MD5: c16b0ea1980f1cc49184395e6968863a
SHA1: fffdfef48298204e82007fa534deea8f9427759e
SHA256: 3381c0720f2bfeb2f254687418acdbd32d094d8f0f761f8c8208d42cd27436eb
SSDeep: 49152:2QGjX8WfLYjc5EejpZh2E6DY0gDXYw7GA9kzbw4PFwF:LGjMWf0jc5N3sFDYnXYWP9kznPS
Size: 2125252 bytes
File type: EXE
Platform: WIN32
Entropy: Packed
PEID: BorlandDelphi30, UPolyXv05_v6
Company: no certificate found
Created at: 1992-06-20 01:22:17
Analyzed on: Windows7 SP1 32-bit

Summary:

Trojan. A program that appears to do one thing but actually does another (a.k.a. Trojan Horse).

Payload

Process activity

The Trojan creates the following process(es):
No processes have been created.
The Trojan injects its code into the following process(es):

%original file name%.exe:3404

Mutexes

The following mutexes were created/opened:
No objects were found.

File activity

The process %original file name%.exe:3404 makes changes in the file system.
The Trojan deletes the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Roaming\EurekaLog\EurekaLog.ini (0 bytes)

Registry activity

The process %original file name%.exe:3404 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKCR\TypeLib\{4D5AF23F-47D0-396D-31E0-B85B36E6C693}\1.0\FLAGS]
"(Default)" = ""

[HKCR\CLSID\{0AE6D120-FBD6-4D96-9CAE-E01601D75131}]
"(Default)" = "Jebafgira object"

[HKCR\.key]
"(Default)" = ""

[HKCR\CLSID\{0AE6D120-FBD6-4D96-9CAE-E01601D75131}\Version]
"(Default)" = ""

[HKCR\TypeLib\{4D5AF23F-47D0-396D-31E0-B85B36E6C693}\1.0\0]
"(Default)" = ""

[HKCU\Software\ASProtect\SpecData]
"C94B903FC94B903F" = "DA 6B 8F 5B C7 48 9D E0 EF B1 E3 59 AB C9 7A AE"

[HKCR\CLSID\{0AE6D120-FBD6-4D96-9CAE-E01601D75131}\InprocServer32]
"(Default)" = ""

[HKCR\TypeLib\{4D5AF23F-47D0-396D-31E0-B85B36E6C693}]
"(Default)" = ""

[HKCR\CLSID\{0AE6D120-FBD6-4D96-9CAE-E01601D75131}\Control]
"(Default)" = ""

[HKCR\CLSID\{0AE6D120-FBD6-4D96-9CAE-E01601D75131}\Programmable]
"(Default)" = ""

[HKCR\CLSID\{0AE6D120-FBD6-4D96-9CAE-E01601D75131}\MiscStatus]
"(Default)" = ""

[HKCU\Software\ASProtect\SpecData]
"(Default)" = "C94B903FC94B903F"

[HKCR\TypeLib\{4D5AF23F-47D0-396D-31E0-B85B36E6C693}\1.0]
"(Default)" = ""

[HKCR\CLSID\{0AE6D120-FBD6-4D96-9CAE-E01601D75131}\TypeLib]
"(Default)" = ""

[HKCR\CLSID\{0AE6D120-FBD6-4D96-9CAE-E01601D75131}\VersionIndependentProgID]
"(Default)" = ""

[HKCR\CLSID\{0AE6D120-FBD6-4D96-9CAE-E01601D75131}\ToolboxBitmap32]
"(Default)" = ""

[HKCR\TypeLib\{4D5AF23F-47D0-396D-31E0-B85B36E6C693}\1.0\0\win32]
"(Default)" = ""

[HKCR\CLSID\{0AE6D120-FBD6-4D96-9CAE-E01601D75131}\ProgID]
"(Default)" = ""

Dropped PE files

There are no dropped PE files.

HOSTS file anomalies

No changes have been detected.

Rootkit activity

No anomalies have been detected.

Propagation

VersionInfo

Company Name:
Product Name:
Product Version: 1.0.0.0
Legal Copyright:
Legal Trademarks:
Original Filename:
Internal Name:
File Version: 3.5.0.0
File Description:
Comments:
Language: Language Neutral

PE Sections

Dropped from:

Downloaded by:

Similar by SSDeep:

Similar by Lavasoft Polymorphic Checker:

URLs

No activity has been detected.

IDS verdicts (Suricata alerts: Emerging Threats ET ruleset)

Traffic

Web Traffic was not found.

The Trojan connects to the servers at the folowing location(s):

.rsrc

.data

.adata

.text

kernel32.dll

Windows

MSWHEEL_ROLLMSG

MSH_WHEELSUPPORT_MSG

MSH_SCROLL_LINES_MSG

MM Operation after uninstall.

Note: To obtain a log file containing detail on memory leaks, enable the "FullDebugMode" and "LogMemoryLeakDetailToFile" conditional defines. To disable this memory leak check, undefine "EnableMemoryLeakReporting".

If you want to use FastMM4, please make sure that FastMM4.pas is the very first unit in the "uses"

section of your project's .dpr file.

FastMM4.pas MUST be the first unit in your project's .dpr file, otherwise memory may be allocated

go into its configuration page and ensure that the FastMM4.pas unit is initialized before any other unit.

$*@@@*$@@@$ *@@* $@@($*)@-$*@@$-*@@$*-@@(*$)@-*$@@*-$@@*$-@@-* $@-$ *@* $-@$ *-@$ -*@*- $@($ *)(* $)

Try to replaced the Memory Manager used with the last FastMM4 Memory Manager (hXXp://fastmm.sourceforge.net).

DELPHI32.EXE

ELeaks.pas unit Error

_com.eurekalog.eleaks.dataclass

Uh.pA

oleaut32.dll

EVariantBadIndexError

ssShift

htKeyword

EInvalidOperation

u%CNu

%s[%d]

%s_%d

.Owner

EMsgsRec

Support message

Login message

Operating System Header

Invalid login

An error has occurred during program execution.

Go to the Support Page

We have created an error report that you can send to us. We will treat this report as confidential and anonymous.

To see what data the error report contains,

&Send Error Report

Operating System

Login...

Contact the program support to obtain an update.

Invalid login request.

Operating System|Type

Operating System|Build #

Operating System|Update

Operating System|Language

Operating System|Charset

_BugReport | Full EurekaLog bug report

_ExceptMsg | Last exception message

SystemDrive | The drive containing the Windows root directory

SystemRoot | The Windows root directory

WinDir | Windows directory

.vshost

shfolder.dll

1111111

eurekalog@email.com

%s (Address: %s)

Critical error at: "%s"

Error: "%s".

ECore.Done

ECore.Init

TELVftPathSymbolInfo

.jdbg

%Program Files%\EurekaLog 6\Delphi7\EDebug.pas

Cannot hook a null procedure ("%s").

Cannot hook the module "%s" located into the shared-area.

Cannot hook the procedure "%s".

EHook.Done

EHook.Init

TEurekaClientSMTP

Cannot close the socket: "%s"

Invalid socket: "%s".

Connection error: "%s"

Connected to %d.%d.%d.%d port %d

Error into "send": "%s"

Error into "recv": "%s"

0.0.0.0

IPHLPAPI.DLL

193.121.171.135

Cannot resolve the "%s" MX record.

ESockets.Done

ESockets.Init

MSVCRT.DLL

MSVCRT20.DLL

1.2.3

THTTPResponse`<D

THTTPConnectionBase

THTTPSendReporth=D

THTTPMantisSendReport

THTTPBugzillaSendReport8>D

THTTPFogBugzSendReport

wininet.dll

HttpOpenRequestA

HttpAddRequestHeadersA

HttpSendRequestA

HttpSendRequestExA

HttpEndRequestA

HttpQueryInfoA

FtpOpenFileA

InternetOpenUrlA

Uh.UD

https

Cannot create an HTTP connection with the host: %s

Cannot close the HTTP connection with the host: %s

Content-Type: application/x-www-form-urlencoded

[v%s - 1]: %s (%s)

%s (%s)

login.php

login_select_proj_page.php

password

set_project.php

my_view_page.php

view_all_set.php?f=3

view_all_bug_page.php

bug_update_page.php?bug_id=

bug_update_advanced_page.php?bug_id=

bug_report_advanced_page.php

bug_report.php

report_stay

bug_report_token

href="view.php?id=

bug_update_page.php

bug_update.php

reporter_id

view.php

enter_bug.cgi

Bugzilla_login

Bugzilla_password

relogin.cgi

buglist.cgi

href="query.cgi?

show_bug.cgi?id=

action="post_bug.cgi"

post_bug.cgi

keywords

attachment.cgi

show_bug.cgi

<label for="component" accesskey="

process_bug.cgi

default.asp

sPassword

fRememberPassword

default.asp?pg=pgeditbug

default.asp?pgx=EV&ixBug=

default.asp?pre=preSubmitBug&sActionToken=

default.asp?pre=preSubmitBug

default.asp?pg=pgEditReleaseNotes

C:\Works\Sync Folder\Sources\EurekaLog 6\EWebTools.pas

Cannot assign a THTTPResponse class to a NIL value.

%c les #Gv , #Mp

%c punpcklbw #Pq , #Qd

%c punpcklwd #Pq , #Qd

%c punpckldq #Pq , #Qd

%c packusdw #Pq , #Qd

%c pcmpgtb #Pq , #Qd

%c pcmpgtw #Pq , #Qd

%c pcmpgtd #Pq , #Qd

%c packsswb #Pq , #Qd

%c punpckhbw #Pq , #Qd

%c punpckhwd #Pq , #Qd

%c punpckhdq #Pq , #Qd

%c packssdw #Pq , #Qd

eeEmailSMTPError

eeWebHTTPError

eeWebHTTPSError

eeWebFTPError

eeWebTrakerError

THTTPConnection

TActiveXException

%d %s,

%d %s

{\rtf1\ansi\ansicpg1252\deff0\deflang1040{\fonttbl{\f0\fmodern\fprq1\fcharset%d %s;}}

Microsoft Windows

\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION

\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION

%s, %d %s %d %0.2d:%0.2d:%0.2d %s

- %s - %s - %s - %s[%s]

%s $%8.8x - [%8.8x] %s %s

$%8.8x - [%8.8x] %s - %s - %s - %s - %s[%s]

[ERROR] - Section: %s - Address: %s - Message: "%s"

6.0.21

Version : %s

Date : %s

OS : %s

RAD : %s

Dump : %s

Section : %s

LastExcept: %s

Address : %s

Exception : %s

Message : %s

Call Stack: %s

Error: '%s'

EurekaLog 6.0.21 critical bug.

support@eurekalog.com

Send manually the "%s" file to the support@eurekalog.com email address, after click on OK button to close this box.

[WARNING] - Code: %s - Address: %s - Message: "%s"

[%s] %s

General '%s' error.

PSAPI.DLL

PSAPI.dll

Kernel32.dll

HttpExtensionProc

Content-Length: %d

<title>%s</title>

<!-- EurekaLog ID: %s -->

<br><input type=button value="Ok" OnClick="history.go(-1)" style="width:75;height:25;z-index:100;font-style:normal;font-size:10pt;text-decoration:none;">

EurekaLog_IWShowMessage.html

IntraWeb: Cannot show the error page.

IntraWeb: Cannot create the "%s" template.

IntraWeb

IntraWeb: IntraWebApplication e/o IntraWebServerController are set to nil.

Screenshot.png

BugReport.zip

LastHTMLPage.html

EurekaLog_CustomWebFieldsRequestEvent

EurekaLog_PasswordRequestEventEx

EurekaLog_PasswordRequestEvent

%s=%d; %s=%s

; %s=%s

%s: %s=%s; %s=%d; %s=%d

user32.dll

EurekaLog.ini

WindowsState

\\.\mailslot\

RICHED20.DLL

mapi32.dll

SMTP:

%s %d/%d:

AUTH LOGIN

@localhost.com>

SMTP

\*.zip

- Cannot find the "%s" library.

%s error code: %d%s

HTTPS

Error Code: %d

Error Message: "%s"

%d x %d, %d bit

000.000.000.000

iphlpapi.dll

HardwareInformation.MemorySize

HardwareInformation.AdapterString

windows

winspool.drv

EurekaLog 6.0.21

%s: %s %s:

EAX: %s EDI: %s

EBX: %s ESI: %s

ECX: %s ESP: %s

EDX: %s EIP: %s

%s%s:

|%s|%s|%s|%s|%s|%s|

|%s|%s|%s|%s|%s|%s|%s|

|%s|%s|%s|%s|%s|%s|%s|%s|

_ExceptMsg

_BugReport

Cannot use 'CurrentEurekaLogOptions' function in module "%s" without activate EurekaLog.

C:\Works\Sync Folder\Sources\EurekaLog 6\ExceptionLog.pas

5.0.0

7.2.32

%s: %s=%d - %s=%d

Intraweb_

VCL70.BPL

VISUALCLX70.BPL

INDY70.BPL

INDYCORE70.BPL

ExceptionLog.Done

ExceptionLog.Init

EInvalidGraphicOperation

comctl32.dll

USER32.DLL

uxtheme.dll

%s%s%s%s%s%s%s%s%s%s

Proportional

MAPI32.DLL

SOFTWARE\Microsoft\Windows Messaging Subsystem

OnKeyDown

OnKeyPress

OnKeyUp

ArrowKeys

vsReport

acoUpDownKeyDropsList

RICHED32.DLL

TComboBoxExEnumerator

ole32.dll

PasswordCharX

ssHorizontal

IE(AL("%s",4),"AL(\"%0:s\",3)","JK(\"%1:s\",\"%0:s\")")

JumpID("","%s")

TKeyEvent

TKeyPressEvent

HelpKeyword

crSQLWait

imm32.dll

OnExecute

AutoHotkeysx

AutoHotkeys

ssHotTrack

TWindowState

poProportional

TWMKey

KeyPreviewl

WindowState

System\CurrentControlSet\Control\Keyboard Layouts\%.8x

vcltest3.dll

User32.dll

1.1.4

0123456789.-

0000000000

(<>[]{/%

bracerighttp

bracketrighttp

parenrighttp

proportional

.notdef

2331112

00000000

Ht.Ht:

%unknown iType:

3333333

%SetMapMode(

%SetViewportExt(

%SetViewportOrg(

%SetWindowExt(

%SetWindowOrg(

UhM%S

[ 1 0 1 0 1 0 1 0 ]

[ /Indexed

[ 1 0 1 0 1 0 ]

gdiplus.dll

GdiplusShutdown

GdipSetPenLineJoin

GdipSetImageAttributesColorKeys

Indexed

/Indexed

[ Indexed

[ 0 1 0 1 0 1 0 1 ]

/Indexed

|000.notdef|001space|002exclam|003quotedbl|004numbersign|005dollar|006percent|007ampersand|008quoteright|009parenleft|010parenright|011asterisk|012plus|013comma|014hyphen|015period|016slash|017zero|018one|019two|020three|021four|022five|023six|024seven|025eight|026nine|027colon|028semicolon|029less|030equal|031greater|032question|033at|034A|035B|036C|037D|038E|039F|040G|041H|042I|043J|044K|045L|046M|047N|048O|049P|050Q|051R|052S|053T|054U|055V|056W|057X|058Y|059Z|060bracketleft|061backslash|062bracketright|063asciicircum|064underscore|065quoteleft|066a|067b|068c|069d|070e|071f|072g|073h|074i|075j|076k|077l|078m|079n|080o|081p|082q|083r|084s|085t|086u|087v|088w|089x|090y|091z|092braceleft|093bar|094braceright|095asciitilde|096exclamdown|097cent|098sterling|099fraction|100yen|101florin|102section|103currency|104quotesingle|105quotedblleft|106guillemotleft|107guilsinglleft|108guilsinglright|109fi|110fl|111endash|112dagger|113daggerdbl|114periodcentered|115paragraph|116bullet|117quotesinglbase|118quotedblbase|119quotedblright|120guillemotright|121ellipsis|122perthousand|123questiondown|124grave|125acute|126circumflex|127tilde|128macron|129breve|130dotaccent|131dieresis|132ring|133cedilla|134hungarumlaut|135ogonek|136caron|137emdash|138AE|139ordfeminine|140Lslash|141Oslash|142OE|143ordmasculine|144ae|145dotlessi|146lslash|147oslash|148oe|149germandbls|150onesuperior|151logicalnot|152mu|153trademark|154Eth|155onehalf|156plusminus|157Thorn|158onequarter|159divide|160brokenbar|161degree|162thorn|163threequarters|164twosuperior|165registered|166minus|167eth|168multiply|169threesuperior|170copyright|171Aacute|172Acircumflex|173Adieresis|174Agrave|175Aring|176Atilde|177Ccedilla|178Eacute|179Ecircumflex|180Edieresis|181Egrave|182Iacute|183Icircumflex|184Idieresis|185Igrave|186Ntilde|187Oacute|188Ocircumflex|189Odieresis|190Ograve|191Otilde|192Scaron|193Uacute|194Ucircumflex|195Udieresis|196Ugrave|197Yacute|198Ydieresis|199Zcaron|200aacute|201acircumflex|202adieresis|203agrave|204aring|205atilde|206ccedilla|207eacute|208ecircumflex|209edieresis|210egrave|211iacute|212icircumflex|213idieresis|214igrave|215ntilde|216oacute|217ocircumflex|218odieresis|219ograve|220otilde|221scaron|222uacute|223ucircumflex|224udieresis|225ugrave|226yacute|227ydieresis|228zcaron|229exclamsmall|230Hungarumlautsmall|231dollaroldstyle|232dollarsuperior|233ampersandsmall|234Acutesmall|235parenleftsuperior|236parenrightsuperior|237twodotenleader|238onedotenleader|239zerooldstyle|240oneoldstyle|241twooldstyle|242threeoldstyle|243fouroldstyle|244fiveoldstyle|245sixoldstyle|246sevenoldstyle|247eightoldstyle|248nineoldstyle|249commasuperior|250threequartersemdash|251periodsuperior|252questionsmall|253asuperior|254bsuperior|255centsuperior|256dsuperior|257esuperior|258isuperior|259lsuperior|260msuperior|261nsuperior|262osuperior|263rsuperior|264ssuperior|265tsuperior|266ff|267ffi|268ffl|269parenleftinferior|270parenrightinferior|271Circumflexsmall|272hyphensuperior|273Gravesmall|274Asmall|275Bsmall|276Csmall|277Dsmall|278Esmall|279Fsmall|280Gsmall|281Hsmall|282Ismall|283Jsmall|284Ksmall|285Lsmall|286Msmall|287Nsmall|288Osmall|289Psmall|290Qsmall|291Rsmall|292Ssmall|293Tsmall|294Usmall|295Vsmall|296Wsmall|297Xsmall|298Ysmall|299Zsmall|300colonmonetary|301onefitted|302rupiah|303Tildesmall|304exclamdownsmall|305centoldstyle|306Lslashsmall|307Scaronsmall|308Zcaronsmall|309Dieresissmall|310Brevesmall|311Caronsmall|312Dotaccentsmall|313Macronsmall|314figuredash|315hypheninferior|316Ogoneksmall|317Ringsmall|318Cedillasmall|319questiondownsmall|320oneeighth|321threeeighths|322fiveeighths|323seveneighths|324onethird|325twothirds|326zerosuperior|327foursuperior|328fivesuperior|329sixsuperior|330sevensuperior|331eightsuperior|332ninesuperior|333zeroinferior|334oneinferior|335twoinferior|336threeinferior|337fourinferior|338fiveinferior|339sixinferior|340seveninferior|341eightinferior|342nineinferior|343centinferior|344dollarinferior|345periodinferior|346commainferior|347Agravesmall|348Aacutesmall|349Acircumflexsmall|350Atildesmall|351Adieresissmall|352Aringsmall|353AEsmall|354Ccedillasmall|355Egravesmall|356Eacutesmall|357Ecircumflexsmall|358Edieresissmall|359Igravesmall|360Iacutesmall|361Icircumflexsmall|362Idieresissmall|363Ethsmall|364Ntildesmall|365Ogravesmall|366Oacutesmall|367Ocircumflexsmall|368Otildesmall|369Odieresissmall|370OEsmall|371Oslashsmall|372Ugravesmall|373Uacutesmall|374Ucircumflexsmall|375Udieresissmall|376Yacutesmall|377Thornsmall|378Ydieresissmall|379001|380001.001|381001.002|382001.003|383Black|384Bold|385Book|386Light|387Medium|388Regular|389Roman|390Semibold|

.null

[ 128 /Ccedilla /udieresis /eacute /acircumflex /adieresis /agrave /aring /ccedilla /ecircumflex /edieresis /egrave /idieresis /icircumflex /igrave /Adieresis /Aring /Eacute /ae /AE /ocircumflex /odieresis /ograve /ucircumflex /ugrave /ydieresis /Odieresis /Udieresis /cent /sterling /yen /peseta /florin /aacute /iacute /oacute /uacute /ntilde /Ntilde /ordfeminine /ordmasculine /questiondown /logicalnotreversed /logicalnot /onehalf /onequarter /exclamdown /guillemotleft /guillemotright /ltshade /shade /dkshade /SF110000 /SF090000 /SF190000 /SF200000 /SF210000 /SF220000 /SF230000 /SF240000 /SF250000 /SF260000 /SF270000 /SF280000 /SF030000 /SF020000 /SF070000 /SF060000 /SF080000 /SF100000 /SF050000 /SF360000 /SF370000 /SF380000 /SF390000 /SF400000 /SF410000 /SF420000 /SF430000 /SF440000 /SF450000 /SF460000 /SF470000 /SF480000 /SF490000 /SF500000 /SF510000 /SF520000 /SF530000 /SF540000 /SF040000 /SF010000 /block /dnblock /lfblock /rtblock /upblock /alpha /germandbls /Gamma /pi /Sigma /sigma /mu /tau /Phi /Theta /Omegagreek /delta /infinity /phi /epsilon /intersection /equivalence /plusminus /greaterequal /lessequal /integraltop /integralbottom /divide /approxequal /degree /bulletoperator /middot /radical /nsuperior /twosuperior /blacksquare /nbspace ]

TMonochromeLookup

TPDFEPSExportSV

%%DocumentCustomColors:

%%CMYKCustomColor:

%%Creator: (iSEDQuickPDF)

%%DocumentProcessColors: (Cyan) (Magenta) (Yellow) (Black)

/j { setlinejoin } def

D:\Software\PDFLib\uPDFRenderer.pas

MSXML2.DOMDocument.4.0

xmlns:xdp="hXXp://ns.adobe.com/xdp/" xmlns:xfa="hXXp://VVV.xfa.org/schema/xfa-data/1.0/"

xmlns:xfa="hXXp://VVV.xfa.org/schema/xfa-data/1.0/"

xmlns:xdp="hXXp://ns.adobe.com/xdp/" xmlns:xfa="hXXp://VVV.xfa.org/schema/xfa-template/2.1/"

xmlns:xfa="hXXp://VVV.xfa.org/schema/xfa-template/2.1/"

passwordEdit

QQAPCert:

Cert

QQAPExtraCert:

ExtraCert

13-14-21-23-24-25-28-

16-17-26-

18-19-20-22-23-27-

Adobe.PPKLite

adbe.x509.rsa_sha1

0123456789.

%x%x%x%x%x%x%x%x

Process can not be created. Code:%d

"%s" "%s" -o "%s"

jbig2dec.exe

0123456789.

0123456789

URLS

0123456789,-

[ 0 0 612 792 ]

/Author/Title/Subject/Keywords/Creator/Producer/CreationDate/ModDate

D:\Software\PDFLib\uPDFDocument.pas

%d %d R

%d_%d

Unsupport key length

gsdll32.dll

UnlockKey

SetPassword

SetCatalogInformation

GetCatalogInformation

GetCustomKeys

SetOutlineWebLink

GetOutlineWebLink

SetLineJoin

AddLinkToWeb

GetFormFieldWebLink

FormFieldWebLinkAction

A-PDF (VVV.a-pdf.com)

/Author/Title/Subject/Keywords/Creator/Producer/

Keywords

dPDFPassword=

QQAPMergeTemp2.dat

QQAPMergeTemp1.dat

test.dat

QQAPTempFont.fot

supports

importNode

English.lng

%d.%d.%d

/A "page=%d" "%s"

"%s" -n %d

Úte%

if (CheckExpiration(%d,%d,%d,%d,%d) ) {

app.alert("%s",1,0,"Expired");

this.closeDoc(1);

var myDate = new Date( Number(LastYear), Number(LastMonth), Number(LastDate), Number(LastHour), Number(LastMin), Number(LastSec), Number(LastMS) ).valueOf();

var today = new Date().valueOf();

RegistryKey

filter_keywordsT

filter_producerT

exportToCsvPath

demo@test.com

shell32.dll

netapi32.dll

ptstoDefaultKeyHandling

OnKeyUpX

TPTShellControlDefKeyRec

Software\Microsoft\Windows\CurrentVersion\Explorer

[TFileInfo] keywords:

D:\Software\Delphi\MyLib\DebugTools.pas

[uListFileThread] Execute

IDCT output block size ? not supported

Unsupported JPEG data precision ?

Buffer passed to JPEG library is too small

Unsupported color conversion request

Empty JPEG image (DNL not supported)

Maximum supported image dimension is ? pixels

Backing store not supported

Unsupported JPEG process: SOF type ?

Unsupported marker type ?

Smoothing not supported with nonstandard sampling ratios

t H,%s

Invalid ZStream operation!

OnTextKeyDown

%%Creator: ImageEn by HiComponents

%%CreationDate:

%%DocumentData: Clean7Bit

TIEImageIDRequestExEvent

TIEMKeyInteractItems

TIEMKeyInteract

OnIOProgressh

KeyInteract

3.0.0

MsgLanguage

;*.avi

(*.avi)|*.avi

;*.mpg

;*.wmv

|Mpeg (*.mpeg;*.mpg)|*.mpeg;*.mpg

|Windows Media Video (*.wmv)|*.wmv

(*.*)|*.*

.mpeg

16777216

JPEG Bitmap (JPG)|*.jpg

|CompuServe Bitmap (GIF)|*.gif

|TIFF Bitmap (TIF)|*.tif

|PaintBrush (PCX)|*.pcx

|Portable Network Graphics (PNG)|*.png

|Windows Bitmap (BMP)|*.bmp

|OS/2 Bitmap (BMP)|*.bmp

|Targa Bitmap (TGA)|*.tga

|Portable PixMap (PXM)|*.pxm

|Portable PixMap (PPM)|*.ppm

|Portable GreyMap (PGM)|*.pgm

|Portable Bitmap (PBM)|*.pbm

|JPEG2000 (JP2)|*.jp2

|Multipage PCX (DCX)|*.dcx

MONOCHROME1

1.2.840.10008.1.2.4.50

1.2.840.10008.1.2.4.70

1.2.840.10008.1.2.4.57

1.2.840.10008.1.2.5

1.2.840.10008.1.2.2

MsgLanguage$

TIESpecialKeyEvent

OnSpecialKey

MSIMG32.DLL

ImageEn Version 3.0.0 -

1.2.14

f%UUf

Uh%fk

Windows Bitmap

Windows Icon

Windows Cursor

Portable Network Graphics

Windows Metafile

Enhanced Windows Metafile

Portable Pixmap, GrayMap, BitMap

Mozilla/4.*

HTTP/1.1

MsgLanguagep

_CopyBitmaptoDIBEx: not supported pixel format, converting to 24bit and recurse

High Pass 1

High Pass 2

High Pass 3

Low Pass 1

Low Pass 2

mscms.dll

sRGB Color Space Profile.icm

hXXp://ns.adobe.com/xap/1.0/

Cannot create file "%s". %s

Cannot open file "%s". %s

hXXp://

hXXps://

PTF://

Video for Windows

Pos.Orizz. (inch)

Pos.Vert. (inch)

An Seite anpassen

r Windows

Windows

Passend in pagina

Toepassen

Proportion

Video pro Windows

TMsgLanguage

msGerman

msPortuguese

msGreek

SOFTWARE\Digital River\SoftwarePassport\

BuyURL

lblOpenPassword(

chkOpenPassword,

edtOpenPassword0

lblPermissionsPassword8

chkPermissionsPasswordD

edtPermissionsPasswordH

Imageopenpass

Imagepermissionpass

lvFilesKeyDown

TfrmVerifyPassword

uVerifyPassword

ADDED %s

DELETED %s

MODIFIED %s

RENAMED %s [...]

[...] into %s

Unexpected error: %s

lblKeyword

edtKeyword

btnMacroKeyword8

FirstFileKeywors1p

eOffsetKeyPress

edtOpenPageKeyPress

edtfittoKeyPress

edttoKeyPress

\A-PDF\PDFExplorer\Default.wm

\A-PDF\PDFExplorer\FontList.txt

Default.wm

Login failure!

.2f.2f%s

@X=%.2f,Y=%.2f@%s@ENDTEXT@

VVV.a-pdf.com

lblURL

lbmsg,

lblRegKey0

edtRegKey4

lblURLClick

FormKeyDown

A-PDF.com

hXXp://VVV.a-pdf.com/explorer?product-pe

About.Bmp

Copyright by A-PDF.com

hXXp://VVV.a-pdf.com

hXXp://VVV.a-pdf.com/?product-pe

Now you get %d days extension.

getservbyport

WSAAsyncGetServByPort

WSAJoinLeaf

WS2_32.DLL

TIdSocketListWindows

TIdStackWindowsU

IdStackWindows

.thumbnail\

mniPasswordsecurity

chkFKeywords

actExportList

mniExportList

actPropertyExecute

actViewerExecute

actEmailExecute

actOpenFolderExecute

actExtractTextExecute

actExtractImageExecute

actCopyExecute

actPasteExecute

actMovetoExecute

actCopytoExecute

actDelFileExecute

actSecurityExecute

chkFKeywordsClick

actHelpExecute

actAboutExecute

actContractExecute

lvFolderTreeKeyUp

actFolderExecute

ieImgViewKeyUp

actStopExtractExecute

ieImgViewKeyDown

actSaveAllImagesExecute

actSaveImagesExecute

actSetEmailExecute

actBackExecute

actForwardExecute

actAddtofavoritesExecute

actThumbnailsExecute

actDetailsExecute

lvFilesKeyUp

imgViewThumbnailKeyDown

lvFavoritesKeyUp

actAddFiletofavoritesExecute

actFilterSwitchExecute

actRenameExecute"

actExportListExecute

cbbRenameAsKeyDown

cbbRenameAsKeyPress

INNER ERROR! PLEASE REPORT TO AUTHOR. ERROR CODE:

FolderPreview.dat

{%Dt1

INNER ERROR! PLEASE REPORT TO AUTHOR. ERROR CODE: 8003C220

{%st'

explorer.exe

text files(*.txt)|*.txt

.tiff

Tiff files(*.tif)|*.tif

Jpeg files(*.jpg)|*.jpg

GIF files(*.gif)|*.gif

BMP files(*.bmp)|*.bmp

PNG files(*.png)|*.png

TGA files(*.tga)|*.tga

PCX files(*.pcx)|*.pcx

ICO files(*.ico)|*.ico

JP2 files(*.jp2)|*.jp2

JK2 files(*.jk2)|*.jk2

DCX files(*.dcx)|*.dcx

pdfpedoc.pdf

hXXp://VVV.a-pdf.com/contact.htm

loading.jpg

lock.jpg

error.jpg

loadfailed.jpg

*.lnk

*.csv

CSV Files(*.csv)|*.csv

FileName,Size,Pages,Title,Subject,Author,Creator,Keywords,Producer,Create time,Modify time

hXXp://VVV.a-pdf.com/explorer/a-pdf-explorer.swf

MMPDF.dll

zip 1.01 Copyright 1998-2004 Gilles Vollant - hXXp://VVV.winimage.com/zLibDll

deflate 1.2.3 Copyright 1995-2005 Jean-loup Gailly

inflate 1.2.3 Copyright 1995-2005 Mark Adler

?456789:;<=

!"#$%&'()* ,-./0123

12005 The URL is invalid.

B12006 The URL scheme could not be recognized, or is not supported.

12014 Password incorrect.

)12016 The requested operation is invalid.

"12037 SSL certificate date is bad.

312038 SSL certificate host name field is incorrect.

h12045 The function is unfamiliar with the Certificate Authority that generated the server's certificate.

*12055 The SSL certificate contains errors.

12111 FTP session aborted.

212112 Passive mode is not available on the server.

*12160 The HTTP request was not redirected.

,12161 The HTTP cookie requires confirmation.

112162 The HTTP cookie was declined by the server.

612164 The Web site or server indicated is unreachable.

!12169 SSL certificate is invalid.

"12170 SSL certificate was revoked.

EAbout.pas

EBase64.pas

EBaseModule.pas

EBorlandDebug.pas

ECheck.pas

ECmdLine.pas

ECommon.pas

EConsts.pas

ECore.pas

ECrc32.pas

EDebug.pas

EDesign.pas

EDisAsm.pas

EEncrypt.pas

EHash.pas

EHook.pas

EIDEOptions.pas

ELang.pas

ELeaks.pas

EListView.pas

ELogManager.pas

EMain.pas

EMessages.pas

ENagScreen.pas

EOption.pas

EParser.pas

EResource.pas

ESockets.pas

EToolsAPI.pas

EToolServices.pas

ETypes.pas

EVariables.pas

EWait.pas

EWebTools.pas

ExceptionLog.pas

EXMLBuilder.pas

EZip.pas

EZlib.pas

deflate 1.1.4 Copyright 1995-2002 Jean-loup Gailly

inflate 1.1.4 Copyright 1995-2002 Mark Adler

1.0.6 or earlier

iTXt chunk not supported.

libpng version 1.2.14 - November 27, 2006

libpng version 1.2.14 - November 27, 2006 (header)

Only compression windows <= 32k supported by PNG

Only compression windows >= 256 supported by PNG

Only compression method 8 is supported by PNG

Empty keyword in iCCP chunk

Empty keyword in sPLT chunk

zero length keyword

Out of memory while procesing keyword

invalid character in keyword

trailing spaces removed from keyword

leading spaces removed from keyword

extra interior spaces removed from keyword

Zero length keyword

keyword length must be 1 - 79 characters

Empty keyword in tEXt chunk

Empty keyword in zTXt chunk

unsupported image type

ignoring invalid mode %s

ignoring invalid progression order %s

ignoring bad rate specifier %s

warning: invalid intermediate layer rates specifier ignored (%s)

warning: ignoring invalid option %s

invalid code block width %d

invalid code block height %d

Creator: JasPer Version %s

error: too few guard bits (need at least %d)

start=%d end=%d type=%d term=%d lyrno=%d firstchar=x size=%ld pos=%ld

pass0

lyrno = d

lyrno=d cmptno=d rlvlno=d bandno=d prcno=d cblkno=d passno=d

min rdslope = %f max rdslope = %f

maxlen=ld actuallen=ld thresh=%f

success %d goodthresh %f

tcmpt ] ] ] ]

rlvl ] ] ] ]

band ] ] ] ]

prc ] ] ] ] (] ])

cblk ] ] ] ]

RESOLUTION LEVEL %d

xs =%d, ys = %d, xe = %d, ye = %d, w = %d, h = %d

BAND %d

CODE BLOCK GROUP %d

CODE BLOCK %d

seg->numpasses >= seg->maxpasses || dopartial

coding pass failed passtype=%d segtype=%d

cblk->passes

pass->term == 1

pass->type == JPC_SEG_RAW

pass->type == JPC_SEG_MQ

pass->lyrno == lyrno

jpc_firstone(datalen) < cblk->numlenbits   jpc_floorlog2(passcount)

pass->lyrno < 0 || pass->lyrno > lyrno

jas_stream_tell(cblk->stream) == startpass->start

packet offset=ld prg=%d cmptno=d rlvlno=d prcno=d lyrno=d

bands[1].locend == end

box type %s

error: unsupported compression type

ICC Profile CS x

no of components is %d

CTX = %d,

IND %d, MPS %d, QEVAL %x

AREG = x, CREG = x, CTREG = %d

IND = d, MPS = %d, QEVAL = x

type=%c%s%c (0xx); length=%d

method=%d; pri=%d; approx=%d

csid=%d

channo=%d; type=%d; assoc=%d

numchans = %d

cmptno=%d; map=%d; pcol=%d

numents=%d; numchans=%d

LUT[%d][%d]=%d

prec=%d sgnd=%d

type = 0xx (%s);

len = %d;

tileno = %d; len = %d; partno = %d; numparts = %d

caps = 0xx;

width = %d; height = %d; xoff = %d; yoff = %d;

tilewidth = %d; tileheight = %d; tilexoff = %d; tileyoff = %d;

prec[%d] = %d; sgnd[%d] = %d; hsamp[%d] = %d; vsamp[%d] = %d

cod->numlyrs > 0 && cod->compparms.numdlvls <= 32

cod->compparms.numdlvls == cod->compparms.numrlvls - 1

csty = 0xx;

numdlvls = %d; qmfbid = %d; mctrans = %d

prg = %d; numlyrs = %d;

cblkwidthval = %d; cblkheightval = %d; cblksty = 0xx;

prcwidth[%d] = %d, prcheight[%d] = %d

coc->compparms.numdlvls <= 32

compno = %d; csty = 0xx; numdlvls = %d;

cblkwidthval = %d; cblkheightval = %d; cblksty = 0xx; qmfbid = %d;

compno = %d; roisty = %d; roishift = %d

qntsty = %d; numguard = %d; numstepsizes = %d

expn[%d] = 0xx; mant[%d] = 0xx;

compno = %d; qntsty = %d; numguard = %d; numstepsizes = %d

seqno = %d;

ind=%d; len = %d;

po[%d] = %d;

cs[%d] = %d; ce[%d] = %d;

rs[%d] = %d; re[%d] = %d;

le[%d] = %d

hoff[%d] = %d; voff[%d] = %d

regid = %d;

%d %d

x:

1.600.0

node %p, parent %p, value %d, lower %d, known %d

x:

W8.pXq

F*F6GüFkGw

.nvnG

.EA}o

FET%XeP

1iu2.iuB

b .mY1

PDFExplorer.exe

333333333333333333

33333833

3333339

3333333333333338

:*"*"$3338

33333333

33333333333

3333333333338

33338?383

333333333333

:*3:"$3338

333333333333333

<<9876$8

>=<9887$8

hg<1)ú

E(.Fcn

/4D%u

EB.iO

^{%DQ

yUDP

,K.Zb?

C%Dh 

D)*13.Ct

Ñ[V

v~.VAM

h!.Jn

P*%xB

A$.FoQ

=9_

'%XLh

C#%fu=

I).GM

9.Jo6

&.TXA

c.pd]

mSbJ5.XaR

za.lL

4]0$c%x

KWindows

UrlMon

%uPDFEPS

.iej2000

.tiffilt

.ietgafil

.histogrambox

EWebTools

Font.Charset

Font.Color

Font.Height

Font.Name

Font.Style

2.2.9

Glyph.Data

Items.Strings

2.2.5

2.3.1

2.2.8

3.0.0beta2

Filter (*.flt)|*.flt

PreviewFont.Charset

PreviewFont.Color

PreviewFont.Height

PreviewFont.Name

PreviewFont.Style

KeyPreview

lblURL

/The product has been registerted. Register key:

lbmsg

Note: The product is a try-before-buy product. The unregistered version has a limitation: adding a watermark into the output file(PDF file). If you ordered, you will get a register key (license code), after inputing the code below, the limiation will remove, that means the output file will not be added a watermark.

lblRegKey

Have a key:

edtRegKey

Lines.Strings

\A: Click the "Online Purchase" button above. Or visit our homepage(hXXp://VVV.a-pdf.com) to

]get more option. We will send you egister key when getting your order. If you can not access

Zthe Internet, please call the Toll Free 1-877-353-7297, and give the operator the product

Pen.Color

Picture.Data

IEC hXXp://VVV.iec.ch

.IEC 61966-2.1 Default RGB colour space - sRGB

CRT curv

#%XE>Y

!%XE02k

FormKeyPress

2c0&f%&f%X

edtWidthKeyPress

*E:\Users\Zouyu\Desktop\pdfbackup\000aa.bmp

--/--/--/--/--/

--/--/--/--/--/--/--/--/--/--/--/--/

edtleftKeyPress

edttopKeyUp

edtleftKeyUp

edtrightKeyUp

edtbottomKeyUp

M;1....XT

,S6:.RLQ*

2.3.2

Password security...

Constraints.MinHeight

Save script as (*.txt)

&Keywords

Password &security...

actRenameExecute

Export file list as CSV

*.bmp

JPEG Bitmap (JPG)|*.jpg|CompuServe Bitmap (GIF)|*.gif|TIFF Bitmap (TIF)|*.tif|PaintBrush (PCX)|*.pcx|Portable Network Graphics (PNG)|*.png|Windows Bitmap (BMP)|*.bmp|OS/2 Bitmap (BMP)|*.bmp

edtKeyword

btnMacroKeyword

A-PDF@Gmail.com

edtOpenPassword

%FirstFile_Title%

%FirstFile_Subject%

%FirstFile_Author%

%FirstFile_Keywords%

%FirstFile_FileName%

FirstFileKeywors1

%LastFile_Keywords%

Úte%

Brush.Color

lblOpenPassword

Document &Open Password

Need password

chkOpenPassword

(Re&quire a password to open the document

lblPermissionsPassword

&Permissions Password:

edtPermissionsPassword

chkPermissionsPassword

'&Use a password to restrict permissions

[[[[[,#

edtsizeKeyPress

edtRotationKeyPress

a-pdf.com

%Subject%

%Keywords%

%Filename%

edttitlexKeyPress

frmVerifyPassword

Password

Please enter your password below

Need Password to Open

\L%s:

4%Xsn

, F%c

'Cl.ak

version="1.0.0.0"

name="Microsoft.Windows.Common-Controls"

version="6.0.0.0"

publicKeyToken="6595b64144ccf1df"

ukernel32.dll

advapi32.dll

version.dll

gdi32.dll

wsock32.dll

comdlg32.dll

avifil32.dll

msvfw32.dll

GetKeyboardType

ShellExecuteA

ftpg

W.ZVh

Portions Copyright (c) 1983,99 Borland

\pagefile.sys

\win386.swp

\\.\Scsi

\\.\SMARTVSD

OuDpffRmwqsgkJmef{s

NT 3.%u

NT 4.%u

\SYSTEM\CurrentControlSet\Control\Windows\

P6 (Model %d)

%dx86

%d.%d.%d.%d

HELO User.With.Error

Eip: %x

Eax: %x

Ecx: %x

Edx: %x

Ebx: %x

Esi: %x

Edi: %x

Ebp: %x

Esp: %x

Code = [%d]

- [%s]

08:,50*65=(450

KERNEL32.DLL

NTDLL.DLL

ADVAPI32.DLL

RegOpenKeyExA

RegCloseKey

RegQueryInfoKeyA

RegEnumKeyExA

GetWindowsDirectoryA

GetCPInfo

2!2%2)2-21252

<(=,=0=4=8=<=@=

1/223&4.4

The procedure entry point %s could not be located in the dynamic link library %s

The ordinal %u could not be located in the dynamic link library %s

.text

.rdata

@.data

@.reloc

.inih

.dl_h

.dllj

KERNEL32.dll

shlwapi.dll

ntdll.dll

xsldr.dll

THYloaderX00APRXuniqueXevent1Xname_{E870D1B2-E77A-4FCD-8FB7-F6283B59625C}

THYloaderX00APRXuniqueXevent3Xname_{E870D1B2-E77A-4FCD-8FB7-F6283B59625C}

THYloaderX00APRXuniqueXevent4Xname_{E870D1B2-E77A-4FCD-8FB7-F6283B59625C}

THYloaderX00APRXuniqueXfilemapping1Xname_{E870D1B2-E77A-4FCD-8FB7-F6283B59625C}

THYloaderSplashScreenWndClass_{E870D1B2-E77A-4FCD-8FB7-F6283B59625C}

THYloaderX00APRXuniqueXdir1Xname_{E870D1B2-E77A-4FCD-8FB7-F6283B59625C}

can't execute thread in target process.

THYloaderX00APRXuniqueXmutex1Xname_{E870D1B2-E77A-4FCD-8FB7-F6283B59625C}

&&&&6666????

""""****

2222::::

$$$$\\\\

00006666

####====

`.rdata

.reloc

tlplugin.dll

hXXp://VVV.w3.org/2001/XMLSchema

.jpeg

.targa

.wbmp

TFRMVERIFYPASSWORD

To see what data this error report contains,

Send Error Report

Socket is not connected..Cannot send or receive after socket is closed.#Too many references, cannot splice.

Protocol not supported.

Socket type not supported."Operation not supported on socket.

Protocol family not supported.0Address family not supported by protocol family.

*Error on call Winsock2 library function %s&Error on loading Winsock2 library (%s)

%s is not a valid service.

Socket Error # %d

Operation would block.

Operation now in progress.

Operation already in progress.

Socket operation on non-socket.

JPEG error #%d

=This control requires version 4.70 or greater of COMCTL32.DLL

No help keyword specified.

OLE error %.8x.Method '%s' not supported by automation object/Variant does not reference an automation object7Dispatch methods do not support more than 64 parameters"Invalid buffer size for decryption

Stream write error)"%s" DOMImplementation already registered;Property or Method "%s" is not supported by DOM Vendor "%s"

Failed to clear tab control Failed to delete tab at index %d"Failed to retrieve tab at index %d Failed to get object at index %d"Failed to set tab "%s" at index %d Failed to set object at index %d<MultiLine must be True when TabPosition is tpLeft or tpRight

Failed to Save Stream %s is already associated with %sE%d is an invalid PageIndex value. PageIndex must be between 0 and %d

Value must be between %d and %d

Invalid clipboard format Clipboard does not support Icons

Text exceeds memo capacity.There is no default printer currently selected/Menu '%s' is already being used by another form

No help found for %s

%s property out of range

%s on %s@GroupIndex cannot be less than a previous menu item's GroupIndex5Cannot create form. No MDI forms are currently active*A control cannot have itself as its parent

!Cannot change the size of an icon$Unknown picture file extension (.%s)

Unsupported clipboard format

Error creating window class Cannot focus a disabled or invisible window!Control '%s' has no parent window$Parent given is not a parent of '%s'

Failed to set data for '%s'

Resource %s not found

%s.Seek not implemented$Operation not allowed on sorted list$%s not in a class registration group

Property %s does not exist

Thread creation error: %s

Thread Error: %s (%d)0Tab position incompatible with current tab style0Tab style incompatible with current tab position

Unable to write to %s

Invalid stream format$''%s'' is not a valid component name

Invalid data type for '%s' List capacity out of bounds (%d)

List count out of bounds (%d)

List index out of bounds (%d) Out of memory while expanding memory stream

Error reading %s%s%s: %s

Failed to get data for '%s'

Ancestor for '%s' not found

Cannot assign a %s to a %s

Bits index out of range*Can't write to a read-only resource streamECheckSynchronize called from thread $%x, which is NOT the main thread

Class %s not found

A class named %s already exists%List does not allow duplicates ($0%x)#A component named %s already exists%String list does not allow duplicates

Operation not supported

External exception %x

Interface not supported

%s (%s, line %d)

Abstract Error?Access violation at address %p in module '%s'. %s of address %p

System Error. Code: %d.

Application Error1Format '%s' invalid or incompatible with argument

No argument for format '%s'"Variant method calls not supported

Invalid variant operation

Invalid NULL variant operation%Invalid variant operation (%s%.8x)

%s5Could not convert variant of type (%s) into type (%s)=Overflow while converting variant of type (%s) into type (%s)

Integer overflow Invalid floating point operation

Invalid pointer operation

Invalid class typecast0Access violation at address %p. %s of address %p

Operation aborted(Exception %s in module %s at %p.

!'%s' is not a valid integer value('%s' is not a valid floating point value

'%s' is not a valid date

'%s' is not a valid time!'%s' is not a valid date and time

I/O error %d

3.5.0.0

1.0.0.0

Submit Report

%original file name%.exe_3404_rwx_003E0000_00011000:

.text

.rdata

@.data

.rsrc

@.reloc

.inih

.dl_h

.dllj

wEL32.dll

kernel32.dll

user32.dll

shlwapi.dll

ntdll.dll

xsldr.dll

THYloaderX00APRXuniqueXevent1Xname_{E870D1B2-E77A-4FCD-8FB7-F6283B59625C}

THYloaderX00APRXuniqueXevent3Xname_{E870D1B2-E77A-4FCD-8FB7-F6283B59625C}

THYloaderX00APRXuniqueXevent4Xname_{E870D1B2-E77A-4FCD-8FB7-F6283B59625C}

THYloaderX00APRXuniqueXfilemapping1Xname_{E870D1B2-E77A-4FCD-8FB7-F6283B59625C}

PdfPE.exe

THYloaderSplashScreenWndClass_{E870D1B2-E77A-4FCD-8FB7-F6283B59625C}

THYloaderX00APRXuniqueXdir1Xname_{E870D1B2-E77A-4FCD-8FB7-F6283B59625C}

can't execute thread in target process.

THYloaderX00APRXuniqueXmutex1Xname_{E870D1B2-E77A-4FCD-8FB7-F6283B59625C}

&&&&6666????

""""****

2222::::

$$$$\\\\

00006666

####====

`.rdata

.reloc

tlplugin.dll

%original file name%.exe_3404_rwx_00401000_003C2000:

kernel32.dll

Windows

MSWHEEL_ROLLMSG

MSH_WHEELSUPPORT_MSG

MSH_SCROLL_LINES_MSG

MM Operation after uninstall.

Note: To obtain a log file containing detail on memory leaks, enable the "FullDebugMode" and "LogMemoryLeakDetailToFile" conditional defines. To disable this memory leak check, undefine "EnableMemoryLeakReporting".

If you want to use FastMM4, please make sure that FastMM4.pas is the very first unit in the "uses"

section of your project's .dpr file.

FastMM4.pas MUST be the first unit in your project's .dpr file, otherwise memory may be allocated

go into its configuration page and ensure that the FastMM4.pas unit is initialized before any other unit.

$*@@@*$@@@$ *@@* $@@($*)@-$*@@$-*@@$*-@@(*$)@-*$@@*-$@@*$-@@-* $@-$ *@* $-@$ *-@$ -*@*- $@($ *)(* $)

Try to replaced the Memory Manager used with the last FastMM4 Memory Manager (hXXp://fastmm.sourceforge.net).

DELPHI32.EXE

ELeaks.pas unit Error

_com.eurekalog.eleaks.dataclass

Uh.pA

oleaut32.dll

EVariantBadIndexError

ssShift

htKeyword

EInvalidOperation

u%CNu

%s[%d]

%s_%d

.Owner

EMsgsRec

Support message

Login message

Operating System Header

Invalid login

An error has occurred during program execution.

Go to the Support Page

We have created an error report that you can send to us. We will treat this report as confidential and anonymous.

To see what data the error report contains,

&Send Error Report

Operating System

Login...

Contact the program support to obtain an update.

Invalid login request.

Operating System|Type

Operating System|Build #

Operating System|Update

Operating System|Language

Operating System|Charset

_BugReport | Full EurekaLog bug report

_ExceptMsg | Last exception message

SystemDrive | The drive containing the Windows root directory

SystemRoot | The Windows root directory

WinDir | Windows directory

.vshost

shfolder.dll

1111111

eurekalog@email.com

%s (Address: %s)

Critical error at: "%s"

Error: "%s".

ECore.Done

ECore.Init

TELVftPathSymbolInfo

.jdbg

%Program Files%\EurekaLog 6\Delphi7\EDebug.pas

Cannot hook a null procedure ("%s").

Cannot hook the module "%s" located into the shared-area.

Cannot hook the procedure "%s".

EHook.Done

EHook.Init

TEurekaClientSMTP

Cannot close the socket: "%s"

Invalid socket: "%s".

Connection error: "%s"

Connected to %d.%d.%d.%d port %d

Error into "send": "%s"

Error into "recv": "%s"

0.0.0.0

IPHLPAPI.DLL

193.121.171.135

Cannot resolve the "%s" MX record.

ESockets.Done

ESockets.Init

MSVCRT.DLL

MSVCRT20.DLL

1.2.3

THTTPResponse`<D

THTTPConnectionBase

THTTPSendReporth=D

THTTPMantisSendReport

THTTPBugzillaSendReport8>D

THTTPFogBugzSendReport

wininet.dll

HttpOpenRequestA

HttpAddRequestHeadersA

HttpSendRequestA

HttpSendRequestExA

HttpEndRequestA

HttpQueryInfoA

FtpOpenFileA

InternetOpenUrlA

Uh.UD

https

Cannot create an HTTP connection with the host: %s

Cannot close the HTTP connection with the host: %s

Content-Type: application/x-www-form-urlencoded

[v%s - 1]: %s (%s)

%s (%s)

login.php

login_select_proj_page.php

password

set_project.php

my_view_page.php

view_all_set.php?f=3

view_all_bug_page.php

bug_update_page.php?bug_id=

bug_update_advanced_page.php?bug_id=

bug_report_advanced_page.php

bug_report.php

report_stay

bug_report_token

href="view.php?id=

bug_update_page.php

bug_update.php

reporter_id

view.php

enter_bug.cgi

Bugzilla_login

Bugzilla_password

relogin.cgi

buglist.cgi

href="query.cgi?

show_bug.cgi?id=

action="post_bug.cgi"

post_bug.cgi

keywords

attachment.cgi

show_bug.cgi

<label for="component" accesskey="

process_bug.cgi

default.asp

sPassword

fRememberPassword

default.asp?pg=pgeditbug

default.asp?pgx=EV&ixBug=

default.asp?pre=preSubmitBug&sActionToken=

default.asp?pre=preSubmitBug

default.asp?pg=pgEditReleaseNotes

C:\Works\Sync Folder\Sources\EurekaLog 6\EWebTools.pas

Cannot assign a THTTPResponse class to a NIL value.

%c les #Gv , #Mp

%c punpcklbw #Pq , #Qd

%c punpcklwd #Pq , #Qd

%c punpckldq #Pq , #Qd

%c packusdw #Pq , #Qd

%c pcmpgtb #Pq , #Qd

%c pcmpgtw #Pq , #Qd

%c pcmpgtd #Pq , #Qd

%c packsswb #Pq , #Qd

%c punpckhbw #Pq , #Qd

%c punpckhwd #Pq , #Qd

%c punpckhdq #Pq , #Qd

%c packssdw #Pq , #Qd

eeEmailSMTPError

eeWebHTTPError

eeWebHTTPSError

eeWebFTPError

eeWebTrakerError

THTTPConnection

TActiveXException

%d %s,

%d %s

{\rtf1\ansi\ansicpg1252\deff0\deflang1040{\fonttbl{\f0\fmodern\fprq1\fcharset%d %s;}}

Microsoft Windows

\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION

\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION

%s, %d %s %d %0.2d:%0.2d:%0.2d %s

- %s - %s - %s - %s[%s]

%s $%8.8x - [%8.8x] %s %s

$%8.8x - [%8.8x] %s - %s - %s - %s - %s[%s]

[ERROR] - Section: %s - Address: %s - Message: "%s"

6.0.21

Version : %s

Date : %s

OS : %s

RAD : %s

Dump : %s

Section : %s

LastExcept: %s

Address : %s

Exception : %s

Message : %s

Call Stack: %s

Error: '%s'

EurekaLog 6.0.21 critical bug.

support@eurekalog.com

Send manually the "%s" file to the support@eurekalog.com email address, after click on OK button to close this box.

[WARNING] - Code: %s - Address: %s - Message: "%s"

[%s] %s

General '%s' error.

PSAPI.DLL

PSAPI.dll

Kernel32.dll

HttpExtensionProc

Content-Length: %d

<title>%s</title>

<!-- EurekaLog ID: %s -->

<br><input type=button value="Ok" OnClick="history.go(-1)" style="width:75;height:25;z-index:100;font-style:normal;font-size:10pt;text-decoration:none;">

EurekaLog_IWShowMessage.html

IntraWeb: Cannot show the error page.

IntraWeb: Cannot create the "%s" template.

IntraWeb

IntraWeb: IntraWebApplication e/o IntraWebServerController are set to nil.

Screenshot.png

BugReport.zip

LastHTMLPage.html

EurekaLog_CustomWebFieldsRequestEvent

EurekaLog_PasswordRequestEventEx

EurekaLog_PasswordRequestEvent

%s=%d; %s=%s

; %s=%s

%s: %s=%s; %s=%d; %s=%d

user32.dll

EurekaLog.ini

WindowsState

\\.\mailslot\

RICHED20.DLL

mapi32.dll

SMTP:

%s %d/%d:

AUTH LOGIN

@localhost.com>

SMTP

\*.zip

- Cannot find the "%s" library.

%s error code: %d%s

HTTPS

Error Code: %d

Error Message: "%s"

%d x %d, %d bit

000.000.000.000

iphlpapi.dll

HardwareInformation.MemorySize

HardwareInformation.AdapterString

windows

winspool.drv

EurekaLog 6.0.21

%s: %s %s:

EAX: %s EDI: %s

EBX: %s ESI: %s

ECX: %s ESP: %s

EDX: %s EIP: %s

%s%s:

|%s|%s|%s|%s|%s|%s|

|%s|%s|%s|%s|%s|%s|%s|

|%s|%s|%s|%s|%s|%s|%s|%s|

_ExceptMsg

_BugReport

Cannot use 'CurrentEurekaLogOptions' function in module "%s" without activate EurekaLog.

C:\Works\Sync Folder\Sources\EurekaLog 6\ExceptionLog.pas

5.0.0

7.2.32

%s: %s=%d - %s=%d

Intraweb_

VCL70.BPL

VISUALCLX70.BPL

INDY70.BPL

INDYCORE70.BPL

ExceptionLog.Done

ExceptionLog.Init

EInvalidGraphicOperation

comctl32.dll

USER32.DLL

uxtheme.dll

%s%s%s%s%s%s%s%s%s%s

Proportional

MAPI32.DLL

SOFTWARE\Microsoft\Windows Messaging Subsystem

OnKeyDown

OnKeyPress

OnKeyUp

ArrowKeys

vsReport

acoUpDownKeyDropsList

RICHED32.DLL

TComboBoxExEnumerator

ole32.dll

PasswordCharX

ssHorizontal

IE(AL("%s",4),"AL(\"%0:s\",3)","JK(\"%1:s\",\"%0:s\")")

JumpID("","%s")

TKeyEvent

TKeyPressEvent

HelpKeyword

crSQLWait

imm32.dll

OnExecute

AutoHotkeysx

AutoHotkeys

ssHotTrack

TWindowState

poProportional

TWMKey

KeyPreviewl

WindowState

System\CurrentControlSet\Control\Keyboard Layouts\%.8x

vcltest3.dll

User32.dll

1.1.4

0123456789.-

0000000000

(<>[]{/%

bracerighttp

bracketrighttp

parenrighttp

proportional

.notdef

2331112

00000000

Ht.Ht:

%unknown iType:

3333333

%SetMapMode(

%SetViewportExt(

%SetViewportOrg(

%SetWindowExt(

%SetWindowOrg(

UhM%S

[ 1 0 1 0 1 0 1 0 ]

[ /Indexed

[ 1 0 1 0 1 0 ]

gdiplus.dll

GdiplusShutdown

GdipSetPenLineJoin

GdipSetImageAttributesColorKeys

Indexed

/Indexed

[ Indexed

[ 0 1 0 1 0 1 0 1 ]

/Indexed

|000.notdef|001space|002exclam|003quotedbl|004numbersign|005dollar|006percent|007ampersand|008quoteright|009parenleft|010parenright|011asterisk|012plus|013comma|014hyphen|015period|016slash|017zero|018one|019two|020three|021four|022five|023six|024seven|025eight|026nine|027colon|028semicolon|029less|030equal|031greater|032question|033at|034A|035B|036C|037D|038E|039F|040G|041H|042I|043J|044K|045L|046M|047N|048O|049P|050Q|051R|052S|053T|054U|055V|056W|057X|058Y|059Z|060bracketleft|061backslash|062bracketright|063asciicircum|064underscore|065quoteleft|066a|067b|068c|069d|070e|071f|072g|073h|074i|075j|076k|077l|078m|079n|080o|081p|082q|083r|084s|085t|086u|087v|088w|089x|090y|091z|092braceleft|093bar|094braceright|095asciitilde|096exclamdown|097cent|098sterling|099fraction|100yen|101florin|102section|103currency|104quotesingle|105quotedblleft|106guillemotleft|107guilsinglleft|108guilsinglright|109fi|110fl|111endash|112dagger|113daggerdbl|114periodcentered|115paragraph|116bullet|117quotesinglbase|118quotedblbase|119quotedblright|120guillemotright|121ellipsis|122perthousand|123questiondown|124grave|125acute|126circumflex|127tilde|128macron|129breve|130dotaccent|131dieresis|132ring|133cedilla|134hungarumlaut|135ogonek|136caron|137emdash|138AE|139ordfeminine|140Lslash|141Oslash|142OE|143ordmasculine|144ae|145dotlessi|146lslash|147oslash|148oe|149germandbls|150onesuperior|151logicalnot|152mu|153trademark|154Eth|155onehalf|156plusminus|157Thorn|158onequarter|159divide|160brokenbar|161degree|162thorn|163threequarters|164twosuperior|165registered|166minus|167eth|168multiply|169threesuperior|170copyright|171Aacute|172Acircumflex|173Adieresis|174Agrave|175Aring|176Atilde|177Ccedilla|178Eacute|179Ecircumflex|180Edieresis|181Egrave|182Iacute|183Icircumflex|184Idieresis|185Igrave|186Ntilde|187Oacute|188Ocircumflex|189Odieresis|190Ograve|191Otilde|192Scaron|193Uacute|194Ucircumflex|195Udieresis|196Ugrave|197Yacute|198Ydieresis|199Zcaron|200aacute|201acircumflex|202adieresis|203agrave|204aring|205atilde|206ccedilla|207eacute|208ecircumflex|209edieresis|210egrave|211iacute|212icircumflex|213idieresis|214igrave|215ntilde|216oacute|217ocircumflex|218odieresis|219ograve|220otilde|221scaron|222uacute|223ucircumflex|224udieresis|225ugrave|226yacute|227ydieresis|228zcaron|229exclamsmall|230Hungarumlautsmall|231dollaroldstyle|232dollarsuperior|233ampersandsmall|234Acutesmall|235parenleftsuperior|236parenrightsuperior|237twodotenleader|238onedotenleader|239zerooldstyle|240oneoldstyle|241twooldstyle|242threeoldstyle|243fouroldstyle|244fiveoldstyle|245sixoldstyle|246sevenoldstyle|247eightoldstyle|248nineoldstyle|249commasuperior|250threequartersemdash|251periodsuperior|252questionsmall|253asuperior|254bsuperior|255centsuperior|256dsuperior|257esuperior|258isuperior|259lsuperior|260msuperior|261nsuperior|262osuperior|263rsuperior|264ssuperior|265tsuperior|266ff|267ffi|268ffl|269parenleftinferior|270parenrightinferior|271Circumflexsmall|272hyphensuperior|273Gravesmall|274Asmall|275Bsmall|276Csmall|277Dsmall|278Esmall|279Fsmall|280Gsmall|281Hsmall|282Ismall|283Jsmall|284Ksmall|285Lsmall|286Msmall|287Nsmall|288Osmall|289Psmall|290Qsmall|291Rsmall|292Ssmall|293Tsmall|294Usmall|295Vsmall|296Wsmall|297Xsmall|298Ysmall|299Zsmall|300colonmonetary|301onefitted|302rupiah|303Tildesmall|304exclamdownsmall|305centoldstyle|306Lslashsmall|307Scaronsmall|308Zcaronsmall|309Dieresissmall|310Brevesmall|311Caronsmall|312Dotaccentsmall|313Macronsmall|314figuredash|315hypheninferior|316Ogoneksmall|317Ringsmall|318Cedillasmall|319questiondownsmall|320oneeighth|321threeeighths|322fiveeighths|323seveneighths|324onethird|325twothirds|326zerosuperior|327foursuperior|328fivesuperior|329sixsuperior|330sevensuperior|331eightsuperior|332ninesuperior|333zeroinferior|334oneinferior|335twoinferior|336threeinferior|337fourinferior|338fiveinferior|339sixinferior|340seveninferior|341eightinferior|342nineinferior|343centinferior|344dollarinferior|345periodinferior|346commainferior|347Agravesmall|348Aacutesmall|349Acircumflexsmall|350Atildesmall|351Adieresissmall|352Aringsmall|353AEsmall|354Ccedillasmall|355Egravesmall|356Eacutesmall|357Ecircumflexsmall|358Edieresissmall|359Igravesmall|360Iacutesmall|361Icircumflexsmall|362Idieresissmall|363Ethsmall|364Ntildesmall|365Ogravesmall|366Oacutesmall|367Ocircumflexsmall|368Otildesmall|369Odieresissmall|370OEsmall|371Oslashsmall|372Ugravesmall|373Uacutesmall|374Ucircumflexsmall|375Udieresissmall|376Yacutesmall|377Thornsmall|378Ydieresissmall|379001|380001.001|381001.002|382001.003|383Black|384Bold|385Book|386Light|387Medium|388Regular|389Roman|390Semibold|

.null

[ 128 /Ccedilla /udieresis /eacute /acircumflex /adieresis /agrave /aring /ccedilla /ecircumflex /edieresis /egrave /idieresis /icircumflex /igrave /Adieresis /Aring /Eacute /ae /AE /ocircumflex /odieresis /ograve /ucircumflex /ugrave /ydieresis /Odieresis /Udieresis /cent /sterling /yen /peseta /florin /aacute /iacute /oacute /uacute /ntilde /Ntilde /ordfeminine /ordmasculine /questiondown /logicalnotreversed /logicalnot /onehalf /onequarter /exclamdown /guillemotleft /guillemotright /ltshade /shade /dkshade /SF110000 /SF090000 /SF190000 /SF200000 /SF210000 /SF220000 /SF230000 /SF240000 /SF250000 /SF260000 /SF270000 /SF280000 /SF030000 /SF020000 /SF070000 /SF060000 /SF080000 /SF100000 /SF050000 /SF360000 /SF370000 /SF380000 /SF390000 /SF400000 /SF410000 /SF420000 /SF430000 /SF440000 /SF450000 /SF460000 /SF470000 /SF480000 /SF490000 /SF500000 /SF510000 /SF520000 /SF530000 /SF540000 /SF040000 /SF010000 /block /dnblock /lfblock /rtblock /upblock /alpha /germandbls /Gamma /pi /Sigma /sigma /mu /tau /Phi /Theta /Omegagreek /delta /infinity /phi /epsilon /intersection /equivalence /plusminus /greaterequal /lessequal /integraltop /integralbottom /divide /approxequal /degree /bulletoperator /middot /radical /nsuperior /twosuperior /blacksquare /nbspace ]

TMonochromeLookup

TPDFEPSExportSV

%%DocumentCustomColors:

%%CMYKCustomColor:

%%Creator: (iSEDQuickPDF)

%%DocumentProcessColors: (Cyan) (Magenta) (Yellow) (Black)

/j { setlinejoin } def

D:\Software\PDFLib\uPDFRenderer.pas

MSXML2.DOMDocument.4.0

xmlns:xdp="hXXp://ns.adobe.com/xdp/" xmlns:xfa="hXXp://VVV.xfa.org/schema/xfa-data/1.0/"

xmlns:xfa="hXXp://VVV.xfa.org/schema/xfa-data/1.0/"

xmlns:xdp="hXXp://ns.adobe.com/xdp/" xmlns:xfa="hXXp://VVV.xfa.org/schema/xfa-template/2.1/"

xmlns:xfa="hXXp://VVV.xfa.org/schema/xfa-template/2.1/"

passwordEdit

QQAPCert:

Cert

QQAPExtraCert:

ExtraCert

13-14-21-23-24-25-28-

16-17-26-

18-19-20-22-23-27-

Adobe.PPKLite

adbe.x509.rsa_sha1

0123456789.

%x%x%x%x%x%x%x%x

Process can not be created. Code:%d

"%s" "%s" -o "%s"

jbig2dec.exe

0123456789.

0123456789

URLS

0123456789,-

[ 0 0 612 792 ]

/Author/Title/Subject/Keywords/Creator/Producer/CreationDate/ModDate

D:\Software\PDFLib\uPDFDocument.pas

%d %d R

%d_%d

Unsupport key length

gsdll32.dll

UnlockKey

SetPassword

SetCatalogInformation

GetCatalogInformation

GetCustomKeys

SetOutlineWebLink

GetOutlineWebLink

SetLineJoin

AddLinkToWeb

GetFormFieldWebLink

FormFieldWebLinkAction

A-PDF (VVV.a-pdf.com)

/Author/Title/Subject/Keywords/Creator/Producer/

Keywords

dPDFPassword=

QQAPMergeTemp2.dat

QQAPMergeTemp1.dat

test.dat

QQAPTempFont.fot

supports

importNode

English.lng

%d.%d.%d

/A "page=%d" "%s"

"%s" -n %d

Úte%

if (CheckExpiration(%d,%d,%d,%d,%d) ) {

app.alert("%s",1,0,"Expired");

this.closeDoc(1);

var myDate = new Date( Number(LastYear), Number(LastMonth), Number(LastDate), Number(LastHour), Number(LastMin), Number(LastSec), Number(LastMS) ).valueOf();

var today = new Date().valueOf();

RegistryKey

filter_keywordsT

filter_producerT

exportToCsvPath

demo@test.com

shell32.dll

netapi32.dll

ptstoDefaultKeyHandling

OnKeyUpX

TPTShellControlDefKeyRec

Software\Microsoft\Windows\CurrentVersion\Explorer

[TFileInfo] keywords:

D:\Software\Delphi\MyLib\DebugTools.pas

[uListFileThread] Execute

IDCT output block size ? not supported

Unsupported JPEG data precision ?

Buffer passed to JPEG library is too small

Unsupported color conversion request

Empty JPEG image (DNL not supported)

Maximum supported image dimension is ? pixels

Backing store not supported

Unsupported JPEG process: SOF type ?

Unsupported marker type ?

Smoothing not supported with nonstandard sampling ratios

t H,%s

Invalid ZStream operation!

OnTextKeyDown

%%Creator: ImageEn by HiComponents

%%CreationDate:

%%DocumentData: Clean7Bit

TIEImageIDRequestExEvent

TIEMKeyInteractItems

TIEMKeyInteract

OnIOProgressh

KeyInteract

3.0.0

MsgLanguage

;*.avi

(*.avi)|*.avi

;*.mpg

;*.wmv

|Mpeg (*.mpeg;*.mpg)|*.mpeg;*.mpg

|Windows Media Video (*.wmv)|*.wmv

(*.*)|*.*

.mpeg

16777216

JPEG Bitmap (JPG)|*.jpg

|CompuServe Bitmap (GIF)|*.gif

|TIFF Bitmap (TIF)|*.tif

|PaintBrush (PCX)|*.pcx

|Portable Network Graphics (PNG)|*.png

|Windows Bitmap (BMP)|*.bmp

|OS/2 Bitmap (BMP)|*.bmp

|Targa Bitmap (TGA)|*.tga

|Portable PixMap (PXM)|*.pxm

|Portable PixMap (PPM)|*.ppm

|Portable GreyMap (PGM)|*.pgm

|Portable Bitmap (PBM)|*.pbm

|JPEG2000 (JP2)|*.jp2

|Multipage PCX (DCX)|*.dcx

MONOCHROME1

1.2.840.10008.1.2.4.50

1.2.840.10008.1.2.4.70

1.2.840.10008.1.2.4.57

1.2.840.10008.1.2.5

1.2.840.10008.1.2.2

MsgLanguage$

TIESpecialKeyEvent

OnSpecialKey

MSIMG32.DLL

ImageEn Version 3.0.0 -

1.2.14

f%UUf

Uh%fk

Windows Bitmap

Windows Icon

Windows Cursor

Portable Network Graphics

Windows Metafile

Enhanced Windows Metafile

Portable Pixmap, GrayMap, BitMap

Mozilla/4.*

HTTP/1.1

MsgLanguagep

_CopyBitmaptoDIBEx: not supported pixel format, converting to 24bit and recurse

High Pass 1

High Pass 2

High Pass 3

Low Pass 1

Low Pass 2

mscms.dll

sRGB Color Space Profile.icm

hXXp://ns.adobe.com/xap/1.0/

Cannot create file "%s". %s

Cannot open file "%s". %s

hXXp://

hXXps://

PTF://

Video for Windows

Pos.Orizz. (inch)

Pos.Vert. (inch)

An Seite anpassen

r Windows

Windows

Passend in pagina

Toepassen

Proportion

Video pro Windows

TMsgLanguage

msGerman

msPortuguese

msGreek

SOFTWARE\Digital River\SoftwarePassport\

BuyURL

lblOpenPassword(

chkOpenPassword,

edtOpenPassword0

lblPermissionsPassword8

chkPermissionsPasswordD

edtPermissionsPasswordH

Imageopenpass

Imagepermissionpass

lvFilesKeyDown

TfrmVerifyPassword

uVerifyPassword

ADDED %s

DELETED %s

MODIFIED %s

RENAMED %s [...]

[...] into %s

Unexpected error: %s

lblKeyword

edtKeyword

btnMacroKeyword8

FirstFileKeywors1p

eOffsetKeyPress

edtOpenPageKeyPress

edtfittoKeyPress

edttoKeyPress

\A-PDF\PDFExplorer\Default.wm

\A-PDF\PDFExplorer\FontList.txt

Default.wm

Login failure!

.2f.2f%s

@X=%.2f,Y=%.2f@%s@ENDTEXT@

VVV.a-pdf.com

lblURL

lbmsg,

lblRegKey0

edtRegKey4

lblURLClick

FormKeyDown

A-PDF.com

hXXp://VVV.a-pdf.com/explorer?product-pe

About.Bmp

Copyright by A-PDF.com

hXXp://VVV.a-pdf.com

hXXp://VVV.a-pdf.com/?product-pe

Now you get %d days extension.

getservbyport

WSAAsyncGetServByPort

WSAJoinLeaf

WS2_32.DLL

TIdSocketListWindows

TIdStackWindowsU

IdStackWindows

.thumbnail\

mniPasswordsecurity

chkFKeywords

actExportList

mniExportList

actPropertyExecute

actViewerExecute

actEmailExecute

actOpenFolderExecute

actExtractTextExecute

actExtractImageExecute

actCopyExecute

actPasteExecute

actMovetoExecute

actCopytoExecute

actDelFileExecute

actSecurityExecute

chkFKeywordsClick

actHelpExecute

actAboutExecute

actContractExecute

lvFolderTreeKeyUp

actFolderExecute

ieImgViewKeyUp

actStopExtractExecute

ieImgViewKeyDown

actSaveAllImagesExecute

actSaveImagesExecute

actSetEmailExecute

actBackExecute

actForwardExecute

actAddtofavoritesExecute

actThumbnailsExecute

actDetailsExecute

lvFilesKeyUp

imgViewThumbnailKeyDown

lvFavoritesKeyUp

actAddFiletofavoritesExecute

actFilterSwitchExecute

actRenameExecute"

actExportListExecute

cbbRenameAsKeyDown

cbbRenameAsKeyPress

INNER ERROR! PLEASE REPORT TO AUTHOR. ERROR CODE:

FolderPreview.dat

{%Dt1

INNER ERROR! PLEASE REPORT TO AUTHOR. ERROR CODE: 8003C220

{%st'

explorer.exe

text files(*.txt)|*.txt

.tiff

Tiff files(*.tif)|*.tif

Jpeg files(*.jpg)|*.jpg

GIF files(*.gif)|*.gif

BMP files(*.bmp)|*.bmp

PNG files(*.png)|*.png

TGA files(*.tga)|*.tga

PCX files(*.pcx)|*.pcx

ICO files(*.ico)|*.ico

JP2 files(*.jp2)|*.jp2

JK2 files(*.jk2)|*.jk2

DCX files(*.dcx)|*.dcx

pdfpedoc.pdf

hXXp://VVV.a-pdf.com/contact.htm

loading.jpg

lock.jpg

error.jpg

loadfailed.jpg

*.lnk

*.csv

CSV Files(*.csv)|*.csv

FileName,Size,Pages,Title,Subject,Author,Creator,Keywords,Producer,Create time,Modify time

hXXp://VVV.a-pdf.com/explorer/a-pdf-explorer.swf

MMPDF.dll

zip 1.01 Copyright 1998-2004 Gilles Vollant - hXXp://VVV.winimage.com/zLibDll

deflate 1.2.3 Copyright 1995-2005 Jean-loup Gailly

inflate 1.2.3 Copyright 1995-2005 Mark Adler

?456789:;<=

!"#$%&'()* ,-./0123

12005 The URL is invalid.

B12006 The URL scheme could not be recognized, or is not supported.

12014 Password incorrect.

)12016 The requested operation is invalid.

"12037 SSL certificate date is bad.

312038 SSL certificate host name field is incorrect.

h12045 The function is unfamiliar with the Certificate Authority that generated the server's certificate.

*12055 The SSL certificate contains errors.

12111 FTP session aborted.

212112 Passive mode is not available on the server.

*12160 The HTTP request was not redirected.

,12161 The HTTP cookie requires confirmation.

112162 The HTTP cookie was declined by the server.

612164 The Web site or server indicated is unreachable.

!12169 SSL certificate is invalid.

"12170 SSL certificate was revoked.

EAbout.pas

EBase64.pas

EBaseModule.pas

EBorlandDebug.pas

ECheck.pas

ECmdLine.pas

ECommon.pas

EConsts.pas

ECore.pas

ECrc32.pas

EDebug.pas

EDesign.pas

EDisAsm.pas

EEncrypt.pas

EHash.pas

EHook.pas

EIDEOptions.pas

ELang.pas

ELeaks.pas

EListView.pas

ELogManager.pas

EMain.pas

EMessages.pas

ENagScreen.pas

EOption.pas

EParser.pas

EResource.pas

ESockets.pas

EToolsAPI.pas

EToolServices.pas

ETypes.pas

EVariables.pas

EWait.pas

EWebTools.pas

ExceptionLog.pas

EXMLBuilder.pas

EZip.pas

EZlib.pas

deflate 1.1.4 Copyright 1995-2002 Jean-loup Gailly

inflate 1.1.4 Copyright 1995-2002 Mark Adler

1.0.6 or earlier

iTXt chunk not supported.

libpng version 1.2.14 - November 27, 2006

libpng version 1.2.14 - November 27, 2006 (header)

Only compression windows <= 32k supported by PNG

Only compression windows >= 256 supported by PNG

Only compression method 8 is supported by PNG

Empty keyword in iCCP chunk

Empty keyword in sPLT chunk

zero length keyword

Out of memory while procesing keyword

invalid character in keyword

trailing spaces removed from keyword

leading spaces removed from keyword

extra interior spaces removed from keyword

Zero length keyword

keyword length must be 1 - 79 characters

Empty keyword in tEXt chunk

Empty keyword in zTXt chunk

unsupported image type

ignoring invalid mode %s

ignoring invalid progression order %s

ignoring bad rate specifier %s

warning: invalid intermediate layer rates specifier ignored (%s)

warning: ignoring invalid option %s

invalid code block width %d

invalid code block height %d

Creator: JasPer Version %s

error: too few guard bits (need at least %d)

start=%d end=%d type=%d term=%d lyrno=%d firstchar=x size=%ld pos=%ld

pass0

lyrno = d

lyrno=d cmptno=d rlvlno=d bandno=d prcno=d cblkno=d passno=d

min rdslope = %f max rdslope = %f

maxlen=ld actuallen=ld thresh=%f

success %d goodthresh %f

tcmpt ] ] ] ]

rlvl ] ] ] ]

band ] ] ] ]

prc ] ] ] ] (] ])

cblk ] ] ] ]

RESOLUTION LEVEL %d

xs =%d, ys = %d, xe = %d, ye = %d, w = %d, h = %d

BAND %d

CODE BLOCK GROUP %d

CODE BLOCK %d

seg->numpasses >= seg->maxpasses || dopartial

coding pass failed passtype=%d segtype=%d

cblk->passes

pass->term == 1

pass->type == JPC_SEG_RAW

pass->type == JPC_SEG_MQ

pass->lyrno == lyrno

jpc_firstone(datalen) < cblk->numlenbits   jpc_floorlog2(passcount)

pass->lyrno < 0 || pass->lyrno > lyrno

jas_stream_tell(cblk->stream) == startpass->start

packet offset=ld prg=%d cmptno=d rlvlno=d prcno=d lyrno=d

bands[1].locend == end

box type %s

error: unsupported compression type

ICC Profile CS x

no of components is %d

CTX = %d,

IND %d, MPS %d, QEVAL %x

AREG = x, CREG = x, CTREG = %d

IND = d, MPS = %d, QEVAL = x

type=%c%s%c (0xx); length=%d

method=%d; pri=%d; approx=%d

csid=%d

channo=%d; type=%d; assoc=%d

numchans = %d

cmptno=%d; map=%d; pcol=%d

numents=%d; numchans=%d

LUT[%d][%d]=%d

prec=%d sgnd=%d

type = 0xx (%s);

len = %d;

tileno = %d; len = %d; partno = %d; numparts = %d

caps = 0xx;

width = %d; height = %d; xoff = %d; yoff = %d;

tilewidth = %d; tileheight = %d; tilexoff = %d; tileyoff = %d;

prec[%d] = %d; sgnd[%d] = %d; hsamp[%d] = %d; vsamp[%d] = %d

cod->numlyrs > 0 && cod->compparms.numdlvls <= 32

cod->compparms.numdlvls == cod->compparms.numrlvls - 1

csty = 0xx;

numdlvls = %d; qmfbid = %d; mctrans = %d

prg = %d; numlyrs = %d;

cblkwidthval = %d; cblkheightval = %d; cblksty = 0xx;

prcwidth[%d] = %d, prcheight[%d] = %d

coc->compparms.numdlvls <= 32

compno = %d; csty = 0xx; numdlvls = %d;

cblkwidthval = %d; cblkheightval = %d; cblksty = 0xx; qmfbid = %d;

compno = %d; roisty = %d; roishift = %d

qntsty = %d; numguard = %d; numstepsizes = %d

expn[%d] = 0xx; mant[%d] = 0xx;

compno = %d; qntsty = %d; numguard = %d; numstepsizes = %d

seqno = %d;

ind=%d; len = %d;

po[%d] = %d;

cs[%d] = %d; ce[%d] = %d;

rs[%d] = %d; re[%d] = %d;

le[%d] = %d

hoff[%d] = %d; voff[%d] = %d

regid = %d;

%d %d

x:

1.600.0

node %p, parent %p, value %d, lower %d, known %d

x:

W8.pXq

F*F6GüFkGw

.nvnG

.EA}o

FET%XeP

1iu2.iuB

b .mY1

hXXp://VVV.w3.org/2001/XMLSchema

.jpeg

.targa

.wbmp

%original file name%.exe_3404_rwx_007F1000_000E9000:

333333333333333333

33333833

3333339

3333333333333338

:*"*"$3338

3333333

33333333

33333333333

3333333333338

33338?383

333333333333

:*3:"$3338

333333333333333

<<9876$8

>=<9887$8

hg<1)ú

E(.Fcn

/4D%u

EB.iO

^{%DQ

yUDP

,K.Zb?

C%Dh 

D)*13.Ct

Ñ[V

v~.VAM

h!.Jn

P*%xB

A$.FoQ

=9_

'%XLh

C#%fu=

I).GM

9.Jo6

&.TXA

c.pd]

mSbJ5.XaR

za.lL

4]0$c%x

KWindows

IdStackWindows

UrlMon

%uPDFEPS

uVerifyPassword

.iej2000

.tiffilt

.ietgafil

.histogrambox

EWebTools

Font.Charset

Font.Color

Font.Height

Font.Name

Font.Style

WindowState

2.2.9

Glyph.Data

Items.Strings

2.2.5

2.3.1

16777216

2.2.8

3.0.0beta2

Filter (*.flt)|*.flt

PreviewFont.Charset

PreviewFont.Color

PreviewFont.Height

PreviewFont.Name

PreviewFont.Style

KeyPreview

OnKeyDown

FormKeyDown

Copyright by A-PDF.com

lblURL

hXXp://VVV.a-pdf.com

lblURLClick

/The product has been registerted. Register key:

lbmsg

Note: The product is a try-before-buy product. The unregistered version has a limitation: adding a watermark into the output file(PDF file). If you ordered, you will get a register key (license code), after inputing the code below, the limiation will remove, that means the output file will not be added a watermark.

lblRegKey

Have a key:

edtRegKey

Lines.Strings

\A: Click the "Online Purchase" button above. Or visit our homepage(hXXp://VVV.a-pdf.com) to

]get more option. We will send you egister key when getting your order. If you can not access

Zthe Internet, please call the Toll Free 1-877-353-7297, and give the operator the product

Pen.Color

Picture.Data

IEC hXXp://VVV.iec.ch

.IEC 61966-2.1 Default RGB colour space - sRGB

CRT curv

#%XE>Y

!%XE02k

OnKeyPress

FormKeyPress

2c0&f%&f%X

edtWidthKeyPress

*E:\Users\Zouyu\Desktop\pdfbackup\000aa.bmp

--/--/--/--/--/

--/--/--/--/--/--/--/--/--/--/--/--/

edtleftKeyPress

OnKeyUp

edttopKeyUp

edtleftKeyUp

edtrightKeyUp

edtbottomKeyUp

M;1....XT

,S6:.RLQ*

2.3.2

Password security...

actFolderExecute

actExportList

Constraints.MinHeight

lvFolderTreeKeyUp

vsReport

lvFavoritesKeyUp

cbbRenameAsKeyDown

cbbRenameAsKeyPress

Keywords

lvFilesKeyUp

imgViewThumbnailKeyDown

Save script as (*.txt)

ieImgViewKeyDown

ieImgViewKeyUp

chkFKeywords

&Keywords

chkFKeywordsClick

mniExportList

mniPasswordsecurity

OnExecute

actPropertyExecute

Password &security...

actSecurityExecute

actDelFileExecute

actViewerExecute

actEmailExecute

actExtractTextExecute

actExtractImageExecute

actOpenFolderExecute

actCopyExecute

actPasteExecute

actCopytoExecute

actMovetoExecute

actHelpExecute

actAboutExecute

actContractExecute

actStopExtractExecute

actSaveImagesExecute

actSaveAllImagesExecute

actBackExecute

actForwardExecute

actSetEmailExecute

actAddtofavoritesExecute

actThumbnailsExecute

actDetailsExecute

actAddFiletofavoritesExecute

actFilterSwitchExecute

actRenameExecute

Export file list as CSV

actExportListExecute

*.bmp

JPEG Bitmap (JPG)|*.jpg|CompuServe Bitmap (GIF)|*.gif|TIFF Bitmap (TIF)|*.tif|PaintBrush (PCX)|*.pcx|Portable Network Graphics (PNG)|*.png|Windows Bitmap (BMP)|*.bmp|OS/2 Bitmap (BMP)|*.bmp

lblKeyword

edtKeyword

btnMacroKeyword

edtOpenPageKeyPress

A-PDF@Gmail.com

edtOpenPassword

AutoHotkeys

%FirstFile_Title%

%FirstFile_Subject%

%FirstFile_Author%

%FirstFile_Keywords%

%FirstFile_FileName%

FirstFileKeywors1

%LastFile_Keywords%

Úte%

Brush.Color

lblOpenPassword

Document &Open Password

Need password

Imageopenpass

chkOpenPassword

(Re&quire a password to open the document

lblPermissionsPassword

&Permissions Password:

edtPermissionsPassword

Imagepermissionpass

chkPermissionsPassword

'&Use a password to restrict permissions

[[[[[,#

edtsizeKeyPress

edtRotationKeyPress

a-pdf.com

%Subject%

%Keywords%

%Filename%

edttitlexKeyPress

TfrmVerifyPassword

frmVerifyPassword

Password

lvFilesKeyDown

Please enter your password below

Need Password to Open

\L%s:

4%Xsn

, F%c

'Cl.ak

version="1.0.0.0"

name="Microsoft.Windows.Common-Controls"

version="6.0.0.0"

publicKeyToken="6595b64144ccf1df"

ukernel32.dll

kernel32.dll

user32.dll

advapi32.dll

oleaut32.dll

version.dll

gdi32.dll

ole32.dll

shell32.dll

wsock32.dll

comctl32.dll

winspool.drv

comdlg32.dll

shfolder.dll

avifil32.dll

msvfw32.dll

GetKeyboardType

TFRMVERIFYPASSWORD

We have created an error report that you can send to us. We will treat this report as confidential and anonymous.

To see what data this error report contains,

Send Error Report

Socket is not connected..Cannot send or receive after socket is closed.#Too many references, cannot splice.

Protocol not supported.

Socket type not supported."Operation not supported on socket.

Protocol family not supported.0Address family not supported by protocol family.

*Error on call Winsock2 library function %s&Error on loading Winsock2 library (%s)

%s is not a valid service.

Socket Error # %d

Operation would block.

Operation now in progress.

Operation already in progress.

Socket operation on non-socket.

JPEG error #%d

=This control requires version 4.70 or greater of COMCTL32.DLL

No help keyword specified.

OLE error %.8x.Method '%s' not supported by automation object/Variant does not reference an automation object7Dispatch methods do not support more than 64 parameters"Invalid buffer size for decryption

Stream write error)"%s" DOMImplementation already registered;Property or Method "%s" is not supported by DOM Vendor "%s"

Failed to clear tab control Failed to delete tab at index %d"Failed to retrieve tab at index %d Failed to get object at index %d"Failed to set tab "%s" at index %d Failed to set object at index %d<MultiLine must be True when TabPosition is tpLeft or tpRight

Failed to Save Stream %s is already associated with %sE%d is an invalid PageIndex value. PageIndex must be between 0 and %d

Value must be between %d and %d

Invalid clipboard format Clipboard does not support Icons

Text exceeds memo capacity.There is no default printer currently selected/Menu '%s' is already being used by another form

No help found for %s

%s property out of range

%s on %s@GroupIndex cannot be less than a previous menu item's GroupIndex5Cannot create form. No MDI forms are currently active*A control cannot have itself as its parent

!Cannot change the size of an icon$Unknown picture file extension (.%s)

Unsupported clipboard format

Error creating window class Cannot focus a disabled or invisible window!Control '%s' has no parent window$Parent given is not a parent of '%s'

Failed to set data for '%s'

Resource %s not found

%s.Seek not implemented$Operation not allowed on sorted list$%s not in a class registration group

Property %s does not exist

Thread creation error: %s

Thread Error: %s (%d)0Tab position incompatible with current tab style0Tab style incompatible with current tab position

Cannot open file "%s". %s

Unable to write to %s

Invalid stream format$''%s'' is not a valid component name

Invalid data type for '%s' List capacity out of bounds (%d)

List count out of bounds (%d)

List index out of bounds (%d) Out of memory while expanding memory stream

Error reading %s%s%s: %s

Failed to get data for '%s'

Ancestor for '%s' not found

Cannot assign a %s to a %s

Bits index out of range*Can't write to a read-only resource streamECheckSynchronize called from thread $%x, which is NOT the main thread

Class %s not found

A class named %s already exists%List does not allow duplicates ($0%x)#A component named %s already exists%String list does not allow duplicates

Cannot create file "%s". %s

Operation not supported

External exception %x

Interface not supported

%s (%s, line %d)

Abstract Error?Access violation at address %p in module '%s'. %s of address %p

System Error. Code: %d.

Application Error1Format '%s' invalid or incompatible with argument

No argument for format '%s'"Variant method calls not supported

Invalid variant operation

Invalid NULL variant operation%Invalid variant operation (%s%.8x)

%s5Could not convert variant of type (%s) into type (%s)=Overflow while converting variant of type (%s) into type (%s)

Integer overflow Invalid floating point operation

Invalid pointer operation

Invalid class typecast0Access violation at address %p. %s of address %p

Operation aborted(Exception %s in module %s at %p.

!'%s' is not a valid integer value('%s' is not a valid floating point value

'%s' is not a valid date

'%s' is not a valid time!'%s' is not a valid date and time

I/O error %d

3.5.0.0

1.0.0.0

%original file name%.exe_3404_rwx_00907000_00038000:

Portions Copyright (c) 1983,99 Borland

kernel32.dll

\pagefile.sys

\win386.swp

\\.\Scsi

\\.\SMARTVSD

OuDpffRmwqsgkJmef{s

Windows

NT 3.%u

NT 4.%u

\SYSTEM\CurrentControlSet\Control\Windows\

P6 (Model %d)

%dx86

%d.%d.%d.%d

HELO User.With.Error

Eip: %x

Eax: %x

Ecx: %x

Edx: %x

Ebx: %x

Esi: %x

Edi: %x

Ebp: %x

Esp: %x

Code = [%d]

- [%s]

08:,50*65=(450

KERNEL32.DLL

NTDLL.DLL

ADVAPI32.DLL

user32.dll

GetKeyboardType

advapi32.dll

RegOpenKeyExA

RegCloseKey

oleaut32.dll

RegQueryInfoKeyA

RegEnumKeyExA

GetWindowsDirectoryA

GetCPInfo

version.dll

ole32.dll

wsock32.dll

2!2%2)2-21252

<(=,=0=4=8=<=@=

1/223&4.4

ukernel32.dll

The procedure entry point %s could not be located in the dynamic link library %s

The ordinal %u could not be located in the dynamic link library %s

Submit Report

%original file name%.exe_3404_rwx_01660000_00007000:

.text

`.rdata

@.data

.rsrc

.reloc

kernel32.dll

user32.dll

tlplugin.dll

%original file name%.exe_3404_rwx_01670000_00003000:

%FOH/

%original file name%.exe_3404_rwx_01D9C000_00001000:

GetCPInfo

CreatePipe

EAbout.pas

EBase64.pas

ECheck.pas

ECommon.pas

EConsts.pas

ECore.pas

ECrc32.pas

EDebug.pas

EDesign.pas

EDisAsm.pas

EHash.pas

EHook.pas

ELang.pas

ELeaks.pas

EMain.pas

EOption.pas

EParser.pas

ETypes.pas

EWait.pas

EZip.pas

EZlib.pas

Remove it with Ad-Aware

1. Click (here) to download and install Ad-Aware Free Antivirus.
2. Update the definition files.
3. Run a full scan of your computer.

Manual removal*

1. Terminate malicious process(es) (How to End a Process With the Task Manager):No processes have been created.
2. Delete the original Trojan file.
   
3. Reboot the computer.
   

*Manual removal may cause unexpected system behaviour and should be performed at your own risk.