 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\8059E9A0D314877E40FE93D8CCFB3C69_6974D89D7560C032FD086BB9AE092DD4 (926 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\dht.dat.new (637 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\rss.dat.new (141 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\955CAB6FF6A24D5820D50B5BA1CF79C7_0D0504E280D4BC90041F089A5D901106 (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\7D1F03728133589A90656A87E482B21F (920 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\cover[1].jpg (200 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\e[1].htm (62 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\nr-515.min[1].js (10314 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\91ECFED5143F7F4F4576655D8EFAB51C_5876942B8A1533861E194CE520DB3C48 (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\EDC238BFF48A31D55A97E1E93892934B_C20E0DA2D0F89FE526E1490F4A2EE5AB (1592 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\7D266D9E1E69FA1EEFB9699B009B34C8_8CA7164968F366C9A94AC8E71C4BDD9B (2716 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\Red Army Poster[1].jpg (1928 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\collect[1].gif (105 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\widgets[1].js (68356 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\EDC238BFF48A31D55A97E1E93892934B_C20E0DA2D0F89FE526E1490F4A2EE5AB (471 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\223DE96EE265046957A660ED7C9DD9E7_EFF9B9BA98DEAA773F261FA85A0B1771 (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\FB788E090BC1F3AA2FBC9E8FB2859601 (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\57C8EDB95DF3F0AD4EE2DC2B8CFD4157 (680 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\74BFD122C0875EC75DBE5C6DB4C59019 (2016 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\utt53CA.tmp.new (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\L8PYC53T.txt (89 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\utt692E.tmp.bat (93 bytes)
C:\Users\"%CurrentUserName%"\Desktop\Ã‚ÂµTorrent.lnk (811 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\utt7946.tmp.new (61 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\maindoc.ico (63 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Crypto\RSA\S-1-5-21-2858020935-2156992550-3658131804-1003\af35ebe0fef5203424ad3ebf2d258dbb_c0322acd-5e5d-42f0-b163-c591ee6ff5b9 (80 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\utt7436.tmp (603 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\updates\3.4.2_37754.exe (10815 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\uTorrent.exe (50 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\apps\9D1685A791FDE8335C27D20650E32136BC84646F\index.html (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\utt568C.tmp.exe (316 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\apps\9D1685A791FDE8335C27D20650E32136BC84646F\btapp (223 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\apps\3609FC884502A1DF0AA5D9D160C827BB1BD51FC9\icon.bmp (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\apps\4585805A0BEAAAA6F570825EB241201C227B5E09\main.css (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\apps\3609FC884502A1DF0AA5D9D160C827BB1BD51FC9\btapp (209 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\apps\0E9349A6F81CE7F47E9364BCFE8EF4B95C7B1708\index.html (591 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\apps\72F0D3E2141065DACF6134D07A06A2DF20590748\icon.bmp (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\apps\0E9349A6F81CE7F47E9364BCFE8EF4B95C7B1708\btapp (206 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\utt7A31.tmp.new (24 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\apps\72F0D3E2141065DACF6134D07A06A2DF20590748\index.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\3T213LI9.txt (93 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\apps\72F0D3E2141065DACF6134D07A06A2DF20590748\main.css (946 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\apps\4585805A0BEAAAA6F570825EB241201C227B5E09\btapp (194 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\apps\4585805A0BEAAAA6F570825EB241201C227B5E09\index.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\apps\3609FC884502A1DF0AA5D9D160C827BB1BD51FC9\package.json (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\toolbar_offer.benc (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\toolbar.benc.new (61 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\apps\0E9349A6F81CE7F47E9364BCFE8EF4B95C7B1708\package.json (982 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\apps\72F0D3E2141065DACF6134D07A06A2DF20590748\index.html (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\apps\72F0D3E2141065DACF6134D07A06A2DF20590748\btapp (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\apps\0E9349A6F81CE7F47E9364BCFE8EF4B95C7B1708\icon.bmp (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\apps\4585805A0BEAAAA6F570825EB241201C227B5E09\empty_movie.gif (282 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\utt6A08.tmp.new (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\QBX6Q5Q5.txt (93 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Start Menu\Ã‚ÂµTorrent.lnk (791 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\apps\3609FC884502A1DF0AA5D9D160C827BB1BD51FC9\index.html (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\utt7830.tmp.new (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\apps\4585805A0BEAAAA6F570825EB241201C227B5E09\info_icon.png (250 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\apps\4585805A0BEAAAA6F570825EB241201C227B5E09\vid_thumb.jpg (23 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\apps\9D1685A791FDE8335C27D20650E32136BC84646F\main.js (93 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\apps\4585805A0BEAAAA6F570825EB241201C227B5E09\x.png (265 bytes)
Delete the following value(s) in the autorun key (How to Work with System Registry):

[HKCU\Software\Microsoft\Windows\CurrentVersion\Run]
"Skype" = "%Program Files% (x86)\Skype\Phone\Skype.exe /minimized /regrun"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Run]
"uTorrent" = "%Program Files% (x86)\uTorrent\uTorrent.exe /MINIMIZED"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Run]
"uTorrent" = "C:\Users\"%CurrentUserName%"\AppData\Local\Temp\utt501D.tmp.exe /MINIMIZED"
Clean the Temporary Internet Files folder, which may contain infected files (How to clean Temporary Internet Files folder).
Reboot the computer.

*Manual removal may cause unexpected system behaviour and should be performed at your own risk.

Permalink

Back to the blog

e-mail

Google+

Twitter

Facebook

SearchProtectToolbar_f9f81c3215

Our best antivirus yet!

Fresh new look. Faster scanning. Better protection.

Discover the new adaware antivirus 12

Our best antivirus yet

SearchProtectToolbar_f9f81c3215

E-mail

Our best antivirus yet!

Fresh new look. Faster scanning. Better protection.

Discover the new adaware antivirus 12

Our best antivirus yet