Trojan.Win32.SwrortProxy_bb2fcfa241

by malwarelabrobot on January 30th, 2015 in Malware Descriptions.

mzpefinder_pcap_file.YR, TrojanSwrortProxy.YR, WormAutoItGen.YR, SearchProtectToolbar.YR, PUPSpigot.YR, BankerGeneric.YR (Lavasoft MAS)
Behaviour: Banker, Trojan, Worm, PUP

The description has been automatically generated by Lavasoft Malware Analysis System and it may contain incomplete or inaccurate information.

Summary

Dynamic Analysis

Static Analysis

Network Activity

Map

Strings from Dumps

Removals

MD5: bb2fcfa2415d0f08653157d8e998d342
SHA1: 76cb0def3ee130f4bddb6893acbcd6a7284f336b
SHA256: 4474c6f3fdde3f3aca6358cf939818fe8876d0a5ac9a4d213df2862827c41212
SSDeep: 12288:iJ/IV c3w2BOCxqlt8wnDJ/fECrcTwhoSG1:iJwTg2BLxqlttt/FATwq1
Size: 399736 bytes
File type: EXE
Platform: WIN32
Entropy: Packed
PEID: PackerUPXCompresorGratuitowwwupxsourceforgenet, UPolyXv05_v6
Company: BitTorrent, Inc.
Created at: 2011-05-18 02:16:24
Analyzed on: Windows7Ada SP1 64-bit

Summary:

Trojan. A program that appears to do one thing but actually does another (a.k.a. Trojan Horse).

Payload

No specific payload has been found.

Process activity

The Trojan creates the following process(es):

GoogleUpdate.exe:5112
GoogleUpdate.exe:1964
GoogleUpdate.exe:4740
GoogleUpdate.exe:1972
GoogleUpdate.exe:3968
GoogleUpdate.exe:816
GoogleUpdate.exe:4500
GoogleUpdateSetup.exe:3100
Yandex.exe:2084
syesubc3_p2v3.exe:3476
sender.exe:3624
GoogleUpdateComRegisterShell64.exe:4520
GoogleUpdateComRegisterShell64.exe:4184
GoogleUpdateComRegisterShell64.exe:5060
TPAutoConnSvc.exe:1844
SkypeSetupFull.exe:1892
RunDll32.exe:4076
YandexSearch.exe:1760
MsiExec.exe:3812
MsiExec.exe:3644
MsiExec.exe:4040
MsiExec.exe:3288
utt699.tmp.exe:3512
utt699.tmp.exe:3852
du73i.exe:1180
%original file name%.exe:1472
%original file name%.exe:1000
uTorrent.exe:3024
utt8112.tmp.exe:3708
utt8112.tmp.exe:3896
taskeng.exe:3696

The Trojan injects its code into the following process(es):

uTorrent.exe:200
Skype.exe:1512

Mutexes

The following mutexes were created/opened:
No objects were found.

File activity

The process GoogleUpdate.exe:5112 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

%Program Files% (x86)\Google\Update\1.3.25.11\goopdateres_fil.dll (78 bytes)
%Program Files% (x86)\Google\Update\1.3.25.11\goopdateres_da.dll (77 bytes)
%Program Files% (x86)\Google\Update\1.3.25.11\goopdateres_fr.dll (79 bytes)
%Program Files% (x86)\Google\Update\1.3.25.11\goopdateres_et.dll (77 bytes)
%Program Files% (x86)\Google\Update\1.3.25.11\goopdateres_tr.dll (77 bytes)
%Program Files% (x86)\Google\Update\1.3.25.11\GoogleUpdateHelper.msi (54 bytes)
%Program Files% (x86)\Google\Update\1.3.25.11\goopdateres_ja.dll (70 bytes)
%Program Files% (x86)\Google\Update\1.3.25.11\goopdateres_hr.dll (78 bytes)
%Program Files% (x86)\Google\Update\1.3.25.11\goopdateres_el.dll (79 bytes)
%Program Files% (x86)\Google\Update\1.3.25.11\goopdateres_zh-TW.dll (63 bytes)
%Program Files% (x86)\Google\Update\1.3.25.11\psmachine.dll (1954 bytes)
%Program Files% (x86)\Google\Update\1.3.25.11\goopdateres_es.dll (79 bytes)
%Program Files% (x86)\Google\Update\1.3.25.11\goopdateres_no.dll (77 bytes)
%Program Files% (x86)\Google\Update\1.3.25.11\GoogleUpdateComRegisterShell64.exe (1738 bytes)
C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job (898 bytes)
%Program Files% (x86)\Google\Update\1.3.25.11\goopdateres_te.dll (79 bytes)
%Program Files% (x86)\Google\Update\1.3.24.15 (28 bytes)
%Program Files% (x86)\Google\Update\1.3.25.11\goopdateres_ml.dll (80 bytes)
%Program Files% (x86)\Google\Update\1.3.25.11\goopdateres_sl.dll (78 bytes)
%Program Files% (x86)\Google\Update\1.3.25.11\goopdateres_bn.dll (78 bytes)
%Program Files% (x86)\Google\Update\1.3.25.11\goopdateres_hi.dll (77 bytes)
%Program Files% (x86)\Google\Update\1.3.25.11\goopdateres_en-GB.dll (72 bytes)
%Program Files% (x86)\Google\Update\1.3.25.11\goopdateres_sv.dll (77 bytes)
%Program Files% (x86)\Google\Update\1.3.25.11\goopdateres_kn.dll (79 bytes)
%Program Files% (x86)\Google\Update\1.3.25.11\goopdateres_ur.dll (77 bytes)
%Program Files% (x86)\Google\Update\1.3.25.11\GoogleCrashHandler64.exe (4210 bytes)
%Program Files% (x86)\Google\Update\1.3.25.11\psmachine_64.dll (1954 bytes)
%Program Files% (x86)\Google\Update\1.3.25.11\goopdateres_sk.dll (77 bytes)
%Program Files% (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (12490 bytes)
%Program Files% (x86)\Google\Update\1.3.25.11\psuser_64.dll (1954 bytes)
%Program Files% (x86)\Google\Update\1.3.25.11\goopdateres_ta.dll (79 bytes)
%Program Files% (x86)\Google\Update\1.3.25.11\goopdateres_pl.dll (78 bytes)
%Program Files% (x86)\Google\Update\1.3.25.11\goopdateres_fa.dll (72 bytes)
%Program Files% (x86)\Google\Update\1.3.25.11\goopdateres_nl.dll (78 bytes)
%Program Files% (x86)\Google\Update\1.3.25.11\goopdateres_es-419.dll (78 bytes)
%Program Files% (x86)\Google\Update\1.3.25.11\goopdate.dll (32380 bytes)
%Program Files% (x86)\Google\Update\1.3.25.11\goopdateres_vi.dll (77 bytes)
%Program Files% (x86)\Google\Update\1.3.25.11\GoogleUpdateSetup.exe (20458 bytes)
%Program Files% (x86)\Google\Update\1.3.25.11\goopdateres_sw.dll (79 bytes)
%Program Files% (x86)\Google\Update\1.3.25.11\goopdateres_it.dll (79 bytes)
%Program Files% (x86)\Google\Update\1.3.25.11\goopdateres_ca.dll (78 bytes)
%Program Files% (x86)\Google\Update\1.3.25.11\goopdateres_sr.dll (77 bytes)
%Program Files% (x86)\Google\Update\1.3.25.11\goopdateres_bg.dll (78 bytes)
%Program Files% (x86)\Google\Update\1.3.25.11\GoogleCrashHandler.exe (3778 bytes)
%Program Files% (x86)\Google\Update\1.3.25.11\GoogleUpdateOnDemand.exe (104 bytes)
%Program Files% (x86)\Google\Update\1.3.25.11\goopdateres_lt.dll (77 bytes)
%Program Files% (x86)\Google\Update\1.3.25.11\goopdateres_fi.dll (77 bytes)
%Program Files% (x86)\Google\Update\1.3.25.11\GoogleUpdate.exe (1738 bytes)
%Program Files% (x86)\GUME466.tmp\goopdateres_en.dll (36 bytes)
%Program Files% (x86)\Google\Update\1.3.25.11\goopdateres_is.dll (77 bytes)
%Program Files% (x86)\Google\Update\1.3.25.11\goopdateres_pt-BR.dll (77 bytes)
%Program Files% (x86)\Google\Update\1.3.25.11\goopdateres_ar.dll (71 bytes)
%Program Files% (x86)\Google\Update\1.3.25.11\goopdateres_cs.dll (77 bytes)
%Program Files% (x86)\Google\Update\1.3.25.11\goopdateres_mr.dll (78 bytes)
%Program Files% (x86)\Google\Update\1.3.25.11\goopdateres_gu.dll (79 bytes)
%Program Files% (x86)\GUME466.tmp\goopdate.dll (49 bytes)
%Program Files% (x86)\Google\Update\1.3.25.11\goopdateres_pt-PT.dll (78 bytes)
%Program Files% (x86)\Google\Update\1.3.25.11\goopdateres_zh-CN.dll (63 bytes)
%Program Files% (x86)\Google\Update\1.3.25.11\goopdateres_am.dll (72 bytes)
%Program Files% (x86)\Google\Update\1.3.25.11\goopdateres_de.dll (79 bytes)
%Program Files% (x86)\Google\Update\1.3.25.11\goopdateres_th.dll (72 bytes)
%Program Files% (x86)\Google\Update\1.3.25.11\goopdateres_ru.dll (77 bytes)
%Program Files% (x86)\Google\Update\1.3.25.11\goopdateres_uk.dll (77 bytes)
%Program Files% (x86)\Google\Update\1.3.25.11\goopdateres_iw.dll (71 bytes)
%Program Files% (x86)\Google\Update\1.3.25.11\goopdateres_id.dll (77 bytes)
%Program Files% (x86)\Google\Update\1.3.25.11\goopdateres_lv.dll (78 bytes)
%Program Files% (x86)\Google\Update\1.3.25.11\goopdateres_hu.dll (78 bytes)
%Program Files% (x86)\Google\Update\1.3.25.11\goopdateres_ro.dll (78 bytes)
%Program Files% (x86)\Google\Update\1.3.25.11\goopdateres_ko.dll (69 bytes)
%Program Files% (x86)\Google\Update\1.3.25.11\goopdateres_ms.dll (77 bytes)
%Program Files% (x86)\Google\Update\1.3.25.11\GoogleUpdateBroker.exe (104 bytes)
C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job (902 bytes)
%Program Files% (x86)\Google\Update\1.3.25.11\psuser.dll (1954 bytes)
%Program Files% (x86)\Google\Update\1.3.25.11\goopdateres_en.dll (72 bytes)

The process GoogleUpdate.exe:816 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

%Program Files% (x86)\Google\Update\Install\{C8166274-A579-42A7-AB8E-118DD62CB219}\GoogleUpdateSetup.exe (7725 bytes)
%Program Files% (x86)\Google\Update\Download\{430FD4D0-B729-4F61-AA34-91526481799D}\1.3.25.11\GoogleUpdateSetup.exe (6841 bytes)

The process GoogleUpdateSetup.exe:3100 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

%Program Files% (x86)\GUME466.tmp\goopdateres_id.dll (37 bytes)
%Program Files% (x86)\GUME466.tmp\goopdateres_kn.dll (39 bytes)
%Program Files% (x86)\GUME466.tmp\goopdateres_ta.dll (39 bytes)
%Program Files% (x86)\GUME466.tmp\goopdateres_pt-BR.dll (37 bytes)
%Program Files% (x86)\GUME466.tmp\goopdateres_pl.dll (38 bytes)
%Program Files% (x86)\GUME466.tmp\goopdateres_tr.dll (37 bytes)
%Program Files% (x86)\GUME466.tmp\goopdateres_fil.dll (38 bytes)
%Program Files% (x86)\GUME466.tmp\goopdateres_ur.dll (37 bytes)
%Program Files% (x86)\GUME466.tmp\goopdateres_fr.dll (39 bytes)
%Program Files% (x86)\GUME466.tmp\goopdateres_vi.dll (37 bytes)
%Program Files% (x86)\GUME466.tmp\goopdateres_ar.dll (35 bytes)
%Program Files% (x86)\GUME466.tmp\goopdateres_de.dll (39 bytes)
%Program Files% (x86)\GUME466.tmp\goopdateres_sk.dll (37 bytes)
%Program Files% (x86)\GUME466.tmp\GoogleUpdateBroker.exe (51 bytes)
%Program Files% (x86)\GUME466.tmp\goopdateres_lv.dll (38 bytes)
%Program Files% (x86)\GUME466.tmp\GoogleCrashHandler64.exe (550 bytes)
%Program Files% (x86)\GUME466.tmp\goopdateres_am.dll (36 bytes)
%Program Files% (x86)\GUME466.tmp\goopdateres_cs.dll (37 bytes)
%Program Files% (x86)\GUME466.tmp\goopdateres_zh-CN.dll (31 bytes)
%Program Files% (x86)\GUME466.tmp\goopdateres_sr.dll (37 bytes)
%Program Files% (x86)\GUME466.tmp\goopdateres_sv.dll (37 bytes)
%Program Files% (x86)\GUME466.tmp\goopdateres_te.dll (39 bytes)
%Program Files% (x86)\GUME466.tmp\goopdateres_zh-TW.dll (31 bytes)
%Program Files% (x86)\GUME466.tmp\GoogleUpdateComRegisterShell64.exe (114 bytes)
%Program Files% (x86)\GUME466.tmp\goopdateres_ko.dll (33 bytes)
%Program Files% (x86)\GUME466.tmp\GoogleUpdateHelper.msi (26 bytes)
%Program Files% (x86)\GUME466.tmp\GoogleCrashHandler.exe (230 bytes)
%Program Files% (x86)\GUME466.tmp\npGoogleUpdate3.dll (838 bytes)
%Program Files% (x86)\GUME466.tmp\goopdateres_da.dll (37 bytes)
%Program Files% (x86)\GUME466.tmp\goopdateres_et.dll (37 bytes)
%Program Files% (x86)\GUME466.tmp\goopdateres_hi.dll (37 bytes)
%Program Files% (x86)\GUME466.tmp\goopdateres_ro.dll (38 bytes)
%Program Files% (x86)\GUME466.tmp\goopdateres_iw.dll (35 bytes)
%Program Files% (x86)\GUME466.tmp (28 bytes)
%Program Files% (x86)\GUME466.tmp\goopdateres_mr.dll (38 bytes)
%Program Files% (x86)\GUME466.tmp\goopdateres_bn.dll (38 bytes)
%Program Files% (x86)\GUME466.tmp\goopdateres_el.dll (39 bytes)
%Program Files% (x86)\GUME466.tmp\goopdateres_nl.dll (38 bytes)
%Program Files% (x86)\GUME466.tmp\goopdateres_ja.dll (34 bytes)
%Program Files% (x86)\GUME466.tmp\goopdateres_hr.dll (38 bytes)
%Program Files% (x86)\GUME466.tmp\goopdateres_hu.dll (38 bytes)
%Program Files% (x86)\GUME466.tmp\psuser.dll (166 bytes)
%Program Files% (x86)\GUME466.tmp\goopdateres_fi.dll (37 bytes)
%Program Files% (x86)\GUME466.tmp\goopdateres_th.dll (36 bytes)
%Program Files% (x86)\GUME466.tmp\goopdateres_en-GB.dll (36 bytes)
%Program Files% (x86)\GUTE467.tmp (6 bytes)
%Program Files% (x86)\GUME466.tmp\GoogleUpdateOnDemand.exe (51 bytes)
%Program Files% (x86)\GUME466.tmp\goopdateres_ru.dll (37 bytes)
%Program Files% (x86)\GUME466.tmp\goopdateres_en.dll (36 bytes)
%Program Files% (x86)\GUME466.tmp\goopdateres_gu.dll (39 bytes)
%Program Files% (x86)\GUME466.tmp\psmachine_64.dll (189 bytes)
%Program Files% (x86)\GUME466.tmp\goopdateres_ms.dll (37 bytes)
%Program Files% (x86)\GUME466.tmp\goopdateres_es.dll (39 bytes)
%Program Files% (x86)\GUME466.tmp\goopdateres_sl.dll (38 bytes)
%Program Files% (x86)\GUME466.tmp\goopdateres_bg.dll (38 bytes)
%Program Files% (x86)\GUME466.tmp\goopdate.dll (2632 bytes)
%Program Files% (x86)\GUME466.tmp\goopdateres_ml.dll (40 bytes)
%Program Files% (x86)\GUME466.tmp\GoogleUpdateSetup.exe (6841 bytes)
%Program Files% (x86)\GUME466.tmp\goopdateres_ca.dll (38 bytes)
%Program Files% (x86)\GUME466.tmp\goopdateres_sw.dll (39 bytes)
%Program Files% (x86)\GUME466.tmp\goopdateres_es-419.dll (38 bytes)
%Program Files% (x86)\GUME466.tmp\goopdateres_uk.dll (37 bytes)
%Program Files% (x86)\GUME466.tmp\goopdateres_it.dll (39 bytes)
%Program Files% (x86)\GUME466.tmp\goopdateres_lt.dll (37 bytes)
%Program Files% (x86)\GUME466.tmp\GoogleUpdate.exe (217 bytes)
%Program Files% (x86)\GUME466.tmp\psuser_64.dll (189 bytes)
%Program Files% (x86)\GUME466.tmp\goopdateres_no.dll (37 bytes)
%Program Files% (x86)\GUME466.tmp\goopdateres_is.dll (37 bytes)
%Program Files% (x86)\GUME466.tmp\goopdateres_fa.dll (36 bytes)
%Program Files% (x86)\GUME466.tmp\psmachine.dll (166 bytes)
%Program Files% (x86)\GUME466.tmp\goopdateres_pt-PT.dll (38 bytes)

The process Yandex.exe:2084 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Yandex.lnk (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\yapin\Yandex.website (493 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\yapin\Yandex.lnk (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Yandex.website (493 bytes)

The process syesubc3_p2v3.exe:3476 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\USU4CORO\SkypeSetupFull[1].exe (2470680 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsp87A.tmp\SkypeSetupFull.exe (2628850 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsp87A.tmp\inetc.dll (53 bytes)

The process sender.exe:3624 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\Temp\statisticsex.log (940 bytes)

The process SkypeSetupFull.exe:1892 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\7396C420A8E1BC1DA97F1AF0D10BAD21 (592 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\8QF47THB.txt (128 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\696F3DE637E6DE85B458996D49D759AD (568 bytes)
C:\ProgramData\Skype\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}\Skype.msi (355060 bytes)

The process RunDll32.exe:4076 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Roaming\OpenCandy\OpenCandy_AA4F1F00729C45A1B2127019AA750390\du73i.exe (7904 bytes)

The process YandexSearch.exe:1760 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\Temp\{97DA2459-9AC9-49B0-BE2B-6F1E7E24D829}\YandexSearch.msi (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\YandexSearch00000.log (107174 bytes)

The process MsiExec.exe:3812 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\Temp\2.8.1.1418 (PARTNER)\MsiExec.exe@3812-3964-1.log (254 bytes)
C:\Windows\Installer\MSI7058.tmp (221 bytes)
C:\Windows\Installer\MSI1555.tmp (221 bytes)
C:\Windows\Installer\MSI6F8D.tmp (221 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\places.sqlite-wal (19187 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Google\Chrome\User Data\Default\Preferences (56 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Opera Software\Opera Stable\Bookmarks (2 bytes)
C:\Windows\Installer\MSI16AD.tmp (163 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Google\Chrome\User Data\Default\Favicons-journal (37926 bytes)
C:\Windows\Installer\MSI17D8.tmp (49 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Opera Software\Opera Stable x64\favorites.db-journal (5062 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Google\Chrome\User Data\Default\Top Sites-journal (5380 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\prefs.js (10 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Yandex.website (493 bytes)
C:\Users\"%CurrentUserName%"\Favorites\Links\Yandex.url (284 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\2.8.1.1418 (PARTNER)\MsiExec.exe@3812-3924-1.log (150 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Opera Software\Opera Stable x64\Web Data (609 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Chromium\User Data\Default\Top Sites-journal (5062 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Internet Explorer\Services\www.yandex.com_20150129095519.ico (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Google\Chrome\User Data\Default\Bookmarks (785 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Opera Software\Opera Stable\Preferences_20150129095514.backup (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Opera Software\Opera Stable\Favicons-journal (32780 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Chromium\User Data\Default\Web Data-journal (7534 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Opera Software\Opera Stable x64\Preferences_20150129095515.backup (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Opera Software\Opera Stable\Favicons (5137 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\2.8.1.1418 (PARTNER)\stdout.log (40 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Opera Software\Opera Stable\Web Data (609 bytes)
C:\Windows\Installer\MSI18F4.tmp (49 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\chromeappsstore.sqlite-journal (3302 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Google\Chrome\User Data\Default\History (4588 bytes)
C:\Windows\Installer\MSI175A.tmp (49 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\omni.ja_20150129095501.zip (44854 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Opera Software\Opera Stable x64\Web Data-journal (544 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Chromium\User Data\Default\Favicons (4725 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Internet Explorer\Services\www.yandex.com_20150129095521.ico (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\chromeappsstore.sqlite (59 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\2.8.1.1418 (PARTNER)\browserconfig.properties (74 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Chromium\User Data\Default\History-journal (18998 bytes)
C:\Users\"%CurrentUserName%"\Favorites\Links\Mail.url (286 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\2.8.1.1418 (PARTNER)\Yandex.website (493 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\searchplugins\yandex.com-095516.xml (9 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Opera Software\Opera Stable\Preferences (238 bytes)
C:\Windows\Installer\MSI16EC.tmp (49 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Yandex\ui (38 bytes)
C:\Windows\Installer\MSI74D0.tmp (49 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Opera Software\Opera Stable x64\Preferences (340 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\2.8.1.1418 (PARTNER)\MsiExec.exe@3812-3740-1.log (322 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\places.sqlite (9176 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\prefs.js_20150129095516.backup (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Opera Software\Opera Stable\Web Data-journal (544 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Opera Software\Opera Stable x64\Favicons (5137 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Chromium\User Data\Default\History (12611 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Opera Software\Opera Stable x64\Bookmarks (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\2.8.1.1418 (PARTNER)\MsiExec.exe@3812-3944-1.log (250 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\vendor00000.xml (591 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Google\Chrome\User Data\Default\Preferences_20150129095505.backup (28 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\2.8.1.1418 (PARTNER)\region.properties (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Chromium\User Data\Default\Bookmarks (785 bytes)
C:\Windows\Installer\MSI1876.tmp (49 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Google\Chrome\User Data\Default\History-journal (14544 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Google\Chrome\User Data\Default\Top Sites (1932 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\2.8.1.1418 (PARTNER)\MsiExec.exe@3812-3928-1.log (42672 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Chromium\User Data\Default\Preferences (732 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\etilqs_lsIrBiaBhaKc2dV (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Mozilla\Firefox\Profiles\zwvbr04l.default\thumbnails\061150f69be1b6d86425899640d8e6fa.png (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Internet Explorer\Services\mail.yandex.com_20150129095522.ico (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Chromium\User Data\First Run (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\2.8.1.1418 (PARTNER)\MsiExec.exe@3812-3940-1.log (258 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Opera Software\Opera Stable\favorites.db (523 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Opera Software\Opera Stable x64\Bookmarks_20150129095516.backup (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\sender.exe (308 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Chromium\User Data\Default\Top Sites (1151 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Opera Software\Opera Stable x64\favorites.db (523 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Opera Software\Opera Stable\favorites.db-journal (5062 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Opera Software\Opera Stable\Bookmarks_20150129095515.backup (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Google\Chrome\User Data\Default\Favicons (5572 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\backup00000.reg (2196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Chromium\User Data\Default\Web Data (24431 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Chromium\User Data\Default\Favicons-journal (32780 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Chromium\User Data\Local State (69 bytes)
C:\Windows\Installer\MSI1827.tmp (49 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\2.8.1.1418 (PARTNER)\MsiExec.exe@3812-3708-1.log (252 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Internet Explorer\Services\www.yandex.com_20150129095522.ico (5 bytes)
C:\Windows\Installer\MSI7098.tmp (221 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Opera Software\Opera Stable x64\Favicons-journal (32780 bytes)

The process MsiExec.exe:3644 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

C:\Windows\Installer\MSI730B.tmp (49 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Google\Chrome\User Data\Default\Preferences (28 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\2.8.1.1418 (PARTNER)\MsiExec.exe@3644-4048-1.log (674 bytes)

The process MsiExec.exe:4040 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

C:\Windows\Installer\MSIC172.tmp (167 bytes)
C:\Windows\Installer\MSIF7D0.tmp (167 bytes)
C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\7B8944BA8AD0EFDF0E01A43EF62BECD0_DBEBBB72D7CF896A67503824FF19F0BB (1 bytes)
C:\Windows\Installer\MSIF919.tmp (167 bytes)
C:\Windows\Installer\MSIF84E.tmp (155 bytes)
C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\7D266D9E1E69FA1EEFB9699B009B34C8_0A9BFDD75B598C2110CBF610C078E6E6 (1504 bytes)
C:\Windows\Installer\MSIF959.tmp (167 bytes)
C:\Windows\Installer\MSID62C.tmp (167 bytes)
C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\7D266D9E1E69FA1EEFB9699B009B34C8_0A9BFDD75B598C2110CBF610C078E6E6 (1 bytes)
C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\7B8944BA8AD0EFDF0E01A43EF62BECD0_DBEBBB72D7CF896A67503824FF19F0BB (1504 bytes)

The process MsiExec.exe:3288 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

C:\Windows\Installer\MSIB9E0.tmp (167 bytes)
C:\Windows\Installer\MSIB78C.tmp (167 bytes)
C:\ProgramData\Skype\SKYB8E3.tmp (5572 bytes)
C:\Windows\Installer\MSID521.tmp (167 bytes)
C:\Windows\Installer\MSIB877.tmp (167 bytes)
C:\Windows\Installer\MSIFB1F.tmp (167 bytes)
C:\Windows\Installer\MSIB8C6.tmp (167 bytes)

The process utt699.tmp.exe:3512 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\Temp\7F4987FB1A6E43d69E3E94B29EB75926\YandexSearch.exe (1480 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\7B8944BA8AD0EFDF0E01A43EF62BECD0_84DF081C52E32C6CC02A8FC17AEFEC2C (1536 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\7D266D9E1E69FA1EEFB9699B009B34C8_0A9BFDD75B598C2110CBF610C078E6E6 (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\7D266D9E1E69FA1EEFB9699B009B34C8_0A9BFDD75B598C2110CBF610C078E6E6 (1212 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\7F4987FB1A6E43d69E3E94B29EB75926\seed.txt (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\USU4CORO\YandexSearch[1].exe (355409 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\SH2TVRCI\info[1].rss (827 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\7F4987FB1A6E43d69E3E94B29EB75926\downloader.log3512 (182503 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\7B8944BA8AD0EFDF0E01A43EF62BECD0_84DF081C52E32C6CC02A8FC17AEFEC2C (1 bytes)

The process utt699.tmp.exe:3852 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\Temp\7F4987FB1A6E43d69E3E94B29EB75926\stat.log3852 (547 bytes)

The process du73i.exe:1180 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Roaming\OpenCandy\OpenCandy_AA4F1F00729C45A1B2127019AA750390\syesubc3_p2v3.exe (4217 bytes)

The process %original file name%.exe:1472 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\settings.dat.new (63 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\uttB809.tmp.new (59 bytes)

The process %original file name%.exe:1000 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\settings.dat.new (126 bytes)
C:\ProgramData\Microsoft\Windows\Start Menu\Ã‚ÂµTorrent.lnk (953 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Ã‚ÂµTorrent.lnk (971 bytes)
%Program Files% (x86)\uTorrent\uTorrent.exe (800 bytes)
C:\Users\Public\Desktop\Ã‚ÂµTorrent.lnk (947 bytes)

The process uTorrent.exe:200 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\G44ROL1L\jquery-1.11.2[1].js (159892 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\7PG9FKKL.txt (1351 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\91ECFED5143F7F4F4576655D8EFAB51C_5876942B8A1533861E194CE520DB3C48 (1504 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\apps\D944B3378FAB35793B7951FA53E41B2AB9CC462B (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\7D1F03728133589A90656A87E482B21F (290 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\USU4CORO\base64[1].js (3646 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\WDUL1PG1\icon[2].ico (200 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\USU4CORO\nr-515.min[1].js (10314 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\G44ROL1L\index-edge[1].htm (467 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\utt4328.tmp.new (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\828298824EA5549947C17DDABF6871F5_4A500E9AA7C5573906560F21D53A5861 (1312 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\apps\72F0D3E2141065DACF6134D07A06A2DF20590748 (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\SH2TVRCI\index[2].htm (315 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\SMIBE11Y.txt (97 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\RB47CK0O.txt (95 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\G44ROL1L\bundle_tab[1].htm (183 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\FCD2CC3451EF5F3DB8D4B7DD511B2F77_DDE7C84CBB7658FC5D51C45EABF2444C (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\USU4CORO\i[1].gif (43 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\USU4CORO\e[3].htm (64 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\SH2TVRCI\analytics[1].js (18744 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\49514950C94E8026A2B06312597DFF49_F4692EBD578D04048E176E82BB8369BB (2464 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\8059E9A0D314877E40FE93D8CCFB3C69_6974D89D7560C032FD086BB9AE092DD4 (1448 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\8059E9A0D314877E40FE93D8CCFB3C69_8BB8535855D9B94D8D1B596BEE16137C (463 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\apps\player.btapp (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\G44ROL1L\ados[2].js (14332 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\G44ROL1L\base64[1].js (145 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\LLKSH714.txt (93 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\SH2TVRCI\icon[1].ico (200 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\1DAF2884EC4DFA96BA4A58D4DBC9C406 (804 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\WDUL1PG1\bench[1].js (25 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\7QN12N1J.txt (1415 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\4XVWA97G.txt (1416 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\23B523C9E7746F715D33C6527C18EB9D (878 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\USU4CORO\jquery-1.11.1.min[1].js (52776 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\G44ROL1L\event[1].gif (35 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\8059E9A0D314877E40FE93D8CCFB3C69_E1083B58096402790BB1984C8AAEEC87 (1432 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\apps\plus.btapp.new (765 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\utt4A88.tmp (731 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\WDUL1PG1\lpmg4HkjSKqwDPqtr2Ll_wallpaper_pretty-lights-bg[1].jpg (200 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\SBRD7EJ5.txt (625 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\WDUL1PG1\collect[1].gif (35 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\SH2TVRCI\fileserve[1].js (505 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\WDUL1PG1\fileserve[1].css (73 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\USU4CORO\jHy0rFKsTumpzJclwbA7_99_TAOR%20wallpaper%201440x900[1].jpg (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\G6O322HQ.txt (116 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\62DX2A9Y.txt (490 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\WDUL1PG1\34e5de599eb245f89dc65ea4e8e2c989[1].jpg (3436 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\USU4CORO\e[1].htm (64 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\SH2TVRCI\380d449ac02e4f07b48c7c4b1438be6b[1].jpg (2970 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\settings.dat.new (77 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\1DAF2884EC4DFA96BA4A58D4DBC9C406 (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\SH2TVRCI\zuc589RxQva9qDF8D6fc_bitT_backgroundimage_(1)[1].jpg (200 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\G44ROL1L\i[3].gif (43 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\EB2C4AB8B68FFA4B7733A9139239A396_D76DB901EE986B889F30D8CC06229E2D (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\G44ROL1L\bundles[2].json (695 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\USU4CORO\bench[1].js (25 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\USU4CORO\icon[1].ico (200 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\WDUL1PG1\a05ac8e903c14e74befdd8b8426a754e[1].jpg (4425 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\223DE96EE265046957A660ED7C9DD9E7_EFF9B9BA98DEAA773F261FA85A0B1771 (1688 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\G44ROL1L\fileserve[1].png (200 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\G44ROL1L\index-edge[2].htm (105 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\SH2TVRCI\ecommerce[1].js (25 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\D47DBD2F9E3365FBBE008D71FB06716F_835A2FD7EE5F1F37B7872C78D42A88BF (2716 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\USU4CORO\ados[1].js (15992 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\9M1O38A2.txt (92 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\WDUL1PG1\jquery-1.11.1.min[1].js (70796 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\USU4CORO\cnRshcjNSxiBLM99wbC0_wallpaper_the-crash-reel4[1].jpg (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\8890A77645B73478F5B1DED18ACBF795_1E5D470765E0BE1964814B1F5A3581DC (1592 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\USU4CORO\modernizr.c1f148ce451bd94fd43d6b446b4ca51e.gz[1].js (7309 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\SS6SC5J3.txt (116 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\A98UC8ER.txt (245 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\K3XICJ94.txt (247 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\828298824EA5549947C17DDABF6871F5_4A500E9AA7C5573906560F21D53A5861 (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\7D266D9E1E69FA1EEFB9699B009B34C8_8CA7164968F366C9A94AC8E71C4BDD9B (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\G44ROL1L\i[1].gif (43 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\EB2C4AB8B68FFA4B7733A9139239A396_D76DB901EE986B889F30D8CC06229E2D (1720 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\USU4CORO\bundle_tab[1].htm (3764 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\NEHWHHE0.txt (211 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\G44ROL1L\e[2].htm (64 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\0D6ED27B76F0582A8D2120DF24D1E180_B52DB0DD355A2D437E4D65686FF6F4AD (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\USU4CORO\alJuJmasSCGtAplXwgzD_background2[1].jpg (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\USU4CORO\i[2].gif (43 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\E5054B3FD90C2AE6E53B5EA495D10CC9_B12519B3E4D3C99979E3C33CFF793FC8 (471 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\23B523C9E7746F715D33C6527C18EB9D (876 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\4S2ZU7DS.txt (116 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\WDUL1PG1\AxXzhRFAQnGrDsoQwNt9_eggnogbtbg[1].jpg (584 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\apps\D944B3378FAB35793B7951FA53E41B2AB9CC462B\empty_movie.gif (282 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\USU4CORO\8b9486d826[1].js (25 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\WDUL1PG1\inclient_chevrons.dc38596ff0cf873301ca6c09376fcc99[1].png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\SH2TVRCI\icon[3].ico (200 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\JPRVYJ1V.txt (1416 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\SH2TVRCI\analytics[3].js (17192 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\SH2TVRCI\analytics[2].js (17192 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\ZEB48NYT.txt (1415 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\WDUL1PG1\e[1].htm (65 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\SH2TVRCI\i[1].gif (43 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\USU4CORO\fileserve[1].js (917 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\WDUL1PG1\e[2].htm (65 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\WDUL1PG1\icon[1].ico (200 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\SH2TVRCI\bundle_tab.a7a7abd57aa87ff2b00c2b74a0b6d1cf.gz[1].js (234890 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Internet Explorer\DOMStore\DRT4YCWO\bundles.bittorrent[1].xml (1780 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\FB788E090BC1F3AA2FBC9E8FB2859601 (822 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\apps\72F0D3E2141065DACF6134D07A06A2DF20590748\icon.bmp (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\apps\featuredContent.btapp.new (41 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\apps\72F0D3E2141065DACF6134D07A06A2DF20590748\index.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\2427C246DCF85A06DD675914EDA68038_EEE52A74DEE31B064E156E492FD05217 (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\C36HRQ9A.txt (130 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\apps\D944B3378FAB35793B7951FA53E41B2AB9CC462B\index.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\updates.dat (1158 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\G44ROL1L\e[1].htm (63 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Crypto\RSA\S-1-5-21-2858020935-2156992550-3658131804-1003\7caeededce1553090f0df0caf3b00dbd_c0322acd-5e5d-42f0-b163-c591ee6ff5b9 (80 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\G44ROL1L\i[2].gif (43 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\SH2TVRCI\aDT[1].js (49717 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\WDUL1PG1\jquery.min[1].js (48011 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\apps\72F0D3E2141065DACF6134D07A06A2DF20590748\btapp (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\G44ROL1L\fontawesome-webfont.7149833697a959306ec3012a8588dcfa[1].eot (22041 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\NZTBDB8O.txt (131 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\74BFD122C0875EC75DBE5C6DB4C59019 (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\8059E9A0D314877E40FE93D8CCFB3C69_8BB8535855D9B94D8D1B596BEE16137C (1432 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\7D1F03728133589A90656A87E482B21F (774 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\015JYUEX.txt (91 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\utt4A99.tmp (9835 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\G44ROL1L\ados[3].js (3910 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\apps\D944B3378FAB35793B7951FA53E41B2AB9CC462B\vid_thumb.jpg (23 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\apps\72F0D3E2141065DACF6134D07A06A2DF20590748\index.html (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\49514950C94E8026A2B06312597DFF49_F4692EBD578D04048E176E82BB8369BB (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\8059E9A0D314877E40FE93D8CCFB3C69_E1083B58096402790BB1984C8AAEEC87 (463 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\1A21JAPL.txt (819 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\FCD2CC3451EF5F3DB8D4B7DD511B2F77_DDE7C84CBB7658FC5D51C45EABF2444C (1544 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\IU3RAU2D.txt (93 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\USU4CORO\ados[2].js (4148 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\G44ROL1L\dSJYSyRlSBO6uf2DUVig_wallpaper_PWT-background_regular[1].jpg (200 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\D47DBD2F9E3365FBBE008D71FB06716F_835A2FD7EE5F1F37B7872C78D42A88BF (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\K88CNSUU.txt (116 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\G44ROL1L\jquery-1.11.2[2].js (141837 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\G44ROL1L\ados[1].js (14786 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\E5054B3FD90C2AE6E53B5EA495D10CC9_B12519B3E4D3C99979E3C33CFF793FC8 (1672 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\USU4CORO\ermTbT3RwG3fDTQDJ8Qw_TDI_SPITTA_01[1].jpg (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\0D6ED27B76F0582A8D2120DF24D1E180_B52DB0DD355A2D437E4D65686FF6F4AD (1448 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\SH2TVRCI\index[1].htm (315 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\USU4CORO\e[2].htm (65 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\apps\72F0D3E2141065DACF6134D07A06A2DF20590748\main.css (946 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\MOQ7E5EQ.txt (625 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\USU4CORO\collect[1].gif (35 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\WDUL1PG1\SpKeovSKKhpc05xbKpxA_wallpaper_act-of-killing[1].jpg (200 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\2427C246DCF85A06DD675914EDA68038_EEE52A74DEE31B064E156E492FD05217 (1480 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\G44ROL1L\base64[2].js (145 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\G44ROL1L\collect[1].gif (35 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\WDUL1PG1\E7iDd0h4StitPU8rOMMO_Diplo%20Bundle%20Background[1].jpg (200 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\G44ROL1L\bundles[1].json (761 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\8059E9A0D314877E40FE93D8CCFB3C69_6974D89D7560C032FD086BB9AE092DD4 (463 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\91ECFED5143F7F4F4576655D8EFAB51C_5876942B8A1533861E194CE520DB3C48 (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\dlimagecache\165F6EF40A81DD175FFAEA69E77ABFD30B27E71C (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\8890A77645B73478F5B1DED18ACBF795_1E5D470765E0BE1964814B1F5A3581DC (471 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\SH2TVRCI\icon[2].ico (200 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\utorrent.lng.new (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\955CAB6FF6A24D5820D50B5BA1CF79C7_0D0504E280D4BC90041F089A5D901106 (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\WDUL1PG1\fileserve[1].js (42281 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\TLUJZUVZ.txt (646 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\66XQBG1F.txt (92 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\74BFD122C0875EC75DBE5C6DB4C59019 (1104 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\apps\welcome-upsell.btapp (28 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\EDC238BFF48A31D55A97E1E93892934B_C20E0DA2D0F89FE526E1490F4A2EE5AB (1592 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\7D266D9E1E69FA1EEFB9699B009B34C8_8CA7164968F366C9A94AC8E71C4BDD9B (2716 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\WDUL1PG1\282332204[1].js (102510 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\YWL67B0B.txt (247 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\SH2TVRCI\7aea374f43834941bbb3fa6f934276d5[1].jpg (4392 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\WDUL1PG1\ados[1].js (11570 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\apps\D944B3378FAB35793B7951FA53E41B2AB9CC462B\x.png (265 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\apps\D944B3378FAB35793B7951FA53E41B2AB9CC462B\btapp (201 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\955CAB6FF6A24D5820D50B5BA1CF79C7_0D0504E280D4BC90041F089A5D901106 (1488 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\EDC238BFF48A31D55A97E1E93892934B_C20E0DA2D0F89FE526E1490F4A2EE5AB (471 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\223DE96EE265046957A660ED7C9DD9E7_EFF9B9BA98DEAA773F261FA85A0B1771 (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\FB788E090BC1F3AA2FBC9E8FB2859601 (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\SH2TVRCI\ados[1].js (11047 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\LQV6HNJ1.txt (284 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\SH2TVRCI\bundle_tab.ef32af05f3aa94062d4eab1263d94d8e.gz[1].css (29804 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\V2X1JOA9.txt (449 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\WDUL1PG1\base64[1].js (3646 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\apps\D944B3378FAB35793B7951FA53E41B2AB9CC462B\info_icon.png (250 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\apps\D944B3378FAB35793B7951FA53E41B2AB9CC462B\main.css (6 bytes)

The process uTorrent.exe:3024 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\utorrent.lng (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\dht.dat.new (845 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\utt8112.tmp.exe (50 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\resume.dat.new (59 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\dlimagecache\BBEEC0395D21A2A7F91889D7C7509F3D5D46FC05 (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\settings.dat.new (321 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\rss.dat.new (141 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\dlimagecache\10E6FBE4D921B475FA5FEC6E9A535A540D6FEED1 (318 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\dlimagecache\2D78C93EC367E6C1D9894103FA04B3BE5B20A84E (741 bytes)

The process utt8112.tmp.exe:3708 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\57C8EDB95DF3F0AD4EE2DC2B8CFD4157 (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\utt8F38.tmp.bat (93 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\77EC63BDA74BD0D0E0426DC8F8008506 (56 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\utt82C6.tmp.new (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\Tar869F.tmp (2784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\BR37U05L.txt (93 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\Cab869E.tmp (56 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\57C8EDB95DF3F0AD4EE2DC2B8CFD4157 (378 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\77EC63BDA74BD0D0E0426DC8F8008506 (370 bytes)

The process utt8112.tmp.exe:3896 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\Desktop\Ã‚ÂµTorrent.lnk (811 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\utt901F.tmp.new (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\maindoc.ico (63 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\apps\72F0D3E2141065DACF6134D07A06A2DF20590748\main.css (946 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\toolbar_offer.benc (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\apps\plus.btapp (765 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\uttA2F6.tmp.new (24 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\apps\72F0D3E2141065DACF6134D07A06A2DF20590748\icon.bmp (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\apps\72F0D3E2141065DACF6134D07A06A2DF20590748\index.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\utt699.tmp.exe (316 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\FJK2VIBX.txt (93 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\settings.dat.new (227 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\apps\D944B3378FAB35793B7951FA53E41B2AB9CC462B\index.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\updates.dat (579 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\apps\D944B3378FAB35793B7951FA53E41B2AB9CC462B\vid_thumb.jpg (23 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\utt3D44.tmp.new (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\apps\featuredContent.btapp (41 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\utt9C9E.tmp (603 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\toolbar.benc.new (61 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\apps\72F0D3E2141065DACF6134D07A06A2DF20590748\btapp (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\apps\welcome-upsell.btapp (28 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\apps\player.btapp (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\updates\3.4.2_37754.exe (10815 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\uttA1CD.tmp.new (61 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\apps\72F0D3E2141065DACF6134D07A06A2DF20590748\index.html (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Start Menu\Ã‚ÂµTorrent.lnk (791 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\apps\D944B3378FAB35793B7951FA53E41B2AB9CC462B\x.png (265 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Ã‚ÂµTorrent.lnk (791 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\apps\D944B3378FAB35793B7951FA53E41B2AB9CC462B\btapp (201 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\uTorrent.exe (50 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\apps\D944B3378FAB35793B7951FA53E41B2AB9CC462B\empty_movie.gif (282 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\apps\D944B3378FAB35793B7951FA53E41B2AB9CC462B\main.css (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Crypto\RSA\S-1-5-21-2858020935-2156992550-3658131804-1003\1f91d2d17ea675d4c2c3192e241743f9_c0322acd-5e5d-42f0-b163-c591ee6ff5b9 (105 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\apps\D944B3378FAB35793B7951FA53E41B2AB9CC462B\info_icon.png (250 bytes)

The process Skype.exe:1512 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\capsLock.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\normal\msa-logos-135x25.png (727 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\white-on-black\exclamation_20x20.png (513 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\white-on-black\button-middle-35x35@2x.png (331 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\normal\back_20x20-inverted@2x.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\languages\uk.js (883 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\fonts\segoe-ui-semibold-arabic.eot (2071 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\fonts\segoe-ui-light-greek.eot (29 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\css\retina\login.css (9 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\languages\nl.js (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\fonts\segoe-ui-light-cyrillic.ttf (1927 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\49514950C94E8026A2B06312597DFF49_33A0493B3756EC93EB52782457685E27 (1360 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\backgroundNoCloud.png (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\languages\pt.js (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\normal\button-darker-right-35x35@2x.png (884 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\languages\da.js (1828 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\languages\tr.js (987 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\retina\caret_left@2x.png (588 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\black-on-white\skype-logo-136x60@2x.png (1416 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\languages\et.js (1259 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\black-on-white\capslock_20x20@2x.png (620 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\black-on-white\arrow_up_20x20@2x.png (578 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\black-on-white\arrow_up_20x20.png (436 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\normal\exclamation_20x20.png (720 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\connection.png (865 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\black-on-white\button-right-35x35.png (867 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\white-on-black\back_20x20-inverted@2x.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\css\platform\mac.css (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\black-on-white\logo-xbox-25x25.png (965 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\languages\pl.js (9 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\normal\skype-logo-136x60@2x.png (10 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\retina\messageTopShort@2x.png (374 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\black-on-white\exclamation_20x20.png (515 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\white-on-black\skype-logo-136x60.png (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\white-on-black\logo-win-25x25@2x.png (908 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\normal\loader_15fps.gif (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\white-on-black\logo-skype-25x25.png (822 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\white-on-black\capslock_20x20@2x.png (620 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\fonts\segoe-ui-semibold-greek.woff (1985 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\languages\no.js (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\fonts\segoe-ui-regular-latin.woff (2039 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\black-on-white\logo-win-25x25.png (533 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\49514950C94E8026A2B06312597DFF49_33A0493B3756EC93EB52782457685E27 (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\languages\lt.js (10 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\white-on-black\button-right-35x35@2x.png (743 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\languages\el.js (672 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\loader.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\normal\skype-logo-136x60.png (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\white-on-black\dropdown_32x32@2x.png (370 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\white-on-black\dropdown_hover_32x32.png (267 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\retina\msAccount@2x.png (97 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\languages\ru.js (1198 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\black-on-white\capslock_20x20.png (380 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\fonts\segoe-ui-semibold-hebrew.eot (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\white-on-black\back_20x20-inverted.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\fonts\segoe-ui-regular-greek.ttf (2955 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\fonts\segoe-ui-light-latin.eot (2286 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\black-on-white\caret_right.png (823 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\white-on-black\ticked_not_10x10.png (191 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\05EC48341C277FE5110E7DFAA91377DC_39AA32012A618D407F0206C60DD48EA1 (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\fonts\segoe-ui-regular-hebrew.woff (9 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\languages\cs.js (11 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\white-on-black\capslock_20x20.png (380 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\fonts\segoe-ui-semibold-greek.eot (1762 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\retina\messageTop@2x.png (344 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\retina\background@2x.png (1847 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\normal\logo-office-25x25.png (783 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\picture.jpg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\css\platform\win.css (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\languages\es.js (9 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\black-on-white\ticked_10x10@2x.png (345 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\normal\button-right-35x35@2x.png (759 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\loader.gif (1089 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\black-on-white\ticked_not_10x10@2x.png (201 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\css\platform\unix.css (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\retina\messageBottomShort@2x.png (391 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\white-on-black\ticked_not_10x10@2x.png (201 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\languages\fi.js (9 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\black-on-white\button-middle-35x35@2x.png (331 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\fonts\segoe-ui-light-latin.ttf (6401 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\normal\button-darker-left-35x35.png (545 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\icons.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\fonts\segoe-ui-light-hebrew.eot (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\fonts\segoe-ui-light-cyrillic.eot (1032 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\white-on-black\logo-office-25x25.png (722 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\messageTop.png (265 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\fonts\segoe-ui-semibold-latin.woff (3956 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\msAccountOverlay.png (93 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\languages\ar.js (639 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\normal\arrow_up_20x20_8bit.png (220 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\black-on-white\caret_left.png (1338 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\msDefaultPicture.png (585 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\languages\bg.js (131 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\black-on-white\msa-logos-135x25.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\retina\skype@2x.png (560 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\fonts\segoe-ui-regular-arabic.ttf (2820 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\languages\ko.js (13 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login.md5 (34 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\white-on-black\logo-skype-25x25@2x.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\fonts\segoe-ui-light-arabic.eot (894 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Skype\shared_dynco\dc.db (284502 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\white-on-black\button-right-35x35.png (469 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\black-on-white\logo-xbox-25x25@2x.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\normal\loader_30fps.gif (1168 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\fonts\segoe-ui-light-greek.ttf (3156 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\white-on-black\arrow_up_20x20@2x.png (578 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\normal\logo-cloud-35x25@2x.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\normal\ticked_not_10x10@2x.png (201 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\inputfields.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\normal\button-left-35x35@2x.png (792 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\white-on-black\logo-xbox-25x25.png (956 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\black-on-white\dropdown_hover_32x32.png (256 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\languages\it.js (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\28EVKXMOTDQHUGYKIM9N.temp (893 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\facebook.png (315 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\normal\back_20x20-inverted.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\normal\button-darker-left-35x35@2x.png (900 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\fonts\segoe-ui-regular-cyrillic.eot (1147 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\normal\dropdown_32x32.png (269 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\languages\de.js (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\white-on-black\skype-logo-136x60@2x.png (229 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\retina\backgroundNoCloud@2x.png (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\normal\button-right-35x35.png (475 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\normal\ticked_10x10@2x.png (423 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\fonts\segoe-ui-semibold-latin.eot (3130 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\black-on-white\button-left-35x35@2x.png (753 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\normal\button-darker-middle-35x35.png (233 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\fonts\segoe-ui-regular-greek.woff (244 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\normal\button-darker-right-35x35.png (542 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\fonts\segoe-ui-regular-hebrew.eot (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\normal\logo-skype-25x25.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\fonts\segoe-ui-regular-latin.ttf (4737 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\normal\caret_left.png (998 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\css\login.css (904 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\languages\zh-hant.js (970 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\buttons.png (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\retina\icons@2x.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\skypelogo.png (1431 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\white-on-black\logo-office-25x25@2x.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\PU3JPNR3N5BCSUI2KWGE.temp (893 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\black-on-white\logo-skype-25x25.png (815 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\white-on-black\arrow_up_20x20.png (436 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\languages\ja.js (1229 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\messageBottomShort.png (279 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\black-on-white\exclamation_20x20@2x.png (796 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\fonts\segoe-ui-semibold-cyrillic.woff (319 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\retina\skypeicon@2x.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\retina\msAccountOverlay@2x.png (97 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\black-on-white\logo-office-25x25@2x.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\retina\msAccountColour@2x.png (132 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\normal\logo-xbox-25x25@2x.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\black-on-white\button-middle-35x35.png (230 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\languages\he.js (751 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\normal\logo-win-25x25.png (558 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\skypeicon.png (618 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\capsLockShort.png (328 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\black-on-white\button-left-35x35.png (469 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\black-on-white\back_20x20-inverted.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\0V5X2A8W.txt (123 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\fonts\segoe-ui-light-cyrillic.woff (1080 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\normal\msa-logos-135x25@2x.png (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\languages\sl.js (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\languages\vi.js (14 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\languages\hu.js (159 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\index.html (18 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\AC9005F5466BD463DF06D711B370595F (1152 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\black-on-white\dropdown_hover_32x32@2x.png (375 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\fonts\segoe-ui-semibold-greek.ttf (1933 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\black-on-white\back_20x20-inverted@2x.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\languages\id.js (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\black-on-white\ticked_not_10x10.png (191 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\normal\logo-win-25x25@2x.png (924 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\fonts\segoe-ui-semibold-cyrillic.ttf (1253 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\fonts\segoe-ui-semibold-hebrew.ttf (16 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\black-on-white\logo-cloud-35x25.png (837 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\fonts\segoe-ui-regular-arabic.woff (2926 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\4309200C3DBAD0F6F0DFACE9165FD092 (944 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\4309200C3DBAD0F6F0DFACE9165FD092 (727 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\js\login.js (4750 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Skype\shared_httpfe\queue.db (9692 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\languages\fr.js (9 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\black-on-white\skype-logo-136x60.png (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\SPCU5V2V.txt (345 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\normal\ticked_10x10.png (284 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\messageTopShort.png (256 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\normal\capslock_20x20@2x.png (781 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\fonts\segoe-ui-regular-cyrillic.woff (356 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\white-on-black\ticked_10x10.png (256 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\normal\back_20x20@2x.png (685 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\languages\zh-hans.js (11 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\fonts\segoe-ui-semibold-hebrew.woff (756 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\checkbox.png (551 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\white-on-black\back_20x20@2x.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\white-on-black\logo-cloud-35x25.png (839 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\retina\msDefaultPicture@2x.png (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\retina\buttons@2x.png (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\fonts\segoe-ui-regular-latin.eot (2674 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\normal\logo-office-25x25@2x.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\msAccount.png (93 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\languages\en.js (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\black-on-white\button-right-35x35@2x.png (698 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\background.png (13 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\white-on-black\back_20x20.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\logoanim.gif (14 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\white-on-black\exclamation_20x20@2x.png (799 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\normal\dropdown_hover_32x32.png (270 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\retina\caret_right@2x.png (609 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\normal\arrow_up_20x20.png (514 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\retina\inputfields@2x.png (421 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\white-on-black\logo-win-25x25.png (519 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\skype.png (697 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\AC9005F5466BD463DF06D711B370595F (69 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\black-on-white\dropdown_32x32.png (291 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\white-on-black\msa-logos-135x25.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\normal\dropdown_hover_32x32@2x.png (380 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\MJN04TU0U01NBGN0OEQ8.temp (893 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\black-on-white\msa-logos-135x25@2x.png (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\normal\capslock_20x20.png (466 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Skype\shared.tmp (4541 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\languages\ro.js (9 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\05EC48341C277FE5110E7DFAA91377DC_39AA32012A618D407F0206C60DD48EA1 (1456 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\retina\plus@2x.png (905 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\black-on-white\logo-win-25x25@2x.png (911 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Skype\DataRv\offline-storage-ecs.data (24 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\fonts\segoe-ui-light-hebrew.ttf (1419 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\languages\sk.js (594 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\black-on-white\dropdown_32x32@2x.png (375 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\white-on-black\dropdown_hover_32x32@2x.png (581 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\normal\caret_right.png (995 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\fonts\segoe-ui-semibold-arabic.ttf (3456 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\fonts\segoe-ui-semibold-arabic.woff (2319 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\fonts\segoe-ui-regular-hebrew.ttf (1682 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\black-on-white\back_20x20.png (399 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\fonts\segoe-ui-regular-cyrillic.ttf (1786 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\white-on-black\dropdown_32x32.png (267 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\retina\messageBottom@2x.png (477 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\fonts\segoe-ui-regular-arabic.eot (518 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\SH2TVRCI\externalSettings[1].js (77 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\white-on-black\ticked_10x10@2x.png (345 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\black-on-white\ticked_10x10.png (257 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\msAccountColour.png (118 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\fonts\segoe-ui-light-hebrew.woff (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\fonts\segoe-ui-light-arabic.woff (2084 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\white-on-black\button-left-35x35.png (492 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\languages\pt-br.js (1506 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\retina\checkbox@2x.png (794 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\normal\button-middle-35x35@2x.png (334 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\black-on-white\logo-cloud-35x25@2x.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\fonts\segoe-ui-regular-greek.eot (1046 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\black-on-white\back_20x20@2x.png (582 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\languages\th.js (1890 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\1IXV46O4.txt (585 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\normal\logo-skype-25x25@2x.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\normal\dropdown_32x32@2x.png (379 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\white-on-black\logo-xbox-25x25@2x.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\white-on-black\logo-cloud-35x25@2x.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\messageBottom.png (301 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\white-on-black\msa-logos-135x25@2x.png (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\fonts\segoe-ui-semibold-latin.ttf (4318 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Skype\shared_httpfe\queue.db-journal (22756 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\normal\logo-cloud-35x25.png (924 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\normal\logo-xbox-25x25.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\languages\sr-latn.js (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\normal\exclamation_20x20@2x.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\normal\arrow_up_20x20@2x.png (792 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\normal\back_20x20.png (452 bytes)
%Program Files% (x86)\Skype\Updater\Updater.dll (102 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\white-on-black\button-left-35x35@2x.png (829 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\plus.png (605 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\black-on-white\logo-office-25x25.png (718 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\dropdown.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\normal\button-left-35x35.png (489 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\retina\loader@2x.png (9 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\fonts\segoe-ui-light-latin.woff (3762 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Skype\shared_dynco\dc.db-journal (443115 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\normal\ticked_not_10x10.png (191 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\GEO56IBYK7XULHGRZBX0.temp (893 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\languages\sv.js (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\retina\facebook@2x.png (630 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\black-on-white\logo-skype-25x25@2x.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\fonts\segoe-ui-light-arabic.ttf (3174 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\normal\button-darker-middle-35x35@2x.png (335 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Skype\DataRv\offline-storage.data (90586 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\languages\hr.js (9 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\normal\button-middle-35x35.png (233 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\languages\ca.js (9 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\fonts\segoe-ui-light-greek.woff (1120 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\white-on-black\button-middle-35x35.png (230 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\retina\dropdown@2x.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\fonts\segoe-ui-semibold-cyrillic.eot (1952 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\languages\lv.js (114 bytes)

Registry activity

The process GoogleUpdate.exe:5112 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKCR\Google.OneClickCtrl.9]
"(Default)" = "Google Update Plugin"

[HKLM\SOFTWARE\Wow6432Node\Google\Update\Clients\{430FD4D0-B729-4F61-AA34-91526481799D}]
"pv" = "1.3.25.11"

[HKLM\SOFTWARE\Wow6432Node\Google\Update]
"UninstallCmdLine" = "%Program Files% (x86)\Google\Update\GoogleUpdate.exe /uninstall"

[HKCR\Wow6432Node\CLSID\{C442AC41-9200-4770-8CC0-7CDB4F245C55}\InprocServer32]
"ThreadingModel" = "Apartment"

[HKLM\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9]
"ProductName" = "Google Update"

[HKCR\Wow6432Node\CLSID\{C3101A8B-0EE1-4612-BFE9-41FFC1A3C19D}\InprocServer32]
"(Default)" = "%Program Files% (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll"

[HKLM\SOFTWARE\Wow6432Node\Google\Update]
"IsMSIHelperRegistered" = "0"

[HKLM\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Version" = "3"
"Description" = "Google Update"

[HKCR\Google.OneClickCtrl.9\CLSID]
"(Default)" = "{C442AC41-9200-4770-8CC0-7CDB4F245C55}"

[HKLM\SOFTWARE\Wow6432Node\Google\Update]
"Path" = "%Program Files% (x86)\Google\Update\GoogleUpdate.exe"

[HKCR\Google.Update3WebControl.3\CLSID]
"(Default)" = "{C3101A8B-0EE1-4612-BFE9-41FFC1A3C19D}"

[HKLM\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9]
"vendor" = "Google Inc."

[HKCR\Wow6432Node\CLSID\{C442AC41-9200-4770-8CC0-7CDB4F245C55}\ProgID]
"(Default)" = "Google.OneClickCtrl.9"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C3101A8B-0EE1-4612-BFE9-41FFC1A3C19D}]
"AppPath" = "%Program Files% (x86)\Google\Update\1.3.25.11"

[HKLM\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description" = "Google Update"

[HKLM\SOFTWARE\Wow6432Node\Google\Update\ClientState\{430FD4D0-B729-4F61-AA34-91526481799D}]
"UpdateTime" = "1422518360"

[HKCR\Wow6432Node\CLSID\{C3101A8B-0EE1-4612-BFE9-41FFC1A3C19D}\ProgID]
"(Default)" = "Google.Update3WebControl.3"

[HKLM\SOFTWARE\Wow6432Node\Google\Update]
"LastOSVersion" = "1C 01 00 00 06 00 00 00 01 00 00 00 B1 1D 00 00"

[HKLM\System\CurrentControlSet\Control\Session Manager]
"PendingFileRenameOperations" = "\??\C:\Users\"%CurrentUserName%"\AppData\Local\Temp\VMwareDnD\31ec1c24\PUPautoinsaller_v1.exe, , \??\C:\Users\"%CurrentUserName%"\AppData\Local\Temp\VMwareDnD\31ec1c24\, , \??\C:\Users\"%CurrentUserName%"\AppData\Local\Temp\VMwareDnD\6c88b866\python.dll, , \??\C:\Users\"%CurrentUserName%"\AppData\Local\Temp\VMwareDnD\6c88b866\, , \??\C:\Users\"%CurrentUserName%"\AppData\Local\Temp\OpenCandy_Why_Is_This_Here.txt, , \??\C:\Users\"%CurrentUserName%"\AppData\Local\Temp\utt9C9E.tmp, , \??\C:\Users\"%CurrentUserName%"\AppData\Local\Temp\, , \??\C:\Users\"%CurrentUserName%"\AppData\Roaming\OpenCandy\OpenCandy_AA4F1F00729C45A1B2127019AA750390\du73i.exe, , \??\%Program Files% (x86)\Google\Update\1.3.24.15,"

[HKLM\SOFTWARE\Wow6432Node\Google\Update\Clients\{430FD4D0-B729-4F61-AA34-91526481799D}]
"Name" = "Google Update"

[HKCR\MIME\Database\Content Type\application/x-vnd.google.update3webcontrol.3]
"CLSID" = "{C3101A8B-0EE1-4612-BFE9-41FFC1A3C19D}"

[HKCR\Wow6432Node\CLSID\{C3101A8B-0EE1-4612-BFE9-41FFC1A3C19D}\InprocServer32]
"ThreadingModel" = "Apartment"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C442AC41-9200-4770-8CC0-7CDB4F245C55}]
"AppPath" = "%Program Files% (x86)\Google\Update"

[HKLM\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3]
"ProductName" = "Google Update"

[HKCR\Wow6432Node\CLSID\{C442AC41-9200-4770-8CC0-7CDB4F245C55}\Implemented Categories\{59FB2056-D625-48D0-A944-1A85B5AB2640}]
"(Default)" = "CATID_AppContainerCompatible"

[HKLM\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Path" = "%Program Files% (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C442AC41-9200-4770-8CC0-7CDB4F245C55}]
"Policy" = "3"

[HKCR\Google.Update3WebControl.3]
"(Default)" = "Google Update Plugin"

[HKLM\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Version" = "9"

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\GoogleUpdate.exe]
"DisableExceptionChainValidation" = "0"

[HKLM\SOFTWARE\Wow6432Node\Google\Update\ClientState\{430FD4D0-B729-4F61-AA34-91526481799D}]
"pv" = "1.3.25.11"

[HKCR\Wow6432Node\CLSID\{C442AC41-9200-4770-8CC0-7CDB4F245C55}\InprocServer32]
"(Default)" = "%Program Files% (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll"

[HKLM\SOFTWARE\Wow6432Node\Google\Update\ClientState\{430FD4D0-B729-4F61-AA34-91526481799D}]
"LastCheckSuccess" = "1422518360"

[HKCR\Wow6432Node\CLSID\{C3101A8B-0EE1-4612-BFE9-41FFC1A3C19D}]
"(Default)" = "Google Update Plugin"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C3101A8B-0EE1-4612-BFE9-41FFC1A3C19D}]
"AppName" = "GoogleUpdateBroker.exe"

[HKLM\SOFTWARE\Wow6432Node\Google\Update]
"Version" = "1.3.25.11"

[HKLM\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3]
"vendor" = "Google Inc."
"Path" = "%Program Files% (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C3101A8B-0EE1-4612-BFE9-41FFC1A3C19D}]
"Policy" = "3"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C442AC41-9200-4770-8CC0-7CDB4F245C55}]
"AppName" = "GoogleUpdate.exe"

[HKCR\MIME\Database\Content Type\application/x-vnd.google.oneclickctrl.9]
"CLSID" = "{C442AC41-9200-4770-8CC0-7CDB4F245C55}"

[HKCR\Wow6432Node\CLSID\{C442AC41-9200-4770-8CC0-7CDB4F245C55}]
"(Default)" = "Google Update Plugin"

[HKCR\Wow6432Node\CLSID\{C3101A8B-0EE1-4612-BFE9-41FFC1A3C19D}\Implemented Categories\{59FB2056-D625-48D0-A944-1A85B5AB2640}]
"(Default)" = "CATID_AppContainerCompatible"

The Trojan deletes the following registry key(s):

[HKCR\Wow6432Node\CLSID\{C442AC41-9200-4770-8CC0-7CDB4F245C55}\Implemented Categories]
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Ext\Stats\{C442AC41-9200-4770-8CC0-7CDB4F245C55}\iexplore\AllowedDomains\*]
[HKCR\Wow6432Node\CLSID\{C3101A8B-0EE1-4612-BFE9-41FFC1A3C19D}\Implemented Categories\{59FB2056-D625-48D0-A944-1A85B5AB2640}]
[HKCR\Wow6432Node\CLSID\{C442AC41-9200-4770-8CC0-7CDB4F245C55}\ProgID]
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Ext\Stats\{C442AC41-9200-4770-8CC0-7CDB4F245C55}\iexplore]
[HKCR\Wow6432Node\CLSID\{C3101A8B-0EE1-4612-BFE9-41FFC1A3C19D}\InprocServer32]
[HKLM\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3]
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Ext\Stats\{C3101A8B-0EE1-4612-BFE9-41FFC1A3C19D}\iexplore]
[HKLM\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3\MimeTypes\application/x-vnd.google.update3webcontrol.3]
[HKLM\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9]
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C442AC41-9200-4770-8CC0-7CDB4F245C55}]
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{C442AC41-9200-4770-8CC0-7CDB4F245C55}]
[HKCR\Wow6432Node\CLSID\{C3101A8B-0EE1-4612-BFE9-41FFC1A3C19D}\Implemented Categories]
[HKCR\Wow6432Node\CLSID\{C442AC41-9200-4770-8CC0-7CDB4F245C55}\InprocServer32]
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{C3101A8B-0EE1-4612-BFE9-41FFC1A3C19D}]
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C3101A8B-0EE1-4612-BFE9-41FFC1A3C19D}]
[HKCR\Wow6432Node\CLSID\{C442AC41-9200-4770-8CC0-7CDB4F245C55}\Implemented Categories\{59FB2056-D625-48D0-A944-1A85B5AB2640}]
[HKCR\Google.Update3WebControl.3]
[HKCR\Google.Update3WebControl.3\CLSID]
[HKCR\Google.OneClickCtrl.9]
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Ext\Stats\{C442AC41-9200-4770-8CC0-7CDB4F245C55}]
[HKCR\Google.OneClickCtrl.9\CLSID]
[HKCR\Wow6432Node\CLSID\{C3101A8B-0EE1-4612-BFE9-41FFC1A3C19D}\ProgID]
[HKCR\Wow6432Node\CLSID\{C442AC41-9200-4770-8CC0-7CDB4F245C55}]
[HKCR\MIME\Database\Content Type\application/x-vnd.google.oneclickctrl.9]
[HKLM\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9\MimeTypes\application/x-vnd.google.oneclickctrl.9]
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Ext\Stats\{C3101A8B-0EE1-4612-BFE9-41FFC1A3C19D}\iexplore\AllowedDomains]
[HKCR\MIME\Database\Content Type\application/x-vnd.google.update3webcontrol.3]
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Ext\Stats\{C3101A8B-0EE1-4612-BFE9-41FFC1A3C19D}]
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Ext\Stats\{C442AC41-9200-4770-8CC0-7CDB4F245C55}\iexplore\AllowedDomains]
[HKLM\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9\MimeTypes]
[HKCR\Wow6432Node\CLSID\{C3101A8B-0EE1-4612-BFE9-41FFC1A3C19D}]
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Ext\Stats\{C3101A8B-0EE1-4612-BFE9-41FFC1A3C19D}\iexplore\AllowedDomains\*]
[HKLM\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3\MimeTypes]

The Trojan deletes the following value(s) in system registry:

[HKCR\Wow6432Node\CLSID\{C442AC41-9200-4770-8CC0-7CDB4F245C55}\InprocServer32]
"ThreadingModel"

[HKLM\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9]
"ProductName"

[HKLM\SOFTWARE\Wow6432Node\Google\Update\ClientState\{430FD4D0-B729-4F61-AA34-91526481799D}]
"UpdateAvailableCount"

[HKLM\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Version"
"Description"

[HKLM\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Vendor"

[HKLM\SOFTWARE\Wow6432Node\Google\Update]
"ui"

[HKLM\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"

[HKLM\SOFTWARE\Wow6432Node\Google\Update]
"LastChecked"

[HKCR\MIME\Database\Content Type\application/x-vnd.google.update3webcontrol.3]
"CLSID"

[HKCR\Wow6432Node\CLSID\{C3101A8B-0EE1-4612-BFE9-41FFC1A3C19D}\InprocServer32]
"ThreadingModel"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C442AC41-9200-4770-8CC0-7CDB4F245C55}]
"AppPath"

[HKLM\SOFTWARE\Wow6432Node\Google\Update]
"mi"
"old-uid"

[HKLM\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3]
"ProductName"
"Vendor"

[HKLM\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Path"

[HKLM\SOFTWARE\Wow6432Node\Google\Update]
"uid"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C442AC41-9200-4770-8CC0-7CDB4F245C55}]
"Policy"

[HKLM\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Version"

[HKLM\SOFTWARE\Wow6432Node\Google\Update]
"eulaaccepted"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C3101A8B-0EE1-4612-BFE9-41FFC1A3C19D}]
"AppName"

[HKLM\SOFTWARE\Wow6432Node\Google\Update\ClientState\{430FD4D0-B729-4F61-AA34-91526481799D}]
"UpdateAvailableSince"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C3101A8B-0EE1-4612-BFE9-41FFC1A3C19D}]
"AppPath"

[HKLM\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Path"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C3101A8B-0EE1-4612-BFE9-41FFC1A3C19D}]
"Policy"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C442AC41-9200-4770-8CC0-7CDB4F245C55}]
"AppName"

[HKCR\MIME\Database\Content Type\application/x-vnd.google.oneclickctrl.9]
"CLSID"

[HKLM\SOFTWARE\Wow6432Node\Google\Update]
"LastCodeRedCheck"

The process GoogleUpdate.exe:1964 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKCR\Wow6432Node\CLSID\{9465B4B4-5216-4042-9A2C-754D3BCDC410}]
"AppID" = "{9465B4B4-5216-4042-9A2C-754D3BCDC410}"

[HKCR\GoogleUpdate.Update3COMClassService]
"(Default)" = "Update3COMClass"

[HKCR\GoogleUpdate.OnDemandCOMClassSvc]
"(Default)" = "Google Update Legacy On Demand"

[HKCR\GoogleUpdate.Update3COMClassService\CLSID]
"(Default)" = "{4EB61BAC-A3B6-4760-9581-655041EF4D69}"

[HKCR\Wow6432Node\CLSID\{9465B4B4-5216-4042-9A2C-754D3BCDC410}\VersionIndependentProgID]
"(Default)" = "GoogleUpdate.OnDemandCOMClassSvc"

[HKCR\GoogleUpdate.CoreClass.1]
"(Default)" = "Google Update Core Class"

[HKCR\GoogleUpdate.Update3WebSvc\CLSID]
"(Default)" = "{534F5323-3569-4F42-919D-1E1CF93E5BF6}"

[HKCR\GoogleUpdate.Update3COMClassService.1.0\CLSID]
"(Default)" = "{4EB61BAC-A3B6-4760-9581-655041EF4D69}"

[HKCR\GoogleUpdate.Update3WebSvc.1.0\CLSID]
"(Default)" = "{534F5323-3569-4F42-919D-1E1CF93E5BF6}"

[HKCR\Wow6432Node\CLSID\{9465B4B4-5216-4042-9A2C-754D3BCDC410}]
"(Default)" = "Google Update Legacy On Demand"

[HKCR\Wow6432Node\CLSID\{E225E692-4B47-4777-9BED-4FD7FE257F0E}]
"(Default)" = "Google Update Core Class"

[HKCR\GoogleUpdate.Update3COMClassService.1.0]
"(Default)" = "Update3COMClass"

[HKCR\AppID\GoogleUpdate.exe]
"AppID" = "{4EB61BAC-A3B6-4760-9581-655041EF4D69}"

[HKCR\AppID\{9465B4B4-5216-4042-9A2C-754D3BCDC410}]
"(Default)" = "ServiceModule"

[HKCR\Wow6432Node\CLSID\{4EB61BAC-A3B6-4760-9581-655041EF4D69}]
"(Default)" = "Update3COMClass"

[HKCR\AppID\{4EB61BAC-A3B6-4760-9581-655041EF4D69}]
"(Default)" = "ServiceModule"

[HKCR\Wow6432Node\CLSID\{E225E692-4B47-4777-9BED-4FD7FE257F0E}]
"AppID" = "{9465B4B4-5216-4042-9A2C-754D3BCDC410}"

[HKCR\AppID\{9465B4B4-5216-4042-9A2C-754D3BCDC410}]
"LocalService" = "gupdatem"

[HKCR\Wow6432Node\CLSID\{4EB61BAC-A3B6-4760-9581-655041EF4D69}\ProgID]
"(Default)" = "GoogleUpdate.Update3COMClassService.1.0"

[HKCR\Wow6432Node\CLSID\{9465B4B4-5216-4042-9A2C-754D3BCDC410}\ProgID]
"(Default)" = "GoogleUpdate.OnDemandCOMClassSvc.1.0"

[HKCR\GoogleUpdate.Update3WebSvc.1.0]
"(Default)" = "GoogleUpdate Update3Web"

[HKCR\Wow6432Node\CLSID\{4EB61BAC-A3B6-4760-9581-655041EF4D69}\VersionIndependentProgID]
"(Default)" = "GoogleUpdate.Update3COMClassService"

[HKCR\Wow6432Node\CLSID\{534F5323-3569-4F42-919D-1E1CF93E5BF6}\ProgID]
"(Default)" = "GoogleUpdate.Update3WebSvc.1.0"

[HKCR\GoogleUpdate.Update3WebSvc]
"(Default)" = "GoogleUpdate Update3Web"

[HKCR\Wow6432Node\CLSID\{534F5323-3569-4F42-919D-1E1CF93E5BF6}]
"(Default)" = "GoogleUpdate Update3Web"

[HKCR\GoogleUpdate.Update3WebSvc\CurVer]
"(Default)" = "GoogleUpdate.Update3WebSvc.1.0"

[HKCR\Wow6432Node\CLSID\{4EB61BAC-A3B6-4760-9581-655041EF4D69}]
"AppID" = "{4EB61BAC-A3B6-4760-9581-655041EF4D69}"

[HKCR\AppID\{4EB61BAC-A3B6-4760-9581-655041EF4D69}]
"ServiceParameters" = "/comsvc"

[HKCR\Wow6432Node\CLSID\{534F5323-3569-4F42-919D-1E1CF93E5BF6}\VersionIndependentProgID]
"(Default)" = "GoogleUpdate.Update3WebSvc"

[HKCR\GoogleUpdate.CoreClass\CurVer]
"(Default)" = "GoogleUpdate.CoreClass.1"

[HKCR\Wow6432Node\CLSID\{534F5323-3569-4F42-919D-1E1CF93E5BF6}]
"AppID" = "{9465B4B4-5216-4042-9A2C-754D3BCDC410}"

[HKCR\GoogleUpdate.CoreClass]
"(Default)" = "Google Update Core Class"

[HKCR\AppID\{4EB61BAC-A3B6-4760-9581-655041EF4D69}]
"LocalService" = "gupdate"

[HKCR\GoogleUpdate.CoreClass.1\CLSID]
"(Default)" = "{E225E692-4B47-4777-9BED-4FD7FE257F0E}"

[HKCR\GoogleUpdate.Update3COMClassService\CurVer]
"(Default)" = "GoogleUpdate.Update3COMClassService.1.0"

[HKCR\GoogleUpdate.OnDemandCOMClassSvc.1.0]
"(Default)" = "Google Update Legacy On Demand"

[HKCR\Wow6432Node\CLSID\{E225E692-4B47-4777-9BED-4FD7FE257F0E}\VersionIndependentProgID]
"(Default)" = "GoogleUpdate.CoreClass"

[HKCR\GoogleUpdate.OnDemandCOMClassSvc.1.0\CLSID]
"(Default)" = "{9465B4B4-5216-4042-9A2C-754D3BCDC410}"

[HKCR\AppID\{9465B4B4-5216-4042-9A2C-754D3BCDC410}]
"ServiceParameters" = "/comsvc"

[HKCR\Wow6432Node\CLSID\{E225E692-4B47-4777-9BED-4FD7FE257F0E}\ProgID]
"(Default)" = "GoogleUpdate.CoreClass.1"

[HKCR\GoogleUpdate.OnDemandCOMClassSvc\CLSID]
"(Default)" = "{9465B4B4-5216-4042-9A2C-754D3BCDC410}"

[HKCR\GoogleUpdate.OnDemandCOMClassSvc\CurVer]
"(Default)" = "GoogleUpdate.OnDemandCOMClassSvc.1.0"

[HKCR\GoogleUpdate.CoreClass\CLSID]
"(Default)" = "{E225E692-4B47-4777-9BED-4FD7FE257F0E}"

The Trojan deletes the following registry key(s):

[HKCR\Wow6432Node\CLSID\{E225E692-4B47-4777-9BED-4FD7FE257F0E}\VersionIndependentProgID]
[HKCR\Wow6432Node\CLSID\{4EB61BAC-A3B6-4760-9581-655041EF4D69}\VersionIndependentProgID]
[HKCR\Wow6432Node\CLSID\{E225E692-4B47-4777-9BED-4FD7FE257F0E}\ProgID]
[HKCR\Wow6432Node\CLSID\{9465B4B4-5216-4042-9A2C-754D3BCDC410}\ProgID]
[HKCR\Wow6432Node\CLSID\{4EB61BAC-A3B6-4760-9581-655041EF4D69}]
[HKCR\Wow6432Node\CLSID\{E225E692-4B47-4777-9BED-4FD7FE257F0E}]
[HKCR\Wow6432Node\CLSID\{534F5323-3569-4F42-919D-1E1CF93E5BF6}]
[HKCR\AppID\{4EB61BAC-A3B6-4760-9581-655041EF4D69}]
[HKCR\Wow6432Node\CLSID\{9465B4B4-5216-4042-9A2C-754D3BCDC410}\VersionIndependentProgID]
[HKCR\Wow6432Node\CLSID\{534F5323-3569-4F42-919D-1E1CF93E5BF6}\ProgID]
[HKCR\AppID\{9465B4B4-5216-4042-9A2C-754D3BCDC410}]
[HKCR\Wow6432Node\CLSID\{4EB61BAC-A3B6-4760-9581-655041EF4D69}\ProgID]
[HKCR\Wow6432Node\CLSID\{9465B4B4-5216-4042-9A2C-754D3BCDC410}]
[HKCR\AppID\GoogleUpdate.exe]
[HKCR\Wow6432Node\CLSID\{534F5323-3569-4F42-919D-1E1CF93E5BF6}\VersionIndependentProgID]

The Trojan deletes the following value(s) in system registry:

[HKLM\SOFTWARE\Wow6432Node\Google\Update]
"uid"
"old-uid"

The process GoogleUpdate.exe:4740 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKCR\Wow6432Node\CLSID\{25461599-633D-42B1-84FB-7CD68D026E53}\LocalServer32]
"(Default)" = "%Program Files% (x86)\Google\Update\1.3.25.11\GoogleUpdateOnDemand.exe"

[HKCR\GoogleUpdate.OnDemandCOMClassMachineFallback.1.0\CLSID]
"(Default)" = "{B3D28DBD-0DFA-40E4-8071-520767BADC7E}"

[HKCR\Wow6432Node\Interface\{084D78A8-B084-4E14-A629-A2C419B0E3D9}\ProxyStubClsid32]
"(Default)" = "{9B7F0841-B9EA-4E79-8483-D7D626814A2F}"

[HKCR\GoogleUpdate.Update3WebMachineFallback.1.0]
"(Default)" = "GoogleUpdate Update3Web"

[HKCR\Wow6432Node\CLSID\{7DE94008-8AFD-4C70-9728-C6FBFFF6A73E}\VersionIndependentProgID]
"(Default)" = "GoogleUpdate.CoCreateAsync"

[HKCR\GoogleUpdate.CoreMachineClass\CLSID]
"(Default)" = "{9B2340A0-4068-43D6-B404-32E27217859D}"

[HKCR\Wow6432Node\CLSID\{6F8BD55B-E83D-4A47-85BE-81FFA8057A69}\LocalServer32]
"(Default)" = "%Program Files% (x86)\Google\Update\1.3.25.11\GoogleUpdateBroker.exe"

[HKCR\Wow6432Node\Interface\{247954F9-9EDC-4E68-8CC3-150C2B89EADF}\NumMethods]
"(Default)" = "24"

[HKCR\Wow6432Node\Interface\{76F7B787-A67C-4C73-82C7-31F5E3AABC5C}\NumMethods]
"(Default)" = "41"

[HKCR\Wow6432Node\Interface\{6DB17455-4E85-46E7-9D23-E555E4B005AF}\ProxyStubClsid32]
"(Default)" = "{9B7F0841-B9EA-4E79-8483-D7D626814A2F}"

[HKCR\Wow6432Node\CLSID\{9D6AA569-9F30-41AD-885A-346685C74928}\InprocServer32]
"ThreadingModel" = "Both"

[HKCR\Wow6432Node\Interface\{3D05F64F-71E3-48A5-BF6B-83315BC8AE1F}\NumMethods]
"(Default)" = "12"

[HKCR\Wow6432Node\Interface\{2D363682-561D-4C3A-81C6-F2F82107562A}\NumMethods]
"(Default)" = "4"

[HKCR\Wow6432Node\Interface\{128C2DA6-2BC0-44C0-B3F6-4EC22E647964}]
"(Default)" = "IProcessLauncher"

[HKCR\Wow6432Node\Interface\{2D363682-561D-4C3A-81C6-F2F82107562A}\ProxyStubClsid32]
"(Default)" = "{9B7F0841-B9EA-4E79-8483-D7D626814A2F}"

[HKCR\GoogleUpdate.CoCreateAsync\CLSID]
"(Default)" = "{7DE94008-8AFD-4C70-9728-C6FBFFF6A73E}"

[HKCR\Wow6432Node\CLSID\{8A1D4361-2C08-4700-A351-3EAA9CBFF5E4}]
"LocalizedString" = "@%Program Files% (x86)\Google\Update\1.3.25.11\goopdate.dll,-3000"

[HKCR\Wow6432Node\Interface\{DCAB8386-4F03-4DBD-A366-D90BC9F68DE6}\NumMethods]
"(Default)" = "10"

[HKCR\Wow6432Node\Interface\{DAB1D343-1B2A-47F9-B445-93DC50704BFE}\NumMethods]
"(Default)" = "4"

[HKCR\Wow6432Node\CLSID\{7DE94008-8AFD-4C70-9728-C6FBFFF6A73E}\LocalServer32]
"(Default)" = "%Program Files% (x86)\Google\Update\1.3.25.11\GoogleUpdateBroker.exe"

[HKCR\Wow6432Node\CLSID\{598FE0E5-E02D-465D-9A9D-37974A28FD42}\Elevation]
"Enabled" = "1"

[HKCR\GoogleUpdate.Update3WebMachine\CurVer]
"(Default)" = "GoogleUpdate.Update3WebMachine.1.0"

[HKCR\Wow6432Node\CLSID\{9B7F0841-B9EA-4E79-8483-D7D626814A2F}\InProcServer32]
"(Default)" = "%Program Files% (x86)\Google\Update\1.3.25.11\psmachine.dll"

[HKCR\Wow6432Node\Interface\{2E629606-312A-482F-9B12-2C4ABF6F0B6D}\ProxyStubClsid32]
"(Default)" = "{9B7F0841-B9EA-4E79-8483-D7D626814A2F}"

[HKCR\Wow6432Node\CLSID\{598FE0E5-E02D-465D-9A9D-37974A28FD42}]
"(Default)" = "GoogleUpdate Update3Web"

[HKCR\Wow6432Node\CLSID\{9B2340A0-4068-43D6-B404-32E27217859D}]
"LocalizedString" = "@%Program Files% (x86)\Google\Update\1.3.25.11\goopdate.dll,-3000"

[HKCR\Wow6432Node\Interface\{B3A47570-0A85-4AEA-8270-529D47899603}\NumMethods]
"(Default)" = "4"

[HKCR\Wow6432Node\Interface\{D106AB5F-A70E-400E-A21B-96208C1D8DBB}\NumMethods]
"(Default)" = "7"

[HKCR\Wow6432Node\Interface\{128C2DA6-2BC0-44C0-B3F6-4EC22E647964}\NumMethods]
"(Default)" = "6"

[HKCR\GoogleUpdate.CoreMachineClass.1\CLSID]
"(Default)" = "{9B2340A0-4068-43D6-B404-32E27217859D}"

[HKCR\Wow6432Node\Interface\{76F7B787-A67C-4C73-82C7-31F5E3AABC5C}\ProxyStubClsid32]
"(Default)" = "{9B7F0841-B9EA-4E79-8483-D7D626814A2F}"

[HKCR\GoogleUpdate.CoreMachineClass\CurVer]
"(Default)" = "GoogleUpdate.CoreMachineClass.1"

[HKCR\Wow6432Node\CLSID\{8A1D4361-2C08-4700-A351-3EAA9CBFF5E4}\Elevation]
"Enabled" = "1"

[HKCR\Wow6432Node\Interface\{6DB17455-4E85-46E7-9D23-E555E4B005AF}\NumMethods]
"(Default)" = "10"

[HKCR\Wow6432Node\CLSID\{6F8BD55B-E83D-4A47-85BE-81FFA8057A69}]
"LocalizedString" = "@%Program Files% (x86)\Google\Update\1.3.25.11\goopdate.dll,-3000"

[HKCR\GoogleUpdate.CoreMachineClass]
"(Default)" = "Google Update Core Class"

[HKCR\Wow6432Node\CLSID\{B3D28DBD-0DFA-40E4-8071-520767BADC7E}]
"LocalizedString" = "@%Program Files% (x86)\Google\Update\1.3.25.11\goopdate.dll,-3000"

[HKCR\Wow6432Node\Interface\{DAB1D343-1B2A-47F9-B445-93DC50704BFE}\ProxyStubClsid32]
"(Default)" = "{9B7F0841-B9EA-4E79-8483-D7D626814A2F}"

[HKCR\Wow6432Node\CLSID\{AAD4AE2E-D834-46D4-8B09-490FAC9C722B}\VersionIndependentProgID]
"(Default)" = "Google.OneClickProcessLauncherMachine"

[HKCR\Wow6432Node\Interface\{494B20CF-282E-4BDD-9F5D-B70CB09D351E}\NumMethods]
"(Default)" = "8"

[HKCR\Google.OneClickProcessLauncherMachine\CLSID]
"(Default)" = "{AAD4AE2E-D834-46D4-8B09-490FAC9C722B}"

[HKCR\Wow6432Node\CLSID\{7DE94008-8AFD-4C70-9728-C6FBFFF6A73E}\ProgID]
"(Default)" = "GoogleUpdate.CoCreateAsync.1.0"

[HKCR\Wow6432Node\Interface\{0CD01D1E-4A1C-489D-93B9-9B6672877C57}]
"(Default)" = "IAppVersionWeb"

[HKCR\Wow6432Node\Interface\{FE908CDD-22BB-472A-9870-1A0390E42F36}]
"(Default)" = "IAppBundle"

[HKCR\Wow6432Node\CLSID\{9B2340A0-4068-43D6-B404-32E27217859D}\LocalServer32]
"(Default)" = "%Program Files% (x86)\Google\Update\1.3.25.11\GoogleUpdateOnDemand.exe"

[HKCR\Wow6432Node\Interface\{4DE778FE-F195-4EE3-9DAB-FE446C239221}]
"(Default)" = "IAppCommand"

[HKCR\Google.OneClickProcessLauncherMachine\CurVer]
"(Default)" = "Google.OneClickProcessLauncherMachine.1.0"

[HKCR\GoogleUpdate.Update3WebMachineFallback\CLSID]
"(Default)" = "{598FE0E5-E02D-465D-9A9D-37974A28FD42}"

[HKCR\GoogleUpdate.OnDemandCOMClassMachineFallback\CLSID]
"(Default)" = "{B3D28DBD-0DFA-40E4-8071-520767BADC7E}"

[HKCR\Wow6432Node\Interface\{DCAB8386-4F03-4DBD-A366-D90BC9F68DE6}]
"(Default)" = "IPackage"

[HKCR\Wow6432Node\CLSID\{ABC01078-F197-4B0B-ADBC-CFE684B39C82}]
"(Default)" = "Google Update Process Launcher Class"

[HKCR\Wow6432Node\CLSID\{B3D28DBD-0DFA-40E4-8071-520767BADC7E}\LocalServer32]
"(Default)" = "%Program Files% (x86)\Google\Update\1.3.25.11\GoogleUpdateOnDemand.exe"

[HKCR\Wow6432Node\CLSID\{6F8BD55B-E83D-4A47-85BE-81FFA8057A69}\Elevation]
"Enabled" = "1"

[HKCR\Wow6432Node\CLSID\{B3D28DBD-0DFA-40E4-8071-520767BADC7E}]
"(Default)" = "Google Update Legacy On Demand"

[HKCR\Wow6432Node\CLSID\{B3D28DBD-0DFA-40E4-8071-520767BADC7E}\Elevation]
"IconReference" = "@%Program Files% (x86)\Google\Update\1.3.25.11\goopdate.dll,-1004"

[HKCR\Wow6432Node\Interface\{BCDCB538-01C0-46D1-A6A7-52F4D021C272}\ProxyStubClsid32]
"(Default)" = "{9B7F0841-B9EA-4E79-8483-D7D626814A2F}"

[HKCR\Wow6432Node\Interface\{5CCCB0EF-7073-4516-8028-4C628D0C8AAB}\NumMethods]
"(Default)" = "4"

[HKCR\Wow6432Node\Interface\{2E629606-312A-482F-9B12-2C4ABF6F0B6D}]
"(Default)" = "ICoCreateAsyncStatus"

[HKCR\Wow6432Node\CLSID\{7DE94008-8AFD-4C70-9728-C6FBFFF6A73E}]
"(Default)" = "CoCreateAsync"

[HKCR\Wow6432Node\Interface\{49D7563B-2DDB-4831-88C8-768A53833837}\ProxyStubClsid32]
"(Default)" = "{9B7F0841-B9EA-4E79-8483-D7D626814A2F}"

[HKCR\Wow6432Node\CLSID\{8A1D4361-2C08-4700-A351-3EAA9CBFF5E4}\VersionIndependentProgID]
"(Default)" = "GoogleUpdate.Update3WebMachine"

[HKCR\Wow6432Node\CLSID\{6F8BD55B-E83D-4A47-85BE-81FFA8057A69}\VersionIndependentProgID]
"(Default)" = "GoogleUpdate.OnDemandCOMClassMachine"

[HKCR\Wow6432Node\Interface\{2D363682-561D-4C3A-81C6-F2F82107562A}]
"(Default)" = "IGoogleUpdate3WebSecurity"

[HKCR\GoogleUpdate.CredentialDialogMachine.1.0\CLSID]
"(Default)" = "{25461599-633D-42B1-84FB-7CD68D026E53}"

[HKCR\Wow6432Node\CLSID\{598FE0E5-E02D-465D-9A9D-37974A28FD42}\LocalServer32]
"(Default)" = "%Program Files% (x86)\Google\Update\1.3.25.11\GoogleUpdateOnDemand.exe"

[HKCR\Wow6432Node\Interface\{D106AB5F-A70E-400E-A21B-96208C1D8DBB}]
"(Default)" = "IProcessLauncher2"

[HKCR\Wow6432Node\CLSID\{8A1D4361-2C08-4700-A351-3EAA9CBFF5E4}]
"(Default)" = "Google Update Broker Class Factory"

[HKCR\GoogleUpdate.Update3WebMachine]
"(Default)" = "Google Update Broker Class Factory"

[HKCR\Google.OneClickProcessLauncherMachine]
"(Default)" = "Google.OneClickProcessLauncher"

[HKCR\GoogleUpdate.CredentialDialogMachine.1.0]
"(Default)" = "GoogleUpdate CredentialDialog"

[HKCR\GoogleUpdate.ProcessLauncher\CurVer]
"(Default)" = "GoogleUpdate.ProcessLauncher.1.0"

[HKCR\Wow6432Node\Interface\{31AC3F11-E5EA-4A85-8A3D-8E095A39C27B}\NumMethods]
"(Default)" = "5"

[HKCR\Wow6432Node\CLSID\{6F8BD55B-E83D-4A47-85BE-81FFA8057A69}\Elevation]
"IconReference" = "@%Program Files% (x86)\Google\Update\1.3.25.11\goopdate.dll,-1004"

[HKCR\Wow6432Node\Interface\{49D7563B-2DDB-4831-88C8-768A53833837}\NumMethods]
"(Default)" = "13"

[HKCR\Wow6432Node\Interface\{B3A47570-0A85-4AEA-8270-529D47899603}]
"(Default)" = "ICredentialDialog"

[HKCR\GoogleUpdate.Update3WebMachine.1.0]
"(Default)" = "Google Update Broker Class Factory"

[HKCR\Wow6432Node\Interface\{31AC3F11-E5EA-4A85-8A3D-8E095A39C27B}]
"(Default)" = "IGoogleUpdate"

[HKCR\Wow6432Node\Interface\{128C2DA6-2BC0-44C0-B3F6-4EC22E647964}\ProxyStubClsid32]
"(Default)" = "{9B7F0841-B9EA-4E79-8483-D7D626814A2F}"

[HKCR\GoogleUpdate.OnDemandCOMClassMachine.1.0\CLSID]
"(Default)" = "{6F8BD55B-E83D-4A47-85BE-81FFA8057A69}"

[HKCR\Wow6432Node\CLSID\{598FE0E5-E02D-465D-9A9D-37974A28FD42}\VersionIndependentProgID]
"(Default)" = "GoogleUpdate.Update3WebMachineFallback"

[HKCR\GoogleUpdate.CoreMachineClass.1]
"(Default)" = "Google Update Core Class"

[HKCR\Wow6432Node\CLSID\{B3D28DBD-0DFA-40E4-8071-520767BADC7E}\Elevation]
"Enabled" = "1"

[HKCR\Wow6432Node\CLSID\{8A1D4361-2C08-4700-A351-3EAA9CBFF5E4}\LocalServer32]
"(Default)" = "%Program Files% (x86)\Google\Update\1.3.25.11\GoogleUpdateBroker.exe"

[HKCR\Wow6432Node\CLSID\{AAD4AE2E-D834-46D4-8B09-490FAC9C722B}\ProgID]
"(Default)" = "Google.OneClickProcessLauncherMachine.1.0"

[HKCR\Wow6432Node\Interface\{5CCCB0EF-7073-4516-8028-4C628D0C8AAB}\ProxyStubClsid32]
"(Default)" = "{9B7F0841-B9EA-4E79-8483-D7D626814A2F}"

[HKCR\Wow6432Node\Interface\{909489C2-85A6-4322-AA56-D25278649D67}\ProxyStubClsid32]
"(Default)" = "{9B7F0841-B9EA-4E79-8483-D7D626814A2F}"

[HKCR\Wow6432Node\Interface\{2E629606-312A-482F-9B12-2C4ABF6F0B6D}\NumMethods]
"(Default)" = "10"

[HKCR\Wow6432Node\Interface\{B3A47570-0A85-4AEA-8270-529D47899603}\ProxyStubClsid32]
"(Default)" = "{9B7F0841-B9EA-4E79-8483-D7D626814A2F}"

[HKCR\Wow6432Node\CLSID\{598FE0E5-E02D-465D-9A9D-37974A28FD42}]
"LocalizedString" = "@%Program Files% (x86)\Google\Update\1.3.25.11\goopdate.dll,-3000"

[HKCR\Wow6432Node\Interface\{FE908CDD-22BB-472A-9870-1A0390E42F36}\NumMethods]
"(Default)" = "41"

[HKCR\Wow6432Node\Interface\{494B20CF-282E-4BDD-9F5D-B70CB09D351E}]
"(Default)" = "IGoogleUpdate3Web"

[HKCR\Wow6432Node\Interface\{18D0F672-18B4-48E6-AD36-6E6BF01DBBC4}]
"(Default)" = "IAppWeb"

[HKCR\Wow6432Node\Interface\{18D0F672-18B4-48E6-AD36-6E6BF01DBBC4}\NumMethods]
"(Default)" = "17"

[HKCR\Wow6432Node\Interface\{8476CE12-AE1F-4198-805C-BA0F9B783F57}\ProxyStubClsid32]
"(Default)" = "{9B7F0841-B9EA-4E79-8483-D7D626814A2F}"

[HKCR\GoogleUpdate.Update3WebMachine.1.0\CLSID]
"(Default)" = "{8A1D4361-2C08-4700-A351-3EAA9CBFF5E4}"

[HKCR\GoogleUpdate.CredentialDialogMachine\CLSID]
"(Default)" = "{25461599-633D-42B1-84FB-7CD68D026E53}"

[HKCR\Wow6432Node\Interface\{8476CE12-AE1F-4198-805C-BA0F9B783F57}]
"(Default)" = "IAppCommandWeb"

[HKCR\Wow6432Node\Interface\{1C642CED-CA3B-4013-A9DF-CA6CE5FF6503}\NumMethods]
"(Default)" = "9"

[HKCR\GoogleUpdate.ProcessLauncher.1.0]
"(Default)" = "Google Update Process Launcher Class"

[HKCR\Wow6432Node\Interface\{494B20CF-282E-4BDD-9F5D-B70CB09D351E}\ProxyStubClsid32]
"(Default)" = "{9B7F0841-B9EA-4E79-8483-D7D626814A2F}"

[HKCR\Wow6432Node\CLSID\{9061EE7F-1749-45C7-8806-48BE50E660C7}\InprocHandler32]
"(Default)" = "%Program Files% (x86)\Google\Update\1.3.25.11\psmachine.dll"

[HKCR\GoogleUpdate.OnDemandCOMClassMachineFallback\CurVer]
"(Default)" = "GoogleUpdate.OnDemandCOMClassMachineFallback.1.0"

[HKCR\Wow6432Node\CLSID\{9B2340A0-4068-43D6-B404-32E27217859D}\Elevation]
"Enabled" = "1"

[HKCR\Wow6432Node\CLSID\{25461599-633D-42B1-84FB-7CD68D026E53}\ProgID]
"(Default)" = "GoogleUpdate.CredentialDialogMachine.1.0"

[HKCR\Wow6432Node\Interface\{4E223325-C16B-4EEB-AEDC-19AA99A237FA}]
"(Default)" = "IRegistrationUpdateHook"

[HKCR\GoogleUpdate.Update3WebMachineFallback]
"(Default)" = "GoogleUpdate Update3Web"

[HKCR\Wow6432Node\Interface\{3D05F64F-71E3-48A5-BF6B-83315BC8AE1F}\ProxyStubClsid32]
"(Default)" = "{9B7F0841-B9EA-4E79-8483-D7D626814A2F}"

[HKCR\GoogleUpdate.CoCreateAsync\CurVer]
"(Default)" = "GoogleUpdate.CoCreateAsync.1.0"

[HKCR\GoogleUpdate.CredentialDialogMachine\CurVer]
"(Default)" = "GoogleUpdate.CredentialDialogMachine.1.0"

[HKCR\Wow6432Node\CLSID\{598FE0E5-E02D-465D-9A9D-37974A28FD42}\ProgID]
"(Default)" = "GoogleUpdate.Update3WebMachineFallback.1.0"

[HKCR\Wow6432Node\Interface\{8476CE12-AE1F-4198-805C-BA0F9B783F57}\NumMethods]
"(Default)" = "11"

[HKCR\Wow6432Node\CLSID\{ABC01078-F197-4B0B-ADBC-CFE684B39C82}\VersionIndependentProgID]
"(Default)" = "GoogleUpdate.ProcessLauncher"

[HKCR\Google.OneClickProcessLauncherMachine.1.0]
"(Default)" = "Google.OneClickProcessLauncher"

[HKCR\GoogleUpdate.Update3WebMachineFallback\CurVer]
"(Default)" = "GoogleUpdate.Update3WebMachineFallback.1.0"

[HKCR\Wow6432Node\Interface\{3D05F64F-71E3-48A5-BF6B-83315BC8AE1F}]
"(Default)" = "IAppCommand2"

[HKCR\Wow6432Node\CLSID\{9B2340A0-4068-43D6-B404-32E27217859D}]
"(Default)" = "Google Update Core Class"

[HKCR\Wow6432Node\Interface\{31AC3F11-E5EA-4A85-8A3D-8E095A39C27B}\ProxyStubClsid32]
"(Default)" = "{9B7F0841-B9EA-4E79-8483-D7D626814A2F}"

[HKCR\Wow6432Node\CLSID\{9B2340A0-4068-43D6-B404-32E27217859D}\Elevation]
"IconReference" = "@%Program Files% (x86)\Google\Update\1.3.25.11\goopdate.dll,-1004"

[HKCR\Wow6432Node\Interface\{FE908CDD-22BB-472A-9870-1A0390E42F36}\ProxyStubClsid32]
"(Default)" = "{9B7F0841-B9EA-4E79-8483-D7D626814A2F}"

[HKCR\Wow6432Node\Interface\{6DB17455-4E85-46E7-9D23-E555E4B005AF}]
"(Default)" = "IGoogleUpdate3"

[HKCR\Wow6432Node\CLSID\{9B2340A0-4068-43D6-B404-32E27217859D}\VersionIndependentProgID]
"(Default)" = "GoogleUpdate.CoreMachineClass"

[HKCR\Wow6432Node\Interface\{4E223325-C16B-4EEB-AEDC-19AA99A237FA}\NumMethods]
"(Default)" = "8"

[HKCR\GoogleUpdate.CoCreateAsync.1.0]
"(Default)" = "CoCreateAsync"

[HKCR\Wow6432Node\Interface\{76F7B787-A67C-4C73-82C7-31F5E3AABC5C}]
"(Default)" = "IApp"

[HKCR\Wow6432Node\Interface\{BCDCB538-01C0-46D1-A6A7-52F4D021C272}\NumMethods]
"(Default)" = "10"

[HKCR\Wow6432Node\Interface\{909489C2-85A6-4322-AA56-D25278649D67}]
"(Default)" = "IGoogleUpdateCore"

[HKCR\Wow6432Node\Interface\{084D78A8-B084-4E14-A629-A2C419B0E3D9}]
"(Default)" = "IApp2"

[HKCR\Wow6432Node\Interface\{DCAB8386-4F03-4DBD-A366-D90BC9F68DE6}\ProxyStubClsid32]
"(Default)" = "{9B7F0841-B9EA-4E79-8483-D7D626814A2F}"

[HKCR\Wow6432Node\CLSID\{6F8BD55B-E83D-4A47-85BE-81FFA8057A69}\ProgID]
"(Default)" = "GoogleUpdate.OnDemandCOMClassMachine.1.0"

[HKCR\Google.OneClickProcessLauncherMachine.1.0\CLSID]
"(Default)" = "{AAD4AE2E-D834-46D4-8B09-490FAC9C722B}"

[HKCR\Wow6432Node\Interface\{5B25A8DC-1780-4178-A629-6BE8B8DEFAA2}\NumMethods]
"(Default)" = "4"

[HKCR\Wow6432Node\Interface\{18D0F672-18B4-48E6-AD36-6E6BF01DBBC4}\ProxyStubClsid32]
"(Default)" = "{9B7F0841-B9EA-4E79-8483-D7D626814A2F}"

[HKCR\Wow6432Node\Interface\{4DE778FE-F195-4EE3-9DAB-FE446C239221}\ProxyStubClsid32]
"(Default)" = "{9B7F0841-B9EA-4E79-8483-D7D626814A2F}"

[HKCR\Wow6432Node\CLSID\{ABC01078-F197-4B0B-ADBC-CFE684B39C82}\LocalServer32]
"(Default)" = "%Program Files% (x86)\Google\Update\1.3.25.11\GoogleUpdateOnDemand.exe"

[HKCR\Wow6432Node\CLSID\{598FE0E5-E02D-465D-9A9D-37974A28FD42}\Elevation]
"IconReference" = "@%Program Files% (x86)\Google\Update\1.3.25.11\goopdate.dll,-1004"

[HKCR\Wow6432Node\Interface\{0CD01D1E-4A1C-489D-93B9-9B6672877C57}\ProxyStubClsid32]
"(Default)" = "{9B7F0841-B9EA-4E79-8483-D7D626814A2F}"

[HKCR\Wow6432Node\CLSID\{25461599-633D-42B1-84FB-7CD68D026E53}]
"(Default)" = "GoogleUpdate CredentialDialog"

[HKCR\Wow6432Node\Interface\{DD42475D-6D46-496A-924E-BD5630B4CBBA}\ProxyStubClsid32]
"(Default)" = "{9B7F0841-B9EA-4E79-8483-D7D626814A2F}"

[HKCR\GoogleUpdate.Update3WebMachine\CLSID]
"(Default)" = "{8A1D4361-2C08-4700-A351-3EAA9CBFF5E4}"

[HKCR\Wow6432Node\CLSID\{ABC01078-F197-4B0B-ADBC-CFE684B39C82}\ProgID]
"(Default)" = "GoogleUpdate.ProcessLauncher.1.0"

[HKCR\GoogleUpdate.OnDemandCOMClassMachineFallback]
"(Default)" = "Google Update Legacy On Demand"

[HKCR\Wow6432Node\Interface\{247954F9-9EDC-4E68-8CC3-150C2B89EADF}\ProxyStubClsid32]
"(Default)" = "{9B7F0841-B9EA-4E79-8483-D7D626814A2F}"

[HKCR\GoogleUpdate.OnDemandCOMClassMachine\CurVer]
"(Default)" = "GoogleUpdate.OnDemandCOMClassMachine.1.0"

[HKCR\GoogleUpdate.ProcessLauncher]
"(Default)" = "Google Update Process Launcher Class"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{AAD4AE2E-D834-46D4-8B09-490FAC9C722B}]
"CLSID" = "{AAD4AE2E-D834-46D4-8B09-490FAC9C722B}"

[HKCR\Wow6432Node\Interface\{1C642CED-CA3B-4013-A9DF-CA6CE5FF6503}\ProxyStubClsid32]
"(Default)" = "{9B7F0841-B9EA-4E79-8483-D7D626814A2F}"

[HKCR\Wow6432Node\Interface\{5B25A8DC-1780-4178-A629-6BE8B8DEFAA2}]
"(Default)" = "IBrowserHttpRequest2"

[HKCR\Wow6432Node\CLSID\{AAD4AE2E-D834-46D4-8B09-490FAC9C722B}\LocalServer32]
"(Default)" = "%Program Files% (x86)\Google\Update\1.3.25.11\GoogleUpdateBroker.exe"

[HKCR\GoogleUpdate.ProcessLauncher.1.0\CLSID]
"(Default)" = "{ABC01078-F197-4B0B-ADBC-CFE684B39C82}"

[HKCR\Wow6432Node\CLSID\{9B7F0841-B9EA-4E79-8483-D7D626814A2F}]
"(Default)" = "PSFactoryBuffer"

[HKCR\Wow6432Node\Interface\{D106AB5F-A70E-400E-A21B-96208C1D8DBB}\ProxyStubClsid32]
"(Default)" = "{9B7F0841-B9EA-4E79-8483-D7D626814A2F}"

[HKCR\Wow6432Node\Interface\{BCDCB538-01C0-46D1-A6A7-52F4D021C272}]
"(Default)" = "IAppVersion"

[HKCR\Wow6432Node\Interface\{DD42475D-6D46-496A-924E-BD5630B4CBBA}\NumMethods]
"(Default)" = "24"

[HKCR\Wow6432Node\CLSID\{9D6AA569-9F30-41AD-885A-346685C74928}\InprocServer32]
"(Default)" = "%Program Files% (x86)\Google\Update\1.3.25.11\psmachine.dll"

[HKCR\GoogleUpdate.CoCreateAsync]
"(Default)" = "CoCreateAsync"

[HKCR\Wow6432Node\CLSID\{9061EE7F-1749-45C7-8806-48BE50E660C7}\InprocHandler32]
"ThreadingModel" = "Both"

[HKCR\Wow6432Node\Interface\{909489C2-85A6-4322-AA56-D25278649D67}\NumMethods]
"(Default)" = "4"

[HKCR\Wow6432Node\Interface\{1C642CED-CA3B-4013-A9DF-CA6CE5FF6503}]
"(Default)" = "IProgressWndEvents"

[HKCR\GoogleUpdate.CoCreateAsync.1.0\CLSID]
"(Default)" = "{7DE94008-8AFD-4C70-9728-C6FBFFF6A73E}"

[HKCR\Wow6432Node\Interface\{4DE778FE-F195-4EE3-9DAB-FE446C239221}\NumMethods]
"(Default)" = "11"

[HKCR\Wow6432Node\CLSID\{25461599-633D-42B1-84FB-7CD68D026E53}\VersionIndependentProgID]
"(Default)" = "GoogleUpdate.CredentialDialogMachine"

[HKCR\Wow6432Node\CLSID\{8A1D4361-2C08-4700-A351-3EAA9CBFF5E4}\ProgID]
"(Default)" = "GoogleUpdate.Update3WebMachine.1.0"

[HKCR\GoogleUpdate.OnDemandCOMClassMachineFallback.1.0]
"(Default)" = "Google Update Legacy On Demand"

[HKCR\Wow6432Node\CLSID\{9B2340A0-4068-43D6-B404-32E27217859D}\ProgID]
"(Default)" = "GoogleUpdate.CoreMachineClass.1"

[HKCR\Wow6432Node\Interface\{084D78A8-B084-4E14-A629-A2C419B0E3D9}\NumMethods]
"(Default)" = "43"

[HKCR\Wow6432Node\Interface\{49D7563B-2DDB-4831-88C8-768A53833837}]
"(Default)" = "IJobObserver"

[HKCR\GoogleUpdate.OnDemandCOMClassMachine]
"(Default)" = "Google Update Broker Class Factory"

[HKCR\Wow6432Node\Interface\{5B25A8DC-1780-4178-A629-6BE8B8DEFAA2}\ProxyStubClsid32]
"(Default)" = "{9B7F0841-B9EA-4E79-8483-D7D626814A2F}"

[HKCR\Wow6432Node\Interface\{4E223325-C16B-4EEB-AEDC-19AA99A237FA}\ProxyStubClsid32]
"(Default)" = "{9B7F0841-B9EA-4E79-8483-D7D626814A2F}"

[HKCR\Wow6432Node\CLSID\{AAD4AE2E-D834-46D4-8B09-490FAC9C722B}]
"(Default)" = "Google.OneClickProcessLauncher"

[HKCR\GoogleUpdate.CredentialDialogMachine]
"(Default)" = "GoogleUpdate CredentialDialog"

[HKCR\Wow6432Node\CLSID\{9B7F0841-B9EA-4E79-8483-D7D626814A2F}\InProcServer32]
"ThreadingModel" = "Both"

[HKCR\Wow6432Node\CLSID\{8A1D4361-2C08-4700-A351-3EAA9CBFF5E4}\Elevation]
"IconReference" = "@%Program Files% (x86)\Google\Update\1.3.25.11\goopdate.dll,-1004"

[HKCR\Wow6432Node\Interface\{DD42475D-6D46-496A-924E-BD5630B4CBBA}]
"(Default)" = "IAppBundleWeb"

[HKCR\Wow6432Node\Interface\{247954F9-9EDC-4E68-8CC3-150C2B89EADF}]
"(Default)" = "ICurrentState"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{AAD4AE2E-D834-46D4-8B09-490FAC9C722B}]
"Policy" = "3"

[HKCR\GoogleUpdate.Update3WebMachineFallback.1.0\CLSID]
"(Default)" = "{598FE0E5-E02D-465D-9A9D-37974A28FD42}"

[HKCR\Wow6432Node\CLSID\{6F8BD55B-E83D-4A47-85BE-81FFA8057A69}]
"(Default)" = "Google Update Broker Class Factory"

[HKCR\GoogleUpdate.OnDemandCOMClassMachine.1.0]
"(Default)" = "Google Update Broker Class Factory"

[HKCR\GoogleUpdate.ProcessLauncher\CLSID]
"(Default)" = "{ABC01078-F197-4B0B-ADBC-CFE684B39C82}"

[HKCR\GoogleUpdate.OnDemandCOMClassMachine\CLSID]
"(Default)" = "{6F8BD55B-E83D-4A47-85BE-81FFA8057A69}"

[HKCR\Wow6432Node\Interface\{5CCCB0EF-7073-4516-8028-4C628D0C8AAB}]
"(Default)" = "IOneClickProcessLauncher"

[HKCR\Wow6432Node\Interface\{DAB1D343-1B2A-47F9-B445-93DC50704BFE}]
"(Default)" = "ICoCreateAsync"

[HKCR\Wow6432Node\Interface\{0CD01D1E-4A1C-489D-93B9-9B6672877C57}\NumMethods]
"(Default)" = "10"

[HKCR\Wow6432Node\CLSID\{B3D28DBD-0DFA-40E4-8071-520767BADC7E}\VersionIndependentProgID]
"(Default)" = "GoogleUpdate.OnDemandCOMClassMachineFallback"

[HKCR\Wow6432Node\CLSID\{B3D28DBD-0DFA-40E4-8071-520767BADC7E}\ProgID]
"(Default)" = "GoogleUpdate.OnDemandCOMClassMachineFallback.1.0"

The Trojan deletes the following registry key(s):

[HKCR\Wow6432Node\CLSID\{7DE94008-8AFD-4C70-9728-C6FBFFF6A73E}\VersionIndependentProgID]
[HKCR\Wow6432Node\CLSID\{9B2340A0-4068-43D6-B404-32E27217859D}\LocalServer32]
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{AAD4AE2E-D834-46D4-8B09-490FAC9C722B}]
[HKCR\Wow6432Node\CLSID\{9061EE7F-1749-45C7-8806-48BE50E660C7}\InprocHandler32]
[HKCR\Wow6432Node\CLSID\{AAD4AE2E-D834-46D4-8B09-490FAC9C722B}]
[HKCR\Wow6432Node\CLSID\{25461599-633D-42B1-84FB-7CD68D026E53}\VersionIndependentProgID]
[HKCR\Wow6432Node\CLSID\{8A1D4361-2C08-4700-A351-3EAA9CBFF5E4}]
[HKCR\Wow6432Node\CLSID\{B3D28DBD-0DFA-40E4-8071-520767BADC7E}\LocalServer32]
[HKCR\Wow6432Node\CLSID\{8A1D4361-2C08-4700-A351-3EAA9CBFF5E4}\LocalServer32]
[HKCR\Wow6432Node\CLSID\{9B2340A0-4068-43D6-B404-32E27217859D}]
[HKCR\Wow6432Node\CLSID\{ABC01078-F197-4B0B-ADBC-CFE684B39C82}]
[HKCR\Wow6432Node\CLSID\{598FE0E5-E02D-465D-9A9D-37974A28FD42}\VersionIndependentProgID]
[HKCR\Wow6432Node\CLSID\{B3D28DBD-0DFA-40E4-8071-520767BADC7E}\Elevation]
[HKCR\Wow6432Node\CLSID\{6F8BD55B-E83D-4A47-85BE-81FFA8057A69}\LocalServer32]
[HKCR\Wow6432Node\CLSID\{8A1D4361-2C08-4700-A351-3EAA9CBFF5E4}\Elevation]
[HKCR\Wow6432Node\CLSID\{8A1D4361-2C08-4700-A351-3EAA9CBFF5E4}\ProgID]
[HKCR\Wow6432Node\CLSID\{9061EE7F-1749-45C7-8806-48BE50E660C7}]
[HKCR\Wow6432Node\CLSID\{598FE0E5-E02D-465D-9A9D-37974A28FD42}\ProgID]
[HKCR\Wow6432Node\CLSID\{6F8BD55B-E83D-4A47-85BE-81FFA8057A69}\ProgID]
[HKCR\Wow6432Node\CLSID\{598FE0E5-E02D-465D-9A9D-37974A28FD42}]
[HKCR\Wow6432Node\CLSID\{ABC01078-F197-4B0B-ADBC-CFE684B39C82}\ProgID]
[HKCR\Wow6432Node\CLSID\{6F8BD55B-E83D-4A47-85BE-81FFA8057A69}\Elevation]
[HKCR\Wow6432Node\CLSID\{6F8BD55B-E83D-4A47-85BE-81FFA8057A69}\VersionIndependentProgID]
[HKCR\Wow6432Node\CLSID\{7DE94008-8AFD-4C70-9728-C6FBFFF6A73E}]
[HKCR\Wow6432Node\CLSID\{9B2340A0-4068-43D6-B404-32E27217859D}\ProgID]
[HKCR\Wow6432Node\CLSID\{6F8BD55B-E83D-4A47-85BE-81FFA8057A69}]
[HKCR\Wow6432Node\CLSID\{AAD4AE2E-D834-46D4-8B09-490FAC9C722B}\VersionIndependentProgID]
[HKCR\Wow6432Node\CLSID\{AAD4AE2E-D834-46D4-8B09-490FAC9C722B}\ProgID]
[HKCR\Wow6432Node\CLSID\{9D6AA569-9F30-41AD-885A-346685C74928}]
[HKCR\Wow6432Node\CLSID\{7DE94008-8AFD-4C70-9728-C6FBFFF6A73E}\ProgID]
[HKCR\Wow6432Node\CLSID\{8A1D4361-2C08-4700-A351-3EAA9CBFF5E4}\VersionIndependentProgID]
[HKCR\Wow6432Node\CLSID\{AAD4AE2E-D834-46D4-8B09-490FAC9C722B}\LocalServer32]
[HKCR\Wow6432Node\CLSID\{B3D28DBD-0DFA-40E4-8071-520767BADC7E}]
[HKCR\Wow6432Node\CLSID\{598FE0E5-E02D-465D-9A9D-37974A28FD42}\LocalServer32]
[HKCR\Wow6432Node\CLSID\{B3D28DBD-0DFA-40E4-8071-520767BADC7E}\ProgID]
[HKCR\Wow6432Node\CLSID\{7DE94008-8AFD-4C70-9728-C6FBFFF6A73E}\LocalServer32]
[HKCR\Wow6432Node\CLSID\{25461599-633D-42B1-84FB-7CD68D026E53}\ProgID]
[HKCR\Wow6432Node\CLSID\{598FE0E5-E02D-465D-9A9D-37974A28FD42}\Elevation]
[HKCR\Wow6432Node\CLSID\{25461599-633D-42B1-84FB-7CD68D026E53}\LocalServer32]
[HKCR\Wow6432Node\CLSID\{9D6AA569-9F30-41AD-885A-346685C74928}\InprocServer32]
[HKCR\Wow6432Node\CLSID\{B3D28DBD-0DFA-40E4-8071-520767BADC7E}\VersionIndependentProgID]
[HKCR\Wow6432Node\CLSID\{9B2340A0-4068-43D6-B404-32E27217859D}\Elevation]
[HKCR\Wow6432Node\CLSID\{ABC01078-F197-4B0B-ADBC-CFE684B39C82}\VersionIndependentProgID]
[HKCR\Wow6432Node\CLSID\{9B2340A0-4068-43D6-B404-32E27217859D}\VersionIndependentProgID]
[HKCR\Wow6432Node\CLSID\{25461599-633D-42B1-84FB-7CD68D026E53}]
[HKCR\Wow6432Node\CLSID\{ABC01078-F197-4B0B-ADBC-CFE684B39C82}\LocalServer32]

The Trojan deletes the following value(s) in system registry:

[HKLM\SOFTWARE\Wow6432Node\Google\Update]
"uid"
"old-uid"

The process GoogleUpdate.exe:1972 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKCU\Software\Google\Update\proxy]
"source" = "IEWPAD"

[HKCU\Software\Classes\Local Settings\MuiCache\2D\52C64B7E]
"LanguageList" = "en-US, en"

The Trojan deletes the following value(s) in system registry:

[HKLM\SOFTWARE\Wow6432Node\Google\Update]
"uid"
"old-uid"

The process GoogleUpdate.exe:3968 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Wow6432Node\Google\Update]
"LastStartedAU" = "1422518163"

The Trojan deletes the following value(s) in system registry:

[HKLM\SOFTWARE\Wow6432Node\Google\Update]
"uid"
"old-uid"

The process GoogleUpdate.exe:816 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Wow6432Node\Google\Update\ClientState\{430FD4D0-B729-4F61-AA34-91526481799D}\CurrentState]
"InstallProgressPercent" = "4294967295"

[HKLM\SOFTWARE\Wow6432Node\Google\Update\ClientState\{FDA71E6F-AC4C-4A00-8B70-9958A68906BF}]
"DayOfLastRollCall" = "2949"

[HKLM\SOFTWARE\Wow6432Node\Google\Update\ClientState\{8A69D345-D564-463C-AFF1-A69D9E530F96}]
"LastCheckSuccess" = "1422518200"

[HKLM\SOFTWARE\Wow6432Node\Google\Update\ClientState\{430FD4D0-B729-4F61-AA34-91526481799D}\CurrentState]
"DownloadTimeRemainingMs" = "4294967295"

[HKLM\SOFTWARE\Wow6432Node\Google\Update\ClientState\{8A69D345-D564-463C-AFF1-A69D9E530F96}\CurrentState]
"StateValue" = "16"

[HKLM\SOFTWARE\Wow6432Node\Google\Update\ClientState\{FDA71E6F-AC4C-4A00-8B70-9958A68906BF}]
"RollCallDayStartSec" = "1422432000"

[HKLM\SOFTWARE\Wow6432Node\Google\Update\ClientState\{430FD4D0-B729-4F61-AA34-91526481799D}]
"UpdateAvailableCount" = "1"

[HKLM\SOFTWARE\Wow6432Node\Google\Update\ClientState\{8A69D345-D564-463C-AFF1-A69D9E530F96}]
"RollCallDayStartSec" = "1422432000"

[HKLM\SOFTWARE\Wow6432Node\Google\Update]
"LastChecked" = "1422518200"

[HKLM\SOFTWARE\Wow6432Node\Google\Update\ClientState\{4DC8B4CA-1BDA-483E-B5FA-D3C12E15B62D}]
"pv" = "35.0.1916.153"

[HKLM\SOFTWARE\Wow6432Node\Google\Update\ClientState\{4DC8B4CA-1BDA-483E-B5FA-D3C12E15B62D}\CurrentState]
"StateValue" = "16"

[HKCU\Software\Google\Update\proxy]
"source" = "IEWPAD"

[HKLM\SOFTWARE\Wow6432Node\Google\Update\ClientState\{FDA71E6F-AC4C-4A00-8B70-9958A68906BF}]
"pv" = "35.0.1916.153"

[HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "0"

[HKLM\SOFTWARE\Wow6432Node\Google\Update\ClientState\{430FD4D0-B729-4F61-AA34-91526481799D}]
"RollCallDayStartSec" = "1422432000"

[HKLM\SOFTWARE\Wow6432Node\Google\Update\ClientState\{430FD4D0-B729-4F61-AA34-91526481799D}\CurrentState]
"InstallTimeRemainingMs" = "4294967295"

[HKCU\Software\Classes\Local Settings\MuiCache\2D\52C64B7E]
"LanguageList" = "en-US, en"

[HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"AutoDetect" = "1"

[HKLM\SOFTWARE\Wow6432Node\Google\Update\ClientState\{430FD4D0-B729-4F61-AA34-91526481799D}]
"pv" = "1.3.24.15"

[HKLM\SOFTWARE\Wow6432Node\Google\Update\ClientState\{4DC8B4CA-1BDA-483E-B5FA-D3C12E15B62D}]
"RollCallDayStartSec" = "1422432000"

[HKLM\SOFTWARE\Wow6432Node\Google\Update\ClientState\{8A69D345-D564-463C-AFF1-A69D9E530F96}]
"DayOfLastRollCall" = "2949"

[HKCU\Software\Google\Update\ClientState\{4DC8B4CA-1BDA-483e-B5FA-D3C12E15B62D}]
"dr" = "0"

[HKLM\SOFTWARE\Wow6432Node\Google\Update\ClientState\{FDA71E6F-AC4C-4A00-8B70-9958A68906BF}\CurrentState]
"StateValue" = "17"

[HKLM\SOFTWARE\Wow6432Node\Google\Update\ClientState\{430FD4D0-B729-4F61-AA34-91526481799D}]
"UpdateAvailableSince" = "Type: REG_QWORD, Length: 8"

[HKLM\SOFTWARE\Wow6432Node\Google\Update\ClientState\{4DC8B4CA-1BDA-483E-B5FA-D3C12E15B62D}]
"DayOfLastRollCall" = "2949"

[HKLM\SOFTWARE\Wow6432Node\Google\Update\ClientState\{430FD4D0-B729-4F61-AA34-91526481799D}\CurrentState]
"StateValue" = "3"

[HKLM\SOFTWARE\Wow6432Node\Google\Update\ClientState\{430FD4D0-B729-4F61-AA34-91526481799D}]
"DayOfLastRollCall" = "2949"

[HKCU\Software\Google\Update\ClientState\{8A69D345-D564-463C-AFF1-A69D9E530F96}]
"dr" = "0"

[HKLM\SOFTWARE\Wow6432Node\Google\Update\ClientState\{8A69D345-D564-463C-AFF1-A69D9E530F96}]
"pv" = "35.0.1916.153"

[HKLM\SOFTWARE\Wow6432Node\Google\Update\ClientState\{430FD4D0-B729-4F61-AA34-91526481799D}\CurrentState]
"DownloadProgressPercent" = "0"

The Trojan deletes the following registry key(s):

[HKLM\SOFTWARE\Wow6432Node\Google\Update\ClientState\{8A69D345-D564-463C-AFF1-A69D9E530F96}\CurrentState]
[HKLM\SOFTWARE\Wow6432Node\Google\Update\ClientState\{FDA71E6F-AC4C-4A00-8B70-9958A68906BF}\CurrentState]
[HKLM\SOFTWARE\Wow6432Node\Google\Update\ClientState\{430FD4D0-B729-4F61-AA34-91526481799D}\CurrentState]
[HKLM\SOFTWARE\Wow6432Node\Google\Update\ClientState\{4DC8B4CA-1BDA-483E-B5FA-D3C12E15B62D}\CurrentState]

The Trojan deletes the following value(s) in system registry:

[HKLM\SOFTWARE\Wow6432Node\Google\Update\ClientState\{8A69D345-D564-463C-AFF1-A69D9E530F96}]
"UpdateAvailableSince"

[HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKLM\SOFTWARE\Wow6432Node\Google\Update]
"LastInstallerSuccessLaunchCmdLine"

[HKLM\SOFTWARE\Wow6432Node\Google\Update\ClientState\{8A69D345-D564-463C-AFF1-A69D9E530F96}]
"tttoken"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKLM\SOFTWARE\Wow6432Node\Google\Update\ClientState\{430FD4D0-B729-4F61-AA34-91526481799D}]
"LastInstallerError"

[HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

[HKLM\SOFTWARE\Wow6432Node\Google\Update]
"LastInstallerExtraCode1"
"LastInstallerResult"
"old-uid"

[HKLM\SOFTWARE\Wow6432Node\Google\Update\ClientState\{430FD4D0-B729-4F61-AA34-91526481799D}]
"LastInstallerSuccessLaunchCmdLine"

[HKLM\SOFTWARE\Wow6432Node\Google\Update]
"uid"
"LastInstallerResultUIString"

[HKLM\SOFTWARE\Wow6432Node\Google\Update\ClientState\{430FD4D0-B729-4F61-AA34-91526481799D}]
"LastInstallerResult"
"LastInstallerResultUIString"

[HKLM\SOFTWARE\Wow6432Node\Google\Update\ClientState\{8A69D345-D564-463C-AFF1-A69D9E530F96}]
"dr"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

[HKLM\SOFTWARE\Wow6432Node\Google\Update\ClientState\{8A69D345-D564-463C-AFF1-A69D9E530F96}]
"UpdateAvailableCount"

[HKLM\SOFTWARE\Wow6432Node\Google\Update]
"LastInstallerError"

[HKLM\SOFTWARE\Wow6432Node\Google\Update\ClientState\{430FD4D0-B729-4F61-AA34-91526481799D}]
"tttoken"

[HKLM\SOFTWARE\Wow6432Node\Google\Update\ClientState\{4DC8B4CA-1BDA-483E-B5FA-D3C12E15B62D}]
"dr"

[HKLM\SOFTWARE\Wow6432Node\Google\Update\ClientState\{430FD4D0-B729-4F61-AA34-91526481799D}]
"LastInstallerExtraCode1"

The process GoogleUpdate.exe:4500 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKCU\Software\Google\Update\proxy]
"source" = "IEWPAD"

[HKCU\Software\Classes\Local Settings\MuiCache\2D\52C64B7E]
"LanguageList" = "en-US, en"

The Trojan deletes the following value(s) in system registry:

[HKLM\SOFTWARE\Wow6432Node\Google\Update]
"uid"
"old-uid"

The process Yandex.exe:2084 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Taskband]
"Favorites" = "00 7C 01 00 00 14 00 1F 80 C8 27 34 1F 10 5C 10"

[HKCU\Software\Classes\Local Settings\MuiCache\2C\52C64B7E\@C:\Windows\System32]
"miguiresource.dll,-201" = "Task Scheduler"
"dfrgui.exe,-103" = "Disk Defragmenter"
"WindowsAnytimeUpgradeUI.exe,-1" = "Windows Anytime Upgrade"

[HKCU\Software\Classes\Local Settings\MuiCache\2C\52C64B7E\@C:\Windows\system32\migwiz]
"wet.dll,-588" = "Windows Easy Transfer"

[HKCU\Software\Classes\Local Settings\MuiCache\2C\52C64B7E\@C:\Windows\System32]
"iscsicpl.dll,-5001" = "iSCSI Initiator"
"SoundRecorder.exe,-100" = "Sound Recorder"
"wdc.dll,-10021" = "Performance Monitor"
"XpsRchVw.exe,-102" = "XPS Viewer"

[HKCU\Software\Classes\Local Settings\MuiCache\2C\52C64B7E\@C:\Windows\system32\Speech\SpeechUX]
"sapi.cpl,-5555" = "Windows Speech Recognition"

[HKCU\Software\Classes\Local Settings\MuiCache\2C\52C64B7E\@C:\Windows\System32]
"SNTSearch.dll,-505" = "Sticky Notes"
"mstsc.exe,-4000" = "Remote Desktop Connection"

[HKCU\Software\Classes\Local Settings\MuiCache\2C\52C64B7E\@%Program Files%\Common Files\Microsoft Shared\Ink]
"TipTsf.dll,-80" = "Tablet PC Input Panel"

[HKCU\Software\Classes\Local Settings\MuiCache\2C\52C64B7E\@C:\Windows\System32]
"msconfig.exe,-126" = "System Configuration"
"filemgmt.dll,-2204" = "Services"
"rstrui.exe,-100" = "System Restore"
"wsecedit.dll,-718" = "Local Security Policy"
"sdcpl.dll,-101" = "Backup and Restore"
"mycomput.dll,-300" = "Computer Management"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Taskband]
"FavoritesVersion" = "2"

[HKCU\Software\Classes\Local Settings\MuiCache\2C\52C64B7E\@%Program Files%\Common Files\Microsoft Shared\Ink]
"mip.exe,-291" = "Math Input Panel"

[HKCU\Software\Classes\Local Settings\MuiCache\2C\52C64B7E]
"LanguageList" = "en-US, en"

[HKCU\Software\Classes\Local Settings\MuiCache\2C\52C64B7E\@C:\Windows\System32]
"msra.exe,-100" = "Windows Remote Assistance"
"sud.dll,-1" = "Default Programs"

[HKCU\Software\Classes\Local Settings\MuiCache\2C\52C64B7E\@%Program Files%\Windows Journal]
"Journal.exe,-3074" = "Windows Journal"

[HKCU\Software\Classes\Local Settings\MuiCache\2C\52C64B7E\@%Program Files%\Common Files\Microsoft Shared\Ink]
"ShapeCollector.exe,-298" = "Personalize Handwriting Recognition"

[HKCU\Software\Classes\Local Settings\MuiCache\2C\52C64B7E\@C:\Windows\System32]
"NetProjW.dll,-501" = "Connect to a Network Projector"
"msinfo32.exe,-100" = "System Information"
"OobeFldr.dll,-33056" = "Getting Started"
"comres.dll,-3410" = "Component Services"
"ie4uinit.exe,-737" = "Internet Explorer (No Add-ons)"
"recdisc.exe,-2000" = "Create a System Repair Disc"
"pmcsnap.dll,-700" = "Print Management"

[HKCU\Software\Classes\Local Settings\MuiCache\2C\52C64B7E\@C:\Windows\system32\WindowsPowerShell\v1.0]
"powershell.exe,-101" = "Windows PowerShell ISE"

[HKCU\Software\Classes\Local Settings\MuiCache\2C\52C64B7E\@C:\Windows\System32]
"AuthFWGP.dll,-20" = "Windows Firewall with Advanced Security"
"wdc.dll,-10030" = "Resource Monitor"
"SyncCenter.dll,-3000" = "Sync Center"

[HKCU\Software\Classes\Local Settings\MuiCache\2C\52C64B7E\@%Program Files%\Windows Sidebar]
"sidebar.exe,-1005" = "Desktop Gadget Gallery"

[HKCU\Software\Classes\Local Settings\MuiCache\2C\52C64B7E\@C:\Windows\System32]
"miguiresource.dll,-101" = "Event Viewer"

[HKCU\Software\Classes\Local Settings\MuiCache\2C\52C64B7E\@C:\Windows\system32\migwiz]
"wet.dll,-591" = "Windows Easy Transfer Reports"

[HKCU\Software\Classes\Local Settings\MuiCache\2C\52C64B7E\@C:\Windows\system32\WindowsPowerShell\v1.0]
"powershell.exe,-102" = "Windows PowerShell ISE (x86)"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Taskband]
"FavoritesChanges" = "8"

[HKCU\Software\Classes\Local Settings\MuiCache\2C\52C64B7E\@C:\Windows\System32]
"wucltux.dll,-1" = "Windows Update"
"gameux.dll,-10082" = "Games Explorer"
"displayswitch.exe,-320" = "Connect to a Projector"
"AccessibilityCpl.dll,-10" = "Ease of Access Center"
"MdSched.exe,-4001" = "Windows Memory Diagnostic"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Taskband]
"FavoritesResolve" = "CC 02 00 00 4C 00 00 00 01 14 02 00 00 00 00 00"

[HKCU\Software\Classes\Local Settings\MuiCache\2C\52C64B7E\@C:\Windows\System32]
"mblctr.exe,-1008" = "Windows Mobility Center"
"odbcint.dll,-1310" = "Data Sources (ODBC)"
"SnippingTool.exe,-15051" = "Snipping Tool"
"FXSRESM.dll,-114" = "Windows Fax and Scan"

The process syesubc3_p2v3.exe:3476 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies]
"CachePrefix" = "Cookie:"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"AutoDetect" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-ef-0d-5d]
"WpadDecision" = "0"
"WpadDecisionTime" = "5E A0 06 D0 98 3B D0 01"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{EE1E4E39-627C-4D52-9D86-A515AB38A003}]
"WpadNetworkName" = "Network"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History]
"CachePrefix" = "Visited:"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content]
"CachePrefix" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-ef-0d-5d]
"WpadDecisionReason" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{EE1E4E39-627C-4D52-9D86-A515AB38A003}]
"WpadDecisionReason" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-ef-0d-5d]
"WpadDetectedUrl" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "46 00 00 00 41 00 00 00 09 00 00 00 00 00 00 00"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{EE1E4E39-627C-4D52-9D86-A515AB38A003}]
"WpadDecision" = "0"
"WpadDecisionTime" = "2A AA D2 E1 98 3B D0 01"

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Trojan deletes the following value(s) in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{EE1E4E39-627C-4D52-9D86-A515AB38A003}]
"WpadDetectedUrl"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyOverride"
"AutoDetect"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-ef-0d-5d]
"WpadDetectedUrl"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyServer"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"AutoConfigURL"

The process GoogleUpdateComRegisterShell64.exe:4520 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKCR\Interface\{DCAB8386-4F03-4DBD-A366-D90BC9F68DE6}\ProxyStubClsid32]
"(Default)" = "{9B7F0841-B9EA-4E79-8483-D7D626814A2F}"

[HKCR\Interface\{6DB17455-4E85-46E7-9D23-E555E4B005AF}\NumMethods]
"(Default)" = "10"

[HKCR\CLSID\{9061EE7F-1749-45C7-8806-48BE50E660C7}\InprocHandler32]
"(Default)" = "%Program Files% (x86)\Google\Update\1.3.25.11\psmachine_64.dll"

[HKCR\Interface\{49D7563B-2DDB-4831-88C8-768A53833837}\NumMethods]
"(Default)" = "13"

[HKCR\Interface\{76F7B787-A67C-4C73-82C7-31F5E3AABC5C}\NumMethods]
"(Default)" = "41"

[HKCR\Interface\{49D7563B-2DDB-4831-88C8-768A53833837}\ProxyStubClsid32]
"(Default)" = "{9B7F0841-B9EA-4E79-8483-D7D626814A2F}"

[HKCR\CLSID\{9B7F0841-B9EA-4E79-8483-D7D626814A2F}\InProcServer32]
"ThreadingModel" = "Both"

[HKCR\Interface\{3D05F64F-71E3-48A5-BF6B-83315BC8AE1F}]
"(Default)" = "IAppCommand2"

[HKCR\Interface\{5CCCB0EF-7073-4516-8028-4C628D0C8AAB}\NumMethods]
"(Default)" = "4"

[HKCR\Interface\{4DE778FE-F195-4EE3-9DAB-FE446C239221}\NumMethods]
"(Default)" = "11"

[HKCR\Interface\{1C642CED-CA3B-4013-A9DF-CA6CE5FF6503}]
"(Default)" = "IProgressWndEvents"

[HKCR\Interface\{18D0F672-18B4-48E6-AD36-6E6BF01DBBC4}\ProxyStubClsid32]
"(Default)" = "{9B7F0841-B9EA-4E79-8483-D7D626814A2F}"

[HKCR\Interface\{6DB17455-4E85-46E7-9D23-E555E4B005AF}]
"(Default)" = "IGoogleUpdate3"

[HKCR\Interface\{31AC3F11-E5EA-4A85-8A3D-8E095A39C27B}]
"(Default)" = "IGoogleUpdate"

[HKCR\Interface\{4DE778FE-F195-4EE3-9DAB-FE446C239221}]
"(Default)" = "IAppCommand"

[HKCR\Interface\{5CCCB0EF-7073-4516-8028-4C628D0C8AAB}]
"(Default)" = "IOneClickProcessLauncher"

[HKCR\Interface\{D106AB5F-A70E-400E-A21B-96208C1D8DBB}\NumMethods]
"(Default)" = "7"

[HKCR\Interface\{247954F9-9EDC-4E68-8CC3-150C2B89EADF}\ProxyStubClsid32]
"(Default)" = "{9B7F0841-B9EA-4E79-8483-D7D626814A2F}"

[HKCR\Interface\{49D7563B-2DDB-4831-88C8-768A53833837}]
"(Default)" = "IJobObserver"

[HKCR\Interface\{909489C2-85A6-4322-AA56-D25278649D67}\ProxyStubClsid32]
"(Default)" = "{9B7F0841-B9EA-4E79-8483-D7D626814A2F}"

[HKCR\Interface\{128C2DA6-2BC0-44C0-B3F6-4EC22E647964}\NumMethods]
"(Default)" = "6"

[HKCR\Interface\{B3A47570-0A85-4AEA-8270-529D47899603}\ProxyStubClsid32]
"(Default)" = "{9B7F0841-B9EA-4E79-8483-D7D626814A2F}"

[HKCR\Interface\{4E223325-C16B-4EEB-AEDC-19AA99A237FA}\NumMethods]
"(Default)" = "8"

[HKCR\Interface\{31AC3F11-E5EA-4A85-8A3D-8E095A39C27B}\NumMethods]
"(Default)" = "5"

[HKCR\Interface\{76F7B787-A67C-4C73-82C7-31F5E3AABC5C}\ProxyStubClsid32]
"(Default)" = "{9B7F0841-B9EA-4E79-8483-D7D626814A2F}"

[HKCR\Interface\{6DB17455-4E85-46E7-9D23-E555E4B005AF}\ProxyStubClsid32]
"(Default)" = "{9B7F0841-B9EA-4E79-8483-D7D626814A2F}"

[HKCR\Interface\{D106AB5F-A70E-400E-A21B-96208C1D8DBB}\ProxyStubClsid32]
"(Default)" = "{9B7F0841-B9EA-4E79-8483-D7D626814A2F}"

[HKCR\Interface\{2E629606-312A-482F-9B12-2C4ABF6F0B6D}]
"(Default)" = "ICoCreateAsyncStatus"

[HKCR\Interface\{247954F9-9EDC-4E68-8CC3-150C2B89EADF}\NumMethods]
"(Default)" = "24"

[HKCR\Interface\{DAB1D343-1B2A-47F9-B445-93DC50704BFE}\ProxyStubClsid32]
"(Default)" = "{9B7F0841-B9EA-4E79-8483-D7D626814A2F}"

[HKCR\Interface\{5CCCB0EF-7073-4516-8028-4C628D0C8AAB}\ProxyStubClsid32]
"(Default)" = "{9B7F0841-B9EA-4E79-8483-D7D626814A2F}"

[HKCR\Interface\{B3A47570-0A85-4AEA-8270-529D47899603}\NumMethods]
"(Default)" = "4"

[HKCR\Interface\{1C642CED-CA3B-4013-A9DF-CA6CE5FF6503}\ProxyStubClsid32]
"(Default)" = "{9B7F0841-B9EA-4E79-8483-D7D626814A2F}"

[HKCR\Interface\{31AC3F11-E5EA-4A85-8A3D-8E095A39C27B}\ProxyStubClsid32]
"(Default)" = "{9B7F0841-B9EA-4E79-8483-D7D626814A2F}"

[HKCR\Interface\{5B25A8DC-1780-4178-A629-6BE8B8DEFAA2}\ProxyStubClsid32]
"(Default)" = "{9B7F0841-B9EA-4E79-8483-D7D626814A2F}"

[HKCR\Interface\{2E629606-312A-482F-9B12-2C4ABF6F0B6D}\NumMethods]
"(Default)" = "10"

[HKCR\Interface\{3D05F64F-71E3-48A5-BF6B-83315BC8AE1F}\ProxyStubClsid32]
"(Default)" = "{9B7F0841-B9EA-4E79-8483-D7D626814A2F}"

[HKCR\Interface\{FE908CDD-22BB-472A-9870-1A0390E42F36}]
"(Default)" = "IAppBundle"

[HKCR\CLSID\{9D6AA569-9F30-41AD-885A-346685C74928}\InprocServer32]
"(Default)" = "%Program Files% (x86)\Google\Update\1.3.25.11\psmachine_64.dll"

[HKCR\Interface\{494B20CF-282E-4BDD-9F5D-B70CB09D351E}\NumMethods]
"(Default)" = "8"

[HKCR\Interface\{2D363682-561D-4C3A-81C6-F2F82107562A}\NumMethods]
"(Default)" = "4"

[HKCR\Interface\{18D0F672-18B4-48E6-AD36-6E6BF01DBBC4}]
"(Default)" = "IAppWeb"

[HKCR\Interface\{BCDCB538-01C0-46D1-A6A7-52F4D021C272}\ProxyStubClsid32]
"(Default)" = "{9B7F0841-B9EA-4E79-8483-D7D626814A2F}"

[HKCR\Interface\{4DE778FE-F195-4EE3-9DAB-FE446C239221}\ProxyStubClsid32]
"(Default)" = "{9B7F0841-B9EA-4E79-8483-D7D626814A2F}"

[HKCR\Interface\{FE908CDD-22BB-472A-9870-1A0390E42F36}\NumMethods]
"(Default)" = "41"

[HKCR\Interface\{494B20CF-282E-4BDD-9F5D-B70CB09D351E}\ProxyStubClsid32]
"(Default)" = "{9B7F0841-B9EA-4E79-8483-D7D626814A2F}"

[HKCR\Interface\{2D363682-561D-4C3A-81C6-F2F82107562A}]
"(Default)" = "IGoogleUpdate3WebSecurity"

[HKCR\Interface\{4E223325-C16B-4EEB-AEDC-19AA99A237FA}]
"(Default)" = "IRegistrationUpdateHook"

[HKCR\Interface\{2D363682-561D-4C3A-81C6-F2F82107562A}\ProxyStubClsid32]
"(Default)" = "{9B7F0841-B9EA-4E79-8483-D7D626814A2F}"

[HKCR\Interface\{247954F9-9EDC-4E68-8CC3-150C2B89EADF}]
"(Default)" = "ICurrentState"

[HKCR\Interface\{18D0F672-18B4-48E6-AD36-6E6BF01DBBC4}\NumMethods]
"(Default)" = "17"

[HKCR\Interface\{DCAB8386-4F03-4DBD-A366-D90BC9F68DE6}]
"(Default)" = "IPackage"

[HKCR\Interface\{909489C2-85A6-4322-AA56-D25278649D67}]
"(Default)" = "IGoogleUpdateCore"

[HKCR\Interface\{1C642CED-CA3B-4013-A9DF-CA6CE5FF6503}\NumMethods]
"(Default)" = "9"

[HKCR\Interface\{D106AB5F-A70E-400E-A21B-96208C1D8DBB}]
"(Default)" = "IProcessLauncher2"

[HKCR\Interface\{084D78A8-B084-4E14-A629-A2C419B0E3D9}\ProxyStubClsid32]
"(Default)" = "{9B7F0841-B9EA-4E79-8483-D7D626814A2F}"

[HKCR\CLSID\{9B7F0841-B9EA-4E79-8483-D7D626814A2F}]
"(Default)" = "PSFactoryBuffer"

[HKCR\Interface\{909489C2-85A6-4322-AA56-D25278649D67}\NumMethods]
"(Default)" = "4"

[HKCR\Interface\{BCDCB538-01C0-46D1-A6A7-52F4D021C272}]
"(Default)" = "IAppVersion"

[HKCR\Interface\{DCAB8386-4F03-4DBD-A366-D90BC9F68DE6}\NumMethods]
"(Default)" = "10"

[HKCR\Interface\{BCDCB538-01C0-46D1-A6A7-52F4D021C272}\NumMethods]
"(Default)" = "10"

[HKCR\Interface\{FE908CDD-22BB-472A-9870-1A0390E42F36}\ProxyStubClsid32]
"(Default)" = "{9B7F0841-B9EA-4E79-8483-D7D626814A2F}"

[HKCR\Interface\{5B25A8DC-1780-4178-A629-6BE8B8DEFAA2}\NumMethods]
"(Default)" = "4"

[HKCR\Interface\{DAB1D343-1B2A-47F9-B445-93DC50704BFE}\NumMethods]
"(Default)" = "4"

[HKCR\Interface\{128C2DA6-2BC0-44C0-B3F6-4EC22E647964}\ProxyStubClsid32]
"(Default)" = "{9B7F0841-B9EA-4E79-8483-D7D626814A2F}"

[HKCR\CLSID\{9D6AA569-9F30-41AD-885A-346685C74928}\InprocServer32]
"ThreadingModel" = "Both"

[HKCR\CLSID\{9B7F0841-B9EA-4E79-8483-D7D626814A2F}\InProcServer32]
"(Default)" = "%Program Files% (x86)\Google\Update\1.3.25.11\psmachine_64.dll"

[HKCR\Interface\{8476CE12-AE1F-4198-805C-BA0F9B783F57}]
"(Default)" = "IAppCommandWeb"

[HKCR\Interface\{76F7B787-A67C-4C73-82C7-31F5E3AABC5C}]
"(Default)" = "IApp"

[HKCR\Interface\{3D05F64F-71E3-48A5-BF6B-83315BC8AE1F}\NumMethods]
"(Default)" = "12"

[HKCR\CLSID\{9061EE7F-1749-45C7-8806-48BE50E660C7}\InprocHandler32]
"ThreadingModel" = "Both"

[HKCR\Interface\{084D78A8-B084-4E14-A629-A2C419B0E3D9}]
"(Default)" = "IApp2"

[HKCR\Interface\{0CD01D1E-4A1C-489D-93B9-9B6672877C57}\ProxyStubClsid32]
"(Default)" = "{9B7F0841-B9EA-4E79-8483-D7D626814A2F}"

[HKCR\Interface\{8476CE12-AE1F-4198-805C-BA0F9B783F57}\NumMethods]
"(Default)" = "11"

[HKCR\Interface\{DD42475D-6D46-496A-924E-BD5630B4CBBA}\NumMethods]
"(Default)" = "24"

[HKCR\Interface\{0CD01D1E-4A1C-489D-93B9-9B6672877C57}]
"(Default)" = "IAppVersionWeb"

[HKCR\Interface\{0CD01D1E-4A1C-489D-93B9-9B6672877C57}\NumMethods]
"(Default)" = "10"

[HKCR\Interface\{494B20CF-282E-4BDD-9F5D-B70CB09D351E}]
"(Default)" = "IGoogleUpdate3Web"

[HKCR\Interface\{DD42475D-6D46-496A-924E-BD5630B4CBBA}]
"(Default)" = "IAppBundleWeb"

[HKCR\Interface\{8476CE12-AE1F-4198-805C-BA0F9B783F57}\ProxyStubClsid32]
"(Default)" = "{9B7F0841-B9EA-4E79-8483-D7D626814A2F}"

[HKCR\Interface\{084D78A8-B084-4E14-A629-A2C419B0E3D9}\NumMethods]
"(Default)" = "43"

[HKCR\Interface\{2E629606-312A-482F-9B12-2C4ABF6F0B6D}\ProxyStubClsid32]
"(Default)" = "{9B7F0841-B9EA-4E79-8483-D7D626814A2F}"

[HKCR\Interface\{DD42475D-6D46-496A-924E-BD5630B4CBBA}\ProxyStubClsid32]
"(Default)" = "{9B7F0841-B9EA-4E79-8483-D7D626814A2F}"

[HKCR\Interface\{128C2DA6-2BC0-44C0-B3F6-4EC22E647964}]
"(Default)" = "IProcessLauncher"

[HKCR\Interface\{4E223325-C16B-4EEB-AEDC-19AA99A237FA}\ProxyStubClsid32]
"(Default)" = "{9B7F0841-B9EA-4E79-8483-D7D626814A2F}"

[HKCR\Interface\{DAB1D343-1B2A-47F9-B445-93DC50704BFE}]
"(Default)" = "ICoCreateAsync"

[HKCR\Interface\{B3A47570-0A85-4AEA-8270-529D47899603}]
"(Default)" = "ICredentialDialog"

[HKCR\Interface\{5B25A8DC-1780-4178-A629-6BE8B8DEFAA2}]
"(Default)" = "IBrowserHttpRequest2"

The Trojan deletes the following registry key(s):

[HKCR\CLSID\{9D6AA569-9F30-41AD-885A-346685C74928}\InprocServer32]
[HKCR\CLSID\{9D6AA569-9F30-41AD-885A-346685C74928}]
[HKCR\CLSID\{9061EE7F-1749-45C7-8806-48BE50E660C7}]
[HKCR\CLSID\{9061EE7F-1749-45C7-8806-48BE50E660C7}\InprocHandler32]

The process GoogleUpdateComRegisterShell64.exe:4184 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

The Trojan deletes the following registry key(s):

[HKCR\CLSID\{9D6AA569-9F30-41AD-885A-346685C74928}\InprocServer32]
[HKCR\CLSID\{9D6AA569-9F30-41AD-885A-346685C74928}]

The process GoogleUpdateComRegisterShell64.exe:5060 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

The Trojan deletes the following registry key(s):

The process TPAutoConnSvc.exe:1844 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\ThinPrint\TPPrnUI\HP LaserJet Professional M1212nf MFP#:3]
"TrayData" = "2,Tray 3, 3,Tray 2, 1,Tray 1, 4,Manual Feed, 7,Auto Select"
"FormData" = "1,2159,2794,LetterÃ‚Â¶40,40,2086,2712, 5,2159,3556,LegalÃ‚Â¶40,40,2086,3474, 9,2100,2970,A4Ã‚Â¶39,39,2032,2890, 7,1842,2667,ExecutiveÃ‚Â¶40,40,1761,2585, 258,2159,3302,8.5 x 13 (custom)Ã‚Â¶40,40,2086,3220, 11,1480,2100,A5Ã‚Â¶39,39,1408,2020, 70,1050,1480,A6Ã‚Â¶39,39,975,1399, 13,1820,2570,B5 (JIS)Ã‚Â¶39,39,1747,2490, 264,1950,2700,16K 195x270Ã‚Â¶39,39,1882,2620, 263,1840,2600,16K 184x260Ã‚Â¶39,39,1761,2520, 257,1970,2730,16K 197x273Ã‚Â¶39,39,1896,2650, 43,1000,1480,Japanese PostcardÃ‚Â¶39,39,921,1399, 82,1480,2000,Double Japan Postcard RotatedÃ‚Â¶39,39,1408,1919, 20,1046,2413,Envelope #10Ã‚Â¶40,40,975,2331, 37,983,1905,Envelope MonarchÃ‚Â¶40,40,907,1823, 34,1760,2500,Envelope B5Ã‚Â¶39,39,1693,2420, 28,1620,2290,Envelope C5Ã‚Â¶39,39,1544,2209, 27,1100,2200,Envelope DLÃ‚Â¶39,39,1029,2120"
"DelAfterCreate" = "1"

[HKU\.DEFAULT\Printers\DevModes2]
"HP LaserJet Professional M1212nf MFP#:3" = "48 00 50 00 20 00 4C 00 61 00 73 00 65 00 72 00"

The Trojan deletes the following registry key(s):

[HKLM\SOFTWARE\ThinPrint\TPPrnUI\HP LaserJet Professional M1212nf MFP#:3]

The process SkypeSetupFull.exe:1892 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"AutoDetect" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-ef-0d-5d]
"WpadDecision" = "0"

[HKLM\SOFTWARE\Wow6432Node\Skype\Installer]
"DownloadContentLength" = "0"

[HKLM\SOFTWARE\Wow6432Node\Skype\Phone\UI]
"InstallExitCode" = "50001"

[HKLM\SOFTWARE\Wow6432Node\Skype\Installer]
"C2CIE" = "255"
"C2CFF" = "255"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer]
"GlobalAssocChangedCounter" = "59"

[HKLM\SOFTWARE\Wow6432Node\Skype\Installer]
"MSNHPIE" = "255"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "0"

[HKLM\SOFTWARE\Wow6432Node\Skype\Installer]
"MSNHPGC" = "255"
"BINGSRCHIE" = "255"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{EE1E4E39-627C-4D52-9D86-A515AB38A003}]
"WpadDecision" = "0"

[HKLM\SOFTWARE\Wow6432Node\Skype\Installer]
"DonwloadLastModified" = ""

[HKLM\SOFTWARE\Wow6432Node\Skype\Phone\UI]
"FinishedInstallation" = "1422518160"

[HKLM\SOFTWARE\Wow6432Node\Skype\Phone]
"FE_Label" = "550"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{EE1E4E39-627C-4D52-9D86-A515AB38A003}]
"WpadNetworkName" = "Network"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content]
"CachePrefix" = ""

[HKLM\SOFTWARE\Wow6432Node\Skype\Phone\UI\General]
"SkypeSetup" = "SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce"

[HKCU\Software\Classes\Local Settings\MuiCache\2C\52C64B7E]
"LanguageList" = "en-US, en"

[HKLM\SOFTWARE\Wow6432Node\Skype\Installer]
"DownloadETag" = ""
"BINGSRCHGC" = "255"

[HKCU\Software\Classes\Local Settings\MuiCache\2C\52C64B7E\@%SystemRoot%\system32]
"p2pcollab.dll,-8042" = "Peer to Peer Trust"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-ef-0d-5d]
"WpadDecisionReason" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History]
"CachePrefix" = "Visited:"

[HKLM\SOFTWARE\Wow6432Node\Skype\Installer]
"YSRCH" = "255"
"C2CGC" = "255"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "46 00 00 00 44 00 00 00 09 00 00 00 00 00 00 00"

[HKLM\SOFTWARE\Wow6432Node\Skype\Installer]
"MSNHPFF" = "255"
"yhp" = "255"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies]
"CachePrefix" = "Cookie:"

[HKCU\Software\Classes\Local Settings\MuiCache\2C\52C64B7E\@%SystemRoot%\system32]
"dnsapi.dll,-103" = "Domain Name System (DNS) Server Trust"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-ef-0d-5d]
"WpadDecisionTime" = "E4 72 2B F5 98 3B D0 01"
"WpadDetectedUrl" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{EE1E4E39-627C-4D52-9D86-A515AB38A003}]
"WpadDecisionTime" = "DB 4E AC FB 98 3B D0 01"

"WpadDecisionReason" = "1"

[HKLM\SOFTWARE\Wow6432Node\Skype\Installer]
"BINGSRCHFF" = "255"

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

To automatically run itself each time Windows is booted, the Trojan adds the following link to its file to the system registry autorun key:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Run]
"Skype" = "%Program Files% (x86)\Skype\Phone\Skype.exe /minimized /regrun"

The Trojan deletes the following value(s) in system registry:

[HKLM\SOFTWARE\Wow6432Node\Skype\Phone\UI]
"FinishedInstallation"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{EE1E4E39-627C-4D52-9D86-A515AB38A003}]
"WpadDetectedUrl"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyOverride"
"AutoDetect"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-ef-0d-5d]
"WpadDetectedUrl"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyServer"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"AutoConfigURL"

[HKLM\SOFTWARE\Wow6432Node\Skype\Phone\UI]
"InstallType"
"InstalledUDP"

The process RunDll32.exe:4076 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-ef-0d-5d]
"WpadDecision" = "0"
"WpadDecisionTime" = "E4 AE 03 CA 98 3B D0 01"

[HKLM\System\CurrentControlSet\Control\Session Manager]
"PendingFileRenameOperations" = "\??\C:\Users\"%CurrentUserName%"\AppData\Local\Temp\VMwareDnD\31ec1c24\PUPautoinsaller_v1.exe, , \??\C:\Users\"%CurrentUserName%"\AppData\Local\Temp\VMwareDnD\31ec1c24\, , \??\C:\Users\"%CurrentUserName%"\AppData\Local\Temp\VMwareDnD\6c88b866\python.dll, , \??\C:\Users\"%CurrentUserName%"\AppData\Local\Temp\VMwareDnD\6c88b866\, , \??\C:\Users\"%CurrentUserName%"\AppData\Local\Temp\OpenCandy_Why_Is_This_Here.txt,"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-ef-0d-5d]
"WpadDetectedUrl" = ""
"WpadDecisionReason" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "46 00 00 00 3F 00 00 00 09 00 00 00 00 00 00 00"

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Trojan deletes the following value(s) in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"AutoDetect"
"ProxyOverride"
"ProxyServer"
"AutoConfigURL"

The Trojan disables automatic startup of the application by deleting the following autorun value:

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\RunOnce]
"OCDLMgr"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"OCDLMgr"

The process MsiExec.exe:3812 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Taskband]
"Favorites" = "00 7C 01 00 00 14 00 1F 80 C8 27 34 1F 10 5C 10"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"AutoDetect" = "1"

[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\A29F6AF3000B1B52C7B699C8925747DD]
"YaCreationDate" = "2015-01-29"

[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}]
"ShowSearchSuggestions" = "1"

[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\A29F6AF3000B1B52C7B699C8925747DD]
"NTLogoURL" = "http://downloader.yandex.net/banner/ntpagelogo/{language}_{scalelevel}.png"

[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\buffer]
"FaviconPath" = "C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\Internet Explorer\Services\Bing.ico"

[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}]
"URL" = "http://yandex.com/yandsearch?win=161&clid=2154478&text={searchTerms}"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "0"

[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}]
"NTLogoURL" = "http://downloader.yandex.net/banner/ntpagelogo/{language}_{scalelevel}.png"

[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\A29F6AF3000B1B52C7B699C8925747DD]
"ShowSearchSuggestions" = "1"
"SortIndex" = "0"
"SuggestionsURL" = "Type: REG_SZ, Length: 0"

[HKCU\Software\AppDataLow\Yandex]
"UICreated_adm" = "1"

[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\A29F6AF3000B1B52C7B699C8925747DD]
"NTTopResultURL" = "Type: REG_SZ, Length: 0"
"SuggestionsURLFallback" = "http://api.bing.com/qsml.aspx?query={searchTerms}&maxwidth={ie:maxWidth}&rowheight={ie:rowHeight}&sectionHeight={ie:sectionHeight}&FORM=IE10SS&market={language}"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Cached]
"{182C3813-DF97-40FA-9C4E-B7D3E74F00CA} {000214F9-0000-0000-C000-000000000046} 0xFFFF" = "01 00 00 00 00 00 00 00 04 F0 89 ED 98 3B D0 01"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Taskband]
"FavoritesVersion" = "2"

[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\A29F6AF3000B1B52C7B699C8925747DD]
"FaviconPath" = "C:\Users\"%CurrentUserName%"\AppData\Local\MICROS~1\INTERN~1\Services\WWWYAN~2.ICO"

[HKCU\Software\Microsoft\Internet Explorer\SearchUrl\y]
"(Default)" = "http://yandex.com/yandsearch?win=161&clid=2154479&text=%s"

[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}]
"FaviconPath" = "C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\Internet Explorer\Services\Bing.ico"
"DisplayName" = "Yandex"
"SortIndex" = "0"

[HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks]
"{CFBFAE00-17A6-11D0-99CB-00C04FD64497}" = "Type: REG_SZ, Length: 0"

[HKCU\Software\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope" = "{0633EE93-D776-472f-A0FF-E1416B8B2E3A}"

[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\A29F6AF3000B1B52C7B699C8925747DD]
"URL" = "http://yandex.com/yandsearch?win=161&clid=2154478&text={searchTerms}"

[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}]
"SuggestionsURL" = "Type: REG_SZ, Length: 0"
"SuggestionsURL_JSON" = "http://suggest.yandex.net/suggest-ff.cgi?part={searchTerms}"

[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\buffer]
"FaviconURLFallback" = "http://www.bing.com/favicon.ico"

[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}]
"NTURL" = "http://yandex.com/yandsearch?win=161&clid=&text={searchTerms}"
"NTTopResultURL" = "Type: REG_SZ, Length: 0"

[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\buffer]
"SuggestionsURLFallback" = "http://api.bing.com/qsml.aspx?query={searchTerms}&maxwidth={ie:maxWidth}&rowheight={ie:rowHeight}&sectionHeight={ie:sectionHeight}&FORM=IE10SS&market={language}"

[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\A29F6AF3000B1B52C7B699C8925747DD]
"DisplayName" = "Yandex"
"SuggestionsURL_JSON" = "http://suggest.yandex.net/suggest-ff.cgi?part={searchTerms}"

[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}]
"YaCreationDate" = "2015-01-29"

[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\buffer]
"DisplayName" = "Bing"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Taskband]
"FavoritesChanges" = "7"

[HKCU\Software\Microsoft\Internet Explorer\Main]
"Start Page" = "http://www.yandex.com/?win=161&clid=2154477"

[HKCU\Software\Microsoft\Internet Explorer\SearchScopes]
"ShowSearchSuggestionsInAddressGlobal" = "1"

[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}]
"FaviconURLFallback" = "http://www.yandex.com/favicon.ico"

[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\buffer]
"URL" = "http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE10SR"
"TopResultURLFallback" = "http://www.bing.com/search?q={searchTerms}&src=IE-TopResult&FORM=IE10TR"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Taskband]
"FavoritesResolve" = "CC 02 00 00 4C 00 00 00 01 14 02 00 00 00 00 00"

[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\A29F6AF3000B1B52C7B699C8925747DD]
"FaviconURLFallback" = "http://www.yandex.com/favicon.ico"
"NTURL" = "http://yandex.com/yandsearch?win=161&clid=&text={searchTerms}"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\Component Categories\{56FFCC30-D398-11D0-B2AE-00A0C908FA49}\Enum]
"Implementing" = "1C 00 00 00 01 00 00 00 DF 07 01 00 04 00 1D 00"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Cached]
"{E88DCCE0-B7B3-11D1-A9F0-00AA0060FA31} {000214E6-0000-0000-C000-000000000046} 0xFFFF" = "01 00 00 00 00 00 00 00 A9 A5 DF E2 98 3B D0 01"

[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\A29F6AF3000B1B52C7B699C8925747DD]
"TopResultURLFallback" = "http://www.bing.com/search?q={searchTerms}&src=IE-TopResult&FORM=IE10TR"

The Trojan deletes the following registry key(s):

[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}]
[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\buffer]
[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\A29F6AF3000B1B52C7B699C8925747DD]
[HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks]

The Trojan deletes the following value(s) in system registry:

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"
"IntranetName"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

The process MsiExec.exe:3644 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\cncgohepihcekklokhbhiblhfcmipbdh]
"install_parameter" = "clid=2154478&win=161&"
"update_url" = "http://clients2.google.com/service/update2/crx"

[HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\gehngeifmelphpllncobkmimphfkckne]
"update_url" = "http://clients2.google.com/service/update2/crx"
"install_parameter" = "clid=2154477&win=161&"

The process MsiExec.exe:4040 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKU\.DEFAULT\SOFTWARE\Classes\Local Settings\MuiCache\2C\52C64B7E]
"LanguageList" = "en-US, en"

[HKU\.DEFAULT\SOFTWARE\Classes\Local Settings\MuiCache\2C\52C64B7E\@%SystemRoot%\system32]
"p2pcollab.dll,-8042" = "Peer to Peer Trust"
"dnsapi.dll,-103" = "Domain Name System (DNS) Server Trust"

The process utt699.tmp.exe:3512 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Trojan deletes the following value(s) in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyServer"
"ProxyOverride"
"AutoDetect"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"
"IntranetName"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"AutoConfigURL"

The process du73i.exe:1180 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{EE1E4E39-627C-4D52-9D86-A515AB38A003}]
"WpadDecisionTime" = "98 D4 E4 E9 98 3B D0 01"

[HKCR\TypeLib\{A9345A7F-B62E-4F8E-A91D-5728B8C83F63}\1.0\HELPDIR]
"(Default)" = "C:\Users\"%CurrentUserName%"\AppData\Roaming\OpenCandy\OpenCandy_AA4F1F00729C45A1B2127019AA750390"

[HKCR\TypeLib\{A9345A7F-B62E-4F8E-A91D-5728B8C83F63}\1.0]
"(Default)" = "DlmLib"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-ef-0d-5d]
"WpadDecision" = "0"
"WpadDecisionTime" = "5E A0 06 D0 98 3B D0 01"

[HKLM\System\CurrentControlSet\Control\Session Manager]
"PendingFileRenameOperations" = "\??\C:\Users\"%CurrentUserName%"\AppData\Local\Temp\VMwareDnD\31ec1c24\PUPautoinsaller_v1.exe, , \??\C:\Users\"%CurrentUserName%"\AppData\Local\Temp\VMwareDnD\31ec1c24\, , \??\C:\Users\"%CurrentUserName%"\AppData\Local\Temp\VMwareDnD\6c88b866\python.dll, , \??\C:\Users\"%CurrentUserName%"\AppData\Local\Temp\VMwareDnD\6c88b866\, , \??\C:\Users\"%CurrentUserName%"\AppData\Local\Temp\OpenCandy_Why_Is_This_Here.txt, , \??\C:\Users\"%CurrentUserName%"\AppData\Local\Temp\utt9C9E.tmp, , \??\C:\Users\"%CurrentUserName%"\AppData\Local\Temp\, , \??\C:\Users\"%CurrentUserName%"\AppData\Roaming\OpenCandy\OpenCandy_AA4F1F00729C45A1B2127019AA750390\du73i.exe,"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-ef-0d-5d]
"WpadDetectedUrl" = ""

[HKCR\TypeLib\{A9345A7F-B62E-4F8E-A91D-5728B8C83F63}\1.0\FLAGS]
"(Default)" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-ef-0d-5d]
"WpadDecisionReason" = "1"

[HKCR\TypeLib\{A9345A7F-B62E-4F8E-A91D-5728B8C83F63}\1.0\0\win32]
"(Default)" = "C:\Users\"%CurrentUserName%"\AppData\Roaming\OpenCandy\OpenCandy_AA4F1F00729C45A1B2127019AA750390\du73i.exe"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{EE1E4E39-627C-4D52-9D86-A515AB38A003}]
"WpadDecisionReason" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "46 00 00 00 40 00 00 00 09 00 00 00 00 00 00 00"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{EE1E4E39-627C-4D52-9D86-A515AB38A003}]
"WpadDecision" = "0"
"WpadNetworkName" = "Network"

[HKCU\Software\Microsoft\Windows Script\Settings]
"JITDebug" = "0"

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Trojan deletes the following registry key(s):

[HKCR\TypeLib\{A9345A7F-B62E-4F8E-A91D-5728B8C83F63}]
[HKCR\TypeLib\{A9345A7F-B62E-4F8E-A91D-5728B8C83F63}\1.0\0]
[HKCR\TypeLib\{A9345A7F-B62E-4F8E-A91D-5728B8C83F63}\1.0\HELPDIR]
[HKCR\TypeLib\{A9345A7F-B62E-4F8E-A91D-5728B8C83F63}\1.0\FLAGS]
[HKCR\TypeLib\{A9345A7F-B62E-4F8E-A91D-5728B8C83F63}\1.0]
[HKCR\TypeLib\{A9345A7F-B62E-4F8E-A91D-5728B8C83F63}\1.0\0\win32]

The Trojan deletes the following value(s) in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"AutoDetect"
"ProxyOverride"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-ef-0d-5d]
"WpadDetectedUrl"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyServer"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{EE1E4E39-627C-4D52-9D86-A515AB38A003}]
"WpadDetectedUrl"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"AutoConfigURL"

The process %original file name%.exe:1472 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies]
"CachePrefix" = "Cookie:"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"AutoDetect" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-ef-0d-5d]
"WpadDecision" = "0"
"WpadDecisionTime" = "AA C2 37 AE 98 3B D0 01"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History]
"CachePrefix" = "Visited:"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content]
"CachePrefix" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{EE1E4E39-627C-4D52-9D86-A515AB38A003}]
"WpadDecisionTime" = "AA C2 37 AE 98 3B D0 01"
"WpadDecisionReason" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "46 00 00 00 3D 00 00 00 09 00 00 00 00 00 00 00"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{EE1E4E39-627C-4D52-9D86-A515AB38A003}]
"WpadDecision" = "0"
"WpadNetworkName" = "Network"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-ef-0d-5d]
"WpadDecisionReason" = "1"

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Trojan deletes the following value(s) in system registry:

The process %original file name%.exe:1000 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\uTorrent]
"URLInfoAbout" = "http://www.utorrent.com"

[HKCU\Software\Classes\uTorrent\DefaultIcon]
"(Default)" = "%Program Files% (x86)\uTorrent\uTorrent.exe,0"

[HKCU\Software\Classes\Magnet]
"(Default)" = "Magnet URI"

[HKCR\MIME\Database\Content Type\application/x-bittorrent]
"Extension" = ".torrent"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer]
"GlobalAssocChangedCounter" = "35"

[HKCU\Software\Classes\Magnet\shell\open\command]
"(Default)" = "%Program Files% (x86)\uTorrent\uTorrent.exe %1"

[HKCU\Software\Classes\.btsearch]
"(Default)" = "uTorrent"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\uTorrent]
"DisplayName" = "Ã‚ÂµTorrent"

[HKCU\Software\Classes\Magnet\DefaultIcon]
"(Default)" = "%Program Files% (x86)\uTorrent\uTorrent.exe,0"

[HKCU\Software\Classes\.btsearch]
"Content Type" = "application/x-bittorrentsearchdescription xml"

[HKCU\Software\Classes\Magnet]
"Content Type" = "application/x-magnet"

[HKCU\Software\Classes\MIME\Database\Content Type\application/x-bittorrent]
"Extension" = ".torrent"

[HKCU\Software\BitTorrent\uTorrent]
"Revision" = "25302"

[HKCU\Software\Classes\Magnet\shell]
"(Default)" = "open"

[HKCU\Software\Classes\Applications\uTorrent.exe\shell\open\command]
"(Default)" = "%Program Files% (x86)\uTorrent\uTorrent.exe %1"

[HKCU\Software\Classes\.torrent]
"(Default)" = "uTorrent"

[HKCU\Software\Classes\MIME\Database\Content Type\application/x-bittorrentsearchdescription xml]
"Extension" = ".btsearch"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\uTorrent]
"InstallLocation" = "%Program Files% (x86)\uTorrent"
"NoRepair" = "1"

[HKCU\Software\Classes\.torrent]
"Content Type" = "application/x-bittorrent"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\uTorrent]
"NoModify" = "1"

[HKCU\Software\Classes\uTorrent\shell]
"(Default)" = "open"

[HKCU\Software\Classes\Magnet]
"URL Protocol" = ""

[HKCU\Software\Classes\.btsearch\OpenWithProgids]
"uTorrent" = ""

[HKCU\Software\Classes\uTorrent\Content Type]
"(Default)" = "application/x-bittorrent"

[HKCU\Software\Classes\.torrent\OpenWithProgids]
"uTorrent" = ""

[HKCR\MIME\Database\Content Type\application/x-bittorrentsearchdescription xml]
"Extension" = ".btsearch"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\uTorrent]
"DisplayIcon" = "%Program Files% (x86)\uTorrent\uTorrent.exe,0"

[HKCU\Software\Classes\Applications\uTorrent.exe\shell]
"(Default)" = "open"

[HKCU\Software\Classes\uTorrent\shell\open\command]
"(Default)" = "%Program Files% (x86)\uTorrent\uTorrent.exe %1"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\uTorrent]
"DisplayVersion" = "2.2.1"
"UninstallString" = "%Program Files% (x86)\uTorrent\uTorrent.exe /UNINSTALL"

The process uTorrent.exe:200 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"AutoDetect" = "1"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\AudioCompressionManager\DriverCache\msacm.msadpcm]
"fdwSupport" = "1"
"aFormatTagCache" = "01 00 00 00 10 00 00 00 02 00 00 00 32 00 00 00"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-ef-0d-5d]
"WpadDecision" = "0"

[HKCU\Software\BitTorrent\uTorrent]
"OfferProvider" = "OpenCandy"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History]
"CachePrefix" = "Visited:"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\AudioCompressionManager\DriverCache\msacm.msg711]
"cFormatTags" = "3"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\AudioCompressionManager\DriverCache\msacm.imaadpcm]
"fdwSupport" = "1"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\AudioCompressionManager\DriverCache\msacm.msadpcm]
"cFormatTags" = "2"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\AudioCompressionManager\DriverCache\msacm.msg711]
"cFilterTags" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content]
"CachePrefix" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "0"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\AudioCompressionManager\DriverCache\msacm.imaadpcm]
"cFilterTags" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{EE1E4E39-627C-4D52-9D86-A515AB38A003}]
"WpadDecision" = "0"

[HKCU\Software\Microsoft\Internet Explorer\DOMStorage\Total]
"(Default)" = "91475"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\AudioCompressionManager\DriverCache\msacm.msgsm610]
"fdwSupport" = "1"
"cFilterTags" = "0"
"cFormatTags" = "2"

[HKCU\Software\Microsoft\Internet Explorer\DOMStorage\bittorrent.com]
"(Default)" = "14"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\AudioCompressionManager\DriverCache\msacm.msgsm610]
"aFormatTagCache" = "01 00 00 00 10 00 00 00 31 00 00 00 14 00 00 00"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\AudioCompressionManager\DriverCache\msacm.msg711]
"fdwSupport" = "1"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\AudioCompressionManager\DriverCache\msacm.imaadpcm]
"aFormatTagCache" = "01 00 00 00 10 00 00 00 11 00 00 00 14 00 00 00"

[HKCU\Software\BitTorrent\uTorrent]
"OfferViaCAU" = "1"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\AudioCompressionManager\DriverCache\msacm.msadpcm]
"cFilterTags" = "0"

[HKCU\Software\Classes\Local Settings\MuiCache\2B\52C64B7E]
"LanguageList" = "en-US, en"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-ef-0d-5d]
"WpadDecisionReason" = "1"

[HKCU\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULATION]
"utorrent.exe" = "9000"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "46 00 00 00 43 00 00 00 09 00 00 00 00 00 00 00"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\AudioCompressionManager\DriverCache\msacm.imaadpcm]
"cFormatTags" = "2"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{EE1E4E39-627C-4D52-9D86-A515AB38A003}]
"WpadNetworkName" = "Network"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies]
"CachePrefix" = "Cookie:"

[HKLM\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\2796BAE63F1801E277261BA0D77770028F20EEE4]
"Blob" = "0F 00 00 00 01 00 00 00 14 00 00 00 5D 82 AD B9"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-ef-0d-5d]
"WpadDecisionTime" = "98 D4 E4 E9 98 3B D0 01"
"WpadDetectedUrl" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{EE1E4E39-627C-4D52-9D86-A515AB38A003}]
"WpadDecisionReason" = "1"

[HKCU\Software\BitTorrent\uTorrent]
"OfferName" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{EE1E4E39-627C-4D52-9D86-A515AB38A003}]
"WpadDecisionTime" = "AE 44 D0 EC 98 3B D0 01"

[HKCU\Software\BitTorrent\uTorrent]
"OfferAccepted" = "1"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\AudioCompressionManager\DriverCache\msacm.msg711]
"aFormatTagCache" = "01 00 00 00 10 00 00 00 06 00 00 00 12 00 00 00"

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Trojan deletes the following value(s) in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{EE1E4E39-627C-4D52-9D86-A515AB38A003}]
"WpadDetectedUrl"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyServer"
"ProxyOverride"
"AutoDetect"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-ef-0d-5d]
"WpadDetectedUrl"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"
"IntranetName"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"AutoConfigURL"

[HKLM\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates]
"2796BAE63F1801E277261BA0D77770028F20EEE4"

The process uTorrent.exe:3024 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKCU\Software\Classes\.btskin\shell\open\command]
"(Default)" = "%Program Files% (x86)\uTorrent\uTorrent.exe %1"

[HKCU\Software\Classes\.btinstall]
"Content Type" = "application/x-bittorrent-app"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"AutoDetect" = "1"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer]
"GlobalAssocChangedCounter" = "38"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "0"

[HKCU\Software\Classes\.btapp\shell\open\command]
"(Default)" = "%Program Files% (x86)\uTorrent\uTorrent.exe %1"

[HKCU\Software\Classes\.btapp]
"URL Protocol" = ""

[HKCU\Software\Classes\.btinstall]
"URL Protocol" = ""

[HKCU\Software\Classes\.btskin\shell]
"(Default)" = "open"

[HKCU\Software\Classes\.btskin\DefaultIcon]
"(Default)" = "%Program Files% (x86)\uTorrent\uTorrent.exe,0"

[HKCU\Software\Classes\.btinstall\shell]
"(Default)" = "open"

[HKCU\Software\Classes\.btapp]
"Content Type" = "application/x-bittorrent-app"

[HKCU\Software\Classes\.btinstall]
"(Default)" = ".btinstall URI"

[HKCU\Software\Classes\.btapp\DefaultIcon]
"(Default)" = "%Program Files% (x86)\uTorrent\uTorrent.exe,0"

[HKCU\Software\Classes\.btinstall\shell\open\command]
"(Default)" = "%Program Files% (x86)\uTorrent\uTorrent.exe %1"

[HKCU\Software\Classes\.btskin]
"Content Type" = "application/x-bittorrent-skin"
"URL Protocol" = ""

[HKCU\Software\Classes\.btapp\shell]
"(Default)" = "open"

[HKCU\Software\Classes\.btinstall\DefaultIcon]
"(Default)" = "%Program Files% (x86)\uTorrent\uTorrent.exe,0"

[HKCU\Software\Classes\.btskin]
"(Default)" = ".btskin URI"

[HKCU\Software\Classes\.btapp]
"(Default)" = ".btapp URI"

To automatically run itself each time Windows is booted, the Trojan adds the following link to its file to the system registry autorun key:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Run]
"uTorrent" = "%Program Files% (x86)\uTorrent\uTorrent.exe"

The Trojan deletes the following value(s) in system registry:

The process utt8112.tmp.exe:3708 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies]
"CachePrefix" = "Cookie:"

[HKCU\Software\Classes\Local Settings\MuiCache\2B\52C64B7E]
"LanguageList" = "en-US, en"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History]
"CachePrefix" = "Visited:"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content]
"CachePrefix" = ""

The process utt8112.tmp.exe:3896 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKCU\Software\Classes\.btinstall]
"Content Type" = "application/x-bittorrent-appinst"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"AutoDetect" = "1"

[HKCR\MIME\Database\Content Type\application/x-bittorrent-app]
"Extension" = ".btapp"

[HKCU\Software\Classes\FalconBetaAccount]
"remote_access_client_id" = "8892352461"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-ef-0d-5d]
"WpadDecision" = "0"

[HKCU\Software\Classes\bittorrent]
"URL Protocol" = ""

[HKCU\Software\BitTorrent\uTorrent]
"OfferProvider" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History]
"CachePrefix" = "Visited:"

[HKCU\Software\Classes\Magnet]
"URL Protocol" = ""

[HKCU\Software\Classes\bittorrent]
"Content Type" = "application/x-bittorrent-protocol"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\uTorrent]
"InstallLocation" = "%Program Files% (x86)\uTorrent"
"DisplayVersion" = "3.4.2.37754"

[HKCR\MIME\Database\Content Type\application/x-bittorrent-appinst]
"Extension" = ".btinstall"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer]
"GlobalAssocChangedCounter" = "41"

[HKCU\Software\Classes\.btkey]
"Content Type" = "application/x-bittorrent-key"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\uTorrent]
"VersionMinor" = "4"

[HKCU\Software\Classes\.btsearch]
"Content Type" = "application/x-bittorrentsearchdescription xml"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{EE1E4E39-627C-4D52-9D86-A515AB38A003}]
"WpadDecision" = "0"

[HKCU\Software\Classes\.btsearch]
"(Default)" = "uTorrent"

[HKCU\Software\Classes\bittorrent\DefaultIcon]
"(Default)" = "C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\maindoc.ico"

[HKCU\Software\Classes\Magnet]
"(Default)" = "Magnet URI"

[HKCU\Software\Classes\Magnet\DefaultIcon]
"(Default)" = "C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\maindoc.ico"

[HKCU\Software\Classes\MIME\Database\Content Type\application/x-bittorrent-app]
"Extension" = ".btapp"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{EE1E4E39-627C-4D52-9D86-A515AB38A003}]
"WpadNetworkName" = "Network"

[HKCU\Software\Classes\MIME\Database\Content Type\application/x-bittorrent-key]
"Extension" = ".btkey"

[HKCU\Software\Classes\uTorrent\DefaultIcon]
"(Default)" = "C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\maindoc.ico"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content]
"CachePrefix" = ""

[HKCU\Software\Classes\bittorrent]
"(Default)" = "bittorrent URI"

[HKCU\Software\Classes\Magnet]
"Content Type" = "application/x-magnet"

[HKCU\Software\Classes\.btkey]
"(Default)" = "uTorrent"

[HKCU\Software\BitTorrent\uTorrent]
"OfferViaCAU" = "0"

[HKCU\Software\Classes\MIME\Database\Content Type\application/x-bittorrent]
"Extension" = ".torrent"

[HKCU\Software\BitTorrent\uTorrent]
"Revision" = "37754"

[HKCR\MIME\Database\Content Type\application/x-bittorrent-skin]
"Extension" = ".btskin"

[HKCU\Software\Classes\Magnet\shell]
"(Default)" = "open"

[HKCU\Software\Classes\Applications\uTorrent.exe\shell\open\command]
"(Default)" = "C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\uTorrent.exe %1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\uTorrent]
"DisplayIcon" = "%Program Files% (x86)\uTorrent\uTorrent.exe,0"

[HKCU\Software\Classes\MIME\Database\Content Type\application/x-bittorrent-appinst]
"Extension" = ".btinstall"

[HKCU\Software\Classes\Local Settings\MuiCache\2B\52C64B7E]
"LanguageList" = "en-US, en"

[HKCU\Software\Classes\.torrent]
"(Default)" = "uTorrent"

[HKCU\Software\Classes\MIME\Database\Content Type\application/x-bittorrentsearchdescription xml]
"Extension" = ".btsearch"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\uTorrent]
"DisplayName" = "Ã‚ÂµTorrent"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-ef-0d-5d]
"WpadDecisionReason" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\uTorrent]
"VersionMajor" = "3"

[HKCU\Software\Classes\.btskin]
"Content Type" = "application/x-bittorrent-skin"

[HKCU\Software\Classes\MIME\Database\Content Type\application/x-bittorrent-skin]
"Extension" = ".btskin"

[HKCU\Software\BitTorrent]
"computerid" = "2A 12 E3 97 D3 6F 5F 8C B0 F3 A0 3C DE F1 05 2F"

[HKCU\Software\Classes\.torrent]
"Content Type" = "application/x-bittorrent"

[HKCR\MIME\Database\Content Type\application/x-bittorrent-key]
"Extension" = ".btkey"

[HKCU\Software\Classes\uTorrent\shell]
"(Default)" = "open"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "46 00 00 00 3E 00 00 00 09 00 00 00 00 00 00 00"

[HKCU\Software\Classes\.btsearch\OpenWithProgids]
"uTorrent" = ""

[HKCU\Software\Classes\.btinstall]
"(Default)" = "uTorrent"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\uTorrent]
"MinorVersion" = "4"

[HKCU\Software\Classes\uTorrent\Content Type]
"(Default)" = "application/x-bittorrent"

[HKCU\Software\Classes\.torrent\OpenWithProgids]
"uTorrent" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies]
"CachePrefix" = "Cookie:"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\uTorrent]
"MajorVersion" = "3"
"NoRepair" = "1"

[HKCU\Software\Classes\bittorrent\shell]
"(Default)" = "open"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-ef-0d-5d]
"WpadDecisionTime" = "E4 AE 03 CA 98 3B D0 01"
"WpadDetectedUrl" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\uTorrent]
"NoModify" = "1"
"URLInfoAbout" = "http://www.utorrent.com"

[HKCU\Software\Classes\Magnet\shell\open\command]
"(Default)" = "C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\uTorrent.exe %1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\uTorrent]
"UninstallString" = "%Program Files% (x86)\uTorrent\uTorrent.exe /UNINSTALL"
"Publisher" = "BitTorrent Inc."

[HKCU\Software\Classes\Applications\uTorrent.exe\shell]
"(Default)" = "open"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{EE1E4E39-627C-4D52-9D86-A515AB38A003}]
"WpadDecisionReason" = "1"

[HKCU\Software\Classes\.btapp]
"Content Type" = "application/x-bittorrent-app"

[HKCU\Software\Classes\.btskin]
"(Default)" = "uTorrent"

[HKCU\Software\Classes\uTorrent\shell\open\command]
"(Default)" = "C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\uTorrent.exe %1"

[HKCU\Software\BitTorrent\uTorrent]
"OfferName" = ""

[HKCU\Software\Classes\bittorrent\shell\open\command]
"(Default)" = "C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\uTorrent.exe %1"

[HKCU\Software\Classes\.btapp]
"(Default)" = "uTorrent"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{EE1E4E39-627C-4D52-9D86-A515AB38A003}]
"WpadDecisionTime" = "5E A0 06 D0 98 3B D0 01"

[HKCU\Software\BitTorrent\uTorrent]
"OfferAccepted" = "0"

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

To automatically run itself each time Windows is booted, the Trojan adds the following link to its file to the system registry autorun key:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Run]
"uTorrent" = "C:\Users\"%CurrentUserName%"\AppData\Local\Temp\utt8112.tmp.exe /MINIMIZED"

The Trojan deletes the following registry key(s):

[HKCU\Software\Classes\.torrent\OpenWithProgids]
[HKCR\.torrent\OpenWithProgIDs]
[HKCU\Software\Classes\.btsearch\OpenWithProgids]
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\uTorrent]

The Trojan deletes the following value(s) in system registry:

The process Skype.exe:1512 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKCU\Software\Classes\Wow6432Node\Interface\{92A9EB9B-85EE-444E-A302-00C3C945BAA4}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{B0C10F94-CAB6-4821-9643-D781885A46AF}]
"(Default)" = "_IVoiceMailsManagerEvents"

[HKCU\Software\Classes\Interface\{9B3A702D-5BE1-4FCE-ADB3-EBBD23E078C3}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{8E839AF9-9508-475A-AA47-3EE8A946B75E}]
"(Default)" = "IAudioChannel"

[HKCU\Software\Classes\Wow6432Node\Interface\{CA7EEB7A-7DC3-4FFE-A174-23DB5A003C04}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{70DCCE38-90BF-4428-A34F-3A6082F29E50}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{1FF8AA01-D8AF-4B2B-B254-BEFEFABAF2D6}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{4875C050-BA9C-4A05-891E-E7B0A9463664}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{62A75516-C79B-42D7-8B49-3BA492C2B385}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{4290152C-75C9-47C8-AA12-814818360B3F}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{E4E1D0AF-5B70-45AF-9A0E-F548D8FBD17C}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{D0DBB17D-565E-486C-A47B-BA32DC1FAD0A}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{76428270-36FA-4236-8BDF-AADB39FD1371}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{B1F5BCD8-69A6-4FC3-9EF0-9BD4AD999061}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{2209E091-5B90-4CAF-8582-CC5979883376}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{1F8EBE6F-7993-42CE-980A-A2F03793BE71}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{1B04D929-11E4-46C2-9162-EA4F2758C3A7}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{478DDA59-64C0-4429-AC8A-F10A940B52CC}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{D60B1701-766D-401E-8586-83E0C9106BE0}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{7B39CB77-4AEB-42D7-B351-CB5472C1C6AD}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{EF5C00E4-75E2-4D39-B358-0ED9CB14F3CB}]
"(Default)" = "IConversationContextCollectionEventData"

[HKCU\Software\Classes\Interface\{663C61F4-A9DA-4A6F-A606-F142F665DF61}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{FD9000B3-479F-4B16-9D63-70A49E078946}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{55A21CF3-A2B3-484E-BE2A-14280F501289}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{2EDAF003-14A6-4FAF-8A72-99526D048D63}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{DAA5FDE3-A81C-4F23-80B6-C47B52C649BF}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{25025B1B-0084-44D1-B383-9FFC9A99ABCD}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{57C3CB4D-C794-456F-846D-0E1ECA78BD00}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{08E1E9CF-A7E4-43BE-AE8E-B223CE71E46E}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{3C8D7146-35EA-4133-B2F6-C1FC2401A091}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{C12F0DE5-9A7D-425C-B391-8BE004EAA2F6}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{9AB20314-B258-48F8-B659-AD250DFA20F5}]
"(Default)" = "ILyncClientNotificationReceivedEventData"

[HKCU\Software\Classes\Interface\{C79E4169-535F-4A41-8DE2-C65A90D9503D}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{4023052E-E3B7-48A3-BCB3-CA2234D9BAEE}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{C63F58CB-EF11-4934-AA3B-2D69244F0780}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{FD02E775-CB9D-4CE3-9243-115C81E5F11C}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{953AE732-F53A-4116-AC1B-0321B3FB3DBA}]
"(Default)" = "_ILyncClientEvents"

[HKCU\Software\Classes\Wow6432Node\Interface\{E664682C-CBA5-4C7C-A65B-9CD046F24CBD}]
"(Default)" = "ISignInDelayedEventData"

[HKCU\Software\Classes\Interface\{DEDDD7BD-4763-41D2-9AAA-B2C143457CA4}]
"(Default)" = "IModalityActionAvailabilityChangedEventData"

[HKCU\Software\Classes\Wow6432Node\Interface\{E5CFF4A5-83A8-4FD8-8DAA-77A3E2288D4A}]
"(Default)" = "IConferenceCapabilities2"

[HKCU\Software\Classes\Wow6432Node\Interface\{18A9A79A-CBC7-4F8B-8B2B-9B40CA75EC3C}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{C4D95336-5949-4D13-AAC8-82039E5CBCFC}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{011B320C-9AC1-4DDE-B595-3D0014472E2F}]
"(Default)" = "_IRecentContactsEvents"

[HKCU\Software\Classes\Interface\{AA41EE75-F9C5-42F7-8D17-1D92D6BA4D92}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{E82737B9-B2BE-4AFD-B649-C9F665627F20}]
"(Default)" = "IDeviceCollectionEventData"

[HKCU\Software\Classes\Wow6432Node\Interface\{4DA899D3-FAC7-4F43-8E4A-1987988FBC9B}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{4875C050-BA9C-4A05-891E-E7B0A9463664}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{A58F54D2-9786-4309-964D-96549AEC7611}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{F644C610-A146-4A56-8338-A69C45C71CEF}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{AA186C92-181E-417F-B150-FCA0F367E0FC}]
"(Default)" = "_IFrequentContactsEvents"

[HKCU\Software\Classes\Interface\{7CFE77CD-731D-48B2-82B1-ECA3414D62E3}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{12480BD4-072F-4763-B9FB-41B2CA54F9CD}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{E0E8B413-BB57-4B58-B1FB-288F3A269E35}]
"(Default)" = "IConferenceCapabilities"

[HKCU\Software\Classes\Interface\{18A9A79A-CBC7-4F8B-8B2B-9B40CA75EC3C}]
"(Default)" = "IFrequentContacts"

[HKCU\Software\Classes\Interface\{87084018-7E74-4F92-AB39-1CF03188580E}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{DC63D621-11C8-4490-B017-B8C57EE1BE25}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{0C81EC90-9469-4ED4-ACAD-ADB86E11039C}]
"(Default)" = "IGroupCollection"

[HKCU\Software\Classes\Interface\{DC63D621-11C8-4490-B017-B8C57EE1BE25}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{A766520D-F700-4BF5-8428-56BD914C1C40}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{7BF20B14-58D1-494B-B301-9B16BACC9610}]
"(Default)" = "IRoomPropertyDictionary"

[HKCU\Software\Classes\Wow6432Node\Interface\{CA62E6F3-3E6D-451B-AEAA-6A1B7AACF8D4}]
"(Default)" = "IConversationWindowNeedsSizeChangeEventData"

[HKCU\Software\Classes\Interface\{628D7BDD-45AB-404D-8505-B3ADC15F454D}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{8057F99D-292C-4371-926B-5312E61A3A40}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{B8FD4A53-E7E6-4995-A5B5-1306C7584964}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{4290152C-75C9-47C8-AA12-814818360B3F}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{85109845-6AE2-4B6B-9524-65BA203E5B7D}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{7BF20B14-58D1-494B-B301-9B16BACC9610}]
"(Default)" = "IRoomPropertyDictionary"

[HKCU\Software\Classes\Wow6432Node\Interface\{A4E1D1E4-7839-473B-95FA-5D33DDC0D2DD}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{00E22CBB-3170-453A-AE62-EAFBC75A9F8D}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{3417D640-3976-4CB6-BC82-54E5E2E10784}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{AAFE380B-B079-4B55-B81B-A9401D77B776}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{C6605772-3D9D-44A7-B43A-4590E6B43EE3}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{D0984CEF-E323-4574-B07B-5C970C9CAEE0}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{86225E5C-7595-4D1C-985D-8A0458D714C0}]
"(Default)" = "IClient2"

[HKCU\Software\Classes\Wow6432Node\Interface\{F7EE956B-A713-48D3-AFEF-0A28F37740B3}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{3959E5C6-75CC-448E-9A18-9F163FF47646}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{E664682C-CBA5-4C7C-A65B-9CD046F24CBD}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{8AFFB8CE-5404-4280-BCA3-E2E4388E6D73}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{232F1CAB-5351-4E48-8A87-2185445F712D}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{3690D374-3779-4EFC-B8E8-20642C01529A}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{5418E2AB-EB9A-4659-B4DC-28DE633B2B8F}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{3DEBDC7E-811F-4304-BDD7-7D98C732026C}]
"(Default)" = "IHistoryInfo"

[HKCU\Software\Classes\Interface\{62A75516-C79B-42D7-8B49-3BA492C2B385}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{2F8C3E58-436B-42DB-8924-6C394B37DCA2}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{219DC126-9A48-483F-80C2-3F22B3B47829}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{A4E1D1E4-7839-473B-95FA-5D33DDC0D2DD}]
"(Default)" = "IConversationCollection"

[HKCU\Software\Classes\Interface\{2A9385AA-CF61-4E47-B64C-214DE4A4AD11}]
"(Default)" = "IConversationStateChangedEventData"

[HKCU\Software\Classes\Wow6432Node\Interface\{DEDDD7BD-4763-41D2-9AAA-B2C143457CA4}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{AAFE380B-B079-4B55-B81B-A9401D77B776}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{DC63D621-11C8-4490-B017-B8C57EE1BE25}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{26F15083-86DB-4663-89ED-A0ABC896B9A1}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{109D32CE-E09F-46F5-9ECB-01E1D273B7DA}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{56F7DEC0-59CA-47C6-9F35-D5066A702B39}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{995F992C-9DEF-47B9-BF11-81813C0C0E28}]
"(Default)" = "ISearchProviderStateChangedEventData"

[HKCU\Software\Classes\Interface\{17635563-2FA5-46AD-8F47-3F0FF958ECE2}]
"(Default)" = "IContentCollectionChangedEventData"

[HKCU\Software\Classes\Wow6432Node\Interface\{1FF8AA01-D8AF-4B2B-B254-BEFEFABAF2D6}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{38E5EC21-81A1-45A7-94D6-B812976231A4}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{3DEBDC7E-811F-4304-BDD7-7D98C732026C}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{9397FF55-EE06-4F02-8F2A-BE3AE249D4BB}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{BE6086A1-D436-4834-89EE-3CA4F8596A58}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{C4D95336-5949-4D13-AAC8-82039E5CBCFC}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{55A21CF3-A2B3-484E-BE2A-14280F501289}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{209DA899-15F1-499A-B8B5-A847EAA899AE}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{1A8A9402-E89F-40AE-88A8-B328391684B6}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{D9D04B55-D820-4D5B-A690-658A49368478}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{4BACB4B8-1236-42B8-BDA1-D1533148780D}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{378CD767-1B64-4A0E-A941-8F52869FC9DF}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{D0984CEF-E323-4574-B07B-5C970C9CAEE0}]
"(Default)" = "ICustomAvailabilityState"

[HKCU\Software\Classes\Interface\{88C688B0-3908-4C56-A2E8-F90AB705C536}]
"(Default)" = "IConversationActionAvailabilityEventData"

[HKCU\Software\Classes\Interface\{EBD19735-0CB5-4AF3-8E05-B0140CF9D545}]
"(Default)" = "IPreviousConversationBatchEventData"

[HKCU\Software\Classes\Interface\{082EE280-726E-417F-99CB-81A0CCBFF883}]
"(Default)" = "_IDistributionGroupEvents"

[HKCU\Software\Classes\Interface\{8A88C016-AA5D-4EAE-9C79-7AA5C360ED76}]
"(Default)" = "IConversationContextCollection"

[HKCU\Software\Classes\Wow6432Node\Interface\{1FF0E6F1-2FE4-4E29-A123-557AF0DB6927}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{FA7971EF-1E41-429F-8C79-DAC5F88D444B}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{AC10D6E9-4A8C-4484-B8F4-CA1E36347AAE}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{7356D7BB-FD71-4554-84A1-3BBE28726551}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{F0CE810F-E36F-4CD8-A836-515B9A6E09FC}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{85109845-6AE2-4B6B-9524-65BA203E5B7D}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{209DA899-15F1-499A-B8B5-A847EAA899AE}]
"(Default)" = "IRepresentationInfo"

[HKCU\Software\Classes\Interface\{6A222195-F65E-467F-8F77-EB180BD85288}]
"(Default)" = "IUCOfficeIntegration"

[HKCU\Software\Classes\Wow6432Node\Interface\{E0E8B413-BB57-4B58-B1FB-288F3A269E35}]
"(Default)" = "IConferenceCapabilities"

[HKCU\Software\Classes\Wow6432Node\Interface\{082EE280-726E-417F-99CB-81A0CCBFF883}]
"(Default)" = "_IDistributionGroupEvents"

[HKCU\Software\Classes\Wow6432Node\Interface\{21C41EDE-7ED8-4D97-9B0D-DD785781AF9B}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{AB2D1A67-2B3D-4E25-B21C-03F4BFC4C2BE}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{86225E5C-7595-4D1C-985D-8A0458D714C0}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{2495B94C-38AF-439B-BBA0-0AD38D959CE4}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{B335AE5E-E4EA-49D3-B03B-646A96FE66D3}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{FA7971EF-1E41-429F-8C79-DAC5F88D444B}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{995F992C-9DEF-47B9-BF11-81813C0C0E28}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{6A986B5D-E5EC-4395-AD2D-0E62B72DA776}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{533891F1-A460-43E6-8BDA-6D0D2C13ADDE}]
"(Default)" = "IConversation"

[HKCU\Software\Classes\Wow6432Node\Interface\{EFEC2816-F16D-48D8-9306-26C810F0EA55}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{A9AAB6A0-54B9-4419-AAAF-6B26DFAC1585}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{C4D95336-5949-4D13-AAC8-82039E5CBCFC}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{26F15083-86DB-4663-89ED-A0ABC896B9A1}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{1F8EBE6F-7993-42CE-980A-A2F03793BE71}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{6B551C9E-DE81-41DF-A0AE-39F0AF11D508}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{AB2D1A67-2B3D-4E25-B21C-03F4BFC4C2BE}]
"(Default)" = "IConversationManagerEventData"

[HKCU\Software\Classes\Wow6432Node\Interface\{8FE9A23D-72BC-4EA3-A5AF-E37F75EAD8A2}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{E4E1D0AF-5B70-45AF-9A0E-F548D8FBD17C}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{311DDE48-ED7D-46FA-9E0A-2E314B7FEF7C}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{56F7DEC0-59CA-47C6-9F35-D5066A702B39}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{D0DBB17D-565E-486C-A47B-BA32DC1FAD0A}]
"(Default)" = "ISharerChangedEventData"

[HKCU\Software\Classes\Wow6432Node\Interface\{B22EDBEA-9E61-4703-82BE-01C05619B6D6}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{1F8EBE6F-7993-42CE-980A-A2F03793BE71}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{85109845-6AE2-4B6B-9524-65BA203E5B7D}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{87084018-7E74-4F92-AB39-1CF03188580E}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{DF414A68-5051-4465-AAE2-4F301315734E}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{4875C050-BA9C-4A05-891E-E7B0A9463664}]
"(Default)" = "IParticipant"

[HKCU\Software\Classes\Wow6432Node\Interface\{4290152C-75C9-47C8-AA12-814818360B3F}]
"(Default)" = "IModalityPropertyChangedEventData"

[HKCU\Software\Classes\Wow6432Node\Interface\{8684D3AD-7061-4056-A894-EBF1270ADB9B}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{AE3A7C39-9C30-4E0F-BAE4-D8344EF377EA}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{478DDA59-64C0-4429-AC8A-F10A940B52CC}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{57CC2235-96C5-49FA-B92B-350486C6CF52}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{F644C610-A146-4A56-8338-A69C45C71CEF}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{086F0E9D-A416-40F9-877C-F1C82DC1A6AD}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{2A9385AA-CF61-4E47-B64C-214DE4A4AD11}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{9D4D3D10-DEBC-40C6-ACF9-527986CB42BC}]
"(Default)" = "IChannelActionAvailabilityEventData"

[HKCU\Software\Classes\Interface\{3F60CFF7-BE3F-4404-8395-C02D0CDD318E}]
"(Default)" = "_IModalityCallback"

[HKCU\Software\Classes\Local Settings\MuiCache\2D\52C64B7E\@%SystemRoot%\system32]
"dnsapi.dll,-103" = "Domain Name System (DNS) Server Trust"

[HKCU\Software\Classes\Wow6432Node\Interface\{50D86EE2-288F-44F5-8144-69F6E3B24B90}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{92A9EB9B-85EE-444E-A302-00C3C945BAA4}]
"(Default)" = "_IDelegatorClientEvents"

[HKCU\Software\Classes\Wow6432Node\Interface\{EBD19735-0CB5-4AF3-8E05-B0140CF9D545}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{4290152C-75C9-47C8-AA12-814818360B3F}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{533891F1-A460-43E6-8BDA-6D0D2C13ADDE}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{AE3A7C39-9C30-4E0F-BAE4-D8344EF377EA}]
"(Default)" = "_IContentSharingModalityEvents"

[HKCU\Software\Classes\Wow6432Node\Interface\{EE9F3E74-AC61-469E-80D6-E22BF4EEFF5C}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{EC9773AD-7D22-4B03-B949-5E9055AF0F19}]
"(Default)" = "IGroupCollectionChangedEventData"

[HKCU\Software\Classes\Interface\{4DA899D3-FAC7-4F43-8E4A-1987988FBC9B}]
"(Default)" = "ISelf"

[HKCU\Software\Classes\Interface\{4B3A2412-C149-4E52-A713-6CEBCF47503E}]
"(Default)" = "IGroupMemberChangedEventData"

[HKCU\Software\Classes\Wow6432Node\Interface\{2F8C3E58-436B-42DB-8924-6C394B37DCA2}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{ABF012A2-2068-4B4D-80D7-6D386BA7C8A2}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{4023052E-E3B7-48A3-BCB3-CA2234D9BAEE}]
"(Default)" = "IShareableContentActionAvailabilityChangedEventData"

[HKCU\Software\Classes\Wow6432Node\Interface\{62074904-8D06-43FE-A531-E63DF7FDC2E7}]
"(Default)" = "IModalityPropertyDictionary"

[HKCU\Software\Classes\Wow6432Node\Interface\{64B7E9AD-D920-4EAA-95C7-9D95DE9ACE24}]
"(Default)" = "IConferenceApplicationProperties"

[HKCU\Software\Classes\Interface\{086F0E9D-A416-40F9-877C-F1C82DC1A6AD}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{855AD949-E2EB-473D-AAF2-9800008EA303}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{953AE732-F53A-4116-AC1B-0321B3FB3DBA}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{330639F2-E399-48CB-863F-56A50A27A138}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{56A868B4-0AD4-11CE-B03A-0020AF0BA770}]
"(Default)" = "IVideoWindow"

[HKCU\Software\Classes\Wow6432Node\Interface\{AE3A7C39-9C30-4E0F-BAE4-D8344EF377EA}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{4E8DC7E0-04B8-470B-BDFA-F520099B975F}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{D60B1701-766D-401E-8586-83E0C9106BE0}]
"(Default)" = "IParticipant2"

[HKCU\Software\Classes\Wow6432Node\Interface\{55A21CF3-A2B3-484E-BE2A-14280F501289}]
"(Default)" = "IVideoView"

[HKCU\Software\Classes\Wow6432Node\Interface\{62A75516-C79B-42D7-8B49-3BA492C2B385}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{1A8A9402-E89F-40AE-88A8-B328391684B6}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{50D86EE2-288F-44F5-8144-69F6E3B24B90}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{A0C3E9BA-C622-45A2-9FED-2C662F3F489A}]
"(Default)" = "IRoomMessage"

[HKCU\Software\Classes\Interface\{D4B240B9-059B-4D13-8997-31B282B3BD43}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{1B04D929-11E4-46C2-9162-EA4F2758C3A7}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{A4E1D1E4-7839-473B-95FA-5D33DDC0D2DD}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{B03614AE-8D68-4386-9E1C-939CABCF1232}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{9918673D-4D74-41CF-8840-D4996395A34C}]
"(Default)" = "_IGroupEvents"

[HKCU\Software\Classes\Wow6432Node\Interface\{70DCCE38-90BF-4428-A34F-3A6082F29E50}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{48B3099D-841D-4CAA-9202-5787596E2BD2}]
"(Default)" = "IActivePresenterChangedEventData"

[HKCU\Software\Classes\Interface\{76DE1CD8-F278-48A1-A391-E5BEB8F428E6}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{B00F2520-029C-47D0-B4E8-8FBEF47CAA7E}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{BE026CD2-7E82-4F7C-8762-F6B02F496174}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{08DDF5C4-FA12-4978-B26E-C6D23C453413}]
"(Default)" = "_IDeviceManagerCallback"

[HKCU\Software\Classes\Wow6432Node\Interface\{90B49A60-72AF-4360-9F9B-916DB7504A3C}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{12480BD4-072F-4763-B9FB-41B2CA54F9CD}]
"(Default)" = "IContactSettingChangedEventData"

[HKCU\Software\Classes\Interface\{88C688B0-3908-4C56-A2E8-F90AB705C536}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{2A9385AA-CF61-4E47-B64C-214DE4A4AD11}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{7452BD0F-65CB-4A5E-AC37-E2BEA1F43DD9}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{330639F2-E399-48CB-863F-56A50A27A138}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{855AD949-E2EB-473D-AAF2-9800008EA303}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{533891F1-A460-43E6-8BDA-6D0D2C13ADDE}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{17635563-2FA5-46AD-8F47-3F0FF958ECE2}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{7CD92461-CA4F-4BEB-A636-8BBCC192E60F}]
"(Default)" = "ISearchResults2"

[HKCU\Software\Classes\Wow6432Node\Interface\{C4D95336-5949-4D13-AAC8-82039E5CBCFC}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{32430741-330B-48DF-96F6-0CFE00484D40}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{7356D7BB-FD71-4554-84A1-3BBE28726551}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{A4E1D1E4-7839-473B-95FA-5D33DDC0D2DD}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{ABF012A2-2068-4B4D-80D7-6D386BA7C8A2}]
"(Default)" = "_IContactsAndGroupsCallback"

[HKCU\Software\Classes\Interface\{C31FB52D-9E9E-45AD-A102-5218E1685B78}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{EF5C00E4-75E2-4D39-B358-0ED9CB14F3CB}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{F5996C71-77AB-4020-9776-C2C270FEF2AE}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{378CD767-1B64-4A0E-A941-8F52869FC9DF}]
"(Default)" = "ISearchResult"

[HKCU\Software\Classes\Wow6432Node\Interface\{D5C1C8FB-DC8A-45A3-AAA3-53B89D43CDE4}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{3CD1DB65-D85B-4912-8536-6BD8E19F1738}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{C7ACB102-B692-49CC-92DA-5824822C7B96}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{0BDB9057-28AE-4BF0-AFF0-12A148E51637}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{64B7E9AD-D920-4EAA-95C7-9D95DE9ACE24}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{61C747F6-157C-4CAE-A37C-EC4352175860}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{464D5228-9F68-4B1F-B430-156A104E2B85}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{F7EE956B-A713-48D3-AFEF-0A28F37740B3}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{7693221D-7E9F-47D3-8782-6437CF3D4C0C}]
"(Default)" = "IPhone"

[HKCU\Software\Classes\Wow6432Node\Interface\{C31FB52D-9E9E-45AD-A102-5218E1685B78}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{53D014C1-54DB-42B3-9DFD-8E231EF2C356}]
"(Default)" = "IWorkingHours"

[HKCU\Software\Classes\Wow6432Node\Interface\{E4E1D0AF-5B70-45AF-9A0E-F548D8FBD17C}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{F0B791FA-434B-49F2-B84E-05619EBE6BEB}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{F0CE810F-E36F-4CD8-A836-515B9A6E09FC}]
"(Default)" = "IContactInformationDictionary"

[HKCU\Software\Classes\Interface\{4FE44049-4E44-4109-B234-4E4EFC135A86}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{00E22CBB-3170-453A-AE62-EAFBC75A9F8D}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{2C59A886-ACD3-46BB-8BAC-7C1C59FB2E0D}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{C63F58CB-EF11-4934-AA3B-2D69244F0780}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{21629AB6-9557-4985-9237-49177F618692}]
"(Default)" = "IContextEventData"

[HKCU\Software\Classes\Wow6432Node\Interface\{FB67275C-4D9E-4C32-9793-A96749884FC1}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{64B7E9AD-D920-4EAA-95C7-9D95DE9ACE24}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{92D7E7A8-48D8-4166-8911-630AE02B2B93}]
"(Default)" = "IInitialContextEventData"

[HKCU\Software\Classes\Wow6432Node\Interface\{70DCCE38-90BF-4428-A34F-3A6082F29E50}]
"(Default)" = "IParticipantPropertyChangedEventData"

[HKCU\Software\Classes\Interface\{2D3D62CA-E9F6-4F94-8EBD-5FABAB29E6A5}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{92A9EB9B-85EE-444E-A302-00C3C945BAA4}]
"(Default)" = "_IDelegatorClientEvents"

[HKCU\Software\Classes\Interface\{32430741-330B-48DF-96F6-0CFE00484D40}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{995F992C-9DEF-47B9-BF11-81813C0C0E28}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{66D1FFC0-C234-4F3D-ABAA-98222A69E525}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{53D014C1-54DB-42B3-9DFD-8E231EF2C356}]
"(Default)" = "IWorkingHours"

[HKCU\Software\Classes\Interface\{65B71572-5338-43C8-9E4C-F1DFC6711AD1}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{8E73E7E1-90CE-4D3B-B5B7-71E87B2E8BA5}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{D2BFC7D7-A64F-48EF-BF90-C3C7E684D89C}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{4BACB4B8-1236-42B8-BDA1-D1533148780D}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{B0C10F94-CAB6-4821-9643-D781885A46AF}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{232F1CAB-5351-4E48-8A87-2185445F712D}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{7CFE77CD-731D-48B2-82B1-ECA3414D62E3}]
"(Default)" = "IConversationPropertyChangedEventData"

[HKCU\Software\Classes\Wow6432Node\Interface\{86225E5C-7595-4D1C-985D-8A0458D714C0}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{1FF8AA01-D8AF-4B2B-B254-BEFEFABAF2D6}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{4875C050-BA9C-4A05-891E-E7B0A9463664}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{8C9B6953-33CC-4A04-9DA4-F71AE79DA0C0}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{62B932E9-7847-4D78-BEEE-5D58BF815B03}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{2495B94C-38AF-439B-BBA0-0AD38D959CE4}]
"(Default)" = "IChannelStateChangedEventData"

[HKCU\Software\Classes\Interface\{806D3227-4CB8-47C4-9864-7D4DF4F44069}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{109D32CE-E09F-46F5-9ECB-01E1D273B7DA}]
"(Default)" = "IConversationWindowInformationDictionary"

[HKCU\Software\Classes\Interface\{0FDB5B86-DD44-41BF-A443-317FD19BBF3D}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{B335AE5E-E4EA-49D3-B03B-646A96FE66D3}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{FF037274-455A-4E34-B5D1-D42DB866F9B7}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{7CD92461-CA4F-4BEB-A636-8BBCC192E60F}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{ED5040FA-8F8F-4876-BF6D-9C62F5EFFD5B}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{D992371E-5161-453B-97E6-6E7C67BC075E}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{FD02E775-CB9D-4CE3-9243-115C81E5F11C}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{0C81EC90-9469-4ED4-ACAD-ADB86E11039C}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{E2C6D6E0-52EF-47A2-BDA9-9D6A7A29A391}]
"(Default)" = "_IRoomManagerEvents"

[HKCU\Software\Classes\Wow6432Node\Interface\{21629AB6-9557-4985-9237-49177F618692}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{D804BA85-DB0F-49EE-B723-DCDF0425BD9F}]
"(Default)" = "ICustomGroup"

[HKCU\Software\Classes\Wow6432Node\Interface\{08E1E9CF-A7E4-43BE-AE8E-B223CE71E46E}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{2F8C3E58-436B-42DB-8924-6C394B37DCA2}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{F97973D7-9436-4A3E-A802-F6EA172A0425}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{7B39CB77-4AEB-42D7-B351-CB5472C1C6AD}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{EE1E4E39-627C-4D52-9D86-A515AB38A003}]
"WpadDecisionReason" = "1"

[HKCU\Software\Classes\Wow6432Node\Interface\{AAFE380B-B079-4B55-B81B-A9401D77B776}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{87084018-7E74-4F92-AB39-1CF03188580E}]
"(Default)" = "IUtilities"

[HKCU\Software\Classes\Interface\{8A88C016-AA5D-4EAE-9C79-7AA5C360ED76}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\IM Providers]
"DefaultIMApp" = "Skype"

[HKCU\Software\Classes\Wow6432Node\Interface\{26C8D96D-7D22-4E9E-948A-EDCCB4CA9C64}]
"(Default)" = "_IParticipantCallback"

[HKCU\Software\Classes\Wow6432Node\Interface\{806D3227-4CB8-47C4-9864-7D4DF4F44069}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{7CFE77CD-731D-48B2-82B1-ECA3414D62E3}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{6A7FF112-42CE-4D03-8922-D02AC6C5759F}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{B8FD4A53-E7E6-4995-A5B5-1306C7584964}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{D2BFC7D7-A64F-48EF-BF90-C3C7E684D89C}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{2F8C3E58-436B-42DB-8924-6C394B37DCA2}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{4BACB4B8-1236-42B8-BDA1-D1533148780D}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{011B320C-9AC1-4DDE-B595-3D0014472E2F}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{BE6086A1-D436-4834-89EE-3CA4F8596A58}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{BE026CD2-7E82-4F7C-8762-F6B02F496174}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{9918673D-4D74-41CF-8840-D4996395A34C}]
"(Default)" = "_IGroupEvents"

[HKCU\Software\Classes\Wow6432Node\Interface\{36CDC166-4F21-46AD-A60E-8551F26C1D41}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{32430741-330B-48DF-96F6-0CFE00484D40}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{CE16D540-B9E8-4742-8659-9A7A318AFB92}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{2D3D62CA-E9F6-4F94-8EBD-5FABAB29E6A5}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{3690D374-3779-4EFC-B8E8-20642C01529A}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{0C81EC90-9469-4ED4-ACAD-ADB86E11039C}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{3C8210C8-8578-47C6-87A9-FA1AD2BA9873}]
"(Default)" = "IShareableContentPropertyChangedEventData"

[HKCU\Software\Classes\Interface\{B1C6ECC3-1EA7-495D-9337-02FE4FB723F0}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{9AB20314-B258-48F8-B659-AD250DFA20F5}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{EE9F3E74-AC61-469E-80D6-E22BF4EEFF5C}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{E66CA1CC-9DB0-467E-9C60-6A832ACD6780}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{DC4BC923-6A52-4F02-9F8A-547B606955E7}]
"(Default)" = "_IAccessPermissionEvents"

[HKCU\Software\Classes\Wow6432Node\Interface\{905B727D-FD8F-46EC-8006-CE245F6835EE}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{7CFE77CD-731D-48B2-82B1-ECA3414D62E3}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{FD02E775-CB9D-4CE3-9243-115C81E5F11C}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{B335AE5E-E4EA-49D3-B03B-646A96FE66D3}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{330639F2-E399-48CB-863F-56A50A27A138}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{7818A3F7-674B-477E-99E8-54774579A8E7}]
"(Default)" = "IExchangeECPUrlChangedEventData"

[HKCU\Software\Classes\Wow6432Node\Interface\{F7EE956B-A713-48D3-AFEF-0A28F37740B3}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{3417D640-3976-4CB6-BC82-54E5E2E10784}]
"(Default)" = "_IUtilities2Events"

[HKCU\Software\Classes\Wow6432Node\Interface\{57CC2235-96C5-49FA-B92B-350486C6CF52}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{9E0F8FCA-D9C9-47CD-87F4-5554217DFFCC}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{9E0F8FCA-D9C9-47CD-87F4-5554217DFFCC}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{1566FA3C-FD24-41DB-A2B8-6232F89783DE}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{EFEC2816-F16D-48D8-9306-26C810F0EA55}]
"(Default)" = "IContactInformationChangedEventData"

[HKCU\Software\Classes\Wow6432Node\Interface\{7693221D-7E9F-47D3-8782-6437CF3D4C0C}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{B03614AE-8D68-4386-9E1C-939CABCF1232}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{855AD949-E2EB-473D-AAF2-9800008EA303}]
"(Default)" = "IConversationContextList"

[HKCU\Software\Classes\Interface\{E66CA1CC-9DB0-467E-9C60-6A832ACD6780}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{DC4BC923-6A52-4F02-9F8A-547B606955E7}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{569E04F2-D286-4903-9642-44D850310956}]
"(Default)" = "_IClientSettingsEvents"

[HKCU\Software\Classes\Wow6432Node\Interface\{7CC306E9-2546-4101-82AB-29613AD6F7A7}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{478DDA59-64C0-4429-AC8A-F10A940B52CC}]
"(Default)" = "IModalityStateChangedEventData"

[HKCU\Software\Classes\Interface\{9E0F8FCA-D9C9-47CD-87F4-5554217DFFCC}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{48B3099D-841D-4CAA-9202-5787596E2BD2}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{7693221D-7E9F-47D3-8782-6437CF3D4C0C}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{330639F2-E399-48CB-863F-56A50A27A138}]
"(Default)" = "IWebAppExtension"

[HKCU\Software\Classes\Wow6432Node\Interface\{F719ED75-B7BD-45D3-9097-254509226F20}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{80EDBF3A-812E-42B5-A67F-6CC6D9A19A6C}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{311DDE48-ED7D-46FA-9E0A-2E314B7FEF7C}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{FD02E775-CB9D-4CE3-9243-115C81E5F11C}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{89C7EB8E-42BC-4C9F-BB34-88CDE83CCB37}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{F87AFD9A-9BF8-4AC4-953E-33C4D2035D33}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{10FDD9BA-0CBA-4958-B6C8-D0912BF2703F}]
"(Default)" = "IContact2"

[HKCU\Software\Skype\Phone\UI]
"StatsSentVersion" = "7.1.0.105"

[HKCU\Software\Classes\Interface\{62B932E9-7847-4D78-BEEE-5D58BF815B03}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{26C8D96D-7D22-4E9E-948A-EDCCB4CA9C64}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{94093301-8854-408E-8138-C7C3D2DACA1F}]
"(Default)" = "IShareableContentStateChangedEventData"

[HKCU\Software\Classes\Wow6432Node\Interface\{A766520D-F700-4BF5-8428-56BD914C1C40}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{8E73E7E1-90CE-4D3B-B5B7-71E87B2E8BA5}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{68B1FC26-B48F-4D5F-B041-8E246676D836}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{3F60CFF7-BE3F-4404-8395-C02D0CDD318E}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{C0034194-F7B6-43EB-B0E0-7852FC8E7BFA}]
"(Default)" = "IPhonesChangedEventData"

[HKCU\Software\Classes\Wow6432Node\Interface\{E0E8B413-BB57-4B58-B1FB-288F3A269E35}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{26C8D96D-7D22-4E9E-948A-EDCCB4CA9C64}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{62B932E9-7847-4D78-BEEE-5D58BF815B03}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{DC4BC923-6A52-4F02-9F8A-547B606955E7}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{311DDE48-ED7D-46FA-9E0A-2E314B7FEF7C}]
"(Default)" = "_IContactCallback"

[HKCU\Software\Classes\Interface\{18A9A79A-CBC7-4F8B-8B2B-9B40CA75EC3C}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{339D28C6-3D1A-45D4-BA14-A56742749A43}]
"(Default)" = "IWorkingPeriod"

[HKCU\Software\Classes\Interface\{25D64AEA-0E65-49CB-8D6D-65DB0AC1AF65}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{86225E5C-7595-4D1C-985D-8A0458D714C0}]
"(Default)" = "IClient2"

[HKCU\Software\Classes\Interface\{E6B3F5FA-4208-4C37-AE07-F6435B68D693}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{DD31376E-E529-43F2-B3B4-E379EBD28E2A}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{D804BA85-DB0F-49EE-B723-DCDF0425BD9F}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{7CC306E9-2546-4101-82AB-29613AD6F7A7}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{1A8A9402-E89F-40AE-88A8-B328391684B6}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{E6B3F5FA-4208-4C37-AE07-F6435B68D693}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{064E6072-5592-4D13-AFDB-55F5A494E137}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{3F60CFF7-BE3F-4404-8395-C02D0CDD318E}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{C6605772-3D9D-44A7-B43A-4590E6B43EE3}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{DC4BC923-6A52-4F02-9F8A-547B606955E7}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{D4B240B9-059B-4D13-8997-31B282B3BD43}]
"(Default)" = "IModality"

[HKCU\Software\Classes\Interface\{8F04E92D-EE26-4B64-B9C1-56DD90816810}]
"(Default)" = "IFollowedRoomsChangedEventData"

[HKCU\Software\Classes\Wow6432Node\Interface\{0FDB5B86-DD44-41BF-A443-317FD19BBF3D}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{C6605772-3D9D-44A7-B43A-4590E6B43EE3}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{2209E091-5B90-4CAF-8582-CC5979883376}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{BE6086A1-D436-4834-89EE-3CA4F8596A58}]
"(Default)" = "IConferenceApplicationData"

[HKCU\Software\Classes\Interface\{9274DBDC-43CE-45AA-A817-414A4494AD28}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{57C3CB4D-C794-456F-846D-0E1ECA78BD00}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{21629AB6-9557-4985-9237-49177F618692}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{F8DF0B4B-A4CE-476B-81D3-9FBA98461B62}]
"(Default)" = "ISignInConfiguration"

[HKCU\Software\Classes\Wow6432Node\Interface\{4AA93AA8-898C-45EE-8E5C-1A86739B3F96}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{B00F2520-029C-47D0-B4E8-8FBEF47CAA7E}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{DAB42E13-500A-409A-AC34-C1BF4719EE2E}]
"(Default)" = "_IFavoriteContactsEvents"

[HKCU\Software\Classes\Interface\{011B320C-9AC1-4DDE-B595-3D0014472E2F}]
"(Default)" = "_IRecentContactsEvents"

[HKCU\Software\Classes\Interface\{E4E1D0AF-5B70-45AF-9A0E-F548D8FBD17C}]
"(Default)" = "IAVModality"

[HKCU\Software\Classes\Wow6432Node\Interface\{80EDBF3A-812E-42B5-A67F-6CC6D9A19A6C}]
"(Default)" = "IDelegatorClient"

[HKCU\Software\Classes\Wow6432Node\Interface\{FB67275C-4D9E-4C32-9793-A96749884FC1}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{311DDE48-ED7D-46FA-9E0A-2E314B7FEF7C}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{92D7E7A8-48D8-4166-8911-630AE02B2B93}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{02DD541F-C863-4295-92AB-A4CF29F5D841}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{B8FD4A53-E7E6-4995-A5B5-1306C7584964}]
"(Default)" = "IUnreadMessageCountChangedEventData"

[HKCU\Software\Classes\Interface\{283C2089-B760-4D65-9199-716627174F7A}]
"(Default)" = "IGroupNameChangedEventData"

[HKCU\Software\Classes\Wow6432Node\Interface\{DAB42E13-500A-409A-AC34-C1BF4719EE2E}]
"(Default)" = "_IFavoriteContactsEvents"

[HKCU\Software\Classes\Wow6432Node\Interface\{1B04D929-11E4-46C2-9162-EA4F2758C3A7}]
"(Default)" = "IClientSettings"

[HKCU\Software\Classes\Interface\{C7ACB102-B692-49CC-92DA-5824822C7B96}]
"(Default)" = "IConferenceScheduler"

[HKCU\Software\Classes\Interface\{81C9D13F-A4F9-4E13-92D3-BB271E8DF3D2}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{C79E4169-535F-4A41-8DE2-C65A90D9503D}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{905B727D-FD8F-46EC-8006-CE245F6835EE}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{6A222195-F65E-467F-8F77-EB180BD85288}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{A0984F01-5D2C-4302-87A0-69BE7B015143}]
"(Default)" = "IConferenceRegionalAccessInformationCollection"

[HKCU\Software\Classes\Wow6432Node\Interface\{64B7E9AD-D920-4EAA-95C7-9D95DE9ACE24}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{2C59A886-ACD3-46BB-8BAC-7C1C59FB2E0D}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{B0B0E8F8-32DA-4CB0-A124-D1E35891D53A}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{2EDAF003-14A6-4FAF-8A72-99526D048D63}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{36CDC166-4F21-46AD-A60E-8551F26C1D41}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{C4D95336-5949-4D13-AAC8-82039E5CBCFC}]
"(Default)" = "_IUtilitiesCallback"

[HKCU\Software\Classes\Interface\{BC9F5F40-D315-40C1-B1C6-CEA0646E18E2}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{21C41EDE-7ED8-4D97-9B0D-DD785781AF9B}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{DBA05C15-1C07-4A76-8248-08D8416A24E3}]
"(Default)" = "IIsTypingChangedEventData"

[HKCU\Software\Classes\Wow6432Node\Interface\{0CA9BAE8-DD28-4929-A821-4D00F11203CC}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{CA7EEB7A-7DC3-4FFE-A174-23DB5A003C04}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{4E8DC7E0-04B8-470B-BDFA-F520099B975F}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{62B932E9-7847-4D78-BEEE-5D58BF815B03}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{C79E4169-535F-4A41-8DE2-C65A90D9503D}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{0C81EC90-9469-4ED4-ACAD-ADB86E11039C}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{10D66B39-5E4B-4C98-AAC6-D0458FEB1BDB}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{806D3227-4CB8-47C4-9864-7D4DF4F44069}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{66D1FFC0-C234-4F3D-ABAA-98222A69E525}]
"(Default)" = "IConferenceTelephoneAccessInformation"

[HKCU\Software\Classes\Interface\{3C8D7146-35EA-4133-B2F6-C1FC2401A091}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{7818A3F7-674B-477E-99E8-54774579A8E7}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{219DC126-9A48-483F-80C2-3F22B3B47829}]
"(Default)" = "_IScheduledConferenceManagerCallback"

[HKCU\Software\Classes\Interface\{26F15083-86DB-4663-89ED-A0ABC896B9A1}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{04378C72-E58F-47C0-8621-901B85CA2ED4}]
"(Default)" = "IConversationContext"

[HKCU\Software\Classes\Interface\{3C8D7146-35EA-4133-B2F6-C1FC2401A091}]
"(Default)" = "ISelf2"

[HKCU\Software\Classes\Interface\{70DCCE38-90BF-4428-A34F-3A6082F29E50}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{C7ACB102-B692-49CC-92DA-5824822C7B96}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{A0C3E9BA-C622-45A2-9FED-2C662F3F489A}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{38E5EC21-81A1-45A7-94D6-B812976231A4}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{339D28C6-3D1A-45D4-BA14-A56742749A43}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{744BAB86-B15F-4BD5-B7DD-476B0CE0162A}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{BE6086A1-D436-4834-89EE-3CA4F8596A58}]
"(Default)" = "IConferenceApplicationData"

[HKCU\Software\Classes\Interface\{7CFE77CD-731D-48B2-82B1-ECA3414D62E3}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{26C8D96D-7D22-4E9E-948A-EDCCB4CA9C64}]
"(Default)" = "_IParticipantCallback"

[HKCU\Software\Classes\Wow6432Node\Interface\{02DD541F-C863-4295-92AB-A4CF29F5D841}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{9397FF55-EE06-4F02-8F2A-BE3AE249D4BB}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{C31FB52D-9E9E-45AD-A102-5218E1685B78}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{D992371E-5161-453B-97E6-6E7C67BC075E}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{9244D573-914F-4C1F-93F6-31609A95CBED}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{DEDDD7BD-4763-41D2-9AAA-B2C143457CA4}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{628D7BDD-45AB-404D-8505-B3ADC15F454D}]
"(Default)" = "_IRoomCallback"

[HKCU\Software\Classes\Wow6432Node\Interface\{57C3CB4D-C794-456F-846D-0E1ECA78BD00}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{08E1E9CF-A7E4-43BE-AE8E-B223CE71E46E}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{4BACB4B8-1236-42B8-BDA1-D1533148780D}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{12480BD4-072F-4763-B9FB-41B2CA54F9CD}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{05789509-AFA1-4E90-B4FA-1A7820DB9796}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{8E73E7E1-90CE-4D3B-B5B7-71E87B2E8BA5}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{D992371E-5161-453B-97E6-6E7C67BC075E}]
"(Default)" = "_IPreviousConversationsManagerEvents"

[HKCU\Software\Classes\Interface\{DAB42E13-500A-409A-AC34-C1BF4719EE2E}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{C12F0DE5-9A7D-425C-B391-8BE004EAA2F6}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{6B551C9E-DE81-41DF-A0AE-39F0AF11D508}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{68DA8699-6C6E-4390-BD82-709FF1DC1702}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{F97BED54-E434-4020-A197-F15AEA9D9C95}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{2A9385AA-CF61-4E47-B64C-214DE4A4AD11}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{74B6CAF0-755E-454D-A819-D0E439EF5296}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{70986DCE-4AA8-4DFB-9A45-4BFCF7A206F5}]
"(Default)" = "_IChannel2Callback"

[HKCU\Software\Classes\Wow6432Node\Interface\{A58F54D2-9786-4309-964D-96549AEC7611}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{88C688B0-3908-4C56-A2E8-F90AB705C536}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{2A9385AA-CF61-4E47-B64C-214DE4A4AD11}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{F0B791FA-434B-49F2-B84E-05619EBE6BEB}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{744BAB86-B15F-4BD5-B7DD-476B0CE0162A}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{4B3A2412-C149-4E52-A713-6CEBCF47503E}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{37C7F935-E215-46D2-82A3-A451840EC733}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{3CD1DB65-D85B-4912-8536-6BD8E19F1738}]
"(Default)" = "IVideoChannelCollection"

[HKCU\Software\Classes\Wow6432Node\Interface\{18BA13C7-A64E-4301-BA51-D1BFB3C1C9D5}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{4023052E-E3B7-48A3-BCB3-CA2234D9BAEE}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{EC9773AD-7D22-4B03-B949-5E9055AF0F19}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{56F7DEC0-59CA-47C6-9F35-D5066A702B39}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{420A24E2-5C31-4262-9BD5-058682300ED6}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{F423726D-0E9B-4B55-9569-E79865210F69}]
"(Default)" = "IScheduledConferenceCollection"

[HKCU\Software\Classes\Wow6432Node\Interface\{DC4BC923-6A52-4F02-9F8A-547B606955E7}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{DA7CF784-67DF-429C-82FB-9AFD99F6CCCB}]
"(Default)" = "IVideoDevice"

[HKCU\Software\Classes\Wow6432Node\Interface\{3C43A2BE-BA4A-41E8-8F93-A9DC5F091892}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{6A986B5D-E5EC-4395-AD2D-0E62B72DA776}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{7BF20B14-58D1-494B-B301-9B16BACC9610}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{905B727D-FD8F-46EC-8006-CE245F6835EE}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{56F7DEC0-59CA-47C6-9F35-D5066A702B39}]
"(Default)" = "IConversationStateChangePropertyDictionary"

[HKCU\Software\Classes\Interface\{F87AFD9A-9BF8-4AC4-953E-33C4D2035D33}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{3690D374-3779-4EFC-B8E8-20642C01529A}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{9E0F8FCA-D9C9-47CD-87F4-5554217DFFCC}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{9B3A702D-5BE1-4FCE-ADB3-EBBD23E078C3}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{FA7971EF-1E41-429F-8C79-DAC5F88D444B}]
"(Default)" = "_IConversationHistoryEvents"

[HKCU\Software\Classes\Interface\{5418E2AB-EB9A-4659-B4DC-28DE633B2B8F}]
"(Default)" = "IMutedChangedEventData"

[HKCU\Software\IM Providers\Skype]
"UpAndRunning" = "1"

[HKCU\Software\Classes\Wow6432Node\Interface\{AE3A7C39-9C30-4E0F-BAE4-D8344EF377EA}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{ACABFA1C-0738-4C4D-AF7E-326873CF4ACE}]
"(Default)" = "IPreviousConversationsManager"

[HKCU\Software\Classes\Wow6432Node\Interface\{48B3099D-841D-4CAA-9202-5787596E2BD2}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{378CD767-1B64-4A0E-A941-8F52869FC9DF}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{65B71572-5338-43C8-9E4C-F1DFC6711AD1}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{420A24E2-5C31-4262-9BD5-058682300ED6}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{E664682C-CBA5-4C7C-A65B-9CD046F24CBD}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{17635563-2FA5-46AD-8F47-3F0FF958ECE2}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{EE9F3E74-AC61-469E-80D6-E22BF4EEFF5C}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{1A8A9402-E89F-40AE-88A8-B328391684B6}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{71A054B3-4D4B-4643-B14F-4572494B19E7}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{B28F2007-3926-49CF-9101-4CCB9574049B}]
"(Default)" = "IPreferredCapabilitiesChangedEventData"

[HKCU\Software\Classes\Wow6432Node\Interface\{B1F5BCD8-69A6-4FC3-9EF0-9BD4AD999061}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{2EDAF003-14A6-4FAF-8A72-99526D048D63}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{BE026CD2-7E82-4F7C-8762-F6B02F496174}]
"(Default)" = "_IApplicationSharingModalityEvents"

[HKCU\Software\Classes\Wow6432Node\Interface\{CA478B44-4FCE-4082-8700-8CEC69FB50E1}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{6A7FF112-42CE-4D03-8922-D02AC6C5759F}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{4B3A2412-C149-4E52-A713-6CEBCF47503E}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{62074904-8D06-43FE-A531-E63DF7FDC2E7}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{B1C6ECC3-1EA7-495D-9337-02FE4FB723F0}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{DA7CF784-67DF-429C-82FB-9AFD99F6CCCB}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{330639F2-E399-48CB-863F-56A50A27A138}]
"(Default)" = "IWebAppExtension"

[HKCU\Software\Classes\Interface\{62B932E9-7847-4D78-BEEE-5D58BF815B03}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{02DD541F-C863-4295-92AB-A4CF29F5D841}]
"(Default)" = "IConversationWindow2"

[HKCU\Software\Classes\Interface\{04378C72-E58F-47C0-8621-901B85CA2ED4}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{37C7F935-E215-46D2-82A3-A451840EC733}]
"(Default)" = "IConversation2"

[HKCU\Software\Classes\Wow6432Node\Interface\{B0C10F94-CAB6-4821-9643-D781885A46AF}]
"(Default)" = "_IVoiceMailsManagerEvents"

[HKCU\Software\Classes\Wow6432Node\Interface\{E24C2484-C70D-44AB-8A4E-F1585A17A3E1}]
"(Default)" = "IVoiceMailsManager"

[HKCU\Software\Classes\Wow6432Node\Interface\{08DDF5C4-FA12-4978-B26E-C6D23C453413}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{84340964-7820-4EBC-BCD3-702926DE23E8}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{BD891697-C93E-4A0B-9B6C-004BD81B6EE8}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{64561371-77A2-4BD4-A909-E6DEB1B5C6CF}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{6B551C9E-DE81-41DF-A0AE-39F0AF11D508}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{CA478B44-4FCE-4082-8700-8CEC69FB50E1}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{B26F6403-761E-48D4-84E2-619C17EAEB13}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{081793DA-7221-45C3-8AFA-3A2E6E464670}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{2495B94C-38AF-439B-BBA0-0AD38D959CE4}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{D0984CEF-E323-4574-B07B-5C970C9CAEE0}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{3DEBDC7E-811F-4304-BDD7-7D98C732026C}]
"(Default)" = "IHistoryInfo"

[HKCU\Software\Classes\Wow6432Node\Interface\{744BAB86-B15F-4BD5-B7DD-476B0CE0162A}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{F719ED75-B7BD-45D3-9097-254509226F20}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{CA7EEB7A-7DC3-4FFE-A174-23DB5A003C04}]
"(Default)" = "IStreamStateChangedEventData"

[HKCU\Software\Classes\Interface\{2EDAF003-14A6-4FAF-8A72-99526D048D63}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{64561371-77A2-4BD4-A909-E6DEB1B5C6CF}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{3C43A2BE-BA4A-41E8-8F93-A9DC5F091892}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{806D3227-4CB8-47C4-9864-7D4DF4F44069}]
"(Default)" = "_IAutomationCallback"

[HKCU\Software\Classes\Interface\{87084018-7E74-4F92-AB39-1CF03188580E}]
"(Default)" = "IUtilities"

[HKCU\Software\Classes\Interface\{BD891697-C93E-4A0B-9B6C-004BD81B6EE8}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{4CB70415-BA71-491E-B12D-155D85CBDFF1}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{064E6072-5592-4D13-AFDB-55F5A494E137}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{76428270-36FA-4236-8BDF-AADB39FD1371}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{35CE3A44-C636-4D31-BC95-B9370C2251B9}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{109D32CE-E09F-46F5-9ECB-01E1D273B7DA}]
"(Default)" = "IConversationWindowInformationDictionary"

[HKCU\Software\Classes\Interface\{464D5228-9F68-4B1F-B430-156A104E2B85}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{21C41EDE-7ED8-4D97-9B0D-DD785781AF9B}]
"(Default)" = "IRoomMessageCollection"

[HKCU\Software\Classes\Interface\{BD891697-C93E-4A0B-9B6C-004BD81B6EE8}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{A766520D-F700-4BF5-8428-56BD914C1C40}]
"(Default)" = "IRoom"

[HKCU\Software\Classes\Interface\{8AFFB8CE-5404-4280-BCA3-E2E4388E6D73}]
"(Default)" = "IDescriptionChangedEventData"

[HKCU\Software\Classes\Interface\{7452BD0F-65CB-4A5E-AC37-E2BEA1F43DD9}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{5418E2AB-EB9A-4659-B4DC-28DE633B2B8F}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{32430741-330B-48DF-96F6-0CFE00484D40}]
"(Default)" = "IControlRequestReceivedEventData"

[HKCU\Software\Classes\Interface\{3CD1DB65-D85B-4912-8536-6BD8E19F1738}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{26C8D96D-7D22-4E9E-948A-EDCCB4CA9C64}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{C0034194-F7B6-43EB-B0E0-7852FC8E7BFA}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{7CD92461-CA4F-4BEB-A636-8BBCC192E60F}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{7693221D-7E9F-47D3-8782-6437CF3D4C0C}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{AB2D1A67-2B3D-4E25-B21C-03F4BFC4C2BE}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{6A222195-F65E-467F-8F77-EB180BD85288}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{7CC306E9-2546-4101-82AB-29613AD6F7A7}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-ef-0d-5d]
"WpadDecision" = "0"

[HKCU\Software\Classes\Wow6432Node\Interface\{92A9EB9B-85EE-444E-A302-00C3C945BAA4}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{EC9773AD-7D22-4B03-B949-5E9055AF0F19}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{C31FB52D-9E9E-45AD-A102-5218E1685B78}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{1FF8AA01-D8AF-4B2B-B254-BEFEFABAF2D6}]
"(Default)" = "IConferenceInfoCollection"

[HKCU\Software\Classes\Wow6432Node\Interface\{90B49A60-72AF-4360-9F9B-916DB7504A3C}]
"(Default)" = "IAlertLevelChangedEventData"

[HKCU\Software\Classes\Interface\{08DDF5C4-FA12-4978-B26E-C6D23C453413}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{7356D7BB-FD71-4554-84A1-3BBE28726551}]
"(Default)" = "ISearchResults"

[HKCU\Software\Classes\Wow6432Node\Interface\{3417D640-3976-4CB6-BC82-54E5E2E10784}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{378CD767-1B64-4A0E-A941-8F52869FC9DF}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{283C2089-B760-4D65-9199-716627174F7A}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{E5CFF4A5-83A8-4FD8-8DAA-77A3E2288D4A}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{10D66B39-5E4B-4C98-AAC6-D0458FEB1BDB}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{62A75516-C79B-42D7-8B49-3BA492C2B385}]
"(Default)" = "IInstantMessageModality"

[HKCU\Software\Classes\Interface\{3C8D7146-35EA-4133-B2F6-C1FC2401A091}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{92D7E7A8-48D8-4166-8911-630AE02B2B93}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{B0C10F94-CAB6-4821-9643-D781885A46AF}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{E0E8B413-BB57-4B58-B1FB-288F3A269E35}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{37C7F935-E215-46D2-82A3-A451840EC733}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{74B6CAF0-755E-454D-A819-D0E439EF5296}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{D60B1701-766D-401E-8586-83E0C9106BE0}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{B26F6403-761E-48D4-84E2-619C17EAEB13}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{12480BD4-072F-4763-B9FB-41B2CA54F9CD}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{C413A27F-601E-4261-B9E3-0EB966F4E7D1}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{6B551C9E-DE81-41DF-A0AE-39F0AF11D508}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{62A75516-C79B-42D7-8B49-3BA492C2B385}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{7452BD0F-65CB-4A5E-AC37-E2BEA1F43DD9}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{219DC126-9A48-483F-80C2-3F22B3B47829}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{A0984F01-5D2C-4302-87A0-69BE7B015143}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{B3FF95BD-B743-498C-9973-7F8A2A78576A}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{EE9F3E74-AC61-469E-80D6-E22BF4EEFF5C}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{BD891697-C93E-4A0B-9B6C-004BD81B6EE8}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{06437ABB-C419-4B11-A474-1A2B02FBD646}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{1FF0E6F1-2FE4-4E29-A123-557AF0DB6927}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{70DCCE38-90BF-4428-A34F-3A6082F29E50}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{EE9F3E74-AC61-469E-80D6-E22BF4EEFF5C}]
"(Default)" = "IClient"

[HKCU\Software\Classes\Wow6432Node\Interface\{1124AA59-B6F3-4EB1-B79A-E7F53B388B8D}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{0FDB5B86-DD44-41BF-A443-317FD19BBF3D}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{7CD92461-CA4F-4BEB-A636-8BBCC192E60F}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{340C54A6-35CF-4971-B540-72D7F040AC24}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{B0B0E8F8-32DA-4CB0-A124-D1E35891D53A}]
"(Default)" = "IAudioDevice"

[HKCU\Software\Classes\Wow6432Node\Interface\{086F0E9D-A416-40F9-877C-F1C82DC1A6AD}]
"(Default)" = "IVideoViewInformationChangedEventData"

[HKCU\Software\Classes\Wow6432Node\Interface\{57CC2235-96C5-49FA-B92B-350486C6CF52}]
"(Default)" = "_IConversationCallback"

[HKCU\Software\Classes\Wow6432Node\Interface\{9B3A702D-5BE1-4FCE-ADB3-EBBD23E078C3}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{50D86EE2-288F-44F5-8144-69F6E3B24B90}]
"(Default)" = "_IContactManagerEvents"

[HKCU\Software\Classes\Wow6432Node\Interface\{DD31376E-E529-43F2-B3B4-E379EBD28E2A}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{E5CFF4A5-83A8-4FD8-8DAA-77A3E2288D4A}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{D0984CEF-E323-4574-B07B-5C970C9CAEE0}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{E66CA1CC-9DB0-467E-9C60-6A832ACD6780}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{70DCCE38-90BF-4428-A34F-3A6082F29E50}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{4FE44049-4E44-4109-B234-4E4EFC135A86}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{533891F1-A460-43E6-8BDA-6D0D2C13ADDE}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{9D4D3D10-DEBC-40C6-ACF9-527986CB42BC}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{B335AE5E-E4EA-49D3-B03B-646A96FE66D3}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{57C3CB4D-C794-456F-846D-0E1ECA78BD00}]
"(Default)" = "IContactCollection"

[HKCU\Software\Classes\Wow6432Node\Interface\{3C8D7146-35EA-4133-B2F6-C1FC2401A091}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{D9D04B55-D820-4D5B-A690-658A49368478}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{8F04E92D-EE26-4B64-B9C1-56DD90816810}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{35CE3A44-C636-4D31-BC95-B9370C2251B9}]
"(Default)" = "IFavoriteContacts"

[HKCU\Software\Classes\Wow6432Node\Interface\{995F992C-9DEF-47B9-BF11-81813C0C0E28}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{569E04F2-D286-4903-9642-44D850310956}]
"(Default)" = "_IClientSettingsEvents"

[HKCU\Software\Classes\Wow6432Node\Interface\{3C43A2BE-BA4A-41E8-8F93-A9DC5F091892}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{ACABFA1C-0738-4C4D-AF7E-326873CF4ACE}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{15D4461D-C7EB-45CB-B214-F1C45FED1DB2}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{4290152C-75C9-47C8-AA12-814818360B3F}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{AF2ABA54-F591-42BA-8004-20944C9FB4D7}]
"(Default)" = "_IConversationWindow2Events"

[HKCU\Software\Microsoft\Direct3D\MostRecentApplication]
"Name" = "Skype.exe"

[HKCU\Software\Classes\Wow6432Node\Interface\{6A222195-F65E-467F-8F77-EB180BD85288}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{95B8D3E8-F3D5-4DC0-BCFE-AB80C835DEA0}]
"(Default)" = "IContactSubscription"

[HKCU\Software\Classes\Wow6432Node\Interface\{9244D573-914F-4C1F-93F6-31609A95CBED}]
"(Default)" = "IConferenceRegionalAccessNumber"

[HKCU\Software\Classes\Interface\{DAC6D77B-12F7-405C-BB33-002D6D4007F3}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies]
"CachePrefix" = "Cookie:"

[HKCU\Software\Classes\Wow6432Node\Interface\{DAC6D77B-12F7-405C-BB33-002D6D4007F3}]
"(Default)" = "IResiliencyModeChangedEventData"

[HKCU\Software\Classes\Interface\{15D4461D-C7EB-45CB-B214-F1C45FED1DB2}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{9E0F8FCA-D9C9-47CD-87F4-5554217DFFCC}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{9918673D-4D74-41CF-8840-D4996395A34C}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{4FE44049-4E44-4109-B234-4E4EFC135A86}]
"(Default)" = "_IInstantMessageModalityEvents"

[HKCU\Software\Classes\Wow6432Node\Interface\{8E73E7E1-90CE-4D3B-B5B7-71E87B2E8BA5}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{5FA92EA7-6E6E-4A82-8F0D-107FEAF5A75D}]
"(Default)" = "_IConversationHistoryCallback"

[HKCU\Software\Classes\Interface\{3959E5C6-75CC-448E-9A18-9F163FF47646}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{6B551C9E-DE81-41DF-A0AE-39F0AF11D508}]
"(Default)" = "_IShareableContentEvents"

[HKCU\Software\Classes\Wow6432Node\Interface\{CA62E6F3-3E6D-451B-AEAA-6A1B7AACF8D4}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{18A9A79A-CBC7-4F8B-8B2B-9B40CA75EC3C}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{663C61F4-A9DA-4A6F-A606-F142F665DF61}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{AC10D6E9-4A8C-4484-B8F4-CA1E36347AAE}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{AA41EE75-F9C5-42F7-8D17-1D92D6BA4D92}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{569E04F2-D286-4903-9642-44D850310956}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{1F8EBE6F-7993-42CE-980A-A2F03793BE71}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{899B846A-8887-45D6-B8F5-8AAA0BFDF722}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{E4E1D0AF-5B70-45AF-9A0E-F548D8FBD17C}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{0CA9BAE8-DD28-4929-A821-4D00F11203CC}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{420A24E2-5C31-4262-9BD5-058682300ED6}]
"(Default)" = "IConferenceRegionalAccessInformation"

[HKCU\Software\Classes\Interface\{56A868B4-0AD4-11CE-B03A-0020AF0BA770}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{3690D374-3779-4EFC-B8E8-20642C01529A}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{3C43A2BE-BA4A-41E8-8F93-A9DC5F091892}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{3690D374-3779-4EFC-B8E8-20642C01529A}]
"(Default)" = "ISharingResource"

[HKCU\Software\Classes\Interface\{76428270-36FA-4236-8BDF-AADB39FD1371}]
"(Default)" = "_IConversationWindowCallback"

[HKCU\Software\Classes\Interface\{F423726D-0E9B-4B55-9569-E79865210F69}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{953AE732-F53A-4116-AC1B-0321B3FB3DBA}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{17635563-2FA5-46AD-8F47-3F0FF958ECE2}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{AC10D6E9-4A8C-4484-B8F4-CA1E36347AAE}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{BE026CD2-7E82-4F7C-8762-F6B02F496174}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{56A868B4-0AD4-11CE-B03A-0020AF0BA770}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{4CB70415-BA71-491E-B12D-155D85CBDFF1}]
"(Default)" = "IConferenceRegionalAccessNumberCollection"

[HKCU\Software\Classes\Wow6432Node\Interface\{340C54A6-35CF-4971-B540-72D7F040AC24}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{15D4461D-C7EB-45CB-B214-F1C45FED1DB2}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{DA7CF784-67DF-429C-82FB-9AFD99F6CCCB}]
"(Default)" = "IVideoDevice"

[HKCU\Software\Classes\Wow6432Node\Interface\{6A7FF112-42CE-4D03-8922-D02AC6C5759F}]
"(Default)" = "ISharingResourceList"

[HKCU\Software\Classes\Interface\{DD181E97-EEE0-4D65-BAD1-16866D0C7953}]
"(Default)" = "IAccessPermission"

[HKCU\Software\Classes\Interface\{10D66B39-5E4B-4C98-AAC6-D0458FEB1BDB}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{BD891697-C93E-4A0B-9B6C-004BD81B6EE8}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{84340964-7820-4EBC-BCD3-702926DE23E8}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{CA62E6F3-3E6D-451B-AEAA-6A1B7AACF8D4}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{628D7BDD-45AB-404D-8505-B3ADC15F454D}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{DAA5FDE3-A81C-4F23-80B6-C47B52C649BF}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{F97973D7-9436-4A3E-A802-F6EA172A0425}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{2209E091-5B90-4CAF-8582-CC5979883376}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{4FE44049-4E44-4109-B234-4E4EFC135A86}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{478DDA59-64C0-4429-AC8A-F10A940B52CC}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{36CDC166-4F21-46AD-A60E-8551F26C1D41}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{3C43A2BE-BA4A-41E8-8F93-A9DC5F091892}]
"(Default)" = "_ISelf2Events"

[HKCU\Software\Classes\Interface\{B1F5BCD8-69A6-4FC3-9EF0-9BD4AD999061}]
"(Default)" = "IConversationWindow"

[HKCU\Software\Classes\Interface\{232F1CAB-5351-4E48-8A87-2185445F712D}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{68B1FC26-B48F-4D5F-B041-8E246676D836}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{B22EDBEA-9E61-4703-82BE-01C05619B6D6}]
"(Default)" = "ILocalSharedResourcesChangedEventData"

[HKCU\Software\Classes\Interface\{7452BD0F-65CB-4A5E-AC37-E2BEA1F43DD9}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{3187885C-A8AF-4D4B-8E80-F4B9D447A7B2}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{32430741-330B-48DF-96F6-0CFE00484D40}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{15D4461D-C7EB-45CB-B214-F1C45FED1DB2}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{EE1E4E39-627C-4D52-9D86-A515AB38A003}]
"WpadDecision" = "0"

[HKCU\Software\Classes\Wow6432Node\Interface\{4CB70415-BA71-491E-B12D-155D85CBDFF1}]
"(Default)" = "IConferenceRegionalAccessNumberCollection"

[HKCU\Software\Classes\Interface\{21C41EDE-7ED8-4D97-9B0D-DD785781AF9B}]
"(Default)" = "IRoomMessageCollection"

[HKCU\Software\Classes\Interface\{1124AA59-B6F3-4EB1-B79A-E7F53B388B8D}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{92A9EB9B-85EE-444E-A302-00C3C945BAA4}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{38E5EC21-81A1-45A7-94D6-B812976231A4}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{3DEBDC7E-811F-4304-BDD7-7D98C732026C}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{5E7AB04C-E4B8-49FB-85FF-9E2BCA2899D3}]
"(Default)" = "IConferenceAccessInformation2"

[HKCU\Software\Classes\Interface\{76DE1CD8-F278-48A1-A391-E5BEB8F428E6}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{92D7E7A8-48D8-4166-8911-630AE02B2B93}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{08E1E9CF-A7E4-43BE-AE8E-B223CE71E46E}]
"(Default)" = "_IChannelCallback"

[HKCU\Software\Classes\Interface\{F423726D-0E9B-4B55-9569-E79865210F69}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{62B932E9-7847-4D78-BEEE-5D58BF815B03}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{5E7AB04C-E4B8-49FB-85FF-9E2BCA2899D3}]
"(Default)" = "IConferenceAccessInformation2"

[HKCU\Software\Classes\Interface\{9112CE9B-3704-48C0-86DC-7A7B0F34D7A3}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{10C3ACC7-6C0C-4F35-ADFB-AE0F200A8583}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{DA7CF784-67DF-429C-82FB-9AFD99F6CCCB}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{AA186C92-181E-417F-B150-FCA0F367E0FC}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{D804BA85-DB0F-49EE-B723-DCDF0425BD9F}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{8A88C016-AA5D-4EAE-9C79-7AA5C360ED76}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{F423726D-0E9B-4B55-9569-E79865210F69}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{1FF0E6F1-2FE4-4E29-A123-557AF0DB6927}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{CA7EEB7A-7DC3-4FFE-A174-23DB5A003C04}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{25025B1B-0084-44D1-B383-9FFC9A99ABCD}]
"(Default)" = "_IConversationManagerEvents"

[HKCU\Software\Classes\Wow6432Node\Interface\{3417D640-3976-4CB6-BC82-54E5E2E10784}]
"(Default)" = "_IUtilities2Events"

[HKCU\Software\Classes\Wow6432Node\Interface\{F423726D-0E9B-4B55-9569-E79865210F69}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{7B39CB77-4AEB-42D7-B351-CB5472C1C6AD}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{4FE44049-4E44-4109-B234-4E4EFC135A86}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{9112CE9B-3704-48C0-86DC-7A7B0F34D7A3}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{5418E2AB-EB9A-4659-B4DC-28DE633B2B8F}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{95B9A382-EA50-45E4-965E-BA61E7213DBA}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{4B3A2412-C149-4E52-A713-6CEBCF47503E}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{603E2454-725A-4679-A6A8-363B21633CB2}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{E4E1D0AF-5B70-45AF-9A0E-F548D8FBD17C}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{C413A27F-601E-4261-B9E3-0EB966F4E7D1}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{D0DBB17D-565E-486C-A47B-BA32DC1FAD0A}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{DCDEA425-B5F2-4719-A3B4-69FFB9770BE6}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{082EE280-726E-417F-99CB-81A0CCBFF883}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{7CC306E9-2546-4101-82AB-29613AD6F7A7}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{905B727D-FD8F-46EC-8006-CE245F6835EE}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{21C41EDE-7ED8-4D97-9B0D-DD785781AF9B}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{10C3ACC7-6C0C-4F35-ADFB-AE0F200A8583}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{4E8DC7E0-04B8-470B-BDFA-F520099B975F}]
"(Default)" = "IControllerChangedEventData"

[HKCU\Software\Classes\Wow6432Node\Interface\{F0CE810F-E36F-4CD8-A836-515B9A6E09FC}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{AC10D6E9-4A8C-4484-B8F4-CA1E36347AAE}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{1124AA59-B6F3-4EB1-B79A-E7F53B388B8D}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{64B7E9AD-D920-4EAA-95C7-9D95DE9ACE24}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{DAA5FDE3-A81C-4F23-80B6-C47B52C649BF}]
"(Default)" = "IContactEndpointCollection"

[HKCU\Software\Classes\Interface\{09028936-CD20-43EF-98CF-56726ADDBA34}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{8A88C016-AA5D-4EAE-9C79-7AA5C360ED76}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{9274DBDC-43CE-45AA-A817-414A4494AD28}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{ACD2FDB9-98ED-4283-AAE8-3CD989EBD9AE}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{CE16D540-B9E8-4742-8659-9A7A318AFB92}]
"(Default)" = "IDevice"

[HKCU\Software\Classes\Interface\{E6B3F5FA-4208-4C37-AE07-F6435B68D693}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{2EDAF003-14A6-4FAF-8A72-99526D048D63}]
"(Default)" = "IAutomation"

[HKCU\Software\Classes\Wow6432Node\Interface\{8AFFB8CE-5404-4280-BCA3-E2E4388E6D73}]
"(Default)" = "IDescriptionChangedEventData"

[HKCU\Software\Classes\Interface\{F8DF0B4B-A4CE-476B-81D3-9FBA98461B62}]
"(Default)" = "ISignInConfiguration"

[HKCU\Software\Classes\Wow6432Node\Interface\{F5996C71-77AB-4020-9776-C2C270FEF2AE}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{86225E5C-7595-4D1C-985D-8A0458D714C0}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{B335AE5E-E4EA-49D3-B03B-646A96FE66D3}]
"(Default)" = "IShareableContent"

[HKCU\Software\Classes\Interface\{3959E5C6-75CC-448E-9A18-9F163FF47646}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{5418E2AB-EB9A-4659-B4DC-28DE633B2B8F}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{DCDEA425-B5F2-4719-A3B4-69FFB9770BE6}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{55A21CF3-A2B3-484E-BE2A-14280F501289}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{2D3D62CA-E9F6-4F94-8EBD-5FABAB29E6A5}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{74B6CAF0-755E-454D-A819-D0E439EF5296}]
"(Default)" = "IPublicCloudProviderInfo"

[HKCU\Software\Classes\Interface\{57CC2235-96C5-49FA-B92B-350486C6CF52}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{CA62E6F3-3E6D-451B-AEAA-6A1B7AACF8D4}]
"(Default)" = "IConversationWindowNeedsSizeChangeEventData"

[HKCU\Software\Classes\Interface\{8665FD95-7720-4F9E-B605-6ABCBD7EDFF4}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{DD31376E-E529-43F2-B3B4-E379EBD28E2A}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{AA41EE75-F9C5-42F7-8D17-1D92D6BA4D92}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{62074904-8D06-43FE-A531-E63DF7FDC2E7}]
"(Default)" = "IModalityPropertyDictionary"

[HKCU\Software\Classes\Interface\{209DA899-15F1-499A-B8B5-A847EAA899AE}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{F0CE810F-E36F-4CD8-A836-515B9A6E09FC}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{25A47938-5C31-4F43-9108-DA01EE5869C0}]
"(Default)" = "IVoiceMail"

[HKCU\Software\Classes\Interface\{25025B1B-0084-44D1-B383-9FFC9A99ABCD}]
"(Default)" = "_IConversationManagerEvents"

[HKCU\Software\Classes\Wow6432Node\Interface\{6A7FF112-42CE-4D03-8922-D02AC6C5759F}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{C79E4169-535F-4A41-8DE2-C65A90D9503D}]
"(Default)" = "IModalityStateChangePropertyDictionary"

[HKCU\Software\Classes\Wow6432Node\Interface\{C413A27F-601E-4261-B9E3-0EB966F4E7D1}]
"(Default)" = "ILyncClient"

[HKCU\Software\Classes\Wow6432Node\Interface\{F87AFD9A-9BF8-4AC4-953E-33C4D2035D33}]
"(Default)" = "IPreviousConversationsManagerConnectionStateChangedEventData"

[HKCU\Software\Classes\Interface\{C79E4169-535F-4A41-8DE2-C65A90D9503D}]
"(Default)" = "IModalityStateChangePropertyDictionary"

[HKCU\Software\Classes\Wow6432Node\Interface\{C0034194-F7B6-43EB-B0E0-7852FC8E7BFA}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{AA186C92-181E-417F-B150-FCA0F367E0FC}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{3DEBDC7E-811F-4304-BDD7-7D98C732026C}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{7CFE77CD-731D-48B2-82B1-ECA3414D62E3}]
"(Default)" = "IConversationPropertyChangedEventData"

[HKCU\Software\Classes\Interface\{9244D573-914F-4C1F-93F6-31609A95CBED}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{57CC2235-96C5-49FA-B92B-350486C6CF52}]
"(Default)" = "_IConversationCallback"

[HKCU\Software\Classes\Interface\{4C675532-6D55-49DD-8C8E-3C1CC5624CF2}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{4B3A2412-C149-4E52-A713-6CEBCF47503E}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{2F8C3E58-436B-42DB-8924-6C394B37DCA2}]
"(Default)" = "IConferenceAccessInformation"

[HKCU\Software\Classes\Wow6432Node\Interface\{53D014C1-54DB-42B3-9DFD-8E231EF2C356}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{F97BED54-E434-4020-A197-F15AEA9D9C95}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{25D64AEA-0E65-49CB-8D6D-65DB0AC1AF65}]
"(Default)" = "IClientSettingsChangedEventData"

[HKCU\Software\Classes\Wow6432Node\Interface\{5418E2AB-EB9A-4659-B4DC-28DE633B2B8F}]
"(Default)" = "IMutedChangedEventData"

[HKCU\Software\Classes\Interface\{62074904-8D06-43FE-A531-E63DF7FDC2E7}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{9244D573-914F-4C1F-93F6-31609A95CBED}]
"(Default)" = "IConferenceRegionalAccessNumber"

[HKCU\Software\Classes\Wow6432Node\Interface\{7BF20B14-58D1-494B-B301-9B16BACC9610}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{C7ACB102-B692-49CC-92DA-5824822C7B96}]
"(Default)" = "IConferenceScheduler"

[HKCU\Software\Classes\Interface\{AB2D1A67-2B3D-4E25-B21C-03F4BFC4C2BE}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{0BDB9057-28AE-4BF0-AFF0-12A148E51637}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{2D3D62CA-E9F6-4F94-8EBD-5FABAB29E6A5}]
"(Default)" = "IConferenceInfoPropertyDictionary"

[HKCU\Software\Classes\Wow6432Node\Interface\{AA41EE75-F9C5-42F7-8D17-1D92D6BA4D92}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{84340964-7820-4EBC-BCD3-702926DE23E8}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{628D7BDD-45AB-404D-8505-B3ADC15F454D}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{D9D04B55-D820-4D5B-A690-658A49368478}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{25A47938-5C31-4F43-9108-DA01EE5869C0}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{F7EE956B-A713-48D3-AFEF-0A28F37740B3}]
"(Default)" = "IAsynchronousOperation"

[HKCU\Software\Classes\Interface\{EC9773AD-7D22-4B03-B949-5E9055AF0F19}]
"(Default)" = "IGroupCollectionChangedEventData"

[HKCU\Software\Classes\Interface\{04378C72-E58F-47C0-8621-901B85CA2ED4}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{232F1CAB-5351-4E48-8A87-2185445F712D}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{1566FA3C-FD24-41DB-A2B8-6232F89783DE}]
"(Default)" = "IRoomMessageEventData"

[HKCU\Software\Classes\Wow6432Node\Interface\{E82737B9-B2BE-4AFD-B649-C9F665627F20}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{D0DBB17D-565E-486C-A47B-BA32DC1FAD0A}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{ED5040FA-8F8F-4876-BF6D-9C62F5EFFD5B}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{CA62E6F3-3E6D-451B-AEAA-6A1B7AACF8D4}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{340C54A6-35CF-4971-B540-72D7F040AC24}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{48B3099D-841D-4CAA-9202-5787596E2BD2}]
"(Default)" = "IActivePresenterChangedEventData"

[HKCU\Software\Classes\Wow6432Node\Interface\{90B49A60-72AF-4360-9F9B-916DB7504A3C}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{6A7FF112-42CE-4D03-8922-D02AC6C5759F}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{B3C5872E-591C-4A74-9F84-B00EF970A838}]
"(Default)" = "IConferenceInfo"

[HKCU\Software\Classes\Wow6432Node\Interface\{A0984F01-5D2C-4302-87A0-69BE7B015143}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{0C81EC90-9469-4ED4-ACAD-ADB86E11039C}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{2EDAF003-14A6-4FAF-8A72-99526D048D63}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{378CD767-1B64-4A0E-A941-8F52869FC9DF}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{2495B94C-38AF-439B-BBA0-0AD38D959CE4}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{2A9385AA-CF61-4E47-B64C-214DE4A4AD11}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{EC9773AD-7D22-4B03-B949-5E9055AF0F19}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{1A8A9402-E89F-40AE-88A8-B328391684B6}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{F423726D-0E9B-4B55-9569-E79865210F69}]
"(Default)" = "IScheduledConferenceCollection"

[HKCU\Software\Classes\Interface\{899B846A-8887-45D6-B8F5-8AAA0BFDF722}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{92A9EB9B-85EE-444E-A302-00C3C945BAA4}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{ACABFA1C-0738-4C4D-AF7E-326873CF4ACE}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{011B320C-9AC1-4DDE-B595-3D0014472E2F}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{B1C6ECC3-1EA7-495D-9337-02FE4FB723F0}]
"(Default)" = "_IContactEvents"

[HKCU\Software\Classes\Interface\{8684D3AD-7061-4056-A894-EBF1270ADB9B}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{953AE732-F53A-4116-AC1B-0321B3FB3DBA}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{533891F1-A460-43E6-8BDA-6D0D2C13ADDE}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{56F7DEC0-59CA-47C6-9F35-D5066A702B39}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{48B3099D-841D-4CAA-9202-5787596E2BD2}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{4B3A2412-C149-4E52-A713-6CEBCF47503E}]
"(Default)" = "IGroupMemberChangedEventData"

[HKCU\Software\Classes\Wow6432Node\Interface\{F5996C71-77AB-4020-9776-C2C270FEF2AE}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{C63F58CB-EF11-4934-AA3B-2D69244F0780}]
"(Default)" = "_IConversationEvents"

[HKCU\Software\Classes\Interface\{7356D7BB-FD71-4554-84A1-3BBE28726551}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{E82737B9-B2BE-4AFD-B649-C9F665627F20}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{8FE9A23D-72BC-4EA3-A5AF-E37F75EAD8A2}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{10D66B39-5E4B-4C98-AAC6-D0458FEB1BDB}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{D4B240B9-059B-4D13-8997-31B282B3BD43}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{5FA92EA7-6E6E-4A82-8F0D-107FEAF5A75D}]
"(Default)" = "_IConversationHistoryCallback"

[HKCU\Software\Classes\Wow6432Node\Interface\{80EDBF3A-812E-42B5-A67F-6CC6D9A19A6C}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{E2C6D6E0-52EF-47A2-BDA9-9D6A7A29A391}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{283C2089-B760-4D65-9199-716627174F7A}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{3DEBDC7E-811F-4304-BDD7-7D98C732026C}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{8C9B6953-33CC-4A04-9DA4-F71AE79DA0C0}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{DC63D621-11C8-4490-B017-B8C57EE1BE25}]
"(Default)" = "IAddress"

[HKCU\Software\Classes\Wow6432Node\Interface\{AA186C92-181E-417F-B150-FCA0F367E0FC}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{C22CE6BF-3A47-46B7-8544-44305BADFEF9}]
"(Default)" = "_IConferenceSchedulerCallback"

[HKCU\Software\Classes\Wow6432Node\Interface\{95B9A382-EA50-45E4-965E-BA61E7213DBA}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{18BA13C7-A64E-4301-BA51-D1BFB3C1C9D5}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{F719ED75-B7BD-45D3-9097-254509226F20}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{F719ED75-B7BD-45D3-9097-254509226F20}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{57CC2235-96C5-49FA-B92B-350486C6CF52}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{66D1FFC0-C234-4F3D-ABAA-98222A69E525}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{8E839AF9-9508-475A-AA47-3EE8A946B75E}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{D0984CEF-E323-4574-B07B-5C970C9CAEE0}]
"(Default)" = "ICustomAvailabilityState"

[HKCU\Software\Classes\Wow6432Node\Interface\{9AB20314-B258-48F8-B659-AD250DFA20F5}]
"(Default)" = "ILyncClientNotificationReceivedEventData"

[HKCU\Software\Classes\Interface\{B28F2007-3926-49CF-9101-4CCB9574049B}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{533891F1-A460-43E6-8BDA-6D0D2C13ADDE}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{3C8D7146-35EA-4133-B2F6-C1FC2401A091}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History]
"CachePrefix" = "Visited:"

[HKCU\Software\Classes\Interface\{10C3ACC7-6C0C-4F35-ADFB-AE0F200A8583}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{18A9A79A-CBC7-4F8B-8B2B-9B40CA75EC3C}]
"(Default)" = "IFrequentContacts"

[HKCU\Software\Classes\Wow6432Node\Interface\{F97973D7-9436-4A3E-A802-F6EA172A0425}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{B26F6403-761E-48D4-84E2-619C17EAEB13}]
"(Default)" = "_ILyncClientCallback"

[HKCU\Software\Classes\Wow6432Node\Interface\{DD181E97-EEE0-4D65-BAD1-16866D0C7953}]
"(Default)" = "IAccessPermission"

[HKCU\Software\Classes\Interface\{68B1FC26-B48F-4D5F-B041-8E246676D836}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{76DE1CD8-F278-48A1-A391-E5BEB8F428E6}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{9112CE9B-3704-48C0-86DC-7A7B0F34D7A3}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{905B727D-FD8F-46EC-8006-CE245F6835EE}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{F97973D7-9436-4A3E-A802-F6EA172A0425}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{B0B0E8F8-32DA-4CB0-A124-D1E35891D53A}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{DEDDD7BD-4763-41D2-9AAA-B2C143457CA4}]
"(Default)" = "IModalityActionAvailabilityChangedEventData"

[HKCU\Software\Classes\Wow6432Node\Interface\{F97BED54-E434-4020-A197-F15AEA9D9C95}]
"(Default)" = "IConversationWindowNeedsAttentionEventData"

[HKCU\Software\Classes\Interface\{4CB70415-BA71-491E-B12D-155D85CBDFF1}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{2A9385AA-CF61-4E47-B64C-214DE4A4AD11}]
"(Default)" = "IConversationStateChangedEventData"

[HKCU\Software\Classes\Wow6432Node\Interface\{3CD1DB65-D85B-4912-8536-6BD8E19F1738}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{ED5040FA-8F8F-4876-BF6D-9C62F5EFFD5B}]
"(Default)" = "IModalityDictionary"

[HKCU\Software\Classes\Wow6432Node\Interface\{A4E1D1E4-7839-473B-95FA-5D33DDC0D2DD}]
"(Default)" = "IConversationCollection"

[HKCU\Software\Classes\Wow6432Node\Interface\{95B8D3E8-F3D5-4DC0-BCFE-AB80C835DEA0}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{09028936-CD20-43EF-98CF-56726ADDBA34}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{CA478B44-4FCE-4082-8700-8CEC69FB50E1}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{8E839AF9-9508-475A-AA47-3EE8A946B75E}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{0CA9BAE8-DD28-4929-A821-4D00F11203CC}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{C63F58CB-EF11-4934-AA3B-2D69244F0780}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{478DDA59-64C0-4429-AC8A-F10A940B52CC}]
"(Default)" = "IModalityStateChangedEventData"

[HKCU\Software\Classes\Wow6432Node\Interface\{32430741-330B-48DF-96F6-0CFE00484D40}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{05789509-AFA1-4E90-B4FA-1A7820DB9796}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{4023052E-E3B7-48A3-BCB3-CA2234D9BAEE}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{EE1E4E39-627C-4D52-9D86-A515AB38A003}]
"WpadNetworkName" = "Network"

[HKCU\Software\Classes\Wow6432Node\Interface\{C413A27F-601E-4261-B9E3-0EB966F4E7D1}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{D9D04B55-D820-4D5B-A690-658A49368478}]
"(Default)" = "_IVoiceMailsManagerCallback"

[HKCU\Software\Classes\Interface\{64561371-77A2-4BD4-A909-E6DEB1B5C6CF}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{9244D573-914F-4C1F-93F6-31609A95CBED}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-ef-0d-5d]
"WpadDetectedUrl" = ""

[HKCU\Software\Classes\Interface\{D9D04B55-D820-4D5B-A690-658A49368478}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{5FA92EA7-6E6E-4A82-8F0D-107FEAF5A75D}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{89C7EB8E-42BC-4C9F-BB34-88CDE83CCB37}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{9244D573-914F-4C1F-93F6-31609A95CBED}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{4AA93AA8-898C-45EE-8E5C-1A86739B3F96}]
"(Default)" = "_IDeviceManagerEvents"

[HKCU\Software\Classes\Interface\{ED5040FA-8F8F-4876-BF6D-9C62F5EFFD5B}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{B1C6ECC3-1EA7-495D-9337-02FE4FB723F0}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{086F0E9D-A416-40F9-877C-F1C82DC1A6AD}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{8057F99D-292C-4371-926B-5312E61A3A40}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{8057F99D-292C-4371-926B-5312E61A3A40}]
"(Default)" = "ISummarizerStatesChangedEventData"

[HKCU\Software\Classes\Interface\{995F992C-9DEF-47B9-BF11-81813C0C0E28}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{A766520D-F700-4BF5-8428-56BD914C1C40}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{B28F2007-3926-49CF-9101-4CCB9574049B}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{BE026CD2-7E82-4F7C-8762-F6B02F496174}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{B28F2007-3926-49CF-9101-4CCB9574049B}]
"(Default)" = "IPreferredCapabilitiesChangedEventData"

[HKCU\Software\Classes\Wow6432Node\Interface\{25025B1B-0084-44D1-B383-9FFC9A99ABCD}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{0BDB9057-28AE-4BF0-AFF0-12A148E51637}]
"(Default)" = "IUriChangedEventData"

[HKCU\Software\Classes\Wow6432Node\Interface\{2C59A886-ACD3-46BB-8BAC-7C1C59FB2E0D}]
"(Default)" = "IPreviousConversationsManagerNewItemCountChangedEventData"

[HKCU\Software\Classes\Interface\{95B8D3E8-F3D5-4DC0-BCFE-AB80C835DEA0}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{569E04F2-D286-4903-9642-44D850310956}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{62A75516-C79B-42D7-8B49-3BA492C2B385}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{4BACB4B8-1236-42B8-BDA1-D1533148780D}]
"(Default)" = "_IPreviousConversationsManagerCallback"

[HKCU\Software\Classes\Wow6432Node\Interface\{8665FD95-7720-4F9E-B605-6ABCBD7EDFF4}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{DC63D621-11C8-4490-B017-B8C57EE1BE25}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{0C81EC90-9469-4ED4-ACAD-ADB86E11039C}]
"(Default)" = "IGroupCollection"

[HKCU\Software\Classes\Interface\{C7ACB102-B692-49CC-92DA-5824822C7B96}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{4DA899D3-FAC7-4F43-8E4A-1987988FBC9B}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{A9AAB6A0-54B9-4419-AAAF-6B26DFAC1585}]
"(Default)" = "_ISelfCallback"

[HKCU\Software\Classes\Interface\{3187885C-A8AF-4D4B-8E80-F4B9D447A7B2}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{209DA899-15F1-499A-B8B5-A847EAA899AE}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{8684D3AD-7061-4056-A894-EBF1270ADB9B}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{DAC6D77B-12F7-405C-BB33-002D6D4007F3}]
"(Default)" = "IResiliencyModeChangedEventData"

[HKCU\Software\Classes\Wow6432Node\Interface\{FD9000B3-479F-4B16-9D63-70A49E078946}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{88C688B0-3908-4C56-A2E8-F90AB705C536}]
"(Default)" = "IConversationActionAvailabilityEventData"

[HKCU\Software\Classes\Wow6432Node\Interface\{85109845-6AE2-4B6B-9524-65BA203E5B7D}]
"(Default)" = "IContact"

[HKCU\Software\Classes\Interface\{FB67275C-4D9E-4C32-9793-A96749884FC1}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{C6605772-3D9D-44A7-B43A-4590E6B43EE3}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{AAFE380B-B079-4B55-B81B-A9401D77B776}]
"(Default)" = "IPowerPointContent"

[HKCU\Software\Classes\Wow6432Node\Interface\{339D28C6-3D1A-45D4-BA14-A56742749A43}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{32430741-330B-48DF-96F6-0CFE00484D40}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{4D120020-CE64-43C5-9F84-7A7B2360388F}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{85109845-6AE2-4B6B-9524-65BA203E5B7D}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{68DA8699-6C6E-4390-BD82-709FF1DC1702}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{B1F5BCD8-69A6-4FC3-9EF0-9BD4AD999061}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{A0984F01-5D2C-4302-87A0-69BE7B015143}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{E82737B9-B2BE-4AFD-B649-C9F665627F20}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{569E04F2-D286-4903-9642-44D850310956}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{3F60CFF7-BE3F-4404-8395-C02D0CDD318E}]
"(Default)" = "_IModalityCallback"

[HKCU\Software\Classes\Interface\{E5CFF4A5-83A8-4FD8-8DAA-77A3E2288D4A}]
"(Default)" = "IConferenceCapabilities2"

[HKCU\Software\Classes\Interface\{4D120020-CE64-43C5-9F84-7A7B2360388F}]
"(Default)" = "IRoomJoinStateChangedEventData"

[HKCU\Software\Classes\Interface\{AF2ABA54-F591-42BA-8004-20944C9FB4D7}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{80EDBF3A-812E-42B5-A67F-6CC6D9A19A6C}]
"(Default)" = "IDelegatorClient"

[HKCU\Software\Classes\Wow6432Node\Interface\{86225E5C-7595-4D1C-985D-8A0458D714C0}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{E6B3F5FA-4208-4C37-AE07-F6435B68D693}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{B3FF95BD-B743-498C-9973-7F8A2A78576A}]
"(Default)" = "IParticipantInfo"

[HKCU\Software\Classes\Interface\{AA41EE75-F9C5-42F7-8D17-1D92D6BA4D92}]
"(Default)" = "IApplicationRegistration"

[HKCU\Software\Classes\Interface\{AB2D1A67-2B3D-4E25-B21C-03F4BFC4C2BE}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{8FE9A23D-72BC-4EA3-A5AF-E37F75EAD8A2}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{953AE732-F53A-4116-AC1B-0321B3FB3DBA}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{50D86EE2-288F-44F5-8144-69F6E3B24B90}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{38E5EC21-81A1-45A7-94D6-B812976231A4}]
"(Default)" = "IContentSharingModality"

[HKCU\Software\Classes\Interface\{2209E091-5B90-4CAF-8582-CC5979883376}]
"(Default)" = "IConversationWindowStateChangedEventData"

[HKCU\Software\Classes\Interface\{05789509-AFA1-4E90-B4FA-1A7820DB9796}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{C12F0DE5-9A7D-425C-B391-8BE004EAA2F6}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{8057F99D-292C-4371-926B-5312E61A3A40}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{3417D640-3976-4CB6-BC82-54E5E2E10784}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{EF5C00E4-75E2-4D39-B358-0ED9CB14F3CB}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{081793DA-7221-45C3-8AFA-3A2E6E464670}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{B1F5BCD8-69A6-4FC3-9EF0-9BD4AD999061}]
"(Default)" = "IConversationWindow"

[HKCU\Software\Classes\Wow6432Node\Interface\{08E1E9CF-A7E4-43BE-AE8E-B223CE71E46E}]
"(Default)" = "_IChannelCallback"

[HKCU\Software\Classes\Interface\{B03614AE-8D68-4386-9E1C-939CABCF1232}]
"(Default)" = "IRoomPropertyChangedEventData"

[HKCU\Software\Classes\Interface\{7356D7BB-FD71-4554-84A1-3BBE28726551}]
"(Default)" = "ISearchResults"

[HKCU\Software\Classes\Wow6432Node\Interface\{209DA899-15F1-499A-B8B5-A847EAA899AE}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{61C747F6-157C-4CAE-A37C-EC4352175860}]
"(Default)" = "IChannel"

[HKCU\Software\Classes\Wow6432Node\Interface\{339D28C6-3D1A-45D4-BA14-A56742749A43}]
"(Default)" = "IWorkingPeriod"

[HKCU\Software\Classes\Wow6432Node\Interface\{3187885C-A8AF-4D4B-8E80-F4B9D447A7B2}]
"(Default)" = "_IShareableContentCallback"

[HKCU\Software\Classes\Interface\{9397FF55-EE06-4F02-8F2A-BE3AE249D4BB}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{5FA92EA7-6E6E-4A82-8F0D-107FEAF5A75D}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{D804BA85-DB0F-49EE-B723-DCDF0425BD9F}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{5E7AB04C-E4B8-49FB-85FF-9E2BCA2899D3}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{7452BD0F-65CB-4A5E-AC37-E2BEA1F43DD9}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{011B320C-9AC1-4DDE-B595-3D0014472E2F}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{C6605772-3D9D-44A7-B43A-4590E6B43EE3}]
"(Default)" = "_IGroupCallback"

[HKCU\Software\Classes\Interface\{603E2454-725A-4679-A6A8-363B21633CB2}]
"(Default)" = "IRoomMessageDictionary"

[HKCU\Software\Classes\Interface\{D5C1C8FB-DC8A-45A3-AAA3-53B89D43CDE4}]
"(Default)" = "IIsContributingChangedEventData"

[HKCU\Software\Classes\Wow6432Node\Interface\{F0B791FA-434B-49F2-B84E-05619EBE6BEB}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{7CC306E9-2546-4101-82AB-29613AD6F7A7}]
"(Default)" = "ICallParkOrbit"

[HKCU\Software\Classes\Wow6432Node\Interface\{71A054B3-4D4B-4643-B14F-4572494B19E7}]
"(Default)" = "IScheduledConference"

[HKCU\Software\Classes\Wow6432Node\Interface\{9918673D-4D74-41CF-8840-D4996395A34C}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{80EDBF3A-812E-42B5-A67F-6CC6D9A19A6C}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{081793DA-7221-45C3-8AFA-3A2E6E464670}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{32430741-330B-48DF-96F6-0CFE00484D40}]
"(Default)" = "IControlRequestReceivedEventData"

[HKCU\Software\Classes\Interface\{109D32CE-E09F-46F5-9ECB-01E1D273B7DA}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{B3C5872E-591C-4A74-9F84-B00EF970A838}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{64561371-77A2-4BD4-A909-E6DEB1B5C6CF}]
"(Default)" = "_IClientEvents"

[HKCU\Software\Classes\Interface\{10D66B39-5E4B-4C98-AAC6-D0458FEB1BDB}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{C63F58CB-EF11-4934-AA3B-2D69244F0780}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{FD9000B3-479F-4B16-9D63-70A49E078946}]
"(Default)" = "IContactSettingDictionary"

[HKCU\Software\Classes\Wow6432Node\Interface\{C22CE6BF-3A47-46B7-8544-44305BADFEF9}]
"(Default)" = "_IConferenceSchedulerCallback"

[HKCU\Software\Classes\Interface\{B26F6403-761E-48D4-84E2-619C17EAEB13}]
"(Default)" = "_ILyncClientCallback"

[HKCU\Software\Classes\Interface\{09028936-CD20-43EF-98CF-56726ADDBA34}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{CE16D540-B9E8-4742-8659-9A7A318AFB92}]
"(Default)" = "IDevice"

[HKCU\Software\Classes\Interface\{8E73E7E1-90CE-4D3B-B5B7-71E87B2E8BA5}]
"(Default)" = "_IRoomUserEvents"

[HKCU\Software\Classes\Wow6432Node\Interface\{AF2ABA54-F591-42BA-8004-20944C9FB4D7}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{62A75516-C79B-42D7-8B49-3BA492C2B385}]
"(Default)" = "IInstantMessageModality"

[HKCU\Software\Classes\Interface\{E66CA1CC-9DB0-467E-9C60-6A832ACD6780}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{55A21CF3-A2B3-484E-BE2A-14280F501289}]
"(Default)" = "IVideoView"

[HKCU\Software\Classes\Wow6432Node\Interface\{2A9385AA-CF61-4E47-B64C-214DE4A4AD11}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{FF037274-455A-4E34-B5D1-D42DB866F9B7}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{A9AAB6A0-54B9-4419-AAAF-6B26DFAC1585}]
"(Default)" = "_ISelfCallback"

[HKCU\Software\Classes\Wow6432Node\Interface\{7356D7BB-FD71-4554-84A1-3BBE28726551}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{1FF0E6F1-2FE4-4E29-A123-557AF0DB6927}]
"(Default)" = "IContactEndpoint"

[HKCU\Software\Classes\Wow6432Node\Interface\{4E8DC7E0-04B8-470B-BDFA-F520099B975F}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{61C747F6-157C-4CAE-A37C-EC4352175860}]
"(Default)" = "IChannel"

[HKCU\Software\Classes\Interface\{283C2089-B760-4D65-9199-716627174F7A}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{DAB42E13-500A-409A-AC34-C1BF4719EE2E}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{7BF20B14-58D1-494B-B301-9B16BACC9610}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{F7EE956B-A713-48D3-AFEF-0A28F37740B3}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{7452BD0F-65CB-4A5E-AC37-E2BEA1F43DD9}]
"(Default)" = "IRoomParticipantsEventData"

[HKCU\Software\Classes\Interface\{219DC126-9A48-483F-80C2-3F22B3B47829}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{6A222195-F65E-467F-8F77-EB180BD85288}]
"(Default)" = "IUCOfficeIntegration"

[HKCU\Software\Classes\Interface\{8684D3AD-7061-4056-A894-EBF1270ADB9B}]
"(Default)" = "_IApplicationSharingModalityCallback"

[HKCU\Software\Classes\Interface\{D0DBB17D-565E-486C-A47B-BA32DC1FAD0A}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{A0C3E9BA-C622-45A2-9FED-2C662F3F489A}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{06437ABB-C419-4B11-A474-1A2B02FBD646}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{E24C2484-C70D-44AB-8A4E-F1585A17A3E1}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{8E839AF9-9508-475A-AA47-3EE8A946B75E}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{B3FF95BD-B743-498C-9973-7F8A2A78576A}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{80EDBF3A-812E-42B5-A67F-6CC6D9A19A6C}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{7693221D-7E9F-47D3-8782-6437CF3D4C0C}]
"(Default)" = "IPhone"

[HKCU\Software\Classes\Interface\{086F0E9D-A416-40F9-877C-F1C82DC1A6AD}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{8AFFB8CE-5404-4280-BCA3-E2E4388E6D73}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{464D5228-9F68-4B1F-B430-156A104E2B85}]
"(Default)" = "IPreviousHistoryRetrievalStateChangedEventData"

[HKCU\Software\Classes\Wow6432Node\Interface\{3C8D7146-35EA-4133-B2F6-C1FC2401A091}]
"(Default)" = "ISelf2"

[HKCU\Software\Classes\Wow6432Node\Interface\{30F974FB-1F7B-49D3-8DA4-01694BA474D2}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{84340964-7820-4EBC-BCD3-702926DE23E8}]
"(Default)" = "_IContentSharingModalityCallback"

[HKCU\Software\Classes\Interface\{9D4D3D10-DEBC-40C6-ACF9-527986CB42BC}]
"(Default)" = "IChannelActionAvailabilityEventData"

[HKCU\Software\Classes\Wow6432Node\Interface\{3959E5C6-75CC-448E-9A18-9F163FF47646}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{D5C1C8FB-DC8A-45A3-AAA3-53B89D43CDE4}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{3C43A2BE-BA4A-41E8-8F93-A9DC5F091892}]
"(Default)" = "_ISelf2Events"

[HKCU\Software\Classes\Wow6432Node\Interface\{30F974FB-1F7B-49D3-8DA4-01694BA474D2}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{64B7E9AD-D920-4EAA-95C7-9D95DE9ACE24}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{DAC6D77B-12F7-405C-BB33-002D6D4007F3}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{DF414A68-5051-4465-AAE2-4F301315734E}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{4290152C-75C9-47C8-AA12-814818360B3F}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{66D1FFC0-C234-4F3D-ABAA-98222A69E525}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{0678C83E-F580-4D99-902F-930699B28BE8}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{55A21CF3-A2B3-484E-BE2A-14280F501289}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{56A868B4-0AD4-11CE-B03A-0020AF0BA770}]
"(Default)" = "IVideoWindow"

[HKCU\Software\Classes\Interface\{89C7EB8E-42BC-4C9F-BB34-88CDE83CCB37}]
"(Default)" = "IRoomManagerStateChangedEventData"

[HKCU\Software\Classes\Interface\{5FA92EA7-6E6E-4A82-8F0D-107FEAF5A75D}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{9918673D-4D74-41CF-8840-D4996395A34C}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{F423726D-0E9B-4B55-9569-E79865210F69}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{2C59A886-ACD3-46BB-8BAC-7C1C59FB2E0D}]
"(Default)" = "IPreviousConversationsManagerNewItemCountChangedEventData"

[HKCU\Software\Classes\Interface\{9B3A702D-5BE1-4FCE-ADB3-EBBD23E078C3}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{B26F6403-761E-48D4-84E2-619C17EAEB13}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{9AB20314-B258-48F8-B659-AD250DFA20F5}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{17635563-2FA5-46AD-8F47-3F0FF958ECE2}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{D992371E-5161-453B-97E6-6E7C67BC075E}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{B3FF95BD-B743-498C-9973-7F8A2A78576A}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{30F974FB-1F7B-49D3-8DA4-01694BA474D2}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{9274DBDC-43CE-45AA-A817-414A4494AD28}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{25D64AEA-0E65-49CB-8D6D-65DB0AC1AF65}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{6964B116-8FE6-4C19-9052-0EAA74460A58}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{04378C72-E58F-47C0-8621-901B85CA2ED4}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{18BA13C7-A64E-4301-BA51-D1BFB3C1C9D5}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{B3C5872E-591C-4A74-9F84-B00EF970A838}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{8FE9A23D-72BC-4EA3-A5AF-E37F75EAD8A2}]
"(Default)" = "IParticipationStateChangedEventData"

[HKCU\Software\Classes\Interface\{B3C5872E-591C-4A74-9F84-B00EF970A838}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{A9AAB6A0-54B9-4419-AAAF-6B26DFAC1585}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{88C688B0-3908-4C56-A2E8-F90AB705C536}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{12480BD4-072F-4763-B9FB-41B2CA54F9CD}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{84340964-7820-4EBC-BCD3-702926DE23E8}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{7818A3F7-674B-477E-99E8-54774579A8E7}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{EC9773AD-7D22-4B03-B949-5E9055AF0F19}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{62074904-8D06-43FE-A531-E63DF7FDC2E7}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{4E8DC7E0-04B8-470B-BDFA-F520099B975F}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{5E7AB04C-E4B8-49FB-85FF-9E2BCA2899D3}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{CE16D540-B9E8-4742-8659-9A7A318AFB92}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{603E2454-725A-4679-A6A8-363B21633CB2}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{2D3D62CA-E9F6-4F94-8EBD-5FABAB29E6A5}]
"(Default)" = "IConferenceInfoPropertyDictionary"

[HKCU\Software\Classes\Wow6432Node\Interface\{4B3A2412-C149-4E52-A713-6CEBCF47503E}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{9D4D3D10-DEBC-40C6-ACF9-527986CB42BC}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{ABF012A2-2068-4B4D-80D7-6D386BA7C8A2}]
"(Default)" = "_IContactsAndGroupsCallback"

[HKCU\Software\Classes\Interface\{DF414A68-5051-4465-AAE2-4F301315734E}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{311DDE48-ED7D-46FA-9E0A-2E314B7FEF7C}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{92A9EB9B-85EE-444E-A302-00C3C945BAA4}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{905B727D-FD8F-46EC-8006-CE245F6835EE}]
"(Default)" = "IMessageSentEventData"

[HKCU\Software\Classes\Wow6432Node\Interface\{6964B116-8FE6-4C19-9052-0EAA74460A58}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{AA186C92-181E-417F-B150-FCA0F367E0FC}]
"(Default)" = "_IFrequentContactsEvents"

[HKCU\Software\Classes\Wow6432Node\Interface\{70986DCE-4AA8-4DFB-9A45-4BFCF7A206F5}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{B00F2520-029C-47D0-B4E8-8FBEF47CAA7E}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{F5996C71-77AB-4020-9776-C2C270FEF2AE}]
"(Default)" = "IConversationHistory"

[HKCU\Software\Classes\Interface\{806D3227-4CB8-47C4-9864-7D4DF4F44069}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{FD9000B3-479F-4B16-9D63-70A49E078946}]
"(Default)" = "IContactSettingDictionary"

[HKCU\Software\Classes\Wow6432Node\Interface\{68B1FC26-B48F-4D5F-B041-8E246676D836}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{53D014C1-54DB-42B3-9DFD-8E231EF2C356}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{7356D7BB-FD71-4554-84A1-3BBE28726551}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{603E2454-725A-4679-A6A8-363B21633CB2}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{B0B0E8F8-32DA-4CB0-A124-D1E35891D53A}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{D0DBB17D-565E-486C-A47B-BA32DC1FAD0A}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{8E839AF9-9508-475A-AA47-3EE8A946B75E}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{F644C610-A146-4A56-8338-A69C45C71CEF}]
"(Default)" = "IVoiceMailCollection"

[HKCU\Software\Classes\Wow6432Node\Interface\{7818A3F7-674B-477E-99E8-54774579A8E7}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{300E56A3-CE08-4EB3-9F48-505AA162C9DA}]
"(Default)" = "_IRoomEvents"

[HKCU\Software\Classes\Interface\{B8FD4A53-E7E6-4995-A5B5-1306C7584964}]
"(Default)" = "IUnreadMessageCountChangedEventData"

[HKCU\Software\Classes\Interface\{8057F99D-292C-4371-926B-5312E61A3A40}]
"(Default)" = "ISummarizerStatesChangedEventData"

[HKCU\Software\Classes\Interface\{4AA93AA8-898C-45EE-8E5C-1A86739B3F96}]
"(Default)" = "_IDeviceManagerEvents"

[HKCU\Software\Classes\Wow6432Node\Interface\{F644C610-A146-4A56-8338-A69C45C71CEF}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{57CC2235-96C5-49FA-B92B-350486C6CF52}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{BE6086A1-D436-4834-89EE-3CA4F8596A58}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{D804BA85-DB0F-49EE-B723-DCDF0425BD9F}]
"(Default)" = "ICustomGroup"

[HKCU\Software\Classes\Interface\{4C675532-6D55-49DD-8C8E-3C1CC5624CF2}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{283C2089-B760-4D65-9199-716627174F7A}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{3417D640-3976-4CB6-BC82-54E5E2E10784}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{8C9B6953-33CC-4A04-9DA4-F71AE79DA0C0}]
"(Default)" = "_IUCOfficeIntegrationEvents"

[HKCU\Software\Classes\Wow6432Node\Interface\{CE16D540-B9E8-4742-8659-9A7A318AFB92}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{FF037274-455A-4E34-B5D1-D42DB866F9B7}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{420A24E2-5C31-4262-9BD5-058682300ED6}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{4D120020-CE64-43C5-9F84-7A7B2360388F}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{12480BD4-072F-4763-B9FB-41B2CA54F9CD}]
"(Default)" = "IContactSettingChangedEventData"

[HKCU\Software\Classes\Interface\{62A75516-C79B-42D7-8B49-3BA492C2B385}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{E664682C-CBA5-4C7C-A65B-9CD046F24CBD}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{420A24E2-5C31-4262-9BD5-058682300ED6}]
"(Default)" = "IConferenceRegionalAccessInformation"

[HKCU\Software\Classes\Interface\{B335AE5E-E4EA-49D3-B03B-646A96FE66D3}]
"(Default)" = "IShareableContent"

[HKCU\Software\Classes\Interface\{10C3ACC7-6C0C-4F35-ADFB-AE0F200A8583}]
"(Default)" = "IPresenceCapability"

[HKCU\Software\Classes\Wow6432Node\Interface\{87084018-7E74-4F92-AB39-1CF03188580E}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\TypeLib\{B9AA1F11-F480-4054-A84E-B5D9277E40A8}\1.0\0\win32]
"(Default)" = "%Program Files% (x86)\Skype\Phone\Skype.exe\3"

[HKCU\Software\Classes\Wow6432Node\Interface\{05789509-AFA1-4E90-B4FA-1A7820DB9796}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{BD891697-C93E-4A0B-9B6C-004BD81B6EE8}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{7CFE77CD-731D-48B2-82B1-ECA3414D62E3}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{95B9A382-EA50-45E4-965E-BA61E7213DBA}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{57C3CB4D-C794-456F-846D-0E1ECA78BD00}]
"(Default)" = "IContactCollection"

[HKCU\Software\Classes\Wow6432Node\Interface\{300E56A3-CE08-4EB3-9F48-505AA162C9DA}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{5FA92EA7-6E6E-4A82-8F0D-107FEAF5A75D}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{283C2089-B760-4D65-9199-716627174F7A}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{905B727D-FD8F-46EC-8006-CE245F6835EE}]
"(Default)" = "IMessageSentEventData"

[HKCU\Software\Classes\Wow6432Node\Interface\{2C59A886-ACD3-46BB-8BAC-7C1C59FB2E0D}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{B03614AE-8D68-4386-9E1C-939CABCF1232}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{F8DF0B4B-A4CE-476B-81D3-9FBA98461B62}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{BE6086A1-D436-4834-89EE-3CA4F8596A58}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{EE1E4E39-627C-4D52-9D86-A515AB38A003}]
"WpadDecisionTime" = "AC 70 A8 08 99 3B D0 01"

[HKCU\Software\Classes\Interface\{71A054B3-4D4B-4643-B14F-4572494B19E7}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{35CE3A44-C636-4D31-BC95-B9370C2251B9}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{81C9D13F-A4F9-4E13-92D3-BB271E8DF3D2}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{8A88C016-AA5D-4EAE-9C79-7AA5C360ED76}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{E6B3F5FA-4208-4C37-AE07-F6435B68D693}]
"(Default)" = "IContactManager"

[HKCU\Software\Classes\Wow6432Node\Interface\{0C81EC90-9469-4ED4-ACAD-ADB86E11039C}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{68B1FC26-B48F-4D5F-B041-8E246676D836}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{B8FD4A53-E7E6-4995-A5B5-1306C7584964}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{BE6086A1-D436-4834-89EE-3CA4F8596A58}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{C12F0DE5-9A7D-425C-B391-8BE004EAA2F6}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{8665FD95-7720-4F9E-B605-6ABCBD7EDFF4}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{E66CA1CC-9DB0-467E-9C60-6A832ACD6780}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{339D28C6-3D1A-45D4-BA14-A56742749A43}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{EE9F3E74-AC61-469E-80D6-E22BF4EEFF5C}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{3959E5C6-75CC-448E-9A18-9F163FF47646}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{C413A27F-601E-4261-B9E3-0EB966F4E7D1}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{D2BFC7D7-A64F-48EF-BF90-C3C7E684D89C}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{C4D95336-5949-4D13-AAC8-82039E5CBCFC}]
"(Default)" = "_IUtilitiesCallback"

[HKCU\Software\Classes\Interface\{081793DA-7221-45C3-8AFA-3A2E6E464670}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{CA7EEB7A-7DC3-4FFE-A174-23DB5A003C04}]
"(Default)" = "IStreamStateChangedEventData"

[HKCU\Software\Classes\Interface\{EBD19735-0CB5-4AF3-8E05-B0140CF9D545}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{86225E5C-7595-4D1C-985D-8A0458D714C0}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{953AE732-F53A-4116-AC1B-0321B3FB3DBA}]
"(Default)" = "_ILyncClientEvents"

[HKCU\Software\Classes\Wow6432Node\Interface\{37C7F935-E215-46D2-82A3-A451840EC733}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{DD181E97-EEE0-4D65-BAD1-16866D0C7953}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{EBD19735-0CB5-4AF3-8E05-B0140CF9D545}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{569E04F2-D286-4903-9642-44D850310956}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{C12F0DE5-9A7D-425C-B391-8BE004EAA2F6}]
"(Default)" = "ILocaleString"

[HKCU\Software\Classes\Wow6432Node\Interface\{F87AFD9A-9BF8-4AC4-953E-33C4D2035D33}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{55A21CF3-A2B3-484E-BE2A-14280F501289}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{209DA899-15F1-499A-B8B5-A847EAA899AE}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{0CA9BAE8-DD28-4929-A821-4D00F11203CC}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{3417D640-3976-4CB6-BC82-54E5E2E10784}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{4C675532-6D55-49DD-8C8E-3C1CC5624CF2}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{36CDC166-4F21-46AD-A60E-8551F26C1D41}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{6A222195-F65E-467F-8F77-EB180BD85288}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{64561371-77A2-4BD4-A909-E6DEB1B5C6CF}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{4290152C-75C9-47C8-AA12-814818360B3F}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{D4B240B9-059B-4D13-8997-31B282B3BD43}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{EFEC2816-F16D-48D8-9306-26C810F0EA55}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{4B3A2412-C149-4E52-A713-6CEBCF47503E}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{C6605772-3D9D-44A7-B43A-4590E6B43EE3}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{FB67275C-4D9E-4C32-9793-A96749884FC1}]
"(Default)" = "IAlertLevel"

[HKCU\Software\Classes\Interface\{EE9F3E74-AC61-469E-80D6-E22BF4EEFF5C}]
"(Default)" = "IClient"

[HKCU\Software\Classes\Interface\{082EE280-726E-417F-99CB-81A0CCBFF883}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{B03614AE-8D68-4386-9E1C-939CABCF1232}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{C22CE6BF-3A47-46B7-8544-44305BADFEF9}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{0678C83E-F580-4D99-902F-930699B28BE8}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{8E73E7E1-90CE-4D3B-B5B7-71E87B2E8BA5}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{7BF20B14-58D1-494B-B301-9B16BACC9610}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{DBA05C15-1C07-4A76-8248-08D8416A24E3}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{D5C1C8FB-DC8A-45A3-AAA3-53B89D43CDE4}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{68DA8699-6C6E-4390-BD82-709FF1DC1702}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{AC10D6E9-4A8C-4484-B8F4-CA1E36347AAE}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{B3FF95BD-B743-498C-9973-7F8A2A78576A}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{D4B240B9-059B-4D13-8997-31B282B3BD43}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{B0B0E8F8-32DA-4CB0-A124-D1E35891D53A}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{FD02E775-CB9D-4CE3-9243-115C81E5F11C}]
"(Default)" = "IParticipantCollection"

[HKCU\Software\Classes\Wow6432Node\Interface\{300E56A3-CE08-4EB3-9F48-505AA162C9DA}]
"(Default)" = "_IRoomEvents"

[HKCU\Software\Classes\Interface\{BD891697-C93E-4A0B-9B6C-004BD81B6EE8}]
"(Default)" = "IConferenceSettingDictionary"

[HKCU\Software\Classes\Interface\{BC9F5F40-D315-40C1-B1C6-CEA0646E18E2}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{0BDB9057-28AE-4BF0-AFF0-12A148E51637}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{25A47938-5C31-4F43-9108-DA01EE5869C0}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{C31FB52D-9E9E-45AD-A102-5218E1685B78}]
"(Default)" = "IConversationManager"

[HKCU\Software\Classes\Wow6432Node\Interface\{232F1CAB-5351-4E48-8A87-2185445F712D}]
"(Default)" = "IActiveVideoDeviceChangedEventData"

[HKCU\Software\Classes\Interface\{38E5EC21-81A1-45A7-94D6-B812976231A4}]
"(Default)" = "IContentSharingModality"

[HKCU\Software\Classes\Interface\{628D7BDD-45AB-404D-8505-B3ADC15F454D}]
"(Default)" = "_IRoomCallback"

[HKCU\Software\Classes\Interface\{94093301-8854-408E-8138-C7C3D2DACA1F}]
"(Default)" = "IShareableContentStateChangedEventData"

[HKCU\Software\Classes\Interface\{C79E4169-535F-4A41-8DE2-C65A90D9503D}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{92D7E7A8-48D8-4166-8911-630AE02B2B93}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{9274DBDC-43CE-45AA-A817-414A4494AD28}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{36CDC166-4F21-46AD-A60E-8551F26C1D41}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{9918673D-4D74-41CF-8840-D4996395A34C}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{B03614AE-8D68-4386-9E1C-939CABCF1232}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{15D4461D-C7EB-45CB-B214-F1C45FED1DB2}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{92D7E7A8-48D8-4166-8911-630AE02B2B93}]
"(Default)" = "IInitialContextEventData"

[HKCU\Software\Classes\Interface\{25025B1B-0084-44D1-B383-9FFC9A99ABCD}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{3F60CFF7-BE3F-4404-8395-C02D0CDD318E}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{8C9B6953-33CC-4A04-9DA4-F71AE79DA0C0}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{4E8DC7E0-04B8-470B-BDFA-F520099B975F}]
"(Default)" = "IControllerChangedEventData"

[HKCU\Software\Classes\Wow6432Node\Interface\{0BDB9057-28AE-4BF0-AFF0-12A148E51637}]
"(Default)" = "IUriChangedEventData"

[HKCU\Software\Classes\Wow6432Node\Interface\{57C3CB4D-C794-456F-846D-0E1ECA78BD00}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{8057F99D-292C-4371-926B-5312E61A3A40}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{E24C2484-C70D-44AB-8A4E-F1585A17A3E1}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{70986DCE-4AA8-4DFB-9A45-4BFCF7A206F5}]
"(Default)" = "_IChannel2Callback"

[HKCU\Software\Classes\Interface\{76DE1CD8-F278-48A1-A391-E5BEB8F428E6}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{CA478B44-4FCE-4082-8700-8CEC69FB50E1}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{378CD767-1B64-4A0E-A941-8F52869FC9DF}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{90B49A60-72AF-4360-9F9B-916DB7504A3C}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{08E1E9CF-A7E4-43BE-AE8E-B223CE71E46E}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{4FE44049-4E44-4109-B234-4E4EFC135A86}]
"(Default)" = "_IInstantMessageModalityEvents"

[HKCU\Software\Classes\Wow6432Node\Interface\{EF5C00E4-75E2-4D39-B358-0ED9CB14F3CB}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{25025B1B-0084-44D1-B383-9FFC9A99ABCD}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{B3FF95BD-B743-498C-9973-7F8A2A78576A}]
"(Default)" = "IParticipantInfo"

[HKCU\Software\Classes\Wow6432Node\Interface\{18BA13C7-A64E-4301-BA51-D1BFB3C1C9D5}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{4875C050-BA9C-4A05-891E-E7B0A9463664}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{855AD949-E2EB-473D-AAF2-9800008EA303}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{4BACB4B8-1236-42B8-BDA1-D1533148780D}]
"(Default)" = "_IPreviousConversationsManagerCallback"

[HKCU\Software\Classes\Interface\{330639F2-E399-48CB-863F-56A50A27A138}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{4023052E-E3B7-48A3-BCB3-CA2234D9BAEE}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{08E1E9CF-A7E4-43BE-AE8E-B223CE71E46E}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content]
"CachePrefix" = ""

[HKCU\Software\Classes\Wow6432Node\Interface\{76428270-36FA-4236-8BDF-AADB39FD1371}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{F8DF0B4B-A4CE-476B-81D3-9FBA98461B62}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{9397FF55-EE06-4F02-8F2A-BE3AE249D4BB}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{D2BFC7D7-A64F-48EF-BF90-C3C7E684D89C}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{6A222195-F65E-467F-8F77-EB180BD85288}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{DBA05C15-1C07-4A76-8248-08D8416A24E3}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{2495B94C-38AF-439B-BBA0-0AD38D959CE4}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{66D1FFC0-C234-4F3D-ABAA-98222A69E525}]
"(Default)" = "IConferenceTelephoneAccessInformation"

[HKCU\Software\Classes\Interface\{9D4D3D10-DEBC-40C6-ACF9-527986CB42BC}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{A4E1D1E4-7839-473B-95FA-5D33DDC0D2DD}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{2495B94C-38AF-439B-BBA0-0AD38D959CE4}]
"(Default)" = "IChannelStateChangedEventData"

[HKCU\Software\Classes\Wow6432Node\Interface\{B8FD4A53-E7E6-4995-A5B5-1306C7584964}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{AE3A7C39-9C30-4E0F-BAE4-D8344EF377EA}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{533891F1-A460-43E6-8BDA-6D0D2C13ADDE}]
"(Default)" = "IConversation"

[HKCU\Software\Classes\Interface\{DC63D621-11C8-4490-B017-B8C57EE1BE25}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{3C8210C8-8578-47C6-87A9-FA1AD2BA9873}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{BE026CD2-7E82-4F7C-8762-F6B02F496174}]
"(Default)" = "_IApplicationSharingModalityEvents"

[HKCU\Software\Classes\Interface\{F0CE810F-E36F-4CD8-A836-515B9A6E09FC}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{6964B116-8FE6-4C19-9052-0EAA74460A58}]
"(Default)" = "_IConversation2Callback"

[HKCU\Software\Classes\Interface\{EFEC2816-F16D-48D8-9306-26C810F0EA55}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{D992371E-5161-453B-97E6-6E7C67BC075E}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{09028936-CD20-43EF-98CF-56726ADDBA34}]
"(Default)" = "IUCOfficeIntegrationHelper"

[HKCU\Software\Classes\Interface\{C12F0DE5-9A7D-425C-B391-8BE004EAA2F6}]
"(Default)" = "ILocaleString"

[HKCU\Software\Classes\Interface\{3C43A2BE-BA4A-41E8-8F93-A9DC5F091892}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{ABF012A2-2068-4B4D-80D7-6D386BA7C8A2}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{D2BFC7D7-A64F-48EF-BF90-C3C7E684D89C}]
"(Default)" = "IDistributionGroupExpansionStateChangedEventData"

[HKCU\Software\Classes\Wow6432Node\Interface\{56A868B4-0AD4-11CE-B03A-0020AF0BA770}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{F0CE810F-E36F-4CD8-A836-515B9A6E09FC}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{BC9F5F40-D315-40C1-B1C6-CEA0646E18E2}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{1A8A9402-E89F-40AE-88A8-B328391684B6}]
"(Default)" = "INamedPropertyList"

[HKCU\Software\Classes\Interface\{300E56A3-CE08-4EB3-9F48-505AA162C9DA}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{EBD19735-0CB5-4AF3-8E05-B0140CF9D545}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{2C59A886-ACD3-46BB-8BAC-7C1C59FB2E0D}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{663C61F4-A9DA-4A6F-A606-F142F665DF61}]
"(Default)" = "IConversationWindowActions"

[HKCU\Software\Classes\Wow6432Node\Interface\{5E7AB04C-E4B8-49FB-85FF-9E2BCA2899D3}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{E82737B9-B2BE-4AFD-B649-C9F665627F20}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{2495B94C-38AF-439B-BBA0-0AD38D959CE4}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{1FF0E6F1-2FE4-4E29-A123-557AF0DB6927}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{744BAB86-B15F-4BD5-B7DD-476B0CE0162A}]
"(Default)" = "IDelegatorClientCollectionEventData"

[HKCU\Software\Classes\Interface\{30F974FB-1F7B-49D3-8DA4-01694BA474D2}]
"(Default)" = "_IVideoViewEvents"

[HKCU\Software\Classes\Interface\{21629AB6-9557-4985-9237-49177F618692}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{15D4461D-C7EB-45CB-B214-F1C45FED1DB2}]
"(Default)" = "IPreviousConversationsManagerDictionary"

[HKCU\Software\Classes\Interface\{F97973D7-9436-4A3E-A802-F6EA172A0425}]
"(Default)" = "IGroup"

[HKCU\Software\Classes\Interface\{1124AA59-B6F3-4EB1-B79A-E7F53B388B8D}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{064E6072-5592-4D13-AFDB-55F5A494E137}]
"(Default)" = "IParticipantCollectionChangedEventData"

[HKCU\Software\Classes\Interface\{905B727D-FD8F-46EC-8006-CE245F6835EE}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{53D014C1-54DB-42B3-9DFD-8E231EF2C356}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{9D4D3D10-DEBC-40C6-ACF9-527986CB42BC}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{011B320C-9AC1-4DDE-B595-3D0014472E2F}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{EF5C00E4-75E2-4D39-B358-0ED9CB14F3CB}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{378CD767-1B64-4A0E-A941-8F52869FC9DF}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{D5C1C8FB-DC8A-45A3-AAA3-53B89D43CDE4}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{3187885C-A8AF-4D4B-8E80-F4B9D447A7B2}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{ACABFA1C-0738-4C4D-AF7E-326873CF4ACE}]
"(Default)" = "IPreviousConversationsManager"

[HKCU\Software\Classes\Interface\{30F974FB-1F7B-49D3-8DA4-01694BA474D2}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{340C54A6-35CF-4971-B540-72D7F040AC24}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{6A986B5D-E5EC-4395-AD2D-0E62B72DA776}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{8684D3AD-7061-4056-A894-EBF1270ADB9B}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{30F974FB-1F7B-49D3-8DA4-01694BA474D2}]
"(Default)" = "_IVideoViewEvents"

[HKCU\Software\Classes\Wow6432Node\Interface\{F97BED54-E434-4020-A197-F15AEA9D9C95}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\TypeLib\{B9AA1F11-F480-4054-A84E-B5D9277E40A8}\1.0\FLAGS]
"(Default)" = "0"

[HKCU\Software\Classes\Wow6432Node\Interface\{6964B116-8FE6-4C19-9052-0EAA74460A58}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{7693221D-7E9F-47D3-8782-6437CF3D4C0C}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{1F8EBE6F-7993-42CE-980A-A2F03793BE71}]
"(Default)" = "IDeviceCollection"

[HKCU\Software\Classes\Wow6432Node\Interface\{DBA05C15-1C07-4A76-8248-08D8416A24E3}]
"(Default)" = "IIsTypingChangedEventData"

[HKCU\Software\Classes\Wow6432Node\Interface\{4AA93AA8-898C-45EE-8E5C-1A86739B3F96}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{9112CE9B-3704-48C0-86DC-7A7B0F34D7A3}]
"(Default)" = "IUtilities2"

[HKCU\Software\Classes\Interface\{A0C3E9BA-C622-45A2-9FED-2C662F3F489A}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{DAB42E13-500A-409A-AC34-C1BF4719EE2E}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{7BF20B14-58D1-494B-B301-9B16BACC9610}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{ED5040FA-8F8F-4876-BF6D-9C62F5EFFD5B}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{3187885C-A8AF-4D4B-8E80-F4B9D447A7B2}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{CA478B44-4FCE-4082-8700-8CEC69FB50E1}]
"(Default)" = "IShareableContentPropertyDictionary"

[HKCU\Software\Classes\Interface\{AF2ABA54-F591-42BA-8004-20944C9FB4D7}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{D60B1701-766D-401E-8586-83E0C9106BE0}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{300E56A3-CE08-4EB3-9F48-505AA162C9DA}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{232F1CAB-5351-4E48-8A87-2185445F712D}]
"(Default)" = "IActiveVideoDeviceChangedEventData"

[HKCU\Software\Classes\Wow6432Node\Interface\{232F1CAB-5351-4E48-8A87-2185445F712D}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{4C675532-6D55-49DD-8C8E-3C1CC5624CF2}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\TypeLib\{B9AA1F11-F480-4054-A84E-B5D9277E40A8}\1.0]
"(Default)" = "Unified Collaboration API 1.0 Type Library"

[HKCU\Software\Classes\Interface\{603E2454-725A-4679-A6A8-363B21633CB2}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{1FF0E6F1-2FE4-4E29-A123-557AF0DB6927}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{25D64AEA-0E65-49CB-8D6D-65DB0AC1AF65}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{8AFFB8CE-5404-4280-BCA3-E2E4388E6D73}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{FB67275C-4D9E-4C32-9793-A96749884FC1}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{26C8D96D-7D22-4E9E-948A-EDCCB4CA9C64}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{283C2089-B760-4D65-9199-716627174F7A}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{7CC306E9-2546-4101-82AB-29613AD6F7A7}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{E82737B9-B2BE-4AFD-B649-C9F665627F20}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{AC10D6E9-4A8C-4484-B8F4-CA1E36347AAE}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{AAFE380B-B079-4B55-B81B-A9401D77B776}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{53D014C1-54DB-42B3-9DFD-8E231EF2C356}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{0BDB9057-28AE-4BF0-AFF0-12A148E51637}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{ACABFA1C-0738-4C4D-AF7E-326873CF4ACE}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{1FF8AA01-D8AF-4B2B-B254-BEFEFABAF2D6}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{4C675532-6D55-49DD-8C8E-3C1CC5624CF2}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{10C3ACC7-6C0C-4F35-ADFB-AE0F200A8583}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{F644C610-A146-4A56-8338-A69C45C71CEF}]
"(Default)" = "IVoiceMailCollection"

[HKCU\Software\Classes\Wow6432Node\Interface\{1F8EBE6F-7993-42CE-980A-A2F03793BE71}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{8FE9A23D-72BC-4EA3-A5AF-E37F75EAD8A2}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{5418E2AB-EB9A-4659-B4DC-28DE633B2B8F}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{E24C2484-C70D-44AB-8A4E-F1585A17A3E1}]
"(Default)" = "IVoiceMailsManager"

[HKCU\Software\Classes\Wow6432Node\Interface\{D992371E-5161-453B-97E6-6E7C67BC075E}]
"(Default)" = "_IPreviousConversationsManagerEvents"

[HKCU\Software\Classes\Wow6432Node\Interface\{CE16D540-B9E8-4742-8659-9A7A318AFB92}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{17635563-2FA5-46AD-8F47-3F0FF958ECE2}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{70986DCE-4AA8-4DFB-9A45-4BFCF7A206F5}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{086F0E9D-A416-40F9-877C-F1C82DC1A6AD}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{DCDEA425-B5F2-4719-A3B4-69FFB9770BE6}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{283C2089-B760-4D65-9199-716627174F7A}]
"(Default)" = "IGroupNameChangedEventData"

[HKCU\Software\Classes\Wow6432Node\Interface\{0678C83E-F580-4D99-902F-930699B28BE8}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{8F04E92D-EE26-4B64-B9C1-56DD90816810}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{DAC6D77B-12F7-405C-BB33-002D6D4007F3}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{1566FA3C-FD24-41DB-A2B8-6232F89783DE}]
"(Default)" = "IRoomMessageEventData"

[HKCU\Software\Classes\Wow6432Node\Interface\{95B9A382-EA50-45E4-965E-BA61E7213DBA}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{A0C3E9BA-C622-45A2-9FED-2C662F3F489A}]
"(Default)" = "IRoomMessage"

[HKCU\Software\Classes\Interface\{6964B116-8FE6-4C19-9052-0EAA74460A58}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{74B6CAF0-755E-454D-A819-D0E439EF5296}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{300E56A3-CE08-4EB3-9F48-505AA162C9DA}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{6B551C9E-DE81-41DF-A0AE-39F0AF11D508}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{94093301-8854-408E-8138-C7C3D2DACA1F}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{AA186C92-181E-417F-B150-FCA0F367E0FC}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{A9AAB6A0-54B9-4419-AAAF-6B26DFAC1585}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{9918673D-4D74-41CF-8840-D4996395A34C}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{64561371-77A2-4BD4-A909-E6DEB1B5C6CF}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{B22EDBEA-9E61-4703-82BE-01C05619B6D6}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{37C7F935-E215-46D2-82A3-A451840EC733}]
"(Default)" = "IConversation2"

[HKCU\Software\Classes\Wow6432Node\Interface\{FB67275C-4D9E-4C32-9793-A96749884FC1}]
"(Default)" = "IAlertLevel"

[HKCU\Software\Classes\Interface\{A0C3E9BA-C622-45A2-9FED-2C662F3F489A}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{6A986B5D-E5EC-4395-AD2D-0E62B72DA776}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{F0B791FA-434B-49F2-B84E-05619EBE6BEB}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{D804BA85-DB0F-49EE-B723-DCDF0425BD9F}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{56F7DEC0-59CA-47C6-9F35-D5066A702B39}]
"(Default)" = "IConversationStateChangePropertyDictionary"

[HKCU\Software\Classes\Interface\{35CE3A44-C636-4D31-BC95-B9370C2251B9}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{26C8D96D-7D22-4E9E-948A-EDCCB4CA9C64}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{DCDEA425-B5F2-4719-A3B4-69FFB9770BE6}]
"(Default)" = "IRecentContacts"

[HKCU\Software\Classes\Wow6432Node\Interface\{00E22CBB-3170-453A-AE62-EAFBC75A9F8D}]
"(Default)" = "IConversationPropertyDictionary"

[HKCU\Software\Classes\Interface\{ABF012A2-2068-4B4D-80D7-6D386BA7C8A2}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{D60B1701-766D-401E-8586-83E0C9106BE0}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{05789509-AFA1-4E90-B4FA-1A7820DB9796}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{899B846A-8887-45D6-B8F5-8AAA0BFDF722}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{02DD541F-C863-4295-92AB-A4CF29F5D841}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{18BA13C7-A64E-4301-BA51-D1BFB3C1C9D5}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{95B8D3E8-F3D5-4DC0-BCFE-AB80C835DEA0}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{2F8C3E58-436B-42DB-8924-6C394B37DCA2}]
"(Default)" = "IConferenceAccessInformation"

[HKCU\Software\Classes\Wow6432Node\Interface\{1F8EBE6F-7993-42CE-980A-A2F03793BE71}]
"(Default)" = "IDeviceCollection"

[HKCU\Software\Classes\Interface\{0678C83E-F580-4D99-902F-930699B28BE8}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{8057F99D-292C-4371-926B-5312E61A3A40}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{B03614AE-8D68-4386-9E1C-939CABCF1232}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{B3FF95BD-B743-498C-9973-7F8A2A78576A}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{92D7E7A8-48D8-4166-8911-630AE02B2B93}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{09028936-CD20-43EF-98CF-56726ADDBA34}]
"(Default)" = "IUCOfficeIntegrationHelper"

[HKCU\Software\Classes\Interface\{DCDEA425-B5F2-4719-A3B4-69FFB9770BE6}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{C0034194-F7B6-43EB-B0E0-7852FC8E7BFA}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{219DC126-9A48-483F-80C2-3F22B3B47829}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{9B3A702D-5BE1-4FCE-ADB3-EBBD23E078C3}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{AE3A7C39-9C30-4E0F-BAE4-D8344EF377EA}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{76428270-36FA-4236-8BDF-AADB39FD1371}]
"(Default)" = "_IConversationWindowCallback"

[HKCU\Software\Classes\Wow6432Node\Interface\{9244D573-914F-4C1F-93F6-31609A95CBED}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{8E839AF9-9508-475A-AA47-3EE8A946B75E}]
"(Default)" = "IAudioChannel"

[HKCU\Software\Classes\Wow6432Node\Interface\{D5C1C8FB-DC8A-45A3-AAA3-53B89D43CDE4}]
"(Default)" = "IIsContributingChangedEventData"

[HKCU\Software\Classes\Interface\{F97973D7-9436-4A3E-A802-F6EA172A0425}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{995F992C-9DEF-47B9-BF11-81813C0C0E28}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{C413A27F-601E-4261-B9E3-0EB966F4E7D1}]
"(Default)" = "ILyncClient"

[HKCU\Software\Classes\Interface\{ACD2FDB9-98ED-4283-AAE8-3CD989EBD9AE}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{10FDD9BA-0CBA-4958-B6C8-D0912BF2703F}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{4023052E-E3B7-48A3-BCB3-CA2234D9BAEE}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{AF2ABA54-F591-42BA-8004-20944C9FB4D7}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{AC10D6E9-4A8C-4484-B8F4-CA1E36347AAE}]
"(Default)" = "IApplicationSharingModality"

[HKCU\Software\Classes\Wow6432Node\Interface\{7CFE77CD-731D-48B2-82B1-ECA3414D62E3}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{8684D3AD-7061-4056-A894-EBF1270ADB9B}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{E5CFF4A5-83A8-4FD8-8DAA-77A3E2288D4A}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{DA7CF784-67DF-429C-82FB-9AFD99F6CCCB}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{1124AA59-B6F3-4EB1-B79A-E7F53B388B8D}]
"(Default)" = "IParticipantActionAvailabilityChangedEventData"

[HKCU\Software\Classes\Wow6432Node\Interface\{B03614AE-8D68-4386-9E1C-939CABCF1232}]
"(Default)" = "IRoomPropertyChangedEventData"

[HKCU\Software\Classes\Interface\{4C675532-6D55-49DD-8C8E-3C1CC5624CF2}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{8F04E92D-EE26-4B64-B9C1-56DD90816810}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{F644C610-A146-4A56-8338-A69C45C71CEF}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{D0DBB17D-565E-486C-A47B-BA32DC1FAD0A}]
"(Default)" = "ISharerChangedEventData"

[HKCU\Software\Classes\Wow6432Node\Interface\{68DA8699-6C6E-4390-BD82-709FF1DC1702}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{8C9B6953-33CC-4A04-9DA4-F71AE79DA0C0}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{95B8D3E8-F3D5-4DC0-BCFE-AB80C835DEA0}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{E2C6D6E0-52EF-47A2-BDA9-9D6A7A29A391}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{F5996C71-77AB-4020-9776-C2C270FEF2AE}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{10C3ACC7-6C0C-4F35-ADFB-AE0F200A8583}]
"(Default)" = "IPresenceCapability"

[HKCU\Software\Classes\Wow6432Node\Interface\{DA7CF784-67DF-429C-82FB-9AFD99F6CCCB}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{E6B3F5FA-4208-4C37-AE07-F6435B68D693}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{81C9D13F-A4F9-4E13-92D3-BB271E8DF3D2}]
"(Default)" = "IPreviousConversationCollection"

[HKCU\Software\Classes\Interface\{64B7E9AD-D920-4EAA-95C7-9D95DE9ACE24}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{21629AB6-9557-4985-9237-49177F618692}]
"(Default)" = "IContextEventData"

[HKCU\Software\Classes\Interface\{21629AB6-9557-4985-9237-49177F618692}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{4875C050-BA9C-4A05-891E-E7B0A9463664}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{EF5C00E4-75E2-4D39-B358-0ED9CB14F3CB}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{ED5040FA-8F8F-4876-BF6D-9C62F5EFFD5B}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{3417D640-3976-4CB6-BC82-54E5E2E10784}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{6A7FF112-42CE-4D03-8922-D02AC6C5759F}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{DBA05C15-1C07-4A76-8248-08D8416A24E3}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{339D28C6-3D1A-45D4-BA14-A56742749A43}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{00E22CBB-3170-453A-AE62-EAFBC75A9F8D}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{36CDC166-4F21-46AD-A60E-8551F26C1D41}]
"(Default)" = "_IParticipant2Callback"

[HKCU\Software\Classes\Interface\{95B9A382-EA50-45E4-965E-BA61E7213DBA}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{FF037274-455A-4E34-B5D1-D42DB866F9B7}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{8665FD95-7720-4F9E-B605-6ABCBD7EDFF4}]
"(Default)" = "IParticipantPropertyDictionary"

[HKCU\Software\Classes\Wow6432Node\Interface\{3690D374-3779-4EFC-B8E8-20642C01529A}]
"(Default)" = "ISharingResource"

[HKCU\Software\Classes\Interface\{F97BED54-E434-4020-A197-F15AEA9D9C95}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{A58F54D2-9786-4309-964D-96549AEC7611}]
"(Default)" = "IShareableContentCollection"

[HKCU\Software\Classes\Interface\{1B04D929-11E4-46C2-9162-EA4F2758C3A7}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{C31FB52D-9E9E-45AD-A102-5218E1685B78}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{3DEBDC7E-811F-4304-BDD7-7D98C732026C}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{C22CE6BF-3A47-46B7-8544-44305BADFEF9}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{08DDF5C4-FA12-4978-B26E-C6D23C453413}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{B28F2007-3926-49CF-9101-4CCB9574049B}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{628D7BDD-45AB-404D-8505-B3ADC15F454D}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{4AA93AA8-898C-45EE-8E5C-1A86739B3F96}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{62B932E9-7847-4D78-BEEE-5D58BF815B03}]
"(Default)" = "IContactPositionChangedEventData"

[HKCU\Software\Classes\Interface\{DD181E97-EEE0-4D65-BAD1-16866D0C7953}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{62074904-8D06-43FE-A531-E63DF7FDC2E7}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{D992371E-5161-453B-97E6-6E7C67BC075E}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{EF5C00E4-75E2-4D39-B358-0ED9CB14F3CB}]
"(Default)" = "IConversationContextCollectionEventData"

[HKCU\Software\Classes\Wow6432Node\Interface\{663C61F4-A9DA-4A6F-A606-F142F665DF61}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{DD31376E-E529-43F2-B3B4-E379EBD28E2A}]
"(Default)" = "IAccessEntryCollectionChangedEventData"

[HKCU\Software\Classes\Interface\{50D86EE2-288F-44F5-8144-69F6E3B24B90}]
"(Default)" = "_IContactManagerEvents"

[HKCU\Software\Classes\Wow6432Node\Interface\{88C688B0-3908-4C56-A2E8-F90AB705C536}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{8FE9A23D-72BC-4EA3-A5AF-E37F75EAD8A2}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{D4B240B9-059B-4D13-8997-31B282B3BD43}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{8C9B6953-33CC-4A04-9DA4-F71AE79DA0C0}]
"(Default)" = "_IUCOfficeIntegrationEvents"

[HKCU\Software\Classes\Wow6432Node\Interface\{4D120020-CE64-43C5-9F84-7A7B2360388F}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{F644C610-A146-4A56-8338-A69C45C71CEF}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{21C41EDE-7ED8-4D97-9B0D-DD785781AF9B}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{4875C050-BA9C-4A05-891E-E7B0A9463664}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{DC4BC923-6A52-4F02-9F8A-547B606955E7}]
"(Default)" = "_IAccessPermissionEvents"

[HKCU\Software\Classes\Interface\{EBD19735-0CB5-4AF3-8E05-B0140CF9D545}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{064E6072-5592-4D13-AFDB-55F5A494E137}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{8E73E7E1-90CE-4D3B-B5B7-71E87B2E8BA5}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{4D120020-CE64-43C5-9F84-7A7B2360388F}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{3959E5C6-75CC-448E-9A18-9F163FF47646}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{90B49A60-72AF-4360-9F9B-916DB7504A3C}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{4DA899D3-FAC7-4F43-8E4A-1987988FBC9B}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{0FDB5B86-DD44-41BF-A443-317FD19BBF3D}]
"(Default)" = "_IRoomManagerCallback"

[HKCU\Software\Classes\Wow6432Node\Interface\{8684D3AD-7061-4056-A894-EBF1270ADB9B}]
"(Default)" = "_IApplicationSharingModalityCallback"

[HKCU\Software\Classes\Interface\{CA62E6F3-3E6D-451B-AEAA-6A1B7AACF8D4}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{7CC306E9-2546-4101-82AB-29613AD6F7A7}]
"(Default)" = "ICallParkOrbit"

[HKCU\Software\Classes\Wow6432Node\Interface\{7BF20B14-58D1-494B-B301-9B16BACC9610}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{4290152C-75C9-47C8-AA12-814818360B3F}]
"(Default)" = "IModalityPropertyChangedEventData"

[HKCU\Software\Classes\Interface\{F7EE956B-A713-48D3-AFEF-0A28F37740B3}]
"(Default)" = "IAsynchronousOperation"

[HKCU\Software\Classes\Wow6432Node\Interface\{ACD2FDB9-98ED-4283-AAE8-3CD989EBD9AE}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{DEDDD7BD-4763-41D2-9AAA-B2C143457CA4}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{89C7EB8E-42BC-4C9F-BB34-88CDE83CCB37}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{71A054B3-4D4B-4643-B14F-4572494B19E7}]
"(Default)" = "IScheduledConference"

[HKCU\Software\Classes\Interface\{7693221D-7E9F-47D3-8782-6437CF3D4C0C}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{B0B0E8F8-32DA-4CB0-A124-D1E35891D53A}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{4BACB4B8-1236-42B8-BDA1-D1533148780D}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{70DCCE38-90BF-4428-A34F-3A6082F29E50}]
"(Default)" = "IParticipantPropertyChangedEventData"

[HKCU\Software\Classes\Interface\{02DD541F-C863-4295-92AB-A4CF29F5D841}]
"(Default)" = "IConversationWindow2"

[HKCU\Software\Classes\Wow6432Node\Interface\{CE16D540-B9E8-4742-8659-9A7A318AFB92}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{E82737B9-B2BE-4AFD-B649-C9F665627F20}]
"(Default)" = "IDeviceCollectionEventData"

[HKCU\Software\Classes\Interface\{EE9F3E74-AC61-469E-80D6-E22BF4EEFF5C}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"AutoDetect" = "1"

[HKCU\Software\Classes\Wow6432Node\Interface\{4BACB4B8-1236-42B8-BDA1-D1533148780D}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{109D32CE-E09F-46F5-9ECB-01E1D273B7DA}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{9B3A702D-5BE1-4FCE-ADB3-EBBD23E078C3}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{F87AFD9A-9BF8-4AC4-953E-33C4D2035D33}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{FA7971EF-1E41-429F-8C79-DAC5F88D444B}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "0"

[HKCU\Software\Classes\Wow6432Node\Interface\{2495B94C-38AF-439B-BBA0-0AD38D959CE4}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{8E839AF9-9508-475A-AA47-3EE8A946B75E}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{7356D7BB-FD71-4554-84A1-3BBE28726551}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{B22EDBEA-9E61-4703-82BE-01C05619B6D6}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{4FE44049-4E44-4109-B234-4E4EFC135A86}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{C0034194-F7B6-43EB-B0E0-7852FC8E7BFA}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{4AA93AA8-898C-45EE-8E5C-1A86739B3F96}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{76428270-36FA-4236-8BDF-AADB39FD1371}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{88C688B0-3908-4C56-A2E8-F90AB705C536}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{04378C72-E58F-47C0-8621-901B85CA2ED4}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{E664682C-CBA5-4C7C-A65B-9CD046F24CBD}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{A0C3E9BA-C622-45A2-9FED-2C662F3F489A}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{ABF012A2-2068-4B4D-80D7-6D386BA7C8A2}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{011B320C-9AC1-4DDE-B595-3D0014472E2F}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{EFEC2816-F16D-48D8-9306-26C810F0EA55}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-ef-0d-5d]
"WpadDecisionReason" = "1"

[HKCU\Software\Classes\Interface\{FD02E775-CB9D-4CE3-9243-115C81E5F11C}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{D804BA85-DB0F-49EE-B723-DCDF0425BD9F}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{311DDE48-ED7D-46FA-9E0A-2E314B7FEF7C}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{0FDB5B86-DD44-41BF-A443-317FD19BBF3D}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{E66CA1CC-9DB0-467E-9C60-6A832ACD6780}]
"(Default)" = "IVideoChannel"

[HKCU\Software\Classes\Wow6432Node\Interface\{62074904-8D06-43FE-A531-E63DF7FDC2E7}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{F8DF0B4B-A4CE-476B-81D3-9FBA98461B62}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{AAFE380B-B079-4B55-B81B-A9401D77B776}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{1566FA3C-FD24-41DB-A2B8-6232F89783DE}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{74B6CAF0-755E-454D-A819-D0E439EF5296}]
"(Default)" = "IPublicCloudProviderInfo"

[HKCU\Software\Classes\Interface\{300E56A3-CE08-4EB3-9F48-505AA162C9DA}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{3C8210C8-8578-47C6-87A9-FA1AD2BA9873}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{9AB20314-B258-48F8-B659-AD250DFA20F5}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{DF414A68-5051-4465-AAE2-4F301315734E}]
"(Default)" = "IPreviousConversation"

[HKCU\Software\Classes\Wow6432Node\Interface\{B0C10F94-CAB6-4821-9643-D781885A46AF}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{2F8C3E58-436B-42DB-8924-6C394B37DCA2}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{FD9000B3-479F-4B16-9D63-70A49E078946}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{340C54A6-35CF-4971-B540-72D7F040AC24}]
"(Default)" = "IDistributionGroup"

[HKCU\Software\Classes\Interface\{EFEC2816-F16D-48D8-9306-26C810F0EA55}]
"(Default)" = "IContactInformationChangedEventData"

[HKCU\Software\Classes\Interface\{30F974FB-1F7B-49D3-8DA4-01694BA474D2}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{02DD541F-C863-4295-92AB-A4CF29F5D841}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{D60B1701-766D-401E-8586-83E0C9106BE0}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{7452BD0F-65CB-4A5E-AC37-E2BEA1F43DD9}]
"(Default)" = "IRoomParticipantsEventData"

[HKCU\Software\Classes\Interface\{4CB70415-BA71-491E-B12D-155D85CBDFF1}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{B3FF95BD-B743-498C-9973-7F8A2A78576A}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{CA478B44-4FCE-4082-8700-8CEC69FB50E1}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Local Settings\MuiCache\2D\52C64B7E\@%SystemRoot%\system32]
"p2pcollab.dll,-8042" = "Peer to Peer Trust"

[HKCU\Software\Classes\Wow6432Node\Interface\{4CB70415-BA71-491E-B12D-155D85CBDFF1}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{7B39CB77-4AEB-42D7-B351-CB5472C1C6AD}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{339D28C6-3D1A-45D4-BA14-A56742749A43}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{17635563-2FA5-46AD-8F47-3F0FF958ECE2}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{F423726D-0E9B-4B55-9569-E79865210F69}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{B00F2520-029C-47D0-B4E8-8FBEF47CAA7E}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{F97973D7-9436-4A3E-A802-F6EA172A0425}]
"(Default)" = "IGroup"

[HKCU\Software\Classes\Wow6432Node\Interface\{70DCCE38-90BF-4428-A34F-3A6082F29E50}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{4C675532-6D55-49DD-8C8E-3C1CC5624CF2}]
"(Default)" = "IConversationHistoryItemAddedEventData"

[HKCU\Software\Classes\Interface\{219DC126-9A48-483F-80C2-3F22B3B47829}]
"(Default)" = "_IScheduledConferenceManagerCallback"

[HKCU\Software\Classes\Interface\{2209E091-5B90-4CAF-8582-CC5979883376}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{1FF8AA01-D8AF-4B2B-B254-BEFEFABAF2D6}]
"(Default)" = "IConferenceInfoCollection"

[HKCU\Software\Classes\Wow6432Node\Interface\{9274DBDC-43CE-45AA-A817-414A4494AD28}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{D0DBB17D-565E-486C-A47B-BA32DC1FAD0A}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{603E2454-725A-4679-A6A8-363B21633CB2}]
"(Default)" = "IRoomMessageDictionary"

[HKCU\Software\Classes\Interface\{10FDD9BA-0CBA-4958-B6C8-D0912BF2703F}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{4023052E-E3B7-48A3-BCB3-CA2234D9BAEE}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{E4E1D0AF-5B70-45AF-9A0E-F548D8FBD17C}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{6964B116-8FE6-4C19-9052-0EAA74460A58}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{26F15083-86DB-4663-89ED-A0ABC896B9A1}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{0CA9BAE8-DD28-4929-A821-4D00F11203CC}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{F7EE956B-A713-48D3-AFEF-0A28F37740B3}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{50D86EE2-288F-44F5-8144-69F6E3B24B90}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{AC10D6E9-4A8C-4484-B8F4-CA1E36347AAE}]
"(Default)" = "IApplicationSharingModality"

[HKCU\Software\Classes\Wow6432Node\Interface\{DD181E97-EEE0-4D65-BAD1-16866D0C7953}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{2D3D62CA-E9F6-4F94-8EBD-5FABAB29E6A5}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Skype\Phone]
"SkypePath" = "%Program Files% (x86)\Skype\Phone\Skype.exe"

[HKCU\Software\Classes\Interface\{AAFE380B-B079-4B55-B81B-A9401D77B776}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{68B1FC26-B48F-4D5F-B041-8E246676D836}]
"(Default)" = "_IVoiceMailCallback"

[HKCU\Software\Classes\Wow6432Node\Interface\{76DE1CD8-F278-48A1-A391-E5BEB8F428E6}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{8AFFB8CE-5404-4280-BCA3-E2E4388E6D73}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{6A222195-F65E-467F-8F77-EB180BD85288}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{5E7AB04C-E4B8-49FB-85FF-9E2BCA2899D3}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{6964B116-8FE6-4C19-9052-0EAA74460A58}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{BE026CD2-7E82-4F7C-8762-F6B02F496174}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{89C7EB8E-42BC-4C9F-BB34-88CDE83CCB37}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{ACD2FDB9-98ED-4283-AAE8-3CD989EBD9AE}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{2209E091-5B90-4CAF-8582-CC5979883376}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{36CDC166-4F21-46AD-A60E-8551F26C1D41}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{420A24E2-5C31-4262-9BD5-058682300ED6}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{533891F1-A460-43E6-8BDA-6D0D2C13ADDE}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{0678C83E-F580-4D99-902F-930699B28BE8}]
"(Default)" = "IConversationWindowActionAvailabilityChangedEventData"

[HKCU\Software\Classes\Wow6432Node\Interface\{420A24E2-5C31-4262-9BD5-058682300ED6}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{ACABFA1C-0738-4C4D-AF7E-326873CF4ACE}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{4AA93AA8-898C-45EE-8E5C-1A86739B3F96}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{DEDDD7BD-4763-41D2-9AAA-B2C143457CA4}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{4E8DC7E0-04B8-470B-BDFA-F520099B975F}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{9E0F8FCA-D9C9-47CD-87F4-5554217DFFCC}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{9397FF55-EE06-4F02-8F2A-BE3AE249D4BB}]
"(Default)" = "IConversationHistoryActionAvailabilityEventData"

[HKCU\Software\Classes\Interface\{1566FA3C-FD24-41DB-A2B8-6232F89783DE}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{9B3A702D-5BE1-4FCE-ADB3-EBBD23E078C3}]
"(Default)" = "IClientStateChangedEventData"

[HKCU\Software\Classes\Interface\{B26F6403-761E-48D4-84E2-619C17EAEB13}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{3CD1DB65-D85B-4912-8536-6BD8E19F1738}]
"(Default)" = "IVideoChannelCollection"

[HKCU\Software\Classes\Interface\{E0E8B413-BB57-4B58-B1FB-288F3A269E35}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{06437ABB-C419-4B11-A474-1A2B02FBD646}]
"(Default)" = "_ISelfEvents"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-ef-0d-5d]
"WpadDecisionTime" = "52 2B 23 05 99 3B D0 01"

[HKCU\Software\Classes\Wow6432Node\Interface\{A0984F01-5D2C-4302-87A0-69BE7B015143}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{1124AA59-B6F3-4EB1-B79A-E7F53B388B8D}\TypeLib]
"Version" = "1.0"

[HKCU\Software\IM Providers\Skype]
"ProcessId" = "1512"

[HKCU\Software\Classes\Interface\{E664682C-CBA5-4C7C-A65B-9CD046F24CBD}]
"(Default)" = "ISignInDelayedEventData"

[HKCU\Software\Classes\Wow6432Node\Interface\{74B6CAF0-755E-454D-A819-D0E439EF5296}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{F8DF0B4B-A4CE-476B-81D3-9FBA98461B62}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{64561371-77A2-4BD4-A909-E6DEB1B5C6CF}]
"(Default)" = "_IClientEvents"

[HKCU\Software\Classes\Interface\{7CC306E9-2546-4101-82AB-29613AD6F7A7}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{DAA5FDE3-A81C-4F23-80B6-C47B52C649BF}]
"(Default)" = "IContactEndpointCollection"

[HKCU\Software\Classes\Interface\{A766520D-F700-4BF5-8428-56BD914C1C40}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{AF2ABA54-F591-42BA-8004-20944C9FB4D7}]
"(Default)" = "_IConversationWindow2Events"

[HKCU\Software\Classes\Wow6432Node\Interface\{E66CA1CC-9DB0-467E-9C60-6A832ACD6780}]
"(Default)" = "IVideoChannel"

[HKCU\Software\Classes\Wow6432Node\Interface\{95B8D3E8-F3D5-4DC0-BCFE-AB80C835DEA0}]
"(Default)" = "IContactSubscription"

[HKCU\Software\Classes\Wow6432Node\Interface\{3690D374-3779-4EFC-B8E8-20642C01529A}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{9112CE9B-3704-48C0-86DC-7A7B0F34D7A3}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{A0C3E9BA-C622-45A2-9FED-2C662F3F489A}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{38E5EC21-81A1-45A7-94D6-B812976231A4}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{3F60CFF7-BE3F-4404-8395-C02D0CDD318E}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{D9D04B55-D820-4D5B-A690-658A49368478}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{17635563-2FA5-46AD-8F47-3F0FF958ECE2}]
"(Default)" = "IContentCollectionChangedEventData"

[HKCU\Software\Classes\Wow6432Node\Interface\{DF414A68-5051-4465-AAE2-4F301315734E}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{FA7971EF-1E41-429F-8C79-DAC5F88D444B}]
"(Default)" = "_IConversationHistoryEvents"

[HKCU\Software\Classes\Wow6432Node\Interface\{4875C050-BA9C-4A05-891E-E7B0A9463664}]
"(Default)" = "IParticipant"

[HKCU\Software\Classes\Wow6432Node\Interface\{B1C6ECC3-1EA7-495D-9337-02FE4FB723F0}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{25025B1B-0084-44D1-B383-9FFC9A99ABCD}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Local Settings\MuiCache\2D\52C64B7E]
"LanguageList" = "en-US, en"

[HKCU\Software\Classes\Wow6432Node\Interface\{DA7CF784-67DF-429C-82FB-9AFD99F6CCCB}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{F87AFD9A-9BF8-4AC4-953E-33C4D2035D33}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{806D3227-4CB8-47C4-9864-7D4DF4F44069}]
"(Default)" = "_IAutomationCallback"

[HKCU\Software\Classes\Interface\{8F04E92D-EE26-4B64-B9C1-56DD90816810}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{3CD1DB65-D85B-4912-8536-6BD8E19F1738}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{9244D573-914F-4C1F-93F6-31609A95CBED}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{5FA92EA7-6E6E-4A82-8F0D-107FEAF5A75D}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{30F974FB-1F7B-49D3-8DA4-01694BA474D2}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{21C41EDE-7ED8-4D97-9B0D-DD785781AF9B}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{C7ACB102-B692-49CC-92DA-5824822C7B96}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{4DA899D3-FAC7-4F43-8E4A-1987988FBC9B}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{A9AAB6A0-54B9-4419-AAAF-6B26DFAC1585}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{86225E5C-7595-4D1C-985D-8A0458D714C0}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{0CA9BAE8-DD28-4929-A821-4D00F11203CC}]
"(Default)" = "_IChannelEvents"

[HKCU\Software\Classes\Interface\{B1C6ECC3-1EA7-495D-9337-02FE4FB723F0}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{4DA899D3-FAC7-4F43-8E4A-1987988FBC9B}]
"(Default)" = "ISelf"

[HKCU\Software\Classes\Interface\{CE16D540-B9E8-4742-8659-9A7A318AFB92}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{AE3A7C39-9C30-4E0F-BAE4-D8344EF377EA}]
"(Default)" = "_IContentSharingModalityEvents"

[HKCU\Software\Classes\Interface\{232F1CAB-5351-4E48-8A87-2185445F712D}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{DF414A68-5051-4465-AAE2-4F301315734E}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{AA186C92-181E-417F-B150-FCA0F367E0FC}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{BE6086A1-D436-4834-89EE-3CA4F8596A58}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{D60B1701-766D-401E-8586-83E0C9106BE0}]
"(Default)" = "IParticipant2"

[HKCU\Software\Classes\Wow6432Node\Interface\{663C61F4-A9DA-4A6F-A606-F142F665DF61}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{FD02E775-CB9D-4CE3-9243-115C81E5F11C}]
"(Default)" = "IParticipantCollection"

[HKCU\Software\Classes\Wow6432Node\Interface\{00E22CBB-3170-453A-AE62-EAFBC75A9F8D}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{209DA899-15F1-499A-B8B5-A847EAA899AE}]
"(Default)" = "IRepresentationInfo"

[HKCU\Software\Classes\Interface\{FD9000B3-479F-4B16-9D63-70A49E078946}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{1B04D929-11E4-46C2-9162-EA4F2758C3A7}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{65B71572-5338-43C8-9E4C-F1DFC6711AD1}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{4CB70415-BA71-491E-B12D-155D85CBDFF1}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{330639F2-E399-48CB-863F-56A50A27A138}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{339D28C6-3D1A-45D4-BA14-A56742749A43}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{10FDD9BA-0CBA-4958-B6C8-D0912BF2703F}]
"(Default)" = "IContact2"

[HKCU\Software\Classes\Interface\{87084018-7E74-4F92-AB39-1CF03188580E}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{F5996C71-77AB-4020-9776-C2C270FEF2AE}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{4C675532-6D55-49DD-8C8E-3C1CC5624CF2}]
"(Default)" = "IConversationHistoryItemAddedEventData"

[HKCU\Software\Classes\Wow6432Node\Interface\{8E73E7E1-90CE-4D3B-B5B7-71E87B2E8BA5}]
"(Default)" = "_IRoomUserEvents"

[HKCU\Software\Classes\Wow6432Node\Interface\{50D86EE2-288F-44F5-8144-69F6E3B24B90}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{87084018-7E74-4F92-AB39-1CF03188580E}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{26F15083-86DB-4663-89ED-A0ABC896B9A1}]
"(Default)" = "IScheduledConferenceManager"

[HKCU\Software\Classes\Interface\{06437ABB-C419-4B11-A474-1A2B02FBD646}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{B26F6403-761E-48D4-84E2-619C17EAEB13}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{B3C5872E-591C-4A74-9F84-B00EF970A838}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{3959E5C6-75CC-448E-9A18-9F163FF47646}]
"(Default)" = "IActiveAudioDeviceChangedEventData"

[HKCU\Software\Classes\Interface\{A0984F01-5D2C-4302-87A0-69BE7B015143}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{66D1FFC0-C234-4F3D-ABAA-98222A69E525}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{3F60CFF7-BE3F-4404-8395-C02D0CDD318E}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{3C8210C8-8578-47C6-87A9-FA1AD2BA9873}]
"(Default)" = "IShareableContentPropertyChangedEventData"

[HKCU\Software\Classes\Wow6432Node\Interface\{3C8210C8-8578-47C6-87A9-FA1AD2BA9873}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{1F8EBE6F-7993-42CE-980A-A2F03793BE71}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{1566FA3C-FD24-41DB-A2B8-6232F89783DE}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{94093301-8854-408E-8138-C7C3D2DACA1F}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{D804BA85-DB0F-49EE-B723-DCDF0425BD9F}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{6A986B5D-E5EC-4395-AD2D-0E62B72DA776}]
"(Default)" = "_IParticipantEvents"

[HKCU\Software\Classes\Interface\{A58F54D2-9786-4309-964D-96549AEC7611}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{B335AE5E-E4EA-49D3-B03B-646A96FE66D3}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{0FDB5B86-DD44-41BF-A443-317FD19BBF3D}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{A4E1D1E4-7839-473B-95FA-5D33DDC0D2DD}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{70986DCE-4AA8-4DFB-9A45-4BFCF7A206F5}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{E5CFF4A5-83A8-4FD8-8DAA-77A3E2288D4A}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{61C747F6-157C-4CAE-A37C-EC4352175860}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{744BAB86-B15F-4BD5-B7DD-476B0CE0162A}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{37C7F935-E215-46D2-82A3-A451840EC733}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{ED5040FA-8F8F-4876-BF6D-9C62F5EFFD5B}]
"(Default)" = "IModalityDictionary"

[HKCU\Software\Classes\Wow6432Node\Interface\{DBA05C15-1C07-4A76-8248-08D8416A24E3}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{9D4D3D10-DEBC-40C6-ACF9-527986CB42BC}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{18BA13C7-A64E-4301-BA51-D1BFB3C1C9D5}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{26F15083-86DB-4663-89ED-A0ABC896B9A1}]
"(Default)" = "IScheduledConferenceManager"

[HKCU\Software\Classes\Interface\{85109845-6AE2-4B6B-9524-65BA203E5B7D}]
"(Default)" = "IContact"

[HKCU\Software\Classes\Interface\{68DA8699-6C6E-4390-BD82-709FF1DC1702}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{1566FA3C-FD24-41DB-A2B8-6232F89783DE}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{4D120020-CE64-43C5-9F84-7A7B2360388F}]
"(Default)" = "IRoomJoinStateChangedEventData"

[HKCU\Software\Classes\Interface\{9E0F8FCA-D9C9-47CD-87F4-5554217DFFCC}]
"(Default)" = "_IConversationWindowEvents"

[HKCU\Software\Classes\Wow6432Node\Interface\{F0B791FA-434B-49F2-B84E-05619EBE6BEB}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{C6605772-3D9D-44A7-B43A-4590E6B43EE3}]
"(Default)" = "_IGroupCallback"

[HKCU\Software\Classes\Wow6432Node\Interface\{E4E1D0AF-5B70-45AF-9A0E-F548D8FBD17C}]
"(Default)" = "IAVModality"

[HKCU\Software\Classes\Interface\{F0CE810F-E36F-4CD8-A836-515B9A6E09FC}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{E24C2484-C70D-44AB-8A4E-F1585A17A3E1}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{08DDF5C4-FA12-4978-B26E-C6D23C453413}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{BC9F5F40-D315-40C1-B1C6-CEA0646E18E2}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{064E6072-5592-4D13-AFDB-55F5A494E137}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{1FF0E6F1-2FE4-4E29-A123-557AF0DB6927}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{464D5228-9F68-4B1F-B430-156A104E2B85}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{EFEC2816-F16D-48D8-9306-26C810F0EA55}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{DC63D621-11C8-4490-B017-B8C57EE1BE25}]
"(Default)" = "IAddress"

[HKCU\Software\Classes\Interface\{C22CE6BF-3A47-46B7-8544-44305BADFEF9}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{F719ED75-B7BD-45D3-9097-254509226F20}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{FD9000B3-479F-4B16-9D63-70A49E078946}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{26F15083-86DB-4663-89ED-A0ABC896B9A1}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{0BDB9057-28AE-4BF0-AFF0-12A148E51637}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{1124AA59-B6F3-4EB1-B79A-E7F53B388B8D}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{B3C5872E-591C-4A74-9F84-B00EF970A838}]
"(Default)" = "IConferenceInfo"

[HKCU\Software\Classes\Wow6432Node\Interface\{DAB42E13-500A-409A-AC34-C1BF4719EE2E}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{89C7EB8E-42BC-4C9F-BB34-88CDE83CCB37}]
"(Default)" = "IRoomManagerStateChangedEventData"

[HKCU\Software\Classes\Wow6432Node\Interface\{E66CA1CC-9DB0-467E-9C60-6A832ACD6780}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{3CD1DB65-D85B-4912-8536-6BD8E19F1738}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{464D5228-9F68-4B1F-B430-156A104E2B85}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{08DDF5C4-FA12-4978-B26E-C6D23C453413}]
"(Default)" = "_IDeviceManagerCallback"

[HKCU\Software\Classes\Wow6432Node\Interface\{4023052E-E3B7-48A3-BCB3-CA2234D9BAEE}]
"(Default)" = "IShareableContentActionAvailabilityChangedEventData"

[HKCU\Software\Classes\Wow6432Node\Interface\{FA7971EF-1E41-429F-8C79-DAC5F88D444B}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{36CDC166-4F21-46AD-A60E-8551F26C1D41}]
"(Default)" = "_IParticipant2Callback"

[HKCU\Software\Classes\Wow6432Node\Interface\{94093301-8854-408E-8138-C7C3D2DACA1F}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{95B9A382-EA50-45E4-965E-BA61E7213DBA}]
"(Default)" = "_IAudioChannelCallback"

[HKCU\Software\Classes\Interface\{00E22CBB-3170-453A-AE62-EAFBC75A9F8D}]
"(Default)" = "IConversationPropertyDictionary"

[HKCU\Software\Classes\Interface\{3187885C-A8AF-4D4B-8E80-F4B9D447A7B2}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{C0034194-F7B6-43EB-B0E0-7852FC8E7BFA}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{DAB42E13-500A-409A-AC34-C1BF4719EE2E}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{26F15083-86DB-4663-89ED-A0ABC896B9A1}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{7B39CB77-4AEB-42D7-B351-CB5472C1C6AD}]
"(Default)" = "IChannel2"

[HKCU\Software\Classes\Wow6432Node\Interface\{02DD541F-C863-4295-92AB-A4CF29F5D841}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{E0E8B413-BB57-4B58-B1FB-288F3A269E35}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{F0B791FA-434B-49F2-B84E-05619EBE6BEB}]
"(Default)" = "ICredentialRequestedEventData"

[HKCU\Software\Classes\Wow6432Node\Interface\{35CE3A44-C636-4D31-BC95-B9370C2251B9}]
"(Default)" = "IFavoriteContacts"

[HKCU\Software\Classes\Interface\{B8FD4A53-E7E6-4995-A5B5-1306C7584964}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{DAA5FDE3-A81C-4F23-80B6-C47B52C649BF}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{DEDDD7BD-4763-41D2-9AAA-B2C143457CA4}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{F0CE810F-E36F-4CD8-A836-515B9A6E09FC}]
"(Default)" = "IContactInformationDictionary"

[HKCU\Software\Classes\Interface\{899B846A-8887-45D6-B8F5-8AAA0BFDF722}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{C4D95336-5949-4D13-AAC8-82039E5CBCFC}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{84340964-7820-4EBC-BCD3-702926DE23E8}]
"(Default)" = "_IContentSharingModalityCallback"

[HKCU\Software\Classes\Wow6432Node\Interface\{AF2ABA54-F591-42BA-8004-20944C9FB4D7}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{AAFE380B-B079-4B55-B81B-A9401D77B776}]
"(Default)" = "IPowerPointContent"

[HKCU\Software\Classes\Interface\{68DA8699-6C6E-4390-BD82-709FF1DC1702}]
"(Default)" = "IRoomUser"

[HKCU\Software\Classes\Wow6432Node\Interface\{1FF8AA01-D8AF-4B2B-B254-BEFEFABAF2D6}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{628D7BDD-45AB-404D-8505-B3ADC15F454D}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{81C9D13F-A4F9-4E13-92D3-BB271E8DF3D2}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{603E2454-725A-4679-A6A8-363B21633CB2}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{8F04E92D-EE26-4B64-B9C1-56DD90816810}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{B1F5BCD8-69A6-4FC3-9EF0-9BD4AD999061}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{DA7CF784-67DF-429C-82FB-9AFD99F6CCCB}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{D2BFC7D7-A64F-48EF-BF90-C3C7E684D89C}]
"(Default)" = "IDistributionGroupExpansionStateChangedEventData"

[HKCU\Software\Classes\Interface\{85109845-6AE2-4B6B-9524-65BA203E5B7D}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{B3C5872E-591C-4A74-9F84-B00EF970A838}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{855AD949-E2EB-473D-AAF2-9800008EA303}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{209DA899-15F1-499A-B8B5-A847EAA899AE}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{F87AFD9A-9BF8-4AC4-953E-33C4D2035D33}]
"(Default)" = "IPreviousConversationsManagerConnectionStateChangedEventData"

[HKCU\Software\Classes\Interface\{37C7F935-E215-46D2-82A3-A451840EC733}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{8C9B6953-33CC-4A04-9DA4-F71AE79DA0C0}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{7CD92461-CA4F-4BEB-A636-8BBCC192E60F}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{A0984F01-5D2C-4302-87A0-69BE7B015143}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{AB2D1A67-2B3D-4E25-B21C-03F4BFC4C2BE}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{48B3099D-841D-4CAA-9202-5787596E2BD2}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{6A7FF112-42CE-4D03-8922-D02AC6C5759F}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{B22EDBEA-9E61-4703-82BE-01C05619B6D6}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{10FDD9BA-0CBA-4958-B6C8-D0912BF2703F}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{25A47938-5C31-4F43-9108-DA01EE5869C0}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{806D3227-4CB8-47C4-9864-7D4DF4F44069}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{B0B0E8F8-32DA-4CB0-A124-D1E35891D53A}]
"(Default)" = "IAudioDevice"

[HKCU\Software\Classes\Interface\{899B846A-8887-45D6-B8F5-8AAA0BFDF722}]
"(Default)" = "IActiveContentChangedEventData"

[HKCU\Software\Classes\Wow6432Node\Interface\{C63F58CB-EF11-4934-AA3B-2D69244F0780}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{899B846A-8887-45D6-B8F5-8AAA0BFDF722}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{064E6072-5592-4D13-AFDB-55F5A494E137}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{55A21CF3-A2B3-484E-BE2A-14280F501289}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{340C54A6-35CF-4971-B540-72D7F040AC24}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{B0B0E8F8-32DA-4CB0-A124-D1E35891D53A}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{00E22CBB-3170-453A-AE62-EAFBC75A9F8D}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{ACABFA1C-0738-4C4D-AF7E-326873CF4ACE}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{80EDBF3A-812E-42B5-A67F-6CC6D9A19A6C}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{B28F2007-3926-49CF-9101-4CCB9574049B}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{56F7DEC0-59CA-47C6-9F35-D5066A702B39}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{9D4D3D10-DEBC-40C6-ACF9-527986CB42BC}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{F5996C71-77AB-4020-9776-C2C270FEF2AE}]
"(Default)" = "IConversationHistory"

[HKCU\Software\Classes\Interface\{E2C6D6E0-52EF-47A2-BDA9-9D6A7A29A391}]
"(Default)" = "_IRoomManagerEvents"

[HKCU\Software\Classes\Wow6432Node\Interface\{10D66B39-5E4B-4C98-AAC6-D0458FEB1BDB}]
"(Default)" = "_IModalityEvents"

[HKCU\Software\Classes\Interface\{109D32CE-E09F-46F5-9ECB-01E1D273B7DA}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{8A88C016-AA5D-4EAE-9C79-7AA5C360ED76}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{2209E091-5B90-4CAF-8582-CC5979883376}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{9AB20314-B258-48F8-B659-AD250DFA20F5}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{87084018-7E74-4F92-AB39-1CF03188580E}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{EFEC2816-F16D-48D8-9306-26C810F0EA55}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{6A986B5D-E5EC-4395-AD2D-0E62B72DA776}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{BE026CD2-7E82-4F7C-8762-F6B02F496174}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{AB2D1A67-2B3D-4E25-B21C-03F4BFC4C2BE}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{B28F2007-3926-49CF-9101-4CCB9574049B}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{AB2D1A67-2B3D-4E25-B21C-03F4BFC4C2BE}]
"(Default)" = "IConversationManagerEventData"

[HKCU\Software\Classes\Interface\{90B49A60-72AF-4360-9F9B-916DB7504A3C}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{12480BD4-072F-4763-B9FB-41B2CA54F9CD}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{C22CE6BF-3A47-46B7-8544-44305BADFEF9}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{082EE280-726E-417F-99CB-81A0CCBFF883}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{25D64AEA-0E65-49CB-8D6D-65DB0AC1AF65}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{1A8A9402-E89F-40AE-88A8-B328391684B6}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{B0C10F94-CAB6-4821-9643-D781885A46AF}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{DBA05C15-1C07-4A76-8248-08D8416A24E3}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{FD02E775-CB9D-4CE3-9243-115C81E5F11C}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{E2C6D6E0-52EF-47A2-BDA9-9D6A7A29A391}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{995F992C-9DEF-47B9-BF11-81813C0C0E28}]
"(Default)" = "ISearchProviderStateChangedEventData"

[HKCU\Software\Classes\Interface\{48B3099D-841D-4CAA-9202-5787596E2BD2}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{F97BED54-E434-4020-A197-F15AEA9D9C95}]
"(Default)" = "IConversationWindowNeedsAttentionEventData"

[HKCU\Software\Classes\Wow6432Node\Interface\{FD9000B3-479F-4B16-9D63-70A49E078946}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{5418E2AB-EB9A-4659-B4DC-28DE633B2B8F}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{F97BED54-E434-4020-A197-F15AEA9D9C95}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{3CD1DB65-D85B-4912-8536-6BD8E19F1738}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{569E04F2-D286-4903-9642-44D850310956}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{DD31376E-E529-43F2-B3B4-E379EBD28E2A}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{DAC6D77B-12F7-405C-BB33-002D6D4007F3}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{064E6072-5592-4D13-AFDB-55F5A494E137}]
"(Default)" = "IParticipantCollectionChangedEventData"

[HKCU\Software\Classes\Wow6432Node\Interface\{2D3D62CA-E9F6-4F94-8EBD-5FABAB29E6A5}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{855AD949-E2EB-473D-AAF2-9800008EA303}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{D0984CEF-E323-4574-B07B-5C970C9CAEE0}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{8684D3AD-7061-4056-A894-EBF1270ADB9B}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{6B551C9E-DE81-41DF-A0AE-39F0AF11D508}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{F719ED75-B7BD-45D3-9097-254509226F20}]
"(Default)" = "_ICustomGroupEvents"

[HKCU\Software\Classes\Wow6432Node\Interface\{E0E8B413-BB57-4B58-B1FB-288F3A269E35}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{57C3CB4D-C794-456F-846D-0E1ECA78BD00}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{3DEBDC7E-811F-4304-BDD7-7D98C732026C}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{E24C2484-C70D-44AB-8A4E-F1585A17A3E1}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{FB67275C-4D9E-4C32-9793-A96749884FC1}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{18A9A79A-CBC7-4F8B-8B2B-9B40CA75EC3C}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{25025B1B-0084-44D1-B383-9FFC9A99ABCD}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{2D3D62CA-E9F6-4F94-8EBD-5FABAB29E6A5}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{B00F2520-029C-47D0-B4E8-8FBEF47CAA7E}]
"(Default)" = "IVideoViewInformationDictionary"

[HKCU\Software\Classes\Interface\{DAC6D77B-12F7-405C-BB33-002D6D4007F3}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{ED5040FA-8F8F-4876-BF6D-9C62F5EFFD5B}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{7B39CB77-4AEB-42D7-B351-CB5472C1C6AD}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{DC63D621-11C8-4490-B017-B8C57EE1BE25}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{8AFFB8CE-5404-4280-BCA3-E2E4388E6D73}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{0CA9BAE8-DD28-4929-A821-4D00F11203CC}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{E24C2484-C70D-44AB-8A4E-F1585A17A3E1}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{21629AB6-9557-4985-9237-49177F618692}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{9B3A702D-5BE1-4FCE-ADB3-EBBD23E078C3}]
"(Default)" = "IClientStateChangedEventData"

[HKCU\Software\Classes\Interface\{9274DBDC-43CE-45AA-A817-414A4494AD28}]
"(Default)" = "IDeviceManager"

[HKCU\Software\Classes\Interface\{603E2454-725A-4679-A6A8-363B21633CB2}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{AA41EE75-F9C5-42F7-8D17-1D92D6BA4D92}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{76428270-36FA-4236-8BDF-AADB39FD1371}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{9E0F8FCA-D9C9-47CD-87F4-5554217DFFCC}]
"(Default)" = "_IConversationWindowEvents"

[HKCU\Software\Classes\Interface\{7CD92461-CA4F-4BEB-A636-8BBCC192E60F}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{68B1FC26-B48F-4D5F-B041-8E246676D836}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{E82737B9-B2BE-4AFD-B649-C9F665627F20}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{D9D04B55-D820-4D5B-A690-658A49368478}]
"(Default)" = "_IVoiceMailsManagerCallback"

[HKCU\Software\Classes\Interface\{B1C6ECC3-1EA7-495D-9337-02FE4FB723F0}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{9274DBDC-43CE-45AA-A817-414A4494AD28}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{ACD2FDB9-98ED-4283-AAE8-3CD989EBD9AE}]
"(Default)" = "_IAVModalityEvents"

[HKCU\Software\Classes\Wow6432Node\Interface\{3690D374-3779-4EFC-B8E8-20642C01529A}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{A9AAB6A0-54B9-4419-AAAF-6B26DFAC1585}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{3187885C-A8AF-4D4B-8E80-F4B9D447A7B2}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{DCDEA425-B5F2-4719-A3B4-69FFB9770BE6}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{3959E5C6-75CC-448E-9A18-9F163FF47646}]
"(Default)" = "IActiveAudioDeviceChangedEventData"

[HKCU\Software\Classes\Interface\{B8FD4A53-E7E6-4995-A5B5-1306C7584964}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{80EDBF3A-812E-42B5-A67F-6CC6D9A19A6C}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{ACD2FDB9-98ED-4283-AAE8-3CD989EBD9AE}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\TypeLib\{B9AA1F11-F480-4054-A84E-B5D9277E40A8}\1.0\HELPDIR]
"(Default)" = "%Program Files% (x86)\Skype\Phone\Skype.exe\"

[HKCU\Software\Classes\Wow6432Node\Interface\{62074904-8D06-43FE-A531-E63DF7FDC2E7}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{ABF012A2-2068-4B4D-80D7-6D386BA7C8A2}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{DF414A68-5051-4465-AAE2-4F301315734E}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{2C59A886-ACD3-46BB-8BAC-7C1C59FB2E0D}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{90B49A60-72AF-4360-9F9B-916DB7504A3C}]
"(Default)" = "IAlertLevelChangedEventData"

[HKCU\Software\Classes\Wow6432Node\Interface\{9274DBDC-43CE-45AA-A817-414A4494AD28}]
"(Default)" = "IDeviceManager"

[HKCU\Software\Classes\Wow6432Node\Interface\{18A9A79A-CBC7-4F8B-8B2B-9B40CA75EC3C}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{92A9EB9B-85EE-444E-A302-00C3C945BAA4}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{1B04D929-11E4-46C2-9162-EA4F2758C3A7}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{76428270-36FA-4236-8BDF-AADB39FD1371}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{F8DF0B4B-A4CE-476B-81D3-9FBA98461B62}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{10FDD9BA-0CBA-4958-B6C8-D0912BF2703F}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{7818A3F7-674B-477E-99E8-54774579A8E7}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{330639F2-E399-48CB-863F-56A50A27A138}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{76DE1CD8-F278-48A1-A391-E5BEB8F428E6}]
"(Default)" = "IRoomManager"

[HKCU\Software\Classes\Interface\{F5996C71-77AB-4020-9776-C2C270FEF2AE}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{C79E4169-535F-4A41-8DE2-C65A90D9503D}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{DC4BC923-6A52-4F02-9F8A-547B606955E7}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{74B6CAF0-755E-454D-A819-D0E439EF5296}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{70986DCE-4AA8-4DFB-9A45-4BFCF7A206F5}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{65B71572-5338-43C8-9E4C-F1DFC6711AD1}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{57CC2235-96C5-49FA-B92B-350486C6CF52}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{7818A3F7-674B-477E-99E8-54774579A8E7}]
"(Default)" = "IExchangeECPUrlChangedEventData"

[HKCU\Software\Classes\Interface\{EBD19735-0CB5-4AF3-8E05-B0140CF9D545}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{E664682C-CBA5-4C7C-A65B-9CD046F24CBD}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{086F0E9D-A416-40F9-877C-F1C82DC1A6AD}]
"(Default)" = "IVideoViewInformationChangedEventData"

[HKCU\Software\Classes\Wow6432Node\Interface\{AA41EE75-F9C5-42F7-8D17-1D92D6BA4D92}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{9AB20314-B258-48F8-B659-AD250DFA20F5}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{15D4461D-C7EB-45CB-B214-F1C45FED1DB2}]
"(Default)" = "IPreviousConversationsManagerDictionary"

[HKCU\Software\Classes\Wow6432Node\Interface\{ACD2FDB9-98ED-4283-AAE8-3CD989EBD9AE}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{899B846A-8887-45D6-B8F5-8AAA0BFDF722}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{12480BD4-072F-4763-B9FB-41B2CA54F9CD}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{2C59A886-ACD3-46BB-8BAC-7C1C59FB2E0D}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{25D64AEA-0E65-49CB-8D6D-65DB0AC1AF65}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{E6B3F5FA-4208-4C37-AE07-F6435B68D693}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{81C9D13F-A4F9-4E13-92D3-BB271E8DF3D2}]
"(Default)" = "IPreviousConversationCollection"

[HKCU\Software\Classes\Interface\{15D4461D-C7EB-45CB-B214-F1C45FED1DB2}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{2EDAF003-14A6-4FAF-8A72-99526D048D63}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{478DDA59-64C0-4429-AC8A-F10A940B52CC}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{37C7F935-E215-46D2-82A3-A451840EC733}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{DD31376E-E529-43F2-B3B4-E379EBD28E2A}]
"(Default)" = "IAccessEntryCollectionChangedEventData"

[HKCU\Software\Classes\Interface\{D4B240B9-059B-4D13-8997-31B282B3BD43}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{56F7DEC0-59CA-47C6-9F35-D5066A702B39}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{BC9F5F40-D315-40C1-B1C6-CEA0646E18E2}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{9397FF55-EE06-4F02-8F2A-BE3AE249D4BB}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{3F60CFF7-BE3F-4404-8395-C02D0CDD318E}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{1FF8AA01-D8AF-4B2B-B254-BEFEFABAF2D6}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{B22EDBEA-9E61-4703-82BE-01C05619B6D6}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{56A868B4-0AD4-11CE-B03A-0020AF0BA770}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{D9D04B55-D820-4D5B-A690-658A49368478}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{68DA8699-6C6E-4390-BD82-709FF1DC1702}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{9397FF55-EE06-4F02-8F2A-BE3AE249D4BB}]
"(Default)" = "IConversationHistoryActionAvailabilityEventData"

[HKCU\Software\Classes\Interface\{3C8210C8-8578-47C6-87A9-FA1AD2BA9873}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{C6605772-3D9D-44A7-B43A-4590E6B43EE3}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{66D1FFC0-C234-4F3D-ABAA-98222A69E525}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{F8DF0B4B-A4CE-476B-81D3-9FBA98461B62}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{D60B1701-766D-401E-8586-83E0C9106BE0}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{219DC126-9A48-483F-80C2-3F22B3B47829}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{6A986B5D-E5EC-4395-AD2D-0E62B72DA776}]
"(Default)" = "_IParticipantEvents"

[HKCU\Software\Classes\Wow6432Node\Interface\{E664682C-CBA5-4C7C-A65B-9CD046F24CBD}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{74B6CAF0-755E-454D-A819-D0E439EF5296}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{A766520D-F700-4BF5-8428-56BD914C1C40}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{81C9D13F-A4F9-4E13-92D3-BB271E8DF3D2}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{F719ED75-B7BD-45D3-9097-254509226F20}]
"(Default)" = "_ICustomGroupEvents"

[HKCU\Software\Classes\Interface\{C12F0DE5-9A7D-425C-B391-8BE004EAA2F6}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{00E22CBB-3170-453A-AE62-EAFBC75A9F8D}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{B1C6ECC3-1EA7-495D-9337-02FE4FB723F0}]
"(Default)" = "_IContactEvents"

[HKCU\Software\Classes\Wow6432Node\Interface\{DAB42E13-500A-409A-AC34-C1BF4719EE2E}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{DAC6D77B-12F7-405C-BB33-002D6D4007F3}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{C7ACB102-B692-49CC-92DA-5824822C7B96}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{02DD541F-C863-4295-92AB-A4CF29F5D841}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{08DDF5C4-FA12-4978-B26E-C6D23C453413}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{F0B791FA-434B-49F2-B84E-05619EBE6BEB}]
"(Default)" = "ICredentialRequestedEventData"

[HKCU\Software\Classes\Interface\{F0B791FA-434B-49F2-B84E-05619EBE6BEB}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{09028936-CD20-43EF-98CF-56726ADDBA34}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{89C7EB8E-42BC-4C9F-BB34-88CDE83CCB37}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{F87AFD9A-9BF8-4AC4-953E-33C4D2035D33}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{4AA93AA8-898C-45EE-8E5C-1A86739B3F96}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{62B932E9-7847-4D78-BEEE-5D58BF815B03}]
"(Default)" = "IContactPositionChangedEventData"

[HKCU\Software\Classes\Interface\{C0034194-F7B6-43EB-B0E0-7852FC8E7BFA}]
"(Default)" = "IPhonesChangedEventData"

[HKCU\Software\Classes\Wow6432Node\Interface\{744BAB86-B15F-4BD5-B7DD-476B0CE0162A}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{4E8DC7E0-04B8-470B-BDFA-F520099B975F}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{E5CFF4A5-83A8-4FD8-8DAA-77A3E2288D4A}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{2EDAF003-14A6-4FAF-8A72-99526D048D63}]
"(Default)" = "IAutomation"

[HKCU\Software\Classes\Wow6432Node\Interface\{08E1E9CF-A7E4-43BE-AE8E-B223CE71E46E}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{4D120020-CE64-43C5-9F84-7A7B2360388F}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{311DDE48-ED7D-46FA-9E0A-2E314B7FEF7C}]
"(Default)" = "_IContactCallback"

[HKCU\Software\Classes\Interface\{D2BFC7D7-A64F-48EF-BF90-C3C7E684D89C}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{1FF0E6F1-2FE4-4E29-A123-557AF0DB6927}]
"(Default)" = "IContactEndpoint"

[HKCU\Software\Classes\Wow6432Node\Interface\{05789509-AFA1-4E90-B4FA-1A7820DB9796}]
"(Default)" = "IRoomCollection"

[HKCU\Software\Classes\Interface\{AE3A7C39-9C30-4E0F-BAE4-D8344EF377EA}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{B22EDBEA-9E61-4703-82BE-01C05619B6D6}]
"(Default)" = "ILocalSharedResourcesChangedEventData"

[HKCU\Software\Classes\Interface\{65B71572-5338-43C8-9E4C-F1DFC6711AD1}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{C4D95336-5949-4D13-AAC8-82039E5CBCFC}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{06437ABB-C419-4B11-A474-1A2B02FBD646}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{FA7971EF-1E41-429F-8C79-DAC5F88D444B}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{61C747F6-157C-4CAE-A37C-EC4352175860}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{C31FB52D-9E9E-45AD-A102-5218E1685B78}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{DD181E97-EEE0-4D65-BAD1-16866D0C7953}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{0BDB9057-28AE-4BF0-AFF0-12A148E51637}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{CA62E6F3-3E6D-451B-AEAA-6A1B7AACF8D4}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{BC9F5F40-D315-40C1-B1C6-CEA0646E18E2}]
"(Default)" = "IRoomUserChangedEventData"

[HKCU\Software\Classes\Interface\{DAA5FDE3-A81C-4F23-80B6-C47B52C649BF}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{3C8210C8-8578-47C6-87A9-FA1AD2BA9873}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{C63F58CB-EF11-4934-AA3B-2D69244F0780}]
"(Default)" = "_IConversationEvents"

[HKCU\Software\Classes\Interface\{DF414A68-5051-4465-AAE2-4F301315734E}]
"(Default)" = "IPreviousConversation"

[HKCU\Software\Classes\Interface\{B00F2520-029C-47D0-B4E8-8FBEF47CAA7E}]
"(Default)" = "IVideoViewInformationDictionary"

[HKCU\Software\Classes\Interface\{BC9F5F40-D315-40C1-B1C6-CEA0646E18E2}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{B28F2007-3926-49CF-9101-4CCB9574049B}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{FF037274-455A-4E34-B5D1-D42DB866F9B7}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{6964B116-8FE6-4C19-9052-0EAA74460A58}]
"(Default)" = "_IConversation2Callback"

[HKCU\Software\Classes\Interface\{8E839AF9-9508-475A-AA47-3EE8A946B75E}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{B3C5872E-591C-4A74-9F84-B00EF970A838}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{0CA9BAE8-DD28-4929-A821-4D00F11203CC}]
"(Default)" = "_IChannelEvents"

[HKCU\Software\Classes\Interface\{109D32CE-E09F-46F5-9ECB-01E1D273B7DA}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{71A054B3-4D4B-4643-B14F-4572494B19E7}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{340C54A6-35CF-4971-B540-72D7F040AC24}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{06437ABB-C419-4B11-A474-1A2B02FBD646}]
"(Default)" = "_ISelfEvents"

[HKCU\Software\Classes\Wow6432Node\Interface\{EBD19735-0CB5-4AF3-8E05-B0140CF9D545}]
"(Default)" = "IPreviousConversationBatchEventData"

[HKCU\Software\Classes\Wow6432Node\Interface\{9112CE9B-3704-48C0-86DC-7A7B0F34D7A3}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{DCDEA425-B5F2-4719-A3B4-69FFB9770BE6}]
"(Default)" = "IRecentContacts"

[HKCU\Software\Classes\Wow6432Node\Interface\{DBA05C15-1C07-4A76-8248-08D8416A24E3}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{3C8210C8-8578-47C6-87A9-FA1AD2BA9873}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{18A9A79A-CBC7-4F8B-8B2B-9B40CA75EC3C}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{DD181E97-EEE0-4D65-BAD1-16866D0C7953}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{A58F54D2-9786-4309-964D-96549AEC7611}]
"(Default)" = "IShareableContentCollection"

[HKCU\Software\Classes\Interface\{7818A3F7-674B-477E-99E8-54774579A8E7}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{A766520D-F700-4BF5-8428-56BD914C1C40}]
"(Default)" = "IRoom"

[HKCU\Software\Classes\Wow6432Node\Interface\{66D1FFC0-C234-4F3D-ABAA-98222A69E525}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{6A7FF112-42CE-4D03-8922-D02AC6C5759F}]
"(Default)" = "ISharingResourceList"

[HKCU\Software\Classes\Wow6432Node\Interface\{C22CE6BF-3A47-46B7-8544-44305BADFEF9}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{10FDD9BA-0CBA-4958-B6C8-D0912BF2703F}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{7CD92461-CA4F-4BEB-A636-8BBCC192E60F}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{B22EDBEA-9E61-4703-82BE-01C05619B6D6}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{81C9D13F-A4F9-4E13-92D3-BB271E8DF3D2}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{C413A27F-601E-4261-B9E3-0EB966F4E7D1}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{464D5228-9F68-4B1F-B430-156A104E2B85}]
"(Default)" = "IPreviousHistoryRetrievalStateChangedEventData"

[HKCU\Software\Classes\Wow6432Node\Interface\{FF037274-455A-4E34-B5D1-D42DB866F9B7}]
"(Default)" = "IConversationWindowInformationChangedEventData"

[HKCU\Software\Classes\Interface\{57C3CB4D-C794-456F-846D-0E1ECA78BD00}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{04378C72-E58F-47C0-8621-901B85CA2ED4}]
"(Default)" = "IConversationContext"

[HKCU\Software\Classes\Wow6432Node\Interface\{10C3ACC7-6C0C-4F35-ADFB-AE0F200A8583}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{A58F54D2-9786-4309-964D-96549AEC7611}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{3187885C-A8AF-4D4B-8E80-F4B9D447A7B2}]
"(Default)" = "_IShareableContentCallback"

[HKCU\Software\Classes\Wow6432Node\Interface\{3C8D7146-35EA-4133-B2F6-C1FC2401A091}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{0FDB5B86-DD44-41BF-A443-317FD19BBF3D}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{FA7971EF-1E41-429F-8C79-DAC5F88D444B}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{8F04E92D-EE26-4B64-B9C1-56DD90816810}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{E2C6D6E0-52EF-47A2-BDA9-9D6A7A29A391}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{569E04F2-D286-4903-9642-44D850310956}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{E0E8B413-BB57-4B58-B1FB-288F3A269E35}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{2209E091-5B90-4CAF-8582-CC5979883376}]
"(Default)" = "IConversationWindowStateChangedEventData"

[HKCU\Software\Classes\Wow6432Node\Interface\{E6B3F5FA-4208-4C37-AE07-F6435B68D693}]
"(Default)" = "IContactManager"

[HKCU\Software\Classes\Interface\{340C54A6-35CF-4971-B540-72D7F040AC24}]
"(Default)" = "IDistributionGroup"

[HKCU\Software\Classes\Interface\{0C81EC90-9469-4ED4-ACAD-ADB86E11039C}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{D4B240B9-059B-4D13-8997-31B282B3BD43}]
"(Default)" = "IModality"

[HKCU\Software\Classes\Interface\{10D66B39-5E4B-4C98-AAC6-D0458FEB1BDB}]
"(Default)" = "_IModalityEvents"

[HKCU\Software\Classes\Interface\{CA478B44-4FCE-4082-8700-8CEC69FB50E1}]
"(Default)" = "IShareableContentPropertyDictionary"

[HKCU\Software\Classes\Wow6432Node\Interface\{E5CFF4A5-83A8-4FD8-8DAA-77A3E2288D4A}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{FB67275C-4D9E-4C32-9793-A96749884FC1}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{18BA13C7-A64E-4301-BA51-D1BFB3C1C9D5}]
"(Default)" = "IVoiceMailBatchEventData"

[HKCU\Software\Classes\Wow6432Node\Interface\{48B3099D-841D-4CAA-9202-5787596E2BD2}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{899B846A-8887-45D6-B8F5-8AAA0BFDF722}]
"(Default)" = "IActiveContentChangedEventData"

[HKCU\Software\Classes\Wow6432Node\Interface\{086F0E9D-A416-40F9-877C-F1C82DC1A6AD}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{DD31376E-E529-43F2-B3B4-E379EBD28E2A}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{F644C610-A146-4A56-8338-A69C45C71CEF}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{E2C6D6E0-52EF-47A2-BDA9-9D6A7A29A391}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{8665FD95-7720-4F9E-B605-6ABCBD7EDFF4}]
"(Default)" = "IParticipantPropertyDictionary"

[HKCU\Software\Classes\Interface\{06437ABB-C419-4B11-A474-1A2B02FBD646}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{A766520D-F700-4BF5-8428-56BD914C1C40}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{9112CE9B-3704-48C0-86DC-7A7B0F34D7A3}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{70986DCE-4AA8-4DFB-9A45-4BFCF7A206F5}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{A9AAB6A0-54B9-4419-AAAF-6B26DFAC1585}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{8665FD95-7720-4F9E-B605-6ABCBD7EDFF4}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{10C3ACC7-6C0C-4F35-ADFB-AE0F200A8583}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{D5C1C8FB-DC8A-45A3-AAA3-53B89D43CDE4}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{D0984CEF-E323-4574-B07B-5C970C9CAEE0}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{65B71572-5338-43C8-9E4C-F1DFC6711AD1}]
"(Default)" = "IAccessEntry"

[HKCU\Software\Classes\Wow6432Node\Interface\{EC9773AD-7D22-4B03-B949-5E9055AF0F19}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{4CB70415-BA71-491E-B12D-155D85CBDFF1}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{995F992C-9DEF-47B9-BF11-81813C0C0E28}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{AA186C92-181E-417F-B150-FCA0F367E0FC}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{65B71572-5338-43C8-9E4C-F1DFC6711AD1}]
"(Default)" = "IAccessEntry"

[HKCU\Software\Classes\Wow6432Node\Interface\{7452BD0F-65CB-4A5E-AC37-E2BEA1F43DD9}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{04378C72-E58F-47C0-8621-901B85CA2ED4}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{0678C83E-F580-4D99-902F-930699B28BE8}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{25A47938-5C31-4F43-9108-DA01EE5869C0}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{378CD767-1B64-4A0E-A941-8F52869FC9DF}]
"(Default)" = "ISearchResult"

[HKCU\Software\Classes\Wow6432Node\Interface\{DAA5FDE3-A81C-4F23-80B6-C47B52C649BF}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{EC9773AD-7D22-4B03-B949-5E9055AF0F19}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{B0C10F94-CAB6-4821-9643-D781885A46AF}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{35CE3A44-C636-4D31-BC95-B9370C2251B9}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{71A054B3-4D4B-4643-B14F-4572494B19E7}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{CA7EEB7A-7DC3-4FFE-A174-23DB5A003C04}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{CA478B44-4FCE-4082-8700-8CEC69FB50E1}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{DAA5FDE3-A81C-4F23-80B6-C47B52C649BF}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{4DA899D3-FAC7-4F43-8E4A-1987988FBC9B}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{26C8D96D-7D22-4E9E-948A-EDCCB4CA9C64}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{4FE44049-4E44-4109-B234-4E4EFC135A86}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{8665FD95-7720-4F9E-B605-6ABCBD7EDFF4}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{25A47938-5C31-4F43-9108-DA01EE5869C0}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{663C61F4-A9DA-4A6F-A606-F142F665DF61}]
"(Default)" = "IConversationWindowActions"

[HKCU\Software\Classes\Wow6432Node\Interface\{8665FD95-7720-4F9E-B605-6ABCBD7EDFF4}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{FF037274-455A-4E34-B5D1-D42DB866F9B7}]
"(Default)" = "IConversationWindowInformationChangedEventData"

[HKCU\Software\Classes\Interface\{C12F0DE5-9A7D-425C-B391-8BE004EAA2F6}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{B335AE5E-E4EA-49D3-B03B-646A96FE66D3}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{25D64AEA-0E65-49CB-8D6D-65DB0AC1AF65}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{8FE9A23D-72BC-4EA3-A5AF-E37F75EAD8A2}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{6A986B5D-E5EC-4395-AD2D-0E62B72DA776}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{5E7AB04C-E4B8-49FB-85FF-9E2BCA2899D3}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{D2BFC7D7-A64F-48EF-BF90-C3C7E684D89C}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{311DDE48-ED7D-46FA-9E0A-2E314B7FEF7C}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{8AFFB8CE-5404-4280-BCA3-E2E4388E6D73}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{081793DA-7221-45C3-8AFA-3A2E6E464670}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{744BAB86-B15F-4BD5-B7DD-476B0CE0162A}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{09028936-CD20-43EF-98CF-56726ADDBA34}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{8C9B6953-33CC-4A04-9DA4-F71AE79DA0C0}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{95B9A382-EA50-45E4-965E-BA61E7213DBA}]
"(Default)" = "_IAudioChannelCallback"

[HKCU\Software\Classes\Interface\{94093301-8854-408E-8138-C7C3D2DACA1F}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{38E5EC21-81A1-45A7-94D6-B812976231A4}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{90B49A60-72AF-4360-9F9B-916DB7504A3C}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{B00F2520-029C-47D0-B4E8-8FBEF47CAA7E}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{D992371E-5161-453B-97E6-6E7C67BC075E}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{A0984F01-5D2C-4302-87A0-69BE7B015143}]
"(Default)" = "IConferenceRegionalAccessInformationCollection"

[HKCU\Software\Classes\Wow6432Node\Interface\{84340964-7820-4EBC-BCD3-702926DE23E8}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{478DDA59-64C0-4429-AC8A-F10A940B52CC}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{71A054B3-4D4B-4643-B14F-4572494B19E7}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{AF2ABA54-F591-42BA-8004-20944C9FB4D7}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{464D5228-9F68-4B1F-B430-156A104E2B85}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{953AE732-F53A-4116-AC1B-0321B3FB3DBA}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{082EE280-726E-417F-99CB-81A0CCBFF883}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{478DDA59-64C0-4429-AC8A-F10A940B52CC}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{21C41EDE-7ED8-4D97-9B0D-DD785781AF9B}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{92D7E7A8-48D8-4166-8911-630AE02B2B93}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{420A24E2-5C31-4262-9BD5-058682300ED6}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{5FA92EA7-6E6E-4A82-8F0D-107FEAF5A75D}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{ACD2FDB9-98ED-4283-AAE8-3CD989EBD9AE}]
"(Default)" = "_IAVModalityEvents"

[HKCU\Software\Classes\Wow6432Node\Interface\{9918673D-4D74-41CF-8840-D4996395A34C}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{082EE280-726E-417F-99CB-81A0CCBFF883}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{DD181E97-EEE0-4D65-BAD1-16866D0C7953}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "46 00 00 00 45 00 00 00 09 00 00 00 00 00 00 00"

[HKCU\Software\Classes\Interface\{663C61F4-A9DA-4A6F-A606-F142F665DF61}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{9112CE9B-3704-48C0-86DC-7A7B0F34D7A3}]
"(Default)" = "IUtilities2"

[HKCU\Software\Classes\Interface\{B26F6403-761E-48D4-84E2-619C17EAEB13}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{50D86EE2-288F-44F5-8144-69F6E3B24B90}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{95B8D3E8-F3D5-4DC0-BCFE-AB80C835DEA0}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{4DA899D3-FAC7-4F43-8E4A-1987988FBC9B}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{082EE280-726E-417F-99CB-81A0CCBFF883}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{ABF012A2-2068-4B4D-80D7-6D386BA7C8A2}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{F97BED54-E434-4020-A197-F15AEA9D9C95}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{8A88C016-AA5D-4EAE-9C79-7AA5C360ED76}]
"(Default)" = "IConversationContextCollection"

[HKCU\Software\Classes\Wow6432Node\Interface\{76DE1CD8-F278-48A1-A391-E5BEB8F428E6}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{D5C1C8FB-DC8A-45A3-AAA3-53B89D43CDE4}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{95B8D3E8-F3D5-4DC0-BCFE-AB80C835DEA0}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{A58F54D2-9786-4309-964D-96549AEC7611}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{0678C83E-F580-4D99-902F-930699B28BE8}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{35CE3A44-C636-4D31-BC95-B9370C2251B9}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{F7EE956B-A713-48D3-AFEF-0A28F37740B3}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{E24C2484-C70D-44AB-8A4E-F1585A17A3E1}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{21629AB6-9557-4985-9237-49177F618692}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{DD31376E-E529-43F2-B3B4-E379EBD28E2A}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{C7ACB102-B692-49CC-92DA-5824822C7B96}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{BD891697-C93E-4A0B-9B6C-004BD81B6EE8}]
"(Default)" = "IConferenceSettingDictionary"

[HKCU\Software\Classes\Wow6432Node\Interface\{8057F99D-292C-4371-926B-5312E61A3A40}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{C22CE6BF-3A47-46B7-8544-44305BADFEF9}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{1566FA3C-FD24-41DB-A2B8-6232F89783DE}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{DEDDD7BD-4763-41D2-9AAA-B2C143457CA4}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{109D32CE-E09F-46F5-9ECB-01E1D273B7DA}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{1B04D929-11E4-46C2-9162-EA4F2758C3A7}]
"(Default)" = "IClientSettings"

[HKCU\Software\Classes\Wow6432Node\Interface\{10D66B39-5E4B-4C98-AAC6-D0458FEB1BDB}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{6B551C9E-DE81-41DF-A0AE-39F0AF11D508}]
"(Default)" = "_IShareableContentEvents"

[HKCU\Software\Classes\Wow6432Node\Interface\{35CE3A44-C636-4D31-BC95-B9370C2251B9}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{05789509-AFA1-4E90-B4FA-1A7820DB9796}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{C79E4169-535F-4A41-8DE2-C65A90D9503D}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{E2C6D6E0-52EF-47A2-BDA9-9D6A7A29A391}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{DCDEA425-B5F2-4719-A3B4-69FFB9770BE6}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{F719ED75-B7BD-45D3-9097-254509226F20}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{7B39CB77-4AEB-42D7-B351-CB5472C1C6AD}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{64561371-77A2-4BD4-A909-E6DEB1B5C6CF}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{7B39CB77-4AEB-42D7-B351-CB5472C1C6AD}]
"(Default)" = "IChannel2"

[HKCU\Software\Classes\Wow6432Node\Interface\{ACABFA1C-0738-4C4D-AF7E-326873CF4ACE}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{DC4BC923-6A52-4F02-9F8A-547B606955E7}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{C63F58CB-EF11-4934-AA3B-2D69244F0780}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{8A88C016-AA5D-4EAE-9C79-7AA5C360ED76}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{08DDF5C4-FA12-4978-B26E-C6D23C453413}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{0678C83E-F580-4D99-902F-930699B28BE8}]
"(Default)" = "IConversationWindowActionAvailabilityChangedEventData"

[HKCU\Software\Classes\Interface\{B1F5BCD8-69A6-4FC3-9EF0-9BD4AD999061}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{94093301-8854-408E-8138-C7C3D2DACA1F}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{81C9D13F-A4F9-4E13-92D3-BB271E8DF3D2}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{25D64AEA-0E65-49CB-8D6D-65DB0AC1AF65}]
"(Default)" = "IClientSettingsChangedEventData"

[HKCU\Software\Classes\Wow6432Node\Interface\{89C7EB8E-42BC-4C9F-BB34-88CDE83CCB37}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{9AB20314-B258-48F8-B659-AD250DFA20F5}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{53D014C1-54DB-42B3-9DFD-8E231EF2C356}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{5E7AB04C-E4B8-49FB-85FF-9E2BCA2899D3}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{081793DA-7221-45C3-8AFA-3A2E6E464670}]
"(Default)" = "IRoomMessagesEventData"

[HKCU\Software\Classes\Interface\{56A868B4-0AD4-11CE-B03A-0020AF0BA770}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{06437ABB-C419-4B11-A474-1A2B02FBD646}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{9397FF55-EE06-4F02-8F2A-BE3AE249D4BB}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{C0034194-F7B6-43EB-B0E0-7852FC8E7BFA}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{70986DCE-4AA8-4DFB-9A45-4BFCF7A206F5}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{61C747F6-157C-4CAE-A37C-EC4352175860}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{FF037274-455A-4E34-B5D1-D42DB866F9B7}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{61C747F6-157C-4CAE-A37C-EC4352175860}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{011B320C-9AC1-4DDE-B595-3D0014472E2F}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{05789509-AFA1-4E90-B4FA-1A7820DB9796}]
"(Default)" = "IRoomCollection"

[HKCU\Software\Classes\Wow6432Node\Interface\{94093301-8854-408E-8138-C7C3D2DACA1F}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{1A8A9402-E89F-40AE-88A8-B328391684B6}]
"(Default)" = "INamedPropertyList"

[HKCU\Software\Classes\Interface\{628D7BDD-45AB-404D-8505-B3ADC15F454D}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{C413A27F-601E-4261-B9E3-0EB966F4E7D1}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{855AD949-E2EB-473D-AAF2-9800008EA303}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{953AE732-F53A-4116-AC1B-0321B3FB3DBA}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{84340964-7820-4EBC-BCD3-702926DE23E8}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{95B9A382-EA50-45E4-965E-BA61E7213DBA}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{1B04D929-11E4-46C2-9162-EA4F2758C3A7}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{10FDD9BA-0CBA-4958-B6C8-D0912BF2703F}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{CA62E6F3-3E6D-451B-AEAA-6A1B7AACF8D4}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{B00F2520-029C-47D0-B4E8-8FBEF47CAA7E}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{B1F5BCD8-69A6-4FC3-9EF0-9BD4AD999061}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{09028936-CD20-43EF-98CF-56726ADDBA34}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{8F04E92D-EE26-4B64-B9C1-56DD90816810}]
"(Default)" = "IFollowedRoomsChangedEventData"

[HKCU\Software\Classes\Wow6432Node\Interface\{081793DA-7221-45C3-8AFA-3A2E6E464670}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{855AD949-E2EB-473D-AAF2-9800008EA303}]
"(Default)" = "IConversationContextList"

[HKCU\Software\Microsoft\ActiveMovie\devenum]
"Version" = "7"

[HKCU\Software\Classes\Wow6432Node\Interface\{53D014C1-54DB-42B3-9DFD-8E231EF2C356}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{464D5228-9F68-4B1F-B430-156A104E2B85}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{300E56A3-CE08-4EB3-9F48-505AA162C9DA}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{2F8C3E58-436B-42DB-8924-6C394B37DCA2}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{CA7EEB7A-7DC3-4FFE-A174-23DB5A003C04}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{88C688B0-3908-4C56-A2E8-F90AB705C536}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{7693221D-7E9F-47D3-8782-6437CF3D4C0C}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{8FE9A23D-72BC-4EA3-A5AF-E37F75EAD8A2}]
"(Default)" = "IParticipationStateChangedEventData"

[HKCU\Software\Classes\Interface\{7CD92461-CA4F-4BEB-A636-8BBCC192E60F}]
"(Default)" = "ISearchResults2"

[HKCU\Software\Classes\Wow6432Node\Interface\{4D120020-CE64-43C5-9F84-7A7B2360388F}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{18BA13C7-A64E-4301-BA51-D1BFB3C1C9D5}]
"(Default)" = "IVoiceMailBatchEventData"

[HKCU\Software\Classes\Interface\{CA7EEB7A-7DC3-4FFE-A174-23DB5A003C04}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{744BAB86-B15F-4BD5-B7DD-476B0CE0162A}]
"(Default)" = "IDelegatorClientCollectionEventData"

[HKCU\Software\Classes\Wow6432Node\Interface\{85109845-6AE2-4B6B-9524-65BA203E5B7D}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{B0C10F94-CAB6-4821-9643-D781885A46AF}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{EF5C00E4-75E2-4D39-B358-0ED9CB14F3CB}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{61C747F6-157C-4CAE-A37C-EC4352175860}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{64B7E9AD-D920-4EAA-95C7-9D95DE9ACE24}]
"(Default)" = "IConferenceApplicationProperties"

[HKCU\Software\Classes\Interface\{663C61F4-A9DA-4A6F-A606-F142F665DF61}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{806D3227-4CB8-47C4-9864-7D4DF4F44069}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{F97973D7-9436-4A3E-A802-F6EA172A0425}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{1124AA59-B6F3-4EB1-B79A-E7F53B388B8D}]
"(Default)" = "IParticipantActionAvailabilityChangedEventData"

[HKCU\Software\Classes\Interface\{71A054B3-4D4B-4643-B14F-4572494B19E7}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{3C43A2BE-BA4A-41E8-8F93-A9DC5F091892}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Interface\{A4E1D1E4-7839-473B-95FA-5D33DDC0D2DD}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{68DA8699-6C6E-4390-BD82-709FF1DC1702}]
"(Default)" = "IRoomUser"

[HKCU\Software\Classes\Interface\{38E5EC21-81A1-45A7-94D6-B812976231A4}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Interface\{76DE1CD8-F278-48A1-A391-E5BEB8F428E6}]
"(Default)" = "IRoomManager"

[HKCU\Software\Classes\Interface\{A58F54D2-9786-4309-964D-96549AEC7611}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{AA41EE75-F9C5-42F7-8D17-1D92D6BA4D92}]
"(Default)" = "IApplicationRegistration"

[HKCU\Software\Classes\Interface\{C31FB52D-9E9E-45AD-A102-5218E1685B78}]
"(Default)" = "IConversationManager"

[HKCU\Software\Classes\Interface\{219DC126-9A48-483F-80C2-3F22B3B47829}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{064E6072-5592-4D13-AFDB-55F5A494E137}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Classes\Wow6432Node\Interface\{68B1FC26-B48F-4D5F-B041-8E246676D836}]
"(Default)" = "_IVoiceMailCallback"

[HKCU\Software\Classes\Wow6432Node\Interface\{04378C72-E58F-47C0-8621-901B85CA2ED4}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{081793DA-7221-45C3-8AFA-3A2E6E464670}]
"(Default)" = "IRoomMessagesEventData"

[HKCU\Software\Classes\Wow6432Node\Interface\{0FDB5B86-DD44-41BF-A443-317FD19BBF3D}]
"(Default)" = "_IRoomManagerCallback"

[HKCU\Software\Classes\Interface\{25A47938-5C31-4F43-9108-DA01EE5869C0}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Interface\{25A47938-5C31-4F43-9108-DA01EE5869C0}]
"(Default)" = "IVoiceMail"

[HKCU\Software\Classes\Interface\{65B71572-5338-43C8-9E4C-F1DFC6711AD1}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{BC9F5F40-D315-40C1-B1C6-CEA0646E18E2}]
"(Default)" = "IRoomUserChangedEventData"

[HKCU\Software\Classes\Wow6432Node\Interface\{56A868B4-0AD4-11CE-B03A-0020AF0BA770}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Classes\Wow6432Node\Interface\{D0984CEF-E323-4574-B07B-5C970C9CAEE0}\TypeLib]
"(Default)" = "{B9AA1F11-F480-4054-A84E-B5D9277E40A8}"

[HKCU\Software\Classes\Wow6432Node\Interface\{7818A3F7-674B-477E-99E8-54774579A8E7}\TypeLib]
"Version" = "1.0"

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Trojan deletes the following value(s) in system registry:

The process taskeng.exe:3696 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\Handshake\{DA801839-619A-4B18-ABD3-B15B40C2C3CE}]
"data" = "4D 45 4F 57 01 00 00 00 E4 B7 BD 92 8B F2 A0 46"

Dropped PE files

MD5	File path
858af4eacefc93bca142e303fda4ff08	c:\Program Files (x86)\Common Files\Skype\Skype4COM.dll
46b8396ff47c12dac2f34c0ed86bfda2	c:\Program Files (x86)\Skype\Browser\SkypeBrowserHost.exe
46f13dd0d5ce30292b9017ce61de8866	c:\Program Files (x86)\Skype\Phone\RtmCodecs.dll
a32029cb01ff6759c7e7a0c06881e4e2	c:\Program Files (x86)\Skype\Phone\RtmMediaManager.dll
4b437109913f71ada74f63d0f15f5082	c:\Program Files (x86)\Skype\Phone\RtmPal.dll
fd030c57a83e4286d830cb2a466eb6e7	c:\Program Files (x86)\Skype\Phone\RtmPltfm.dll
7d6e1809c844b1d2aa02b6dcf1950084	c:\Program Files (x86)\Skype\Phone\Skype.exe
dde51467cb93f6415cc7df4988fdfaa0	c:\Program Files (x86)\Skype\Updater\Updater.dll
a9c057a9463c25490cf99ea8df8a4b35	c:\Program Files (x86)\Skype\Updater\Updater.exe
51eb2e82672b3c17fd16338307f1cf5f	c:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\USU4CORO\SkypeSetupFull[1].exe
e62ca8a3edc38dce5d93588599abc222	c:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\USU4CORO\YandexSearch[1].exe
e62ca8a3edc38dce5d93588599abc222	c:\Users\"%CurrentUserName%"\AppData\Local\Temp\7F4987FB1A6E43d69E3E94B29EB75926\YandexSearch.exe
9e7e65d9fed7ce4684c708366ff8d4b1	c:\Users\"%CurrentUserName%"\AppData\Local\Temp\sender.exe
6abaaafc40899fdcf61715371f1b46ec	c:\Users\"%CurrentUserName%"\AppData\Local\Temp\utt699.tmp.exe
8e461cd7ff046263ac7d56c615436480	c:\Users\"%CurrentUserName%"\AppData\Local\Temp\utt8112.tmp.exe
7a9bf84ae6f5793548177fb6998ce922	c:\Users\"%CurrentUserName%"\AppData\Local\Temp\utt9C9E.tmp
7ba737b4050ff77a859a9e5b494261b0	c:\Users\"%CurrentUserName%"\AppData\Local\Yandex\yapin\Yandex.exe
a7de5b7d6efefa7474b0f99c054f60b2	c:\Users\"%CurrentUserName%"\AppData\Roaming\OpenCandy\OpenCandy_AA4F1F00729C45A1B2127019AA750390\du73i.exe
7d92f9cf0e121e7fb72da522f7fcd6cb	c:\Users\"%CurrentUserName%"\AppData\Roaming\OpenCandy\OpenCandy_AA4F1F00729C45A1B2127019AA750390\syesubc3_p2v3.exe
8e461cd7ff046263ac7d56c615436480	c:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\uTorrent.exe
8e461cd7ff046263ac7d56c615436480	c:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\updates\3.4.2_37754.exe
00b0ace97eaa8a8f1cc1867e49b1fe74	c:\Windows\Installer\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}\SkypeIcon.exe
fd5cabbe52272bd76007b68186ebaf00	c:\Windows\SysWOW64\msvcp120.dll
034ccadc1c073e4216e9466b720f9849	c:\Windows\SysWOW64\msvcr120.dll
69837e50c50561a083a72a5f8ea1f6a2	c:\Windows\SysWOW64\vccorlib120.dll
fd5cabbe52272bd76007b68186ebaf00	c:\Windows\System32\msvcp120.dll
034ccadc1c073e4216e9466b720f9849	c:\Windows\System32\msvcr120.dll
69837e50c50561a083a72a5f8ea1f6a2	c:\Windows\System32\vccorlib120.dll

HOSTS file anomalies

No changes have been detected.

Rootkit activity

No anomalies have been detected.

Propagation

VersionInfo

Company Name: BitTorrent, Inc.
Product Name: HD Player
Product Version: 2.2.1.25302
Legal Copyright: (c)2011 BitTorrent, Inc. All Rights Reserved.
Legal Trademarks:
Original Filename: uTorrent.exe
Internal Name: uTorrent.exe
File Version: 2.2.1.25302
File Description:
Comments:
Language: Language Neutral

PE Sections

Name	Virtual Address	Virtual Size	Raw Size	Entropy	Section MD5
UPX0	4096	684032	0	0	d41d8cd98f00b204e9800998ecf8427e
UPX1	688128	372736	370688	5.54449	087014281b07e24cadd543a34be0a046
.rsrc	1060864	24576	22528	2.4222	883bc25c81b7b88b6138a586a1c45767

Dropped from:

Downloaded by:

Similar by SSDeep:

Similar by Lavasoft Polymorphic Checker:

Total found: 1
bf28f77ec250a6e9d4a7c372abf3a7f5

URLs

URL	IP
hxxp://67.215.246.203/installstats.php?v=71525078&h=029fjLDzoDze8QUv&hn=1&w=1DB10106&bu=0&pr=0&showinstall
hxxp://67.215.246.203/installstats.php?v=71525078&h=029fjLDzoDze8QUv&hn=1&w=1DB10106&bu=0&pr=0&toroffer=1
hxxp://67.215.246.203/installstats.php?v=71525078&h=029fjLDzoDze8QUv&hn=1&w=1DB10106&bu=0&pr=0&installresult=30079&exit=1369
hxxp://bittorrent.vo.llnwd.net/sites/default/files/bittorrent2_favicon.ico
hxxp://bittorrent.vo.llnwd.net/store/store.btapp?h=029fjLDzoDze8QUv&v=71525078&ol=en&ul=&tk=main&c=uTorrent
hxxp://vodo.net/assets/torrents/The.Tunnel.2011.720p.x264-VODO.torrent	176.9.85.211
hxxp://google.com/favicon.ico	173.194.113.197
hxxp://www.google.com/favicon.ico	173.194.113.210
hxxp://update.utorrent.com/checkupdate.php?v=71525078&lv=0_0_&l=en&tk=main&k=&c=US&w=1DB10106&t=3&h=029fjLDzoDze8QUv&mts=31&nat_state=255&uts=0,0,0,0,0&utr=0,0,0,0,0&utpmtu=0,0&memstats=9334784,8&ssb=31&def_tor=1&at=-1&w64=1&ie=9.10.9200.16521&hn=1&xsm=3&xsss=1&xrsb=2&xrtsb=1&xseq=1	67.215.246.203
hxxp://mininova.org/favicon.ico
hxxp://web-www-1660276444.us-east-1.elb.amazonaws.com/favicon.ico
hxxp://bittorrent.vo.llnwd.net/3.4.2/utorrent.37754.stable34-OC_CC217.exe?au=1&hash=4cecde076e1a0d5ae95751f0e5e78ae21b7177d4
hxxp://bittorrent.vo.llnwd.net/langpacks/langpack-3227801ut.win.zip
hxxp://a1621.g.akamai.net/msdownload/update/v3/static/trustedr/en/disallowedcertstl.cab?0048f0cbba8d8ad1
hxxp://a1621.g.akamai.net/msdownload/update/v3/static/trustedr/en/authrootstl.cab?26fd04a30eb9ab29
hxxp://update.utorrent.com/checkupdate.php?v=71525078&qv=109417338&lv=0_0_&i=4&l=en&tk=main&k=&c=US&w=1DB10106&t=3&h=029fjLDzoDze8QUv&p_up=122&p_down=345296&p_ip=37.57.16.189&mts=31&mt=3264116&fg=5000&gnc=5&nat_state=255&pc=8&uts=0,0,0,0,0&utr=0,0,0,0,0&utpmtu=0,0&memstats=18669568,14&ssb=43&def_tor=1&at=-1&w64=1&ie=9.10.9200.16521&hn=1&xsm=3&xsss=13&xrsb=2&xrtsb=13&xseq=2	67.215.246.203
hxxp://update.utorrent.com/installoffer.php?h=029fjLDzoDze8QUv&v=109417338&w=1DB10106&l=en&c=US&w64=1&db=iexplore.exe&cl=uTorrent&au=1&tsub=1&svp=4&cmp=217&ocmp=217	67.215.246.203
hxxp://com-utorrent-prod-bench-290894750.us-east-1.elb.amazonaws.com/e?i=21
hxxp://update.utorrent.li/installstats.php?cl=uTorrent&v=109417338&h=029fjLDzoDze8QUv&w=1DB10106&bu=0&pr=25302&cmp=217&ocmp=217&showtbexists&pid=3896&cau=1&tbe=0&cd=0&view=win32	82.221.103.245
hxxp://update.utorrent.li/installstats.php?cl=uTorrent&v=109417338&h=029fjLDzoDze8QUv&w=1DB10106&bu=0&pr=25302&cmp=217&ocmp=217&offerretrievedfromserver&pid=3896&cau=1&ServerOfferRetrieved=1&sec_offs=oc&view=win32	82.221.103.245
hxxp://api.opencandy.com/?clientv=29&cltzone=120&language=en,en&method=get_offers&mstime=0.063&os=WIN6.1SP1-64&product_key=cb00343115ffdf69411419d8a9ceff1a&v=1.0&signature=bbf9d057c3553df2ac6a9cedf3e731bc	162.209.122.21
hxxp://a469.d.akamai.net/templates/7861/0/59317.png
hxxp://update.utorrent.li/installstats.php?cl=uTorrent&v=109417338&h=029fjLDzoDze8QUv&w=1DB10106&bu=0&pr=25302&cmp=217&ocmp=217&mismexecute&pid=3896&cau=1&download=0&execute=0&error=mism execute succeeded&mismreturn=0&mismresult=provider:9,search:1,homepage:1&view=win32	82.221.103.245
hxxp://bittorrent.vo.llnwd.net/offers/spigot-yandex-20140709.bmp
hxxp://update.utorrent.li/updatestats.php?cl=uTorrent&v=109417338&h=029fjLDzoDze8QUv&k=&ip=8&dns=78&con=47&dl=93&error=&dlurl=http://ll.download3.utorrent.com/offers/spigot-yandex-20140709.bmp&svp=4&pid=3896&sz=24878&bin=bmp&p1=192.168.150.2&m1=0&p2=192.168.50.98&m2=0&p3=37.57.16.254&m3=3&p4=80.93.125.145&m4=2&p5=80.93.127.242&m5=56&p6=80.81.192.221&m6=36&p7=69.28.172.106&m7=36&p8=87.248.217.254&m8=37	82.221.103.245
hxxp://www.mybrowserbar.com/images/pixel.gif?yxds=1&yxhp=1&yxov=1&cnid=435371	174.36.215.20
hxxp://update.utorrent.li/installstats.php?cl=uTorrent&v=109417338&h=029fjLDzoDze8QUv&w=1DB10106&bu=0&pr=25302&cmp=217&ocmp=217&offerapicurrentoffer&pid=3896&cau=1&OfferProvider=OpenCandy&Offer=NotProvided&Accepted=1&view=win32	82.221.103.245
hxxp://update.utorrent.li/installstats.php?cl=uTorrent&v=109417338&h=029fjLDzoDze8QUv&w=1DB10106&bu=0&pr=25302&cmp=217&ocmp=217&showtorrentoffer&pid=3896&cau=1&toroffer=0&torofferid=&view=win32	82.221.103.245
hxxp://a469.d.akamai.net/p/1217/dc/du73i.exe
hxxp://update.utorrent.li/installstats.php?cl=uTorrent&v=109417338&h=029fjLDzoDze8QUv&w=1DB10106&bu=0&pr=25302&cmp=217&ocmp=217&wizardcomplete&pid=3896&cau=1&view=win32	82.221.103.245
hxxp://update.utorrent.li/installstats.php?cl=uTorrent&v=109417338&h=029fjLDzoDze8QUv&w=1DB10106&bu=0&pr=25302&cmp=217&ocmp=217&gettbofferresult&pid=3896&cau=1&tbofferresult=3&exit=1375&cbtoolbar=1&cbhomepage=1&tb=spigot-yandex&view=win32	82.221.103.245
hxxp://d2adxpv8ev13tq.cloudfront.net/pro/utorrent/index.html
hxxp://api.opencandy.com/?accepted_ind=1&clientv=29&max=1&method=track_offer_result&mstime=25.475&offer_id=7861&offer_shown_secs=0&opt_shown_count=0&product_key=cb00343115ffdf69411419d8a9ceff1a&ready=1&session_key=2efc2a3ef36e2f433a2f28e7651231b1&skipped_offer_ids=&v=1.0&signature=a53cfcf95d92c14257e44b4b3312d3f1	162.209.122.21
hxxp://bittorrent.vo.llnwd.net/utorrent-onboarding/welcome-upsell.btapp
hxxp://bittorrent.vo.llnwd.net/utorrent-onboarding/player.btapp
hxxp://d3abeplup23idj.cloudfront.net/onboarding/utorrent?url=http://bundles.bittorrent.com/
hxxp://api.opencandy.com/?clientv=29&method=track_product_installed&mstime=25.491&product_key=cb00343115ffdf69411419d8a9ceff1a&session_key=2efc2a3ef36e2f433a2f28e7651231b1&v=1.0&signature=6e1d0a0d42298c3211c5ce7faf95d785	162.209.122.21
hxxp://a469.d.akamai.net/p/883/ius/syesubc3_p2v3.exe
hxxp://api.opencandy.com/?clientv=29&method=track_offer_downloaded&mstime=25.990&offer_downloaded_secs=0.000&offer_id=7861&package_md5=a7de5b7d6efefa7474b0f99c054f60b2&product_key=cb00343115ffdf69411419d8a9ceff1a&session_key=2efc2a3ef36e2f433a2f28e7651231b1&v=1.0&signature=963bb9a5bf17b54b505a5353255c5b54	162.209.122.21
hxxp://update.utorrent.li/installstats.php?cl=uTorrent&v=109417338&h=029fjLDzoDze8QUv&w=1DB10106&bu=0&pr=25302&cmp=217&ocmp=217&installresult&pid=3896&cau=1&installresult=0&exit=1&au=0&view=win32	82.221.103.245
hxxp://bittorrent.vo.llnwd.net/offers/spigot-yandex-en-20140708.exe
hxxp://api.opencandy.com/?clientv=53&inst_id=&method=track_encapsulated_offer_downloaded&mstime=0.452&offer_downloaded_secs=0.000&offer_id=7861&package_md5=7d92f9cf0e121e7fb72da522f7fcd6cb&product_key=cb00343115ffdf69411419d8a9ceff1a&session_key=2efc2a3ef36e2f433a2f28e7651231b1&sswnt=&tm=2015-01-29 07:54:57.026&v=1.0&signature=9c104127adb3031b6786e55e644f1a5f	162.209.122.21
hxxp://api.opencandy.com/?clientv=29&method=track_offer_installed&mstime=26.427&offer_id=7861&product_key=cb00343115ffdf69411419d8a9ceff1a&session_key=2efc2a3ef36e2f433a2f28e7651231b1&v=1.0&signature=f3fdea08d2a40c578acc462a3cb0bcab	162.209.122.21
hxxp://cdn.yandex.net/yandex-pack/downloader/info.rss
hxxp://www.skype.akadns.net/go/getskype-trackable550
hxxp://update.utorrent.li/updatestats.php?cl=uTorrent&v=109417338&h=029fjLDzoDze8QUv&k=&ip=8&dns=78&con=31&dl=296&error=&dlurl=http://ll.download3.utorrent.com/offers/spigot-yandex-en-20140708.exe&svp=4&pid=3896&sz=157480&bin=toolbar&p1=192.168.150.2&m1=2&p2=192.168.50.98&m2=0&p3=37.57.16.254&m3=2&p4=80.93.125.145&m4=2&p5=80.93.127.206&m5=35&p6=80.81.192.221&m6=40&p7=87.248.217.253&m7=85	82.221.103.245
hxxp://cache-kiev07.cdn.yandex.net/downloader.yandex.net/yandex-pack/downloader/info.rss	141.8.174.112
hxxp://cdn.yandex.net/yandex-pack/spigot-62/YandexSearch.exe
hxxp://cache-kiev07.cdn.yandex.net/downloader.yandex.net/yandex-pack/spigot-62/YandexSearch.exe	141.8.174.112
hxxp://a1306.cl.akamai.net/0dce4e856bdf8239787df5c367298d54/partner/trackable/550/SkypeSetupFull.exe
hxxp://23.43.139.27/MFEwTzBNMEswSTAJBgUrDgMCGgUABBS56bKHAoUD+Oyl+0LhPg9JxyQm4gQUf9Nlp8Ld7LvwMAnzQzn6Aq8zMTMCEFIA5aolVvwahu2WydRLM8c=
hxxp://23.43.139.27/MFEwTzBNMEswSTAJBgUrDgMCGgUABBTSqZMG5M8TA9rdzkbCnNwuMAd5VgQUz5mp6nsm9EvJjo/X8AUm7+PSp50CEDZn4Vi1JMj/v+U4FyeG8eI=
hxxp://update.utorrent.li/installstats.php?cl=uTorrent&v=109417338&h=029fjLDzoDze8QUv&w=1DB10106&bu=0&pr=25302&cmp=217&ocmp=217&gettbinstallresult&pid=3896&cau=1&tbinstallresult=3&cbtoolbar=1&cbhomepage=1&error=0&msg=&tb=spigot-yandex&url=http://ll.download3.utorrent.com/offers/spigot-yandex-en-20140708.exe&prog=100&t=&view=win32	82.221.103.245
hxxp://bittorrent.vo.llnwd.net/favicon.ico
hxxp://98.143.146.7/download/langpacks/dl.php?build=37754&ref=client&client=utorrent&sys_l=en&sel_l=-1&tk=stable34
hxxp://com-utorrent-prod-bench-290894750.us-east-1.elb.amazonaws.com/e?i=32
hxxp://d3abeplup23idj.cloudfront.net/bundle_tab?port=18699&pair=347CB78701ABCA0C7B51D3F7666EF54594187E82&frameaddr=58ed270
hxxp://67.215.246.204/time.php
hxxp://com-utorrent-prod-bench-290894750.us-east-1.elb.amazonaws.com/e?i=29
hxxp://com-utorrent-prod-bench-290894750.us-east-1.elb.amazonaws.com/e?i=38
hxxp://update.utorrent.com/updatestats.php?cl=uTorrent&v=109417338&h=029fjLDzoDze8QUv&k=&ip=8&dns=78&con=63&dl=1029&dlurl=http://ll.download3.utorrent.com/langpacks/langpack-3227801ut.win.zip&svp=4&pid=200&sz=1341373&p1=192.168.150.2&m1=0&p2=192.168.50.98&m2=3&p3=37.57.16.254&m3=3&p4=80.93.125.145&m4=2&p5=80.93.127.242&m5=46&p6=80.81.192.221&m6=42&p7=69.28.172.106&m7=42&p8=87.248.217.254&m8=41	67.215.246.203
hxxp://54.230.202.167/control/tags/ut.json
hxxp://bittorrent.vo.llnwd.net/network/index.html?adt=1224&browser=ie&clientdata=utorrent\|3.4.2.37754\|217&page=torrent&site=33049
hxxp://bittorrent.vo.llnwd.net/network/index.html?adt=5&browser=ie&clientdata=utorrent\|3.4.2.37754\|217&page=torrent&site=33049
hxxp://bittorrent.hs.llnwd.net/download/langpacks/dl.php?build=37754&ref=client&client=utorrent&sys_l=en&sel_l=-1&tk=stable34
hxxp://ocsp.godaddy.com.akadns.net//MEQwQjBAMD4wPDAJBgUrDgMCGgUABBTkIInKBAzXkF0Qh0pel3lfHJ9GPAQU0sSw0pHUTBFxs2HLPaH+3ahq1OMCAxvnFQ==	72.167.239.239
hxxp://update.utorrent.com/checkupdate.php?s=1&cl=uTorrent&v=109417338&qv=109417338&l=en&svp=4&svn_revno=37754&tk=stable34&cmp=217&ocmp=217&period=7&sids=0,0,0,0,0&lv=3227801_0_&c=US&w=1DB10106&t=3&h=029fjLDzoDze8QUv&mts=31&gnc=5&nat_state=255&it=7&pc=19&sctl=1&shdi=1&def_tor=1&w64=1&doainstalled=0&ie=9.10.9200.16521&xim=3&insvr=109417338&sss=4&rsb=4&rtsb=16&view=win32&cmp=217&ocmp=217&db=iexplore.exe&plus=3&pupsell=1&secp=OpenCandy&secres=1&seccau=1&adc=1&ch_up=1&p_up=122&p_down=345296&p_ip=37.57.16.189?fg=6000&t_up=5760&t_down=3038226&mt=3338219&ssb=95&ssu=11644473649&xseq=2&cau_time=0	67.215.246.203
hxxp://104.16.13.8/ados.js
hxxp://bittorrent.vo.llnwd.net/network/assets/jquery-1.11.2.js
hxxp://ocsp.godaddy.com.akadns.net//MEIwQDA+MDwwOjAJBgUrDgMCGgUABBQdI2+OBkuXH93foRUj4a7lAr4rGwQUOpqFBxBnKLbv9r0FQW4gwZTaD94CAQc=	72.167.239.239
hxxp://bittorrent.vo.llnwd.net/utorrent-onboarding/welcome-upsell.btapp?h=029fjLDzoDze8QUv&v=109417338&ol=en&ul=&tk=stable34&c=uTorrent
hxxp://bittorrent.vo.llnwd.net/utorrent-onboarding/player.btapp?h=029fjLDzoDze8QUv&v=109417338&ol=en&ul=&tk=stable34&c=uTorrent
hxxp://50.19.108.106/ados?t=1422518118439&request={"Placements":[{"A":5682,"S":33049,"D":"bt_ap_div","AT":5,"Properties":{"browser":"ie","clientdata":"utorrent\|3.4.2.37754\|217","page":"torrent","flash":"none"}}],"Keywords":"browser%3Die%2C%20clientdata%3Dutorrent%7C3.4.2.37754%7C217%2C%20page%3Dtorrent%2C%20flash%3Dnull","Referrer":"","IsAsync":false}
hxxp://184.73.218.123/e?i=1005&e=eyJldmVudE5hbWUiOiJhcC5hZHRhZyIsImFjdGlvbiI6ImxvYWRlZCIsImFkdCI6IjUiLCJicm93c2VyIjoiaWUiLCJjbGllbnRkYXRhIjoidXRvcnJlbnQlN2MzJTJlNCUyZTIlMmUzNzc1NCU3YzIxNyIsInBhZ2UiOiJ0b3JyZW50Iiwic2l0ZSI6IjMzMDQ5In0=&callback=jQuery1112013130843189774938_1422518118420&_=1422518118421
hxxp://a23-43-139-27.deploy.static.akamaitechnologies.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRIt2RJ89X++hEzqoBeQg8PymQ2UQQUANhaTCXBIuWLMe9tuvPMXynxDWECEDWXMYfzhzoHMn7OWAybfto=
hxxp://a23-43-139-27.deploy.static.akamaitechnologies.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBS56bKHAoUD+Oyl+0LhPg9JxyQm4gQUf9Nlp8Ld7LvwMAnzQzn6Aq8zMTMCEG7MeqWnAyAJuM689OlS1JE=
hxxp://cs9.wac.edgecastcdn.net/MFEwTzBNMEswSTAJBgUrDgMCGgUABBTfqhLjKLEJQZPin0KCzkdAQpVYowQUsT7DaQP4v0cB1JgmGggC72NkK8MCEApfEU0DWxeRF9Lv1AOMPzs=
hxxp://23.43.133.163/crls/secureca.crl
hxxp://a23-43-139-27.deploy.static.akamaitechnologies.com/MEQwQjBAMD4wPDAJBgUrDgMCGgUABBSxtDkXkBa3l3lQEfFgudSiPNvt7gQUAPkqw0GRtsnCuD5V8sCXEROgByACAwI6dg==
hxxp://a23-43-139-27.deploy.static.akamaitechnologies.com/MEQwQjBAMD4wPDAJBgUrDgMCGgUABBSxtDkXkBa3l3lQEfFgudSiPNvt7gQUAPkqw0GRtsnCuD5V8sCXEROgByACAwI6Yw==
hxxp://213.180.193.14/click/dtype=stred/pid=12/cid=72435/path=dwnldr/p=spigot-62/cnt=0/dt=1/ct=1/rt=27/*
hxxp://a23-43-133-163.deploy.static.akamaitechnologies.com/ThawtePremiumServerCA.crl
hxxp://a1363.dscg.akamai.net/pki/crl/products/MicrosoftTimeStampPCA.crl
hxxp://a23-43-139-27.deploy.static.akamaitechnologies.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBQwF4prw9S7mCbCEHD/yl6nWPkczAQUe1tFz6/Oy3r9MZIaarbzRutXSFACEE1fLDQIskwgzW1QfiRNyew=
hxxp://google.com/ocsp/MEkwRzBFMEMwQTAJBgUrDgMCGgUABBTy4Gr5hYodjXCbSRkjeqm1Gih+ZAQUSt0GFhu89mi1dvWBtrtiGrpagS8CCG+vFYDQCqlf	173.194.113.197
hxxp://a23-43-139-27.deploy.static.akamaitechnologies.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBQxsL2eHTbKwjJcY2gHLbXTx2GdSQQUp6KDuzRFQD381TBPErk+oQGf9tsCECIQyRlmbgM/IEg/eUN97YQ=
hxxp://a1363.dscg.akamai.net/pki/crl/products/microsoftrootcert.crl
hxxp://a1363.dscg.akamai.net/pki/crl/products/WinPCA.crl
hxxp://a1363.dscg.akamai.net/pki/crl/products/MicCodSigPCA_08-31-2010.crl
hxxp://ui.skype.akadns.net/ui/0/7.1.0.105.550/en/getnewestversion?defaultbrowser=ie
hxxp://a23-43-139-27.deploy.static.akamaitechnologies.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBS56bKHAoUD+Oyl+0LhPg9JxyQm4gQUf9Nlp8Ld7LvwMAnzQzn6Aq8zMTMCEFIA5aolVvwahu2WydRLM8c=
hxxp://a23-43-139-27.deploy.static.akamaitechnologies.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBTSqZMG5M8TA9rdzkbCnNwuMAd5VgQUz5mp6nsm9EvJjo/X8AUm7+PSp50CECAKfRxMDvODER0cHOAslgg=
hxxp://api.opencandy.com/?clientv=53&inst_id=&method=track_encapsulated_offer_installed&mstime=63.196&offer_id=7861&product_key=cb00343115ffdf69411419d8a9ceff1a&session_key=2efc2a3ef36e2f433a2f28e7651231b1&tm=2015-01-29 07:55:59.697&v=1.0&signature=a3d4707700eef2d1940e771aaa191d07	162.209.122.21
hxxp://cs1.wpc.v0cdn.net/pki/mscorp/crl/mswww(6).crl
hxxp://cs1.wpc.v0cdn.net/pki/mscorp/crl/MSIT Machine Auth CA 2(1).crl
hxxp://ui.skype.akadns.net/ui/0/7.1.0.105.550/en/installed
hxxp://a23-43-139-27.deploy.static.akamaitechnologies.com/MEQwQjBAMD4wPDAJBgUrDgMCGgUABBSxtDkXkBa3l3lQEfFgudSiPNvt7gQUAPkqw0GRtsnCuD5V8sCXEROgByACAwI20A==
hxxp://a23-43-139-27.deploy.static.akamaitechnologies.com/MEQwQjBAMD4wPDAJBgUrDgMCGgUABBQ/m36Fj2BE19VBYXRO62zrgIYp0gQUQnlUG2HNVSs+Y9U8SFf1n/tFzkoCAwLVNg==
hxxp://www-google-analytics.l.google.com/edgedl/update2/1.3.25.11/GoogleUpdateSetup.exe
hxxp://r2.sn-ugpva5o-3c2e.c.pack.google.com/edgedl/update2/1.3.25.11/GoogleUpdateSetup.exe?cms_redirect=yes&expire=1422532603&ip=37.57.16.189&ipbits=0&mm=28&ms=nvh&mt=1422518019&mv=u&pl=22&shardbypass=yes&sparams=expire,ip,ipbits,mm,ms,mv,pl,shardbypass&signature=1763764EEF826BF371ABA1E1BD8BA9F95646F68B.31B38869D12C6E8271821A57F03A6AACA83E6BE4&key=cms1
hxxp://bittorrent.vo.llnwd.net/network/index-edge.html?tag=ant&adt=1224&browser=ie&clientdata=utorrent\|3.4.2.37754\|217&page=torrent&site=33049
hxxp://bittorrent.vo.llnwd.net/network/index-edge.html?tag=ant&adt=5&browser=ie&clientdata=utorrent\|3.4.2.37754\|217&page=torrent&site=33049
hxxp://bittorrent.vo.llnwd.net/network/base64.js
hxxp://bittorrent.vo.llnwd.net/network/jquery-1.11.1.min.js
hxxp://google.com/analytics.js	173.194.113.197
hxxp://google.com/r/collect?v=1&_v=j32&a=1085486899&t=pageview&_s=1&dl=http://cdn.bitmedianetwork.com/network/index-edge.html?tag=ant&adt=1224&browser=ie&clientdata=utorrent%7c3%2e4%2e2%2e37754%7c217&page=torrent&site=33049&ul=en-us&de=windows-1252&sd=24-bit&sr=1916x902&vp=908x34&je=1&_u=MEAAAEQAI~&jid=1877962788&cid=443073802.1422518236&tid=UA-54512734-1&_r=1&z=145420492	173.194.113.197
hxxp://google.com/collect?v=1&_v=j32&a=1932983298&t=pageview&_s=1&dl=http://cdn.bitmedianetwork.com/network/index-edge.html?tag=ant&adt=5&browser=ie&clientdata=utorrent%7c3%2e4%2e2%2e37754%7c217&page=torrent&site=33049&ul=en-us&de=windows-1252&sd=24-bit&sr=1916x902&vp=300x250&je=1&_u=MACAAEQAI~&jid=&cid=443073802.1422518236&tid=UA-54512734-1&z=1630540202	173.194.113.197
hxxp://bittorrent-954311581.us-east-1.elb.amazonaws.com/ados?t=1422518236420&request={"Placements":[{"A":5682,"S":33049,"D":"bt_ap_div","AT":5,"Properties":{"tag":"ant","browser":"ie","clientdata":"utorrent\|3.4.2.37754\|217","page":"torrent","flash":"none"}}],"Keywords":"tag%3Dant%2C%20browser%3Die%2C%20clientdata%3Dutorrent%7C3.4.2.37754%7C217%2C%20page%3Dtorrent%2C%20flash%3Dnull","Referrer":"","IsAsync":false}
hxxp://bittorrent-954311581.us-east-1.elb.amazonaws.com/ados?t=1422518236585&request={"Placements":[{"A":5682,"S":33049,"D":"bt_ap_div","AT":1224,"Properties":{"tag":"ant","browser":"ie","clientdata":"utorrent\|3.4.2.37754\|217","page":"torrent","flash":"none"}}],"Keywords":"tag%3Dant%2C%20browser%3Die%2C%20clientdata%3Dutorrent%7C3.4.2.37754%7C217%2C%20page%3Dtorrent%2C%20flash%3Dnull","Referrer":"","IsAsync":false}
hxxp://bittorrent-954311581.us-east-1.elb.amazonaws.com/i.gif?e=eyJhdiI6Mzg1ODIsImF0Ijo1LCJidCI6MCwiY20iOjEyMTUyNywiY3QiOiJnYW1pbmciLCJjaCI6ODc4NSwiY3IiOjcwNTczMywiZGkiOiIwZGQzMWE2MTc1M2U0OWVjOTNhYzA0YjEwNTA4MDY3MCIsImRtIjoxLCJmYyI6NzMzNDgxLCJmbCI6MjU2MjQ0LCJpcCI6IjM3LjU3LjE2LjE4OSIsImt3IjoidGFnPWFudCxicm93c2VyPWllLGNsaWVudGRhdGE9dXRvcnJlbnR8My40LjIuMzc3NTR8MjE3LHBhZ2U9dG9ycmVudCxmbGFzaD1udWxsIiwibnciOjU2ODIsInBjIjowLjA1LCJwciI6NjI1NTcsInJ0IjozLCJzdCI6MzMwNDksInVrIjoidWUxLTkxZDY1YzZkZDJkMDQ0MzlhZjA3YjJmNTI3MDBiMmZiIiwidHMiOjE0MjI1MTgyMzY5NDQsImJmIjp0cnVlfQ&s=FZfQPorpd35SD3T4mBOrBjKrtOA
hxxp://bittorrent-954311581.us-east-1.elb.amazonaws.com/i.gif?e=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&s=NV_Rq1UIcRm1tmntJXvFU3rJE9A
hxxp://com-utorrent-prod-bench-290894750.us-east-1.elb.amazonaws.com/e?i=1005&e=eyJldmVudE5hbWUiOiJhcC5hZHRhZyIsImFjdGlvbiI6ImxvYWRlZCIsInRhZyI6ImFudCIsImFkdCI6IjEyMjQiLCJicm93c2VyIjoiaWUiLCJjbGllbnRkYXRhIjoidXRvcnJlbnQlN2MzJTJlNCUyZTIlMmUzNzc1NCU3YzIxNyIsInBhZ2UiOiJ0b3JyZW50Iiwic2l0ZSI6IjMzMDQ5In0=&callback=jQuery111106551887315392704_1422518236574&_=1422518236575
hxxp://com-utorrent-prod-bench-290894750.us-east-1.elb.amazonaws.com/e?i=1005&e=eyJldmVudE5hbWUiOiJhcC5hZHRhZyIsImFjdGlvbiI6ImxvYWRlZCIsInRhZyI6ImFudCIsImFkdCI6IjUiLCJicm93c2VyIjoiaWUiLCJjbGllbnRkYXRhIjoidXRvcnJlbnQlN2MzJTJlNCUyZTIlMmUzNzc1NCU3YzIxNyIsInBhZ2UiOiJ0b3JyZW50Iiwic2l0ZSI6IjMzMDQ5In0=&callback=jQuery1111034716094678426956_1422518236409&_=1422518236410
hxxp://static.adzerk.net.cdn.cloudflare.net/Advertisers/380d449ac02e4f07b48c7c4b1438be6b.jpg
hxxp://static.adzerk.net.cdn.cloudflare.net/Advertisers/7aea374f43834941bbb3fa6f934276d5.jpg
hxxp://a23-43-139-27.deploy.static.akamaitechnologies.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRIt2RJ89X++hEzqoBeQg8PymQ2UQQUANhaTCXBIuWLMe9tuvPMXynxDWECEGVSJuGyLhjhWQ8phawi51w=
hxxp://a23-43-139-27.deploy.static.akamaitechnologies.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSpuCE3aK3GivZPzGQJ6L5BRyZofwQUl9BrqCZwyKE/lB8ILcQ1m6ShHvICEAxNF3PJUX7iAOhAP2oGxcI=
hxxp://a23-43-133-163.deploy.static.akamaitechnologies.com/pca3.crl
hxxp://a23-43-139-27.deploy.static.akamaitechnologies.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBQ/xkCfyHfJr7GQ6M658NRZ4SHo/AQUCPVR6Pv+PT1kNnxoz1t4qN+5xTcCEGC2x6sSmevembHfY1acIZk=
hxxp://a23-43-139-27.deploy.static.akamaitechnologies.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSpuCE3aK3GivZPzGQJ6L5BRyZofwQUl9BrqCZwyKE/lB8ILcQ1m6ShHvICEGwkCSV07gf3g5QOsqmf+MY=
hxxp://a23-43-139-27.deploy.static.akamaitechnologies.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSpuCE3aK3GivZPzGQJ6L5BRyZofwQUl9BrqCZwyKE/lB8ILcQ1m6ShHvICEEES5jLHsYoCmjofrIA6uJ8=
hxxp://a23-43-139-27.deploy.static.akamaitechnologies.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBTSqZMG5M8TA9rdzkbCnNwuMAd5VgQUz5mp6nsm9EvJjo/X8AUm7+PSp50CEFcywVdOavgo4bT5Ors07Qg=
hxxp://a23-43-139-27.deploy.static.akamaitechnologies.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRsif7263KedmR2MLuYKv9+WQCtWAQU1A1lP3q9NMb+R+dMDcC98t4Vq3ECECVRccvD8Qb29B4D63fPT+k=
hxxp://cdn3.opencandy.com/p/883/ius/syesubc3_p2v3.exe	213.155.152.200
hxxp://crl.microsoft.com/pki/crl/products/microsoftrootcert.crl	87.245.202.48
hxxp://www.bittorrent.com/sites/default/files/bittorrent2_favicon.ico	87.248.217.254
hxxp://ocsp.verisign.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBTSqZMG5M8TA9rdzkbCnNwuMAd5VgQUz5mp6nsm9EvJjo/X8AUm7+PSp50CEFcywVdOavgo4bT5Ors07Qg=	23.43.139.27
hxxp://update.utorrent.com/installstats.php?v=71525078&h=029fjLDzoDze8QUv&hn=1&w=1DB10106&bu=0&pr=0&showinstall	67.215.246.203
hxxp://r2---sn-ugpva5o-3c2e.c.pack.google.com/edgedl/update2/1.3.25.11/GoogleUpdateSetup.exe?cms_redirect=yes&expire=1422532603&ip=37.57.16.189&ipbits=0&mm=28&ms=nvh&mt=1422518019&mv=u&pl=22&shardbypass=yes&sparams=expire,ip,ipbits,mm,ms,mv,pl,shardbypass&signature=1763764EEF826BF371ABA1E1BD8BA9F95646F68B.31B38869D12C6E8271821A57F03A6AACA83E6BE4&key=cms1	80.73.12.13
hxxp://apps.bittorrent.com/store/store.btapp?h=029fjLDzoDze8QUv&v=71525078&ol=en&ul=&tk=main&c=uTorrent	87.248.217.253
hxxp://downloader.yandex.net/yandex-pack/spigot-62/YandexSearch.exe	5.45.205.235
hxxp://ocsp.verisign.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBTSqZMG5M8TA9rdzkbCnNwuMAd5VgQUz5mp6nsm9EvJjo/X8AUm7+PSp50CECAKfRxMDvODER0cHOAslgg=	23.43.139.27
hxxp://www.google-analytics.com/analytics.js	173.194.71.113
hxxp://ll.download3.utorrent.com/3.4.2/utorrent.37754.stable34-OC_CC217.exe?au=1&hash=4cecde076e1a0d5ae95751f0e5e78ae21b7177d4	87.248.217.253
hxxp://ll.download3.utorrent.com/langpacks/langpack-3227801ut.win.zip	87.248.217.253
hxxp://downloader.yandex.net/yandex-pack/downloader/info.rss	5.45.205.235
hxxp://ocsp.thawte.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBQxsL2eHTbKwjJcY2gHLbXTx2GdSQQUp6KDuzRFQD381TBPErk+oQGf9tsCECIQyRlmbgM/IEg/eUN97YQ=	23.43.139.27
hxxp://bench.utorrent.com/e?i=21	107.22.184.83
hxxp://utorrent.com/download/langpacks/dl.php?build=37754&ref=client&client=utorrent&sys_l=en&sel_l=-1&tk=stable34
hxxp://update.utorrent.li/updatestats.php?cl=uTorrent&v=109417338&h=029fjLDzoDze8QUv&k=&ip=8&dns=78&con=47&dl=93&error=&dlurl=http://ll.download3.utorrent.com/offers/spigot-yandex-20140709.bmp&svp=4&pid=3896&sz=24878&bin=<NULL>bmp&p1=192.168.150.2&m1=0&p2=192.168.50.98&m2=0&p3=37.57.16.254&m3=3&p4=80.93.125.145&m4=2&p5=80.93.127.242&m5=56&p6=80.81.192.221&m6=36&p7=69.28.172.106&m7=36&p8=87.248.217.254&m8=37	82.221.103.245
hxxp://www.bittorrent.com/favicon.ico	87.248.217.254
hxxp://clck.yandex.ru/click/dtype=stred/pid=12/cid=72435/path=dwnldr/p=spigot-62/cnt=0/dt=1/ct=1/rt=27/*
hxxp://crl.thawte.com/ThawtePremiumServerCA.crl	23.43.133.163
hxxp://bundles.bittorrent.com/bundle_tab?port=18699&pair=347CB78701ABCA0C7B51D3F7666EF54594187E82&frameaddr=58ed270	54.192.203.158
hxxp://update.utorrent.com/installstats.php?v=71525078&h=029fjLDzoDze8QUv&hn=1&w=1DB10106&bu=0&pr=0&toroffer=1	67.215.246.203
hxxp://gtssl-ocsp.geotrust.com/MEQwQjBAMD4wPDAJBgUrDgMCGgUABBQ/m36Fj2BE19VBYXRO62zrgIYp0gQUQnlUG2HNVSs+Y9U8SFf1n/tFzkoCAwLVNg==	23.43.139.27
hxxp://engine.bitmedianetwork.com/i.gif?e=eyJhdiI6Mzg1ODIsImF0Ijo1LCJidCI6MCwiY20iOjEyMTUyNywiY3QiOiJnYW1pbmciLCJjaCI6ODc4NSwiY3IiOjcwNTczMywiZGkiOiIwZGQzMWE2MTc1M2U0OWVjOTNhYzA0YjEwNTA4MDY3MCIsImRtIjoxLCJmYyI6NzMzNDgxLCJmbCI6MjU2MjQ0LCJpcCI6IjM3LjU3LjE2LjE4OSIsImt3IjoidGFnPWFudCxicm93c2VyPWllLGNsaWVudGRhdGE9dXRvcnJlbnR8My40LjIuMzc3NTR8MjE3LHBhZ2U9dG9ycmVudCxmbGFzaD1udWxsIiwibnciOjU2ODIsInBjIjowLjA1LCJwciI6NjI1NTcsInJ0IjozLCJzdCI6MzMwNDksInVrIjoidWUxLTkxZDY1YzZkZDJkMDQ0MzlhZjA3YjJmNTI3MDBiMmZiIiwidHMiOjE0MjI1MTgyMzY5NDQsImJmIjp0cnVlfQ&s=FZfQPorpd35SD3T4mBOrBjKrtOA	23.21.202.183
hxxp://bundles.bittorrent.com/onboarding/utorrent?url=http://bundles.bittorrent.com/	54.192.203.158
hxxp://clients1.google.com/ocsp/MEkwRzBFMEMwQTAJBgUrDgMCGgUABBTy4Gr5hYodjXCbSRkjeqm1Gih+ZAQUSt0GFhu89mi1dvWBtrtiGrpagS8CCG+vFYDQCqlf	173.194.113.198
hxxp://ui.skype.com/ui/0/7.1.0.105.550/en/getnewestversion?defaultbrowser=ie	157.56.114.104
hxxp://crl.geotrust.com/crls/secureca.crl
hxxp://apps.bittorrent.com/utorrent-onboarding/player.btapp	87.248.217.253
hxxp://cdn.bitmedianetwork.com/network/index.html?adt=1224&browser=ie&clientdata=utorrent\|3.4.2.37754\|217&page=torrent&site=33049	87.248.217.253
hxxp://ocsp.verisign.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSpuCE3aK3GivZPzGQJ6L5BRyZofwQUl9BrqCZwyKE/lB8ILcQ1m6ShHvICEGwkCSV07gf3g5QOsqmf+MY=	23.43.139.27
hxxp://cdn.bitmedianetwork.com/network/assets/jquery-1.11.2.js	87.248.217.253
hxxp://cdn.bitmedianetwork.com/network/index.html?adt=5&browser=ie&clientdata=utorrent\|3.4.2.37754\|217&page=torrent&site=33049	87.248.217.253
hxxp://mscrl.microsoft.com/pki/mscorp/crl/mswww(6).crl	68.232.34.200
hxxp://crl.verisign.com/pca3.crl	23.43.133.163
hxxp://search.vuze.com/favicon.ico	107.22.168.11
hxxp://crl.microsoft.com/pki/crl/products/WinPCA.crl	87.245.202.48
hxxp://ocsp.thawte.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBQwF4prw9S7mCbCEHD/yl6nWPkczAQUe1tFz6/Oy3r9MZIaarbzRutXSFACEE1fLDQIskwgzW1QfiRNyew=	23.43.139.27
hxxp://www.mininova.org/favicon.ico	80.94.76.5
hxxp://cdn.bitmedianetwork.com/network/base64.js	87.248.217.253
hxxp://ll.download3.utorrent.com/offers/spigot-yandex-en-20140708.exe	87.248.217.253
hxxp://apps.bittorrent.com/utorrent-onboarding/welcome-upsell.btapp	87.248.217.253
hxxp://www.google-analytics.com/r/collect?v=1&_v=j32&a=1085486899&t=pageview&_s=1&dl=http://cdn.bitmedianetwork.com/network/index-edge.html?tag=ant&adt=1224&browser=ie&clientdata=utorrent%7c3%2e4%2e2%2e37754%7c217&page=torrent&site=33049&ul=en-us&de=windows-1252&sd=24-bit&sr=1916x902&vp=908x34&je=1&_u=MEAAAEQAI~&jid=1877962788&cid=443073802.1422518236&tid=UA-54512734-1&_r=1&z=145420492	173.194.71.113
hxxp://engine.bitmedianetwork.com/ados?t=1422518236420&request={"Placements":[{"A":5682,"S":33049,"D":"bt_ap_div","AT":5,"Properties":{"tag":"ant","browser":"ie","clientdata":"utorrent\|3.4.2.37754\|217","page":"torrent","flash":"none"}}],"Keywords":"tag%3Dant%2C%20browser%3Die%2C%20clientdata%3Dutorrent%7C3.4.2.37754%7C217%2C%20page%3Dtorrent%2C%20flash%3Dnull","Referrer":"","IsAsync":false}	23.21.202.183
hxxp://crl.microsoft.com/pki/crl/products/MicCodSigPCA_08-31-2010.crl	87.245.202.48
hxxp://update.utorrent.com/installstats.php?v=71525078&h=029fjLDzoDze8QUv&hn=1&w=1DB10106&bu=0&pr=0&installresult=30079&exit=1369	67.215.246.203
hxxp://ocsp.verisign.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRIt2RJ89X++hEzqoBeQg8PymQ2UQQUANhaTCXBIuWLMe9tuvPMXynxDWECEGVSJuGyLhjhWQ8phawi51w=	23.43.139.27
hxxp://engine.bitmedianetwork.com/ados?t=1422518118439&request={"Placements":[{"A":5682,"S":33049,"D":"bt_ap_div","AT":5,"Properties":{"browser":"ie","clientdata":"utorrent\|3.4.2.37754\|217","page":"torrent","flash":"none"}}],"Keywords":"browser%3Die%2C%20clientdata%3Dutorrent%7C3.4.2.37754%7C217%2C%20page%3Dtorrent%2C%20flash%3Dnull","Referrer":"","IsAsync":false}	23.21.202.183
hxxp://cdn.ap.bittorrent.com/control/tags/ut.json
hxxp://bench.utorrent.com/e?i=32	107.22.184.83
hxxp://cdn.bitmedianetwork.com/network/jquery-1.11.1.min.js	87.248.217.253
hxxp://ocsp.geotrust.com/MEQwQjBAMD4wPDAJBgUrDgMCGgUABBSxtDkXkBa3l3lQEfFgudSiPNvt7gQUAPkqw0GRtsnCuD5V8sCXEROgByACAwI20A==	23.43.139.27
hxxp://ll.download3.utorrent.com/offers/spigot-yandex-20140709.bmp	87.248.217.253
hxxp://utclient.utorrent.com/pro/utorrent/index.html	54.230.200.188
hxxp://cdn3.opencandy.com/templates/7861/0/59317.png	213.155.152.200
hxxp://download.skype.com/0dce4e856bdf8239787df5c367298d54/partner/trackable/550/SkypeSetupFull.exe	213.155.152.227
hxxp://bench.utorrent.com/e?i=1005&e=eyJldmVudE5hbWUiOiJhcC5hZHRhZyIsImFjdGlvbiI6ImxvYWRlZCIsInRhZyI6ImFudCIsImFkdCI6IjEyMjQiLCJicm93c2VyIjoiaWUiLCJjbGllbnRkYXRhIjoidXRvcnJlbnQlN2MzJTJlNCUyZTIlMmUzNzc1NCU3YzIxNyIsInBhZ2UiOiJ0b3JyZW50Iiwic2l0ZSI6IjMzMDQ5In0=&callback=jQuery111106551887315392704_1422518236574&_=1422518236575	107.22.184.83
hxxp://engine.bitmedianetwork.com/i.gif?e=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&s=NV_Rq1UIcRm1tmntJXvFU3rJE9A	23.21.202.183
hxxp://static.ap.bittorrent.com/ados.js	104.16.13.8
hxxp://static.ap.bittorrent.com/Advertisers/7aea374f43834941bbb3fa6f934276d5.jpg	104.16.13.8
hxxp://apps.bittorrent.com/utorrent-onboarding/welcome-upsell.btapp?h=029fjLDzoDze8QUv&v=109417338&ol=en&ul=&tk=stable34&c=uTorrent	87.248.217.253
hxxp://crl.microsoft.com/pki/crl/products/MicrosoftTimeStampPCA.crl	87.245.202.48
hxxp://update.utorrent.li/updatestats.php?cl=uTorrent&v=109417338&h=029fjLDzoDze8QUv&k=&ip=8&dns=78&con=31&dl=296&error=&dlurl=http://ll.download3.utorrent.com/offers/spigot-yandex-en-20140708.exe&svp=4&pid=3896&sz=157480&bin=<NULL>toolbar&p1=192.168.150.2&m1=2&p2=192.168.50.98&m2=0&p3=37.57.16.254&m3=2&p4=80.93.125.145&m4=2&p5=80.93.127.206&m5=35&p6=80.81.192.221&m6=40&p7=87.248.217.253&m7=85	82.221.103.245
hxxp://cdn3.opencandy.com/p/1217/dc/du73i.exe	213.155.152.200
hxxp://www.skype.com/go/getskype-trackable550	157.56.198.10
hxxp://ocsp.verisign.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBQ/xkCfyHfJr7GQ6M658NRZ4SHo/AQUCPVR6Pv+PT1kNnxoz1t4qN+5xTcCEGC2x6sSmevembHfY1acIZk=	23.43.139.27
hxxp://mscrl.microsoft.com/pki/mscorp/crl/MSIT Machine Auth CA 2(1).crl	68.232.34.200
hxxp://cdn.bitmedianetwork.com/network/index-edge.html?tag=ant&adt=5&browser=ie&clientdata=utorrent\|3.4.2.37754\|217&page=torrent&site=33049	87.248.217.253
hxxp://ocsp.verisign.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBTSqZMG5M8TA9rdzkbCnNwuMAd5VgQUz5mp6nsm9EvJjo/X8AUm7+PSp50CEDZn4Vi1JMj/v+U4FyeG8eI=	23.43.139.27
hxxp://static.ap.bittorrent.com/Advertisers/380d449ac02e4f07b48c7c4b1438be6b.jpg	104.16.13.8
hxxp://engine.bitmedianetwork.com/ados?t=1422518236585&request={"Placements":[{"A":5682,"S":33049,"D":"bt_ap_div","AT":1224,"Properties":{"tag":"ant","browser":"ie","clientdata":"utorrent\|3.4.2.37754\|217","page":"torrent","flash":"none"}}],"Keywords":"tag%3Dant%2C%20browser%3Die%2C%20clientdata%3Dutorrent%7C3.4.2.37754%7C217%2C%20page%3Dtorrent%2C%20flash%3Dnull","Referrer":"","IsAsync":false}	23.21.202.183
hxxp://ocsp.thawte.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRsif7263KedmR2MLuYKv9+WQCtWAQU1A1lP3q9NMb+R+dMDcC98t4Vq3ECECVRccvD8Qb29B4D63fPT+k=	23.43.139.27
hxxp://bench.utorrent.com/e?i=1005&e=eyJldmVudE5hbWUiOiJhcC5hZHRhZyIsImFjdGlvbiI6ImxvYWRlZCIsInRhZyI6ImFudCIsImFkdCI6IjUiLCJicm93c2VyIjoiaWUiLCJjbGllbnRkYXRhIjoidXRvcnJlbnQlN2MzJTJlNCUyZTIlMmUzNzc1NCU3YzIxNyIsInBhZ2UiOiJ0b3JyZW50Iiwic2l0ZSI6IjMzMDQ5In0=&callback=jQuery1111034716094678426956_1422518236409&_=1422518236410	107.22.184.83
hxxp://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/disallowedcertstl.cab?0048f0cbba8d8ad1	87.245.202.24
hxxp://ocsp.verisign.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBS56bKHAoUD+Oyl+0LhPg9JxyQm4gQUf9Nlp8Ld7LvwMAnzQzn6Aq8zMTMCEFIA5aolVvwahu2WydRLM8c=	23.43.139.27
hxxp://update.utorrent.li/installstats.php?cl=uTorrent&v=109417338&h=029fjLDzoDze8QUv&w=1DB10106&bu=0&pr=25302&cmp=217&ocmp=217&showtorrentoffer&pid=3896&cau=1&toroffer=0&torofferid=<NULL>&view=win32	82.221.103.245
hxxp://cache.pack.google.com/edgedl/update2/1.3.25.11/GoogleUpdateSetup.exe	173.194.71.138
hxxp://bench.utorrent.com/e?i=29	107.22.184.83
hxxp://bench.utorrent.com/e?i=38	107.22.184.83
hxxp://ocsp.verisign.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSpuCE3aK3GivZPzGQJ6L5BRyZofwQUl9BrqCZwyKE/lB8ILcQ1m6ShHvICEAxNF3PJUX7iAOhAP2oGxcI=	23.43.139.27
hxxp://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab?26fd04a30eb9ab29	87.245.202.24
hxxp://cdn.bitmedianetwork.com/network/index-edge.html?tag=ant&adt=1224&browser=ie&clientdata=utorrent\|3.4.2.37754\|217&page=torrent&site=33049	87.248.217.253
hxxp://www.google-analytics.com/collect?v=1&_v=j32&a=1932983298&t=pageview&_s=1&dl=http://cdn.bitmedianetwork.com/network/index-edge.html?tag=ant&adt=5&browser=ie&clientdata=utorrent%7c3%2e4%2e2%2e37754%7c217&page=torrent&site=33049&ul=en-us&de=windows-1252&sd=24-bit&sr=1916x902&vp=300x250&je=1&_u=MACAAEQAI~&jid=&cid=443073802.1422518236&tid=UA-54512734-1&z=1630540202	173.194.71.113
hxxp://ocsp.verisign.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSpuCE3aK3GivZPzGQJ6L5BRyZofwQUl9BrqCZwyKE/lB8ILcQ1m6ShHvICEEES5jLHsYoCmjofrIA6uJ8=	23.43.139.27
hxxp://clients1.google.com/ocsp/MEkwRzBFMEMwQTAJBgUrDgMCGgUABBTy4Gr5hYodjXCbSRkjeqm1Gih+ZAQUSt0GFhu89mi1dvWBtrtiGrpagS8CCCUoyoQiZhRO	173.194.113.198
hxxp://ui.skype.com/ui/0/7.1.0.105.550/en/installed	157.56.114.104
ipv4only.arpa	192.0.0.171
d2eri39gz1mfk5.cloudfront.net	54.230.200.66
cdn.optimizely.com	23.64.228.211
bam.nr-data.net	50.31.164.166
ajax.googleapis.com	64.233.161.95
ocsp.digicert.com	93.184.220.29
www.public-trust.com	64.18.20.10
dvf30mz0l6vf0.cloudfront.net	54.239.168.92
b.config.skype.com	137.117.177.33
stats.g.doubleclick.net	64.233.165.154
gb.symcd.com	23.43.139.27
d1m8s5h8cyrbdy.cloudfront.net	54.230.200.249
router.utorrent.com	82.221.103.244
282332204.log.optimizely.com	23.21.219.232
d1mh11hmkkdpin.cloudfront.net	54.230.201.145
api.trap.skype.net	191.237.6.13
crl.omniroot.com	93.184.220.20
tools.google.com	173.194.113.198
sd.symcd.com	23.43.139.27
router.bittorrent.com	67.215.246.10
apps.skypeassets.com	23.64.143.48
d3jos6ckms8wtd.cloudfront.net	54.230.202.192
www.utorrent.com	95.140.224.171
beacon-2.newrelic.com	50.31.164.168
dnn506yrbagrg.cloudfront.net
gtssl2-ocsp.geotrust.com
bench.staging.utorrent.com
cdp1.public-trust.com
js-agent.newrelic.com
update.bittorrent.com
s3.amazonaws.com
g.symcd.com
soft.export.yandex.ru

IDS verdicts (Suricata alerts: Emerging Threats ET ruleset)

SURICATA UDPv4 invalid checksum
SURICATA IPv4 invalid checksum
ET P2P Bittorrent P2P Client User-Agent (uTorrent)
ET P2P BTWebClient UA uTorrent in use
ET P2P BitTorrent DHT ping request
ET P2P possible torrent download
ET MALWARE W32/OpenCandy Adware Checkin
ET POLICY Executable served from Amazon S3
ET POLICY User-Agent (NSIS_Inetc (Mozilla)) - Sometimes used by hostile installers
ET TROJAN VMProtect Packed Binary Inbound via HTTP - Likely Hostile
ET POLICY curl User-Agent Outbound
SURICATA STREAM SHUTDOWN RST invalid ack
SURICATA STREAM Packet with invalid ack
ET CHAT Skype User-Agent detected

Traffic

GET /utorrent-onboarding/welcome-upsell.btapp?h=029fjLDzoDze8QUv&v=109417338&ol=en&ul=&tk=stable34&c=uTorrent HTTP/1.1

Host: apps.bittorrent.com

User-Agent: BTWebClient/3420(37754)

Accept-Encoding: gzip

If-Modified-Since: Tue, 08 Oct 2013 00:54:05 GMT

Connection: Close


HTTP/1.1 304 Not Modified

Content-Type: binary/octet-stream

Age: 189097

Date: Thu, 29 Jan 2015 07:55:17 GMT

Connection: close

GET /network/index.html?adt=1224&browser=ie&clientdata=utorrent|3.4.2.37754|217&page=torrent&site=33049 HTTP/1.1

Accept: application/x-ms-application, image/jpeg, application/xaml xml, image/gif, image/pjpeg, application/x-ms-xbap, */*

Accept-Language: en-US

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/6.0)

Accept-Encoding: gzip, deflate

Host: cdn.bitmedianetwork.com

Connection: Keep-Alive



,..:.m,u.....H...@...D.....=#..$.......9.XKV.....!.5.v..|]..x}....Z.y~
.W;T.9B......,j.E.Ab^f.!.}I..a......S......mb =.!-.y&.y.9|.q.`....nW.~
....I..'..R6....n.g..K..y.e..31rL`....H..@.y./|..a...g.n..t.......]..b
..d&..0..]...[... ..x.b..aP3.z5...............5....m.o.d.....$;.5.%.g.
....EM.a...B..]r.V.b(Q.A\.e..$... ......W..!....W..F.7.........^'..6Wm
.l.k../.:dg*3....:QP.....h-.(_.\5...0.[..`...E].m.C.!..s.6s.....Y.....
...VG;.{............XG..`d2.N.nz\....9......R....~.<.%.....,.m..<
;....p.......x..A.EH.....y.dVs}.....=.:M...).....b...s.....!..q>...
G9N..?V.....mtb=.:..!.pC~L..I.].....|.9^..Oa$.:...]..c..|Q.k....N.8..x
H....K..........J$'f.......v.....JBuE..S..x....V.-....#w.....4V1...=..
..."p9.zA....k...y.aZ.B@%^\.@.....~..^i.m1..*Q.i%..q.!.z q...V)b5.j13x
.....LL....z.bp...Yh.\*:h...Q.......eqZe.c...='\...}..`8.8.>. z.*./
#}......K...qc..[D.h....V;...B. ..p....Tx .z......B.?.8......?.:~A.4 1
.s.....y@2......i.C.z!...y.=K.1..N..w. A-..#m..)}...(.F9.y..}.b"!.....
.M...R.....T.o ..SIQm..Ej..ux..V..I.1D.....`j.4.L.S....N7.........%z).
...:..D....Iz.....U..OD3@5iX/>N...Uu..J..A....f..).d....x0.h....~?.
..|.C..H_...".._~|..r.f...SX`.e....r.:)...4...c..sA`.._5&...C.nu..$...
..3*..;.W.....m4...=-.{\.o.........([.@{G.....G.Y._...?.m...].n>...
>.......Tx....9.u(.A%5.x].....kN...?....N..8.|IL.@"....*byfL..G....
...q*.........l.........N.......s8...Q....).fv....|~ZNa"m.g m .....L:.
......_.v.q}..<..0..... ..u....bZ......Zur........T.._.......G.v...
D..;MX.]....>$..^.y.......Z...:N...].E..&5.....@.p.}...n.....D.<<< skipped >>>

GET /?clientv=29&cltzone=120&language=en,en&method=get_offers&mstime=0.063&os=WIN6.1SP1-64&product_key=cb00343115ffdf69411419d8a9ceff1a&v=1.0&signature=bbf9d057c3553df2ac6a9cedf3e731bc HTTP/1.1

Host: api.opencandy.com

Accept: */*


HTTP/1.1 200 OK

Date: Thu, 29 Jan 2015 07:54:30 GMT

Server: Apache

X-Robots-Tag: noindex

Last-Modified: Thu, 29 Jan 2015 07:54:30 GMT

Cache-Control: no-store, no-cache, must-revalidate

Cache-Control: post-check=0, pre-check=0

Pragma: no-cache

Connection: close

Transfer-Encoding: chunked

Content-Type: text/xml
2000..<?xml version="1.0"?>.<get_offers>.    <installer
_md5s>.        <md5>0</md5>.    </installer_md5s>
.    <session_key>2efc2a3ef36e2f433a2f28e7651231b1</session_k
ey><product_name><![CDATA[BitTorrent]]></product_nam
e>.    <offer id="7861" instance_id="59317" language="en" advert
iser_id="883"> .        <name><![CDATA[Skype]]></nam
e>.        <exclusions tags="cat_chat,cat_phone,prn_skype"/>.
        <filters applies="" keys=""/>.        <package_url>
;hXXp://cdn3.opencandy.com/p/1217/dc/du73i.exe</package_url>.   
     <package_md5>a7de5b7d6efefa7474b0f99c054f60b2</package_m
d5>.        <package_filesize>160216</package_filesize>
.        <package_tool_version/>.<styles><image_source 
name="imgsrc">hXXp://cdn3.opencandy.com/templates/7861/0/59317.png&
lt;/image_source></styles>.        <banner_title><![
CDATA[Install Skype]]></banner_title>.        <banner_desc
ription><![CDATA[Recommended by BitTorrent]]></banner_desc
ription>.<panel>.                         <image name="bac
kground-on" imagesource="imgsrc" size="471,220" position="0,0" normali
magefrom="0,0"/>....<panel id="1" name="install" Type="Radio" de
fault="2" tabstopgroup="true" drawfocused="false">.....<radio id
="2" name="yes" position="368,160" size="100x20" drawfocused="false"/&
gt;.....<radio id="3" name="no" position="368,186" size="100x20<<< skipped >>>

GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBTSqZMG5M8TA9rdzkbCnNwuMAd5VgQUz5mp6nsm9EvJjo/X8AUm7+PSp50CEFcywVdOavgo4bT5Ors07Qg= HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: ocsp.verisign.com


HTTP/1.1 200 OK

Server: nginx/1.4.7

Content-Type: application/ocsp-response

Content-Length: 1725

content-transfer-encoding: binary

Cache-Control: max-age=367758, public, no-transform, must-revalidate

Last-Modified: Mon, 26 Jan 2015 14:04:54 GMT

Expires: Mon, 2 Feb 2015 14:04:54 GMT

Date: Thu, 29 Jan 2015 07:58:35 GMT

Connection: keep-alive

0..........0..... .....0......0...0......u\..3Oo?U...H.....O!..2015012
6140454Z0s0q0I0... ...................F....0.yV......{&.K......&......
.W2.WNj.(...:.4......20150126140454Z....20150202140454Z0...*.H........
.....h........ [..g}G]..1.. ..,..P`...Vw..X.`..k...i6.f........: .....
b...j. uV...b......@.....JV.....<....%-..K.&M:"z... ...:.).&.e...HL
.M..T8. .....VY..E|:.9`J.`j..s).S.f.5.cv......OtEK.....j.lbv.G|... ...
.Mi.........fl.|..X...-..M..&.p..j.Q...0.B_.'.....1.......0...0...0...
......./...nj0...}..i..0...*.H........0..1.0...U....US1.0...U....VeriS
ign, Inc.1.0...U....VeriSign Trust Network1;09..U...2Terms of use at h
ttps://VVV.verisign.com/rpa (c)101.0,..U...%VeriSign Class 3 Code Sign
ing 2010 CA0...141204000000Z..150304235959Z0..1.0...U....US1.0...U....
VeriSign, Inc.1.0...U....VeriSign Trust Network1:08..U...1VeriSign Cla
ss 3 Code Signing 2010 OCSP Responder0.."0...*.H.............0........
.4.4...........o....?..f.........I.!.b.L...L..U.........rM.,.....=..cR
4d.~*..k..x......=.WT.<.A2n1.qZyM.M..Q_...8....9....d.... ...'.....
....h..Z..I...(.b.jK..DO.ra..gb..j..A.(....mrzU.w.......Bv...l.:s..L..
..y.....u..n.)W......Y!....Q...,.i|.....:.Mu..DD1.........0...0...U...
.0.0....U. ...0..0....`.H...E....0..0(.. .........hXXps://VVV.verisign
.com/CPS0b.. .......0V0...VeriSign, Inc.0.....=VeriSign's CPS incorp. 
by reference liab. ltd. (c)97 VeriSign0...U.%..0... .......0...U......
..0... .....0......0"..U....0...0.1.0...U....TGV-B-24600...*.H........
......pjd....VpE.6.tO..@.....7.=.. ...........hi.......>....Q.?

<<< skipped >>>

GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBS56bKHAoUD+Oyl+0LhPg9JxyQm4gQUf9Nlp8Ld7LvwMAnzQzn6Aq8zMTMCEFIA5aolVvwahu2WydRLM8c= HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: ocsp.verisign.com


HTTP/1.1 200 OK

Server: nginx/1.4.7

Content-Type: application/ocsp-response

Content-Length: 1762

content-transfer-encoding: binary

Cache-Control: max-age=440601, public, no-transform, must-revalidate

Last-Modified: Tue, 27 Jan 2015 10:17:02 GMT

Expires: Tue, 3 Feb 2015 10:17:02 GMT

Date: Thu, 29 Jan 2015 07:54:59 GMT

Connection: keep-alive

0..........0..... .....0......0...0......;O}a.!..u...au..eUNp..2015012
7101702Z0s0q0I0... ...................B.>.I.$&.....e......0..C9...3
13..R...%V.......K3.....20150127101702Z....20150203101702Z0...*.H.....
........A8~....@.........C..l..2....#:....U.^.....`.DE.....!F....7..u.
.Q.r...!R......?......ajn...k.....K.(..ZmP..QK@........W.R..HP........
F..,...]%..zA.<..I.....K.?...Y.`.....\............:B.\......d....R.
e|..t.~.$...>3./m>.@.....ZM{?.....N......%b.{UUb>.t.q..4/....
0...0...0...........2...'U.BM...g.B0...*.H........0..1.0...U....US1.0.
..U....VeriSign, Inc.1.0...U....VeriSign Trust Network1:08..U...1(c) 2
006 VeriSign, Inc. - For authorized use only1E0C..U...<VeriSign Cla
ss 3 Public Primary Certification Authority - G50...141202000000Z..151
216235959Z0..1.0...U....US1.0...U....Symantec Corporation1.0...U....Sy
mantec Trust Network1?0=..U...6Symantec Class 3 PCA - G5 OCSP Responde
r Certificate 30.."0...*.H.............0...............2&..PL...,..2..
..:..tH...`JG.%..*...s.c%...?t..J..0.q....~..k@X.l.i....0..kk..h.9"1.5
?..s.....3[...u......]...R0..Z}....l..I.Y.....j\H.q...#.uw.4qz.#.J....
.@2$"..$l.B.......D.ye..(..2.........@...... ...."... E..0M,..b{.^..s'
....f.6.pr4.J........'j..........0...0...U.......0.0l..U. .e0c0a..`.H.
..E....0R0&.. .........hXXp://VVV.symauth.com/cps0(.. .......0...http:
//VVV.symauth.com/rpa0...U.%..0... .......0...U...........0... .....0.
.....0!..U....0...0.1.0...U....TGV-B-2760...U......;O}a.!..u...au..eUN
p0...U.#..0.....e......0..C9...3130...*.H.............(.&..Dgr.Ve.

<<< skipped >>>

GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBTSqZMG5M8TA9rdzkbCnNwuMAd5VgQUz5mp6nsm9EvJjo/X8AUm7+PSp50CEDZn4Vi1JMj/v+U4FyeG8eI= HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: ocsp.verisign.com


HTTP/1.1 200 OK

Server: nginx/1.4.7

Content-Type: application/ocsp-response

Content-Length: 1725

content-transfer-encoding: binary

Cache-Control: max-age=518506, public, no-transform, must-revalidate

Last-Modified: Wed, 28 Jan 2015 07:52:08 GMT

Expires: Wed, 4 Feb 2015 07:52:08 GMT

Date: Thu, 29 Jan 2015 07:54:59 GMT

Connection: keep-alive
0..........0..... .....0......0...0......u\..3Oo?U...H.....O!..2015012
8075208Z0s0q0I0... ...................F....0.yV......{&.K......&......
.6g.X.$....8.'.......20150128075208Z....20150204075208Z0...*.H........
.......Eb.3.t..jYk.j.*%..M..([....d..~(..).Z.YS-|~..=m....eD,..D.kV.br
...RQ..f)S..{..O%H...#........>...E..~7tHR.f&.l...u.=.$.....P......
.....l....*.................O?2..wq9....j...k...d.wR..c*._.~Q..?...o;.
.E$..b.8E.%].B./.H.Q.?Q.3O..i~H.......>.{..T...x..Q.(.....0...0...0
........../...nj0...}..i..0...*.H........0..1.0...U....US1.0...U....Ve
riSign, Inc.1.0...U....VeriSign Trust Network1;09..U...2Terms of use a
t hXXps://VVV.verisign.com/rpa (c)101.0,..U...%VeriSign Class 3 Code S
igning 2010 CA0...141204000000Z..150304235959Z0..1.0...U....US1.0...U.
...VeriSign, Inc.1.0...U....VeriSign Trust Network1:08..U...1VeriSign 
Class 3 Code Signing 2010 OCSP Responder0.."0...*.H.............0.....
....4.4...........o....?..f.........I.!.b.L...L..U.........rM.,.....=.
.cR4d.~*..k..x......=.WT.<.A2n1.qZyM.M..Q_...8....9....d.... ...'..
.......h..Z..I...(.b.jK..DO.ra..gb..j..A.(....mrzU.w.......Bv...l.:s..
L....y.....u..n.)W......Y!....Q...,.i|.....:.Mu..DD1.........0...0...U
....0.0....U. ...0..0....`.H...E....0..0(.. .........hXXps://VVV.veris
ign.com/CPS0b.. .......0V0...VeriSign, Inc.0.....=VeriSign's CPS incor
p. by reference liab. ltd. (c)97 VeriSign0...U.%..0... .......0...U...
.....0... .....0......0"..U....0...0.1.0...U....TGV-B-24600...*.H.....
.........pjd....VpE.6.tO..@.....7.=.. ...........hi.......>....<<< skipped >>>

POST /e?i=38 HTTP/1.1

Host: bench.utorrent.com

User-Agent: BTWebClient/3420(37754)

Accept-Encoding: gzip

Connection: Close

Content-Length: 178

{"h":"029fjLDzoDze8QUv","cl":"uTorrent","v":109417338,"l":"en","w":"6.1","cts":1422518236,"eventName":"PageRequested","adtype":0,"time":"09:57:16","date":"2015-01-29","geo":"ua"}
HTTP/1.1 200 OK

Content-Type: text/html

Date: Thu, 29 Jan 2015 07:57:16 GMT

Server: nginx

X-Powered-By: PHP/5.4.30

Content-Length: 21

Connection: Close
{"response_code":200}..

GET /Advertisers/380d449ac02e4f07b48c7c4b1438be6b.jpg HTTP/1.1

Accept: */*

Referer: hXXp://cdn.bitmedianetwork.com/network/index-edge.html?tag=ant&adt=5&browser=ie&clientdata=utorrent|3.4.2.37754|217&page=torrent&site=33049

Accept-Language: en-US

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/6.0)

Accept-Encoding: gzip, deflate

Host: static.ap.bittorrent.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Date: Thu, 29 Jan 2015 07:57:17 GMT

Content-Type: image/jpeg

Content-Length: 16371

Connection: keep-alive

Set-Cookie: __cfduid=d6e4b7e843fcda1eefdaf2949678cc61d1422518237; expires=Fri, 29-Jan-16 07:57:17 GMT; path=/; domain=.bittorrent.com; HttpOnly

x-amz-id-2: GAtCvGG c2dsJmTmuN5KGIWb76X0h9uDnTN5DXv1iaBmv  7TGdnSgt58y7mOYeSZtNNksyugmo=

x-amz-request-id: 2380CB2DBA3BB278

x-amz-version-id: 4R77Fm_UlAql_vYUyOW.HSWesKWAcZGn

Expires: Fri, 29 Jan 2016 13:57:17 GMT

Cache-Control: public, max-age=31557600

Last-Modified: Thu, 08 Jan 2015 03:29:28 GMT

ETag: "db80af2fd5814c20e74f4219aad0ba11"

CF-Cache-Status: HIT

Accept-Ranges: bytes

Server: cloudflare-nginx

CF-RAY: 1b03e0c6f08d0b02-WAW
......Exif..II*.................Ducky............./hXXp://ns.adobe.com
/xap/1.0/.<?xpacket begin="..." id="W5M0MpCehiHzreSzNTczkc9d"?> 
<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c01
4 79.156797, 2014/08/20-09:53:02        "> <rdf:RDF xmlns:rdf="h
ttp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rd
f:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http:
//ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/s
Type/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC 2014 Macintosh"
 xmpMM:InstanceID="xmp.iid:A8BFE3027E4811E49FDFA4A88CC6D857" xmpMM:Doc
umentID="xmp.did:EA76AD307E4811E49FDFA4A88CC6D857"> <xmpMM:Deriv
edFrom stRef:instanceID="xmp.iid:A8BFE3007E4811E49FDFA4A88CC6D857" stR
ef:documentID="xmp.did:A8BFE3017E4811E49FDFA4A88CC6D857"/> </rdf
:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end=
"r"?>....Adobe.d...............................................#%'%
#.//33//@@@@@@@@@@@@@@@......................&.....&0#....#0 .'''. 550
055@@?@@@@@@@@@@@@........,.."........................................
..........................................!..1AQ".aq2...B3......#.Rbr.
.s.....CS.4T.U...c.$D5EF.....................!1..AQaq"2.......B...R#C.
...........?...uZ1.[Q....OQ..^.._..?.o.@..U..4.....Q.U{.??..o...R...]D
...?.f....Uw..C..o...Q .C..\/....Rd..A...S?...X.A...L.'.^../.....i..o.
E.c...\G.w...;.........X.9A.'.....9...bdA.DmkJ..>..]..X.......<.
.u..A.l....$.,...1f......>W5......,..#x..m..q......U.._..:t.&%.<<< skipped >>>

HEAD /edgedl/update2/1.3.25.11/GoogleUpdateSetup.exe HTTP/1.1

Connection: Keep-Alive

Accept: */*

Accept-Encoding: identity

User-Agent: Microsoft BITS/7.5

X-Old-UID: cnt=0

X-Last-HR: 0x0

X-Last-HTTP-Status-Code: 0

X-Retry-Count: 0

Host: cache.pack.google.com


HTTP/1.1 302 Found

Date: Thu, 29 Jan 2015 07:56:43 GMT

Pragma: no-cache

Expires: Fri, 01 Jan 1990 00:00:00 GMT

Cache-Control: no-cache, must-revalidate

Location: hXXp://r2---sn-ugpva5o-3c2e.c.pack.google.com/edgedl/update2/1.3.25.11/GoogleUpdateSetup.exe?cms_redirect=yes&expire=1422532603&ip=37.57.16.189&ipbits=0&mm=28&ms=nvh&mt=1422518019&mv=u&pl=22&shardbypass=yes&sparams=expire,ip,ipbits,mm,ms,mv,pl,shardbypass&signature=1763764EEF826BF371ABA1E1BD8BA9F95646F68B.31B38869D12C6E8271821A57F03A6AACA83E6BE4&key=cms1

Content-Type: text/html; charset=UTF-8

Server: ClientMapServer

Content-Length: 601

X-XSS-Protection: 1; mode=block

X-Frame-Options: SAMEORIGIN

Alternate-Protocol: 80:quic,p=0.02
HTTP/1.1 302 Found..Date: Thu, 29 Jan 2015 07:56:43 GMT..Pragma: no-ca
che..Expires: Fri, 01 Jan 1990 00:00:00 GMT..Cache-Control: no-cache, 
must-revalidate..Location: hXXp://r2---sn-ugpva5o-3c2e.c.pack.google.c
om/edgedl/update2/1.3.25.11/GoogleUpdateSetup.exe?cms_redirect=yes&exp
ire=1422532603&ip=37.57.16.189&ipbits=0&mm=28&ms=nvh&mt=1422518019&mv=
u&pl=22&shardbypass=yes&sparams=expire,ip,ipbits,mm,ms,mv,pl,shardbypa
ss&signature=1763764EEF826BF371ABA1E1BD8BA9F95646F68B.31B38869D12C6E82
71821A57F03A6AACA83E6BE4&key=cms1..Content-Type: text/html; charset=UT
F-8..Server: ClientMapServer..Content-Length: 601..X-XSS-Protection: 1
; mode=block..X-Frame-Options: SAMEORIGIN..Alternate-Protocol: 80:quic
,p=0.02..

GET /click/dtype=stred/pid=12/cid=72435/path=dwnldr/p=spigot-62/cnt=0/dt=1/ct=1/rt=27/* HTTP/1.1

User-Agent: curl/1.1

Host: clck.yandex.ru

Accept: *.*


HTTP/1.1 200 Ok

Content-Type: image/gif

Cache-Control: no-cache

Content-Length: 43

GIF89a.............!.......,...........L..;..

POST /e?i=21 HTTP/1.1

Host: bench.utorrent.com

User-Agent: BTWebClient/3420(37754)

Accept-Encoding: gzip

Connection: Close

Content-Length: 246

{"h":"029fjLDzoDze8QUv","cl":"uTorrent","v":109417338,"l":"en","w":"6.1","cts":1422518067,"eventName":"silent_autoupdate","launched_target":0,"updated":0,"relocated":0,"versions": [], "action":"RunningElevated", "g_version":109417338, "no_sau":0}
HTTP/1.1 200 OK

Content-Type: text/html

Date: Thu, 29 Jan 2015 07:54:28 GMT

Server: nginx

X-Powered-By: PHP/5.4.30

Content-Length: 21

Connection: Close
{"response_code":200}..

GET /installstats.php?cl=uTorrent&v=109417338&h=029fjLDzoDze8QUv&w=1DB10106&bu=0&pr=25302&cmp=217&ocmp=217&showtorrentoffer&pid=3896&cau=1&toroffer=0&torofferid=<NULL>&view=win32 HTTP/1.1

Accept-Encoding: gzip

User-Agent: uTorrent(37754)/3.4.2

Host: update.utorrent.li

Cache-Control: no-cache


HTTP/1.1 200 OK

Server: nginx/1.4.7

Date: Thu, 29 Jan 2015 07:54:55 GMT

Content-Type: text/html

Transfer-Encoding: chunked

Connection: close

X-Powered-By: PHP/5.4.30

0..

GET /checkupdate.php?v=71525078&lv=0_0_&l=en&tk=main&k=&c=US&w=1DB10106&t=3&h=029fjLDzoDze8QUv&mts=31&nat_state=255&uts=0,0,0,0,0&utr=0,0,0,0,0&utpmtu=0,0&memstats=9334784,8&ssb=31&def_tor=1&at=-1&w64=1&ie=9.10.9200.16521&hn=1&xsm=3&xsss=1&xrsb=2&xrtsb=1&xseq=1 HTTP/1.1

Host: update.utorrent.com

User-Agent: BTWebClient/2210(25302)

Accept-Encoding: gzip

Connection: Close


HTTP/1.1 200 OK

Server: nginx/1.4.7

Date: Thu, 29 Jan 2015 07:54:13 GMT

Content-Type: text/html

Content-Length: 2051

Connection: close

X-Powered-By: PHP/5.4.30

Expires: Thu, 21 Jul 1980 00:00:00 GMT

Cache-Control: private

Last-Modified: Thu, 29 Jan 2015 07:54:13 GMT
d5:u.url126:hXXp://ll.download3.utorrent.com/3.4.2/utorrent.37754.stab
le34-OC_CC217.exe?au=1&hash=4cecde076e1a0d5ae95751f0e5e78ae21b7177d45:
u.sizi1677904e5:u.veri109417338e5:u.sha20:L...n..Z.WQ......qw.5:u.sig2
56:.....P......r.!...:8.................d...<d...w.Fz...iNm=.Z.....
..C..O...7e7/3<km.K......J....%..'..,.F`.. .-V.X]Z.f...?....l..@.M.
Y$....F..0U#7.rD....}.pd..A`.....6..P..\..'..|@Dbx#...K0....<.`....
.l.0t....v<6.^.>=...........x l.:.........|8..H..e....w...5:l.ur
l69:hXXp://ll.download3.utorrent.com/langpacks/langpack-3227801ut.win.
zip5:l.sizi1341373e5:l.veri3227801e5:l.sha20:Ig.]...;C./(Jt.9fl= 5:l.s
ig256:1!..%...h....K....7.x....7..@V9.X5~W...)|.8.0..>.9x..J.%...*.
..x......9......}.......CY.......}@...L..c_.=....f`g...R......K.V8Z^.B
{4.......(hT.KIv.z....G.-..... . ....3eu...h.H...V..=...M_....FP.P..).
/.L.....yQ....3..>..>...d...a..ES..N...U..f..&a........5:u.msg61
5:A new stable version of ..Torrent 3.4.2 (build 37754) is available. 
Would you like to download and install it?..New in this version:..- Be
tter UI Performance..- Stability improvements and various bug fixes..&
lt;a href="hXXp://forum.utorrent.com/topic/88607-340-stable/">Click
 here to view the complete list of changes in this release.</a>.
.By clicking "Yes", you acknowledge that you have read and agree to th
e <a href="hXXp://VVV.bittorrent.com/legal/eula">End User Licens
e Agreement</a> and <a href="hXXp://VVV.bittorrent.com/legal/
privacy">Privacy Policy</a>...This will also download the<<< skipped >>>

GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBQ/xkCfyHfJr7GQ6M658NRZ4SHo/AQUCPVR6Pv+PT1kNnxoz1t4qN+5xTcCEGC2x6sSmevembHfY1acIZk= HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: ocsp.verisign.com


HTTP/1.1 200 OK

Server: nginx/1.4.7

Content-Type: application/ocsp-response

Content-Length: 1697

content-transfer-encoding: binary

Cache-Control: max-age=368011, public, no-transform, must-revalidate

Last-Modified: Mon, 26 Jan 2015 14:11:56 GMT

Expires: Mon, 2 Feb 2015 14:11:56 GMT

Date: Thu, 29 Jan 2015 07:58:25 GMT

Connection: keep-alive
0..........0..... .....0......0...0...A0?1=0;..U...4VeriSign Class 3 C
ode Signing 2004 CA OCSP Responder..20150126141156Z0s0q0I0... ........
?.@..w.........Y.!......Q...==d6|h.[x....7..`..........cV.!.....201501
26141156Z....20150202141156Z0...*.H.................D.<.\.T.WC.5...
.L.2JOnW....E.&Ao=..f...|..N .H1.^Z[a~.f... SUXu.p....~....xU96>`2.
o..cw.Z:_:T..........h.u....>.3..U.F.8`..\d.........z.p...S.\..@UZb
S.&.x6...9..j.>....!..-bdI. .'.......... :V.....HL$.h9v...."K.9d...
F8...G.m.d#^..p..."..)N(..D&1.K....b....0...0...0..{.........[..I|....
.Zm..0...*.H........0..1.0...U....US1.0...U....VeriSign, Inc.1.0...U..
..VeriSign Trust Network1;09..U...2Terms of use at hXXps://VVV.verisig
n.com/rpa (c)041.0,..U...%VeriSign Class 3 Code Signing 2004 CA0...140
428000000Z..150729235959Z0?1=0;..U...4VeriSign Class 3 Code Signing 20
04 CA OCSP Responder0.."0...*.H.............0.........Y....h..@..>.
....%.-.....O...' y.........x..Gw.xF.....?..Z..u,.X.&..........3C..H.l
.....f..;]s!.\"v...|....].@.....K7m2...N......-S.I......5n...G7. ..W..
..n..*..-f?EY.......UN...r...........-_.%..,P;b.....)(.P.4...,.%....&l
t;..6.....[r^X.EV..S...5#'Y.. .TD...........0...0...U.......0.0...U.%.
.0... .......0...U...........0... .....0......0f..U. ._0]0[..`.H...E..
..0L0#.. .........hXXps://d.symcb.com/cps0%.. .......0...hXXps://d.sym
cb.com/rpa0!..U....0...0.1.0...U....TGV-B-1080...U......"...?....`>
q..i1o...0...U.#..0.....Q...==d6|h.[x....70...*.H.............B8@.$..w
o......E.....P52"b*@'C\.y.(...n....h.f..7f.....v...pb<...]..|..<<< skipped >>>

GET /favicon.ico HTTP/1.1

Host: VVV.mininova.org

User-Agent: BTWebClient/3420(37754)

Accept-Encoding: gzip

If-Modified-Since: Sat, 30 Oct 2010 22:57:22 GMT

Connection: Close


HTTP/1.1 304 Not Modified

Cache-control: public, max-age=25920000

Expires: Wed, 25 Nov 2015 07:55:18 GMT

Content-Type: image/x-icon

Accept-Ranges: bytes

ETag: "103585109"

Last-Modified: Sat, 30 Oct 2010 22:57:22 GMT

Connection: close

Date: Thu, 29 Jan 2015 07:55:18 GMT

GET /crls/secureca.crl HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: crl.geotrust.com


HTTP/1.1 200 OK

Server: Apache

ETag: "54979dd9d42443ce73079129c3b4f34b:1422517823"

Last-Modified: Thu, 29 Jan 2015 07:50:23 GMT

Date: Thu, 29 Jan 2015 07:55:25 GMT

Content-Length: 878

Connection: keep-alive

Content-Type: application/pkix-crl

0..j0...0...*.H........0N1.0...U....US1.0...U....Equifax1-0 ..U...$Equ
ifax Secure Certificate Authority..150129074300Z..150208074300Z0..R0..
..X...140427081922Z0....v...140618150003Z0........140429180917Z0......
..140709194633Z0........140416233935Z0........140521155053Z0.....)..14
0617185515Z0....Bf..120627171053Z0.....3..020515130611Z0.....#..140606
204021Z0........100729164439Z0........140606222139Z0....%...0205141811
57Z0....S...140423105438Z0........140725020038Z0........100729164732Z0
....M\..140430000442Z0.....-..140617185011Z0....uU..150118022133Z0....
V...140624123102Z0........120627171025Z0........100301134531Z0........
140618143256Z0........120627171017Z0.....>..140711125531Z0....[...1
00730213120Z0....j...140226123519Z0...*.H..............t.s...4.d..$...
...k..g.].{.%.>K...s..Q2f>V......'.C.R..Z..L.0..Ai.1X\ N.(......
s,..{K....'G...vERF....../.jZ......Y....... .f.HTTP/1.1 200 OK..Server
: Apache..ETag: "54979dd9d42443ce73079129c3b4f34b:1422517823"..Last-Mo
dified: Thu, 29 Jan 2015 07:50:23 GMT..Date: Thu, 29 Jan 2015 07:55:25
 GMT..Content-Length: 878..Connection: keep-alive..Content-Type: appli
cation/pkix-crl..0..j0...0...*.H........0N1.0...U....US1.0...U....Equi
fax1-0 ..U...$Equifax Secure Certificate Authority..150129074300Z..150
208074300Z0..R0....X...140427081922Z0....v...140618150003Z0........140
429180917Z0........140709194633Z0........140416233935Z0........1405211
55053Z0.....)..140617185515Z0....Bf..120627171053Z0.....3..02051513061
1Z0.....#..140606204021Z0........100729164439Z0........14060622213

<<< skipped >>>

POST /e?i=38 HTTP/1.1

Host: bench.utorrent.com

User-Agent: BTWebClient/3420(37754)

Accept-Encoding: gzip

Connection: Close

Content-Length: 178

{"h":"029fjLDzoDze8QUv","cl":"uTorrent","v":109417338,"l":"en","w":"6.1","cts":1422518116,"eventName":"PageRequested","time":"09:55:16","date":"2015-01-29","geo":"us","adtype":0}
HTTP/1.1 200 OK

Content-Type: text/html

Date: Thu, 29 Jan 2015 07:55:16 GMT

Server: nginx

X-Powered-By: PHP/5.4.30

Content-Length: 21

Connection: Close
{"response_code":200}..

GET /ui/0/7.1.0.105.550/en/installed HTTP/1.1

User-Agent: Skype. 7.1

Host: ui.skype.com

Cache-Control: no-cache


HTTP/1.1 200 OK

Date: Thu, 29 Jan 2015 07:56:08 GMT

Server: Apache

Last-Modified: Fri, 12 Dec 2014 16:30:08 GMT

Accept-Ranges: bytes

Content-Length: 0

X-Debug: Served from cache

Connection: close

Content-Type: text/plain; charset=utf-8

Content-Language: en

GET /offers/spigot-yandex-20140709.bmp HTTP/1.1

Host: ll.download3.utorrent.com

User-Agent: BTWebClient/3420(37754)

Accept-Encoding: gzip

Connection: Close


HTTP/1.1 200 OK

Server: nginx/1.4.7

Content-Type: image/x-ms-bmp

Cache-Control: max-age=3600

Accept-Ranges: bytes

Age: 1374

Date: Thu, 29 Jan 2015 07:54:31 GMT

Last-Modified: Wed, 09 Jul 2014 18:20:55 GMT

Expires: Thu, 29 Jan 2015 08:31:37 GMT

Content-Length: 24878

Connection: close

BM.a......6...(...k...:..... ......`..................................
......................................................................
......................................................................
......................................................................
......................................................................
...................................................................w..
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
..................................................................

<<< skipped >>>

GET /pki/mscorp/crl/mswww(6).crl HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: mscrl.microsoft.com


HTTP/1.1 200 OK

Accept-Ranges: bytes

Cache-Control: max-age=6480

Content-Type: application/pkix-crl

Date: Thu, 29 Jan 2015 07:56:06 GMT

Etag: "0a58795ee22d01:0"

Last-Modified: Sun, 28 Dec 2014 22:35:30 GMT

P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI"

Server: ECAcc (rtm/3531)

VTag: 279494216500000000

X-Cache: HIT

X-Powered-By: ASP.NET

Content-Length: 727
0...0.....0...*.H........0'1%0#..U....Microsoft Internet Authority..14
1228212529Z..150411214529Z.a0_0...U.#..0...*M..]4~...3..'.p~g..0... ..
...7.........0...U......Y0... .....7......150328213529Z0...*.H........
............A..u3.P .w#^..lt....W..K..|..V...).B.3;.....:......r.....m
. -...=z.,S.ve....U....x.b.`.....v.t..'._k...3z.BXIY.Ewy....Q. qw..._o
A>a.F.2ba.o.......1k"......!. .YT.{.?g~sja...."I......Jp.8.8a`."YU.
&!Us.X.O.Z^a...j....%....a.\..f.<zu....M....m...<..gZ.ZC^.o.(.&g
t;..J.f...*.T........0...lx......34..w..F..k.W.p.o'..TN..V/(....Fc.0.m
.S.$n.Fc....kh..6..&.....*1Q...........A....#.BKvhg....~{....#.,F.72..
.Ei..&.A:...b9.x.G..ti.2...F>e..n.K...t...0..X.@...t?.2%..k.......h
...av0...n]y.....V.....d...w..v.k..cgP...A....


GET /pki/mscorp/crl/MSIT Machine Auth CA 2(1).crl HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: mscrl.microsoft.com


HTTP/1.1 200 OK

Accept-Ranges: bytes

Cache-Control: max-age=4224

Content-Type: application/pkix-crl

Date: Thu, 29 Jan 2015 07:56:06 GMT

Etag: "139be5f1683bd01:0"

Last-Modified: Thu, 29 Jan 2015 02:11:51 GMT

P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI"

Server: ECAcc (rtm/353D)

VTag: 279626515400000000

X-Cache: HIT

X-Powered-By: ASP.NET

Content-Length: 69945
0...40.......0...*.H........0..1.0.....&...,d....com1.0.....&...,d....
microsoft1.0.....&...,d....corp1.0.....&...,d....redmond1.0...U....MSI
T Machine Auth CA 2..150129020121Z..150206022121Z0....0)..).......gm..
130612124252Z0.0...U.......0)....RY....y...130611103656Z0.0...U.......
0)....L!....y...130611103656Z0.0...U.......0)..'h@.....A...13061109550
8Z0.0...U.......0)..'h0d....A...130611095508Z0.0...U.......0)....c....
.yZ..130611095506Z0.0...U.......0)..........q...130611093440Z0.0...U..
.....0)..........q...130611093440Z0.0...U.......0)..........q...130611
093439Z0.0...U.......0)..a.......y8..130611061840Z0.0...U.......0)...0
......yv..130610145612Z0.0...U.......0).....A....yi..130610114044Z0.0.
..U.......0)..........y(..130610023302Z0.0...U.......0)..uFn.....x...1
30608225145Z0.0...U.......0)..uC3Y....x...130608001552Z0.0...U.......0
)..b.......m'..130607141639Z0.0...U.......0)..g.g.....P...130607141639
Z0.0...U.......0)..b..x....m&..130607141638Z0.0...U.......0)....*.....
T...130607141638Z0.0...U.......0)..q.#.....x...130607103718Z0.0...U...
....0)..d..3....w...130607020031Z0.0...U.......0)...._.....@...1306061
72528Z0.0...U.......0)..BH5.....tG..130606040613Z0.0...U.......0)..i9.
O....w...130605164108Z0.0...U.......0)..R.}9....]...130605124356Z0.0..
.U.......0)..OB......7...130605124356Z0.0...U.......0)..g.b.....w...13
0605115807Z0.0...U.......0)..b(1q....w...130604175935Z0.0...U.......0)
..b'......w...130604175935Z0.0...U.......0)..b..)....w...130604120448Z
0.0...U.......0)..^*P.....vG..130604120448Z0.0...U.......0)..DZ...<<< skipped >>>

GET /ados?t=1422518236420&request={"Placements":[{"A":5682,"S":33049,"D":"bt_ap_div","AT":5,"Properties":{"tag":"ant","browser":"ie","clientdata":"utorrent|3.4.2.37754|217","page":"torrent","flash":"none"}}],"Keywords":"tag%3Dant%2C%20browser%3Die%2C%20clientdata%3Dutorrent%7C3.4.2.37754%7C217%2C%20page%3Dtorrent%2C%20flash%3Dnull","Referrer":"","IsAsync":false} HTTP/1.1

Accept: */*

Referer: hXXp://cdn.bitmedianetwork.com/network/index-edge.html?tag=ant&adt=5&browser=ie&clientdata=utorrent|3.4.2.37754|217&page=torrent&site=33049

Accept-Language: en-US

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/6.0)

Accept-Encoding: gzip, deflate

Host: engine.bitmedianetwork.com

Connection: Keep-Alive

Cookie: azk=ue1-91d65c6dd2d04439af07b2f52700b2fb; azk-events=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


HTTP/1.1 200 OK

Access-Control-Allow-Headers: accept, origin, content-type, content-length

Access-Control-Allow-Methods: GET,PUT,POST,DELETE,OPTIONS

Access-Control-Allow-Origin: *

Content-Encoding: gzip

Content-Type: application/javascript

Date: Thu, 29 Jan 2015 07:57:16 GMT

ETag: "-1067899432"

P3P: CP="This is not a P3P policy! See hXXp://adzerk.com/ad-server-privacy for our privacy policy"

Server: nginx/1.1.19

Set-Cookie: azk=ue1-91d65c6dd2d04439af07b2f52700b2fb; Path=/; Expires=Fri, 29 Jan 2016 07:57:16 GMT

x-powered-by: adzerk bifrost/

x-served-by: engine-us-east-1a-09

transfer-encoding: chunked

Connection: keep-alive
320.............]......~....p...$M..I.N... 8...S.W....Q.U...v.x....[f6
Vj..M.4ow?.>....^.q...m..?1f3..F....,.........x.a...~.|.s..Omg..xK'
....a.O~..7'.x......c{F....t..5...~.x..8.:..................T.e.......
1..~a.6[ m..l..z.H.0.3.<(..P.*[.. ..(o-....P.W.Aye. ...S.j.bT.B.N..
6...d....|.Se.U.........C}.d.DM4y@.M....U...xb....l.o._...Wm.:b....R1.
...v~.Y..Z.....A....N{n..C.T..n.......Eu.......b.&....r...pK.K......24
K......Y..o......../...._T.,................8..~N..&..|{J..i- ...'....
F=.<R..R.`......C..........g..*.NH.g...JMt^.k...P.'....[......[..O'
6.7d.....4......./...... Ew{b8.../..C$....Z........K.mr....#z...n*....
.Q..@.i.)..u..}....X.0`..P.!.....JZ..Z..v\..;.A...n. ....e.7$d....\..p
1.J.I.s...T........00e.3.u([^.:<*G...-Oz2.jH..G.F..7.QP(7z..S..]m.e
.Pf.6.K.Q...ffT<...-ua9...7..6W.Tr..Z.e.-.OL~....10c0......L4v.A0^l
/..t....}30...u/....9G.e.9....4.M.m.G..,6b....A.&...x:u"......w.4.f...
&vY...'....."..DK.8..X.t2&....V....o0FF......xj;t..]...`>... ,..6t.
.......u....9.u~.....T..NhDv..2..S.;....G?......\.tW....?mV...........
W..<bBV.>.p.....W9sV...8.X.w.....E...z.9.x.Jz*.......y(....a.g..
.... ?....yl..H9..WN0s..!w......3j.r....0....9q....<.yw...]........
...o.u...m...b........Ao.1.z...X..I....h>...>.z...T./.....*..[.=
Z..'...z...1.M....]_.Cd.E..r.......N.k....e...H.U^.... ...[.$. p\....'
d....Jk.8.Wq.Y..).......`..........(..UIY(..u..z...x..k..8........n.8.
..$.<......*.ab..:-...........c.."....|."mwa.....u}Q...6.....1.z`y.
obtg..C.Y.a......Gu.EL..R=.........2.F.b..5...6.....r/..=@...=...1<<< skipped >>>

GET /i.gif?e=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&s=NV_Rq1UIcRm1tmntJXvFU3rJE9A HTTP/1.1

Accept: */*

Referer: hXXp://cdn.bitmedianetwork.com/network/index-edge.html?tag=ant&adt=1224&browser=ie&clientdata=utorrent|3.4.2.37754|217&page=torrent&site=33049

Accept-Language: en-US

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/6.0)

Accept-Encoding: gzip, deflate

Host: engine.bitmedianetwork.com

Connection: Keep-Alive

Cookie: azk=ue1-91d65c6dd2d04439af07b2f52700b2fb; azk-events=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
HTTP/1.1 200 OK

Access-Control-Allow-Headers: accept, origin, content-type, content-length

Access-Control-Allow-Methods: GET,PUT,POST,DELETE,OPTIONS

Access-Control-Allow-Origin: *

Content-Type: image/gif

Date: Thu, 29 Jan 2015 07:57:17 GMT

P3P: CP="This is not a P3P policy! See hXXp://adzerk.com/ad-server-privacy for our privacy policy"

Server: nginx/1.1.19

Set-Cookie: azk=ue1-91d65c6dd2d04439af07b2f52700b2fb; Path=/; Expires=Fri, 29 Jan 2016 07:57:17 GMT

x-powered-by: adzerk bifrost/

x-served-by: engine-us-east-1a-12

Content-Length: 43

Connection: keep-alive

GIF89a.............!.......,...........D..;HTTP/1.1 200 OK..Access-Con
trol-Allow-Headers: accept, origin, content-type, content-length..Acce
ss-Control-Allow-Methods: GET,PUT,POST,DELETE,OPTIONS..Access-Control-
Allow-Origin: *..Content-Type: image/gif..Date: Thu, 29 Jan 2015 07:57
:17 GMT..P3P: CP="This is not a P3P policy! See hXXp://adzerk.com/ad-s
erver-privacy for our privacy policy"..Server: nginx/1.1.19..Set-Cooki
e: azk=ue1-91d65c6dd2d04439af07b2f52700b2fb; Path=/; Expires=Fri, 29 J
an 2016 07:57:17 GMT..x-powered-by: adzerk bifrost/..x-served-by: engi
ne-us-east-1a-12..Content-Length: 43..Connection: keep-alive..GIF89a..
...........!.......,...........D..;..

POST /e?i=38 HTTP/1.1

Host: bench.utorrent.com

User-Agent: BTWebClient/3420(37754)

Accept-Encoding: gzip

Connection: Close

Content-Length: 178

{"h":"029fjLDzoDze8QUv","cl":"uTorrent","v":109417338,"l":"en","w":"6.1","cts":1422518236,"eventName":"PageRequested","adtype":5,"geo":"ua","time":"09:57:16","date":"2015-01-29"}
HTTP/1.1 200 OK

Content-Type: text/html

Date: Thu, 29 Jan 2015 07:57:16 GMT

Server: nginx

X-Powered-By: PHP/5.4.30

Content-Length: 21

Connection: Close
{"response_code":200}..

GET /ui/0/7.1.0.105.550/en/getnewestversion?defaultbrowser=ie HTTP/1.1

User-Agent: 7.1.0.105

Host: ui.skype.com

Cache-Control: no-cache


HTTP/1.1 200 OK

Date: Thu, 29 Jan 2015 07:55:41 GMT

Server: Apache

Cache-control: no-cache, must revalidate

Pragma: no-cache

Expires: 0

Set-Cookie: SC=CC=:CCY=:LC=en:TM=1422518141:TS=1422518141:TZ=:VER=0/7.1.0.105/550; expires=Fri, 29-Jan-16 07:55:41 GMT; path=/; domain=.skype.com;

Content-Length: 9

Connection: close

Content-Type: text/html; charset=utf-8

Content-Language: en

7.0.0.102..

GET /assets/torrents/The.Tunnel.2011.720p.x264-VODO.torrent HTTP/1.1

Host: vodo.net

User-Agent: BTWebClient/2210(25302)

Accept-Encoding: gzip

Connection: Close


HTTP/1.1 404 NOT FOUND

Date: Thu, 29 Jan 2015 07:54:12 GMT

Content-Type: text/html; charset=utf-8

Transfer-Encoding: chunked

Connection: close

Server: gunicorn/19.1.0

Vary: Cookie

Set-Cookie: sessionid=uc552d2pr9njk248ybjgnu40m05976y4; expires=Thu, 12-Feb-2015 07:54:12 GMT; httponly; Max-Age=1209600; Path=/

Content-Encoding: gzip
51a.............WYs.6.~.....R.......:.9..q.I.4....K...0.(Ym....E......
..~{`w.Jo.*...Hek19H.D...8...L0c..T....3.|rp ..2.UL.....E. .<..mb..
..8x..~.?Uu.,..@D%-Hd:~>...(...a<...[..c..EJ.M.*.R.9.L..r%....&l
t;;!S.ei.J........G..F"..B...\-.P,....."L.D@..X..6..B..-w.......:.v...
..J...T.j.6B................S&".......vsD2......u......1........kV...=
...VJ.y..sK.J......h^......X.;..K3..g..~..9..;?~r.O~}.@._...g.....z=.E
.w...v.r.s[.sX..b.q...3.....%k..!.\...1...h....9} ..8......5 ...-.....
n.........md..(O.PW.. .......1...@&...Y....."9C.O..........|...S..(.Sl
.o..)/....9yx..~.H..k...e91:CX...]S.E..f.r.W55.I.n..#I\.Ji...r.I...8..
.]...3CQ.X...5J........3.`...I_..-..V./._...NiW}...W}e.s.tN....5.`..K.
$.........|....1..@.`..k..R._..;!T....))e..d..~...l..d...%.&/\.....R$.
....."...7...R.d.....l..L..R....3...-.w.L~q;.4y...X....^..'E.n.M...M.o
.....m.....j4y...HeI......:.........K...5.....I....B....q7...n......g.
.u...R.......v$.kan......Yi^V.W]T>......cr.pt.t...r...g.nX.~5...n..
.S.......;.}..S.[...[Q..]..)k.......R.....%...z.WZ{...[..Lf.9"...eC.,5
v...se..........W/!.n.........~.u..Z.V..B..-b.H6V.'$.W....F.nm.49/....
ix...QW..(.Fz4:......x..E..j..]f.f*<;{|pkP.... .....W...7..\.....F.
.K....d.....1.o....L.9..u..Q8........VeJ..Rj..........&).\...g.g.D..y.
N...$.s.. .|si@.'...A.....>t..sG8.>>.......4.f...[..R.F......
...#......0..<<< skipped >>>

GET /installstats.php?cl=uTorrent&v=109417338&h=029fjLDzoDze8QUv&w=1DB10106&bu=0&pr=25302&cmp=217&ocmp=217&gettbinstallresult&pid=3896&cau=1&tbinstallresult=3&cbtoolbar=1&cbhomepage=1&error=0&msg=&tb=spigot-yandex&url=http://ll.download3.utorrent.com/offers/spigot-yandex-en-20140708.exe&prog=100&t=&view=win32 HTTP/1.1

Accept-Encoding: gzip

User-Agent: uTorrent(37754)/3.4.2

Host: update.utorrent.li

Cache-Control: no-cache


HTTP/1.1 200 OK

Server: nginx/1.4.7

Date: Thu, 29 Jan 2015 07:55:11 GMT

Content-Type: text/html

Transfer-Encoding: chunked

Connection: close

X-Powered-By: PHP/5.4.30

0..

POST /e?i=21 HTTP/1.1

Host: bench.utorrent.com

User-Agent: BTWebClient/3420(37754)

Accept-Encoding: gzip

Connection: Close

Content-Length: 367

{"h":"029fjLDzoDze8QUv","cl":"uTorrent","v":109417338,"l":"en","w":"6.1","cts":1422518067,"eventName":"silent_autoupdate","launched_target":0,"updated":0,"relocated":0,"versions": [{"path":"updates\\3.4.2_37754.exe","version":"109417338","blacklisted":"0","crash_count":"0","opt_out":"0","running":""}], "action":"Initial download", "g_version":109417338, "no_sau":0}
HTTP/1.1 200 OK

Content-Type: text/html

Date: Thu, 29 Jan 2015 07:54:28 GMT

Server: nginx

X-Powered-By: PHP/5.4.30

Content-Length: 21

Connection: Close
{"response_code":200}..

GET /checkupdate.php?v=71525078&qv=109417338&lv=0_0_&i=4&l=en&tk=main&k=&c=US&w=1DB10106&t=3&h=029fjLDzoDze8QUv&p_up=122&p_down=345296&p_ip=37.57.16.189&mts=31&mt=3264116&fg=5000&gnc=5&nat_state=255&pc=8&uts=0,0,0,0,0&utr=0,0,0,0,0&utpmtu=0,0&memstats=18669568,14&ssb=43&def_tor=1&at=-1&w64=1&ie=9.10.9200.16521&hn=1&xsm=3&xsss=13&xrsb=2&xrtsb=13&xseq=2 HTTP/1.1

Host: update.utorrent.com

User-Agent: BTWebClient/2210(25302)

Accept-Encoding: gzip

Connection: Close


HTTP/1.1 200 OK

Server: nginx/1.4.7

Date: Thu, 29 Jan 2015 07:54:24 GMT

Content-Type: text/html

Content-Length: 499

Connection: close

X-Powered-By: PHP/5.4.30

Expires: Thu, 21 Jul 1980 00:00:00 GMT

Cache-Control: private

Last-Modified: Thu, 29 Jan 2015 07:54:24 GMT

d10:adsEnabledi1e13:fblikeEnabledi0e14:twitterEnabledi0e13:adRefreshRa
tei360e9:ftEnabledi1e11:lrecEnabledi1e14:sendConversioni0e19:specialOf
ferEnabledi0e22:offerRolloutLabEnabledi1e17:trayOfferImageUrl51:http:/
/utclient.utorrent.com/images/mobile-icon.png18:trayOfferTargetUrl21:h
ttp://bit.ly/1hknGHI22:trayOfferHoverOverText23:uTorrent Android Clien
t17:trayOfferOneClicki0e10:searchUrls61:Infospace Search|hXXp://utorre
nt.inspsearch.com/search/web?q=1:k0:2:ip12:37.57.16.1892:tsi1422518064
e1:c2:uae..

GET /store/store.btapp?h=029fjLDzoDze8QUv&v=71525078&ol=en&ul=&tk=main&c=uTorrent HTTP/1.1

Host: apps.bittorrent.com

User-Agent: BTWebClient/2210(25302)

Accept-Encoding: gzip

Connection: Close


HTTP/1.1 403 Forbidden

x-amz-request-id: 348D48B536F6C0BD

x-amz-id-2: ecWBh2TydMHB0IjDrsQ7EDVQpaZisngf1CkaOq8qv/KKzumb MY9gWmA1G64abLZ

Content-Type: application/xml

Date: Thu, 29 Jan 2015 07:54:12 GMT

Server: AmazonS3

Connection: close
<?xml version="1.0" encoding="UTF-8"?>.<Error><Code>
AccessDenied</Code><Message>Access Denied</Message>&
lt;RequestId>348D48B536F6C0BD</RequestId><HostId>ecWBh2
TydMHB0IjDrsQ7EDVQpaZisngf1CkaOq8qv/KKzumb MY9gWmA1G64abLZ</HostId&
gt;</Error>..

GET /go/getskype-trackable550 HTTP/1.1

User-Agent: NSIS_Inetc (Mozilla)

Host: VVV.skype.com

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 302 Found

Date: Thu, 29 Jan 2015 07:54:57 GMT

Server: Apache

Location: hXXp://download.skype.com/0dce4e856bdf8239787df5c367298d54/partner/trackable/550/SkypeSetupFull.exe

Vary: User-Agent

X-Frame-Options: SAMEORIGIN

Cache-Control: max-age=0, private, no-store, no-cache, must-revalidate

Pragma: no-cache

Content-Length: 0

Keep-Alive: timeout=3

Connection: Keep-Alive

Content-Type: text/html; charset=utf-8

HTTP/1.1 302 Found..Date: Thu, 29 Jan 2015 07:54:57 GMT..Server: Apach
e..Location: hXXp://download.skype.com/0dce4e856bdf8239787df5c367298d5
4/partner/trackable/550/SkypeSetupFull.exe..Vary: User-Agent..X-Frame-
Options: SAMEORIGIN..Cache-Control: max-age=0, private, no-store, no-c
ache, must-revalidate..Pragma: no-cache..Content-Length: 0..Keep-Alive
: timeout=3..Connection: Keep-Alive..Content-Type: text/html; charset=
utf-8..

HEAD /edgedl/update2/1.3.25.11/GoogleUpdateSetup.exe?cms_redirect=yes&expire=1422532603&ip=37.57.16.189&ipbits=0&mm=28&ms=nvh&mt=1422518019&mv=u&pl=22&shardbypass=yes&sparams=expire,ip,ipbits,mm,ms,mv,pl,shardbypass&signature=1763764EEF826BF371ABA1E1BD8BA9F95646F68B.31B38869D12C6E8271821A57F03A6AACA83E6BE4&key=cms1 HTTP/1.1

Connection: Keep-Alive

Accept: */*

Accept-Encoding: identity

User-Agent: Microsoft BITS/7.5

X-Old-UID: cnt=0

X-Last-HR: 0x0

X-Last-HTTP-Status-Code: 0

X-Retry-Count: 0

Host: r2---sn-ugpva5o-3c2e.c.pack.google.com


HTTP/1.1 200 OK

Accept-Ranges: bytes

Content-Length: 880784

Content-Type: application/x-msdos-program

Etag: "4ba9e"

Server: downloads

Vary: *

X-Content-Type-Options: nosniff

X-Frame-Options: SAMEORIGIN

X-Xss-Protection: 1; mode=block

Date: Sun, 18 Jan 2015 07:51:53 GMT

Alternate-Protocol: 80:quic,p=0.02

Last-Modified: Fri, 21 Nov 2014 23:25:00 GMT

Connection: keep-alive

Alternate-Protocol: 80:quic,p=0.01

HTTP/1.1 200 OK..Accept-Ranges: bytes..Content-Length: 880784..Content
-Type: application/x-msdos-program..Etag: "4ba9e"..Server: downloads..
Vary: *..X-Content-Type-Options: nosniff..X-Frame-Options: SAMEORIGIN.
.X-Xss-Protection: 1; mode=block..Date: Sun, 18 Jan 2015 07:51:53 GMT.
.Alternate-Protocol: 80:quic,p=0.02..Last-Modified: Fri, 21 Nov 2014 2
3:25:00 GMT..Connection: keep-alive..Alternate-Protocol: 80:quic,p=0.0
1......

GET /edgedl/update2/1.3.25.11/GoogleUpdateSetup.exe?cms_redirect=yes&expire=1422532603&ip=37.57.16.189&ipbits=0&mm=28&ms=nvh&mt=1422518019&mv=u&pl=22&shardbypass=yes&sparams=expire,ip,ipbits,mm,ms,mv,pl,shardbypass&signature=1763764EEF826BF371ABA1E1BD8BA9F95646F68B.31B38869D12C6E8271821A57F03A6AACA83E6BE4&key=cms1 HTTP/1.1

Connection: Keep-Alive

Accept: */*

Accept-Encoding: identity

If-Unmodified-Since: Fri, 21 Nov 2014 23:25:00 GMT

Range: bytes=0-7353

User-Agent: Microsoft BITS/7.5

X-Old-UID: cnt=0

X-Last-HR: 0x0

X-Last-HTTP-Status-Code: 0

X-Retry-Count: 0

Host: r2---sn-ugpva5o-3c2e.c.pack.google.com


HTTP/1.1 206 Partial Content

Accept-Ranges: bytes

Content-Length: 7354

Content-Type: application/x-msdos-program

Etag: "4ba9e"

Server: downloads

Vary: *

X-Content-Type-Options: nosniff

X-Frame-Options: SAMEORIGIN

X-Xss-Protection: 1; mode=block

Date: Sun, 18 Jan 2015 07:51:53 GMT

Alternate-Protocol: 80:quic,p=0.02

Last-Modified: Fri, 21 Nov 2014 23:25:00 GMT

Content-Range: bytes 0-7353/880784

Connection: keep-alive

Alternate-Protocol: 80:quic,p=0.01
MZ......................@.............................................
..!..L.!This program cannot be run in DOS mode....$.......{..5?.|f?.|f
?.|f$..f0.|f$..fa.|f$..f..|f$..f9.|f6..f4.|f?.}fO.|f$..f>.|f?..f..|
f$..f>.|fRich?.|f........PE..L.....[T.....................^......)S
............@.................................]K....@.................
................D...x....`..$............8...8...p....................
......................@............................................tex
t............................... ..`.rdata...1.......2................
..@..@.data....,...0......................@....rsrc...$....`..........
............@..@.reloc.......p......."..............@..B..............
......................................................................
......................................................................
......................................................................
......................................................................
..................................................U..3..}.....j....j.j
.H........P..$.@..U...E...t,...t ...t..."t...Pt.h.@.......hW.....h....
..].U..V.u....u.....@...tAWP..(.@.....t%.u..u.....@......v.;.s.N....|O
.u.;.r.3..........#._^].U...E....@...j.P.u.....@...u.].P.u..E..{...YY]
.U..QSVW3...JA.S........E......<..u>.E....@S...Pj.V....@...t.P.E
.V.1.....YY..u..u....J....E.....u.3._^[.......H........J........P.R..U
..........3A.3..E.Vj.....d.@.WV......P....@.....l.@...t.h.@...R.......
....;u.r.hW...........P. b..Y;E.s.......P.u.S.0b..P.<....M.....<<< skipped >>>

GET /edgedl/update2/1.3.25.11/GoogleUpdateSetup.exe?cms_redirect=yes&expire=1422532603&ip=37.57.16.189&ipbits=0&mm=28&ms=nvh&mt=1422518019&mv=u&pl=22&shardbypass=yes&sparams=expire,ip,ipbits,mm,ms,mv,pl,shardbypass&signature=1763764EEF826BF371ABA1E1BD8BA9F95646F68B.31B38869D12C6E8271821A57F03A6AACA83E6BE4&key=cms1 HTTP/1.1

Connection: Keep-Alive

Accept: */*

Accept-Encoding: identity

If-Unmodified-Since: Fri, 21 Nov 2014 23:25:00 GMT

Range: bytes=7354-18142

User-Agent: Microsoft BITS/7.5

X-Old-UID: cnt=0

X-Last-HR: 0x0

X-Last-HTTP-Status-Code: 0

X-Retry-Count: 0

Host: r2---sn-ugpva5o-3c2e.c.pack.google.com


HTTP/1.1 206 Partial Content

Accept-Ranges: bytes

Content-Length: 10789

Content-Type: application/x-msdos-program

Etag: "4ba9e"

Server: downloads

Vary: *

X-Content-Type-Options: nosniff

X-Frame-Options: SAMEORIGIN

X-Xss-Protection: 1; mode=block

Date: Sun, 18 Jan 2015 07:51:53 GMT

Alternate-Protocol: 80:quic,p=0.02

Last-Modified: Fri, 21 Nov 2014 23:25:00 GMT

Content-Range: bytes 7354-18142/880784

Connection: keep-alive

Alternate-Protocol: 80:quic,p=0.01
.tcWVP.......YY;.tR...SSSSQ.G.PS..4.@.j..E....u.P.E..}....u.3.QQVP...P
.u.Qj.....x..M...;p....p......._..^[....hW.........U....u.h.@........}
..u...t.hW.......j.V....u..@..........x.;p....p.....6P.u.3.Pf....7.0..
......]...U..3.9E.t..u..QJ..YS.u....E.......E.[]...U..S....@.VW3...9}.
t.WWj..u.Wj....x...~1W.]...WPj..u.j.j.....;x....x...3.f..x..hW........
....._..^[]...U..2..}..t{.E.....urW..}.W.....Y..t_WP.g.....YY..tPS...V
.u.S................u.W....@.@PWSV.....P..........x..M...;X....X...3.^
f..X[.._]...hW....F....U..QSVW.}......X. .3...9E.}.hW........9E.t..u..
u......YY..... ..E.;.|...P.E..>...;..<xv..}..M...QWQ..XP......E.
.....x...;A....A..._3.^f..A[....U...}..}.hW..........3.A H..@. E...}..
E....7.....]......u....H...t.QP.....YY..x...;A....A...3.f..A.hW....I..
..U..QV....u......._W.}...u.hW....$......H.S.M. ......S;}.w...8Q...q.P
.;m.....u....q.P........_..x...;X....X.......^....V......W.P..V..:.|.;
.u.3...@.....2..j..v.........u..?....F..G..F.@P...VP.G.P.>........_
^.U..QV....u.......vW.}...u.hW....U......H. .S.M........;}.w....Q.M...
xQ...I...QP.al...}......I..<.W.u...QP..........x...;X....X...3.f...
_^....V......W.P..V..:.|.;.u.3...@.....5..j..v.........u..Y....F..G..F
..D..P...VP.G.P.U........_^.U...}..}.hW....}.....3.A H..@. E...}..E...
.......]...h.....Q....V..W.....H.;.~....x..~.WV.2....-.@.;.}&.......@~
.......... .....;.}......i..._^.U..Q.E.SV.0.N..^...W.]..P...j..u......
...u..u....E.;.}....D..PVP._.S.t....E..G.....F.......E._^..[..........
.9P.}...~.W.9j.RP.W._..u............V..W.....H.;.~....x..~.WV.2...<<< skipped >>>

GET /edgedl/update2/1.3.25.11/GoogleUpdateSetup.exe?cms_redirect=yes&expire=1422532603&ip=37.57.16.189&ipbits=0&mm=28&ms=nvh&mt=1422518019&mv=u&pl=22&shardbypass=yes&sparams=expire,ip,ipbits,mm,ms,mv,pl,shardbypass&signature=1763764EEF826BF371ABA1E1BD8BA9F95646F68B.31B38869D12C6E8271821A57F03A6AACA83E6BE4&key=cms1 HTTP/1.1

Connection: Keep-Alive

Accept: */*

Accept-Encoding: identity

If-Unmodified-Since: Fri, 21 Nov 2014 23:25:00 GMT

Range: bytes=18143-29613

User-Agent: Microsoft BITS/7.5

X-Old-UID: cnt=0

X-Last-HR: 0x0

X-Last-HTTP-Status-Code: 0

X-Retry-Count: 0

Host: r2---sn-ugpva5o-3c2e.c.pack.google.com


HTTP/1.1 206 Partial Content

Accept-Ranges: bytes

Content-Length: 11471

Content-Type: application/x-msdos-program

Etag: "4ba9e"

Server: downloads

Vary: *

X-Content-Type-Options: nosniff

X-Frame-Options: SAMEORIGIN

X-Xss-Protection: 1; mode=block

Date: Sun, 18 Jan 2015 07:51:53 GMT

Alternate-Protocol: 80:quic,p=0.02

Last-Modified: Fri, 21 Nov 2014 23:25:00 GMT

Content-Range: bytes 18143-29613/880784

Connection: keep-alive

Alternate-Protocol: 80:quic,p=0.01
."....I......E......M.PQ.....YY..e..E..E..}..u.P......(....E......E..-
................U...E....8csm.u*.x..u$.@.= ...t.=!...t.="...t.=.@..u..
 ...3.]...h3S@.....@.3....U..h,.@.....@...t.h..@.P....@...t..u...]...U
...u......Y.u.....@..j......Y.j......Y...V.......V.f...V.....V.....V..
...V.....V........^...U..V.u.3.....u.....t......;u.r.^]...U...=.\A..t.
h.\A......Y..t..u....\A.Y.....h..@.h..@......YY..uTVWhX`@.........@...
.@.Y..;.s.....t......;.r..=.\A.._^t.h.\A..O...Y..t.j.j.j....\A.3.].j h
`.A..>...j......Y.e..3.@9..>A.........>A..E...>A..}.......
..5.\A..5..@......]...th.5.\A......}..]..}.....}.;.rK.A...9.t.;.r>.
7..............5.\A......5.\A...9].u.9E.t..]..]..E....}..]....E...@..}
...@.s..E.....t....E.....E...@..}...@.s..E.....t....E.....E...... ....
}..u)...>A.....j......Y.u.......}..t.j......Y..P......U..j.j..u....
.....]...U..j.j..u.........].j.j.j..........j.j.j..z.........U........
u..2...Yh............U..3..M.;....@.t.@...r.3.]......@.]...U..........
3A.3..E.SV.u.WV.......3.Y......;...l...j......Y.........j......Y..u..=
.0A................6...h..@.h......>A.W................h......>A
.VSf..@A...(.@........u.h..@.SV..........t.3.PPPPP.....V.....@Y..<v
*V.......E\>A... .j...h..@. .SP..........u.h..@......VW..........u.
......VW..........u.h. ..hx.@.W.z.......^SSSSS.y...j...$.@...;.tF...tA
3...G.......f9.Gt.@=....r.S......P......P.]......YP......PV.. .@..M._^
3.[.u.....j..-...Y...t.j.. ...Y..u..=.0A..u.h.....%...h.........YY...U
..V...........2....N\.U...W9.t..........;.r.......;.s.9.t.3...t..P<<< skipped >>>

GET /edgedl/update2/1.3.25.11/GoogleUpdateSetup.exe?cms_redirect=yes&expire=1422532603&ip=37.57.16.189&ipbits=0&mm=28&ms=nvh&mt=1422518019&mv=u&pl=22&shardbypass=yes&sparams=expire,ip,ipbits,mm,ms,mv,pl,shardbypass&signature=1763764EEF826BF371ABA1E1BD8BA9F95646F68B.31B38869D12C6E8271821A57F03A6AACA83E6BE4&key=cms1 HTTP/1.1

Connection: Keep-Alive

Accept: */*

Accept-Encoding: identity

If-Unmodified-Since: Fri, 21 Nov 2014 23:25:00 GMT

Range: bytes=29614-40553

User-Agent: Microsoft BITS/7.5

X-Old-UID: cnt=0

X-Last-HR: 0x0

X-Last-HTTP-Status-Code: 0

X-Retry-Count: 0

Host: r2---sn-ugpva5o-3c2e.c.pack.google.com


HTTP/1.1 206 Partial Content

Accept-Ranges: bytes

Content-Length: 10940

Content-Type: application/x-msdos-program

Etag: "4ba9e"

Server: downloads

Vary: *

X-Content-Type-Options: nosniff

X-Frame-Options: SAMEORIGIN

X-Xss-Protection: 1; mode=block

Date: Sun, 18 Jan 2015 07:51:53 GMT

Alternate-Protocol: 80:quic,p=0.02

Last-Modified: Fri, 21 Nov 2014 23:25:00 GMT

Content-Range: bytes 29614-40553/880784

Connection: keep-alive

Alternate-Protocol: 80:quic,p=0.01
.................YY......;.tD9.u@......-....P................ .P......
..... .P.........................=@8A.t.9.....u.P............f...YY.~P
.E........88A.t...;.t.9.u.P.A...Y9_.t..G.;.t.9.u.P.*...Y....M.u.V.....
Y_^[]...U..W.}...t;.E...t4V.0;.t(W.8.j...Y..t.V......>.Yu....9A.t.V
.s...Y..^..3._].j.h..A..1....J.......:A..Fpt".~l.t..3....pl..u.j .G...
Y...D....j..E...Y.e...5.:A...lV.Y...YY.E..E............j..>...Y.u..
....SVW.T$..D$..L$.URPQQh..@.d.5......3A.3..D$.d.%.....D$0.X..L$,3..p.
...t;.T$4...t.;.v..4v.\.....H..{..u.h.....C............C........d.....
...._^[..L$..A..........t3.D$..H.3......U.h..p..p..p..>......].D$..
T$.........U.L$..).q..q..q(........]...UVWS..3.3.3.3.3...[_^].......j.
.?...3.3.3.3.3...U..SVWj.Rh..@.Q.v..._^[].U.l$.RQ.t$.........]....?...
..t.j..A...Y...:A..t.j.h...@j.........j..H...............U..WV.u..M..}
.......;.v.;.............r..=.[A..t.WV......;.^_u............u........
..r)...$.P.@...........r.......$.d.@..$.`.@...$...@..t.@...@...@.#....
..F..G..F.....G..........r....$.P.@..I.#......F.....G..........r....$.
P.@..#.................r....$.P.@..I.G.@.4.@.,.@.$.@...@...@...@...@..
D...D...D...D...D...D...D...D...D...D...D...D...D...D..............$.P
.@...`.@.h.@.t.@...@..E.^_........E.^_........F..G..E.^_...I......F..G
..F..G..E.^_....t1..|9.......u$.........r......$...@......$...@..I....
.......r.... ..$...@..$...@....@.$.@.L.@..F.#..G.............r......$.
..@..I..F.#..G..F.....G..........r......$...@...F.#..G..F..G..F.....G.
...........V........$...@..I...@...@...@...@...@...@...@...@..D...<<< skipped >>>

GET /edgedl/update2/1.3.25.11/GoogleUpdateSetup.exe?cms_redirect=yes&expire=1422532603&ip=37.57.16.189&ipbits=0&mm=28&ms=nvh&mt=1422518019&mv=u&pl=22&shardbypass=yes&sparams=expire,ip,ipbits,mm,ms,mv,pl,shardbypass&signature=1763764EEF826BF371ABA1E1BD8BA9F95646F68B.31B38869D12C6E8271821A57F03A6AACA83E6BE4&key=cms1 HTTP/1.1

Connection: Keep-Alive

Accept: */*

Accept-Encoding: identity

If-Unmodified-Since: Fri, 21 Nov 2014 23:25:00 GMT

Range: bytes=40554-56775

User-Agent: Microsoft BITS/7.5

X-Old-UID: cnt=0

X-Last-HR: 0x0

X-Last-HTTP-Status-Code: 0

X-Retry-Count: 0

Host: r2---sn-ugpva5o-3c2e.c.pack.google.com


HTTP/1.1 206 Partial Content

Accept-Ranges: bytes

Content-Length: 16222

Content-Type: application/x-msdos-program

Etag: "4ba9e"

Server: downloads

Vary: *

X-Content-Type-Options: nosniff

X-Frame-Options: SAMEORIGIN

X-Xss-Protection: 1; mode=block

Date: Sun, 18 Jan 2015 07:51:53 GMT

Alternate-Protocol: 80:quic,p=0.02

Last-Modified: Fri, 21 Nov 2014 23:25:00 GMT

Content-Range: bytes 40554-56775/880784

Connection: keep-alive

Alternate-Protocol: 80:quic,p=0.01
...........p...Q. .t.3.......t....3..........P.;Q.tu.....Q. .t.3......
.t......l.....p...Q. .t.3.......t......M.....p...Q. .t.3.......t......
......p...Q. .t.3.......t....3..........P.;Q.tu.....Q. .t.3.......t...
.........p...Q. .t.3.......t............p...Q. .t.3.......t...........
.p...Q. .t.3.......t....3..........P.;Q.tv..Q...p. .t.3.......t......]
.....p...Q. .t.3.......t......>.....p...Q. .t.3.......t............
p...Q. .t.3.......t....3..........P.;Q.tu.....Q. .t.3.......t.........
...p...Q. .t.3.......t............p...Q. .t.3.......t............p...Q
. .t.3.......t....3.....u....P.;Q.tu.....Q. .t.3.......t......O.....p.
..Q. .t.3.......t......0.....p...Q. .t.3.......t............p...Q. .t.
3.......t....3...........p...Q. .......3.......T.............c....M..u
....... .t.3.......D............A...V. .t.3.......D............A...V. 
.t.3.......D............A...N. .......3.......D........M..u....... .t.
3.......D....ud..A...V. .t.3.......D....uI..A...N....M..u....... .t.3.
......D....u ..A...N..x....E..M........g...3._^].....@...@.Q.@.:.@.J.@
...@...@...@...@.p.@.B.@.,.@.;.@...@...@...@...@.b.@.4.@...@.-.@...@..
.@...@...@.T.@.&.@...@./.@...@...@...@...U...M...t..E.........W.}.....
....f.._.E.]...U..V.u...u.3..d.}..u......j.^.0........K.}..t.9u.r...6P
.u..u............u.j..u..~.......}..t.9u.s..D...j"Y......j.X^]...U..3.
9E.v..M.f.9.t.@...;E.r.]...U..].t.....U..V.u...u.3..a.}..u......j.^.0.
[......H.}..t.9u.r.V.u..u............u.j..u..`.......}..t.9u.s......j"
Y......j.X^]...U...M....V.u.... .Wu. .f..t........... .t._^..y....<<< skipped >>>

GET /edgedl/update2/1.3.25.11/GoogleUpdateSetup.exe?cms_redirect=yes&expire=1422532603&ip=37.57.16.189&ipbits=0&mm=28&ms=nvh&mt=1422518019&mv=u&pl=22&shardbypass=yes&sparams=expire,ip,ipbits,mm,ms,mv,pl,shardbypass&signature=1763764EEF826BF371ABA1E1BD8BA9F95646F68B.31B38869D12C6E8271821A57F03A6AACA83E6BE4&key=cms1 HTTP/1.1

Connection: Keep-Alive

Accept: */*

Accept-Encoding: identity

If-Unmodified-Since: Fri, 21 Nov 2014 23:25:00 GMT

Range: bytes=56776-72711

User-Agent: Microsoft BITS/7.5

X-Old-UID: cnt=0

X-Last-HR: 0x0

X-Last-HTTP-Status-Code: 0

X-Retry-Count: 0

Host: r2---sn-ugpva5o-3c2e.c.pack.google.com


HTTP/1.1 206 Partial Content

Accept-Ranges: bytes

Content-Length: 15936

Content-Type: application/x-msdos-program

Etag: "4ba9e"

Server: downloads

Vary: *

X-Content-Type-Options: nosniff

X-Frame-Options: SAMEORIGIN

X-Xss-Protection: 1; mode=block

Date: Sun, 18 Jan 2015 07:51:53 GMT

Alternate-Protocol: 80:quic,p=0.02

Last-Modified: Fri, 21 Nov 2014 23:25:00 GMT

Content-Range: bytes 56776-72711/880784

Connection: keep-alive

Alternate-Protocol: 80:quic,p=0.01

 .I.t. .i.s. .m.o.s.t. .l.i.k.e.l.y. .t.h.e. .r.e.s.u.l.t. .o.f. .c.a.
l.l.i.n.g. .a.n. .M.S.I.L.-.c.o.m.p.i.l.e.d. .(./.c.l.r.). .f.u.n.c.t.
i.o.n. .f.r.o.m. .a. .n.a.t.i.v.e. .c.o.n.s.t.r.u.c.t.o.r. .o.r. .f.r.
o.m. .D.l.l.M.a.i.n...........R.6.0.3.2.....-. .n.o.t. .e.n.o.u.g.h. .
s.p.a.c.e. .f.o.r. .l.o.c.a.l.e. .i.n.f.o.r.m.a.t.i.o.n.........R.6.0.
3.1.....-. .A.t.t.e.m.p.t. .t.o. .i.n.i.t.i.a.l.i.z.e. .t.h.e. .C.R.T.
 .m.o.r.e. .t.h.a.n. .o.n.c.e.....T.h.i.s. .i.n.d.i.c.a.t.e.s. .a. .b.
u.g. .i.n. .y.o.u.r. .a.p.p.l.i.c.a.t.i.o.n...........R.6.0.3.0.....-.
 .C.R.T. .n.o.t. .i.n.i.t.i.a.l.i.z.e.d.........R.6.0.2.8.....-. .u.n.
a.b.l.e. .t.o. .i.n.i.t.i.a.l.i.z.e. .h.e.a.p.............R.6.0.2.7...
..-. .n.o.t. .e.n.o.u.g.h. .s.p.a.c.e. .f.o.r. .l.o.w.i.o. .i.n.i.t.i.
a.l.i.z.a.t.i.o.n.............R.6.0.2.6.....-. .n.o.t. .e.n.o.u.g.h. .
s.p.a.c.e. .f.o.r. .s.t.d.i.o. .i.n.i.t.i.a.l.i.z.a.t.i.o.n...........
..R.6.0.2.5.....-. .p.u.r.e. .v.i.r.t.u.a.l. .f.u.n.c.t.i.o.n. .c.a.l.
l...........R.6.0.2.4.....-. .n.o.t. .e.n.o.u.g.h. .s.p.a.c.e. .f.o.r.
 ._.o.n.e.x.i.t./.a.t.e.x.i.t. .t.a.b.l.e.............R.6.0.1.9.....-.
 .u.n.a.b.l.e. .t.o. .o.p.e.n. .c.o.n.s.o.l.e. .d.e.v.i.c.e...........
..R.6.0.1.8.....-. .u.n.e.x.p.e.c.t.e.d. .h.e.a.p. .e.r.r.o.r.........
....R.6.0.1.7.....-. .u.n.e.x.p.e.c.t.e.d. .m.u.l.t.i.t.h.r.e.a.d. .l.
o.c.k. .e.r.r.o.r.............R.6.0.1.6.....-. .n.o.t. .e.n.o.u.g.h. .
s.p.a.c.e. .f.o.r. .t.h.r.e.a.d. .d.a.t.a.......R.6.0.1.0.....-. .a.b.
o.r.t.(.). .h.a.s. .b.e.e.n. .c.a.l.l.e.d.........R.6.0.0.9.....-.

<<< skipped >>>

GET /edgedl/update2/1.3.25.11/GoogleUpdateSetup.exe?cms_redirect=yes&expire=1422532603&ip=37.57.16.189&ipbits=0&mm=28&ms=nvh&mt=1422518019&mv=u&pl=22&shardbypass=yes&sparams=expire,ip,ipbits,mm,ms,mv,pl,shardbypass&signature=1763764EEF826BF371ABA1E1BD8BA9F95646F68B.31B38869D12C6E8271821A57F03A6AACA83E6BE4&key=cms1 HTTP/1.1

Connection: Keep-Alive

Accept: */*

Accept-Encoding: identity

If-Unmodified-Since: Fri, 21 Nov 2014 23:25:00 GMT

Range: bytes=72712-108319

User-Agent: Microsoft BITS/7.5

X-Old-UID: cnt=0

X-Last-HR: 0x0

X-Last-HTTP-Status-Code: 0

X-Retry-Count: 0

Host: r2---sn-ugpva5o-3c2e.c.pack.google.com


HTTP/1.1 206 Partial Content

Accept-Ranges: bytes

Content-Length: 35608

Content-Type: application/x-msdos-program

Etag: "4ba9e"

Server: downloads

Vary: *

X-Content-Type-Options: nosniff

X-Frame-Options: SAMEORIGIN

X-Xss-Protection: 1; mode=block

Date: Sun, 18 Jan 2015 07:51:53 GMT

Alternate-Protocol: 80:quic,p=0.02

Last-Modified: Fri, 21 Nov 2014 23:25:00 GMT

Content-Range: bytes 72712-108319/880784

Connection: keep-alive

Alternate-Protocol: 80:quic,p=0.01

............H.......`.......x.........................................
..........f...........................0.......................H.......
`.......x...........................................).................
......e...............................................................
......................................................................
......................................(.......................8.......
................H.......................X.................7.....h.....
..x...................................................................
....................(.......8.......H.......X.......h.......x.........
......................................................................
.... ...(...!...8..."...H...$...X...%...h...&...x...'.......).......*.
......9.......>.......A.......E.......G.......I.......J.......K...(
...L...8...N...H...^...X...d...h.......x..............................
......................................................................
...............(h..}...............................(...............h..
.........<...............$...................h...........4.........
..........*...........................................$...............
....v...........T...F...............V............................... .
..............t...........$!..............."...............$..P.......
....P%..<............&..............((...............).............
..)............... ..l............,..|...........x...J............/...
...........x1...............2...............4..l............5.....

Connection: Keep-Alive

Accept: */*

Accept-Encoding: identity

If-Unmodified-Since: Fri, 21 Nov 2014 23:25:00 GMT

Range: bytes=108320-135451

User-Agent: Microsoft BITS/7.5

X-Old-UID: cnt=0

X-Last-HR: 0x0

X-Last-HTTP-Status-Code: 0

X-Retry-Count: 0

Host: r2---sn-ugpva5o-3c2e.c.pack.google.com


HTTP/1.1 206 Partial Content

Accept-Ranges: bytes

Content-Length: 27132

Content-Type: application/x-msdos-program

Etag: "4ba9e"

Server: downloads

Vary: *

X-Content-Type-Options: nosniff

X-Frame-Options: SAMEORIGIN

X-Xss-Protection: 1; mode=block

Date: Sun, 18 Jan 2015 07:51:53 GMT

Alternate-Protocol: 80:quic,p=0.02

Last-Modified: Fri, 21 Nov 2014 23:25:00 GMT

Content-Range: bytes 108320-135451/880784

Connection: keep-alive

Alternate-Protocol: 80:quic,p=0.01
.pK..d..1....N......6..h..N.......P;aQi.H.J... .......4&.?...?......L.
.......b3w..k."=. )%..M.&.. ...).,.I.....iC..!...'E...D.S.{FD.........
...-h[...mH6X.rA..Y.x.'\...&:...^..b......O%....r..8wV....{o.....0r:.E
..W.CE.f......:7..........0....@.g....@,.e.:..EE.......Wp.{U..*...-;7.
...1..BS....W..S.....{[.4.....i........;/lT._..Q.......4;..w..^.]J....
..\.wx\.....,.n....:-.LT.A...F4..@..&[j..j..J3>,.>.!.A.#.[.e3..,
...$. *.0....2.o.h....._6.2....hF..~^.z..5&..(...b...-...3'.e..<..1
.4".v.....U...z.9...s.t.~......_...PC...7...9..4.8.h.o&]....a.....O.(.
..I..h.....M...2.......Y.......0...D....5!.a.)g...}[.~Z.`..}........k.
3.<.B.>I.I\.......BO.....p!i3*pBA.c?y.%...z.@3..P..,....R....E@b
...D..G.2....n...#...Z....I../..3lg...@.*o"....8?,:QU..Q.c..3...@.#.n.
...iB.. ....I.%.......j1.C.._Q\...f..Y..'......Sj.L.,.{..'...e.t...l..
..)...3i...p....3...?A.....C..Z.....T.....l.\..C...-g%*<.a$. ......
.... #..p..'<m#%......... {....U.a. 5...ns..,.`....~S.3e...1.5.[.or
...>n/.b..........-.Pa.Q^..b/......p.....>.W.......N............
o<VH...m......U.|..u[...q.z@}5a.Y.t/(.r..Z./.[....p...S.'....:.....
M..bD.#p<.e.R..p.w.1a....O...s......2.5..X.[..|)..3=..r|.u......../
...E...`.h..e....."{....@..Q..>......2.K.......H...b. wt..Q.e...H..
.$>...@.y(.Q"9"?...A....G.m..1..#...T.`...qc...Pe..x..c.........C.#
.......6.....d=n.e....G...];l...00....md.C...w.aPj....DW...^.._6..K.cH
l.(vU..mn<.V....k....In..t...n..Et......o..4>~...R.-%.3s.......^
ir.......*..^H.........qU..4..,1..{,K.a....D.H,.nJ.......%&? m....<<< skipped >>>

GET /edgedl/update2/1.3.25.11/GoogleUpdateSetup.exe?cms_redirect=yes&expire=1422532603&ip=37.57.16.189&ipbits=0&mm=28&ms=nvh&mt=1422518019&mv=u&pl=22&shardbypass=yes&sparams=expire,ip,ipbits,mm,ms,mv,pl,shardbypass&signature=1763764EEF826BF371ABA1E1BD8BA9F95646F68B.31B38869D12C6E8271821A57F03A6AACA83E6BE4&key=cms1 HTTP/1.1

Connection: Keep-Alive

Accept: */*

Accept-Encoding: identity

If-Unmodified-Since: Fri, 21 Nov 2014 23:25:00 GMT

Range: bytes=135452-242698

User-Agent: Microsoft BITS/7.5

X-Old-UID: cnt=0

X-Last-HR: 0x0

X-Last-HTTP-Status-Code: 0

X-Retry-Count: 0

Host: r2---sn-ugpva5o-3c2e.c.pack.google.com


HTTP/1.1 206 Partial Content

Accept-Ranges: bytes

Content-Length: 107247

Content-Type: application/x-msdos-program

Etag: "4ba9e"

Server: downloads

Vary: *

X-Content-Type-Options: nosniff

X-Frame-Options: SAMEORIGIN

X-Xss-Protection: 1; mode=block

Date: Sun, 18 Jan 2015 07:51:53 GMT

Alternate-Protocol: 80:quic,p=0.02

Last-Modified: Fri, 21 Nov 2014 23:25:00 GMT

Content-Range: bytes 135452-242698/880784

Connection: keep-alive

Alternate-Protocol: 80:quic,p=0.01
.G...|.X.!......l.%.Du...A.Z..pD.:.8....J....8p..."U....].7.9w~. ... .
y=NB.kI$).zG.J."u....'..\..g:uIH..d.....H..#..Z.8.R..j.Gh.U..*E.......
.....].....;.............#?...mK%..K8..x...4...{...j4.8mJ......_......
..O......U...'......R....%s......&.n..#\=p.L..0. .."|7..9.i......Cf<
;....N...$)...u"K..HI.....K3...........kCN'C'Zc3.0.U...L...NI.a.tXrH..
...=..0-;...Z....z..A.%..!g...zA,..D}.f..D.)...|l......'u=.hm.%vW&..._
.U.|.l:..{!.....Bk..$..O./..C......O..QS.^."V.....t.$....Q..`O....^.sI
/a........NY9=.......Y...L..Y|R...\.,.T...8......|...~M.%WTT.V.h.2T.5,
..NL).M7.........Ay.o...H...,.....lc Y.mN.....g.U%..5.W..\..C.........
..2. ........d.F..t.........a..3%j.c.p.P.\G..U....&I.i...r.......uT..5
.. ...Dx...........e.....yd>..l.u..O.cPW......Rk.....d........$E~y.
.G............ak.>..x........K4.........4...WX.p.....%.....jx...F{.
.^...:v(...k.:..pt.5[.*.U?.B.5B%..7.&............z....(...W"Dr1.f.k..|
^r..0...t.....&....^=L....M.q.o .....9..&.......Z.^.......d.}........$
.G..sW...~.....T.s "..s:b4j..N..h.oR.(.9.BD .6........T.M.-...) S.-P..
.Tg.W...]H#v.....C....w-............#.....]^n. ...YD... ....@.= ..4qP.
..j..m.........F..g..E.E.o..p{`?.ur:7..;...~r............ ..c.<`..w
!......a......4..Y..L...1^.......A...g2.@....P..O...Q.i....%P.Vx"..Y..
C.=._^SDU...gi3.f.z...).z......=..5:v...c...h....{P.../...M\.W./.W....
u...\.h.$..*.p...qJ..f.$.......Nx........Ehj.G`. ..........%.X....l-ZA
Z||..?y7.z.5........_...SlJ$..S..Kf..Q.......=JWX.1.E.....].iq.(......
.sA<..=.U.@A.......%....r..x..Fz.c.H5.9k..2....6.... .T.T......<<< skipped >>>

GET /edgedl/update2/1.3.25.11/GoogleUpdateSetup.exe?cms_redirect=yes&expire=1422532603&ip=37.57.16.189&ipbits=0&mm=28&ms=nvh&mt=1422518019&mv=u&pl=22&shardbypass=yes&sparams=expire,ip,ipbits,mm,ms,mv,pl,shardbypass&signature=1763764EEF826BF371ABA1E1BD8BA9F95646F68B.31B38869D12C6E8271821A57F03A6AACA83E6BE4&key=cms1 HTTP/1.1

Connection: Keep-Alive

Accept: */*

Accept-Encoding: identity

If-Unmodified-Since: Fri, 21 Nov 2014 23:25:00 GMT

Range: bytes=242699-339015

User-Agent: Microsoft BITS/7.5

X-Old-UID: cnt=0

X-Last-HR: 0x0

X-Last-HTTP-Status-Code: 0

X-Retry-Count: 0

Host: r2---sn-ugpva5o-3c2e.c.pack.google.com


HTTP/1.1 206 Partial Content

Accept-Ranges: bytes

Content-Length: 96317

Content-Type: application/x-msdos-program

Etag: "4ba9e"

Server: downloads

Vary: *

X-Content-Type-Options: nosniff

X-Frame-Options: SAMEORIGIN

X-Xss-Protection: 1; mode=block

Date: Sun, 18 Jan 2015 07:51:53 GMT

Alternate-Protocol: 80:quic,p=0.02

Last-Modified: Fri, 21 Nov 2014 23:25:00 GMT

Content-Range: bytes 242699-339015/880784

Connection: keep-alive

Alternate-Protocol: 80:quic,p=0.01
.D.....W...'..&.:S6.#..Y4V..K..J.....2......".....$.../... ..#........
{..5......YuE.U.e.8...9.......f.......Ctw......[..i.p....~.>....hC.
........O/.....b"z...m."#L.t.....\..u_..?..4..1.#...GY...`.S....b.....
f...I.Ky.$Q~.3.4....q..PS......w!........M..{U...9>M..g...R..'.;..G
f..W.S.........2.a....Q.S..F.`............`4..N...,.....[...U.J.iP.'..
.T}.....Us.@.{.....j.....t8.,..=b..H....I.[b.......$../_..v..8........
2.3^Q.d.s...{&....51..9..y....w..p..#.I!..}..h....!..........V. ..VB..
..G......?...C6..%k6.7......%f.....q0...}...:.!.a.<..I.oZ.....3....
..1C....5....A...5nZ....>q.h../..d.E.}q..a.rmg.#..Mi...K.r..^be.?IF
...Q....lJ.y.$-......@A.J.|n...@..4..B.....h]j.`$;m.kz...n>......D.
nU.VRL22N.t....f....`.Om-.W.c..!%1.L.*.-b..R.).....;..f:......|\J.G.W.
..c...... .C. ....`.i..i".o..xn....d@.....tdQ.}...,cG).......K.<...
G.o.@.HT.F.@...n-..........O....(HSE.{..."n........p_~!w..5..%...:....
vo.....V{.{...3bCg..!Z$T.wA...-...;....c.;..:..L3..F...b.W.s]....|....
Ny.....F.%.0.bQ.:..C.&~3i..N..S"...IXt.>u.zOR....g.~mh.<..)3.qiG
y`jx........e.Gb...qV).rO..f:......\.._bqV...eH...br.9PQL/....&. ..?._
".|....: 7..U.D..;...o......Y=3eS7.......|\..........U<..fQ. .G....
Kk`..w.<...1.=2..A.....W&.JS.$X*....Fo...%.............t(#.;.Q.....
....R.....da;x....?.i.T&.......":..R....%J.0....%Q..|.m.;5.....9.=J.F.
?.......:....... ....i.B.K....Z..e.S..h..6.?.u=Q..$C{..K...l.1f...[.eh
.. ....g..9.x.8.........c...j..w....=.|...' u.s.j.AQ.So....V..L...,C..
m.....Z.k.K...D..u].J..SA.h......(..).........}L...5t........yDc..<<< skipped >>>

GET /edgedl/update2/1.3.25.11/GoogleUpdateSetup.exe?cms_redirect=yes&expire=1422532603&ip=37.57.16.189&ipbits=0&mm=28&ms=nvh&mt=1422518019&mv=u&pl=22&shardbypass=yes&sparams=expire,ip,ipbits,mm,ms,mv,pl,shardbypass&signature=1763764EEF826BF371ABA1E1BD8BA9F95646F68B.31B38869D12C6E8271821A57F03A6AACA83E6BE4&key=cms1 HTTP/1.1

Connection: Keep-Alive

Accept: */*

Accept-Encoding: identity

If-Unmodified-Since: Fri, 21 Nov 2014 23:25:00 GMT

Range: bytes=339016-471628

User-Agent: Microsoft BITS/7.5

X-Old-UID: cnt=0

X-Last-HR: 0x0

X-Last-HTTP-Status-Code: 0

X-Retry-Count: 0

Host: r2---sn-ugpva5o-3c2e.c.pack.google.com


HTTP/1.1 206 Partial Content

Accept-Ranges: bytes

Content-Length: 132613

Content-Type: application/x-msdos-program

Etag: "4ba9e"

Server: downloads

Vary: *

X-Content-Type-Options: nosniff

X-Frame-Options: SAMEORIGIN

X-Xss-Protection: 1; mode=block

Date: Sun, 18 Jan 2015 07:51:53 GMT

Alternate-Protocol: 80:quic,p=0.02

Last-Modified: Fri, 21 Nov 2014 23:25:00 GMT

Content-Range: bytes 339016-471628/880784

Connection: keep-alive

Alternate-Protocol: 80:quic,p=0.01
(......Ua....&O..W.4...%.s..,...&W....?..f..X.7.....v,....d..a\\?'...o
"...q...PD.T..u.h*.F.....<.nf.)..B.S..E...5..........|...B.... ... 
.:..Rw.=...T...Y.....v.qK..L..Y`......(4.Y9..RZT.....cT.Tf...kFX.rC...
.....U...'...B.s.a.0..uM..K@.YF.a.....m.......8.iY....kb..m...d=}...'.
..p5d..........4v}H..b'.....K.ec....Px...{.........!.\...w........d.&.
Db.l].............T6..!Y...1.y...xZ,...9O..FH..B(.=......E...a.9={!..1
".2...*....6Q......c..[....V.o.....(.......}.j...r.."...Q.. .U.rfr.. .
..<...vqT...gGf..^..l..8_t......6j` .K_Y~.E....4.. .93\.y.T...6...v
....X......c...%ni.......zW1.....2.;u.W...;.....J....l.h.3.cK...sc..&g
t;x.a..............I...#....6..........<...`n{..w*.....!."8]..[EvC3
..S...X...>.....3....P.*..m.b.........[.].>o....O.....V.!.iQ".SL
.......ga...rP.r.5..?t.d]...>...q!xG.%^......5......#!j.'..!].....o
g.0......W3aZ...N.&...fu....'O..^7..........R...A...U...~.....H.G.Y. I
.4...b....<......>#.7....N....-NC..f..s.?wy..V.<k..XV.J};...E
W~..,Y..\l78....Al.....50.......h`..Z|..=..r..3."?b-...p..)...u.[....h
..$...I*..7$....1..R....K....ki.......oX.^....9.kM..I.2%@...44J.^e*LSN
..K...T.C#x73;`.C.`.&<m.).u.S..#.[.[.2.......t..M|.G.......U.W..$I.
D~.w.`.!....?.T.~bO....U...E....W.>s.......=e.p.......K...>.u.v.
.D%.....E.uXL0.w..qw....,...L.3.R.4y....OX0....T..2(.....-"x6.G.p..}..
.l.Si7V.ht. ..V[.QcD .>.f.q....n........ .......w.7...!~%......l...
.W...C...v.O8:..Tu@..I.`.rlf.k.L3.nM...}.@..U*.X.....gB.;...|.!.x.x:2.
..C.L.....X2'_.....*pY.Q.cIR.}......%..x.b....v.......J.(..D..Tj.R<<< skipped >>>

GET /p/1217/dc/du73i.exe HTTP/1.1

Host: cdn3.opencandy.com

Accept: */*


HTTP/1.1 200 OK

x-amz-id-2: nKGrM0Ha1JllzypvW8Kv85IlqH0yU5eazeoEgoZoLOHy2XC2apVQOP/n19yDi5zktwwfGKK2bZs=

x-amz-request-id: 12824192AFF53745

Last-Modified: Thu, 08 Jan 2015 18:20:19 GMT

ETag: "a7de5b7d6efefa7474b0f99c054f60b2"

Accept-Ranges: bytes

Content-Type: binary/octet-stream

Content-Length: 160216

Server: AmazonS3

Cache-Control: max-age=111

Date: Thu, 29 Jan 2015 07:54:55 GMT

Connection: keep-alive

MZ......................@.............................................
..!..L.!This program cannot be run in DOS mode....$.......{...?...?...
?...6.f.*...?.......6.`.#...6...0...6.q.m...6.v.....!.a.>...6.d.>
;...Rich?...........PE..L...h..T.................@... ......pT... ...`
....@.................................).....@.........................
.........t.......`...............T......dw............................
..........................................................UPX0........
............................UPX1.....@... ...8..................@....r
src.... ...`.......<..............@................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
................3.07.UPX!.....0..Kz...;..p4......&.......SW...x.S....0
l.....u....h...o()|.....Y3.9=&.uHVj($.Ai.....Y;.t0..H...~....].4..WW.~
... .3;...4......F$..3..5.^.p....m._[.j........o...u....3..E....,...~$
.t.. .FK.....t.P...Y....v..M...E....<HV.................W..........
.%h...Q...e.h.........3..]................9_.vZ;w....D.G........9.t..E
.=-."....t...P........S#w...}.. ..F0r.(;.t.....k._......v6..O..w....\.
"...h.oH.;m.; ....r............N.........>.....hW...M..j...L...Gu..
e..N....B....j....f.....#'(..n........}.C.;.v#.s.......v..U...t..B

<<< skipped >>>

GET /yandex-pack/downloader/info.rss HTTP/1.1

Accept: */*

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: downloader.yandex.net

Connection: Keep-Alive


HTTP/1.1 302 Moved Temporarily

Server: nginx/1.6.2

Date: Thu, 29 Jan 2015 07:54:57 GMT

Transfer-Encoding: chunked

Connection: keep-alive

Keep-Alive: timeout=5

Location: hXXp://cache-kiev07.cdn.yandex.net/downloader.yandex.net/yandex-pack/downloader/info.rss

Expires: Thu, 01 Jan 1970 00:00:01 GMT

Cache-Control: no-cache

Cache-Control: no-store,no-cache,must-revalidate

Pragma: no-cache

0..HTTP/1.1 302 Moved Temporarily..Server: nginx/1.6.2..Date: Thu, 29 
Jan 2015 07:54:57 GMT..Transfer-Encoding: chunked..Connection: keep-al
ive..Keep-Alive: timeout=5..Location: hXXp://cache-kiev07.cdn.yandex.n
et/downloader.yandex.net/yandex-pack/downloader/info.rss..Expires: Thu
, 01 Jan 1970 00:00:01 GMT..Cache-Control: no-cache..Cache-Control: no
-store,no-cache,must-revalidate..Pragma: no-cache..0......

GET /yandex-pack/spigot-62/YandexSearch.exe HTTP/1.1

Accept: */*

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: downloader.yandex.net

Connection: Keep-Alive


HTTP/1.1 302 Moved Temporarily

Server: nginx/1.6.2

Date: Thu, 29 Jan 2015 07:54:57 GMT

Transfer-Encoding: chunked

Connection: keep-alive

Keep-Alive: timeout=5

Location: hXXp://cache-kiev07.cdn.yandex.net/downloader.yandex.net/yandex-pack/spigot-62/YandexSearch.exe

Expires: Thu, 01 Jan 1970 00:00:01 GMT

Cache-Control: no-cache

Cache-Control: no-store,no-cache,must-revalidate

Pragma: no-cache

0..HTTP/1.1 302 Moved Temporarily..Server: nginx/1.6.2..Date: Thu, 29 
Jan 2015 07:54:57 GMT..Transfer-Encoding: chunked..Connection: keep-al
ive..Keep-Alive: timeout=5..Location: hXXp://cache-kiev07.cdn.yandex.n
et/downloader.yandex.net/yandex-pack/spigot-62/YandexSearch.exe..Expir
es: Thu, 01 Jan 1970 00:00:01 GMT..Cache-Control: no-cache..Cache-Cont
rol: no-store,no-cache,must-revalidate..Pragma: no-cache..0..

POST /e?i=38 HTTP/1.1

Host: bench.utorrent.com

User-Agent: BTWebClient/3420(37754)

Accept-Encoding: gzip

Connection: Close

Content-Length: 118

{"h":"029fjLDzoDze8QUv","cl":"uTorrent","v":109417338,"l":"en","w":"6.1","cts":1422518116,"eventName":"Ads","FT":"on"}
HTTP/1.1 200 OK

Content-Type: text/html

Date: Thu, 29 Jan 2015 07:55:17 GMT

Server: nginx

X-Powered-By: PHP/5.4.30

Content-Length: 21

Connection: Close
{"response_code":200}..

GET /msdownload/update/v3/static/trustedr/en/disallowedcertstl.cab?0048f0cbba8d8ad1 HTTP/1.1

Connection: Keep-Alive

Accept: */*

If-Modified-Since: Thu, 05 Dec 2013 22:47:50 GMT

If-None-Match: "0af536cf2ce1:0"

User-Agent: Microsoft-CryptoAPI/6.1

Host: ctldl.windowsupdate.com


HTTP/1.1 200 OK

Cache-Control: max-age=86400

Content-Type: application/octet-stream

Last-Modified: Thu, 03 Jul 2014 23:34:12 GMT

Accept-Ranges: bytes

ETag: "0b2464b1797cf1:0"

Server: Microsoft-IIS/7.5

X-Powered-By: ASP.NET

Content-Length: 6408

Date: Thu, 29 Jan 2015 07:54:23 GMT

Connection: keep-alive
MSCF............,...................O.......'#.........D.z .disallowed
cert.stl....2..'#CK...8T...g........g.k..".....mlI."d..m...P$"....e.J.
.......z.....\..........9g.9....~.........Q.Q......Q..DL.8.C.PS.K0.!P.
0........#.DY.8.....V.....$.C....a.0...........`......;.S.....0#...m..
. ..`0...?.!vR?.....d....`......_@..}....$...i..OR'..$....K..'Z....o.g
..*.Vc.....[nY e./.EJ...B.Y.......Ag......!....9......u..!..1Yy.......
r...Ss^@...M.Dtl\....i.k....3...B.Z.:.p.N....*......x,...ah/..].[....G
B..T..$A....SY..t.E5R..R...9!....*.*68V....1... ...Q{...".Op@L.2M...1;
xd{.C.u?..e.U.=f.nx.........y.G..0.......\L .'.^....$......N=..m...Ujr
Zs...J.I.C....;......q_..e......?.T..2..bw....E.L.{...S...~.<......
...-.Q..|.l. .1..6r....[}!J..,...naPk.U.... ..{@LH..W....>.Sq...8.5
.,.z..0.jL.S..........]...yW_...Y.1..h.7...9{.....I......g.Y.,1...i8n.
6..........4.]...........=........^..n.K7...c.g).Z. .0..$7.ys.p...B.5.
].f...|(3!.|..P...j..^..j....#(...@...As..*.O..i..u....9..S.Y.n..HXW..
.F ..i...:.......!.] r......D..*ld.b.>>:Pp.....5:1 o=..5.'..4...
....hO....{.V.rx..V...%.}..u...6Wv-..".iV.b..B0.Q..,...E.Dy...x..5....
?Z.$L..1.....4...=.....g!....%..:..c..j..v~....._R.6.......;.#.Y*p..J.
4.#'..Vo...g^K...J....._.^..u...)....&/.....q....o......4.....S...,q..
...p.8IIe.....d|.3{)...M.0.X...4.."..P.......Hk.... ]!.!... ..#.x..<
;..X.........'.E(<b[.......#.. ....XiLl|..=.....&P.@H.J.oo...a...x 
B....l.....@.P......!8..@...q2..;.......mm....>~............j%..>
;.X.,V...J...C ....*..Z.8- RKGW...0./Z.__..)7g_'{.......pr......;.<<< skipped >>>

GET /msdownload/update/v3/static/trustedr/en/authrootstl.cab?26fd04a30eb9ab29 HTTP/1.1

Connection: Keep-Alive

Accept: */*

If-Modified-Since: Wed, 12 Mar 2014 20:20:10 GMT

If-None-Match: "0b96c77303ecf1:0"

User-Agent: Microsoft-CryptoAPI/6.1

Host: ctldl.windowsupdate.com


HTTP/1.1 200 OK

Cache-Control: max-age=604800

Content-Type: application/octet-stream

Last-Modified: Fri, 12 Sep 2014 18:47:05 GMT

Accept-Ranges: bytes

ETag: "805a83f2b9cecf1:0"

Server: Microsoft-IIS/8.5

X-Powered-By: ASP.NET

X-Powered-By: ARR/2.5

X-Powered-By: ASP.NET

Content-Length: 56928

Date: Thu, 29 Jan 2015 07:54:23 GMT

Connection: keep-alive
MSCF....`.......,...................I.................,E.Y .authroot.s
tl..Y-..8..CK...<T...g.v!M.d..f.%d..}K..5..F. ...T..%.,YJ.,!T......
_..x.<=O.....yy....;3..>.|..~..\.....|......;..8..~.za...."A...q
.......g..m......<X........j"I........!..-w.....w....P...H..(.?}..2
.N. .u..a. ...=.C..D.F>rC.. ..|).=.. ..3b.8H.M...(...u8.%...W.g...\
YB.m:.....dE.........V....$....Dn:....0...S."...o..q.....K...I..K...(x
%....>A.R...`.0 .........<`L0mp...%....y.....g.n...R0Op..<..,
....`0$z.@..&.x"....T..H...<........~..E..".....<<.\B(.......
..............@.....L.........KNAy8/"...f.......k..Jm7j....R.5q....Rz.
.!@...].......Y.[........4.. .D8..&...t.J^O..Q.._..1.J.m5<'k.,....%
T....i.\.;.;q..S./ 8.?Bu.............}D.Q....L....*..[.."e......15m...
_.0.M........#..v!..<...@..?sc.y....*.....tX[........{.W4.Q...^u@..
*..QP.......~.L9N....2r...4.....B..-\(...b.d...K...O.8..Un.......V.<
;.......A...V.....(..s..f..q.{N0.hS.,..;M.|G|.@.M.._.....7._6...C.0...
A;L....%...M=Y.....f.JV.(.5.....0..?*...KZ....jM...8.6U...#...ew.?..?.
..........WE.Or..O>..{.'W2.........3m.O.u..Z8....H4@.w}.o:?~....]&l
t;!...%....}@.d...L.p.a.g ..K."..N1!%..S.bT.H.-.....e..`.0$...0t..DX..
{.....#./...8.5..M...T.......D......V\C.zy.....3E:..>.{..).QW......
q....9..n..1....8%,.........r.p@.>. ...Q.?.p..7.?..7...&..!........
.`. .=....Sf..q.l.A.....L...t.}g..;...f....=.e.~.z....C..*R....H-..=..
.f..(t'.."....F...g._....n.J..U.4vr`}.....1..o@.....@.#...R. L8....z..
].|......3..y..-./....K..6{...s.<R`.}6....?.......-..@.g..S....<<< skipped >>>

GET /?clientv=29&method=track_offer_installed&mstime=26.427&offer_id=7861&product_key=cb00343115ffdf69411419d8a9ceff1a&session_key=2efc2a3ef36e2f433a2f28e7651231b1&v=1.0&signature=f3fdea08d2a40c578acc462a3cb0bcab HTTP/1.1

Host: api.opencandy.com

Accept: */*


HTTP/1.1 200 OK

Date: Thu, 29 Jan 2015 07:54:57 GMT

Server: Apache

X-Robots-Tag: noindex

Last-Modified: Thu, 29 Jan 2015 07:54:57 GMT

Cache-Control: no-store, no-cache, must-revalidate

Cache-Control: post-check=0, pre-check=0

Pragma: no-cache

Connection: close

Transfer-Encoding: chunked

Content-Type: text/xml
64..<?xml version="1.0"?><track_offer_installed><operat
ion>Completed</operation></track_offer_installed>..0..

GET /sites/default/files/bittorrent2_favicon.ico HTTP/1.1

Host: VVV.bittorrent.com

User-Agent: BTWebClient/2210(25302)

Accept-Encoding: gzip

Connection: Close


HTTP/1.1 404 Not Found

Server: nginx/1.4.7

Content-Type: text/html

Age: 2

Date: Thu, 29 Jan 2015 07:54:12 GMT

Expires: Thu, 29 Jan 2015 07:54:20 GMT

Content-Length: 168

Connection: close
<html>..<head><title>404 Not Found</title><
/head>..<body bgcolor="white">..<center><h1>404 N
ot Found</h1></center>..<hr><center>nginx/1.4.
7</center>..</body>..</html>....

GET /utorrent-onboarding/player.btapp HTTP/1.1

Host: apps.bittorrent.com

User-Agent: BTWebClient/3420(37754)

Accept-Encoding: gzip

Connection: Close


HTTP/1.1 200 OK

x-amz-id-2: kLnNrkgfGAUNBhBwOUtnTaaAPMzN4DSdXHzrxkam8f6mjZV0Qi/hOlv0ELXd7rpV

x-amz-request-id: 04253D8D9662B60E

Accept-Ranges: bytes

Content-Type: binary/octet-stream

Server: AmazonS3

Age: 102222

Date: Thu, 29 Jan 2015 07:54:56 GMT

Last-Modified: Tue, 08 Oct 2013 00:53:35 GMT

Content-Length: 3097

Connection: close
PK.........c.@!m@.............btappUT....8.O7N.Oux.............-.1.. .
.{^.....L...u.M....G..>v.i..f4.6....V/pO...q...S_...d..(..%.5.B.yp.
.H..Rk..$rb&.......*.......d....959...=&.`@.....(F..)Jz.....1.}....9..
PK.........c.@v.7.`...........main.cssUT....8.O7N.Oux..............S.n
.0.}. ".....[7e_c..k............i....9....`u...p.'4U..lH)...,.|.....Jn
.H...B.bm..:j.R...l@CU...cC.....IK._........,.K.b...<.I.F.]....A...
F|#...../.%.$...q8.........-.9%....3......h9 -V...)....gB../.Z.V@.&[..
a...!6..\)..QX....f...Qh.......H.....].ZD6....H(-.pSt...sH o^..nu.hB..
.a.ou......Ng.cEw.`....=_.............H..6..Y.>..7.}!.w...W.W'.....
....PK.........c.@..yI....6.......icon.bmpUT....8.O7N.Oux.............
U....@...>*....<..E.....;....{..Q.....yU-....<...D..4w..@/...
.c..................wf??...S.&...q.......}7k..).v..Z..l.R.8..;..;9..'.
.{:=yO.....{.E.>.`"...9..|$..G...#.H...<..<...:x......|!_....
|Y..[K...D.TP.Nk..;~......O679'...;~......w....;~....s.w....;~....S.w.
...;~....3.w....;~.....8~......w.....6...s._..?............N.~..X.....
./.)./../../.....K.....k........./../../..L...........%$../../../..|.G
.x.....-...........?............?............?..r.........,.|.e..?....
.....s...$xY...O..6.V.S....n....V/...k...x....2.....4.P....C..9.ka_.lC
3Ms..S.3.|..2....2......|..C.oS.y.iZ.......i..[.A.T_?.u......p.......F
=..i...u.G.......7..Y..M../PK.........u.@.W.@....m.......index.htmlUT.
...M.O.N.Oux..............U.r.0.}._..a...;i.\.0.r..tH..G...je.#.I...r.
.0I.O.v..v.J..........R...Y.. .ZF.....I.........Xt. ......'..n1...<<< skipped >>>

GET /favicon.ico HTTP/1.1

Host: VVV.mininova.org

User-Agent: BTWebClient/2210(25302)

Accept-Encoding: gzip

Connection: Close


HTTP/1.1 200 OK

Cache-control: public, max-age=25920000

Expires: Wed, 25 Nov 2015 07:54:13 GMT

Content-Type: image/x-icon

Accept-Ranges: bytes

ETag: "103585109"

Last-Modified: Sat, 30 Oct 2010 22:57:22 GMT

Content-Length: 318

Connection: close

Date: Thu, 29 Jan 2015 07:54:13 GMT

..............(.......(....... .......................................
.p6......J .......f.......M...|..............v?.......W.DDDDDDDDA.....
..A.......A.......A"q...".A"q...".A"q...".A"..%.".A"ar#.(.A"/..m .A..(
U...A.......A.......A.......A.......DDDDDDDD..........................
........................................

GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBRsif7263KedmR2MLuYKv9+WQCtWAQU1A1lP3q9NMb+R+dMDcC98t4Vq3ECECVRccvD8Qb29B4D63fPT+k= HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: ocsp.thawte.com


HTTP/1.1 200 OK

Server: nginx/1.4.7

Content-Type: application/ocsp-response

Content-Length: 1396

content-transfer-encoding: binary

Cache-Control: max-age=524857, public, no-transform, must-revalidate

Last-Modified: Wed, 28 Jan 2015 09:42:20 GMT

Expires: Wed, 4 Feb 2015 09:42:20 GMT

Date: Thu, 29 Jan 2015 07:58:36 GMT

Connection: keep-alive
0..p......i0..e.. .....0.....V0..R0...............w/.|`....a...2015012
8094220Z0s0q0I0... ........l....r.vdv0..*.~Y..X....e?z.4..G.L.......q.
.%Qq.........w.O.....20150128094220Z....20150204094220Z0...*.H........
..........>Y.Z...f.'G...._y(...].....W..M...!.....11pMR*...CZF...;.
.I..\.L....K.X. .v....x..xi...w?[Q.......RK..R12...B?#.../c"...#/.r.].
0....H6.SU.n...QE$..].<...L..(........a.D.y..8.....ST.^.fb?...~.Q..
....3L....^.l.2{.."..Y........MQ.=....y..|.....S..mJ..q$B....0...0...0
..y.......x..wW.M..@5....80...*.H........0J1.0...U....US1.0...U....Tha
wte, Inc.1$0"..U....Thawte Code Signing CA - G20...141210000000Z..1503
10235959Z0Y1.0...U....US1.0...U....Thawte, Inc.1301..U...*Thawte Code 
Signing CA - G2 OCSP Responder0.."0...*.H.............0..........P....
.].8?e...8.0.. ...-.uP.3....pQ......mi..wVt.......<....{d.?..9..z%.
?..}.N`.V.........I.X...E#...*.f...X.;...75......%...n.%..#..T.<...
..fEQ.\\.f.{M.H...M..u...9~..C....B.o..........dc...V..,.........{...j
.9.xw?D..ooNf&=......D|.R..../.....So....*-5.......d0b0...U....0.0...U
.%..0... .......0...U........0... .....0......0"..U....0...0.1.0...U..
..TGV-B-25170...*.H.....................2.).xO...].6..R.k...H =d...L..
.(o0#.......<O#.;.b.@..l...^.q.Y...}....S(syt&...$..L..7<...nb|.
..]2c..q..Q.L.3,.............n>....tND..fJ.&. .....%7.....f.31.>
..d...ET.E.~.x...]N...*.......n......HI..*M..t.......:.=.:..(2M".S....
.&....................<<< skipped >>>

GET /bundle_tab?port=18699&pair=347CB78701ABCA0C7B51D3F7666EF54594187E82&frameaddr=58ed270 HTTP/1.1

Accept: */*

Accept-Language: en-US

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/6.0)

Accept-Encoding: gzip, deflate

Host: bundles.bittorrent.com

Connection: Keep-Alive


HTTP/1.1 301 Moved Permanently

Server: CloudFront

Date: Thu, 29 Jan 2015 07:55:16 GMT

Content-Type: text/html

Content-Length: 183

Connection: keep-alive

Location: hXXps://bundles.bittorrent.com/bundle_tab?port=18699&pair=347CB78701ABCA0C7B51D3F7666EF54594187E82&frameaddr=58ed270

X-Cache: Redirect from cloudfront

Via: 1.1 69ae15d1338b64299d3942a44fc1fb96.cloudfront.net (CloudFront)

X-Amz-Cf-Id: raucXYu_3fNBkaX-4tpF1Iv4zhVkVVEJLdoZih72_B8_XBDjBWrxUA==
<html>..<head><title>301 Moved Permanently</title
></head>..<body bgcolor="white">..<center><h1&
gt;301 Moved Permanently</h1></center>..<hr><cent
er>CloudFront</center>..</body>..</html>....

GET /?clientv=53&inst_id=&method=track_encapsulated_offer_installed&mstime=63.196&offer_id=7861&product_key=cb00343115ffdf69411419d8a9ceff1a&session_key=2efc2a3ef36e2f433a2f28e7651231b1&tm=2015-01-29 07:55:59.697&v=1.0&signature=a3d4707700eef2d1940e771aaa191d07 HTTP/1.1

Cache-Control: no-cache

Connection: Keep-Alive

Pragma: no-cache

Accept: */*

Host: api.opencandy.com


HTTP/1.1 200 OK

Date: Thu, 29 Jan 2015 07:56:00 GMT

Server: Apache

X-Robots-Tag: noindex

Last-Modified: Thu, 29 Jan 2015 07:56:00 GMT

Cache-Control: no-store, no-cache, must-revalidate

Cache-Control: post-check=0, pre-check=0

Pragma: no-cache

Connection: close

Transfer-Encoding: chunked

Content-Type: text/xml
64..<?xml version="1.0"?><track_offer_installed><operat
ion>Completed</operation></track_offer_installed>..0..

GET /onboarding/utorrent?url=http://bundles.bittorrent.com/ HTTP/1.1

Host: bundles.bittorrent.com

User-Agent: BTWebClient/3420(37754)

Accept-Encoding: gzip

Connection: Close


HTTP/1.1 301 Moved Permanently

Server: CloudFront

Date: Thu, 29 Jan 2015 07:54:56 GMT

Content-Type: text/html

Content-Length: 183

Connection: close

Location: hXXps://bundles.bittorrent.com/onboarding/utorrent?url=http://bundles.bittorrent.com/

X-Cache: Redirect from cloudfront

Via: 1.1 457b75182c63eff39fe8e72b11b6c74d.cloudfront.net (CloudFront)

X-Amz-Cf-Id: y8DMM8P7hdZYYwzjbljOLc6YxjrJqqimY4nI-_vlqvV-RUe0S8CEkA==
<html>..<head><title>301 Moved Permanently</title
></head>..<body bgcolor="white">..<center><h1&
gt;301 Moved Permanently</h1></center>..<hr><cent
er>CloudFront</center>..</body>..</html>....

GET /utorrent-onboarding/welcome-upsell.btapp HTTP/1.1

Host: apps.bittorrent.com

User-Agent: BTWebClient/3420(37754)

Accept-Encoding: gzip

Connection: Close


HTTP/1.1 200 OK

x-amz-id-2: HCpaeLg6Uh9Sm3sk0S53QKUErij9Jl2BjFcA7W08S2omUK1lk3TxpoRJFmDYmH X

x-amz-request-id: A7F6CC8B72CD7AE0

Accept-Ranges: bytes

Content-Type: binary/octet-stream

Server: AmazonS3

Age: 189076

Date: Thu, 29 Jan 2015 07:54:56 GMT

Last-Modified: Tue, 08 Oct 2013 00:54:05 GMT

Content-Length: 28315

Connection: close
PK.........}?@................btappUT...4}(O..(Oux.............5.1.. .
.{^..b.N.Q.K.)...b#a8.G....S.4....`...Af..4........Q...S....G>..|.I
...1...]..j..............}q.b....u. ..<oE..N..w..D..A....GA..U.w.5W
=..`...PK.........L|>...9............empty_movie.gifUT......M..(Oux
.............GIF89a.............!.......,.............................
H...........L................L*......J......j............N............
.........(8HXhx..........)9IYiy..........*:JZjz.......... ;K[k{.......
...,<L\l|..........-=M]m}...........>N^n~........../?O_o........
..0......<.0....1...;PK.........Y.>.Pi-....T.......index.htmlUT.
.....M..(Oux..............W.n.6....8U.:.f)....IC.d..vk..C...-.Yt(R%)_0
..k...$;.l.r.!.......|.F...~.....k(m%R...-@09I..AJ.dyz....Z.Y..A...-..
....V`....r.7.i.y....Epy..E....hJD.@..H..q.f..`.5&........3..i${..L. ,
X#..~k...v[...XK...,.Jkk.:...-..R....&.T.i..c.M?7...Ix...6aE.NM..Q p..
.p...Q.......Z.5J..7..P..b:'.".........n...}..r....t.....q_...r%.dU...
Wxx..n....8trT....FH..42..K...O..;_...r.M.^.t.7._...p...B.%..o........
..D.0g...nL.`..e.U .....5.`.....i....?...)..Q.:n...E-....b......Be.y.R
j..C..<.R..lB...KC...6......1..;.=..KQ)c.....!...RcJ5.yWH......i.J.
..jq.c..8Y..v...(/..N...R.......:.L..z.s.T48.*..Q........7.....I.c.y..
o.`.....?........pv.9...S.|.'[.....>..F..U.......I@.a)....u}..7T.R.
...5..o...o..ZUp.j.zQ..T^...n........D.fGa...J....B.$.D....u..\.......
$.......././N...fJd."n..@...|q.....o....F....f.YE.G.|....N..1...N....F
h/?..l.T.=L..W.vtl8.i=.(.r[&...W4..OJ..g..a.V[.....d..36sC....l/.&<<< skipped >>>

GET /installstats.php?v=71525078&h=029fjLDzoDze8QUv&hn=1&w=1DB10106&bu=0&pr=0&toroffer=1 HTTP/1.1

Accept-Encoding: gzip

User-Agent: uTorrent/2210(25302)

Host: update.utorrent.com

Cache-Control: no-cache


HTTP/1.1 200 OK

Server: nginx/1.4.7

Date: Thu, 29 Jan 2015 07:54:07 GMT

Content-Type: text/html

Transfer-Encoding: chunked

Connection: close

X-Powered-By: PHP/5.4.30

0..

GET /checkupdate.php?s=1&cl=uTorrent&v=109417338&qv=109417338&l=en&svp=4&svn_revno=37754&tk=stable34&cmp=217&ocmp=217&period=7&sids=0,0,0,0,0&lv=3227801_0_&c=US&w=1DB10106&t=3&h=029fjLDzoDze8QUv&mts=31&gnc=5&nat_state=255&it=7&pc=19&sctl=1&shdi=1&def_tor=1&w64=1&doainstalled=0&ie=9.10.9200.16521&xim=3&insvr=109417338&sss=4&rsb=4&rtsb=16&view=win32&cmp=217&ocmp=217&db=iexplore.exe&plus=3&pupsell=1&secp=OpenCandy&secres=1&seccau=1&adc=1&ch_up=1&p_up=122&p_down=345296&p_ip=37.57.16.189?fg=6000&t_up=5760&t_down=3038226&mt=3338219&ssb=95&ssu=11644473649&xseq=2&cau_time=0 HTTP/1.1

Host: update.utorrent.com

User-Agent: BTWebClient/3420(37754)

Accept-Encoding: gzip

Connection: Close


HTTP/1.1 200 OK

Server: nginx/1.4.7

Date: Thu, 29 Jan 2015 07:55:17 GMT

Content-Type: text/html

Content-Length: 499

Connection: close

X-Powered-By: PHP/5.4.30

Expires: Thu, 21 Jul 1980 00:00:00 GMT

Cache-Control: private

Last-Modified: Thu, 29 Jan 2015 07:55:17 GMT

d10:adsEnabledi1e13:fblikeEnabledi0e14:twitterEnabledi0e13:adRefreshRa
tei360e9:ftEnabledi1e11:lrecEnabledi1e14:sendConversioni0e19:specialOf
ferEnabledi0e22:offerRolloutLabEnabledi1e17:trayOfferImageUrl51:http:/
/utclient.utorrent.com/images/mobile-icon.png18:trayOfferTargetUrl21:h
ttp://bit.ly/1hknGHI22:trayOfferHoverOverText23:uTorrent Android Clien
t17:trayOfferOneClicki0e10:searchUrls61:Infospace Search|hXXp://utorre
nt.inspsearch.com/search/web?q=1:k0:2:ip12:37.57.16.1892:tsi1422518117
e1:c2:uae..

GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBS56bKHAoUD+Oyl+0LhPg9JxyQm4gQUf9Nlp8Ld7LvwMAnzQzn6Aq8zMTMCEFIA5aolVvwahu2WydRLM8c= HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: ocsp.verisign.com


HTTP/1.1 200 OK

Server: nginx/1.4.7

Content-Type: application/ocsp-response

Content-Length: 1762

content-transfer-encoding: binary

Cache-Control: max-age=440601, public, no-transform, must-revalidate

Last-Modified: Tue, 27 Jan 2015 10:17:02 GMT

Expires: Tue, 3 Feb 2015 10:17:02 GMT

Date: Thu, 29 Jan 2015 07:55:47 GMT

Connection: keep-alive

0..........0..... .....0......0...0......;O}a.!..u...au..eUNp..2015012
7101702Z0s0q0I0... ...................B.>.I.$&.....e......0..C9...3
13..R...%V.......K3.....20150127101702Z....20150203101702Z0...*.H.....
........A8~....@.........C..l..2....#:....U.^.....`.DE.....!F....7..u.
.Q.r...!R......?......ajn...k.....K.(..ZmP..QK@........W.R..HP........
F..,...]%..zA.<..I.....K.?...Y.`.....\............:B.\......d....R.
e|..t.~.$...>3./m>.@.....ZM{?.....N......%b.{UUb>.t.q..4/....
0...0...0...........2...'U.BM...g.B0...*.H........0..1.0...U....US1.0.
..U....VeriSign, Inc.1.0...U....VeriSign Trust Network1:08..U...1(c) 2
006 VeriSign, Inc. - For authorized use only1E0C..U...<VeriSign Cla
ss 3 Public Primary Certification Authority - G50...141202000000Z..151
216235959Z0..1.0...U....US1.0...U....Symantec Corporation1.0...U....Sy
mantec Trust Network1?0=..U...6Symantec Class 3 PCA - G5 OCSP Responde
r Certificate 30.."0...*.H.............0...............2&..PL...,..2..
..:..tH...`JG.%..*...s.c%...?t..J..0.q....~..k@X.l.i....0..kk..h.9"1.5
?..s.....3[...u......]...R0..Z}....l..I.Y.....j\H.q...#.uw.4qz.#.J....
.@2$"..$l.B.......D.ye..(..2.........@...... ...."... E..0M,..b{.^..s'
....f.6.pr4.J........'j..........0...0...U.......0.0l..U. .e0c0a..`.H.
..E....0R0&.. .........hXXp://VVV.symauth.com/cps0(.. .......0...http:
//VVV.symauth.com/rpa0...U.%..0... .......0...U...........0... .....0.
.....0!..U....0...0.1.0...U....TGV-B-2760...U......;O}a.!..u...au..eUN
p0...U.#..0.....e......0..C9...3130...*.H.............(.&..Dgr.Ve.

<<< skipped >>>

GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBTSqZMG5M8TA9rdzkbCnNwuMAd5VgQUz5mp6nsm9EvJjo/X8AUm7+PSp50CECAKfRxMDvODER0cHOAslgg= HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: ocsp.verisign.com


HTTP/1.1 200 OK

Server: nginx/1.4.7

Content-Type: application/ocsp-response

Content-Length: 1725

content-transfer-encoding: binary

Cache-Control: max-age=519814, public, no-transform, must-revalidate

Last-Modified: Wed, 28 Jan 2015 08:15:06 GMT

Expires: Wed, 4 Feb 2015 08:15:06 GMT

Date: Thu, 29 Jan 2015 07:55:49 GMT

Connection: keep-alive

0..........0..... .....0......0...0......u\..3Oo?U...H.....O!..2015012
8081506Z0s0q0I0... ...................F....0.yV......{&.K......&......
. .}.L........,......20150128081506Z....20150204081506Z0...*.H........
.....v.........M%..... ...f..?.t..`p..`...6C...x....k0....^{UG.....s.f
.l^..bY.l .y......./........8....oAR.L`..Q.<..16..3..a-Q.......(.^.
......=......QS.BD-C...t...,.5h.%...`....[.C..t..5.[vA3.c.pW.[.I:.A ..
 c.[.7.B....Z....e..82....Q.{.....L.j...1a...x.X..1L.G....0...0...0...
......./...nj0...}..i..0...*.H........0..1.0...U....US1.0...U....VeriS
ign, Inc.1.0...U....VeriSign Trust Network1;09..U...2Terms of use at h
ttps://VVV.verisign.com/rpa (c)101.0,..U...%VeriSign Class 3 Code Sign
ing 2010 CA0...141204000000Z..150304235959Z0..1.0...U....US1.0...U....
VeriSign, Inc.1.0...U....VeriSign Trust Network1:08..U...1VeriSign Cla
ss 3 Code Signing 2010 OCSP Responder0.."0...*.H.............0........
.4.4...........o....?..f.........I.!.b.L...L..U.........rM.,.....=..cR
4d.~*..k..x......=.WT.<.A2n1.qZyM.M..Q_...8....9....d.... ...'.....
....h..Z..I...(.b.jK..DO.ra..gb..j..A.(....mrzU.w.......Bv...l.:s..L..
..y.....u..n.)W......Y!....Q...,.i|.....:.Mu..DD1.........0...0...U...
.0.0....U. ...0..0....`.H...E....0..0(.. .........hXXps://VVV.verisign
.com/CPS0b.. .......0V0...VeriSign, Inc.0.....=VeriSign's CPS incorp. 
by reference liab. ltd. (c)97 VeriSign0...U.%..0... .......0...U......
..0... .....0......0"..U....0...0.1.0...U....TGV-B-24600...*.H........
......pjd....VpE.6.tO..@.....7.=.. ...........hi.......>....Q.?

<<< skipped >>>

GET /templates/7861/0/59317.png HTTP/1.1

Host: cdn3.opencandy.com

Accept: */*


HTTP/1.1 200 OK

x-amz-id-2: iBUCQvwrGXxUQVBv6Dii97/ rOalh3w7TeGvPX5A5W3vlRbVbnVK9T rD53dqZu4rmH7/UyTggQ=

x-amz-request-id: 19C50A802EFB3439

Last-Modified: Sun, 25 Jan 2015 21:33:07 GMT

ETag: "308b28548f2604ee1e8f56bacfad8f31"

Accept-Ranges: bytes

Content-Type: image/png

Content-Length: 18721

Server: AmazonS3

Cache-Control: max-age=203

Date: Thu, 29 Jan 2015 07:54:30 GMT

Connection: keep-alive
.PNG........IHDR............."4.... .IDATx...y..U...g.L.2..!.. ,..0.d.
.#..:...(""OQ...<..p.!.....HdG......A..-.=@.q..L..l....=S]]U]....|?
..tw.]....=uo..G.1(..(.R:*2?D....m..O.].....I.^]\.....Q.EQ. ..Q.qM.5..
........O|...UQ.E.C..5.v.pO.P'..........f...N.=`.p...7..Y.j\.EQ.8.....
.....2.k..6.#\.N'...;..)R.{..S.).*`...U.i......9......]^...P..(....0..
n..H.v........w..1S .....w......g#p*..'.n.1.|R........T..f.p .....P.j\
.EQ.8...t[.p4.E`..x.......Lw.{..Lb..5.}&...b..W............M3&K..I....
.n.......b.........m....WEQ.%...5.....f.....nu.J..7... .O..`"..p....g.
I.....@..W......yx........*..(q.7....aGq..Ml..k..........k`....0.5/.P6
EQ.e.R..}6!..\`.I...Q9S...5....sm=<...U..Ft[./...U.....>.....0..
.y.3...8..onQ..5....8}z..=.....Q.a..2R.U2}|..=...{H/.fMO.<.x..FU.Au
..TS.........^..w..v...OO,..z|..^...n.5......;.......(....x...A...T...
.........6\.V'...#2.m..1o..l2.>.=w.j&U....*... ....1ep....\m.4....r
.{R..\{...4...:..;......\..R..28o.j.?}.....u....w;....,.44........E%.{
...t..a....*..(..k\.....)..=......*..O..h......s|.a... .........=}.foR
.gX.>..p...|k..........].....f..n....=...I..V..w..b.......,.4..2,.2
T...N..JQ.EYO.Z.U.....M.H..%]\.~.k{`......U}Fo.. ..........s|......<
;.qO.k;...Uf.......V.lZ...p...&..'M..3..ep...l..J.{..,.:.e/?........-.
.O.a.M....r..i,?|i-kz..ev..ig....HQ.EQ<xGc..On.A.`...:....n_....;..
.............'..2.u.q|...B......V..og.?.gL........[....>...].YE.k.8
{~..yd%.;..l>....Uq..1}.._....[....xku/./...y.y...)..6...RX.ch...5=
..8 ....(....z..?...P..].q.VU|j.r..^\....W2.....AWN.W~f,_...e...O.<<< skipped >>>

POST /e?i=21 HTTP/1.1

Host: bench.utorrent.com

User-Agent: BTWebClient/3420(37754)

Accept-Encoding: gzip

Connection: Close

Content-Length: 251

{"h":"029fjLDzoDze8QUv","cl":"uTorrent","v":109417338,"l":"en","w":"6.1","cts":1422518067,"eventName":"silent_autoupdate","status":"Manually ran target version outside of install dir", "action":"ManualTargetOutside", "g_version":109417338, "no_sau":0}
HTTP/1.1 200 OK

Content-Type: text/html

Date: Thu, 29 Jan 2015 07:54:28 GMT

Server: nginx

X-Powered-By: PHP/5.4.30

Content-Length: 21

Connection: Close
{"response_code":200}..

GET /updatestats.php?cl=uTorrent&v=109417338&h=029fjLDzoDze8QUv&k=&ip=8&dns=78&con=31&dl=296&error=&dlurl=http://ll.download3.utorrent.com/offers/spigot-yandex-en-20140708.exe&svp=4&pid=3896&sz=157480&bin=<NULL>toolbar&p1=192.168.150.2&m1=2&p2=192.168.50.98&m2=0&p3=37.57.16.254&m3=2&p4=80.93.125.145&m4=2&p5=80.93.127.206&m5=35&p6=80.81.192.221&m6=40&p7=87.248.217.253&m7=85 HTTP/1.1

Host: update.utorrent.li

User-Agent: BTWebClient/3420(37754)

Accept-Encoding: gzip

Connection: Close


HTTP/1.1 200 OK

Server: nginx/1.4.7

Date: Thu, 29 Jan 2015 07:54:57 GMT

Content-Type: text/html

Transfer-Encoding: chunked

Connection: close

X-Powered-By: PHP/5.4.30

Expires: Thu, 21 Jul 1980 00:00:00 GMT

Cache-Control: no-store, no-cache, must-revalidate, private

Pragma: no-cache

0..

GET /ados?t=1422518236585&request={"Placements":[{"A":5682,"S":33049,"D":"bt_ap_div","AT":1224,"Properties":{"tag":"ant","browser":"ie","clientdata":"utorrent|3.4.2.37754|217","page":"torrent","flash":"none"}}],"Keywords":"tag%3Dant%2C%20browser%3Die%2C%20clientdata%3Dutorrent%7C3.4.2.37754%7C217%2C%20page%3Dtorrent%2C%20flash%3Dnull","Referrer":"","IsAsync":false} HTTP/1.1

Accept: */*

Referer: hXXp://cdn.bitmedianetwork.com/network/index-edge.html?tag=ant&adt=1224&browser=ie&clientdata=utorrent|3.4.2.37754|217&page=torrent&site=33049

Accept-Language: en-US

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/6.0)

Accept-Encoding: gzip, deflate

Host: engine.bitmedianetwork.com

Connection: Keep-Alive

Cookie: azk=ue1-91d65c6dd2d04439af07b2f52700b2fb; azk-events=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; _ga=GA1.2.443073802.
HTTP/1.1 200 OK

Access-Control-Allow-Headers: accept, origin, content-type, content-length

Access-Control-Allow-Methods: GET,PUT,POST,DELETE,OPTIONS

Access-Control-Allow-Origin: *

Content-Encoding: gzip

Content-Type: application/javascript

Date: Thu, 29 Jan 2015 07:57:17 GMT

ETag: "-102126562"

P3P: CP="This is not a P3P policy! See hXXp://adzerk.com/ad-server-privacy for our privacy policy"

Server: nginx/1.1.19

Set-Cookie: azk=ue1-91d65c6dd2d04439af07b2f52700b2fb; Path=/; Expires=Fri, 29 Jan 2016 07:57:17 GMT

x-powered-by: adzerk bifrost/

x-served-by: engine-us-east-1a-05

transfer-encoding: chunked

Connection: keep-alive
8ca..............Ys.......p..&...t.3..[...D.......M...,......i.xM.$...
...........G.wy..#w1...h..V...V#...:......6.h2....O..X.=>4.e..var..
.4.....G.M.,....4."7...|9.....D.O......B....i...%e........ .u.F.)..n#.
BQ;...1(...t7jGjf[x..~.sc...%...d\...N....w...?.S'....H.B........e[...
d..4.jV..O...r.,.vj....].....G. V...bh/|h .F...|..|.v.....F....c5.....
S..)..XI....k..@.M...........z.V0.. k..i..v\.[...C..@..?..Nw.'7JW.....
.h.y...>....Nb.....Jx...{.......T..........4.~sY=.5......ll......&u
.V&S'..v......t.i...{.M..........g.jq..AM.x...L.......Q.......<.ru.
i...Z.k...}..-r...5Q..i2.Y.Q .o>|.........1i..E..#.j..S..(.?...X..H
V....qH..W....&..&*..S.4k\....^.;4.V.o.~.f[..n..........k....u.F....C1
.V..`~R..u..4.$.....U..b....3T...........P.1fI].;..RW.P......4.....H..
[U"..Ah.~.......J........S.F...B.0...z..x.$...p..'a~9c.%n6.2...^)....t
..G..t....\.3:...<"S..%.Y.b>_.....R.k.&\..*\.......4...Z.......c
...4C.\.V....)......).&W^.r.7_.a...-B.C`.........iH... .|.;.....3D.o.}
.>c....n..X........G.......n........7.......|i....|.u..q.#A.E.X...S
..0F.MB...]^..?.w.A87?w.......O.....7.=..u..j.]FyX......./)..I'.p.&..h
.....Z..~.*..{.=...4k..F...u....~..@O...kz~...w.g..\....#t.....5...A..
...h]..5....4.zV.v.B...........6..-i..gn...SN:...f.....KuK.:..8....d.R
..s..Q:rE...CH.j..Zr/g.m L.o.....P ....v..6|&,Y..'...l..mp.-Y-<:...
..5X..nA\.#7.m`|A..m...k-bJ.....B.....g../\yKvV6....bO..hd............
kkM...N...Z<.".?.H&.._.h\ k...L...&..@.O@..m".G...5..7.5,.......<
;...!r.a..9"....&..F..... G.s.b!.N6^.eR........|.-y.,....i...3X*.k<<< skipped >>>

GET /i.gif?e=eyJhdiI6Mzg1ODIsImF0Ijo1LCJidCI6MCwiY20iOjEyMTUyNywiY3QiOiJnYW1pbmciLCJjaCI6ODc4NSwiY3IiOjcwNTczMywiZGkiOiIwZGQzMWE2MTc1M2U0OWVjOTNhYzA0YjEwNTA4MDY3MCIsImRtIjoxLCJmYyI6NzMzNDgxLCJmbCI6MjU2MjQ0LCJpcCI6IjM3LjU3LjE2LjE4OSIsImt3IjoidGFnPWFudCxicm93c2VyPWllLGNsaWVudGRhdGE9dXRvcnJlbnR8My40LjIuMzc3NTR8MjE3LHBhZ2U9dG9ycmVudCxmbGFzaD1udWxsIiwibnciOjU2ODIsInBjIjowLjA1LCJwciI6NjI1NTcsInJ0IjozLCJzdCI6MzMwNDksInVrIjoidWUxLTkxZDY1YzZkZDJkMDQ0MzlhZjA3YjJmNTI3MDBiMmZiIiwidHMiOjE0MjI1MTgyMzY5NDQsImJmIjp0cnVlfQ&s=FZfQPorpd35SD3T4mBOrBjKrtOA HTTP/1.1

Accept: */*

Referer: hXXp://cdn.bitmedianetwork.com/network/index-edge.html?tag=ant&adt=5&browser=ie&clientdata=utorrent|3.4.2.37754|217&page=torrent&site=33049

Accept-Language: en-US

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/6.0)

Accept-Encoding: gzip, deflate

Host: engine.bitmedianetwork.com

Connection: Keep-Alive

Cookie: azk=ue1-91d65c6dd2d04439af07b2f52700b2fb; azk-events=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
HTTP/1.1 200 OK

Access-Control-Allow-Headers: accept, origin, content-type, content-length

Access-Control-Allow-Methods: GET,PUT,POST,DELETE,OPTIONS

Access-Control-Allow-Origin: *

Content-Type: image/gif

Date: Thu, 29 Jan 2015 07:57:17 GMT

P3P: CP="This is not a P3P policy! See hXXp://adzerk.com/ad-server-privacy for our privacy policy"

Server: nginx/1.1.19

Set-Cookie: azk=ue1-91d65c6dd2d04439af07b2f52700b2fb; Path=/; Expires=Fri, 29 Jan 2016 07:57:17 GMT

x-powered-by: adzerk bifrost/

x-served-by: engine-i-f1c8271e

Content-Length: 43

Connection: keep-alive

GIF89a.............!.......,...........D..;HTTP/1.1 200 OK..Access-Con
trol-Allow-Headers: accept, origin, content-type, content-length..Acce
ss-Control-Allow-Methods: GET,PUT,POST,DELETE,OPTIONS..Access-Control-
Allow-Origin: *..Content-Type: image/gif..Date: Thu, 29 Jan 2015 07:57
:17 GMT..P3P: CP="This is not a P3P policy! See hXXp://adzerk.com/ad-s
erver-privacy for our privacy policy"..Server: nginx/1.1.19..Set-Cooki
e: azk=ue1-91d65c6dd2d04439af07b2f52700b2fb; Path=/; Expires=Fri, 29 J
an 2016 07:57:17 GMT..x-powered-by: adzerk bifrost/..x-served-by: engi
ne-i-f1c8271e..Content-Length: 43..Connection: keep-alive..GIF89a.....
........!.......,...........D..;..

GET /favicon.ico HTTP/1.1

Host: search.vuze.com

User-Agent: BTWebClient/2210(25302)

Accept-Encoding: gzip

Connection: Close


HTTP/1.1 200 OK

Accept-Ranges: bytes

Cache-Control: max-age=31449600

Content-Type: image/x-icon

Date: Thu, 29 Jan 2015 07:54:13 GMT

ETag: "54c7a053-47e"

Expires: Thu, 28 Jan 2016 07:54:13 GMT

Last-Modified: Tue, 27 Jan 2015 14:27:31 GMT

Server: nginx

Content-Length: 1150

Connection: Close
............ .h.......(....... ..... .........................m&.H.1..
.1...1...0...0.../.......,... ...*...)...'...'...&..g..F.4...6...6...6
...5...4...2...1...1...E2.. ...)...'...&...%...&...8...;...;...;...:..
.:...pX..........WC...... ...)...'...&...'...<...@...A...@...A.....
...................v..:$..,...)...'...(...@...F...F...E...............
.........m..4...1.......,...)...)...D...K...pA......................b?
..;...8...4...1....... ...*...H...Q...............................iH..
.........~..ve..C/.. ...L...W...]............................p......P-
...r..7...0...,...Q...]...^....\..............................=...aC..
E(..1.......V...d...e...b...z4..........................?...;...7...3.
../...[...j...k...i...e...k.......................E...=...8...4...0...
`...q...r...o...j...e....Z..................^4..?...:...5...0...e...x.
..y...t...o...i...k...................c9..@...;...6...1...h...}.......
y...r...l...e....S..............H...A...<...6...2...g...z...}...x..
.q...k...d...]...W...]...Q...F...@...;...6...1...N.I.g...i...e...`...[
...V...Q...L...H...D...@...<...8...4..t).H.........................
.........................................

GET /store/store.btapp?h=029fjLDzoDze8QUv&v=71525078&ol=en&ul=&tk=main&c=uTorrent HTTP/1.1

Host: apps.bittorrent.com

User-Agent: BTWebClient/2210(25302)

Accept-Encoding: gzip

Connection: Close


HTTP/1.1 403 Forbidden

x-amz-request-id: 1135F2B394507650

x-amz-id-2: FVuE7tgFRYAGrM S7KjhFwcxOvpb1U/00YZNF8d1n0v9ZsMRBvCiphnbxxAI6R9j

Content-Type: application/xml

Date: Thu, 29 Jan 2015 07:54:13 GMT

Server: AmazonS3

Connection: close
<?xml version="1.0" encoding="UTF-8"?>.<Error><Code>
AccessDenied</Code><Message>Access Denied</Message>&
lt;RequestId>1135F2B394507650</RequestId><HostId>FVuE7t
gFRYAGrM S7KjhFwcxOvpb1U/00YZNF8d1n0v9ZsMRBvCiphnbxxAI6R9j</HostId&
gt;</Error>..

GET /control/tags/ut.json HTTP/1.1

Host: cdn.ap.bittorrent.com

User-Agent: BTWebClient/3420(37754)

Accept-Encoding: gzip

Accept-Language: en-US

Connection: Close

..        {..            "name": "refresh_big_four",..            "adR
efreshRate": 2,..            "lrecRefreshRate": 2,..            "ftRef
reshRate": 2,..            "adRefreshRatePattern":[120],..            
"rollout": 100,..            "enabled": 1,..            "ftEnabled": 1
,..            "lrecEnabled": 1,..            "lrecXButton":0,..      
      "countries": "us,gb,ca,au"..        },..        {..            "
name": "ads_free",..            "lrecXButton":1,..            "lrecXUp
gradeUrl":"hXXps://utclient.utorrent.com/offers/ut-adfree/index.html",
..            "survey":0,..            "countries": "ie,nz",..        
    "build":[36802]..        }, ..        {..            "name": "ads_
free_INR",..            "lrecXButton":1,..            "lrecXUpgradeUrl
":"hXXps://utclient.utorrent.com/offers/ut-adfree-INR/index.html",..  
          "survey":0,..            "countries": "in",..            "bu
ild":[36802]..        }, ..        {..            "name": "bunndle_off
",..            "enabled": 0,..            "campaignCodes":[600,601]..
        }, ..        {..            "name": "control_group",..        
    "hvalues": "F,R,X",..            "enabled": 0..        },..       
 {..            "name": "refresh_legacy",..            "adRefreshRate"
: 360,..            "lrecRefreshRate": 360,..            "ftRefreshRat
e": 360,..            "rollout": 100,..            "enabled": 1,..    
        "ftEnabled": 1,..            "lrecEnabled": 1,..            "l
recXButton":0,..            "majorVersion" : 3,..            "mino

<<< skipped >>>

POST /e?i=38 HTTP/1.1

Host: bench.utorrent.com

User-Agent: BTWebClient/3420(37754)

Accept-Encoding: gzip

Connection: Close

Content-Length: 178

{"h":"029fjLDzoDze8QUv","cl":"uTorrent","v":109417338,"l":"en","w":"6.1","cts":1422518116,"eventName":"PageRequested","date":"2015-01-29","time":"09:55:16","geo":"us","adtype":0}
HTTP/1.1 200 OK

Content-Type: text/html

Date: Thu, 29 Jan 2015 07:55:16 GMT

Server: nginx

X-Powered-By: PHP/5.4.30

Content-Length: 21

Connection: Close
{"response_code":200}..

GET /installstats.php?cl=uTorrent&v=109417338&h=029fjLDzoDze8QUv&w=1DB10106&bu=0&pr=25302&cmp=217&ocmp=217&offerapicurrentoffer&pid=3896&cau=1&OfferProvider=OpenCandy&Offer=NotProvided&Accepted=1&view=win32 HTTP/1.1

Accept-Encoding: gzip

User-Agent: uTorrent(37754)/3.4.2

Host: update.utorrent.li

Cache-Control: no-cache


HTTP/1.1 200 OK

Server: nginx/1.4.7

Date: Thu, 29 Jan 2015 07:54:55 GMT

Content-Type: text/html

Transfer-Encoding: chunked

Connection: close

X-Powered-By: PHP/5.4.30

0..

GET /favicon.ico HTTP/1.1

Host: VVV.google.com

User-Agent: BTWebClient/2210(25302)

Accept-Encoding: gzip

Connection: Close


HTTP/1.1 200 OK

Vary: Accept-Encoding

Content-Type: image/x-icon

Last-Modified: Tue, 14 Aug 2012 15:19:23 GMT

Date: Wed, 28 Jan 2015 23:47:17 GMT

Expires: Thu, 05 Feb 2015 23:47:17 GMT

X-Content-Type-Options: nosniff

Server: sffe

X-XSS-Protection: 1; mode=block

Age: 29216

Alternate-Protocol: 80:quic,p=0.02

Cache-Control: public, max-age=691200

Accept-Ranges: none

Connection: close

............ .h...&...  .... .........(....... ..... .................
..........BJ..B...B...B...B...B...B...B...B...B...B...B...B...B...B...
BJ..B...B...B...B...B...B...B...B...B...B...B...B...B...B...B...B...B.
..B...B...B...N.......................n...B...B...B...B...B...B...B...
B...B...........Y...B...B...F.......n...B...B...B...B...B...B...B...B.
..........B...B...B...B...........B...B...B...B...B...B...B...B.......
....G...B...B...W...........B...B...B...B...B...B...B...B...B...z.....
..................V...B...B...B...B...B...B...B...B...B...B...B...F...
........Q...B...B...B...B...B...B...B...B...B...B...B...i.............
..B...B...B...B...B...B...B...B...B...B...B...........y...O.......j...
B...B...B...B...B...B...B...B...B...B...........B...B...q.......B...B.
..B...B...B...B...B...B...B...B...........B...B...........B...B...B...
B...B...B...B...B...B...B...........B...D...........B...B...B...B...B.
..B...B...B...B...B...D.......................w...B...B...B...B...B...
B...B...B...B...B...B...B...B...B...B...B...B...B...B...B...BI..B...B.
..B...B...B...B...B...B...B...B...B...B...B...B...BI..................
..............................................(... ...@..... .........
..................B...B'..B...B...B...B...B...B...B...B...B...B...B...
B...B...B...B...B...B...B...B...B...B...B...B...B...B...B...B...B...B'
..B...B(..B...B...B...B...B...B...B...B...B...B...B...B...B...B...B...
B...B...B...B...B...B...B...B...B...B...B...B...B...B...B...B(..B...B.
..B...B...B...B...B...B...B...B...B...B...B...B...B...B...B...B...

<<< skipped >>>

GET /?accepted_ind=1&clientv=29&max=1&method=track_offer_result&mstime=25.475&offer_id=7861&offer_shown_secs=0&opt_shown_count=0&product_key=cb00343115ffdf69411419d8a9ceff1a&ready=1&session_key=2efc2a3ef36e2f433a2f28e7651231b1&skipped_offer_ids=&v=1.0&signature=a53cfcf95d92c14257e44b4b3312d3f1 HTTP/1.1

Host: api.opencandy.com

Accept: */*


HTTP/1.1 200 OK

Date: Thu, 29 Jan 2015 07:54:56 GMT

Server: Apache

X-Robots-Tag: noindex

Last-Modified: Thu, 29 Jan 2015 07:54:56 GMT

Cache-Control: no-store, no-cache, must-revalidate

Cache-Control: post-check=0, pre-check=0

Pragma: no-cache

Connection: close

Transfer-Encoding: chunked

Content-Type: text/xml
5e..<?xml version="1.0"?><track_offer_result><operation
>Completed</operation></track_offer_result>..0..

GET /e?i=1005&e=eyJldmVudE5hbWUiOiJhcC5hZHRhZyIsImFjdGlvbiI6ImxvYWRlZCIsInRhZyI6ImFudCIsImFkdCI6IjEyMjQiLCJicm93c2VyIjoiaWUiLCJjbGllbnRkYXRhIjoidXRvcnJlbnQlN2MzJTJlNCUyZTIlMmUzNzc1NCU3YzIxNyIsInBhZ2UiOiJ0b3JyZW50Iiwic2l0ZSI6IjMzMDQ5In0=&callback=jQuery111106551887315392704_1422518236574&_=1422518236575 HTTP/1.1

Accept: */*

Referer: hXXp://cdn.bitmedianetwork.com/network/index-edge.html?tag=ant&adt=1224&browser=ie&clientdata=utorrent|3.4.2.37754|217&page=torrent&site=33049

Accept-Language: en-US

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/6.0)

Accept-Encoding: gzip, deflate

Host: bench.utorrent.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Content-Type: text/html

Date: Thu, 29 Jan 2015 07:57:17 GMT

Server: nginx

X-Powered-By: PHP/5.4.30

Content-Length: 64

Connection: keep-alive

jQuery111106551887315392704_1422518236574({"response_code":200})HTTP/1
.1 200 OK..Content-Type: text/html..Date: Thu, 29 Jan 2015 07:57:17 GM
T..Server: nginx..X-Powered-By: PHP/5.4.30..Content-Length: 64..Connec
tion: keep-alive..jQuery111106551887315392704_1422518236574({"response
_code":200})..

GET /images/pixel.gif?yxds=1&yxhp=1&yxov=1&cnid=435371 HTTP/1.1

Accept-Encoding: gzip

User-Agent: uTorrent(37754)/3.4.2

Host: VVV.mybrowserbar.com

Cache-Control: no-cache


HTTP/1.1 200 OK

Date: Thu, 29 Jan 2015 07:54:53 GMT

Server: Apache

Accept-Ranges: bytes

Content-Length: 1093

Cache-Control: no-cache, no-store, must-revalidate, max-age=0, proxy-revalidate, no-transform

Pragma: no-cache

Expires: Thu, 01 Jan 1970 00:00:00 GMT

Content-Type: image/gif
GIF89a.............!..XMP DataXMP<?xpacket begin="..." id="W5M0MpCe
hiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk=
"Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00        "> &
lt;rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#">
 <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1
.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http:/
/ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photo
shop CS5 Windows" xmpMM:InstanceID="xmp.iid:68AF816F211411E187C8D4C48A
462294" xmpMM:DocumentID="xmp.did:68AF8170211411E187C8D4C48A462294">
; <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:68AF816D211411E187C8
D4C48A462294" stRef:documentID="xmp.did:68AF816E211411E187C8D4C48A4622
94"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> 
<?xpacket end="r"?>.............................................
......................................................................
...............~}|{zyxwvutsrqponmlkjihgfedcba`_^]\[ZYXWVUTSRQPONMLKJIH
GFEDCBA@?>=<;:9876543210/.-, *)('&%$#"! ........................
.........!.......,...........D..;HTTP/1.1 200 OK..Date: Thu, 29 Jan 20
15 07:54:53 GMT..Server: Apache..Accept-Ranges: bytes..Content-Length:
 1093..Cache-Control: no-cache, no-store, must-revalidate, max-age=0, 
proxy-revalidate, no-transform..Pragma: no-cache..Expires: Thu, 01 Jan
 1970 00:00:00 GMT..Content-Type: image/gif..GIF89a.............!..XMP
 DataXMP<?xpacket begin="..." id="W5M0MpCehiHzreSzNTczkc9d"?><<< skipped >>>

GET /ocsp/MEkwRzBFMEMwQTAJBgUrDgMCGgUABBTy4Gr5hYodjXCbSRkjeqm1Gih+ZAQUSt0GFhu89mi1dvWBtrtiGrpagS8CCCUoyoQiZhRO HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: clients1.google.com


HTTP/1.1 200 OK

Content-Type: application/ocsp-response

Date: Tue, 27 Jan 2015 03:50:40 GMT

Expires: Sat, 31 Jan 2015 03:50:40 GMT

Server: ocsp_responder

Content-Length: 463

X-XSS-Protection: 1; mode=block

X-Frame-Options: SAMEORIGIN

Age: 187489

Alternate-Protocol: 80:quic,p=0.02

Cache-Control: public, max-age=345600
0..........0..... .....0......0...0......J......h.v....b..Z./..2015012
7010508Z0k0i0A0... ..........j.....p.I.#z...(~d..J......h.v....b..Z./.
.%(.."f.N....20150127010508Z....20150203010508Z0...*.H................
;>..@.......'.N..F....5..V'...O=.w...bX..... .8nN..Y..7b.b..W..}0..
b..\y.P.....Q...CU.8H.j....W.H.!Q.gY.O..0v?....qP.{~t...U....T.lP.YJ..
3....#N.:.<V.........^#T/<o.k...P...0'Z..|c..........m.lj.BFE...
..l"_.......*.....N......>..*u... .......V...?..v.."HTTP/1.1 200 OK
..Content-Type: application/ocsp-response..Date: Tue, 27 Jan 2015 03:5
0:40 GMT..Expires: Sat, 31 Jan 2015 03:50:40 GMT..Server: ocsp_respond
er..Content-Length: 463..X-XSS-Protection: 1; mode=block..X-Frame-Opti
ons: SAMEORIGIN..Age: 187489..Alternate-Protocol: 80:quic,p=0.02..Cach
e-Control: public, max-age=345600..0..........0..... .....0......0...0
......J......h.v....b..Z./..20150127010508Z0k0i0A0... ..........j.....
p.I.#z...(~d..J......h.v....b..Z./..%(.."f.N....20150127010508Z....201
50203010508Z0...*.H................;>..@.......'.N..F....5..V'...O=
.w...bX..... .8nN..Y..7b.b..W..}0..b..\y.P.....Q...CU.8H.j....W.H.!Q.g
Y.O..0v?....qP.{~t...U....T.lP.YJ..3....#N.:.<V.........^#T/<o.k
...P...0'Z..|c..........m.lj.BFE.....l"_.......*.....N......>..*u..
. .......V...?..v.."....
<<< skipped >>>

GET /ocsp/MEkwRzBFMEMwQTAJBgUrDgMCGgUABBTy4Gr5hYodjXCbSRkjeqm1Gih+ZAQUSt0GFhu89mi1dvWBtrtiGrpagS8CCG+vFYDQCqlf HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: clients1.google.com


HTTP/1.1 200 OK

Content-Type: application/ocsp-response

Date: Tue, 27 Jan 2015 03:49:49 GMT

Expires: Sat, 31 Jan 2015 03:49:49 GMT

Server: ocsp_responder

Content-Length: 463

X-XSS-Protection: 1; mode=block

X-Frame-Options: SAMEORIGIN

Age: 187542

Alternate-Protocol: 80:quic,p=0.02

Cache-Control: public, max-age=345600
0..........0..... .....0......0...0......J......h.v....b..Z./..2015012
7010111Z0k0i0A0... ..........j.....p.I.#z...(~d..J......h.v....b..Z./.
.o......_....20150127010111Z....20150203010111Z0...*.H.............0Mn
.L......}.m....'.^..*....".y.>.#.p...,..L<4.UXB.0..c.........:..
_a..a...E.N%.....K)l..e/Is.....B.bA.)..e...:....4~...Bm.g.G..sA.g.M...
....P'_..1m.Pe,.%.....W........I^..)j...$x.!...@q...n......&...g.#....
.Ve....i....}.m...b.J.f.A.s...1^_I.....n.......W.HTTP/1.1 200 OK..Cont
ent-Type: application/ocsp-response..Date: Tue, 27 Jan 2015 03:49:49 G
MT..Expires: Sat, 31 Jan 2015 03:49:49 GMT..Server: ocsp_responder..Co
ntent-Length: 463..X-XSS-Protection: 1; mode=block..X-Frame-Options: S
AMEORIGIN..Age: 187542..Alternate-Protocol: 80:quic,p=0.02..Cache-Cont
rol: public, max-age=345600..0..........0..... .....0......0...0......
J......h.v....b..Z./..20150127010111Z0k0i0A0... ..........j.....p.I.#z
...(~d..J......h.v....b..Z./..o......_....20150127010111Z....201502030
10111Z0...*.H.............0Mn.L......}.m....'.^..*....".y.>.#.p...,
..L<4.UXB.0..c.........:.._a..a...E.N%.....K)l..e/Is.....B.bA.)..e.
..:....4~...Bm.g.G..sA.g.M.......P'_..1m.Pe,.%.....W........I^..)j...$
x.!...@q...n......&...g.#.....Ve....i....}.m...b.J.f.A.s...1^_I.....n.
......W...<<< skipped >>>

POST /e?i=29 HTTP/1.1

Host: bench.utorrent.com

User-Agent: BTWebClient/3420(37754)

Accept-Encoding: gzip

Connection: Close

Content-Length: 171

{"h":"029fjLDzoDze8QUv","cl":"uTorrent","v":109417338,"l":"en","w":"6.1","cts":1422518115,"eventName":"dimensions", "appsize": [ 1280, 640 ], "screensize": [ 1916, 902 ] }
HTTP/1.1 200 OK

Content-Type: text/html

Date: Thu, 29 Jan 2015 07:55:16 GMT

Server: nginx

X-Powered-By: PHP/5.4.30

Content-Length: 21

Connection: Close
{"response_code":200}..

GET /installstats.php?v=71525078&h=029fjLDzoDze8QUv&hn=1&w=1DB10106&bu=0&pr=0&showinstall HTTP/1.1

Accept-Encoding: gzip

User-Agent: uTorrent/2210(25302)

Host: update.utorrent.com

Cache-Control: no-cache


HTTP/1.1 200 OK

Server: nginx/1.4.7

Date: Thu, 29 Jan 2015 07:53:51 GMT

Content-Type: text/html

Transfer-Encoding: chunked

Connection: close

X-Powered-By: PHP/5.4.30

0..

GET /installstats.php?cl=uTorrent&v=109417338&h=029fjLDzoDze8QUv&w=1DB10106&bu=0&pr=25302&cmp=217&ocmp=217&wizardcomplete&pid=3896&cau=1&view=win32 HTTP/1.1

Accept-Encoding: gzip

User-Agent: uTorrent(37754)/3.4.2

Host: update.utorrent.li

Cache-Control: no-cache


HTTP/1.1 200 OK

Server: nginx/1.4.7

Date: Thu, 29 Jan 2015 07:54:55 GMT

Content-Type: text/html

Transfer-Encoding: chunked

Connection: close

X-Powered-By: PHP/5.4.30

0..

GET /installstats.php?cl=uTorrent&v=109417338&h=029fjLDzoDze8QUv&w=1DB10106&bu=0&pr=25302&cmp=217&ocmp=217&showtbexists&pid=3896&cau=1&tbe=0&cd=0&view=win32 HTTP/1.1

Accept-Encoding: gzip

User-Agent: uTorrent(37754)/3.4.2

Host: update.utorrent.li

Cache-Control: no-cache


HTTP/1.1 200 OK

Server: nginx/1.4.7

Date: Thu, 29 Jan 2015 07:54:29 GMT

Content-Type: text/html

Transfer-Encoding: chunked

Connection: close

X-Powered-By: PHP/5.4.30

0..

GET /?clientv=29&method=track_product_installed&mstime=25.491&product_key=cb00343115ffdf69411419d8a9ceff1a&session_key=2efc2a3ef36e2f433a2f28e7651231b1&v=1.0&signature=6e1d0a0d42298c3211c5ce7faf95d785 HTTP/1.1

Host: api.opencandy.com

Accept: */*


HTTP/1.1 200 OK

Date: Thu, 29 Jan 2015 07:54:56 GMT

Server: Apache

X-Robots-Tag: noindex

Last-Modified: Thu, 29 Jan 2015 07:54:56 GMT

Cache-Control: no-store, no-cache, must-revalidate

Cache-Control: post-check=0, pre-check=0

Pragma: no-cache

Connection: close

Transfer-Encoding: chunked

Content-Type: text/xml
68..<?xml version="1.0"?><track_product_installed><oper
ation>Completed</operation></track_product_installed>..
0..

GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBSpuCE3aK3GivZPzGQJ6L5BRyZofwQUl9BrqCZwyKE/lB8ILcQ1m6ShHvICEEES5jLHsYoCmjofrIA6uJ8= HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: ocsp.verisign.com


HTTP/1.1 200 OK

Server: nginx/1.4.7

Content-Type: application/ocsp-response

Content-Length: 1790

content-transfer-encoding: binary

Cache-Control: max-age=375136, public, no-transform, must-revalidate

Last-Modified: Mon, 26 Jan 2015 16:07:09 GMT

Expires: Mon, 2 Feb 2015 16:07:09 GMT

Date: Thu, 29 Jan 2015 07:58:33 GMT

Connection: keep-alive
0..........0..... .....0......0...0........6?s....V....OlL".O..2015012
6160709Z0s0q0I0... ..........!7h....O.d...AG&h.....k.&p..?...-.5......
.A..2.....:...:......20150126160709Z....20150202160709Z0...*.H........
.....YN....hk%......F..;&.j...q....O...Hs.Y.k.D......PnsK|....Z...!...
n..o...X.._.g.t%a...pgL7....^..W..6.M.WN.P.C...<......yQ.<.p....
$..R...?....R..aB....\..v.2A.Ha.c[..2.E......Qow....}.G......P|X.0j...
.......x.u.^e=/..p.G..... n..Z65....0..1....p...............#0...0...0
..........<o&S.-S..}...e.30...*.H........0..1.0...U....US1.0...U...
.VeriSign, Inc.1.0...U....VeriSign Trust Network1;09..U...2Terms of us
e at hXXps://VVV.verisign.com/rpa (c)09100...U...'VeriSign Class 3 Cod
e Signing 2009-2 CA0...141205000000Z..150305235959Z0..1.0...U....US1.0
...U....VeriSign, Inc.1.0...U....VeriSign Trust Network1;09..U...2Term
s of use at hXXps://VVV.verisign.com/rpa (c)091<0:..U...3VeriSign C
lass 3 Code Signing 2009-2 OCSP Responder0.."0...*.H.............0....
.....{(..t....2.Vf.....&;6).i*FK....W@....F....jnb.w._p.E.6.|.mk....(.
.........p...........X.DF....^0N....b9.:..J. ZK.".^..\..p.'.$..JA..~QG
.d.}...r...gv... f...z.#..}..J...r9h.........LI-..^.......PUD.h<.l.
...(n..i.....E.....2....^./Y......Y.m...'...hz..y..E..........0...0...
U....0.0....U. ...0..0....`.H...E....0..0(.. .........hXXps://VVV.veri
sign.com/CPS0b.. .......0V0...VeriSign, Inc.0.....=VeriSign's CPS inco
rp. by reference liab. ltd. (c)97 VeriSign0...U.%..0... .......0...U..
......0... .....0......0"..U....0...0.1.0...U....TGV-B-24710...*.H<<< skipped >>>

GET /favicon.ico HTTP/1.1

Host: VVV.bittorrent.com

User-Agent: BTWebClient/3420(37754)

Accept-Encoding: gzip

If-Modified-Since: Sun, 1 Jan 1982 00:00:00 GMT

Connection: Close


HTTP/1.1 404 Not Found

Server: nginx/1.4.7

Date: Thu, 29 Jan 2015 07:55:18 GMT

Content-Type: text/html

Content-Length: 168

Connection: close
<html>..<head><title>404 Not Found</title><
/head>..<body bgcolor="white">..<center><h1>404 N
ot Found</h1></center>..<hr><center>nginx/1.4.
7</center>..</body>..</html>....

GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBQwF4prw9S7mCbCEHD/yl6nWPkczAQUe1tFz6/Oy3r9MZIaarbzRutXSFACEE1fLDQIskwgzW1QfiRNyew= HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: ocsp.thawte.com


HTTP/1.1 200 OK

Server: nginx/1.4.7

Content-Type: application/ocsp-response

Content-Length: 1503

content-transfer-encoding: binary

Cache-Control: max-age=449056, public, no-transform, must-revalidate

Last-Modified: Tue, 27 Jan 2015 12:37:06 GMT

Expires: Tue, 3 Feb 2015 12:37:06 GMT

Date: Thu, 29 Jan 2015 07:55:30 GMT

Connection: keep-alive
0..........0..... .....0......0...0......&Km...."....}....,.c..2015012
7123706Z0s0q0I0... ........0..k....&..p..^.X.....{[E....z.1..j..F.WHP.
.M_,4..L .mP~$M......20150127123706Z....20150203123706Z0...*.H........
.....z=.5.....x...r.b>C.7.B.q..C.6.y%...._.......U.>.q.3......!.
....kR../H.6....SFG.(F[;.)..Et.dzq.....^Rf|...........}..F..g>.....
nH............`..wjA....v@.P.../....D...5~1.F....r6......b./..`S.?.t..
.W..;4lXx........?..d......&q.b.l.f.[.^....#..*..Y2.O..... .....0...0.
..0............I...*....^n...0...*.H........0..1.0...U....US1.0...U...
.thawte, Inc.1(0&..U....Certification Services Division1806..U.../(c) 
2006 thawte, Inc. - For authorized use only1.0...U....thawte Primary R
oot CA0...141202000000Z..151216235959Z0_1.0...U....US1.0...U....thawte
, Inc.1907..U...0thawte Primary Root OCSP Responder Certificate 30.."0
...*.H.............0.........x...F83..,.D.,2D.;JGc.|_.k.....B.7.....G}
.M.s.....S.i.Uu.h.Aq..v...4:l..U.......T7l...~vl...r....{*..........V.
o..8|.B..^.a.. ...z....x..s...\[Y....<....'> ..YC..7.zVk.$...o3.
.kao]c...>C./bPX.......I..Oc.....NN......g.....,/..]......qN.....V!
<.3.)...y#.........i0g0...U.%..0... .......0... .....0......0...U..
.....0.0...U...........0!..U....0...0.1.0...U....TGV-B-2770...*.H.....
...........lt..\..z. ..N.f.!.S5d?J.&....r...D........L.`.s.p...HC.L.8f
... .........GA7......P..Z.%.../............z.n.6~I...].).....W...W\|.
uya..:...^...hW..7.Z.uc.'....:.xL...HS.....>.........5......%....3S
....h........U....o.C.\.t.....G.._.C0(l.E9..6UTxg.gF ..;...
<<< skipped >>>

GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBQxsL2eHTbKwjJcY2gHLbXTx2GdSQQUp6KDuzRFQD381TBPErk+oQGf9tsCECIQyRlmbgM/IEg/eUN97YQ= HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: ocsp.thawte.com


HTTP/1.1 200 OK

Server: nginx/1.4.7

Content-Type: application/ocsp-response

Content-Length: 1365

content-transfer-encoding: binary

Cache-Control: max-age=550702, public, no-transform, must-revalidate

Last-Modified: Wed, 28 Jan 2015 16:52:14 GMT

Expires: Wed, 4 Feb 2015 16:52:14 GMT

Date: Thu, 29 Jan 2015 07:55:31 GMT

Connection: keep-alive
0..Q......J0..F.. .....0.....70..30........T..I\....zk.v.*4.8..2015012
8165214Z0s0q0I0... ........1....6..2\ch.-...a.I......4E@=..0O..>...
...."...fn.? H?yC}......20150128165214Z....20150204165214Z0...*.H.....
........b.CAY.m.9V(.L~?......f30..U....=.q..~../...4..f-.=44.1..60 CF7
......|BR9......X=.JeVfe.?.`DcE./..S.....z...J..>.JC..n...3.mR.wh.]
..m.E.y3.......d..l...iH.L.9.<.......!Ii..)........Ixg..u..dG<..
..LXm.......`@e.].5.1...2.. ......).........%...N..SO.jkE..].%....z0..
v0..r0..Z.......QI...s...K!@..t.0...*.H........0<1.0...U....US1.0..
.U....Thawte, Inc.1.0...U....Thawte SSL CA0...141204000000Z..150304235
959Z0H1.0...U....US1.0...U....Thawte, Inc.1"0 ..U....Thawte SSL OCSP R
esponder0.."0...*.H.............0...........1nD.D....f.!F..-..D...w.r.
^...'..n;.s#.9]Yc..Kx.....L......E...z...\..g.35a4S......E..v t..g....
.:..q.'..............Y/.)"....5..S....f.(]b...2e... ...Z..i`..qO..G..d
.x d5.at.1\.>.O...D./..=?..{^..........T...M8.......a. y.b,..KH....
)B.ph.........*A..........d0b0...U....0.0...U.%..0... .......0...U....
....0... .....0......0"..U....0...0.1.0...U....TGV-B-24610...*.H......
.......y.....0.PU..>f...>...s..........*..^.U...N.y'?nt.-..H..o.
.....A...1H......|....:(..l$l:......g....Z...d.nn.....P....t.g.M./....
.6f..N>.}=@..O..3..../.....Wm$U.?.....u.|.....j..)0..k..,.(.....9..
%p.........'a_*..J&.a......lv.....~..O./.......R.|......(V.W....<<< skipped >>>

GET /installstats.php?cl=uTorrent&v=109417338&h=029fjLDzoDze8QUv&w=1DB10106&bu=0&pr=25302&cmp=217&ocmp=217&gettbofferresult&pid=3896&cau=1&tbofferresult=3&exit=1375&cbtoolbar=1&cbhomepage=1&tb=spigot-yandex&view=win32 HTTP/1.1

Accept-Encoding: gzip

User-Agent: uTorrent(37754)/3.4.2

Host: update.utorrent.li

Cache-Control: no-cache


HTTP/1.1 200 OK

Server: nginx/1.4.7

Date: Thu, 29 Jan 2015 07:54:55 GMT

Content-Type: text/html

Transfer-Encoding: chunked

Connection: close

X-Powered-By: PHP/5.4.30

0..

GET /langpacks/langpack-3227801ut.win.zip HTTP/1.1

Host: ll.download3.utorrent.com

User-Agent: BTWebClient/2210(25302)

Accept-Encoding: gzip

Connection: Close


HTTP/1.1 200 OK

Server: nginx/1.4.7

Content-Type: application/zip

Cache-Control: max-age=86400

Accept-Ranges: bytes

Age: 33748

Date: Thu, 29 Jan 2015 07:54:20 GMT

Last-Modified: Tue, 08 Jul 2014 18:47:58 GMT

Expires: Thu, 29 Jan 2015 22:31:52 GMT

Content-Length: 1341373

Connection: close
PK...........D.....j..........Ukrainian!uk.txt...rTW..._.z........_.[Q
eB.\.7.l$..e..)...C*S.....DH..8..CQR..1..]..8. ..JtIE........ .9..>
Wfb.j..q..B.\k...e.q..7...~.A._......s..~.?...o....vK.T.........F..^oo
..>.;&.&..........Wn.w.V.[. ..Cy.......}....~.y....k.dsM.@S\.t.>
.....?y.....Bm.\.....8W.N.\.\.R./......ZU\J.i.z..o...l.t.*f..Q..JWEm.P
..]:{V.W.W ..D|....|*..uQ,\KE...s3..|.......W....J:S/..E.R .b=.OG.DZ..
..........\..K#"W.....Wl1'.^...N.....5;..O...rY..J."7] \.....\)...SL.|
.2=...y1]._.......b.*.s%Q......W.Z.....Cr.*..T..J p.tyn.^K .DL..aC.Myc
Zro.....33)..u7....TvF......9..Rz...W..c...!?...j...(.\M..j.c....L.j5.
.D.!..~d..k...J....'g..VsW..EZ.. r.....[jK.'...?6..r.,.........S..n%B.
......(7...h?;Xio...........A.q..l../.jq.9.......-.q..3............./r
........[T.${.......s..j.....n...C..hB/Q>...a.f..m?.=...Z..........
.!G..J....7zp.ot.^Q......$.l.9...w.._.A........=..K.s..._.D.....!e.l..
K^.NSC........S((q...}....y.<RvGv....,o;. .......)n..Z.^Ep.^@.Z..=~
._.]......j.z.;L^$...#....VM........(...CK...=..'......!...0f.C..g....
..p.e.....8....'L..f9....`...6..[.Px,.2.....[zNa~.k.Y.....#!.~.F..xK`.
..w..0.0.p?<..Y$.......&^.....%....`...(..![......BS.V.....J.v.|,/.
W[g,.ryy6.7..c..B.\.NaS?..ih/ML..>4-.@.*y....o......>...a.zx.z.?
... ..........4F4?.t...d7....J.PM.d....bO....9..1S...\JA....;"..\.V..-
.z[........7`.a..........Q..0..}r......i<.`'...p8.3....w...'..OrR^.
,5p.[(.`.m.L..gl.t5.I..G.X.(.;.Ur:....m.O..a/..G.\..KH.2...<..g.X..
.gGN...M.BHNKC.!H..M. i.G.i.#x"....F.n@.H.k7.......4.......k.C...N<<< skipped >>>

POST /e?i=32 HTTP/1.1

Host: bench.utorrent.com

User-Agent: BTWebClient/3420(37754)

Accept-Encoding: gzip

Connection: Close

Content-Length: 181

{"h":"029fjLDzoDze8QUv","cl":"uTorrent","v":109417338,"l":"en","w":"6.1","cts":1422518115,"eventName":"DisplayCard","display_card" : "VMware SVGA 3D (Microsoft Corporation - WDDM)"}
HTTP/1.1 200 OK

Content-Type: text/html

Date: Thu, 29 Jan 2015 07:55:16 GMT

Server: nginx

X-Powered-By: PHP/5.4.30

Content-Length: 21

Connection: Close
{"response_code":200}..

GET /3.4.2/utorrent.37754.stable34-OC_CC217.exe?au=1&hash=4cecde076e1a0d5ae95751f0e5e78ae21b7177d4 HTTP/1.1

Host: ll.download3.utorrent.com

User-Agent: BTWebClient/2210(25302)

Accept-Encoding: gzip

Connection: Close


HTTP/1.1 200 OK

Server: nginx/1.4.7

Content-Type: application/octet-stream

Cache-Control: max-age=86400

Accept-Ranges: bytes

Age: 28354

Date: Thu, 29 Jan 2015 07:54:20 GMT

Last-Modified: Tue, 13 Jan 2015 00:00:27 GMT

Expires: Fri, 30 Jan 2015 00:01:46 GMT

Content-Length: 1677904

Connection: close
MZ......................@................................... .........
..!..L.!This program cannot be run in DOS mode....$........I...({..({.
.({..y...({.?....({..z...({..z...({..z...){."4u..({..P..j({..P...({..P
...({..P...({..P...({..(z.4*{..P...){..z...({..(...({..P...({.Rich.({.
........PE..L....1.T..........................%.@.8...%...8...@.......
...................0?.....y#........................................:.
......8..............r..P(............................................
8.H...........................................UPX0......%.............
................UPX1..........%.....................@....rsrc.........
8.....................@....opcandy......:.............................
......................................................................
......................................................................
......................................................................
......................................................................
.......3.00.UPX!.......p.....h8.;.....4.I..u...(.<.....n."....]..\.
\}<..w#._.........|..g.2H....FU.o,.....v...AT8-i5.'.......{j...hk{H
s...72.(....@.&.../.~5.h.L.Y.....V........ $8Z}9.4f.X..2.Q......fdi.|.
{l.O34n7...aN.......-..,J..]......pH..@g~.\e....P./.....1.....7...=.&.
e6.v]\b.(N>A.H..[....%r.g.....w.3.Z.........8.*.vd...U.zL.o.B......
...........3..)..b..'.....u.30.M..O.k.I.b?...w....g..E...f.......f.C5*
/....r.....oKYB.="...p....q._7q`.jW..A...q.`.~.fp.^u\..@.'.dC.....:..{
Al....q.r{...u.  Z.........w......6;......Q..........<.e'..I!..<<< skipped >>>

GET /ados.js HTTP/1.1

Accept: */*

Referer: hXXp://cdn.bitmedianetwork.com/network/index.html?adt=1224&browser=ie&clientdata=utorrent|3.4.2.37754|217&page=torrent&site=33049

Accept-Language: en-US

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/6.0)

Accept-Encoding: gzip, deflate

Host: static.ap.bittorrent.com

Connection: Keep-Alive



x....J.......Wf...i.5..2.%).J...u..ZS.......]....i......*(.$..iN....[b
....5V3qq...V.M%-..-j....U.&..J.=P....6...M..{U_-...;l. ..eI.Jul..6...
..gz....7..u...dR.k..........xc......x.* i..p...s.K...i.N..}C..X ...R(
V...cm.&..:.Mb'...w.=..............P..........1.$.b....oh..T|X....=O..
y.....,..5.._...F..u...r.._...o.m7**....p0IN...yG1..=.........;s..(.sZ
i.HQ.0.Sw.J..g.jh*]axJJJ....o7Keu z..........a.....(C.O2.. .U-I.X....X
 ...-6.AF...E*..l...Cw;]...L...1V4...F.0z.5.J.s5z......a...<...)tN.
.RUZ......m...Q@I[..k v.0.c..1D]_...1T.:.'Qm..JR.q..\.lB....Qt.S......
.J.ON.X._.S7YX.&.i..-.j[pII..B* .n...R....u...$I...4.C.@9@.Z...TkUBF.B
W..,DU...a.....m.S...E#..8.a..n.[cBP>.z.N......Y.W.i"..P.I.....f...
.}....d....G.....IJ.....i..........2....o.gL..z.. .Z.PO.L)....Z...K.BR
.B.7V..=..[....ZUC..............hP.,.P.j...JH..QH.J.<].s...... .!.;
uR9^...#..[..n:....s.]b.... ..g.IH....p.[O.54.....G.....:...0S..P...D.
...3 .M)....hP..H;."g..[.<BO.y9$.....=...S.o3.>Rg,:....Pi..S... 
^-.,.y..ln...s9.)..Q....:b.5.....HK.*.....M.C....G.9..........R..Q...E
M}uB..kV.j..u-..u)D...-..C.....p.u%D.[~^.."".UJii(|.....yY..R.I..e.(..
o....%u.....t.%.\.q.&@i H..?...(f......J.y&JB.u..H0.g1...*P.k.q.[.4..)
*w...ui..eE%M.EE2....L.L..$.J..?....L.....t.N.tAe................ P<
;$ iBR|..GLjG....l.3..9...O.uV..... s.L.....U.S9g.....SgK....JXN...2..
.0g,6.LU1\.....X....fg..J.%D...L..yr....!M\hW@............=.v.J\..."H.
...d...."..P.n...'.. IB...d.-.......N.......H...7.U\,.........|..N..].
`z.!.>P.

GET /ThawtePremiumServerCA.crl HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: crl.thawte.com


HTTP/1.1 200 OK

Server: Apache

ETag: "39808ea12d05cd56b1932fd04ab6da2a:1422480042"

Last-Modified: Wed, 28 Jan 2015 21:20:42 GMT

Date: Thu, 29 Jan 2015 07:55:30 GMT

Content-Length: 12067

Connection: keep-alive

Content-Type: application/pkix-crl

0./.0...0...*.H........0..1.0...U....ZA1.0...U....Western Cape1.0...U.
...Cape Town1.0...U....Thawte Consulting cc1(0&..U....Certification Se
rvices Division1!0...U....Thawte Premium Server CA1(0&..*.H........pre
mium-server@thawte.com..150128210056Z..150207210056Z0.-.0!....f....p..
........100129104213Z0!....l.C`..L.%|\.T...130819183955Z0!....T..W...p
.[..%...100322161038Z0!....hx.....k...7....130919164724Z0!....$#.R|..$
.....j..130926101045Z0!...!P..6{.lS.@...5..130927150657Z0!...Da\v.....
.....%..130920062728Z0!...>.e..-...s[.2I...140418142220Z0!....dU...
(...=...*..140801114607Z0!........d.{#E..9`...130926061856Z0!....6..q.
'tT..1.Q...130926062249Z0!.....cXzF..(O0.|.N..131002103626Z0!.........
...>..i....130528164218Z0!..........#.P.......130716072254Z0!.....W
........JH....130924125316Z0!.....%.......R......100801221434Z0!.....M
..HK.....x....130926060355Z0!....k."..z......64..130919082450Z0!...N..
D...0....`H2..130829152308Z0!......Q..m...A..j...100226190909Z0!.....-
...k......h...130930085951Z0!...... ...7. .UA.I..130927152007Z0!.....}
.L....\/..$^..100407191443Z0!....1....c...s.>9t..100215170304Z0!...
W..._....%..I....130926063253Z0!..._._~gq.I.)q6@g...131025034600Z0!...
..=X>...]..h5@...130920130332Z0!.............U.<....100318180248
Z0!... .(........n.S...130923202627Z0!.....k(....k4.......130919073042
Z0!....rF..O..#^.......100312081338Z0!.....:...B..=]Hsx_..130920011556
Z0!....uJdm..'...\G....130523054519Z0!....]h..g.o....@\ ..100107184454
Z0!...z..1).Ht.........100323155426Z0!.... ....z.i.a.nl...10031221

<<< skipped >>>

GET /favicon.ico HTTP/1.1

Host: google.com

User-Agent: BTWebClient/2210(25302)

Accept-Encoding: gzip

Connection: Close


HTTP/1.1 301 Moved Permanently

Location: hXXp://VVV.google.com/favicon.ico

Content-Type: text/html; charset=UTF-8

X-Content-Type-Options: nosniff

Date: Tue, 27 Jan 2015 15:24:52 GMT

Expires: Thu, 26 Feb 2015 15:24:52 GMT

Server: sffe

Content-Length: 230

X-XSS-Protection: 1; mode=block

Age: 145760

Alternate-Protocol: 80:quic,p=0.02

Cache-Control: public, max-age=2592000

Connection: close
<HTML><HEAD><meta http-equiv="content-type" content="te
xt/html;charset=utf-8">.<TITLE>301 Moved</TITLE></HE
AD><BODY>.<H1>301 Moved</H1>.The document has mov
ed.<A HREF="hXXp://VVV.google.com/favicon.ico">here</A>...
</BODY></HTML>....

GET /pki/crl/products/MicrosoftTimeStampPCA.crl HTTP/1.1

Cache-Control: max-age = 900

Connection: Keep-Alive

Accept: */*

If-Modified-Since: Mon, 05 May 2014 05:04:34 GMT

If-None-Match: "87fbb3811f68cf1:0"

User-Agent: Microsoft-CryptoAPI/6.1

Host: crl.microsoft.com


HTTP/1.1 200 OK

Content-Type: application/pkix-crl

Last-Modified: Fri, 19 Dec 2014 06:02:00 GMT

Accept-Ranges: bytes

ETag: "9a9a44d511bd01:0"

Server: Microsoft-IIS/8.0

VTag: 279252244600000000

P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI"

X-Powered-By: ASP.NET

Content-Length: 550

Cache-Control: max-age=900

Date: Thu, 29 Jan 2015 07:55:30 GMT

Connection: keep-alive

0.."0......0...*.H........0w1.0...U....US1.0...U....Washington1.0...U.
...Redmond1.0...U....Microsoft Corporation1!0...U....Microsoft Time-St
amp PCA..141218221600Z..150319103600Z._0]0...U.#..0...#4..RFp..@.v.. .
.5..0... .....7.......0...U......10... .....7......150318222600Z0...*.
H............./..0Q~.r.}.E....&\....F.Z.C..#..F.s........<&\..9G..-
....j..N... .C.Fk....;l.....2.K5D.........-.>...(...g.0.S.[?...T4q&
gt;.ln...z..L.......5.5s@d.q.('..e...Y..Bo..q..........I....'....i>
..y:.eH@h`..\...UA.m#.~.. ;.3..d..;..<..........p..s..J..N `Az.....
.@..lHTTP/1.1 200 OK..Content-Type: application/pkix-crl..Last-Modifie
d: Fri, 19 Dec 2014 06:02:00 GMT..Accept-Ranges: bytes..ETag: "9a9a44d
511bd01:0"..Server: Microsoft-IIS/8.0..VTag: 279252244600000000..P3P: 
CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR S
AMo CNT COM INT NAV ONL PHY PRE PUR UNI"..X-Powered-By: ASP.NET..Conte
nt-Length: 550..Cache-Control: max-age=900..Date: Thu, 29 Jan 2015 07:
55:30 GMT..Connection: keep-alive..0.."0......0...*.H........0w1.0...U
....US1.0...U....Washington1.0...U....Redmond1.0...U....Microsoft Corp
oration1!0...U....Microsoft Time-Stamp PCA..141218221600Z..15031910360
0Z._0]0...U.#..0...#4..RFp..@.v.. ..5..0... .....7.......0...U......10
... .....7......150318222600Z0...*.H............./..0Q~.r.}.E....&\...
.F.Z.C..#..F.s........<&\..9G..-....j..N... .C.Fk....;l.....2.K5D..
.......-.>...(...g.0.S.[?...T4q>.ln...z..L.......5.5s@d.q.('..e.
..Y..Bo..q..........I....'....i>..y:.eH@h`..\...UA.m#.~.. ;.3..

<<< skipped >>>

GET /pki/crl/products/microsoftrootcert.crl HTTP/1.1

Cache-Control: max-age = 900

Connection: Keep-Alive

Accept: */*

If-Modified-Since: Sat, 24 May 2014 05:04:51 GMT

If-None-Match: "96bfbfb1d77cf1:0"

User-Agent: Microsoft-CryptoAPI/6.1

Host: crl.microsoft.com


HTTP/1.1 200 OK

Content-Type: application/pkix-crl

Last-Modified: Wed, 07 Jan 2015 06:02:43 GMT

Accept-Ranges: bytes

ETag: "88c4768d3f2ad01:0"

Server: Microsoft-IIS/8.0

VTag: 791450244700000000

P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI"

X-Powered-By: ASP.NET

Content-Length: 813

Cache-Control: max-age=900

Date: Thu, 29 Jan 2015 07:55:31 GMT

Connection: keep-alive
0..)0......0...*.H........0_1.0.....&...,d....com1.0.....&...,d....mic
rosoft1-0 ..U...$Microsoft Root Certificate Authority..150106214825Z..
150407100825Z0.0...a......../..100208014912Z._0]0...U.#..0......`@V'..
%..*..S.Y..0... .....7.......0...U......(0... .....7......150406215825
Z0...*.H..............vQ..r..L.Q.N..=#.......V;..r../\.m..<.."...F/
U....(:.....xm.....P.e.F..BE8......=...G....6t:...?...L..B.v..p.M.....
...z..Q.%J.6..I.......8...U. .g..=T=K....L..$w...^....y~..-a.'...*s#N.
o..Qs.$h..:duV'~....8.6..w..b3.... .~)...|.I.y".>R.nJq.ws...3.....f
}.E)\......EB.d\.2.....h...lMjT.7..lj.'lj.b....".L.Os6{.s...@....f.|7z
.. ......>..Q...(......._....UM.EN.@.K\]#..Y.*.......T. .C.....A'..
5FW.ETDvX..tE.....g5.....&..&.....x.^H;...../7..'9.t.I&<[.HX.j....Q
w......}...qy3..q`<.....LB.9w|....;..Qw..a ..=.C.:.........


GET /pki/crl/products/WinPCA.crl HTTP/1.1

Cache-Control: max-age = 900

Connection: Keep-Alive

Accept: */*

If-Modified-Since: Wed, 07 May 2014 05:04:02 GMT

If-None-Match: "a413fc3b169cf1:0"

User-Agent: Microsoft-CryptoAPI/6.1

Host: crl.microsoft.com


HTTP/1.1 200 OK

Content-Type: application/pkix-crl

Last-Modified: Sun, 21 Dec 2014 06:03:02 GMT

Accept-Ranges: bytes

ETag: "d2e35dc7e31cd01:0"

Server: Microsoft-IIS/8.0

VTag: 27948442200000000

P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI"

X-Powered-By: ASP.NET

Content-Length: 561

Cache-Control: max-age=900

Date: Thu, 29 Jan 2015 07:55:31 GMT

Connection: keep-alive
0..-0......0...*.H........0..1.0...U....US1.0...U....Washington1.0...U
....Redmond1.0...U....Microsoft Corporation1 0)..U..."Microsoft Window
s Verification PCA..141220223154Z..150321105154Z._0]0...U.#..0.......p
............<.J0... .....7.......0...U......30... .....7......15032
0224154Z0...*.H.............h.~oH#i.J.vh_.....A'B..g...........F....9c
.{.m@Q.M.p...g.^ 4.r..Wv.Q.0.w..j....c9..w....I..%.~.l..F.......xo....
_...o...7BR.;<..\R/ .....b.(....~..]|.v.u.i.X.B....I......./*...P..
A..fi.}& .x.v{TFP[.G......A......L.o...)R.......V.u..V.../.Q..(L.]....
.uki~......


GET /pki/crl/products/MicCodSigPCA_08-31-2010.crl HTTP/1.1

Cache-Control: max-age = 900

Connection: Keep-Alive

Accept: */*

If-Modified-Since: Tue, 01 Jul 2014 05:04:34 GMT

If-None-Match: "924558f3e994cf1:0"

User-Agent: Microsoft-CryptoAPI/6.1

Host: crl.microsoft.com


HTTP/1.1 200 OK

Content-Type: application/pkix-crl

Last-Modified: Wed, 28 Jan 2015 06:05:55 GMT

Accept-Ranges: bytes

ETag: "75565c7ac03ad01:0"

Server: Microsoft-IIS/8.0

VTag: 279455044500000000

P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI"

X-Powered-By: ASP.NET

Content-Length: 554

Cache-Control: max-age=900

Date: Thu, 29 Jan 2015 07:55:31 GMT

Connection: keep-alive

0..&0......0...*.H........0y1.0...U....US1.0...U....Washington1.0...U.
...Redmond1.0...U....Microsoft Corporation1#0!..U....Microsoft Code Si
gning PCA..150127173215Z..150428055215Z.a0_0...U.#..0..........X..7.3.
..L...0... .....7.........0...U......Y0... .....7......150427174215Z0.
..*.H......................YIw.. ..(..y..O.G].B.."?.@...[1.}.X...]...e
.J....pP.I....!6...%.D.k...>c.|R.?.i..yt.z..B.........b....n..m5...
0....2..I!)v....z....y.#pXz.DO.....mF...e.'e...@.%...6./.bPZ...=....bp
..j....lo....4........T9j...S.7Q.@.W..@.. ...M....z....Q...{u. .W..HTT
P/1.1 200 OK..Content-Type: application/pkix-crl..Last-Modified: Wed, 
28 Jan 2015 06:05:55 GMT..Accept-Ranges: bytes..ETag: "75565c7ac03ad01
:0"..Server: Microsoft-IIS/8.0..VTag: 279455044500000000..P3P: CP="ALL
 IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT
 COM INT NAV ONL PHY PRE PUR UNI"..X-Powered-By: ASP.NET..Content-Leng
th: 554..Cache-Control: max-age=900..Date: Thu, 29 Jan 2015 07:55:31 G
MT..Connection: keep-alive..0..&0......0...*.H........0y1.0...U....US1
.0...U....Washington1.0...U....Redmond1.0...U....Microsoft Corporation
1#0!..U....Microsoft Code Signing PCA..150127173215Z..150428055215Z.a0
_0...U.#..0..........X..7.3...L...0... .....7.........0...U......Y0...
 .....7......150427174215Z0...*.H......................YIw.. ..(..y..O
.G].B.."?.@...[1.}.X...]...e.J....pP.I....!6...%.D.k...>c.|R.?.i..y
t.z..B.........b....n..m5...0....2..I!)v....z....y.#pXz.DO.....mF...e.
'e...@.%...6./.bPZ...=....bp..j....lo....4........T9j...S.7Q.@.W..

<<< skipped >>>

GET /offers/spigot-yandex-en-20140708.exe HTTP/1.1

Host: ll.download3.utorrent.com

User-Agent: BTWebClient/3420(37754)

Accept-Encoding: gzip

Connection: Close


HTTP/1.1 200 OK

Server: nginx/1.4.7

Content-Type: application/octet-stream

Cache-Control: max-age=14400

Accept-Ranges: bytes

Age: 10163

Date: Thu, 29 Jan 2015 07:54:57 GMT

Last-Modified: Fri, 25 Jul 2014 17:50:03 GMT

Expires: Thu, 29 Jan 2015 09:05:34 GMT

Content-Length: 157480

Connection: close

MZ......................@.............................................
..!..L.!This program cannot be run in DOS mode....$........>..._...
_..._...';.._...'-.._....*.._...'*.._...'=.._..._..._...'$.._...':.._.
..'?.._..Rich._..........................PE..L......S.................
........... .............@.......................................@....
.............................4........................N..(.......`...@
...............................8...@..................................
..........text............................... ..`.rdata...V.......X...
...............@..@.data...hR...0......................@....rsrc......
..........$..............@..@.reloc..t".......$...*..............@..B.
......................................................................
......................................................................
......................................................................
......................................................................
...............................................V..v.f.0f;1u.@@AAJu.3.^
....f;.^.....@.U...u..u..u..u...{...E....].U...u..u..u..u..or...E....]
...`.A...s..V....`.A...s...D$..t.V..{..Y..^....j....A..U......u...r...
e...u..N...l.A...-............V..j.j..N...l.A...3....^."s...y$.r..A...
A..V........D$..t.V..{..Y..^...V.t$....x.....x.A...^.....x.A......V...
.x.A.......D$..t.V..z..Y..^...V.t$....3.......A...^.......A..Q...V....
..A..C....D$..t.V.xz..Y..^...V.t$............A...^...j....A..7......u.
.}.W..q...e.....W.N...l.A...,............j....A......j...~....Y.u.

<<< skipped >>>

GET /installstats.php?cl=uTorrent&v=109417338&h=029fjLDzoDze8QUv&w=1DB10106&bu=0&pr=25302&cmp=217&ocmp=217&mismexecute&pid=3896&cau=1&download=0&execute=0&error=mism execute succeeded&mismreturn=0&mismresult=provider:9,search:1,homepage:1&view=win32 HTTP/1.1

Accept-Encoding: gzip

User-Agent: uTorrent(37754)/3.4.2

Host: update.utorrent.li

Cache-Control: no-cache


HTTP/1.1 200 OK

Server: nginx/1.4.7

Date: Thu, 29 Jan 2015 07:54:31 GMT

Content-Type: text/html

Transfer-Encoding: chunked

Connection: close

X-Powered-By: PHP/5.4.30

0..

GET /edgedl/update2/1.3.25.11/GoogleUpdateSetup.exe?cms_redirect=yes&expire=1422532603&ip=37.57.16.189&ipbits=0&mm=28&ms=nvh&mt=1422518019&mv=u&pl=22&shardbypass=yes&sparams=expire,ip,ipbits,mm,ms,mv,pl,shardbypass&signature=1763764EEF826BF371ABA1E1BD8BA9F95646F68B.31B38869D12C6E8271821A57F03A6AACA83E6BE4&key=cms1 HTTP/1.1

Connection: Keep-Alive

Accept: */*

Accept-Encoding: identity

If-Unmodified-Since: Fri, 21 Nov 2014 23:25:00 GMT

Range: bytes=339016-346991

User-Agent: Microsoft BITS/7.5

X-Old-UID: cnt=0

X-Last-HR: 0x0

X-Last-HTTP-Status-Code: 0

X-Retry-Count: 0

Host: r2---sn-ugpva5o-3c2e.c.pack.google.com


HTTP/1.1 206 Partial Content

Accept-Ranges: bytes

Content-Length: 7976

Content-Type: application/x-msdos-program

Etag: "4ba9e"

Server: downloads

Vary: *

X-Content-Type-Options: nosniff

X-Frame-Options: SAMEORIGIN

X-Xss-Protection: 1; mode=block

Date: Sun, 18 Jan 2015 07:51:53 GMT

Alternate-Protocol: 80:quic,p=0.02

Last-Modified: Fri, 21 Nov 2014 23:25:00 GMT

Content-Range: bytes 339016-346991/880784

Connection: keep-alive

Alternate-Protocol: 80:quic,p=0.01
(......Ua....&O..W.4...%.s..,...&W....?..f..X.7.....v,....d..a\\?'...o
"...q...PD.T..u.h*.F.....<.nf.)..B.S..E...5..........|...B.... ... 
.:..Rw.=...T...Y.....v.qK..L..Y`......(4.Y9..RZT.....cT.Tf...kFX.rC...
.....U...'...B.s.a.0..uM..K@.YF.a.....m.......8.iY....kb..m...d=}...'.
..p5d..........4v}H..b'.....K.ec....Px...{.........!.\...w........d.&.
Db.l].............T6..!Y...1.y...xZ,...9O..FH..B(.=......E...a.9={!..1
".2...*....6Q......c..[....V.o.....(.......}.j...r.."...Q.. .U.rfr.. .
..<...vqT...gGf..^..l..8_t......6j` .K_Y~.E....4.. .93\.y.T...6...v
....X......c...%ni.......zW1.....2.;u.W...;.....J....l.h.3.cK...sc..&g
t;x.a..............I...#....6..........<...`n{..w*.....!."8]..[EvC3
..S...X...>.....3....P.*..m.b.........[.].>o....O.....V.!.iQ".SL
.......ga...rP.r.5..?t.d]...>...q!xG.%^......5......#!j.'..!].....o
g.0......W3aZ...N.&...fu....'O..^7..........R...A...U...~.....H.G.Y. I
.4...b....<......>#.7....N....-NC..f..s.?wy..V.<k..XV.J};...E
W~..,Y..\l78....Al.....50.......h`..Z|..=..r..3."?b-...p..)...u.[....h
..$...I*..7$....1..R....K....ki.......oX.^....9.kM..I.2%@...44J.^e*LSN
..K...T.C#x73;`.C.`.&<m.).u.S..#.[.[.2.......t..M|.G.......U.W..$I.
D~.w.`.!....?.T.~bO....U...E....W.>s.......=e.p.......K...>.u.v.
.D%.....E.uXL0.w..qw....,...L.3.R.4y....OX0....T..2(.....-"x6.G.p..}..
.l.Si7V.ht. ..V[.QcD .>.f.q....n........ .......w.7...!~%......l...
.W...C...v.O8:..Tu@..I.`.rlf.k.L3.nM...}.@..U*.X.....gB.;...|.!.x.x:2.
..C.L.....X2'_.....*pY.Q.cIR.}......%..x.b....v.......J.(..D..Tj.R<<< skipped >>>

GET /edgedl/update2/1.3.25.11/GoogleUpdateSetup.exe?cms_redirect=yes&expire=1422532603&ip=37.57.16.189&ipbits=0&mm=28&ms=nvh&mt=1422518019&mv=u&pl=22&shardbypass=yes&sparams=expire,ip,ipbits,mm,ms,mv,pl,shardbypass&signature=1763764EEF826BF371ABA1E1BD8BA9F95646F68B.31B38869D12C6E8271821A57F03A6AACA83E6BE4&key=cms1 HTTP/1.1

Connection: Keep-Alive

Accept: */*

Accept-Encoding: identity

If-Unmodified-Since: Fri, 21 Nov 2014 23:25:00 GMT

Range: bytes=346992-357303

User-Agent: Microsoft BITS/7.5

X-Old-UID: cnt=0

X-Last-HR: 0x0

X-Last-HTTP-Status-Code: 0

X-Retry-Count: 0

Host: r2---sn-ugpva5o-3c2e.c.pack.google.com


HTTP/1.1 206 Partial Content

Accept-Ranges: bytes

Content-Length: 10312

Content-Type: application/x-msdos-program

Etag: "4ba9e"

Server: downloads

Vary: *

X-Content-Type-Options: nosniff

X-Frame-Options: SAMEORIGIN

X-Xss-Protection: 1; mode=block

Date: Sun, 18 Jan 2015 07:51:53 GMT

Alternate-Protocol: 80:quic,p=0.02

Last-Modified: Fri, 21 Nov 2014 23:25:00 GMT

Content-Range: bytes 346992-357303/880784

Connection: keep-alive

Alternate-Protocol: 80:quic,p=0.01
#..D....p....<Y.)u....,.j..T...@.........o0...u.m8%...cS..yj}....$.
q.e......\.....e.......[...V.r.E..#..6.W.^..7..D.9BW/R..T-.pMW`..#.eE.
"3...2a.........0..lRC..3rOv..E>?.zf..../..{..71.......P.....JF..c..
..Y..Z.s..YCaAC...sU...:q...IB!|....L'n......E.....(..H.H..........c..
*K......Q"*....?...R...3..).-pB..fZbH.J. .y.t.6..m.6.'gsQ{..:.8s.Z3.{Z
l,..QO..4z.~.q..S=.....5.....8.V.7.g.c#......8c..H....;.........d.x..a
jn..">.{..3...rk....P)....V...n:.a.w.o...U.r.....u..lF[sx..e.....*$
G.P............XI..w..s-.]....].....l@.1........{;...-...r.2\&........
. RN.-..MI.D.WX[@.;...M.V..A}./.......\1.7. ..._...G.p.O7.;..en|x..U.5
B..R....T..f...wf.7.. ..)...6.h,e...6zK...5i.?.&...f.0.. ......._.-...
.......D,...;m...<....P....SAm[w...x..:..i.......[.....r.,(..o.](S.
.42...s...>...(F..2.7.;.3...1.I............M\...U.....{ a..'..|*.b.
....Lz...?f.......<.~............Uk....OV?8..vBW[.Y.-X.es..5..g..".
LYR.2H.p.I..t.l[k.....j.C..*.?...F.M&>.7........p...b.5^...*./..I.]
..m..;:..ni?r.a...Z..8.......o..P...rHn......V........I.k5,_Y....<.
.E...'..../..........w./..L...w...,.U<...yX.....lq>-..>X...bL
 ...D..u...@Od.....;..Y....W...l...A\=.....rw..... .75...4.AZ..h..{..~
~...b.C.!6......P.$.L~.f.8.7s......k....@2..-..[......H.?/...Z....d.G.
.".haI....7,W.@.....8....'..xY.Y.-...........2l.&.k....W../.Y".'sp.l..
}..$..z.....7!J&.}.....C...k.....O2Z.(..].en......q.a!...n...r .V..a..
..k....).OD.z....S..M]&7Xu...$Z...?.......F..6...X.7..2[./9.)3.(...f..
.e..).......E.B..A.$/....r.....N..`....,...a.....~b{..6R.(...9%hG.<<< skipped >>>

GET /network/index-edge.html?tag=ant&adt=1224&browser=ie&clientdata=utorrent|3.4.2.37754|217&page=torrent&site=33049 HTTP/1.1

Accept: application/x-ms-application, image/jpeg, application/xaml xml, image/gif, image/pjpeg, application/x-ms-xbap, */*

Accept-Language: en-US

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/6.0)

Accept-Encoding: gzip, deflate

Host: cdn.bitmedianetwork.com

Connection: Keep-Alive


HTTP/1.1 200 OK

x-amz-id-2: H9PnE8k0eVfmElFpx9syj0OiKgiKZuIZR5Cz05ggY2/8kc5OC1la8s5wEKCGCIz/

x-amz-request-id: 1AD8EC740A2CE641

Cache-Control: public,max-age=1200,s-max-age=1800

Content-Type: text/html

Server: AmazonS3

Content-Encoding: gzip

Vary: Accept-Encoding

Age: 10370

Date: Thu, 29 Jan 2015 07:57:16 GMT

Last-Modified: Fri, 23 Jan 2015 21:05:11 GMT

Expires: Thu, 29 Jan 2015 05:24:26 GMT

Content-Length: 2473

Connection: keep-alive
............ks.H....X......c..e..{.|{.........i...D............7.u% M.
..{.....wo>......<.88W_.........LP..E.}]..k<6...E...|.0.xQ(X(
\.......h.[....z&d....-}!dA}...>i...9..<,-E .O.h.'3..,. [....H.y
1_."6....=..=]Q.j......0.Y.>.q......e&.9Y...Qhr ."kj.....o|h..E..].
4...%..........0.s...)....4.`.u......a/....M.s0Z..Z.....![.k*...P7....
.M.....VJt..).) y..D.o.....}7.6M6..:....;.......m.3.....k6.;..^f......
.-?..l....2Z..zmO...4...Q....'.9.F#s....R......y.=v:.G....t).2r.B.!.:e
 .....,%..G....h.cL.v.E...!...K.o....?{...'.E[.,d.B..B.X2J-....\Y...%.
....eB.......5.6....V.AQ...9`;8..[-....9.. e.#@.......J..%......@<D
P/.$......2..9.3...:.QT..[....\...v.y....Fcof'....4.d.pa./v.....8.P&Y.
...V...4.w)..k.......... .?4.<8z......F.UxB.@~..........#.l.T..;$.8
.a.OX...4.@.[-.K6...^.'....n...X$.*._......S...,..O....M ......".(..d.
.(d&.mQ...?L.T.D..=."}.EQG.G...DT5.*$$.].>....E]U........./.....2HX
a...'WX.._...A1..|....I.t....a.NE...3...c1...,..c.....vE.wU.x.. .>.
.<...../W....c. I.c8.-.n..4Wj..Mb..H..Ae...>9.;....9 {..p.@%.X!.
......q:..|.. .........gHm,......8DJ.wk....;...I~~D...a9......w..u:...
.?.OB..Yn....Q.!|.'o..H....^L.l..#.*....i.g....U...........'.tN.x.....
......8..t...lu.......:..u:.i.(%...{.k..Q..N..S.....f8..!N..=._.&..F..
up..........z.....Qtp....qzu..Y....#..:5x.}..v....]9.....}t{]....{...J
.{...E.-.>........YG....s2..#...<.6*|.....$.X....`g$.e~..g.k...|
!6f4..R..E...X.]&....*..f7I..r.._*..K,.0c.VX....|4.h2....T.r&......*`.
).".MM..&.2....}Qc.i|..y.. .....W.......CW.R7X.....N..x>.h..2.;<<< skipped >>>

GET /network/jquery-1.11.1.min.js HTTP/1.1

Accept: */*

Referer: hXXp://cdn.bitmedianetwork.com/network/index-edge.html?tag=ant&adt=5&browser=ie&clientdata=utorrent|3.4.2.37754|217&page=torrent&site=33049

Accept-Language: en-US

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/6.0)

Accept-Encoding: gzip, deflate

Host: cdn.bitmedianetwork.com

Connection: Keep-Alive


HTTP/1.1 200 OK

x-amz-id-2: kjVT9JbL6VkmVE/TUQDiyJrb4nGyOm11BlJQqKqtYI9b79i2kSU7MPyBnqt0GRLU

x-amz-request-id: 7EA90BB87ED81DED

Cache-Control: public,max-age=1200,s-max-age=1800

Content-Type: application/javascript

Server: AmazonS3

Content-Encoding: gzip

Vary: Accept-Encoding

Age: 35213

Date: Thu, 29 Jan 2015 07:57:16 GMT

Last-Modified: Wed, 21 Jan 2015 20:56:49 GMT

Expires: Wed, 28 Jan 2015 22:30:23 GMT

Content-Length: 33266

Connection: keep-alive
............y{.F./....".....E:.=......$.u..$.....$$n")......~. ...s...
.....t7z.......i...ow......?......,8{6.|,...#....n.'.r..g_..>...EN.
..],..X..........2.......:.....E..M...-.....vOd.....v....Q......X...j.
...6.<.S.c....v}..*..>.n.[.S....w....%g..*.2..~No.K/.m...vuF....
........".:....X...y.....I.gY4..<..;..(.)[..d/..............S1.....
.....~[.f..^................-"O..'.Q.]...~.....r.9G...~._......./..~:.
....'.3..b......D....*O......R..7.R...P.^$....#..-...z...E..Z.......w.
~...bW,.~.<.(V..<......6y. l...Y.X..n....W.@..n..DI<.Lb..'=..
e..P.M.jeX.W.$..T.ULi$.b; .h......B...x.=.u......x _..H..H.y.:..>..
%!Wm.l.F.U.N...d.W.0..)...R.*..^...9.U....f..z...>...i...OUP...*.H.
Y.|He...)wVLdQ/..X.4.....3....nz..c^.l2...T..O..,...X[....p*v..B...#v.
.:z..Z".S{j'.....61$ZL..\.bJ..L.x09.hG..!m}...~.u..)PX.^/.de.......Y..
.....D.....e..}..5....F.$......f.p........P..V.....R.._.Y.: .$.....T..
Y'.2t....Z.a.. 9.t.P..U..7:%.A............I.'X....uq....Gz..k.d.4|....
.....T.@3.p.#.4...P..^._..M.....K?...b.H....zIX...Q..^$.C.....M....P..
.^o\`$to..e.{:.....u.j....WO...RA....?.S.4..v...\y....h..e..I.])..|.lw
...u...M..?_n..r..{..;..%..s...._;...5.......3..!...y..^%...S.mi.}....
....\K....I..'....u........m.H.?.v..)......W......pf....$i...M....N..@
..V..5Nz..6..&..8......<..y.u>...:M...I..Q:.R.V.c..B./..Vd..m..;
.J.)..u....E.,..(...$f;..G..g..F..V......cV....d.3.1...5........8b....
..P.....[...1}:......e1*$Z..~y.&...g@.bD.0H.Ers,.DR..B.....t[r..a!....
{.W........:.9..gWj.,.....Q|..M.=..........bM.e..1.../h....9..H.@d<<< skipped >>>

GET /network/jquery-1.11.1.min.js HTTP/1.1

Accept: */*

Referer: hXXp://cdn.bitmedianetwork.com/network/index-edge.html?tag=ant&adt=1224&browser=ie&clientdata=utorrent|3.4.2.37754|217&page=torrent&site=33049

Accept-Language: en-US

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/6.0)

Accept-Encoding: gzip, deflate

Host: cdn.bitmedianetwork.com

Connection: Keep-Alive


HTTP/1.1 200 OK

x-amz-id-2: kjVT9JbL6VkmVE/TUQDiyJrb4nGyOm11BlJQqKqtYI9b79i2kSU7MPyBnqt0GRLU

x-amz-request-id: 7EA90BB87ED81DED

Cache-Control: public,max-age=1200,s-max-age=1800

Content-Type: application/javascript

Server: AmazonS3

Content-Encoding: gzip

Vary: Accept-Encoding

Age: 35213

Date: Thu, 29 Jan 2015 07:57:16 GMT

Last-Modified: Wed, 21 Jan 2015 20:56:49 GMT

Expires: Wed, 28 Jan 2015 22:30:23 GMT

Content-Length: 33266

Connection: keep-alive
............y{.F./....".....E:.=......$.u..$.....$$n")......~. ...s...
.....t7z.......i...ow......?......,8{6.|,...#....n.'.r..g_..>...EN.
..],..X..........2.......:.....E..M...-.....vOd.....v....Q......X...j.
...6.<.S.c....v}..*..>.n.[.S....w....%g..*.2..~No.K/.m...vuF....
........".:....X...y.....I.gY4..<..;..(.)[..d/..............S1.....
.....~[.f..^................-"O..'.Q.]...~.....r.9G...~._......./..~:.
....'.3..b......D....*O......R..7.R...P.^$....#..-...z...E..Z.......w.
~...bW,.~.<.(V..<......6y. l...Y.X..n....W.@..n..DI<.Lb..'=..
e..P.M.jeX.W.$..T.ULi$.b; .h......B...x.=.u......x _..H..H.y.:..>..
%!Wm.l.F.U.N...d.W.0..)...R.*..^...9.U....f..z...>...i...OUP...*.H.
Y.|He...)wVLdQ/..X.4.....3....nz..c^.l2...T..O..,...X[....p*v..B...#v.
.:z..Z".S{j'.....61$ZL..\.bJ..L.x09.hG..!m}...~.u..)PX.^/.de.......Y..
.....D.....e..}..5....F.$......f.p........P..V.....R.._.Y.: .$.....T..
Y'.2t....Z.a.. 9.t.P..U..7:%.A............I.'X....uq....Gz..k.d.4|....
.....T.@3.p.#.4...P..^._..M.....K?...b.H....zIX...Q..^$.C.....M....P..
.^o\`$to..e.{:.....u.j....WO...RA....?.S.4..v...\y....h..e..I.])..|.lw
...u...M..?_n..r..{..;..%..s...._;...5.......3..!...y..^%...S.mi.}....
....\K....I..'....u........m.H.?.v..)......W......pf....$i...M....N..@
..V..5Nz..6..&..8......<..y.u>...:M...I..Q:.R.V.c..B./..Vd..m..;
.J.)..u....E.,..(...$f;..G..g..F..V......cV....d.3.1...5........8b....
..P.....[...1}:......e1*$Z..~y.&...g@.bD.0H.Ers,.DR..B.....t[r..a!....
{.W........:.9..gWj.,.....Q|..M.=..........bM.e..1.../h....9..H.@d<<< skipped >>>

GET /installstats.php?cl=uTorrent&v=109417338&h=029fjLDzoDze8QUv&w=1DB10106&bu=0&pr=25302&cmp=217&ocmp=217&installresult&pid=3896&cau=1&installresult=0&exit=1&au=0&view=win32 HTTP/1.1

Accept-Encoding: gzip

User-Agent: uTorrent(37754)/3.4.2

Host: update.utorrent.li

Cache-Control: no-cache


HTTP/1.1 200 OK

Server: nginx/1.4.7

Date: Thu, 29 Jan 2015 07:54:57 GMT

Content-Type: text/html

Transfer-Encoding: chunked

Connection: close

X-Powered-By: PHP/5.4.30

0..

GET /analytics.js HTTP/1.1

Accept: */*

Referer: hXXp://cdn.bitmedianetwork.com/network/index-edge.html?tag=ant&adt=5&browser=ie&clientdata=utorrent|3.4.2.37754|217&page=torrent&site=33049

Accept-Language: en-US

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/6.0)

Accept-Encoding: gzip, deflate

Host: VVV.google-analytics.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Date: Thu, 29 Jan 2015 06:58:27 GMT

Expires: Thu, 29 Jan 2015 08:58:27 GMT

Last-Modified: Fri, 16 Jan 2015 00:55:08 GMT

X-Content-Type-Options: nosniff

Content-Type: text/javascript

Vary: Accept-Encoding

Content-Encoding: gzip

Server: Golfe2

Content-Length: 11479

Age: 3529

Alternate-Protocol: 80:quic,p=0.02

Cache-Control: public, max-age=7200
...........}iw.;..w..P.vW..2.NN.....'.I...,.$cb....1....gK.*0....^}.jk
...,%<..T......B..H....j....G...p`..8I.{.=...L&&{.;7.i&....N...;oT(
E...M6.....tlN.t..8.K....P.5t.V%....R.@.L.-3...$8..:....O.@...L..p..b.
.jldf...9.4.=.R.^..{.4..4...AS#Ip:.P.=*6..(.0..C%1.@......^....#3..i..
V.`....@.1.'4..0..a.ZL..M8.g4..l..(9.......N..)wA..5.......{....4...(.
%...\.R.=*........?...$.#....A7...I...F*....0..Q.>..~.....Q...4.c.N
 .Q...<.y....=.....4..F..@.%:..ue6....M{$.T...M .'..a..~Am._./.....
..5...|...&;.M..D.f...yW..ubZ..e...Tjsn.B'.sIm.;.%J^hT.....t..l:....&g
t;.T.j*..FM..gZ..2...za.2..M..S.d8..d.P...S..#..ZS.J...4U...m.I.g6.Tu.
6..4iw..[.l...0m.....e6.Ghk..[}wW..~Tj%].;.{........x.................
.2U......g...p.s<....W..j....{..|.... V.r.GX.Y...;.i.y'.....O0...1&
..c4j....f.P.l........lf.AA.`..O..8[Y.=L........u.*..7vR6<.-.~..-.k
>.?W5t.b..wj.D..o.wC....-?U...4.vF..........Z.%.D...LV.#[..Vu..o...
...u..<uw. ..F@..........0z.4.f._..'uJ..Q..d.../.\LK.D7s.j...I(...M
U..0..eF~.X...p.Ai......%4........O.....M230..mP..5%*..5(3..:......0..
P.......MtC..3....\..m.xl...f.....#....6...>K..K...@.')vM&j..e.h..,
(.U..C^H.C.rr=PD.@wx.R:.*&.E....d...q......{@D.h.].4u.C..i..?=4t.M.. .
|...vG.4.F.......N.Ig.......$.....;....\^^.AD..i'.!......I.>1...7.?
....V.x.xs...I...:.=.k...f.o..........D.f..o..I....J"u..6in.C...u?....
8.s.k.b...ts}}0.. ..Q:.....d..|.X...TB'..R|..F..j].<:CD....!.L..j.t
...P.....O{LH.F.%...?..DDS.z...?1w....S.I..P~T.#.....R......?. RLh....
R..1...=jy.....j.jm.y.8u.(...}..%........F....&}..r..`..k.t..,...V<<< skipped >>>

GET /r/collect?v=1&_v=j32&a=1085486899&t=pageview&_s=1&dl=http://cdn.bitmedianetwork.com/network/index-edge.html?tag=ant&adt=1224&browser=ie&clientdata=utorrent%7c3%2e4%2e2%2e37754%7c217&page=torrent&site=33049&ul=en-us&de=windows-1252&sd=24-bit&sr=1916x902&vp=908x34&je=1&_u=MEAAAEQAI~&jid=1877962788&cid=443073802.1422518236&tid=UA-54512734-1&_r=1&z=145420492 HTTP/1.1

Accept: */*

Referer: hXXp://cdn.bitmedianetwork.com/network/index-edge.html?tag=ant&adt=1224&browser=ie&clientdata=utorrent|3.4.2.37754|217&page=torrent&site=33049

Accept-Language: en-US

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/6.0)

Accept-Encoding: gzip, deflate

Host: VVV.google-analytics.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Access-Control-Allow-Origin: *

Date: Thu, 29 Jan 2015 07:57:16 GMT

Pragma: no-cache

Expires: Fri, 01 Jan 1990 00:00:00 GMT

Cache-Control: no-cache, no-store, must-revalidate

Last-Modified: Sun, 17 May 1998 03:00:00 GMT

X-Content-Type-Options: nosniff

Content-Type: image/gif

Server: Golfe2

Content-Length: 35

Alternate-Protocol: 80:quic,p=0.02

GIF89a.............,...........D..;HTTP/1.1 200 OK..Access-Control-All
ow-Origin: *..Date: Thu, 29 Jan 2015 07:57:16 GMT..Pragma: no-cache..E
xpires: Fri, 01 Jan 1990 00:00:00 GMT..Cache-Control: no-cache, no-sto
re, must-revalidate..Last-Modified: Sun, 17 May 1998 03:00:00 GMT..X-C
ontent-Type-Options: nosniff..Content-Type: image/gif..Server: Golfe2.
.Content-Length: 35..Alternate-Protocol: 80:quic,p=0.02..GIF89a.......
......,...........D..;..

GET /download/langpacks/dl.php?build=37754&ref=client&client=utorrent&sys_l=en&sel_l=-1&tk=stable34 HTTP/1.1

Host: utorrent.com

User-Agent: BTWebClient/3420(37754)

Accept-Encoding: gzip

Connection: Close


HTTP/1.1 301 Moved Permanently

Server: nginx/1.4.7

Date: Thu, 29 Jan 2015 07:55:16 GMT

Content-Type: text/html

Content-Length: 184

Connection: close

Location: hXXp://VVV.utorrent.com/download/langpacks/dl.php?build=37754&ref=client&client=utorrent&sys_l=en&sel_l=-1&tk=stable34
<html>..<head><title>301 Moved Permanently</title
></head>..<body bgcolor="white">..<center><h1&
gt;301 Moved Permanently</h1></center>..<hr><cent
er>nginx/1.4.7</center>..</body>..</html>....

GET /favicon.ico HTTP/1.1

Host: search.vuze.com

User-Agent: BTWebClient/3420(37754)

Accept-Encoding: gzip

If-Modified-Since: Tue, 27 Jan 2015 14:27:31 GMT

Connection: Close


HTTP/1.1 304 Not Modified

Cache-Control: max-age=31449600

Date: Thu, 29 Jan 2015 07:55:17 GMT

ETag: "54c7a053-47e"

Expires: Thu, 28 Jan 2016 07:55:17 GMT

Last-Modified: Tue, 27 Jan 2015 14:27:31 GMT

Server: nginx

Connection: Close

GET /pro/utorrent/index.html HTTP/1.1

Host: utclient.utorrent.com

User-Agent: BTWebClient/3420(37754)

Accept-Encoding: gzip

Connection: Close


HTTP/1.1 200 OK

Content-Type: text/html

Content-Length: 765

Connection: close

Date: Tue, 16 Dec 2014 20:04:58 GMT

x-amz-meta-s3cmd-attrs: uid:107/gname:jenkins/uname:jenkins/gid:120/mode:33188/mtime:1418760067/atime:1418760067/ctime:1418760067

Cache-Control: s-maxage=300

Last-Modified: Tue, 16 Dec 2014 20:01:09 GMT

ETag: "96ca7656ad5f8bd2371c5514deb0b099"

Accept-Ranges: bytes

Server: AmazonS3

Age: 207

X-Cache: Hit from cloudfront

Via: 1.1 e89c67951b2bc58773e3664c08702f34.cloudfront.net (CloudFront)

X-Amz-Cf-Id: eMZuq2KSyIAwQdPiTX2z8O9Jf4GHyXPerpUrkXKKRcXa4Fe_C6bULA==
<html>..<head>...<script type='text/javascript' src='..
/commonjs/jq.js'> </script>...<script type='text/javascrip
t' src='../commonjs/proactive.js?ver=1'></script>...<scrip
t type="text/javascript">....$.ajax({.....url: "hXXp://VVV.utorrent
.com/scripts/headers.php",.....dataType: 'jsonp',.....success: functio
n(headers) {......country = headers['Geoip-Country-Code'];.......//Red
irect US visitors......if(country == 'US'){.......setToUS();......}...
..}....});...</script>...<script src="//cdn.optimizely.com/js
/240758443.js"></script>...<link href="../commoncss/index.
css" rel="stylesheet" type="text/css"/>....<meta charset=utf-8&g
t;...<title>Default : Pro Upgrade App</title>..</head&g
t;..<body>...<iframe id='ifr' width='100%' height='100%'> 
</iframe>..</body>.</html>...

GET /?clientv=53&inst_id=&method=track_encapsulated_offer_downloaded&mstime=0.452&offer_downloaded_secs=0.000&offer_id=7861&package_md5=7d92f9cf0e121e7fb72da522f7fcd6cb&product_key=cb00343115ffdf69411419d8a9ceff1a&session_key=2efc2a3ef36e2f433a2f28e7651231b1&sswnt=&tm=2015-01-29 07:54:57.026&v=1.0&signature=9c104127adb3031b6786e55e644f1a5f HTTP/1.1

Cache-Control: no-cache

Connection: Keep-Alive

Pragma: no-cache

Accept: */*

Host: api.opencandy.com


HTTP/1.1 200 OK

Date: Thu, 29 Jan 2015 07:54:57 GMT

Server: Apache

X-Robots-Tag: noindex

Last-Modified: Thu, 29 Jan 2015 07:54:57 GMT

Cache-Control: no-store, no-cache, must-revalidate

Cache-Control: post-check=0, pre-check=0

Pragma: no-cache

Connection: close

Transfer-Encoding: chunked

Content-Type: text/xml
66..<?xml version="1.0"?><track_offer_downloaded><opera
tion>Completed</operation></track_offer_downloaded>..0.
.

POST /e?i=32 HTTP/1.1

Host: bench.utorrent.com

User-Agent: BTWebClient/3420(37754)

Accept-Encoding: gzip

Connection: Close

Content-Length: 229

{"h":"029fjLDzoDze8QUv","cl":"uTorrent","v":109417338,"l":"en","w":"6.1","cts":1422518116,"eventName":"changed_settings","tags":[ 112692, 101310, 29570, 8884, 198779, 126545, 86728, 240284, 12918, 193967, 93089, 144014, 231856 ]}
HTTP/1.1 200 OK

Content-Type: text/html

Date: Thu, 29 Jan 2015 07:55:16 GMT

Server: nginx

X-Powered-By: PHP/5.4.30

Content-Length: 21

Connection: Close
{"response_code":200}..

GET /network/index-edge.html?tag=ant&adt=5&browser=ie&clientdata=utorrent|3.4.2.37754|217&page=torrent&site=33049 HTTP/1.1

Accept: application/x-ms-application, image/jpeg, application/xaml xml, image/gif, image/pjpeg, application/x-ms-xbap, */*

Accept-Language: en-US

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/6.0)

Accept-Encoding: gzip, deflate

Host: cdn.bitmedianetwork.com

Connection: Keep-Alive


HTTP/1.1 200 OK

x-amz-id-2: X1yCkQA9gObcW/qTcttpVMxK4aV4f34itW6SmyTB3FUbBqdoFtC8IDv1pU/C/0Yo

x-amz-request-id: 834696C9127096F7

Cache-Control: public,max-age=1200,s-max-age=1800

Content-Type: text/html

Server: AmazonS3

Content-Encoding: gzip

Vary: Accept-Encoding

Age: 10370

Date: Thu, 29 Jan 2015 07:57:16 GMT

Last-Modified: Fri, 23 Jan 2015 21:05:11 GMT

Expires: Thu, 29 Jan 2015 05:24:26 GMT

Content-Length: 2473

Connection: keep-alive
............ks.H....X......c..e..{.|{.........i...D............7.u% M.
..{.....wo>......<.88W_.........LP..E.}]..k<6...E...|.0.xQ(X(
\.......h.[....z&d....-}!dA}...>i...9..<,-E .O.h.'3..,. [....H.y
1_."6....=..=]Q.j......0.Y.>.q......e&.9Y...Qhr ."kj.....o|h..E..].
4...%..........0.s...)....4.`.u......a/....M.s0Z..Z.....![.k*...P7....
.M.....VJt..).) y..D.o.....}7.6M6..:....;.......m.3.....k6.;..^f......
.-?..l....2Z..zmO...4...Q....'.9.F#s....R......y.=v:.G....t).2r.B.!.:e
 .....,%..G....h.cL.v.E...!...K.o....?{...'.E[.,d.B..B.X2J-....\Y...%.
....eB.......5.6....V.AQ...9`;8..[-....9.. e.#@.......J..%......@<D
P/.$......2..9.3...:.QT..[....\...v.y....Fcof'....4.d.pa./v.....8.P&Y.
...V...4.w)..k.......... .?4.<8z......F.UxB.@~..........#.l.T..;$.8
.a.OX...4.@.[-.K6...^.'....n...X$.*._......S...,..O....M ......".(..d.
.(d&.mQ...?L.T.D..=."}.EQG.G...DT5.*$$.].>....E]U........./.....2HX
a...'WX.._...A1..|....I.t....a.NE...3...c1...,..c.....vE.wU.x.. .>.
.<...../W....c. I.c8.-.n..4Wj..Mb..H..Ae...>9.;....9 {..p.@%.X!.
......q:..|.. .........gHm,......8DJ.wk....;...I~~D...a9......w..u:...
.?.OB..Yn....Q.!|.'o..H....^L.l..#.*....i.g....U...........'.tN.x.....
......8..t...lu.......:..u:.i.(%...{.k..Q..N..S.....f8..!N..=._.&..F..
up..........z.....Qtp....qzu..Y....#..:5x.}..v....]9.....}t{]....{...J
.{...E.-.>........YG....s2..#...<.6*|.....$.X....`g$.e~..g.k...|
!6f4..R..E...X.]&....*..f7I..r.._*..K,.0c.VX....|4.h2....T.r&......*`.
).".MM..&.2....}Qc.i|..y.. .....W.......CW.R7X.....N..x>.h..2.;<<< skipped >>>

GET /network/base64.js HTTP/1.1

Accept: */*

Referer: hXXp://cdn.bitmedianetwork.com/network/index-edge.html?tag=ant&adt=5&browser=ie&clientdata=utorrent|3.4.2.37754|217&page=torrent&site=33049

Accept-Language: en-US

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/6.0)

Accept-Encoding: gzip, deflate

Host: cdn.bitmedianetwork.com

Connection: Keep-Alive



.Sh........I..V...TDt.a.a..\..E...U....\(T....,.S/ .F?.KP...e.nQZp...]
....9*.s.TObm........4..4..Qn..M.1....B../...Gm.T..&.Z.....4..lK..... 
].9Bu..G..z}.z. ..........K.gl..D.8.T..le|P".n.N3........a...TP.....&g
t;.........>......x.2M..uX.~.G.&yX?.....8.....q......}....1..J... %
......6>....Q.PL..B..s. n~.............M....6..j....o...E.....;"Ub.
..../[.F.?.....?]..v=kx.Zc.O..5lU..`F4.]......j........`.Xa.&?........
.~...._.9.XE...Y..u..u..:..0..:lf.".x...0R)....bG.>P.OA......b...I.
.e.....#.h.IE.>..x.TK4.G......F......j<^...S.G.m....z ...6....5.
v4.....,...)..tU...`....it.;7....X:...9b...RjMH......^.o.....G........
L..."v]...4.d7U.i.>]."q.....A^../g...o.w.}]QB,J..,..ju.g1..L.ve..5.
.......K.J..M.6..n...S.u..9.G].":.....0...}.S...p.M......H.v...h.'|N..
h..o.w..]qQ.C..HB.a.b...0....gQ..s.^..-...."#..M..$l.7..).....!....F..
,.g.k.... Y...f.....:..w..$.1s.VQ.6.-.6..S1^..z.....X.k..WR.o....c....
..i...o..5...-....v...\..[..)..Ikc....Z.&.....P.'.D....2Q._...[...F ..
wik..?F.n.......


GET /network/base64.js HTTP/1.1

Accept: */*

Referer: hXXp://cdn.bitmedianetwork.com/network/index-edge.html?tag=ant&adt=1224&browser=ie&clientdata=utorrent|3.4.2.37754|217&page=torrent&site=33049

Accept-Language: en-US

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/6.0)

Accept-Encoding: gzip, deflate

Host: cdn.bitmedianetwork.com

Connection: Keep-Alive


HTTP/1.1 200 OK

x-amz-id-2: jd6t 9MWvKzuWHyNpCb2SeqUw F8FANcms90pz7ErUgZyHy ltbFiyMGYN5gdD9F

x-amz-request-id: C046853C4A8A83E7

Cache-Control: public,max-age=1200,s-max-age=1800

Content-Type: application/javascript

Server: AmazonS3

Content-Encoding: gzip

Vary: Accept-Encoding

Age: 55420

Date: Thu, 29 Jan 2015 07:57:16 GMT

Last-Modified: Wed, 21 Jan 2015 20:56:49 GMT

Expires: Wed, 28 Jan 2015 16:53:36 GMT

Content-Length: 1965

Connection: keep-alive
...........Y{s.....Oq.i#...`cW......{......G......V6..w.g_...yt.......
=..i...._...3..^JF{.....A.......s.o...w...?......^.g.U1...09.]..(%3...
I...x}..,.t....R.r{.x..q....'..$J{..v.@.. .IH...-. Q.!|...,...6..pS...
j.A..4.#s.........`d)..&.O.#>...Y.)..9..$E......4......'.....{.1..]
1>....c......".$.P..0O.....I...9.....R......,.Y. .....G..aDf.<}*
W.d....*..#D.... ..b.b...'......G)."......[/Is......Wg.o.s...}...7?.xq
.........xS.....wo..(^...4..X......{....o.=.H.O.)...4.#..FDq.qs.....l!
.....~![wA.9.=..g...v..z.V../..Z.$..I..Y...n0..V.a...S.;..!.%.L4...E.D
~...m..\.?..h\...-d!.....@_.e...s3..h.c....%H.....././...-....[a:k....
....?..e...O.*.......0..d..m.gR............bG...?..9F=....7@.X.[.....&
gt;...,...A.._..-.c.z.#.........;..;..;......T..........(..L....wu.1.w
..d<............z......7/DT.4. Q:;.&d..|b..mU.R9M%\...T.._mo o...DW
...6.'WH.:.W0..9}..X'..y....G%....b0..%...rAp.Z...u......x.d..d....07B
......)y....z....\=..@....}@D...&......."...02....S.{.Z.......i...'.*.
.i..'VAz}9y...Mon..X....i.D.Sh........I..V...TDt.a.a..\..E...U....\(T.
...,.S/ .F?.KP...e.nQZp...]....9*.s.TObm........4..4..Qn..M.1....B../.
..Gm.T..&.Z.....4..lK..... ].9Bu..G..z}.z. ..........K.gl..D.8.T..le|P
".n.N3........a...TP.....>.........>......x.2M..uX.~.G.&yX?.....
8.....q......}....1..J... %......6>....Q.PL..B..s. n~.............M
....6..j....o...E.....;"Ub...../[.F.?.....?]..v=kx.Zc.O..5lU..`F4.]...
...j........`.Xa.&?.........~...._.9.XE...Y..u..u..:..0..:lf.".x...0R)
....bG.>P.OA......b...I..e.....#.h.IE.>..x.TK4.G......F.....<<< skipped >>>

GET /updatestats.php?cl=uTorrent&v=109417338&h=029fjLDzoDze8QUv&k=&ip=8&dns=78&con=47&dl=93&error=&dlurl=http://ll.download3.utorrent.com/offers/spigot-yandex-20140709.bmp&svp=4&pid=3896&sz=24878&bin=<NULL>bmp&p1=192.168.150.2&m1=0&p2=192.168.50.98&m2=0&p3=37.57.16.254&m3=3&p4=80.93.125.145&m4=2&p5=80.93.127.242&m5=56&p6=80.81.192.221&m6=36&p7=69.28.172.106&m7=36&p8=87.248.217.254&m8=37 HTTP/1.1

Host: update.utorrent.li

User-Agent: BTWebClient/3420(37754)

Accept-Encoding: gzip

Connection: Close


HTTP/1.1 200 OK

Server: nginx/1.4.7

Date: Thu, 29 Jan 2015 07:54:31 GMT

Content-Type: text/html

Transfer-Encoding: chunked

Connection: close

X-Powered-By: PHP/5.4.30

Expires: Thu, 21 Jul 1980 00:00:00 GMT

Cache-Control: no-store, no-cache, must-revalidate, private

Pragma: no-cache

0..

GET /installstats.php?v=71525078&h=029fjLDzoDze8QUv&hn=1&w=1DB10106&bu=0&pr=0&installresult=30079&exit=1369 HTTP/1.1

Accept-Encoding: gzip

User-Agent: uTorrent/2210(25302)

Host: update.utorrent.com

Cache-Control: no-cache


HTTP/1.1 200 OK

Server: nginx/1.4.7

Date: Thu, 29 Jan 2015 07:54:11 GMT

Content-Type: text/html

Transfer-Encoding: chunked

Connection: close

X-Powered-By: PHP/5.4.30

0..

POST /e?i=38 HTTP/1.1

Host: bench.utorrent.com

User-Agent: BTWebClient/3420(37754)

Accept-Encoding: gzip

Connection: Close

Content-Length: 120

{"h":"029fjLDzoDze8QUv","cl":"uTorrent","v":109417338,"l":"en","w":"6.1","cts":1422518116,"eventName":"Ads","LRec":"on"}
HTTP/1.1 200 OK

Content-Type: text/html

Date: Thu, 29 Jan 2015 07:55:17 GMT

Server: nginx

X-Powered-By: PHP/5.4.30

Content-Length: 21

Connection: Close
{"response_code":200}..

GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBSpuCE3aK3GivZPzGQJ6L5BRyZofwQUl9BrqCZwyKE/lB8ILcQ1m6ShHvICEGwkCSV07gf3g5QOsqmf+MY= HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: ocsp.verisign.com


HTTP/1.1 200 OK

Server: nginx/1.4.7

Content-Type: application/ocsp-response

Content-Length: 1790

content-transfer-encoding: binary

Cache-Control: max-age=568156, public, no-transform, must-revalidate

Last-Modified: Wed, 28 Jan 2015 21:47:43 GMT

Expires: Wed, 4 Feb 2015 21:47:43 GMT

Date: Thu, 29 Jan 2015 07:58:27 GMT

Connection: keep-alive
0..........0..... .....0......0...0........6?s....V....OlL".O..2015012
8214743Z0s0q0I0... ..........!7h....O.d...AG&h.....k.&p..?...-.5......
.l$.%t...............20150128214743Z....20150204214743Z0...*.H........
.....ETI..}..0.5yi.W...v.ln..I..G.3i.......{.....Y.o..4......./..=..K%
...%..^..[L.q..c.....K.>..(...QHl...(<..N..a.l.9.MC?x.u.>.u.t
.|..A(.G.VK.l ...3.......q...UNj...[.O.;2...U.a..acxT/...?....3!....|.
..e...*z.-g}.V...[s..P."......KT..).QE.mQ...x..h.=.pi.}uaz.....#0...0.
..0..........<o&S.-S..}...e.30...*.H........0..1.0...U....US1.0...U
....VeriSign, Inc.1.0...U....VeriSign Trust Network1;09..U...2Terms of
 use at hXXps://VVV.verisign.com/rpa (c)09100...U...'VeriSign Class 3 
Code Signing 2009-2 CA0...141205000000Z..150305235959Z0..1.0...U....US
1.0...U....VeriSign, Inc.1.0...U....VeriSign Trust Network1;09..U...2T
erms of use at hXXps://VVV.verisign.com/rpa (c)091<0:..U...3VeriSig
n Class 3 Code Signing 2009-2 OCSP Responder0.."0...*.H.............0.
........{(..t....2.Vf.....&;6).i*FK....W@....F....jnb.w._p.E.6.|.mk...
.(..........p...........X.DF....^0N....b9.:..J. ZK.".^..\..p.'.$..JA..
~QG.d.}...r...gv... f...z.#..}..J...r9h.........LI-..^.......PUD.h<
.l....(n..i.....E.....2....^./Y......Y.m...'...hz..y..E..........0...0
...U....0.0....U. ...0..0....`.H...E....0..0(.. .........hXXps://VVV.v
erisign.com/CPS0b.. .......0V0...VeriSign, Inc.0.....=VeriSign's CPS i
ncorp. by reference liab. ltd. (c)97 VeriSign0...U.%..0... .......0...
U........0... .....0......0"..U....0...0.1.0...U....TGV-B-24710...<<< skipped >>>

GET /ados?t=1422518118439&request={"Placements":[{"A":5682,"S":33049,"D":"bt_ap_div","AT":5,"Properties":{"browser":"ie","clientdata":"utorrent|3.4.2.37754|217","page":"torrent","flash":"none"}}],"Keywords":"browser%3Die%2C%20clientdata%3Dutorrent%7C3.4.2.37754%7C217%2C%20page%3Dtorrent%2C%20flash%3Dnull","Referrer":"","IsAsync":false} HTTP/1.1

Accept: */*

Referer: hXXp://cdn.bitmedianetwork.com/network/index.html?adt=5&browser=ie&clientdata=utorrent|3.4.2.37754|217&page=torrent&site=33049

Accept-Language: en-US

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/6.0)

Accept-Encoding: gzip, deflate

Host: engine.bitmedianetwork.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Access-Control-Allow-Headers: accept, origin, content-type, content-length

Access-Control-Allow-Methods: GET,PUT,POST,DELETE,OPTIONS

Access-Control-Allow-Origin: *

Content-Type: image/gif

Date: Thu, 29 Jan 2015 07:55:21 GMT

P3P: CP="This is not a P3P policy! See hXXp://adzerk.com/ad-server-privacy for our privacy policy"

Server: nginx/1.1.19

Set-Cookie: azk=ue1-91d65c6dd2d04439af07b2f52700b2fb; Path=/; Expires=Fri, 29 Jan 2016 07:55:21 GMT

Set-Cookie: azk-events=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; Path=/; Expires=Sat, 28 Feb 2015 07:55:21 GMT

x-powered-by: adzerk bifrost/

x-served-by: engine-us-east-1e-05

Content-Length: 43

Connection: keep-alive

GIF89a.............!.......,...........D..;..

GET /MEQwQjBAMD4wPDAJBgUrDgMCGgUABBQ/m36Fj2BE19VBYXRO62zrgIYp0gQUQnlUG2HNVSs+Y9U8SFf1n/tFzkoCAwLVNg== HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: gtssl-ocsp.geotrust.com


HTTP/1.1 200 OK

Server: nginx/1.4.7

Content-Type: application/ocsp-response

Content-Length: 1359

content-transfer-encoding: binary

Cache-Control: max-age=470821, public, no-transform, must-revalidate

Last-Modified: Tue, 27 Jan 2015 18:39:42 GMT

Expires: Tue, 3 Feb 2015 18:39:42 GMT

Date: Thu, 29 Jan 2015 07:56:15 GMT

Connection: keep-alive
0..K......D0..@.. .....0.....10..-0...,0*1(0&..U....GeoTrust SSL TGV O
CSP Responder..20150127183942Z0f0d0<0... ........?.~..`D..AatN.l...
)...ByT.a.U >c.<HW...E.J....6....20150127183942Z....201502031839
42Z0...*.H.............j..&.D..O)Yp...M.=.....F...V..v.....=.qP.r..Au.
...`j.t..c...h......hdj.....#...D.s:..;...(..e...q#?)..K..A...T..d....
.l.2N..p...!..`.....%...f..hy.......*...f."._..A...`.......5]. 1......
yif....;.y`%b....k.vb..&..#.H;.1c._........A.A...n... ..Cq.?^6...L....
..k0..g0..c0..K..........0...*.H........0@1.0...U....US1.0...U....GeoT
rust, Inc.1.0...U....GeoTrust SSL CA0...140502165328Z..150522165328Z0*
1(0&..U....GeoTrust SSL TGV OCSP Responder0.."0...*.H.............0...
........S.O.].&...4.......PU.HE..L....P.AH(l...o.V...b*....c.r.5^...'.
79.e<N]^n......<p....\H..0.#[".....B.A....K%?"...Q...z.\X.~.b...
.X{.R..d.e..3.p.1...]!xX?.N.X.O...`v!39..V..VK9U....|.fV.7v.....F.3..^
.E'....C..M..4Ur......B ...>..d... ...w.....p..9$....y{........|0z0
...U.#..0...ByT.a.U >c.<HW...E.J0... .....0......0...U.%..0... .
......0...U...........0!..U....0...0.1.0...U....TGV-B-1210...*.H......
.......]E...n...a..b.M.(B....S......H~...h.2....{pK..#...0.........A..
.L).....).f|d:..@.9;r....B.$..1.LH...`....S.<.y..$..N./!.....e?z2T.
'.....0..h.,b.D..... ....d.G..*[R`2J...g....6.!.........#.......T.LF:q
,...2..S.9....5..u!.y.RP..;H`.....S..}.F..$3Se...N.....5..<<< skipped >>>

GET /MEQwQjBAMD4wPDAJBgUrDgMCGgUABBSxtDkXkBa3l3lQEfFgudSiPNvt7gQUAPkqw0GRtsnCuD5V8sCXEROgByACAwI20A== HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: ocsp.geotrust.com


HTTP/1.1 200 OK

Server: nginx/1.4.7

Content-Type: application/ocsp-response

Content-Length: 1363

content-transfer-encoding: binary

Cache-Control: max-age=448676, public, no-transform, must-revalidate

Last-Modified: Tue, 27 Jan 2015 12:32:12 GMT

Expires: Tue, 3 Feb 2015 12:32:12 GMT

Date: Thu, 29 Jan 2015 07:56:15 GMT

Connection: keep-alive
0..O......H0..D.. .....0.....50..10......7).nj./P(.3.\\.;.B....2015012
7123212Z0f0d0<0... ..........9.....yP..`...<.......*.A.....>U
....... ...6.....20150127123212Z....20150203123212Z0...*.H............
.F..W..A.w.{.u.....&-...o.4.g.K..~.C.f...pg0.].d..ICi"..0.4R?.0.Wm.[..
.Q.......[...f..z.....$.Z.L.a.@....#....H0...t..YL.a(..S n...!../D..H.
.crEM:.2...k..p....s...L..,.."..`gSApJpi.gZ.s..P.%o ^..n.....Gf[G..lQ.
.Wr....F........=x..4.k/..b...|".P.M8.1.3.....-....0...0..}0..e.......
.:}0...*.H........0B1.0...U....US1.0...U....GeoTrust Inc.1.0...U....Ge
oTrust Global CA0...141201130534Z..151216130534Z02100...U...'GeoTrust 
Global CA TGV OCSP Responder 30.."0...*.H.............0............\.h
pc..J.a.j-.t......F`Aw...)L.YE.2..~..-...2.Y(.".CZ.w..T..Y. syd.....x.
.YE..<....lwv.:J.76>U....uF.a.|8N.. ..1p...`f.X...B>x........
......6..m.&...'..W.plK....[.m.V..h..lI.........?~.....>.|'....o...
A!.Pm.*.N ...<.....3...*|.x._..1..m.W<*....._S.............0..0.
..U.#..0....z.h.....d..}.}e...N0... .....0......0...U.%..0... .......0
...U...........0...U.......0.0!..U....0...0.1.0...U....TGV-B-2830...*.
H.............~....2!...V..0...Y....L..k....z}~a.3Y.x..dS.L...Dk$a...n
R9_......B......m....Y....U.5....'.....<{....v&=.2].....j*.r(7...=.
.w.I...z....\.#.J.ac.....I.[.[....6.X....0...g.3d...z.i.H..f...v.....\
.....^.N..1.J<.)`Z.....4.-.E..n.E.~t....v.e.T...?. ......i..%....<<< skipped >>>

GET /?clientv=29&method=track_offer_downloaded&mstime=25.990&offer_downloaded_secs=0.000&offer_id=7861&package_md5=a7de5b7d6efefa7474b0f99c054f60b2&product_key=cb00343115ffdf69411419d8a9ceff1a&session_key=2efc2a3ef36e2f433a2f28e7651231b1&v=1.0&signature=963bb9a5bf17b54b505a5353255c5b54 HTTP/1.1

Host: api.opencandy.com

Accept: */*


HTTP/1.1 200 OK

Date: Thu, 29 Jan 2015 07:54:57 GMT

Server: Apache

X-Robots-Tag: noindex

Last-Modified: Thu, 29 Jan 2015 07:54:57 GMT

Cache-Control: no-store, no-cache, must-revalidate

Cache-Control: post-check=0, pre-check=0

Pragma: no-cache

Connection: close

Transfer-Encoding: chunked

Content-Type: text/xml
66..<?xml version="1.0"?><track_offer_downloaded><opera
tion>Completed</operation></track_offer_downloaded>..0.
.

GET /0dce4e856bdf8239787df5c367298d54/partner/trackable/550/SkypeSetupFull.exe HTTP/1.1

User-Agent: NSIS_Inetc (Mozilla)

Host: download.skype.com

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 200 OK

Server: nginx

Content-Type: application/octet-stream

Content-Length: 40728672

Last-Modified: Wed, 28 Jan 2015 08:48:32 GMT

ETag: "54c8a260-26d7860"

Accept-Ranges: bytes

Cache-Control: max-age=86400

Date: Thu, 29 Jan 2015 07:54:57 GMT

Connection: keep-alive

MZP.....................@.............................................
..!..L.!..This program must be run under Win32..$7....................
......................................................................
..............................................PE..L....-.T............
......h.......$..K....$..`....@...................................m...
.......@...................................`...............:m.`>...
...............................0W..................................&..
.................UPX0......$.............................UPX1......h..
.$...h.................@....rsrc........`........h.............@......
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
..........3.07.UPX!.....m.,.H..m'....h..b..&%.=........x^...~...{.k...
..>..,.dQEu.Q.._=.. ...f..P*=.<.0..=..j....I,\.......-P..C.uO...
M......}.]..X..T........6..bvM1.*=z.c.^.........I.Uu....$r%....K......
...c.Z.M.6....8q.kW._..k..b.z...%#F.o...-=....G......x.2.......L^....U
.......(.M.0...)i].BdW9xR.4('..C.x.7.........H....=.l..6%.z...lo.w.8..
..X...Y..\...t.G8..R8_.6i^:V.".Q[.....E..2....3Km.hG...^_T.......=0S..
...f.au2&...v.=e.p....".}<o"_m..wF%E.s^....ib...F.s?..%..$.....APt-
.4P.K.161.'|.&.G.......(.,o.*..]l..5.....~-F...S....%...$..7g....

<<< skipped >>>

GET /pca3.crl HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: crl.verisign.com


HTTP/1.1 200 OK

Server: Apache

ETag: "66304c4a5660ab8615727e6bb27b3cdb:1418950819"

Last-Modified: Fri, 19 Dec 2014 01:00:19 GMT

Date: Thu, 29 Jan 2015 07:58:24 GMT

Content-Length: 933

Connection: keep-alive

Content-Type: application/pkix-crl

0...0...0...*.H........0_1.0...U....US1.0...U....VeriSign, Inc.1705..U
....Class 3 Public Primary Certification Authority..141210000000Z..150
331235959Z0..x0!...v....a_>..2......020924164823Z0!.....A.....{2..Y
.#..140129175709Z0!...,.|.|...<...j ...080605174907Z0!...`y..q.....
..fh...020923171400Z0!...?A....a.nF`.P....020923171548Z0!............R
.e.53..010207212458Z0!..!......Y...ISi....010706171411Z0!..$-..I{r....
u<._...080403172226Z0!..&.."?..y..51}..1..010706172118Z0!..4....2..
..{W......080605175030Z0!..B....c............070411175910Z0!..H.Py...N
....* ....010207212031Z0!..N....-.1Gq.@...C..040401175251Z0!..Y......w
`G........070411175657Z0!..Z`..H.@B....Z.*q..080403172017Z0!..l....I..
.Y..] .c..010706171749Z0"......T=deQ...1u.]...010207212247Z0".....p..1
..7<.....e..010207211822Z0...*.H............5..v...V.._)....A... ..
..>.5]....6.(.0uFW.*:T...6$.....R...Y.N.k........%Jn..I.j*.6.3~...r
../=l..?...9..V0..@Tk......fn?....0.A...

GET /analytics.js HTTP/1.1

Accept: */*

Referer: hXXp://cdn.bitmedianetwork.com/network/index-edge.html?tag=ant&adt=1224&browser=ie&clientdata=utorrent|3.4.2.37754|217&page=torrent&site=33049

Accept-Language: en-US

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/6.0)

Accept-Encoding: gzip, deflate

Host: VVV.google-analytics.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Date: Thu, 29 Jan 2015 06:58:27 GMT

Expires: Thu, 29 Jan 2015 08:58:27 GMT

Last-Modified: Fri, 16 Jan 2015 00:55:08 GMT

X-Content-Type-Options: nosniff

Content-Type: text/javascript

Vary: Accept-Encoding

Content-Encoding: gzip

Server: Golfe2

Content-Length: 11479

Age: 3529

Alternate-Protocol: 80:quic,p=0.02

Cache-Control: public, max-age=7200
...........}iw.;..w..P.vW..2.NN.....'.I...,.$cb....1....gK.*0....^}.jk
...,%<..T......B..H....j....G...p`..8I.{.=...L&&{.;7.i&....N...;oT(
E...M6.....tlN.t..8.K....P.5t.V%....R.@.L.-3...$8..:....O.@...L..p..b.
.jldf...9.4.=.R.^..{.4..4...AS#Ip:.P.=*6..(.0..C%1.@......^....#3..i..
V.`....@.1.'4..0..a.ZL..M8.g4..l..(9.......N..)wA..5.......{....4...(.
%...\.R.=*........?...$.#....A7...I...F*....0..Q.>..~.....Q...4.c.N
 .Q...<.y....=.....4..F..@.%:..ue6....M{$.T...M .'..a..~Am._./.....
..5...|...&;.M..D.f...yW..ubZ..e...Tjsn.B'.sIm.;.%J^hT.....t..l:....&g
t;.T.j*..FM..gZ..2...za.2..M..S.d8..d.P...S..#..ZS.J...4U...m.I.g6.Tu.
6..4iw..[.l...0m.....e6.Ghk..[}wW..~Tj%].;.{........x.................
.2U......g...p.s<....W..j....{..|.... V.r.GX.Y...;.i.y'.....O0...1&
..c4j....f.P.l........lf.AA.`..O..8[Y.=L........u.*..7vR6<.-.~..-.k
>.?W5t.b..wj.D..o.wC....-?U...4.vF..........Z.%.D...LV.#[..Vu..o...
...u..<uw. ..F@..........0z.4.f._..'uJ..Q..d.../.\LK.D7s.j...I(...M
U..0..eF~.X...p.Ai......%4........O.....M230..mP..5%*..5(3..:......0..
P.......MtC..3....\..m.xl...f.....#....6...>K..K...@.')vM&j..e.h..,
(.U..C^H.C.rr=PD.@wx.R:.*&.E....d...q......{@D.h.].4u.C..i..?=4t.M.. .
|...vG.4.F.......N.Ig.......$.....;....\^^.AD..i'.!......I.>1...7.?
....V.x.xs...I...:.=.k...f.o..........D.f..o..I....J"u..6in.C...u?....
8.s.k.b...ts}}0.. ..Q:.....d..|.X...TB'..R|..F..j].<:CD....!.L..j.t
...P.....O{LH.F.%...?..DDS.z...?1w....S.I..P~T.#.....R......?. RLh....
R..1...=jy.....j.jm.y.8u.(...}..%........F....&}..r..`..k.t..,...V<<< skipped >>>

GET /collect?v=1&_v=j32&a=1932983298&t=pageview&_s=1&dl=http://cdn.bitmedianetwork.com/network/index-edge.html?tag=ant&adt=5&browser=ie&clientdata=utorrent%7c3%2e4%2e2%2e37754%7c217&page=torrent&site=33049&ul=en-us&de=windows-1252&sd=24-bit&sr=1916x902&vp=300x250&je=1&_u=MACAAEQAI~&jid=&cid=443073802.1422518236&tid=UA-54512734-1&z=1630540202 HTTP/1.1

Accept: */*

Referer: hXXp://cdn.bitmedianetwork.com/network/index-edge.html?tag=ant&adt=5&browser=ie&clientdata=utorrent|3.4.2.37754|217&page=torrent&site=33049

Accept-Language: en-US

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/6.0)

Accept-Encoding: gzip, deflate

Host: VVV.google-analytics.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Pragma: no-cache

Expires: Mon, 07 Aug 1995 23:30:00 GMT

Access-Control-Allow-Origin: *

Last-Modified: Sun, 17 May 1998 03:00:00 GMT

X-Content-Type-Options: nosniff

Content-Type: image/gif

Date: Wed, 28 Jan 2015 23:47:11 GMT

Server: Golfe2

Content-Length: 35

Age: 29405

Alternate-Protocol: 80:quic,p=0.02

Cache-Control: private, no-cache, no-cache=Set-Cookie, proxy-revalidate

GIF89a.............,...........D..;HTTP/1.1 200 OK..Pragma: no-cache..
Expires: Mon, 07 Aug 1995 23:30:00 GMT..Access-Control-Allow-Origin: *
..Last-Modified: Sun, 17 May 1998 03:00:00 GMT..X-Content-Type-Options
: nosniff..Content-Type: image/gif..Date: Wed, 28 Jan 2015 23:47:11 GM
T..Server: Golfe2..Content-Length: 35..Age: 29405..Alternate-Protocol:
 80:quic,p=0.02..Cache-Control: private, no-cache, no-cache=Set-Cookie
, proxy-revalidate..GIF89a.............,...........D..;..

GET /downloader.yandex.net/yandex-pack/downloader/info.rss HTTP/1.1

Accept: */*

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Connection: Keep-Alive

Host: cache-kiev07.cdn.yandex.net


HTTP/1.1 200 OK

Server: nginx/1.6.2

Date: Thu, 29 Jan 2015 07:54:57 GMT

Content-Type: application/rss xml

Content-Length: 2417

Connection: keep-alive

ETag: "1735067826"

Last-Modified: Mon, 12 Jan 2015 10:09:39 GMT

Accept-Ranges: bytes
<?xml version="1.0" encoding="UTF-8"?>..<downloader version="
1">...<partneryandexbar>....<url>hXXp://downloader.yand
ex.net/yandex-pack/</url>....<name>YandexPackSetup.exe<
/name>..    <lt_name>YandexSearch.exe</lt_name>..    &l
t;partner name="vkmusic-elements">..            <url>hXXp://d
ownloader.yandex.net/yandex-pack/</url>..            <name>
;YandexPackSetup.exe</name>..            <lt_name>YandexSe
arch.exe</lt_name>..            <exp_path val="16">-extens
ion-exp1</exp_path>..            <exp_path val="16">-exten
sion-exp2</exp_path>..            <exp_path val="16">-exte
nsion-exp3</exp_path>..            <exp_path val="17">-bit
s1</exp_path>..            <exp_path val="17">-bits2</e
xp_path>..            <exp_path val="17">-bits3</exp_path&
gt;..    </partner>..    <partner name="disc-soft">..     
       <url>hXXp://downloader.yandex.net/yandex-pack/</url>
;..            <name>YandexPackSetup.exe</name>..         
   <lt_name>YandexSearch.exe</lt_name>..            <ex
p_path val="50">-accelerator-exp1</exp_path>..            <
;exp_path val="50">-accelerator-exp2</exp_path>..    </par
tner>..    <partner name="kmplayer-elements2">..            &
lt;url>hXXp://downloader.yandex.net/yandex-pack/</url>..     
       <name>YandexPackSetup.exe</name>..            &<<< skipped >>>

GET /downloader.yandex.net/yandex-pack/spigot-62/YandexSearch.exe HTTP/1.1

Accept: */*

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Connection: Keep-Alive

Host: cache-kiev07.cdn.yandex.net


HTTP/1.1 200 OK

Server: nginx/1.6.2

Date: Thu, 29 Jan 2015 07:54:57 GMT

Content-Type: application/x-msdos-program

Content-Length: 2669880

Connection: keep-alive

ETag: "153331724"

Last-Modified: Mon, 29 Dec 2014 12:57:10 GMT

Accept-Ranges: bytes

MZ......................@.............................................
..!..L.!This program cannot be run in DOS mode....$.......@...........
......o.......y.......~.G.....i...............p.......n.......k.....Ri
ch............................PE..L.....>T......................%..
...>a............@...........................(.....6.).............
........................T'..........li%...........(.8!................
..............................@.......................................
.....text...Q........................... ..`.rdata...u.......v........
..........@..@.data...$3...@......................@....rsrc...li%.....
.j%..2..............@..@..............................................
......................................................................
......................................................................
......................................................................
......................................................................
..................................................U..Q.M..E.P.M.......
M...H.B..E...]..............U..Q.M..E...H.B..M..".....].....U..Q.M..M.
......E....t..M.Q.J.......E...].......U...E...P.M.Q.U...R.E.P.)......]
................U...E...P.M.Q.U...R.E.P.c......]................U...E.
.M.f..f..]................U...E.P........]................U...E.P.M.Q.
U.R.E.P.H.......E.].U...E.P.M.Q.U.R.E.P.X.......E.].U......M.Q....5...
M...1..j.j..M.. ....E...].....U......M.Q....5...M...1..j.j..M.......E.
P.M.......E...].........U..Q.M.j.j..M........]..........U..Q.M..E.

<<< skipped >>>

GET /p/883/ius/syesubc3_p2v3.exe HTTP/1.1

Connection: Keep-Alive

Accept: */*

Host: cdn3.opencandy.com


HTTP/1.1 200 OK

x-amz-id-2: xNCmgbKONvfgx5 RRgRMcRb1frHlCmgEKEijmSnvfPmKY4GgeouPoUxKwUnk9M7F

x-amz-request-id: C1E1581CD4970CB4

Last-Modified: Tue, 16 Dec 2014 16:59:02 GMT

ETag: "7d92f9cf0e121e7fb72da522f7fcd6cb"

Accept-Ranges: bytes

Content-Type: binary/octet-stream

Content-Length: 65008

Server: AmazonS3

Cache-Control: max-age=13

Date: Thu, 29 Jan 2015 07:54:56 GMT

Connection: keep-alive

MZ......................@.............................................
..!..L.!This program cannot be run in DOS mode....$.......A{.k...8...8
...8.b<8...8.b,8...8...8...8...8...8..%8...8.."8...8Rich...8.......
.PE..L.....GO.................n.......B...8............@..............
...................I=....@.................................4..........
.............8...........d............................................
........................................text....m.......n.............
..... ..`.rdata..b*.......,...r..............@..@.data....~...........
...............@....ndata.......0...........................rsrc......
.........................@..@.reloc..2...........................@..B.
......................................................................
......................................................................
......................................................................
......................................................................
...............................................U....\.}..t .}.F.E.u..H
.....-G..H.P.u..u..u.....@..K...SV.5.-G.W.E.P.u.....@..e...E..E.P.u...
..@..}..e....D.@........FR..VV..U... M..........M........E...FQ.....NU
..M.......M...VT..U........FP..E...............E.P.M...H.@..E..P.E..E.
P.u.....@..u....E..9}...n....~X.te.v4..L.@..E...tU.}.j.W.E......E.....
..P.@..vXW..T.@..u..5X.@.W..h ....E..E.Pj.h..F.W....@..u.W...u....E.P.
u.....@._^3.[.....L$...-G...i. @...T.....tUVW.q.3.;5.-G.sD..i. @...D..
S.....t.G.....t...O..t .....u...3....3...F. @..;5.-G.r.[_^...U..QQ

<<< skipped >>>

GET /network/index.html?adt=5&browser=ie&clientdata=utorrent|3.4.2.37754|217&page=torrent&site=33049 HTTP/1.1

Accept: application/x-ms-application, image/jpeg, application/xaml xml, image/gif, image/pjpeg, application/x-ms-xbap, */*

Accept-Language: en-US

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/6.0)

Accept-Encoding: gzip, deflate

Host: cdn.bitmedianetwork.com

Connection: Keep-Alive

GET /network/assets/bench.js HTTP/1.1

Accept: */*

Referer: hXXp://cdn.bitmedianetwork.com/network/index.html?adt=1224&browser=ie&clientdata=utorrent|3.4.2.37754|217&page=torrent&site=33049

Accept-Language: en-US

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/6.0)

Accept-Encoding: gzip, deflate

Host: cdn.bitmedianetwork.com

Connection: Keep-Alive


HTTP/1.1 200 OK

x-amz-id-2: gdyddJn8MBLq3NZzdGahbSmbB85LX9yqsVCp1ZS magk3MhhLSusNjJrEEg6VwwlsqyagXrF0uA=

x-amz-request-id: 2A3985CFE14E5417

Cache-Control: public,max-age=1200,s-max-age=1800

Content-Type: application/javascript

Server: AmazonS3

Content-Encoding: gzip

Vary: Accept-Encoding

Age: 58152

Date: Thu, 29 Jan 2015 07:55:17 GMT

Last-Modified: Fri, 23 Jan 2015 14:36:45 GMT

Expires: Wed, 28 Jan 2015 16:06:05 GMT

Content-Length: 956

Connection: keep-alive
...........VkS.@..._..... .!.<f..}k[..K....TLhXDm...W.&,.b........{
...... ....#Xu...........[}..{.1.L..x..hp..r...............(.?...qp.".
..!...]...w'(....../^..z........?~.|rz..........~.....\...O<B.....}
..lg..[..F.P..._...\C.....b.K....Kl....CA..A8.#.s..!)Dc.Wq..B#...c.H..
}.E.h..E.l..z....P.5.....*_.._.`.8..x......h2....=....M.B.c2......n...
.k........2cJ...R..6...].RU....5.l.G...J.`.G........;..J.l.T.wr....T..
...'9:r.(.&.{.,..:Y.).......p..YBi.........2....|...5./..G.2...../Y .C
4.CN..7].@.D.....d...n.FV.1..\...._..s.t_).;z...~.."...mrqd.9.....Wg..
...hk._{._g._Y3..:.-ME.t..Tf.*.I...-yoR.A.R.....r........G.......O.H..
xF.,S.......@.......d..e.....6....~N.|...?;=,...W.uB...<....&.~.t..
;!Ub',hYecl.o...n.**.....W3Aez.K......fF@....F<.jZ5..%.......5.1...
Qw5...BX..&.7..!Hm&.../....<..8K).G.2iw..|[X. Mk1...[6.9...\...,..'
....gb*..L..M\"....Y.q'.,.g.?J........~N{......."....\8..4s...7MI..<
;Y...l..tV...e@`..E..Q:......Jb|.2).ijB...d.5D..q.(......|D.....>....

GET /network/assets/jquery-1.11.2.js HTTP/1.1

Accept: */*

Referer: hXXp://cdn.bitmedianetwork.com/network/index.html?adt=5&browser=ie&clientdata=utorrent|3.4.2.37754|217&page=torrent&site=33049

Accept-Language: en-US

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/6.0)

Accept-Encoding: gzip, deflate

Host: cdn.bitmedianetwork.com

Connection: Keep-Alive



NN.............;..b....j.]....JR...%.$....$m......X$LcDZmh.....6.Z~...
a.....cy..u.:........$...a....^{...K.......H.f..% q.f...2.....p....X.l
...w?C.q..}..b5.$.C9....ET.v4.<b.....]....RP....g...G.....D...^-V..
:....&?)..........W...h=Q.k..p.eL.Z....mU...Ie`*...J.2L...O'y...1?....
.v4.[gM.%...3uL....../...<...9zo/.%...G...N..y}.sK..O]b.b9./O.ST,aJ
..r^\.T..]...}......:;.W..%..].#...4....$.{...St.]..-.e.<.'?^....c.
*.....@.....ip.O...n....a..G.;:...U}V.... )....}.O.....p...O?....]t.Q~
.:.1>.G.D....ToPA...6...~.-.c...#.8;.,........<?.......c./...y..
;..b.p......;..FOG.T.v..J.ahV......7zB..(.v..]..[.~......_c.t.......z.
...;.....iA.`JVK9zS....H~.T....~.?....Zl|.-..K..:.....F..........|?}..
.....[.....q..Fb.x..<Y..../^>.........%^8....?.'.@"...Xp.......&
gt;...O)OG.2...f<.n...b....gbV.f..s.m.}<a~k5..o...O.~.....]F..).
.L{...@<.g...4..=...<F.... {.O]yJ.......ABY....<6.gv.3La.(.N^
.*o....'h.K .g.m...f;..~......qM=.|...mL.......>...._$zBJG.k.......
... |"%......d....L;V.f....9..y..;f0.....j....K.v.99j..o...=..o..p|X.[
W..O.c2j..e..&.N*DO.....O..K*...F=.....3.^zj..BE.)..#.`.;....s.`S..#..
.o<...J......%$Y....7...A.~...R.{....n.......a.p."B...T(/..1.|.....
...c.].|.z......{.....z#.....O...5..d..M.d...n...!.GM....c..o..4.,W...
..K.>(.....a.Ii*.....^.... ...Rqb;.B...4I....Q..<....e.P...Q....
.9.2.....;p...)J'wW)I]...._.-a>u..E..=...9M......}.=.._v..A..,.w.E.
..M.}.WRO.=....>..Q.".........H....%.....x...=]MY..%.IS.ve."...3.y.
.?Y...A.M...[.r...B.$....)0.....i.4$....%%....d

GET /installoffer.php?h=029fjLDzoDze8QUv&v=109417338&w=1DB10106&l=en&c=US&w64=1&db=iexplore.exe&cl=uTorrent&au=1&tsub=1&svp=4&cmp=217&ocmp=217 HTTP/1.1

Accept-Encoding: gzip

User-Agent: uTorrent(37754)/3.4.2

Host: update.utorrent.com

Cache-Control: no-cache


HTTP/1.1 200 OK

Server: nginx/1.4.7

Date: Thu, 29 Jan 2015 07:54:28 GMT

Content-Type: text/html

Transfer-Encoding: chunked

Connection: close

X-Powered-By: PHP/5.4.30

Expires: Thu, 21 Jul 1980 00:00:00 GMT

Cache-Control: private

Last-Modified: Thu, 29 Jan 2015 07:54:28 GMT

932..d16:secondary_offersl2:oce2:oci1e3:adki1e8:toolbar0d5:title24:Fre
e Yandex Search Offer8:subtitle0:13:body_text_rtf95:{\rtf1\ansi\ansicp
g1252\u181?Torrent suggests you install the Yandex settings described 
below.}11:footer_text258:By clicking "Accept" and selecting one or mor
e of the checkboxes above, you are verifying that you have read and ac
cepted our <a href="hXXp://legal.yandex.ru/confidential/">Privac
y Policy</a> and <a href="hXXp://legal.yandex.ru/termsofuse/"
>Terms of Use</a>.2:id13:spigot-yandex9:image_url66:hXXp://ll
.download3.utorrent.com/offers/spigot-yandex-20140709.bmp10:image_hash
20:...Rw...U......J...'9:image_sig256:...g........U.....{.m.=...o!.hf.
K........./... 2. ......r"kv.*..t>....m...;.C.v..S...7.s.s...2...@.
.Ef.w0..&4..'..X.F$.}p.U.........K.....v...F..._u..:.pX.`...0.`.....Y.
...a.....9...g...=..-.!#......].V$._..SD_.c.... .v...,9...A...7..g.-.4
.\!.\KZ}kK(."1...10:image_sizei353958e10:offer_urlsl69:hXXp://ll.downl
oad3.utorrent.com/offers/spigot-yandex-en-20140708.exe69:hXXp://ll.dow
nload3.utorrent.com/offers/spigot-yandex-en-20140708.exe66:hXXp://down
load3.utorrent.com/offers/spigot-yandex-en-20140708.exe58:hXXp://67.21
5.246.206/offers/spigot-yandex-en-20140708.exee10:offer_hash20:.lM1...
..u..x..dp...9:offer_sig256:..F..pc...l.,.A4.."P...lX./.V.../....5`..|
.....|0!........h.oo....U.eY.m.g.s..!}@...7h......^..WM..R...s...Hul..
.m.D$.......v.c.....f9._. ...8yZxq....(7..Y..:-..@(.8...#.i.Iq.<.j.
J..^....8.7.D.gK...[.P.5K.G..eX.J..R..*...'. .{..5}....6.../`.=TuB

<<< skipped >>>

GET /Advertisers/7aea374f43834941bbb3fa6f934276d5.jpg HTTP/1.1

Accept: */*

Referer: hXXp://cdn.bitmedianetwork.com/network/index-edge.html?tag=ant&adt=1224&browser=ie&clientdata=utorrent|3.4.2.37754|217&page=torrent&site=33049

Accept-Language: en-US

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/6.0)

Accept-Encoding: gzip, deflate

Host: static.ap.bittorrent.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Date: Thu, 29 Jan 2015 07:57:17 GMT

Content-Type: image/jpeg

Content-Length: 37629

Connection: keep-alive

Set-Cookie: __cfduid=d62f23b760c19f0bc700b36449f9933a91422518237; expires=Fri, 29-Jan-16 07:57:17 GMT; path=/; domain=.bittorrent.com; HttpOnly

x-amz-id-2: 5ppgptKVt9ftmjGJWOLQJtPncONlmQFNokQ95e1dIFg/yHg5zl6Rf Ol7eHWTtbF

x-amz-request-id: 71F908C87FF76128

x-amz-version-id: FX4lAL8cjvjphQiV82MN5O93lNy6h9Sz

Expires: Fri, 29 Jan 2016 13:57:17 GMT

Cache-Control: public, max-age=31557600

Last-Modified: Thu, 15 Jan 2015 19:57:33 GMT

ETag: "5a6b30ab75ddf269f435b13d84ee869a"

CF-Cache-Status: HIT

Accept-Ranges: bytes

Server: cloudflare-nginx

CF-RAY: 1b03e0c6f1ac05d5-WAW
......Exif..II*.................Ducky.......d......hXXp://ns.adobe.com
/xap/1.0/.<?xpacket begin="..." id="W5M0MpCehiHzreSzNTczkc9d"?> 
<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c01
4 79.156797, 2014/08/20-09:53:02        "> <rdf:RDF xmlns:rdf="h
ttp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rd
f:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="
hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="hXXp://ns.a
dobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:A7772EC87F3DE4119
3E1B0481230D162" xmpMM:DocumentID="xmp.did:365D63EC95AE11E491809306ABF
5248F" xmpMM:InstanceID="xmp.iid:365D63EB95AE11E491809306ABF5248F" xmp
:CreatorTool="Adobe Photoshop CS6 (Windows)"> <xmpMM:DerivedFrom
 stRef:instanceID="xmp.iid:790ed361-7d6d-2947-8f8b-a901c581c46b" stRef
:documentID="adobe:docid:photoshop:8d8546f7-9591-11e4-8a11-89ddd35cf22
6"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> &
lt;?xpacket end="r"?>...&Adobe.d................h..F...e...........
......................................................................
................................................................".....
..........(...........................................................
.....................1...!2A". 0B#34.@$5.Þ&6........................
.!.1A"..2.Qaq.B#3......Rb.C4.r$D......5.. ...Ss.dt%.cT.Eev............
.........1.!A..Q". aq2B.0......r.@.Rb.#3Cs.....P..4Sc...$.............
........!1AQaq.......... ................G......{.l...f.Y&qM.... .<<< skipped >>>

GET /favicon.ico HTTP/1.1

Host: VVV.bittorrent.com

User-Agent: BTWebClient/3420(37754)

Accept-Encoding: gzip

If-Modified-Since: Sun, 1 Jan 1982 00:00:00 GMT

Connection: Close


HTTP/1.1 404 Not Found

Server: nginx/1.4.7

Content-Type: text/html

Age: 8

Date: Thu, 29 Jan 2015 07:55:16 GMT

Expires: Thu, 29 Jan 2015 07:55:18 GMT

Content-Length: 168

Connection: close
<html>..<head><title>404 Not Found</title><
/head>..<body bgcolor="white">..<center><h1>404 N
ot Found</h1></center>..<hr><center>nginx/1.4.
7</center>..</body>..</html>....

GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBRIt2RJ89X++hEzqoBeQg8PymQ2UQQUANhaTCXBIuWLMe9tuvPMXynxDWECEGVSJuGyLhjhWQ8phawi51w= HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: ocsp.verisign.com


HTTP/1.1 200 OK

Server: nginx/1.4.7

Content-Type: application/ocsp-response

Content-Length: 1453

content-transfer-encoding: binary

Cache-Control: max-age=509270, public, no-transform, must-revalidate

Last-Modified: Wed, 28 Jan 2015 05:22:19 GMT

Expires: Wed, 4 Feb 2015 05:22:19 GMT

Date: Thu, 29 Jan 2015 07:58:24 GMT

Connection: keep-alive
0..........0..... .....0......0...0......T3t.%..O.E..~..F.=....2015012
8052219Z0s0q0I0... ........H.dI.....3..^B...d6Q....ZL%."..1.m..._)..a.
.eR&.....Y.)..".\....20150128052219Z....20150204052219Z0...*.H........
......q._#...U...Z..0.^..E..Q&j.%^..{[o..:Cd...A..*eM.d.....C..R.S....
j......1..5.eB$ n.........q_C.<xs...f;z...m<..Q.....F..2.G..(.n.
&iMR.f...H...C.....XC<o.}y..........A....{................@..$1..D.
...a....Y.![f.0..[.,..K..e....d..ZrZ..3..;JP2.M'...........L....0...0.
..0..3......./...b.v..-....l}0...*.H........0_1.0...U....US1.0...U....
VeriSign, Inc.1705..U....Class 3 Public Primary Certification Authorit
y0...141202000000Z..151216235959Z0..1.0...U....US1.0...U....Symantec C
orporation1.0...U....Symantec Trust Network1?0=..U...6Symantec Class 3
 PCA - G1 OCSP Responder Certificate 30.."0...*.H.............0.......
...'......Y..x.3B1.7..Q..`..d.. ....s..t.$a.....j2R.{ ,*..c{.3.....H..
3-; ).....0._...*..9M..V...... ...{m...-.......)..tR..{D....~...M...T.
.pS.p..^|o....S..v.).).....r.v.qo$......C.V!....@.h#qh...u1T.].G0.]E..
.=._...... ........TE...Sa.s4........r...3.............0..0...U....0.0
l..U. .e0c0a..`.H...E....0R0&.. .........hXXp://VVV.symauth.com/cps0(.
. .......0...hXXp://VVV.symauth.com/rpa0...U.%..0... .......0...U.....
...0... .....0......0!..U....0...0.1.0...U....TGV-B-2730...*.H........
.....$..H......oU....Y!.z{*.V.M..u.._z..3>.. 0....3..m.....e.......
a..D...........e..F6:.y.....di.......<y.Z.......x}..q.2....UZ1 :,font>....<<< skipped >>>

GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBSpuCE3aK3GivZPzGQJ6L5BRyZofwQUl9BrqCZwyKE/lB8ILcQ1m6ShHvICEAxNF3PJUX7iAOhAP2oGxcI= HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: ocsp.verisign.com


HTTP/1.1 200 OK

Server: nginx/1.4.7

Content-Type: application/ocsp-response

Content-Length: 1790

content-transfer-encoding: binary

Cache-Control: max-age=598622, public, no-transform, must-revalidate

Last-Modified: Thu, 29 Jan 2015 06:12:33 GMT

Expires: Thu, 5 Feb 2015 06:12:33 GMT

Date: Thu, 29 Jan 2015 07:58:24 GMT

Connection: keep-alive
0..........0..... .....0......0...0........6?s....V....OlL".O..2015012
9061233Z0s0q0I0... ..........!7h....O.d...AG&h.....k.&p..?...-.5......
..M.s.Q~...@?j.......20150129061233Z....20150205061233Z0...*.H........
.......H `._pIsjnQ...........{ .........&t.26OO.....[........-u-.1G...
....Es.....P..B.K,a=a6..i8.!.f...l.-.] .....:..`.40H.'p....4g]sJ`.n$..
.._P.t.t....E..u...T7U..X..*y.o I.l..S...X..L<..&.....y.m.4. ZB.(.t
:0...5C%.x7..o.Z..._/.X]h:D.D^_...O....@.....$.m..95hu...#0...0...0...
.......<o&S.-S..}...e.30...*.H........0..1.0...U....US1.0...U....Ve
riSign, Inc.1.0...U....VeriSign Trust Network1;09..U...2Terms of use a
t hXXps://VVV.verisign.com/rpa (c)09100...U...'VeriSign Class 3 Code S
igning 2009-2 CA0...141205000000Z..150305235959Z0..1.0...U....US1.0...
U....VeriSign, Inc.1.0...U....VeriSign Trust Network1;09..U...2Terms o
f use at hXXps://VVV.verisign.com/rpa (c)091<0:..U...3VeriSign Clas
s 3 Code Signing 2009-2 OCSP Responder0.."0...*.H.............0.......
..{(..t....2.Vf.....&;6).i*FK....W@....F....jnb.w._p.E.6.|.mk....(....
......p...........X.DF....^0N....b9.:..J. ZK.".^..\..p.'.$..JA..~QG.d.
}...r...gv... f...z.#..}..J...r9h.........LI-..^.......PUD.h<.l....
(n..i.....E.....2....^./Y......Y.m...'...hz..y..E..........0...0...U..
..0.0....U. ...0..0....`.H...E....0..0(.. .........hXXps://VVV.verisig
n.com/CPS0b.. .......0V0...VeriSign, Inc.0.....=VeriSign's CPS incorp.
 by reference liab. ltd. (c)97 VeriSign0...U.%..0... .......0...U.....
...0... .....0......0"..U....0...0.1.0...U....TGV-B-24710...*.H...<<< skipped >>>

GET /e?i=1005&e=eyJldmVudE5hbWUiOiJhcC5hZHRhZyIsImFjdGlvbiI6ImxvYWRlZCIsInRhZyI6ImFudCIsImFkdCI6IjUiLCJicm93c2VyIjoiaWUiLCJjbGllbnRkYXRhIjoidXRvcnJlbnQlN2MzJTJlNCUyZTIlMmUzNzc1NCU3YzIxNyIsInBhZ2UiOiJ0b3JyZW50Iiwic2l0ZSI6IjMzMDQ5In0=&callback=jQuery1111034716094678426956_1422518236409&_=1422518236410 HTTP/1.1

Accept: */*

Referer: hXXp://cdn.bitmedianetwork.com/network/index-edge.html?tag=ant&adt=5&browser=ie&clientdata=utorrent|3.4.2.37754|217&page=torrent&site=33049

Accept-Language: en-US

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/6.0)

Accept-Encoding: gzip, deflate

Host: bench.utorrent.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Content-Type: text/html

Date: Thu, 29 Jan 2015 07:57:17 GMT

Server: nginx

X-Powered-By: PHP/5.4.30

Content-Length: 65

Connection: keep-alive

jQuery1111034716094678426956_1422518236409({"response_code":200})HTTP/
1.1 200 OK..Content-Type: text/html..Date: Thu, 29 Jan 2015 07:57:17 G
MT..Server: nginx..X-Powered-By: PHP/5.4.30..Content-Length: 65..Conne
ction: keep-alive..jQuery1111034716094678426956_1422518236409({"respon
se_code":200})..

GET /installstats.php?cl=uTorrent&v=109417338&h=029fjLDzoDze8QUv&w=1DB10106&bu=0&pr=25302&cmp=217&ocmp=217&offerretrievedfromserver&pid=3896&cau=1&ServerOfferRetrieved=1&sec_offs=oc&view=win32 HTTP/1.1

Accept-Encoding: gzip

User-Agent: uTorrent(37754)/3.4.2

Host: update.utorrent.li

Cache-Control: no-cache


HTTP/1.1 200 OK

Server: nginx/1.4.7

Date: Thu, 29 Jan 2015 07:54:29 GMT

Content-Type: text/html

Transfer-Encoding: chunked

Connection: close

X-Powered-By: PHP/5.4.30

0..

The Trojan connects to the servers at the folowing location(s):

uTorrent.exe_200_rwx_00401000_00387000:

t.Wj _ |$

SSSSh

tgf9.tb

SShLU^

SShlU^

SSSSShDV^

SShhl^

D$ SSh

D$0SShhl^

u.Whtj^

D$<SShXt^

SShXt^

YSShXF^

FH<.tP<[tL<\tH<*tD<|t@<^t<<$t8

j.Xf;

PSSh$

uùA

UDP0u

HTTPu

SSSh`{i

9HTTPu#f

PSSSSSSh

t.Ht$

>HTTPu

D$0PSSh

L$.QP

Zu.Vj<j

tFj.Zf;

D$LSSh

SSh,z_

(9;t%S

%uoSh

<. UDPu

<. TCPuS

keyA

keyB

SSSSSSSSh

SShLW`

l$ j%X

Bj%Xf9CH

>httpum

SSSSSSSh

t$|hH%c

Uhx%c

?httpu

L$(SSh

Ph0%c

PSSh0]c

D$()D$0SSh

Cj.Xf9D$`u

FHSSh

F\ FTP

F| FtP

F| FtPWWW

j.Yf;

_tcPVj@

.PjRW

L$$SShX5e

gXq.VWq

Error downloading file. Msg: %s.

Error downloading file. Msg: Empty download.

Error downloading file. Msg: Could not save downloaded file.

autoexecutestart

mismexecute

kernel32.dll

hXXp://utclient.utorrent.com/pro/utorrent/index.html

hXXps://activate.utorrent.com

hXXp://events.bittorrent.com/startConversion

hXXp://cdn.ap.bittorrent.com/control/tags/bt.json

hXXp://cdn.ap.bittorrent.com/control/tags/ut.json

hXXp://cdn.ap.bittorrent.com/control/tags/staging_bt.json

hXXp://cdn.ap.bittorrent.com/control/tags/staging_ut.json

hXXp://apps.bittorrent.com/conduit/eula/ByChoosingToInstall.html

%u %d %S

CollectToolbarPreferences: _ACTIVE_BROWSER: %S

provider:%S,search:%d,homepage:%d

mism execute succeeded

CollectToolbarPreferences: mism execute succeeded

CollectToolbarPreferences: mism execute FAILED

toolbar%d

hXXp://update.utorrent.com/uninstall?type=%s-%U&h=%s&v=%d

content_offer_url

attempted_to_receive_server_search_url

"elevated":%d, "message":"%S", "error_code":%d

hXXp://VVV.utorrent.com

IsYandexInstalled %s

GetConduitInstalledState: Found key: HKEY_LOCAL_MACHINE %S

GetConduitInstalledState: HKEY_LOCAL_MACHINE %S = %d

GetConduitInstalledState: Found key: HKEY_CLASSES_ROOT %S

GetConduitInstalledState: installed=%d visible=%d enabled=%d

IsConduitInstalled: %d

GetToolbarDict: %s, id: %s

GetToolbarDict: count=%d

GetToolbarDict: Found %s in '%s' key

GetToolbarDict: DID NOT find %s in '%s' key

ask-surf-firefox

ask-surf-chrome

ask-firefox

ask-chrome

IsConduitToolbarOffer %s

checkboxes: %s

TBDownloadCallback err: %s size: %I64d

TBDownloadCallback write FAILED: %S

TBDownloadCallback write OK: %S

Using default offer? [%S]

passed_hash_check? %s

base_parameter: [%S]

chrome_param

TBDownloadCallback: flag: %s

toolbar commandline: %s

TBDownloadCallback: RAN %S %S RETURN: %d

offer_urls

WhichConduitSettingsAreActive: %s

ShowYandexOffer: %d

ShowYandexSearchOffer: %d

ShowConduitBing: %d

ShowConduitGoogle: %d

image_url

&bin=%stoolbar

TBRequestThread Parsed OK?: %s

TBRequestThread FAILED. err: %S

content_offer_autoexec

offer_retrieved: %s

empty_offer: %s

default_offer: %s

showToolbar: %s

onOfferDownload: Using default offer. g_is_default_offer: %s

onOfferDownload: %s

eula_url

hXXp://%%s/offers/%s

hXXp://update.utorrent.com/installoffer.php

RetrieveOffer browser %S

db=%U

cl=%s

tsub=%d

RetrieveOffer %s

The source code, design, and structure of the Software are trade secrets. You will not disassemble, decompile, or reverse engineer itor otherwise attempt to discover the source code of the Software, in whole or in part, except to the extent expressly permitted by law, or distribute it. You will not use the Software for illegal purposes. You will comply with all export laws. The Software is licensed, not sold.

The Software accelerates downloads by enabling your computer to grab pieces of files from other BitTorrent users simultaneously. Your use of the Software to download files will, in turn, enable other users to download pieces of those files from you, thereby maximizing download speeds for all users. In the Software, only files that you are explicitly downloading or sharing or have downloaded or shared through BitTorrent will be made available to others. You consent to other users' use of your network connection to download portions of such files from you. At any time, you may uninstall the Software through the Add/Remove Programs control panel utility. In addition, for the BitTorrent or

BitTorrent, Inc. disclaims any responsibility for harm resulting from the Software or any software or content downloaded using the Software, whether or not BitTorrent, Inc. approved such software or content. BitTorrent, Inc. approval does not guarantee that software or content from an approved partner will function, sound, or appear as offered or hoped, or be complete, accurate, or free from bugs, errors, viruses, or other harmful content. BitTorrent, Inc. expressly disclaims all warranties and conditions, express or implied, including any implied warranties and conditions of merchantability, fitness for a particular purpose, and noninfringement, and any warranties and conditions arising out of course of dealing or usage of trade regarding the Software or any software or content you download using the Software. No advice or information, whether oral or written, obtained from BitTorrent, Inc. or elsewhere will create any warranty or condition not expressly stated in this agreement. Some jurisdictions do not allow certain limitations on implied warranties, so the above limitation may not apply to you to its full extent.

BitTorrent, Inc.'s total liability to you from all causes of action and under all theories of liability will be limited to $50.00. In no event and under no theory of liability will BitTorrent, Inc. be liable to you for any special, incidental, exemplary, or consequential damages arising out of or in connection with this agreement or the software whether or not BitTorrent, Inc. has been advised of the possibility of such damages. The foregoing limitations will survive even if any limited remedy specified is found to have failed of its essential purpose. Some jurisdictions do not allow the limitation or exclusion of liability for incidental or consequential damages, so the above limitation or exclusion may not apply to you to its full extent.

In an attempt to provide increased value to our visitors, we may choose various third party web sites or services to link to, and/or frame within, the Sites or Services. We may also include offers from third parties as part of the installation process for our software, which in some instances may include but is not limited to offers made through SweetLabs, Inc. (OpenCandy), whose End User License Agreement is hXXp://VVV.opencandy.com/eulas/b/sneula.html. We also participate in co-branding and other relationships to offer e-commerce and other services and features to our users. However, even if the third party is affiliated with us, we have no control over these sites or services, each of which has separate privacy and data collection practices independent of us. We have no responsibility or liability for these independent policies or actions, and are not responsible for the privacy practices or the content of any such web sites or services. These linked sites or services are only for your convenience and you therefore access them at your own risk.

These BitTorrent, Inc. terms will be governed by and construed in accordance with the laws of California, USA, without regard to conflicts of law rules. The United Nations Convention on Contracts for the International Sale of Goods will not apply. The failure by either party to enforce any provision will not constitute a waiver. Any waiver, modification, or amendment of the BitTorrent, Inc. terms will be effective only if signed. If any provision is held to be unenforceable, it will be enforced to the maximum extent possible and will not diminish other provisions. BitTorrent, Inc. may make changes to these terms from time to time. When these changes are made, BitTorrent, Inc. will make a new copy of the terms available at VVV.bittorrent.com/legal/eula. You understand and agree that if you use the Software after the date on which the terms have changed, BitTorrent, Inc. will treat your use as acceptance of the updated terms. You agree that BitTorrent, Inc. may provide you with notices, including those regarding changes to the terms, by postings on VVV.bittorrent.com/legal/eula. This and the Privacy Policy at VVV.bittorrent.com/legal/privacy are BitTorrent, Inc.'s complete and exclusive understanding with you regarding your use of the Software as an end user, except that sometimes additional terms or product requirements (including age requirements) may apply. Additional terms will be available with the relevant Software, and those additional terms become part of your agreement with us if you use those Software.

If you have any questions, contact us at legal@bittorrent.com.

onPageInit:DLG_OFFER_NON_GOOGLE: checkbox %d %s [%s]

Result: %s

&bin=%sbmp

hXXp://apps.bittorrent.com/utorrent-onboarding/welcome-upsell.btapp

hXXp://apps.bittorrent.com/utorrent-onboarding/player.btapp

hXXp://bundles.bittorrent.com/onboarding/utorrent?url=http://bundles.bittorrent.com/

no toolbar url

bundled_url

%s %s

ShellExecuteExW

shell32.dll

cbhomepage=%d

cbsearch=%d

cbtoolbar=%d

cbrevert=%d

au=%d

installresult=%d

exit=%d

au=%u

tbe=%d

cd=%d

tbofferresult=%d

tb=%s

tbinstallresult=%d

error=%d

msg=%U

url=%U

prog=%u

toroffer=%d

torofferid=%s

&shoffer=%d

cancellastpage=%U

ServerOfferRetrieved=%d

sec_offs=%U

OfferError=%U

OfferProvider=%U

OfferType=%U

Offer=%U

Accepted=%d

toroffername=%s

torexecresult=%d

download=%d

execute=%d

error=%U

mismreturn=%d

mismresult=%U

view=%s

SendStaticURLThread

3.4.2.37754

uTCBTWebClient

had_version_already = %s

running_from_install_dir = %s

Target version = %d

HasPendingUpdate = %s

IsThisTargetVersion = %s

IsThisTargetVersion_2 = %s

"status":"Manually ran non target version","from_install_dir":"%d"

IsThisVersionBlacklisted = %s

client_manager.IsThisVersionBlacklisted() || client_manager.DidOptOutOfThisVersion() && running_from_install_dir

g_version < target_version = %d

res == %d

Cancel Downgrade -- cvm.RemoveRunningVersion

2012-12-04 23:04:37 -0800

BTWebClient

hXXp://apps.bittorrent.com/webui/version.json

hXXp://beta.bundles.bittorrent.com/onboarding/utorrent?url=http://beta.bundles.bittorrent.com/

beta.bundles.bittorrent.com

bundles.bittorrent.com

hXXp://beta.%s

INSTALL_FAIL_USER_CANCEL -- cvm.RemoveRunningVersion

update.utorrent.com

hXXp://

()$^.* ?[]|\-{},:=!

(. ?)://([^/:] )(?::([0-9] ))?([^?]*)(?:\?(.*))?

Not a recognizable URL: "

https

HttpRequest redirect to HTTPS. Not supported

HTTP/1.1

] ([0-9] )[

HttpRequest status line not recognizable "

user32.dll

SetThreadExecutionState

dwmapi.dll

advapi32.dll

Failed to read from file: %s

"%s":[ %d ]

wininet.dll

rpcrt4.dll

Can't create UUID - %d

Can't get computer name - %d %d

Awininet.dll

InternetOpenUrlA

HttpQueryInfoA

%s(%d)/%s

%d.%d

Accept-Language: %s

DNS lookup can't resolve host '%s'

HTTP/1.1

hXXp://%s%s%s

%s(%d)

Host: %s%s

User-Agent: %s

Accept-Encoding:%s

Referer: %s

Authorization: Basic %s

If-Modified-Since: %s

If-None-Match: %s

X-Requested-With: XMLHttpRequest

%U=%U

Content-Length: %d

Content-Type: application/x-www-form-urlencoded

HTTP/1.

https:

max-age=%d

DownloadURL(%s) called.

hXXps://

application/vnd.rn-realmedia-vbr

image/vnd.microsoft.icon

%3s, d %3s M d:d:d GMT

Can't validate '%s' because no digits were encountered

Can't validate '%s' - error %d %s

NA-%d

%d.%d.%d.%d.%d.%s

d10:.fileguard40:%H

d10:.fileguard40:

]: %s: %d

%d/%d blocks. %d/%d bytes.

Can't decode encoded encryption key in magnet URL %s

magnet:?xt=urn:btih:%H&dn=%U

&key=%s

&tr=%U

&ws=%U

&as=%U

diskio.sparse_files

btapps.show_apps

streaming.safety_factor

streaming.failover_rate_factor

streaming.failover_set_percentage

tray.show

tray.single_click

bind_port

gui.report_problems

gui.persistent_labels

gui.compat_diropen

gui.alternate_color

gui.transparent_graph_legend

sys.prevent_standby

sys.enable_wine_hacks

use_udp_trackers

upnp.external_tcp_port

upnp.external_udp_port

upnp.external_ip

finish_cmd

state_cmd

license_key

s_url

offers.content_offer_url

offers.content_offer_autoexec

asdlurl

rand_port_on_start

logger.log_upnp_to_file

net.bind_ip

net.outgoing_ip

net.outgoing_port

net.outgoing_max_port

net.low_cpu

net.calc_overhead

net.calc_rss_overhead

net.calc_tracker_overhead

net.max_halfopen

net.diffserv_codepoint

net.limit_excludeslocal

net.upnp_tcp_only

net.disable_incoming_ipv6

net.ratelimit_utp

net.friendly_name

net.update_secure

isp.bep22

isp.primary_dns

isp.secondary_dns

isp.fqdn

isp.peer_policy_enable

isp.peer_policy_url

isp.peer_policy_date

isp.peer_policy_expy

isp.peer_policy_override

ipfilter.enable

dht.collect_feed

dht.rate

gui.log_date

boss_key

boss_key_salt

use_boss_key_pw

boss_key_pw

rss.update_interval

rss.smart_repack_filter

rss.feed_as_default_label

bt.save_resume_rate

bt.magnetlink_check_existing_files

gui.sg_mode

gui.delete_to_trash

gui.default_del_action

gui.speed_in_title

gui.limits_in_statusbar

gui.graphic_progress

gui.piecebar_progress

gui.show_status_icon_in_dl_list

gui.tall_category_list

gui.wide_toolbar

gui.show_gate_explaination

gui.show_gate_delete

gui.show_gate_notify

gui.find_pane

gui.toolbar_labels

gui.category_list_spaces

streaming.preview_player

streaming.playback_player

streaming.peer_timeout

streaming.buffer_size

streaming.generate_previews

streaming.popout_left

streaming.popout_top

streaming.popout_right

streaming.popout_bottom

btapps.auto_update_btapps

btapps.auto_update_btinstalls

btapps.install_unsigned_apps

btapps.reveal_app

btapps.skin_url

btapps.enable_activex

gui.pro_installed

gui.show_devices

gui.show_plus_upsell

gui.show_plus_av_upsell

gui.show_plus_conv_upsell

gui.plus_upsell_foreground

gui.show_plus_upsell_nodes

stats.first_time_user

stats.installed_from_bundle

stats.video1.time_watched

stats.video2.time_watched

stats.video3.time_watched

stats.video1.finished

stats.video2.finished

stats.video3.finished

stats.welcome_page_useful

gui.enable_ratings

gui.enable_comments

magnet.download_wait

gui.combine_listview_status_done

gui.update_rate

selfcert

plus.transcode_queue_parallel

plus.transcode_delete_transcripts

resume.enable_resume_dir

resume.dir_only

distributed_share.enable

distributed_share.tracker

udp://dishes-dev.trnt.us:8080

distributed_share.server_host

dishes.utorrent.com

distributed_share.pinned

distributed_share.server_port

distributed_share.auth_key

distributed_share.skip_authentication

distributed_share.initial_update

distributed_share.churn_delay

distributed_share.churn_threshold

silent_auto_update_exe

next_market_share_report

max_speed_down_tcp

max_speed_up_tcp

gui.last_tree_node

webui.ssdp_uuid

offers.lifetime_impressions_ft

offers.lifetime_impressions_lrec

offers.lifetime_ad_req_errors

campaigncode.txt

.fileguard

Validating value '%s' for setting %d type %d

Invalid Username/Password

Can't set SO_REUSEADDR option on socket %d - %d %s

Can't bind connecting socket %d to IP %A - %d %s

%s:%s

Proxy-Authorization: Basic %s

CONNECT %s:%d HTTP/1.0

CONNECT %A HTTP/1.0

WSAEnumNetworkEvents error (%d)

Bound listening socket %d to IP %A

Can't listen on socket %d IP %A

*** TCP, uTP buffer stats ***

Error code: HTTP %d

utp.log

looking up dishes: %s %i

[%s] %s

%d:%d

%s('invalid request')

Can't parse authorization header %s

Can't find device pairing for ID %S

HTTP/1.1 301 Moved Permanently

Location: %s

HTTP/1.1 u %s

WWW-Authenticate: Basic realm="%s"

HTTP/1.1 %d %s

Connection: %s

Content-Type: %s

%s%s%s%s%s%s%s%s%s%s%s%s

%sContent-Length: %u

%sConnection: close

Can't accept invalid address '%s'

Can't accept invalid dot notation mask '%s'

Can't accept IP '%s' with invalid mask '%s'

Iphlpapi.dll

GetExtendedTcpTable

4.2.2.1

.payload

.options

update_url

update_url_btinstall

badging_url

file:///%S\apps\%S\index.html

PlusKeyInjected

{"event": "%s", "properties": {

"distinct_id":"%s",

"h":"%s",

"v":"%d",

"c":"%S",

"token":"%s",

"svp":"%d",

"view":"%s",

"cc":%d,

"bucket":"%S",

"%s":"%S"

hXXp://yogi.apps.bittorrent.com/track/?data=%s&ip=1

X-ClientID: %s

bitdefender.btinstall

Sending autoupdate stats [%s]

ip=%s

dlurl=%U

POST /e?i=%d HTTP/1.1

"%s":%s,

"%s":%s

"%s":"%s",

"%s":"%s"

"%s":%d,

"%s":%d

"%s":%u,

"%s":%u

"%s":%Lu,

"%s":%Lu

hXXp://bench.utorrent.com

[u:u][%s]

&license=%U

http%s://%U:%U@%s:%d/attach?name=%U&clientid=%U&version=%d&p=%d&ip=%I%s

proxy = hXXp://localhost:%d/proxy/0/; expires = %s GMT

hXXp://localhost

-%c%c%s-

127.0.0.1

%s:%d

0.0.0.0

"peer_id":"%s", "addr":"%A"

"markpt":"%s"

"trigger":%u

,"%u":%u

,"%s":%u

,"%s":%Lu

,"%u": [

%d.%d.%d

%s/%d%d%d(%d)

%d%d%d

%d%d%d%s

%s/%s

Pairing request rejected - unsupported

ntdll.dll

udp://

cmdline

%S: is 100%% completed

verified signature with embedded certificate for identity:%s

verified signature for trusted identity: %s

update-url

gate-info-url

certificate

url-list

Windows-

website

name.utf-8

path.utf-8

WARNING: avoiding connecting to web seed because it's blocked by policy '%s'

tracker: failure reason="%s"

port

for torrent file: %s

got tracker error response: %s

got HTTP tracker response for: %s

tracker response: %s

tracker warning: %s

got udp tracker error response: %s

got UDP tracker response for: %s

****** REQ(%s): for torrent file '%S' connecting to tracker: %S

tracker not tracking: %s

&ip=%U

%S%cinfo_hash=%.20U&peer_id=%.20U&port=%d&uploaded=%Ld&downloaded=%Ld&left=%Ld&corrupt=%Ld&key=%.8X%s&numwant=%d&compact=1&no_peer_id=1%s

tracker request: %s

for tracker %s

tracker: failure reason="%S"

valid scrape from %S

%.*S/scrape%S%cinfo_hash=%.20U

Initiating UDP scrape for torrent file: %s

Tracker URL: %s

Initiating TCP scrape for torrent file: %s

gate_url

%s?h=%s

%s?info_hash=%h&h=%s&gate_type=%s

****** update url: %s

****** gate url: %s

Could not download metadata for torrent %H (%S): %S

http:

%S: is %.2f%% completed

Adding '%S' as storage path for '%S'

.torrent

** Saving '%S' as root folder for '%S'

meta_vlc_supported

download_url

app_url

feed_url

web_seeding_enabled

gate_info_url

tfurl

webseeds

PPRIO_HTTP

Can't accept '%s' as argument

router.utorrent.com

router.bittorrent.com

hr.hdtv

hr.pdtv

webrip

ac3.5.1

dd.dd.dd

dddd.dd.dd

Initiating RSS download of url %s

POST /e?i=%s HTTP/1.0

{"eventName":"ut_prof_ip","b":%Ld,"r":%d,"sequenceID":%d,"clientID":"%s","uniqueID":"%s","st":[

hXXp://bench.utorrent.com/e?i=%s

%S:%s

Server: %s

Content-Disposition: attachment; filename="%s"; size=%Lu

Date: %s

ETag: "%s"

Last-Modified: %s

HTTP/1.1 %s

%s%s%s%s%s%sConnection: close

%s%s%s

HTTP/1.1 %d Error

Certification Services Division1!0

premium-server@thawte.com0

*.utorrent.com0

/hXXp://crl.thawte.com/ThawteServerPremiumCA.crl0

hXXp://ocsp.thawte.com0

.RH(Y

)hXXp://svr-ov-crl.thawte.com/ThawteOV.crl0

Certification Services Division1806

GoDaddy.com, Inc.1301

*hXXp://certificates.godaddy.com/repository100.

'Go Daddy Secure Certification Authority1

079692870

*.bittorrent.com1!0

*.bittorrent.com0

"hXXp://crl.godaddy.com/gds1-14.crl0S

 hXXp://certificates.godaddy.com/repository/0

hXXp://ocsp.godaddy.com/0J

>hXXp://certificates.godaddy.com/repository/gd_intermediate.crt0

*.bittorrent.com

bittorrent.com0

*.utorrent.li1!0

*.utorrent.li0

"hXXp://crl.godaddy.com/gds1-82.crl0S

*.utorrent.li

utorrent.li0

Security.dll

Secur32.dll

1.2.840.113549.1.1.5

1.3.6.1.5.5.7.3.1

1.3.6.1.4.1.311.10.3.3

2.16.840.1.113730.4.1

1.3.6.1.5.5.7.3.2

10.0.0.0

192.168.0.0

169.254.0.0

172.16.0.0

127.0.0.0

%u.%u.%u.%u.in-addr.arpa

%x.%x.%x.%x.%x.%x.%x.%x.%x.%x.%x.%x.%x.%x.%x.%x.%x.%x.%x.%x.%x.%x.%x.%x.%x.%x.%x.%x.%x.%x.%x.%x.ip6.arpa

DEBUG: Marking %a as %s

DEBUG: IP %a is already cached. Returning %s

DEBUG: Initiating tracker prefs resolve %s

DEBUG: Hostname %s is already cached. Returning %a

DEBUG: Hostname %s cache error %d

DEBUG: Initiating resolve %s

DEBUG: Reverse %s lookup %a (FQDN: %d)

DEBUG: Reverse lookup done: %s

_bittorrent-tracker._tcp.%s

DEBUG: Processing TXT: %s

DEBUG: Resolving %s service %u

DnsApi.dll

utorrent.com

Windows

OS info: name %s release %s version %s machine %s

255.255.255.255

,"os":"%d.%d.%d.%d.%d.%s"

UTP_GET_UDP_MTU

UTP_GET_UDP_OVERHEAD

<html><head><title>µTorrent Search</title></head><frameset rows="90px,*"><frame src="hXXp://search.utorrent.com/bntop.html" frameborder="0" marginheight="0" marginwidth="0" scrolling="no" noresize="noresize" /><frame src="hXXp://search.conduit.com/Results.aspx?ctid=CT3083945&searchsource=45&&%s" frameborder="0" /></frameset></html>

js%d();

HTTP/1.0 200 OK

features/device_pairing/supported_types

Can't install web UI archive version (%d)

Can't install default UI version (%d)

version.txt

{ "name": "%s", "version": %s }

%s(%s)

GET /favicon.ico

Can't accept non-IPv4 address as IP match for %s

Can't match using invalid subnet mask %s

Found valid subnet mask %s %x

Ignoring filter IP containing invalid CIDR notation %s

IP matches IPv4 restriction %s%s%s

Can't match using IPv4 filter %s%s%s mip %x mask %x

Can't accept non-IPv6 restriction address %s

IP matches IPv6 restriction %s%s

Can't match using IPv6 filter %s%s

Can't support device pairing request lacking a PIN

Can't support invalid PIN '%s'

Can't support invalid PIN value %Ld

Can't support device pairing type '%s'

hXXp://apps.bittorrent.com/torque/pairing/style.%s%scss

<html><head><link rel="stylesheet" type="text/css" href="%s"></head><body><script>var key = "%s";var source = "%s";</script><h3>%s wants access to %s</h3><p>If you click yes, this site will have access to your data</p><input type="button" value="Allow" onclick="window.parent.postMessage(key,'*')" /><input type="button" value="Deny" onclick="window.parent.postMessage('denied','*')" /></body></html>

HTTP/1.1 200 OK

HTTP: IP %a: GET %.200s

HTTP: IP %a: Blocked: GET %.100s

"headers": { "Content-Type": %s

, "Set-Cookie": %s

"html":%s

"error": %s

,[%S,%J,%J,%I,%I,%I,%B,%I,%I,%I,%I,%J

,[%s,%s,%s,%I,%I,%S,%S,%I,%I,%I,%I,%I,%I,%I,%I,%I,%I,%I,%I,%I,%I,%I]

autoexec

autoexec_hide_ui

Can't accept value '%s' for torrent property '%s'

Can't accept overflow value '%s' for torrent property '%s'

Can't accept negative value '%s' for torrent property '%s'

Can't accept value '%s' for unknown torrent property '%s'

{"hash": %s

,"trackers": %S

,"autoexec": %I

,"autoexec_hide_ui": %I

password

,"code": %I, "message": %s

Can't recognize torrent hash '%s'

Can't accept file number '%s'

Can't use file number '%s' - invalid for selected torrent

{"name":%S, "hash":%H, "sid":%s, "complete":%B, "completed_on":%J, "primary_label":%S, "files": [

{"name":%S, "fileno":%J, "length":%J, "complete":%B, "type":%s, "fullpath":%S,

{"name":%S, "fileno":%J, "length":%J, "complete":%B, "type":%s,

"codecs": [%s,%s]

{"name":%S, "fileno":%J, "media":%s, "length":%J, "complete":%B, "type":%s,

,"error": %S

add-url

get-url

add-unknown-url

Ignoring setting %d name %s value %s

{ "name": %s

app_update_url

,[%s,%I,%S,{"access":%s}]

, {"path": %s, "available": "%J"}

webui

, %s : [

, "name" : %s, "version" :

,{"guid":%s, "created":%J, "updated":%J, "peer_ip":%a, "sock_ip":%a, "reported_ip":%s, "user_agent":%s, "persistent":true, "custom":%s }

,{"guid":%s, "created":%J, "updated":%J, "peer_ip":%a, "sock_ip":%a, "reported_ip":%s, "user_agent":%s, "persistent":%B, "custom":%s }

Can't log out session - invalid GUID %s specified

Can't log out requester's session %s

%s out current session %s

[%S,%s,%s]

,"token": %s

Can't accept configuration change from other than administrative login

webui.uconnect_question_opted_out

webui.uconnect_username

webui.uconnect_password

webui.uconnect_enable

, "movetorrent":{"target":%S, "status":%d}

[%H,%I,%S,%J,%I,%J,%J,%I,%I,%I,%I,%S,%I,%I,%I,%I,%I,%I,%J,%s,%s,%S,%s,%J,%J,%s,%S,%I,%s]

[%S, %I]

[%I,%B,%B,%B,%B,%I,%S,%I,[

[%S,%S,%s,%I,%I,%J,%I,%I,%I,%I,%B,%B]

[%I,%I,%S,%S,%S,%S,%I,%I,%S,%I,%I,%I,%I,%S,%B,%B]

getmsg

%s({"encbody":"

,"GUID":"%s"

,"x-bt-seq":"%s"

<script src="/static/js/bt.js"></script>

.html

token.html

HTTP/1.1 304 Not Modified

<meta http-equiv="refresh" content="1" />Please wait while the µTorrent WebUI is installed... You will be automatically redirected.

index.html

The µTorrent WebUI does not seem to be installed. Click <a href="download_webui">here</a> to try to install it, or see the <a href="hXXp://utorrent.com/webui-guide.php">guide</a> for more details.

index.html?error=1

<b>There was a problem installing µTorrent WebUI, please see the µTorrent log for more details.</b></br></br>

download_webui

HTTP/1.1 404 Not Found

%s({response:%s, guid:"%s"})

%s({ "sessionid": "%s", "message": "%s", "code": %d })

%s({ "message": "%s", "code": %d })

Can't create session for device ID %s

Can't accept remote pairing key

Can't accept device pairing key '%s'

Can't process pair connection authentication request without pairing key

/gui/guest.html

Unable to listen for HTTP traffic on port %d

Unable to listen for HTTP traffic on v6 port %d

%s({ "pairing_key": "%s", "pairing_type": %d, "code": %d })

UDP setsockopt(SO_RCVBUF, %d) failed: %d

UDP setsockopt(SO_SNDBUF, %d) failed: %d

DEBUG: ICMP%s is not available on this platform

%sversion-%s

hXXp://utorrent.com/webui/webui-%s-%s.zip

Web UI archive entity tag '%s'

Could not match any version from json %s

Attempting to download file %s to %S

Attempting to download web UI archive from %s to %S

Moving %S to %S

Moving %S back to %S

Attempting to read archived file %s

webui.enable

webui.enable_guest

webui.enable_listen

webui.token_auth

webui.token_auth_filter

webui.username

webui.password

webui.hashword

webui.uconnect_hashword

webui.uconnect_username_anonymous

webui.uconnect_hashword_anonymous

webui.uconnect_computername

webui.allow_pairing

webui.salt

webui.guest

webui.restrict

webui.port

webui.cookie

webui.pair_hashes

webui.download_folders

webui.raptor_host

raptor.utorrent.com

webui.raptor_port

webui.raptor_secure

webui.talon_host

remote.utorrent.com

webui.talon_port

webui.talon_secure

webui.uconnect_toolbar_ever

webui.uconnect_enable_ever

webui.uconnect_connected_ever

webui.uconnect_actions_count

webui.uconnect_actions_list_count

webui.uconnect_cred_status

webui.update_message

webui.proxy_auth

webui.update_url

hXXp://pr.apps.bittorrent.com/client-webui/3.4/client-webui.json

%p %s d %s

MTU [PROBE] floor:%d ceiling:%d current:%d

MTU [PROBE-TIMEOUT] floor:%d ceiling:%d current:%d

Packet timeout. Resend. seq_nr:%u. timeout:%u max_window:%u cur_window_packets:%d

MTU [DONE] floor:%d ceiling:%d current:%d

MTU [RESET] floor:%d ceiling:%d current:%d

Packet %u lost. Resending

actual_delay:%u our_delay:%d their_delay:%u off_target:%d max_window:%u delay_base:%u delay_sum:%d target_delay:%d acked_bytes:%u cur_window:%u scaled_gain:%f rtt:%u rate:%u wnduser:%u rto:%u timeout:%d get_microseconds:%I64u cur_window_packets:%u packet_size:%u their_delay_base:%u their_actual_delay:%u average_delay:%d clock_drift:%d clock_drift_raw:%d delay_penalty:%d current_delay_sum:%I64ucurrent_delay_samples:%d average_delay_base:%d last_maxed_out_window:%I64u opt_sndbuf:%d current_ms:%I64u

MTU [DUPACK] floor:%d ceiling:%d current:%d

MTU [ACK] floor:%d ceiling:%d current:%d

UTP_Connect conn_seed:%u packet_size:%u (B) target_delay:%u (ms) delay_history:%u delay_base_history:%u (minutes)

MTU [ICMP] floor:%d ceiling:%d current:%d

msg_type

8:msg_typei%ue

5:piecei%ue

5:added%d:

7:added.f%d:

6:added6%d:

8:added6.f%d:

7:dropped%d:

8:dropped6%d:

d1:eiÞ

12:complete_agoiÞ

11:upload_onlyiÞ

11:lt_donthaveiÞ

12:ut_holepunchiÞ

11:ut_metadataiÞ

6:ut_pexiÞ

10:ut_commentiÞ

13:metadata_sizeiÞ

1:piÞ4:reqqiÞ%s1:v%d:%s2:ypiÞ

%s: scrape response had %d torrents, request had %d

unsupported action

UDP Tracker disabled

UTrackAnnounce(%s) called.

UTrackScrape(%s) called.

UDP Trackers disabled.

Invalid tracker URL.

[%u] log closed

?proxy.proxy

proxy.type

proxy.port

proxy.auth

proxy.resolve

proxy.username

proxy.password

%s Remote disconnected: reset by proxy

http_pending_limit

min_http_connections

%H:%Lx:%x

Content-Disposition: attachment; filename="%s"

Content-Disposition: %s

%s%s%s%sServer: BitTorrentProxy/1.0

%s([""

%s; filename="%s"

queue.dont_count_slow_dl

queue.dont_count_slow_ul

queue.slow_dl_threshold

queue.slow_ul_threshold

queue.use_seed_peer_ratio

queue.prio_no_seeds

queue.switchtime

queue.switchtime_prio

queue.started_bonus

bt.tcp_rate_control

gui.graph_tcp_rate_control

gui.graph_overhead

gui.graph_legend

bt.ratelimit_tcp_only

bt.prioritize_partial_pieces

bt.transp_disposition

net.utp_target_delay

net.utp_packet_size_interval

net.utp_receive_target_delay

net.utp_initial_packet_size

net.utp_dynamic_packet_size

net.discoverable

bt.enable_pulse

bt.pulse_weight

bt.extra_ul_rand

bt.extra_ul_max

bt.prio_piece_thres

bt.few_pieces_thres

bt.http_pending_limit

bt.dl_queue_factor

bt.ul_queue_factor

bt.scrape_stopped

bt.compact_allocation

bt.progressive_piece_picker

bt.progressive_piece_span_mb

bt.enable_tracker

bt.use_dns_tracker_prefs

bt.read_only_on_complete

bt.multiscrape

bt.send_have_to_seed

bt.set_sockbuf

bt.rcv_max_sockbuf

bt.snd_max_sockbuf

bt.connect_speed

bt.prio_first_last_piece

bt.randomize_peer_id

bt.determine_encoded_rate_for_streamables

streaming.min_buffer_piece

bt.sequential_download

bt.sequential_files

bt.allow_same_ip

bt.use_similar_torrent_data

bt.no_connect_to_services

bt.no_connect_to_services_list

bt.ban_threshold

bt.use_ban_ratio

bt.ban_ratio

bt.use_rangeblock

bt.graceful_shutdown

bt.shutdown_tracker_timeout

bt.shutdown_upnp_timeout

peer.lazy_bitfield

peer.lazy_bitfield_mode

peer.lazy_bitfield_factor

peer.lazy_bitfield_nohave

peer.resolve_country

peer.disconnect_inactive

peer.disconnect_inactive_interval

choker.interval_auto

choker.interval

choker.interval_optim

choker.slots_auto

diskio.flush_files

zz.countries.nerd.dk

%I.%s

DEBUG: Skipping torrent peer resolve: %t 0xX %d

"url"

diskio.no_zero

diskio.use_partfile

diskio.smart_hash

diskio.smart_sparse_hash

diskio.coalesce_writes

diskio.coalesce_write_size

diskio.rsize_factor

diskio.max_write_queue

diskio.cache_reduce_minutes

diskio.cache_stripe

diskio.quick_hash

diskio.mark_of_the_web

diskio.minimize_kernel_caching

diskio.all_writes_sync

cache.override

cache.override_size

cache.reduce

cache.write

cache.writeout

cache.writeimm

cache.read

cache.read_turnoff

cache.read_prune

cache.read_thrash

JT_IMPORT

Error: COMPACT_NOT_FOUND. P=%d,T=%d

keyhash

Saving serialized device pairing set with %lu pairings at %S

Can't create pairing from hierarchy at %u from %S

Can't load non-dictionary hierarchy at %u into pairing set from %S

Can't load non-list hierarchy into pairing set from %S

%s serialized device pairing set (%lu devices) from %S

** Generated %d character session cookie: GUID=%s

reported_ip

global_key

Searching for device pair session with id %s

Can't accept id %s as a GUID

** FileStorage::SetFolderRoot(%S) failed with _folder '%S'

** FileStorage::SetFolderRoot(%S) failed: _folder is NULL or empty.

** FileStorage::SetFolderRoot(%S): setting for folder '%S'

Warning: Delete to trash failed for %S. Error: %d. Deleting permanently.

"to_trash":%d, "error_code":%d

%s:%H:%d:%s

%s: %s

239.255.255.250

Created SSDP UUID %s

The external port cannot be wild-carded

The port mapping entry specified conflicts with a mapping assigned previously to another client

Internal and External port values must be the same

The NAT implementation only supports permanent lease times on port mappings

ExternalPort must be a wildcard and cannot be a specific port

UPnP: Discovered host: %s

UPnP: Checking cached host %s

UPnP: Cached host %s (%I) is not part of our subnet %I/%I.

UPnP: Queueing cached host %s

UPnP: Unable to bind to UPnP port: %d

UPnP: Joined multicast group

M-SEARCH * HTTP/1.1

HOST: 239.255.255.250:1900

NOTIFY * HTTP/1.1

LOCATION: hXXp://%A

SERVER: %s/%s UPnP/1.1 %s/%s

NTS: %s

USN: uuid:%s

FRIENDLYNAME:%S

HH:%s

%s(%s)(%s)

CACHE-CONTROL: max-age = %d

LOCATION:hXXp://%A

USN:uuid:%s

recvfrom ERROR: %d

UPnP: Found location from upnp notify: %s

urlbase

controlurl

eventsuburl

scpdurl

NewExternalPort

NewInternalPort

hXXp://%s:%d/%s

UPnP: The device "%s" is not a UPnP router (%s)

AddPortMapping

DeletePortMapping

GetGenericPortMappingEntry

<s:Envelope xmlns:s="hXXp://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="hXXp://schemas.xmlsoap.org/soap/encoding/">

<u:%s xmlns:u="%s">

<NewRemoteHost></NewRemoteHost><NewExternalPort>%d</NewExternalPort><NewProtocol>%s</NewProtocol><NewInternalPort>%d</NewInternalPort><NewInternalClient>%I</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>%s (%s)</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration>

<NewRemoteHost></NewRemoteHost><NewExternalPort>%d</NewExternalPort><NewProtocol>%s</NewProtocol>

<NewPortMappingIndex>%d</NewPortMappingIndex>

</u:%s>

GET %s HTTP/1.1

Host: %s:%d

POST %s HTTP/1.1

HOST: %s:%d

CONTENT-LENGTH: %d

SOAPACTION: "%s#%s"

%s port %d -> %I:%d

%s port %d

UPnP: %s is already mapped. Not re-mapping.

UPnP: Removed %s

UPnP: ERROR removing %s: (%d) %s

UPnP: Mapped %s

UPnP: %s mapped successfully.

UPnP: Host '%s' added to cache.

UPnP: ERROR mapping %s. Deleting mapping and trying again: (%d) %s

UPnP: ERROR mapping %s: (%d) %s

UPnP: Device error "%s": (%d) %S

UPnP: Could not map UPnP Port on this pass, retrying.

UPnP: Could not detect external IP on this pass, retrying.

UPnP: Unable to map port %I:%d with UPnP.

Unsupported Version

Not Authorized/Refused (e.g. box supports mapping, but user has turned feature off)

Unsupported opcode

NAT-PMP: error: %s

NAT-PMP: %s %s port %d -> %I:%d

NAT-PMP: Unable to map port with NAT-PMP.

"period":%d,

"n_samples":%d

,"active_seeds":"%s"

,"active_downloads":"%s"

,"up_tcp":"%s"

,"down_tcp":"%s"

,"up_utp":"%s"

,"down_utp":"%s"

,"up_tcp_max":%u

,"up_utp_max":%u

,"down_tcp_max":%u

,"down_utp_max":%u

UPnP(XP): Removed TCP port %d

UPnP(XP): Removed UDP port %d

UPnP(XP): %s port %d -> %I:%d is already mapped. Not re-mapping.

UPnP(XP): %s port %d -> %I:%d mapped successfully.

-----BEGIN CERTIFICATE-----

com.bittorrent

%s trusted

5:owner%d:%s4:text%d:%s9:timestampi%Lde4:likeiÞ

8:msg_typeiÞ

3:numiÞ

6:filter%d:

%A: [%s (%:.1d)] picked no blocks

239.192.152.143

BT-SEARCH * HTTP/1.1

Host: 239.192.152.143:6771

Port: %u

Infohash: %s

port:

keys

hXXp://update.utorrent.com/streamstats.php?t=%Ld&bb=%Ld&b=%Ld&s=%Ld&ft=%d&fb=%Ld&v=%dx%d&fe=%U&u=%d&nu=%d&nuc=%d&iu=%d&ps=%d&cc=%d&fs=%d&pt=%d&cpt=%d&nr=%d&cnr=%d&pl="%s"&tid=%x&fid=%x&timeout=%d&buffer=%d%s&svp=%d

CbDP.jR6YD6wAj2ByQWxQxQZ7.9J9xkn2.Uqb3zVm16vQyizprhBw9hi80psatZ8k54vwZfiIeEHZVsDnyqeWSSIpWso.wh5GD4OFgdhVI3

iqJ7nFZ4bGCRjE1F.FXEwL085Zb0kLM2TdHDaVVCdq0cKxvnH/0FLskJTKlDtt6sDl89dc//aEULTVFGtcbA/tDzc.bnFE.DWthQOu2n2JwKjgKfgCR2lZFWXdnWmoOh

Ewl2hcjiutMd3Fu2lgFnUXWSc67TVyy2vwYCKoS9MLsrdJVT9RgWTCuEqWJrfB6uE3LsE9GkOlaZabS7M29sj5TnzUqOLJMjiwEzArfiLr9WbMRANlF68N5AVLcPWvNx6Zjl3m5Scp0BzJBz9TkgfhzKJZ.WtP3Mv/67I/0wmRZ

F//////////oG/QeY5emZJ4ncABWDmSqIa2JWYAPynq0Wk.fZiJco9HIWXvZZG4tU.L6RFDEaCRC2iARV9V53TFuJLjRL72HUI5jNPYNdx6z4n2wQOtxMiB/rosz0QtxUuuQ/jQYP.bhfya4NnB7.P9A6PHxEPJWV//////////

3NUKQ2Re4P5BEK0TLg2dX3gETNNNECPoe92h4OVMaDn3Xo/0QdjgG/EvM.hiVV1BdIGklSI14HA38Mpe5k04juR5/EXMU0r1WtsLhNXwKBlf2zEfoOh0zVmDvqInpU695f29Iy7sNW3U5RIogcs740oUp2Kdv5wuITwnIx84cnO.e467/IV1lPnvMCr0pd1dgS0a.RV5eBJr03Q65Xy61R

dUyyhxav9tgnyIg65wHxkzkb7VIPh4o0lkwfOKiPp4rVJrzLRYVBtb76gKlaO7ef5LYGEw3G.4E0jbMxcYBetDy2YdpiP/3GWJInoBbvYHIRO9uBuxgsFKTKWu7RnR7yTau/IrFTdQ4LY/q.AvoCzMxV0PKvD9Odso/LFIItn8PbTov3VMn/ZEH2SqhtpBUkWtmcIkEflhX/YY/fkBKfBbe27/zUaKUUZEUYZ2H2nlCL60.JIPeZJSzsu/xHDVcx

2iQzj1CagQc/5ctbuJYLWlhtAsPHc7xWVyCPAKFRLWKADpASkqe9djWPFWTNTdeJtL8nAhImCn3Sr/IAdQ1FrGw0WvQUstPx3FO9KNcXOwisOQ1VlL.gheAHYfbYyBaxXL.NcJx9TUwgWDT0hRzFzqSrdGGTN3FgSTA1v4QnHtEygNj3eZ.u0MThqWUaDiP87nqha7XnT66bkTCkQ8.7T8L4KZjIImrNrUftedTTBi.WCi.zlrBxDuOM0da0JbUkQlXqvp0yvJAPpC11nxmmZOAbQOywZGmu9nhZNuwTlxjfIro0FOdthaDTuZRL9VL7MRPUDo/DQEyW.d4H.UIlzp

///////////93zgY8MZ2DCJ6Oek0t1pHAG9E28fdp7G22xwcEnER8b5A27cED0JTxvKPiyqwGnimAmfjybyKDq/XDMrjKS95v8MrTc9UViRqJ4BffZVjQml/NBRq1hVjxZXh.rg9dwMkdoGHV4iVvaaePb7iv5izmW1ykA5ZlmMOsaWs75NJccaMFwZz9CzVWsLT8zoZhPOSOlDM88LIkvxLAGTmbfPjPmmrJagyc0JnT6m8oXWXV3AGNaOkDiuxuvvtB1WEXWER9uEYx0UYZxN5NV1lJ5B9tYlBzfLO5nWvbKbywfLgvHNI9XYO.WKG5NAEMeggn2sjCnSD151wCwXL8QlV7BfaxFk515ZRxmgAwd5NNGOCVREN3uMcuUJ7g/MkZDi9CzSUZ9JWIYLXdSxZqYOQqkvhyI/w1jcA26JOTW9pFiXgP58VAnWNUo0Ck.4NLtfXNMnt2OZ0kjb6uWZYJw1qvQinGzjR/E3z48vBWj4WgJhIol//////////

F//////////oG/QeY5emZJ4ncABWDmSqIa2JWYAPynq0Wk.fZiJco9HIWXvZZG4tU.L6RFDEaCRC2iARV9V53TFuJLjRL72HUI5jNPYNdx6z4n2wQOtxMiB/rosz0QtxUuuQ/jQYP.bhfya4NnB7.P9A6PHxEHRFS80VBYXOxy5cDf8DXnLqvff5Z.e/IJFNuDbNIFSewsM76BpLY25KhkUrIa7S9QMRMSCDKvAl9W4yNHi2CeO8Nmoa5v6BZREE.EUTomO3eO3coU3ekm7ee.rnLtmRqnIoTuho/QLM1SOEPL9VEgLQkKLqYOOcFe541LoZbgAgiGjhJCN3GHGUZEeLI6htnowPEpxXGHOs.yAYkfnLrq637spbm.5fk7anwlrhepR2JFN7eoKu4ebOPtEuz8c6jBkQ/4l.WRPYWXas7O2Spx8QcHI7oiO5tiW3BlX5rTwOLriTmc8mBhPHk88ua.WTEMhCKFRM/pW/H2EIuBH8AaX204QSZmIfuVcruXncX2zkbiccSCd66hquZmQb6WqjXKBsYM3wSegr4pesxl2smJUZlakZlmK7xxAfYXyMKTEQy1TcRAMJw2Gmw8ZEw66KLldxHzXAN3EujUlk1lTTY5mI1pG1f4drR1QgPEqwfYDZzt1Xl.tt92cm8zDz3N9D0OncV//////////

///////////93zgY8MZ2DCJ6Oek0t1pHAG9E28fdp7G22xwcEnER8b5A27cED0JTxvKPiyqwGnimAmfjybyKDq/XDMrjKS95v8MrTc9UViRqJ4BffZVjQml/NBRq1hVjxZXh.rg9dwMkdoGHV4iVvaaePb7iv5izmW1ykA5ZlmMOsaWs75NJccaMFwZz9CzVWsLT8zoZhPOSOlDM88LIkvxLAGTmbfPjPmmrJagyc0JnT6m8oXWXV3AGNaOkDiuxuvvtB1WEXWER9uEYx0UYZxN5NV1lJ5B9tYlBzfLO5nWvbKbywfLgvHNI9XYO.WKG5NAEMeggn2sjCnSD151wCwXL8QlV7BfaxFk515ZRxmgAwd5NNGOCVREN3uMcuUJ7g/MkZDi9CzSUZ9JWIYLXdSxZqYOQqkvhyI/w1jcA26JOTW9pFiXgP58VAnWNUo0Ck.4NLtfXNMnt2OZ0kjb6uWZYJw1qvQinGzjR/E3z48vBWj4WgI480HfoF1AdX.RNY76Q4BswMoQPmoSOQlJYF1gKQ3Is5GlQ9OFfoYhKJEZRkyBR1DwE.IwE/1GVligcA7nPHqvhm5sPifPFe933eYCxeOPHM.Vj7s4fSCxYrw.u6zrs8N187D06aIVLi5gfaxJgc8sFtS66/xVSaAR0ZqtqDSaq0eIIDiFwjD9yS2R1rDooO2P6tibr7dOzkZUz.F.K1gsUKmxbspWlGJ01hh1gK.sG9zWn5vSdi8PQYHZQFjlhpviKxKJERBhErBiRstyKH.RC9Kip855HAzUlGc.uz04tZDA/MOFA0SPBakpmCkeLqN8T0/I2ryvkTFxsrLvmBqQO38Arg40na0iSdbddoN..n.Zp8wbwVZRCYBuF7KMt/rXQnKlK1x8hGLIgp8zjVhz8uTWKp5xI3u0tuAUN5Uxoc.Ce1g7LYxV5sdRrKAezYX./yEiPpB6Z4zLSsbR9x2xobZ8uV.ZNRZm4Q0G.ZsO/I63k4hyjMmjqTDRcbFaURSn09F//////////

3//////////yaFsg8XQC8qnCPYYu3S7D4f0au8YcVCT08BlgOx4viYKKe8UOuq1DtlbHcppJf36p0h2ctoNnGtJ.4rRMrHmaNaXRLsObv.nlHCGkccD.rh2/zSjlG6j.tkE6lxMecVfQwV915yIn/cIIXcKUpaMpt207oueME/1PZQI3OSLTEQQHO/gFqapr.3PLqZtAEjbXnYyrOWXLAxdjKf1t2Mbcrd33LEIhoO1F5qR0ZA625yCf1UHYuspZlZddSi60w60vidWwBi1wAFjSLTy6zCKidUAylsbLWN63cLINpgbMhb5T8c69Zw1H0LSevQYgh4BQqp5mq4K7epg5KXgzySkcJi.uK4MDll2ehgSLTT1WnzivSFXQRXvCUhzQwCsmaprnwCbE1A9M6TpkFI9XhIxclnB/e6sOe8PDXs0dC.o6faKXyh61Tx80oxuHTNUc5TR7S9YC2wsKRY2E9Fe7Jbgp53srlyuFqGZak2qI2f8GW16d8y4gU7vjU8SPeGlRfR9fd39nXgzE8y6fHeDBOL2zebW.dAAjHCwDkxmji4texvBexy51..ogOeV5b7Jcl0NPcoba.WaCEY8pkXXb5Rv.qVOIbmpkBNhxWRtNOXS4WSq0QH9zMmMgcJjEgOZO/TmOR/jzoGfi2FJVGroJG2X98sm/gqqdnm9i7KtB9W9aRUoNKUTZswDxtu/vG6hPvJ3kNRE2z1C06ki6fJxP0ds34NboUmXbg96De.s.lFcnJjHCvikixKknlRVnH7vimbIpCWKL4hrwz2RxZq0JUCqhzPWye1nakIxF0owXNHSXq3z8BNpcvq/lRLNd0lHfWCWhMeG36G2noUMUV9Vxx7wFCZgNf.Dio8lWyTHRV/M5h5IzG7iYj1LAhCZsr.lqZXs1JCNj8FW3VWfvSLxlARuoW6eTMBjyNQTlLGgZsA7x/mwndCiQCJrLpQLidiBlAMCZX/wDTkF0He13wFPZz8OEuIlorR2tHqrkQK.HvjlX5PTAEIRnB.vUGuTtosgJBVZDY.nD1pkJ6wEyWojesTqm1q7wU/Yln7xILszfDhf2HcEgjZd5hazMWq8xHqA/79U2EF5ilZdMKju/sullo4YjaY8Yu4f0Dy1nFhLwWQ8/37D7FyP6pgC6jBoyY6BuE5tVgTIt.Ym8VeUMWp0.rRtJe6Appriw9ufcqg4/W/HFWjtp4Eu7IhQZP5b.YPe2LTmMJp7CK8HeKT.Qj86LtjVg6nrH2zVkTDS/hpQyCUpw9eDP16zEk7dv902KEBI1niruYQ02xLxZWhoHaDflm2RaULMEH7LdVfgfumKE9sLfJVo1zMw82vRd5WoO3TcEtJt///////////

TEMP_PASSWD.conf

TEMP_PASSWD

.btsearch

.btinstall

.btapp

.btskin

Setting value of setting %s key %d to %s

Cookie: %s

%s/%s/%s

%s%s/%s

psapi.dll

"name": "%s"%c %s%c %s

%s %dx%d

"video_codec": "%s", "video_bitrate": %d, "fps": %d, "video_x": %d, "video_y": %d

%s %dkbps

"audio_codec": "%s", "bitrate": %d, "sample_rate": %d

rss_feed_url

streaming_url

Failed btapp function %S, reason '%s'

JS> %S

\u00x

AVI header too large in %S

Can't find AVI header chunk in %S

4:port

12:implied_porti1e

DHT: %s

Received: %u requests (%u B), %u replies (%u B), %u no quota (%u B), %u invalid (%u B)

Sent: %u requests (%u), %u replies (%u)

Num buckets: %d. My DHT ID: %s

Bucket %d: %.8X%.8X%.8X%.8X%.8X (nodes: %d replacement-nodes: %d, span: %d)

%dm %ds

Total peers: %d (in replacement cache %d)

Outstanding add nodes: %d

%d: %s/%s: %d peers

Total peers: %d

Total torrents: %d

5:nodes%d:

1:vliÞiÞiÞiÞiÞe

1:t%d:

1:v4:%c%c%c%c

1:n%d:%.*s

d1:eli%ue%u:%se

1:k%d:

3:sig%d:

%d:%s

5:token%d:

4:voteiÞ

implied_port

Ft ad unit will next refresh in %d seconds

Lrec ad unit will next refresh in %d seconds

AdUnitManager::CanInitViaSettings? EnableAds? %d lrec %d ft %d

ftEnabled = %d

lrecEnabled = %d

ftRefreshRatePattern = [%s]

lrecRefreshRatePattern = [%s]

adRefreshRatePattern = [%s]

ftAdId = %d

lrecAdId = %d

contactRate = %d

send_conversion = %d

cfu EnableAds? %d cfu lrec %d cfu banner %d; user lrec %d user banner %d

offers.adcookie

offers.ad_user_key

offers.server_ad_site

offers.server_ad_logging

offers.cfu_left_rail_offer_enabled

offers.cfu_sponsored_torrent_offer_enabled

offers.stat_sent_time

offers.lifetime_clicks_ft

offers.lifetime_clicks_lrec

offers.lifetime_ad_autoexec_errors

offers.lifetime_ad_image_errors

offers.lifetime_ad_missing_errors

offers.ad_traffic_tag

offers.site_id

offers.adcontrol

offers.firebuglite

offers.send_conversion

offers.enabled

offers.ftEnabled

offers.lrecEnabled

offers.lrecXButton

offers.lrecXUpgradeUrl

offers.piSettings

offers.survey

offers.adRefreshRatePattern

offers.ftRefreshRatePattern

offers.lrecRefreshRatePattern

offers.lrecAdTypes

offers.ftAdTypes

offers.contactRate

offers.adUrl

hXXp://cdn.bitmedianetwork.com/network/index.html

offers.ftAdId

offers.lrecAdId

offers.geoip_country

offers.clientReceivedAdRulesFromServer

offers.graphicscard_check_timestamp

offer.log

offer2.log

------------- log opened %s

--lrec is disabled: user %d cfu %d

--ft is disabled: user %d cfu %d

adurl

--ParseAdControls skipping dict not matching client version %d.%d.%d

--ParseAdControls skipping dict not matching client campaign code %d

--ParseAdControls url

lrecXUpgradeUrl

--ParseAdRules name %s

--ParseAdRules skipping dict not matching client version %d.%d

--ParseAdRules skipping dict not matching client id %s

--ParseAdRules skipping dict not matching client country %s

--ParseAdRules skipping dict not matching client language %s

--ParseAdRules skipping dict not matching client campaign code %d

--ParseAdRules %s %d

--ParseAdRules %s %d

--ParseAdRules %s [%s]

hXXp://utclient.utorrent.com/offers/plus-xpromo-cc84/

https?:\/\/.*bitmedianetwork\.com.*

https?:\/\/.*bittorrent\.com.*

?456789:;<=

!"#$%&'()* ,-./0123

&&&&6666????

""""****

2222::::

$$$$\\\\

00006666

####====

0123456789

activation response (%d): body = %s, err = %S

activation response: signature = %s

{ "license_key": "%s", "fingerprint": "%s", "can_update_license": true }

activation request: %s

key %s%s%s

{ "license_key": "%s", "fingerprint": "%s" }

Opening help file: %S %S

hXXp://download.utorrent.com/help/utorrent-help-3421.zip

utorrent.chm

hXXp://VVV.utorrent.com?client=%s%s

hXXp://forum.utorrent.com?client=%s%s

hXXp://content.bittorrent.com?client=%s%s

hXXp://bit.ly/18x3YHD?client=%s%s

hXXp://VVV.utorrent.com/faq?client=%s%s

bittorrent.com

.btkey

onWmClose: %s

onWmClose: msg %d

hXXp://update.bittorrent.com/time.php

hXXp://VVV.facebook.com/utorrent

hXXp://twitter.com/utorrent

DoDestroy %s

"action":"%s.%d.%d.d.%d.d"

hXXp://bundles.bittorrent.com/feed.rss

hXXp://beta.bundles.bittorrent.com/feed.rss

[autorestart] Attempting to upgrade: (%S) -> (%S)

http%s://%s:%d%s

VVV.bittorrent.com

Can't connect to %s Remote - username or password incorrect/invalid

udp://tracker.openbittorrent.com:80/announce

udp://tracker.publicbt.com:80/announce

udp://tracker.ccc.de:80/announce

WM_ENDSESSION mode %d lparam %x

english.txt

MsgBoxData

TaskDialogIndirect

comctl32.dll

uxtheme.dll

ll.download3.utorrent.com

llsw.download3.utorrent.com

error %d

UxTheme.dll

inspsearch.com

%s/favicon.ico

file=%U

%S#hXXp://localhost:%d

Shell32.dll

?Mininova|hXXp://VVV.mininova.org/search/?cat=0&search=

update.utorrent.li

http%s://%s/checkupdate.php

hXXp://%s/updatestats.php

hXXp://%s/installstats.php

hXXp://%s/update_event.php

%s Updater

"g_version":%d, "action":"autoupdate window click", "choice":"%s", "no_sau":%d

u.url

u.siz

u.sha

u.sig

u.ver

l.url

l.siz

l.sha

l.sig

l.ver

u.msg

tb_badge_url

specialOfferAcceptUrl

cid=%s&cc=%d&l=%d

sv.id

sv.mode

sv.title

sv.url

sv.dur

sv.min

sv.max

sv.spcnt

IgnoreCheckNewVerCallback: error=%S,err=%d, reply=%s

Received search: %S

New search URL added (first check): %S

After removing duplicate previously seen searches: %S

served_search_list set to %S

After removing duplicate user searches: %S

search_list set to %S

CheckNewVerCallback: error=%S,err=%d, reply=%s

Got autoupdate response [%s]

searchUrls

trayOfferImageUrl

trayOfferTargetUrl

Got blacklist with %u items.

bv[%i]: %i (build %S)

MS_Windows

%u,%u,%u,%u,%u

tk=%U

sids=%s

&lv=%d_%d_%U

rgc=%d

pt=%s

ap=%s

incodecs=%s

outcodecs=%s

doainstalled=%U

ie=%S

secp=%U

secn=%U

cehh=%S

Sending autoupdate request [%s]

%s.%d.%d.d.%d.d

"tags":[ %s ]

Sending autoupdate exit ping [%s]

%s?h=%s&v=%d&ol=%U&ul=%U&tk=%U&c=%U

%s?license_key=%s&fingerprint=%s

hXXp://apps.bittorrent.com

Failed to connect to host at: %s

CrashMsgBoxThread

.opcandy

.bunndle

.opinstall

.adknow

Portuguese (Brazil)!ptBR

Portuguese (Portugal)!pt

hXXp://utorrent.com/download/langpacks/dl.php?build=37754&ref=client&client=utorrent&sys_l=%s&sel_l=%d&tk=%s

offers.featured_content_url

gui.last_preference_tab-1.8

gui.last_overview_tab-1.8

gui.last_bundle_visit

gui.last_badging_check

gui.bundle_rss_etag

gui.bundle_rss_last_modified

gui.cat_all_expanded

gui.cat_labels_expanded

gui.cat_rss_expanded

gui.cat_devices_expanded

gui.last_tree_node_installer

gui.granular_priority

gui.overhead_in_statusbar

gui.show_av_icon

gui.show_rss_favicons

gui.ulrate_menu

gui.dlrate_menu

gui.manual_ratemenu

gui.show_player_node

gui.use_fuzzy_dates

gui.show_notorrents_node

gui.find_pane_user_clicked

gui.bundles_tab_user_clicked

gui.auto_restart

webui.remote_enable

gui.dblclick_seed

gui.dblclick_dl

gui.color_progress_bars

gui.launch_plus_app

btapps.startup_app_url

btapps.startup_app_arg

vpn.dark_mode

offers.left_rail_offer_enabled

offers.sponsored_torrent_offer_enabled

offers.featured_content_badge_enabled

offers.featured_content_notifications_enabled

offers.featured_content_rss_enabled

offers.featured_content_rss_url

offers.featured_content_rss_update_interval

offers.featured_content_rss_randomize

offers.404_url

offers.days_to_show

ERROR VerifyVersion failed with: %S

{"path":"%s","version":"%d","blacklisted":"%d","crash_count":"%d","opt_out":"%d","running":"%s"}

Saving new version to %S

SaveExeFail

Saving new lang file to %S

Checking for update on %s

"dmver":%d, "cau":%d

"status":"%S"

LaunchTargetVersion removed non-existent target: %S

"status":"Removed missing target:%d"

Launching version: %d with command line: %S

Target path: %S

JSON dump: %s

LaunchVersion: ShellExecute returned %d.

"status":"ShellExecute returned:%d"

CopyVersionToInstallDir new_path = %S

CopyVersionToInstall failed on WaitForSingleObject: %d

"status":%d

Relocate Version didn't find updates\ in path: %S

Failed to CopyVersionToInstallDir %S

Launching %S with command line: %S

RelocateVersion: ShellExecute returned %d.

"status":"ShellExecute returned %d"

"launched_target":%d,"updated":%d,"relocated":%d,

Failed to create directory: %S

,"res":"%s"

"res":"ReportCAUSuccess"

"res":"%s"

%s, "action":"%s", "g_version":%d, "no_sau":%d

[OnSAUPingDone] Handle: 0x%x

[OnSAUPingDone] Error: %d -- %S

%s%s"action":"%s","nosau":%d,"dl":%Lu,"fv":%d,"ev":%d,"cau":%d

[SendSAUMetrics] %s: %s

[SendSAUMetrics] Handle: 0x%x

error:%d msg:%S

download.utorrent.com

download.bittorrent.com

nvappfilter.dll

nvlsp.dll

MxAVlsp.dll

ifw_xfilter.dll

Niphk.dll

SARAH.dll

imon.dll

MImp.dll

MIPro.dll

radhslib.dll

Naomi Web Filter

adguard.dll

HMIPCore.dll

dnsq.dll

jesterrun0.dll

protect.dll

laf1.dll

Win32/Hoax.Renos.NAV

laf2.dll

laf3.dll

laf4.dll

laf5.dll

t0.dll

Trojan-Downloader.Agent.Pto

t1.dll

ftp34.dll

'%s' (%s)

'%s' (%s) (known malware!)

virus.bd_state

invalid map<K, T> key

HttpOpenRequestA

HttpSendRequestA

\DBGHELP.DLL

DBGHELP.DLL

\%d-%s.%.4x.dmp

bench.utorrent.com

{"h":"%s","cl":"%s","v":%d,"l":"%s","w":"%s","cts":%Ld,"tsi":%Ld,"eventName":"crash","action":"%s.%d.%d.d.%d.d","plus":%d,"bad_dlls":"%s"%s}

can't load wininet.dll

/crash.php?cl=%s&ver=%dU&h=%s&p=%dU&pr=%dU&s=%dU&svp=%d&ov=%d&plus=%d

&dl=%s

HttpOpenRequest failed

HttpSendRequest failed

HttpQueryInfo failed

Error %d :

OV_COL_SOURCE_URL

player.btinstall

%Y-%m-%d

LRecXUpgradeUrl

%s%cplus=%d&client=%s&x-source=%s

update_%s

%s?starttime=%Ld

%s&starttime=%Ld

%s&badge=%d

file=%s

badcert

plus=%d&cid=%s&code=%d

RSS_COL_SOURCE_URL

hXXp://VVV.utorrent.com/help/guides/rss

hXXp://cdn.ap.bittorrent.com/control/feature/tags/ut.json

hXXp://cdn.ap.bittorrent.com/control/feature/tags/bt.json

hXXp://cdn.ap.bittorrent.com/control/feature/tags/staging_ut.json

hXXp://cdn.ap.bittorrent.com/control/feature/tags/staging_bt.json

winmm.dll

hXXp://remote.utorrent.com/send?btih=

%s%H&dn=%U&message=%U&sid=%s&cid=%U

%s%H&dn=%U&message=%U

hXXp://tinyurl.com/api-create.php?url=%U

ndt.iupui.lga02.measurement-lab.org

ndt.iupui.dfw01.measurement-lab.org

ndt.iupui.sea01.measurement-lab.org

100kb.test

500kb.test

1mb.test

2mb.test

7mb.test

15mb.test

30mb.test

75mb.test

100mb.test

150mb.test

ndt.iupui.par01.measurement-lab.org

ndt.iupui.ath01.measurement-lab.org

ndt.iupui.ams01.measurement-lab.org

ndt.iupui.ams02.measurement-lab.org

ndt.iupui.lhr01.measurement-lab.org

ndt.iupui.lax01.measurement-lab.org

ndt.iupui.nuq01.measurement-lab.org

ndt.iupui.mia01.measurement-lab.org

ndt.iupui.atl01.measurement-lab.org

ndt.iupui.ord01.measurement-lab.org

ndt.iupui.lga01.measurement-lab.org

hXXp://ll.VVV.bittorrent.com/llspeedtest/

hXXp://update.utorrent.com/speedstats.php?result=

%s%d:%d:%d:%d:%s

hXXp://utorrent.com/testport?plain=1

&port=%d

hXXp://ll.VVV.bittorrent.com/llspeedtest/speedtestobjects.txt

hXXp://update.utorrent.com/speedserverlist.php

hXXp://VVV.utorrent.com/testport.php?port=%d

tcp_upload_limit

tcp_download_limit

tcp_upload_rate

tcp_download_rate

graph_import

hXXps://VVV.facebook.com/connect/login_success.html

hXXp://VVV.facebook.com/connect/login_success.html

hXXps://VVV.facebook.com/login.php

hXXp://VVV.facebook.com/login.php

hXXps://VVV.facebook.com/connect/uiserver.php

hXXp://VVV.facebook.com/connect/uiserver.php

hXXps://VVV.facebook.com/dialog/permissions.request

hXXp://VVV.facebook.com/dialog/permissions.request

hXXps://VVV.facebook.com/checkpoint/

hXXp://VVV.facebook.com/checkpoint/

&scope=%S

client_id=%S&redirect_uri=%s&response_type=token&display=popup%s

hXXps://VVV.facebook.com/dialog/oauth

hXXp://VVV.facebook.com/dialog/oauth

&to=%S

app_id=%S&display=popup&message=%s&redirect_uri=%s%s

hXXps://VVV.facebook.com/dialog/apprequests

libvlc_video_set_key_input

libvlccore.dll

libvlc.dll

--http-reconnect

^  ;;;; \

;70>:3QLC@<52/*63.UPF#!

111111111111

`::83336873:

#''}''}''

PMSG

-03@1@30-

,5$8<445,

version.dll

PE_COL_PORT

%s%S,

hXXp://bundles.bittorrent.com/bundle_tab

hXXp://beta.bundles.bittorrent.com/bundle_tab

%s?torrent_hash=%h

&ext=%s

.mpeg

.alac

.mp4v

.divx

.flac

.rmvb

.webm

.dvr-ms

registerPurchase_keyMissing

btresource://%S/index.html

hXXp://VVV.apple.com/itunes

certifiedlabel

client.os.name:Windows

client.browser.name:%s

client.kernel.version:%s

client.version:3.3.13

client.utorrent.version:%d

read: got error: %d

Download Bytes: %lu, time: %f

Download: %s

Upload: got error: %d

Upload Bytes: %lu, time: %f

Upload: elasped time: %f

Upload: %s

123456 654321

hXXp://help.utorrent.com/customer/portal/articles/257678

invalid object key (must be a string)

object key and value must be separated by a colon (':')

after key and value, inside map, I expect ',' or '}'

function not supported

operation canceled

address_family_not_supported

operation_in_progress

operation_not_supported

protocol_not_supported

operation_would_block

address family not supported

broken pipe

inappropriate io control operation

not supported

operation in progress

operation not permitted

operation not supported

operation would block

protocol not supported

Visual C   CRT: Not enough memory to complete call to strerror.

Operation not permitted

Inappropriate I/O control operation

Broken pipe

operator

GetProcessWindowStation

missing Key

Unrecognized key format

Invalid key JSON

ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789 /orders.bittorrent.com

01234567

User-Agent: orderLib HttpRequest

BaseCreateTorr::OnDoneBitrate: error(%s): %u

BaseCreateTorr::OnDoneBitrate: parse error(%s): %u

BaseCreateTorr::OnDoneBitrate: success(%S) rate=%u, duration=%u, width=%u, height=%u

hXXp://%s/talon/seed/%S/content/%x

hXXp://%s

hXXp://VVV.mybrowserbar.com/images/pixel.gif?tb=1&cnid=%d

hXXp://download.mybrowserbar.com/kits/sds/SearchProtectionSetup.exe

.bittorrent.com

.utorrent.com

cleverbridge.com

.cleverbridge.com

NullRNG: NullRNG should only be passed to functions that don't need to generate random bytes

: this object doesn't support multiple channels

PK_Signer: key too short for this signature scheme

PK_MessageEncodingMethod: this signature scheme does not support message recovery

CryptoMaterial: this object does not support precomputation

Y:\jenkins-workspace\workspace\ut-build-slave-master\ut_win\Build\Win32\Release\utorrent.pdb

Crypt32.dll

CertFreeCertificateContext

PFXImportCertStore

PFXExportCertStoreEx

CertEnumCertificatesInStore

CertCloseStore

CertCreateSelfSignCertificate

CertOpenStore

CertStrToNameW

CertAddCertificateContextToStore

CertSetCertificateContextProperty

CryptMsgClose

CertFindCertificateInStore

CryptMsgGetParam

CertGetNameStringW

CertVerifyCertificateChainPolicy

CertGetCertificateChain

CertFreeCertificateChain

wintrust.dll

About %s

Publisher: %S

Release Date: %S

Version: %S

Description: %S

Update URL: %S

A single purchased copy of %s Plus can only be installed on a set number of computers. This copy has been installed on too many different computers.

Please either purchase a new copy for this computer, or contact us at hXXp://help.bittorrent.com if you think you're getting this message in error.

The directory you chose is not on the same drive as the %s client. It will not come along when you move the USB drive. Are you sure you want to continue?

Would you like to add "%s" to your search list?

%s application %s failed to copy to %s

This app was downloaded from %S

Installing %s

This %s app was downloaded from a website.

Title: %s

Are you sure you want to open the containing folders for %d torrents?

Are you sure you want to open the converted files for %d torrents?

Are you sure you want to open %d torrents?

Unable to find '%s'.

Error '%s' while downloading URL.

The contents of this torrent were verified to be free of viruses and spyware on %s

All files (*.*)

The app '%s' is requesting access to:

%s%s%s%s%s%s%s%s%s%s

Missing update url

Missing index.html

GetContentFile() does not contain [btinstall.txt]

App load failed (%s)

BtApp does not contain index.html

Are you sure you want to add %d torrents?

The installation of "%s" is complete

Can't open .torrent file: %s

Warning: Delete to trash failed for %s. Error: %d. Deleting permanently.

Failure: %s

Executing: %s

Unable to load "%s": %s!

Unable to save .torrent to '%s'.

Warning: %s

Checking auto portmap configuration ...

Checking queue ... we are #%d.

Unable to save to '%s'.

The directory you have selected contains more than 1000 files. The resulting .torrent will get very large. A better idea is to put the files into a compressed file and then share that file.

Please enter a valid tracker URL. Do you want to continue without having any trackers?

There was an error computing the hash: (%d) %s

The tracker protocol is invalid. udp, http and https are the only valid ones. Do you want to continue without having any trackers?

*.torrent

You have selected to share your entire My Documents folder and all its files. It is not advisable to do so unless you are certain you want to share all the contents, including possibly private documents.

The file or directory '%s' cannot be found. Please enter a different filename. Note that you can't share the root of a drive.

Select where to save the .torrent

Let Windows decide based on media type

%u Ratings

Click here to learn more about BitTorrent Certified devices

hXXp://VVV.bittorrent.com/certified-devices/

Plug USB into BitTorrent Certified playback device

Stream to BitTorrent Certified MOVE device

Make media playable in BitTorrent Certified devices

Check out these apps to experience %s\u00ae on tablets, mobile devices and more

Simple, secure access to your %s client on any device

%s\u00ae For Android

%s\u00ae For Mobile

%s\u00ae Remote

Webpage

BitTorrent Certified Device

BitTorrent Certified

Feed URL:

Enter Password

Web Seeds:

Website:

Website

Portable mode

The following options automate the configuration of some additional settings in Windows.

Torrent in Windows Firewall

Torrent when Windows starts up

.torrent (BitTorrent files)

.btsearch (BitTorrent Search Engine files)

Add Torrent from URL

Please enter the location of the .torrent you want to open:

Sports Fan

Windows Integration

Torrent when Windows Starts

&Boss-Key:

Use Boss-Key password

Location of .torrents

Store .torrents in:

Move .torrents for finished jobs to:

&Automatically load .torrents from:

&Delete loaded .torrents

Listening Port

Port used for incoming connections:

Random port

Enable &UPnP port mapping

&Randomize port each start

Enable &NAT-PMP port mapping

Add Windows &Firewall exception

Password:

Disable connections unsupported by the proxy

Apply rate limit to transport overhead

Enable UDP tracker support

IP/Hostname to report to tracker:

Enable &Web UI

&Password:

Alternative &listening port (default is the connection port):

Just enable the connection below, choose a computer name and password and remember to leave this computer on.

Visit hXXp://remote.utorrent.com/ and enter this computer name and password.

%1 stands for the command which is the chosen streamable file outputted by the build-in local loopback http server. You could add extra parameters for the player you selected.

Search Engines [Format: name|URL]

Current Port: (0:random)

Automatic Port Mapping (Recommended)

&Run speed test at: VVV.dslreports.com

Current Port: [0: auto]

&Test if port is forwarded properly

We recommend downloading a clean version directly from the content provider's website.

Web Seeds

%F - Name of downloaded file (for single file torrents)

%D - Directory where files are saved

%S - State of torrent

Update URL

Torrent, %d.%d.%d build %d is already installed. Would you like to downgrade to %d.%d.%d build %d?

Downloading %s ...

Failed to download your plus licence key. Please try again.

Failed to download your Pro licence key. Please try again.

unsupported piece size (%Z)

unsupported torrent size (%Z)

ffmpeg Process aborted with error %d. Unknown error

More information may be found in the transcript log at %%appdata%%\%S\media

File move target %s already exists. Overwrite?

Search the web for content

A web page showing results will launch

But you can alternately copy and paste Torrent URLs into the client.

There was an error opening %s.

There is no media player associated with the %s%sfile type.

Today is your lucky day! By entering your email you will be able to automatically unlock more free stuff from %s.

Before you delete %s, have you unlocked all the free content? One click and you'll get more.

The BitTorrent Bundle %s has new content available. Click update to get the new content!

The BitTorrent Bundle %s has new content that just downloaded. View the new content by clicking below!

You will leave uTorrent and your browser will open to unaffiliated Web sites.

%#Z (%d hashfails)

%d x %#z (have %u)

scrape not supported

%d of %d connected (%d in swarm)

Grid: %d days

%d days

Time (%s step)

Could not download help file. Error: %s

Invalid redirect (%S)

invalid http reply

invalid URL

Too many redirects (%S)

Installing %s ...

By clicking "I Agree", you acknowledge that you have read and agree to the End User License Agreement and <a href="hXXp://VVV.bittorrent.com/legal/privacy">Privacy Policy</a>.

Beware of online scams! A number of websites have taken our free

Torrent client and attempt to charge money for it through some sort of "fee" or "subscription" or else they install it for free but infect your computer with malicious code in the process. To protect yourself, be sure to only download our software from hXXp://VVV.utorrent.com. You should NEVER under any circumstances pay for free

Unsupported Operating System (OS)

This wizard will guide you through the installation of %s

, the #1 torrent download client on desktops and mobile devices worldwide. %s

Version: %s (Build %s) by BitTorrent, Inc.

This wizard will guide you through the installation of the official %s

torrent download client from BitTorrent Inc., the inventors of the BitTorrent protocol. %s

Version: %s (Build %s)

%s does not not support the Windows 2000 OS and may not

a newer Windows OS.

error: %d

Kill hanging %s processes?

There were errors loading the language file. Please see the file uTorrent.exe.log in the application directory.

The install of %s failed.

Log WebUI requests

Unable to copy .torrent from '%s' to '%s': (%d) %s

Choose where to download '%s' to:

Choose where to save %s

Failed to connect to %s Remote because your client is not compatible.

Some software installed on your computer prevents %s

from working properly. This is possibly caused by the following DLLs '%S %S'

Last %d days

(Login)

DHT: %d nodes%s

Torrents (*.torrent)

%s detected '%S' (%S) appears to be installed on your computer. That is known malware, and might cause %s to crash or behave strangely, including but not limited to using up all your RAM and freezing. Please run a virus/malware checker.

Would you like to make %s the default torrent application?

You appear to be running version d.d of the NVIDIA Network Access Management tool.

This version has known issues which may create problems with %s.

Please upgrade your NVIDIA software to at least version d.d.

Are you sure you want to exit %s?

Registration failure%S%S

Failure reclaiming account%S%S

Failure registering security question%S%S

D: %s%z/s

U: %s%z/s

Select a .torrent to open

%s: ERROR MSG: %s

%s: ERROR: received message type %d (expected %d)

Transferred last %d days: %#Z

Total Running Time: %d:%.2d:%.2d

Number of torrents added: %d

Program launched: %d times

Last launched: %s

# incoming conns since start: %d

# outgoing conns since start: %d

# handshake: %d

# connections: %d

# uTP connecting: %d

# TCP connecting: %d

# half-open: %d (%d queued)

Disk Cache overloaded %d %%

You should change the listen port.

A firewall/router is limiting your network traffic. You need to open up a port so others can connect to you.

%d(%d) downloading, %d(%d) seeding

D:%s U:%s - %s

Select a .torrent to update to

Be sure to exit %s before you unplug the USB drive!

Failed to connect to %s Remote %S%S%s

Press "OK" to review your login settings.

Failed to connect to %s Remote because the username or password was wrong.

Would you like to register a new account under the name "%S"?

Add Torrent from &URL...

&Bundle Webpage

&Learn more about %s Plus

&Learn more about %s Pro

&Get %s Plus

&Get %s Pro

Test hang report

Torrent &Webpage

Copy Stream &URL

%s - %z/s

%s %#Z of %#Z

%s - %s remaining

%s - Initializing download

%s - WARNING: Possibly insufficient sources

&Delete .torrent

D&elete .torrent   Data

Open URL in Bro&wser

Remove and d&elete .torrent   Data

Error moving file: %S (%d)

Failed to relocate file %s, %s

Today is your lucky day! %s will automatically update periodically - with new content delivered right to you.

In order to gain access to any free updates from %s, you have to keep it in your queue. Easy, right?

Bad port number

Bad Port number received

Checking for forwarded port

Server does not support this client

%s error: %s (%d)

Problem reading web100 variables.

Float denormal operand

Float invalid operation

Add Url

Bw.Alloc

Source URL

Are you sure you want to remove the %d selected torrents%s?

Are you sure you want to remove the selected torrent%s?

unsupported

Error: %s

Flushing to disk (%d)

Ready in %s

Please feel free to read our <a href="hXXp://VVV.bittorrent.com/legal/privacy">Privacy Policy</a>

%d days ago

%d hours ago

%d minutes ago

%d months ago

%d weeks ago

%d years ago

Failed to connect to %s Remote. This appears to have happened because you are running a peer blocking application such as PeerGuardian or PeerBlock. These programs are not currently compatible with %s Remote. You should either disable your peer blocking application, or disable %s Remote.

Port

Congratulations! Your software is turning into %s Plus as we speak, and all features will be ready to use in about a minute.

To learn about your new features, please refer to the %s Plus forums.

%s Plus Player is installing. Please try again shortly.

Upgrade to %s Plus to protect yourself from viruses hiding in torrents.

Upgrade to %s Plus to convert this file so it can be played.

Port Forward test complete. %s

Results: Port not open.

A single purchased copy of %s Pro can only be installed on a set number of computers. This copy has been installed on too many different computers.

Congratulations! Your software is turning into %s Pro as we speak, and all features will be ready to use in about a minute.

To learn about your new features, please refer to the %s Pro forums.

%s Pro Player is installing. Please try again shortly.

Upgrade to %s Pro to protect yourself from viruses hiding in torrents.

Upgrade to %s Pro to convert this file so it can be played.

%u Comments

RSS: Feed already exists "%s"

Really delete RSS Feed "%s"?

Really delete %d RSS Feeds?

Open URL in &Browser

Date of last match: %s

Last episodes matched: %s

Really delete RSS Filter "%s"?

Really delete %d history entries?

RSS: Smart filter has rejected "%S"

RSS: Unable to load "%S": %s

RSS: Unable to download "%s": %s

Failed to disconnect correctly. Error %d

Could not establish secure connection. Error %d

Could not initialize security context. Error %d

Could not decrypt data. Error %d

Could not send data. Error %d

Could not encrypt data. Error %d

Could not validate server cert chain

Transfer files converted for BT Certified Device.

The file '%s' could not be read.

The file '%s' could not be written to.

The file '%s' is in use by another process and can't be opened.

The file '%s' was not found.

Unknown error opening file '%s'

The file '%s' has been recovered.

You have to restart %s for the changes to take effect.

Executable (*.exe)

*.exe

More info is in the <a href="hXXp://VVV.utorrent.com/faq">FAQ</a> and at <a href="hXXp://portforward.com/">portforward.com</a>

PostMessage failed h:%d i:%d t:%d e:%d

Results: Port is not open (you are still able to download).

Port mapping will speed downloads and enable seeding. More info in FAQ and at portforward.com

Results: Port is open. Your network is properly configured.

This test will use <a href="hXXp://VVV.utorrent.com/faq#mlabs">Measurement Lab</a> tools to check and set your bandwidth limits.

If no location is near, you can test at <a href="hXXp://dslreports.com/speedtest/">dslreports</a> and input your upload speed.

%s Setup Guide

%s Bandwidth Configuration

%s will test your network and configure itself for best performance.

Please enter a valid port number from 0-65535.

This is a likely service port. Please choose another.

(You can change this setting in bt.no_connect_to_services_list)

Tried to redirect to invalid url

Will redirect to URL: %S

Automatic Shutdown will initiate in %d seconds.

Hibernating computer... %s

Restarting computer... %s

Shutting down computer... %s

Stand-by computer... %s

(Alternate speed test at <a href="hXXp://dslreports.com/speedtest/">dslreports</a>)

TCP upload rate

TCP download rate

import

TCP upload rate limit

TCP download rate limit

%s is still starting up

Web UI

HTTPS

Contains: "%s"

This operation cannot be undone.

A security question can be used later to transfer your %s Remote username to another computer. Would you like to create one now?

Ý %dh

%dh %dm

%dw Ý

%dy %dw

Enter the IP:port / [IPv6]:port of the peer to add:

Executable files (*.exe)

Download Complete|%s has finished downloading.

A BitTorrent Featured Bundle|%S

New Download from RSS|%s has started downloading.

New version|A new version of %s is now available!

!Error|There is not enough disk space to move %s to its final location

!Torrent Error|File: %s

Can't accept %S with invalid character '%S'

Can't accept %S with length %u greater than %d characters.

Please enter a %S.

Are you sure you want to remove the %d selected trackers?

You must enter a password to use %s Remote.

Could not contact the %s Remote service to register.

There is already a computer using the username "%S".

That was not the correct security answer for the username "%S". Try again.

Status: Reconnecting in %d seconds

Status: failed to load Secur32.dll or Security.dll

Uninstalling %s ...

Are you sure you'd like to uninstall %s?

This will remove the %s app only. None of your in-

%s failed to update. Please try again.

%s update failed. Unable to start the new process.

failed to launch exe %s

failed to acquire mutex %s

attempted downgrade %x -> %x

mismatching exe versions

%s Upgrade

This wizard will guide you through the %s upgrade process.

Updates are now build into %s, so you'll always have the latest and greatest stable version of the software including security enhancements, bug fixes and new features.

Updates are now built into %s, so you'll always have the latest and greatest stable version of the software including security enhancements, bug fixes and new features.

This wizard will guide you through the upgrade of %s by BitTorrent, Inc. - the world's premiere, feature-rich torrent client.

Password did not match.

Could not download WebUI file. Error: %s

Could not download WebUI information. Error: %s

WebUI file not found - attempting to download

%s has requested permissions on %s:

%s has requested access to %s.

cfgmgr32.dll

Acfgmgr32.dll

zcÁ

>012?456789:;<=

.?AUNoChannelSupport@BufferedTransformation@CryptoPP@@

.?AVKeyTooShort@PK_SignatureScheme@CryptoPP@@

.?AVInvalidKeyLength@PK_SignatureScheme@CryptoPP@@

.?AV?$ASN1CryptoMaterial@VPublicKey@CryptoPP@@@CryptoPP@@

.?AVX509PublicKey@CryptoPP@@

.?AVPublicKey@CryptoPP@@

.PAVRSAFunction@CryptoPP@@

C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\uTorrent.exe

d%%d%Ý%%d%%d%Ý%%d%%d%Ý%%d%%d%Ý%%d%%d%Ý%%d%%d%Ý%%d%%d%Ý%%d%%d%Ý%%d%%d%Ý%%d%%d%Ý%%d%%d%Ý%%d%%d%Ý%%d%%d%Ý%%d%%d%Ý%%d%%d%Ý%%d%%d%Ý%%

O&%dYVm

dg.uJ

R~R.vY

.Ot`T

.0%Uh

22222222222

hiTXtXML:com.adobe.xmp

" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c061 64.140949, 2010/12/07-10:57:01 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:B47FF0923C20681192B095FBA0BDE87C" xmpMM:DocumentID="xmp.did:A73C2BBE2C3A11E2AAF3FB98CA5D1086" xmpMM:InstanceID="xmp.iid:A73C2BBD2C3A11E2AAF3FB98CA5D1086" xmp:CreatorTool="Adobe Photoshop CS5.1 Macintosh"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:FA7F117407206811871FA3823ACE12F9" stRef:documentID="xmp.did:B47FF0923C20681192B095FBA0BDE87C"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>02

" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c061 64.140949, 2010/12/07-10:57:01 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:B47FF0923C20681192B095FBA0BDE87C" xmpMM:DocumentID="xmp.did:3A9F8C87223011E2BF0C8C1B3C994937" xmpMM:InstanceID="xmp.iid:3A9F8C86223011E2BF0C8C1B3C994937" xmp:CreatorTool="Adobe Photoshop CS5.1 Macintosh"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:01801174072068118DBBC9C0B36B2C90" stRef:documentID="xmp.did:B47FF0923C20681192B095FBA0BDE87C"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>

uB.Fw

p:\|w

J%U.\h

?j%FH

siTXtXML:com.adobe.xmp

" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.5-c014 79.151481, 2013/03/13-12:09:15 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:70e7a016-749f-4873-a97d-3ffa3c408cdb" xmpMM:DocumentID="xmp.did:EF44648C6CE511E3A46EC0A9C6415F84" xmpMM:InstanceID="xmp.iid:EF44648B6CE511E3A46EC0A9C6415F84" xmp:CreatorTool="Adobe Photoshop CC (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:12603d90-f86b-4177-8c48-f7d68043da6c" stRef:documentID="xmp.did:70e7a016-749f-4873-a97d-3ffa3c408cdb"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>GUW

" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.5-c014 79.151481, 2013/03/13-12:09:15 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:70e7a016-749f-4873-a97d-3ffa3c408cdb" xmpMM:DocumentID="xmp.did:EF4464906CE511E3A46EC0A9C6415F84" xmpMM:InstanceID="xmp.iid:EF44648F6CE511E3A46EC0A9C6415F84" xmp:CreatorTool="Adobe Photoshop CC (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:12603d90-f86b-4177-8c48-f7d68043da6c" stRef:documentID="xmp.did:70e7a016-749f-4873-a97d-3ffa3c408cdb"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>

" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.5-c014 79.151481, 2013/03/13-12:09:15 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:70e7a016-749f-4873-a97d-3ffa3c408cdb" xmpMM:DocumentID="xmp.did:2BFDB2AF69FD11E3A46EC0A9C6415F84" xmpMM:InstanceID="xmp.iid:2BFDB2AE69FD11E3A46EC0A9C6415F84" xmp:CreatorTool="Adobe Photoshop CC (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:12603d90-f86b-4177-8c48-f7d68043da6c" stRef:documentID="xmp.did:70e7a016-749f-4873-a97d-3ffa3c408cdb"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>]Q|

" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.5-c014 79.151481, 2013/03/13-12:09:15 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:70e7a016-749f-4873-a97d-3ffa3c408cdb" xmpMM:DocumentID="xmp.did:2BFDB2B369FD11E3A46EC0A9C6415F84" xmpMM:InstanceID="xmp.iid:2BFDB2B269FD11E3A46EC0A9C6415F84" xmp:CreatorTool="Adobe Photoshop CC (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:12603d90-f86b-4177-8c48-f7d68043da6c" stRef:documentID="xmp.did:70e7a016-749f-4873-a97d-3ffa3c408cdb"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>

Created with ajaxload.info

99999999

66666662

62222222

9999999555

[[[73322223

____[[[_

66666666

222222222

1.css

1.html

2.css

2.html

jq.js

]\D`;%F

%fko)

.Ht":

H6l.Emj

PeekNamedPipe

CreatePipe

GetCPInfo

WinExec

GetWindowsDirectoryW

GetProcessHeap

CryptDestroyKey

CryptGenKey

RegOpenKeyExW

RegEnumKeyExW

RegDeleteKeyW

RegCreateKeyExW

RegCloseKey

RegQueryInfoKeyW

ShellExecuteA

ShellExecuteW

SHFileOperationW

SHDeleteKeyW

MsgWaitForMultipleObjects

GetAsyncKeyState

keybd_event

RegisterHotKey

UnregisterHotKey

ExitWindowsEx

EnumWindows

CreateDialogIndirectParamW

EnumChildWindows

SetWindowsHookExW

UnhookWindowsHookEx

GetKeyNameTextW

MapVirtualKeyA

FindNextUrlCacheEntryW

FindCloseUrlCache

DeleteUrlCacheEntryW

FindFirstUrlCacheEntryExW

.text

`.rdata

@.data

.rsrc

%s\stats-%s.txt

chrome

firefox

Software\Classes\%s\shell\open\command

Software\Classes\%s\shell

Software\Classes\%s

Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\%s\OpenWithProgids\%s

Software\Classes\MIME\Database\Content Type\%s

MIME\Database\Content Type\%s

Software\Microsoft\Windows\CurrentVersion\Uninstall\uTorrent

uTorrent.exe

application/x-bittorrent-key

Software\Classes\Applications\uTorrent.exe

Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\uTorrent

INSTALLDEBUG: QueryDisplayVersion. Installed version: %s

%s%s%s%s

RunElevatedInstall: %s with params [%s]

%s /STARTAPP %s

%s /LAUNCHBUNDLEDURL %s

%s /LAUNCHBUNDLEDURLTYPE %s

%s /AUTOMATION

%s /MINIMIZED

%s /NOINSTALL /BRINGTOFRONT

dht.dat

flags.conf

ipfilter.dat

resume.dat

rss.dat

settings.dat

INSTALLDEBUG: Could not create installation directory [%s]

%d.%d.%d.%d

mURLInfoAbout

"%s" "%%1"

Software\Classes\.torrent\OpenWithProgids

Software\Classes\.btsearch\OpenWithProgids

Software\Classes\Applications\uTorrent.exe\shell

Software\Classes\Applications\uTorrent.exe\shell\open\command

INSTALLDEBUG: Version String returned: %s

INSTALLDEBUG: Parsed version : major: %d minor: %d tiny: %d build: %d

CLSID\{3041D03E-FD4B-44E0-B742-2D9B88305F98}

CLSID\{F0D4B239-DA4B-4daf-81E4-DFEE4931A4AA}

CLSID\{D4027C7F-154A-4066-A1AD-4243D8127440}

CLSID\{91397D20-1446-11D4-8AF4-0040CA1127B6}

{88c7f2aa-f93f-432c-8f0e-b7d85967a527}

{ad06fb5f-fef7-4a84-8c58-dca34f8e3d36}

{ef79f67a-6ad7-4715-a0f8-932fca442023}

{1d03a978-ac0c-4004-b9fd-9cf361c7bd3f}

{64ead72b-ffd4-4e01-aa3a-4c71665d73e4}

{29acf17c-1713-4286-8f40-bfd05f1e70c8}

{7b6de06c-7013-4a87-957e-d27d7b977d21}

{2d8d9acc-f6d7-4362-8876-a275ca929591}

{656461ef-40f6-4115-9ff1-bced9812ccbb}

{1fd59ce2-6236-467c-9539-3d8c93fea5e0}

{49C795C2-604A-4D18-AEB1-B3EBA27E5EA2}

{7473B6BD-4691-4744-A82B-7854EB3D70B6}

{B6AC5E3C-5CEB-4E72-B451-F0E1BA983C14}

{5BA8E555-8C08-4CC8-80E6-1F8CDD26AE3A}

{6DA66498-839A-42A7-8324-FF7D2A532835}

{4E871705-D1F3-49D9-814F-1E46E85986B0}

{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}

{db131c55-60c8-4adc-84dc-9e76ab06e2dc}

{05eeb91a-aef7-4f8a-978f-fb83e7b03f8e}

{4ae0c3d6-f713-4eed-bc65-25dc3ffdaac1}

{c840e246-6b95-475e-9bd7-caa1c7eca9f2}

{e0301295-ab3e-4af3-979f-3d453c5f9f48}

{87775fdb-6972-41f9-ae51-8326e38cb206}

{181f104b-b000-4010-bb18-41b8205f774d}

{03ea5b10-2efa-4311-ac10-04427b02d663}

{e9df9360-97f8-4690-afe6-996c80790da4}

CLSID\%s

SOFTWARE\Conduit\Platforms\%s

SOFTWARE\AppDataLow\Software\%s\toolbar\IE5

Software\Microsoft\Windows\CurrentVersion\Ext\Settings\%s

hXXp://VVV.mybrowserbar.com/images/pixel.gif?tb=%d&cnid=%s

hXXp://VVV.mybrowserbar.com/images/pixel.gif?yxds=%d&yxhp=%d&yxov=1&cnid=%s

,Riched20.dll

%s %S %S %S

%s %S

Initializing OfferAPI supported-> %d

Stoolbar_offer.benc

toolbar.benc

button label: %s

3.4.2

apps\featuredContent.btapp

apps\plus.btapp

apps\welcome-upsell.btapp

apps\player.btapp

INSTALLDEBUG: Unable to create firewall rules for path [%s]

path:[%s]

\uTorrent.exe

INSTALLDEBUG: Volume: %s, Drive: %s

INSTALLDEBUG: Returning early. Installed version: %d, Our version: %d

/PERFORMINSTALL %d "%s" %u

INSTALLDEBUG: Returning...installResult = (%d)

INSTALLDEBUG: running from installed path = %d running from different drive = %d

INSTALLDEBUG: DoInstall(%d, %s)

"%s" %s

netsh.exe

interface ipv6 set teredo %s

netsh.exe interface ipv6 set teredo %s

Could not setup teredo, result was: [%s]

netsh.exe interface ipv6 install

Could not install teredo, result was: [%s]

Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\%s

Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\%s\UserChoice

Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\%s\OpenWithProgids

Software\Classes\%s\OpenWithProgids

Software\Microsoft\Windows\Roaming\OpenWith\FileExts\%s\UserChoice

maindoc.ico

%s URI

URL Protocol

%s\%s

%s\shell

%s\shell\%s\command

%s\Application

%s\Progid

%s\UserChoice

%s\OpenWithProgids

Software\Microsoft\Windows\CurrentVersion\Run

TerminateSessionClientInstances failed; hp:0x%X result:%d

INSTALLDEBUG: Initial GetVolumeInformation failed and detected possible UNC path [%s] without appended [\]; calling again

"%s" /UNINSTALL

plus_license.btkey

RunAsAdministrator: %s with params [%s]

lRunAsAdministrator(error executing %s with params [%s]): Error: %d

RunAsAdministrator(error executing %s with params [%s]): Unexpected exit code %d (expecting %d)

DDE operation timed out.

DDE operation failed.

DDE operation is busy.

RunAsAdministrator(error %d executing %s with params [%s]): %s

Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Layers

%s is running in Vista compatibility mode which is known to cause problems. Please allow %s to fix this by clicking "Yes" in the next dialog.

REG DELETE "HKLM\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Layers" /v "%s" /f

/C %s

RemoveCompatibilityModeKey(removal from HKLM returned %s)

Software\Classes\.torrent

unknown control id = %d

Local\%s

(TCP-In)

(UDP-In)

Windows Media Player

\smplayer.exe %1

Player.Path

client.exe

netprofm.dll

bt.log

PORTABLE

Ads %s -- GdiPlus.dll %s

Settings path: [%s]

Setting log file to '%s'

Log file set to path:[%s]

dht_feed.dat

LAUNCHBUNDLEDURL

LAUNCHBUNDLEDURLTYPE

hXXp://bundles.bittorrent.com/inclient/yes

hXXp://apps.bittorrent.com/featuredcontent/featuredcontent.btapp

INSTALLDEBUG: /PERFORMINSTALL with flags [%d] and path [%s]

.btapp?

Version: %s

valid plus key, but not activated. Attempting activation...

{CF59774A-CE9D-454D-AF29-1556367E1AC7}

{E3DC5C2B-082C-4800-8C52-B9F655B94D2C}

c:\%u%u.tmp

full %s root %s

Created canonical path %s from %s

%s\*.*

Found %d entries using filter %s in directory %s

\\?\%s%s

\\?\%s

:\bf2.exe

bf2142.exe

crysis.exe

gw.exe

halo.exe

hl.exe

hl2.exe

ut2003.exe

ut2004.exe

wolfmp.exe

wow.exe

quake.exe

glquake.exe

qw.exe

glqw.exe

quake2.exe

quake3.exe

quake4.exe

iourbanterror.exe

goldslam.exe

nksp.exe

pilauncher.exe

pistory.exe

rnclient.exe

twelvesky.exe

domo.exe

dreamlords.exe

stoneage2.exe

projecttorque.bin

iexplore.exe

firefox.exe

mplayer.exe

mplayerc.exe

wmplayer.exe

vlc.exe

peerblock.exe

pg2.exe

pglite.exe

peerguardian.exe

%s.%u.tmp

%s.new

GetMaxFileSize() returning %Ld for "%s"

D%s.exe

0123456789._

\uac_test.tmp

\Sysnative\..\explorer.exe

\explorer.exe

iError %d

google chrome

HTTP Reply %d

%s-%s

HTTP Error %d

REDIRECT:%S%S%S

Proxy connect error: %s

Proxy error: %S

Mozilla/5.0 (Windows NT %s%s; Trident/%d.0; EIE10; ENUSMSN; rv:%s)

Mozilla/%d.0 (compatible; MSIE %s Windows NT %s%s; Trident/%d.0

Mozilla/5.0 (Windows NT %s%s; rv:%s) Gecko/20100101 Firefox/%s

Mozilla/5.0 (Windows NT %s%s) Chrome/%s

MSIE %s;

Google Chrome

Software\Wow6432Node\Mozilla\Mozilla Firefox

Software\Mozilla\Mozilla Firefox

chrome.exe

HTTP Error 404

cexe

rpmsg

%s.%u.%s

[%s] %s

[%.2d:%.2d:%.2d] %s

HFile not found during integrity check: %s

%s.old

File failed verification: %s

Failed file save: %s

Safely saved file '%s'

File passed integrity check: %s

Warning: file integrity check failed (%s): %s

Ignore this warning if you switched to 1.6.1 or older and back

Windows ran out of memory. Unable to allocate %d bytes.

Bits on Wheels/1.0.%d

Bits on Wheels/%c%c%c

%s/%d.%d%d%d

Torrent .NET

Unknown %c%c

%s/%d.%d.%d.%d

Unknown %c

BitTorrent %c.%c.%c

BitTorrent %c.%c%c.%c

%s %i.%i

BitSpirit v2 UDP0

BitSpirit v2 HTTPBT

Blizzard %d.%d

Burst! %c.%c.%c

FlashGet %u.%u

MLdonkey %c.%c.%c

Opera %c%c%c%c

E208.67.222.222

208.67.220.220

ENOTE: Settings file found in directory of executable; using that.

The file '%s' was damaged/missing. It has been recovered.

current.btskin

Settings integrity check failed (duplicate keys: %d count: %d), repaired: %s

Error 73: %d/%d/%d/%d

TCP Half Open limit: %d

TCP Sockets: %d, Half Open: %d (total %d)

TCP Pending: %d

Total Sockets: %d

Read buffers: %u (%u bytes), avg %u

Write buffers: %u (%u bytes), avg %u

TCP-halfopen

[%d]: %d %s %A mode: %d state: %d

*** %s

Elevation:Administrator!new:%s

HNetCfg.FwPolicy2

HNetCfg.FwRule

Allow %s network traffic with Edge Traversal

Can't open log file '%s': %d %s

HTTP: IP %a: Bad Range value

HTTP: IP %a: can't accept cookie - incorrect format

HTTP: IP %a: Bad authentication header

HTTP: IP %a: Bad username/password

1Can't handle name length %d (> %d) for archive %s

Can't read entry name from archive %s: %d %S

Can't seek %d farther in archive %s: %d %S

Can't handle entry with flags %x in archive %s

Can't handle header with mismatched sizes %d %d in archive %s

Can't handle header method %d != 8 in archive %s

Accepting entry for file %S in archive %s

Found %d files in archive %s

Can't open archive file %s

Can't read directory of archive file %s

Can't find requested file %s in archive %s

Can't handle decompressed size %d/%d >= %d for archive %s

Can't set pointer in archive file %s to %d

Can't read from archive file %s

Can't decompress entry in archive %s

Can't read header of %s

Can't set pointer in btinstall file %s to %d

Can't read sectiontable of %s

Can't read section %d of %s

icon.bmp

%s\apps\%s\%s

%H.btapp

RegKey: Could not write string valuename %s value %s; Error %d

RegKey: Could not write binary valuename %s length %d; Error %d

RegKey: Could not write DWORD valuename %s value %d; Error %d

RegKey: Could not delete value %s: %d

RegKey::DeleteKey fail (%d): %s

RegKey::DeleteTree fail (%d): %s

content-type = %S error code = %d

default.log

adnative.log

bench.log

performance.log

download.log

shutdown.log

activation.log

updates.log

cfu.log

sau_metrics.log

auto_restart.log

hang_report.log

delete.log

toolbar.log

speed_monitor.log

k%s/*.btapp

Fapps\%s

Error contacting WebUI proxy service: %s

HTTP Error 400

HTTP Error 401

HTTP Error

Got proxy service response (%S:%d, %Ld bytes): %S

Disconnected from WebUI proxy service

sConnecting to raptor at %S

Sent raptor attach cookie: %S

****** DELETING FILE: %s

*.dat

global_resume.dat

%H.dat

resume.dat.temp

TCP port bind failed %A: (%d) %s

invalid key size

license key expired

invalid key

Fwebui

couldn't download webui info

Furladder

load missing index.html

missing index.html

missing update url

failed to verify certificate

bad url

unsupported piece size

unsupported torrent size

Unable to save .torrent

no uconnect password

%s %d.%d

%s %d.%d.%d

NError parsing URL: %s

*** %s: PIECE %d FAILED HASH CHECK

%s: Piece %d complete

e%s: Unable to move: %s

Moved file storage for torrent '%s' to '%s'

HAdding job to move file storage for torrent '%s' from '%s' to '%s'

Could not move data to completed download folder. Error: [0x%X]

%s: HTTP invalid URL: %S

%s: HTTP preventing DNS lookup: %S

%s.alt

DNS resolution failed for %s %S

hXXp://%S/announce

Tracker reports an invalid external IP

Finished receiving metadata for '%s' in %d seconds

ERROR: Metadata for '%s' could not be loaded! ("%s")

BAN peer: Responsible for '%s' metadata not being loaded!

Got metadata size %u, pieces %u

Got metadata size %u when I already thought it was %u

Peer send unsolicited metadata message: chunk %d

dError: %s - %s

%s (%S)

H%s\%H.dat

rBanned %T until %S

*** Sending BTMSG_TF_SEEDING_DONE for torrent '%s'

%s.torrent

%s.%d.torrent

%s.loaded

Unable to rename/delete '%s'.

HTMP=%s

TEMP=%s

Loading settings from path '%s'

HR.HDTV

HR.PDTV

WebRip

Can't download url %s - %s

%s|%s

RSS Channel title %s

%s|%S

%dx%.*d-%dx%.*d

%dx%.*d

C=US,ST=CA,L=San Francisco,O=BitTorrent,OU=%s,CN=%s

activeds.dll

adsldpc.dll

apphelp.dll

atl.dll

authz.dll

bcrypt.dll

bcryptprimitives.dll

browseui.dll

clbcatq.dll

comdlg32.dll

comres.dll

comsvcs.dll

credssp.dll

credui.dll

crypt32.dll

cryptbase.dll

cryptdll.dll

cryptsp.dll

cryptui.dll

cscapi.dll

cscdll.dll

cscui.dll

devobj.dll

dhcpcsvc.dll

dhcpcsvc6.dll

dnsapi.dll

dot3api.dll

dot3dlg.dll

dssenh.dll

dui70.dll

duser.dll

eapolqec.dll

eappcfg.dll

eappprxy.dll

ehstorshell.dll

esent.dll

explorerframe.dll

fastprox.dll

firewallapi.dll

fltlib.dll

fwpuclnt.dll

gdi32.dll

gdiplus.dll

gpapi.dll

hnetcfg.dll

icmp.dll

iconcodecservice.dll

ieframe.dll

iertutil.dll

imagehlp.dll

imm32.dll

iphlpapi.dll

kernelbase.dll

linkinfo.dll

lpk.dll

mpr.dll

mprapi.dll

msacm32.dll

msasn1.dll

msctf.dll

msctfime.ime

msdart.dll

msi.dll

msimg32.dll

msls31.dll

msv1_0.dll

msvcp60.dll

msvcp80.dll

msvcr80.dll

msvcr90.dll

msvcrt.dll

mswsock.dll

msxml3.dll

napinsp.dll

ncrypt.dll

netapi32.dll

netman.dll

netshell.dll

nlaapi.dll

normaliz.dll

npmproxy.dll

nsi.dll

ntdsapi.dll

ntmarta.dll

ntshrui.dll

ole32.dll

oleacc.dll

oleaut32.dll

onex.dll

peerdist.dll

pnrpnsp.dll

profapi.dll

propsys.dll

qutil.dll

rasadhlp.dll

rasapi32.dll

rasman.dll

riched20.dll

rpcrtremote.dll

rsaenh.dll

rtutils.dll

samcli.dll

samlib.dll

schannel.dll

sechost.dll

secur32.dll

sensapi.dll

setupapi.dll

sfc.dll

sfc_os.dll

shdocvw.dll

shfolder.dll

shlwapi.dll

shunimpl.dll

slc.dll

srvcli.dll

ssdpapi.dll

sspicli.dll

sxs.dll

tapi32.dll

tiptsf.dll

upnp.dll

urlmon.dll

userenv.dll

usp10.dll

utorrent.exe

vfbasics.dll

vfcompat.dll

vrfcore.dll

wbemcomn.dll

webio.dll

windowscodecs.dll

winhttp.dll

winnsi.dll

winrnr.dll

winspool.drv

winsta.dll

wldap32.dll

wmi.dll

ws2_32.dll

ws2help.dll

wshbth.dll

wship6.dll

wshtcpip.dll

wsock32.dll

wtsapi32.dll

wzcsapi.dll

wzcsvc.dll

xmllite.dll

xpsp2res.dll

Checked %:.1d%% (Active Num:%d)

@%s %:.1d %%

A Web Page

Can't %s device pair for %s

Can't add torrent %S because it is a duplicate of an existing torrent

URL: %S: OK

uT HTTP add torrent %S completed

WebUI Proxy Error: %s

!Proxy: %s

Can't download to directory '%s' which is outside of download directory '%s'

Chose download directory '%s' from dir %d '%s' sub-path '%s'

uT HTTP add torrent %S completion failed - status: %s

/Can't add torrent: %s

Settings %s

uT HTTP can't add torrent '%s': %s

uT HTTP torrent add of '%s' succeeded

Can't save temporary torrent file '%s'

IpFilter invalid line: [%S]

Loaded ipfilter.dat (%d entries)

UDP port bind failed %A: (%d) %s

mICMP port bind failed %A: (%d) %s

Zwebui.zip

Web UI storage base '%s' archive path '%s'

Can't open web UI archive file '%s'

Can't read directory in web UI archive '%s'

Can't download web UI information - %s

S.tmp

Attempting to read unarchived file %s

%s%s%s%s%s

%A%s(%s):

%A%s:

[%s (%:.1d)]:

Requesting Metadata %d/%d

Disconnect: %s

Requesting %d:%d->%d

Rejecting %d:%d->%d

Cancelling %d:%d->%d

Send Have %d

Send Donthave %d

Got unchoke from %s (%A), for seed only torrent

Got unchoke from %s (%A), can't request immediately because request queue is full (%d)

Got Expected Reject: %d:%d->%d

Got Reject: %d:%d->%d

Got Reject Unrequested!: %d:%d->%d

Sending Piece %d:%d->%d

Got PieceRequest I don't have: %d:%d->%d

Got Bad Request in SS mode: %d:%d->%d

Got Request while choked: %d:%d->%d

Got Request: %d:%d->%d

Got Cancel: %d:%d->%d

Got Cancel In Queue: %d:%d->%d

Got Cancel Unrequested: %d:%d->%d

Got Piece: %d:%d->%d

Got OLD Piece: %d:%d->%d

Got Piece Unrequested: %d:%d->%d

Banning peer: too many pex messages. %d since %S

Got PEX: %d added/%d dropped

received metadata message from peer that didn't advertise support

Reading msg %d piece %d

Got request for metadata which I do not have %d %d/%d

Metadata requests exceeded maximum request limit %d

Got request for metadata which I have %d/%d

Got zero metadata size. %d/%d

Got unrequested or cancelled metadata! %d %d %d/%d

Got metadata %d/%d

Got reject for unrequested metadata %d %d %d/%d

Got reject for metadata %d %d/%d

Got request for metadata which I can not read %d %d/%d

Send PEX: %d added/%d dropped

Sent Holepunch failure(%u)

Got Holepunch failure(%u)

Bad lt_donthave message (invalid length): %d

Bad lt_donthave message (piece index exceeds maximum): %d

Got Donthave %d

Bad lt_donthave message (piece already not had): %d

Extension: ipv4:[%a] for '%s'

Extension: ipv6:[%a] for '%s'

Got Have %d

Got Bad Have %d

Got Suggest Piece %d

Got Allowed Fast %d

No supported crypto methods

Connecting: source: %S

Disconnect: Proxy connect error: %s

Peer error: %s

TCP connections are not allowed

Dropping peer that has metadata, though we still want it for %s

Exceeded 5 seconds for %s metadata chunk %d

Sending %d bytes of aggregated data

DNS resolution failed for tracker %S

blocking DNS lookup for %s

[DISTSHARE] Authentication key appears to be missing.

[DISTSHARE] Authentication key appears to be the wrong size: %i/%i bytes.

[DISTSHARE] Authentication key does not exist!

[DISTSHARE] Invalid Distributed Share response command %c

magnet:?xt=urn:btih:%S&tr=%S

_25,80,110,443,6666,6667

Checking if torrent data files already exist in %s

Torrent data files already exist in %s

Setting storage folder to '%s' for torrent '%s' (directory '%s')

Torrent '%s' storage at '%s', root at '%s'

IO Error:%d line:%d pos:%Ld count:%d actual:%d

Error opening "%s": %E

ReadFile error: %s:%Ld:%d:%d:%d

%S(%x): %x:%x (fs %x)

%s-devpair.dat

hCan't add duplicate device pairing %s

Adding device pairing with id %s name %s

Found device pairing %s at %d of %d

Can't match key hash to device pair %s

twebcache.dat

Expiring all device pairing sessions associated with device %s

The file "%s" is signed and the signature was verified.

The file "%s" is not signed.

An unknown error occurred trying to verify the signature of the "%s" file.

Verify Sig Error: 0x%x.

CertGetNameString failed.

CryptQueryObject failed with %x

CryptMsgGetParam failed with %x

CertFindCertificateInStore failed with %x

Signer certificate mismatch

ICMP.DLL

~%sPartFile_%LX.dat

thumbs.db

.DS_Store

%s.%d

Moving files from '%s' to '%s'

L%s\%s\%s

ffmpeg.exe

s%s\~~%s

%s.log

%S [%d]: %S

upnp_log.txt

UPnP: Unable to create socket: %d

UPnP: Unable to setsockopt: %d

UPnP: Could not join multicast group: %d

UPnP: Could not setup socket to send multicast packets: %d

UPnP: Could not set unicast TTL: %d

UPnP: Could not set multicast TTL: %d

DEBUG: UPnP: Send error [socket %p]: %d

DEBUG: UPnP: Not replying to Service Type [%S]

UPnP: Discovered new device: "%S" %S

%s: No longer have piece: %u

%s (%s)

bittorrent.crt

Lmedia%s%s

%s_(%s).%s

%s%s\%s

tracker.openbittorrent.com

tracker.publicbt.com

tracker.ccc.de

tracker.istole.it

RangeBlock detected range %S

Not yet supported

[nf]%s

%s does not exist in object

key does not exist in object

OEncoded rate %d duration %d for file %s

Need more header for file %s

Header is at the end in file %s

Unrecognized type for file %s

Need more media header for %s: will reparse.

Error %d parsing media header for %s

**** Successfully determined encoded rate of file %s

%s%cpreview%c%H_preview_%d.avi

transcode\ffmpeg.exe

"%s" -i "hXXp://pairing:%H@127.0.0.1:%d/proxy?sid=%x&file=%d&token=%H&pairing=%H&service=STREAMING" -vcodec copy -acodec copy -f avi -ss %d -to %d "%s"

%s%s|

Deleting original torrent file %s

Can't delete original torrent file %s

Can't download %s via HTTP - %s

NHTTP server

file %S redirected to %S

sHTTP Connecting to: %S

invalid http reply (%S)

invalid request or temporarily unavailable (%d)

invalid http response code (%d): %S (%S)

Got redirection response (%d) but no location header

Invalid redirection url: %S

Redirection limit (%d) reached (recursive redirections?)

HTTP response did not include content-length nor content-range

HTTP server sent more responses than it was requested to

Disconnect: a range of type %S is not supported

Invalid range in HTTP response (%d)

Invalid transfer encoding (%S)

The data received from the HTTP server was not the part that was requested

The size of the data received from the HTTP server did not match the requested size

Timed out. num_tries=%d

HTTP Reconnecting to: %S

HTTP Disconnect: Peer error: %s

content-length (%Lu) does not correspond to the requested length (%d)

B0rked reason: %s

IO Error:%d line:%d align:%d pos:%Ld count:%d actual:%d

-i %%s -y -f %s %s %s %%s

-vcodec %S -maxrate %dm -bufsize %dm -flags  loop -cmp  chroma -me_method hex -subq 5 -me_range 16 -b_strategy 1 -bf %d -flags2 %s%s%s%s%s -refs 2 -directpred 3 -trellis 1

-r %d

-s %dx%d

-crf %f

-b %d

-level %d

-acodec %S %s -ar %d -ab %d

-ac %d

Unknown error %S

Access denied %S

Unknown property %S

Read only property %S

Type mismatch %S

sendappmsg

sendmsg

fb_login

set_license_key

JAVASCRIPT LOG: %s

window.btapp = null; window.onunload = null;

set_webseed

hXXp://127.0.0.1:%d/proxy?sid=%x&file=%d

verify_rsa_signature_appkey

rsa_generate_key

web seed

key_expired

invalid_key

no_license_key

{A4D77A09-10EA-4574-8C09-9B6E1A21C95F}

Activation error: %s

HTTP %d

iPod Touch 1.Gen

iPod Touch 2.Gen

iPod Touch 3.Gen (8GB)

iPod Touch 3.Gen

iPod Touch 4.Gen

iutorrent.lng

eYour DNS server does not support AAAA lookups. Installing IPv6 is NOT recommended.

eKERNEL32.DLL

tray.ico

\hh.exe

ms-its:%s::%s

utorrent-342-37754.chm

utorrent-help.zip

LoadKnownFileType called with %s, %s, %s

btkey

Accepted launch|Type: %s Location: %s

Memory Compacting, system memory is low (%u%% CPU usage)

social.bmp

Unable to send crash report to server:

Error opening Windows firewall: 0x%X %s

[%dK]

2%d %s

transcode.btinstall

%s%s %d.%d

[Portable mode]

%s (build %d) [%d-bit]

main.ico

An older version of %s is running.

Please shut down %s and try again.

It seems like %s is already running, but not responding.

Please close all %s processes and try again.

Failed to unpack bundled btapp: %s to: %s

%s\BunndleOfferManager.dll

%s\ADKAppsOfferManager.dll

Delete file failed: %s error: %d

Installing '%s' to '%s'.

t.lang.txt

%s.lng

hXXp://VVV.bittorrent.com

hXXp://127.0.0.1:%d/search?q=%%s

shell32.dll,OpenAs_RunDLL %s

RUNDLL32.EXE

hXXp://127.0.0.1:%d/proxy?sid=%S&file=%d

http%:%/%/localhost%:%d%/proxy%?sid%=%S%&fast_if_no_peers=false%&file=%d&width=%d&height=%d

http%:%/%/localhost%:%d%/proxy%?sid%=%S%&fast_if_no_peers=false%&file=%d

/select,"%s"

\flash*.ocx

ping.exe

%s -n 2 127.0.0.1

%s /BRINGTOFRONT

BitTorrent|hXXp://VVV.bittorrent.com/search?client=%v&search=

Submit a crash report to the developers.

%s has crashed. A crash dump has been saved as:

uTorrent.exe /RECOVER "%s"

uTorrent.exe /RECOVER

%s has crashed. Unable to generate crash dump. %S%S

btinstall.txt

BTAPPS="%s\" PAIRINGKEY="%S"

INSTALLDEBUG: LoadFile of current exe failed

V8 bundle: Failed to open exe

ui.btapp

b.btapp

Installing bundle: %s to %s

apps.btapp

Failed to find bundled btapp: %s

Failed to install bundled btapp: %s to: %s

Bundled btapp "%s" is ill formed: %s

%u.%u.%u_%u

updates\%s.exe

lupdates\%x.lng

tupdates.dat

Software\Microsoft\Windows\CurrentVersion\Uninstall\%s

[unknown url]

Buggy DLL warning: %S (%S)

%s\VirusGuard\

BitTorrentAntivirus.exe

VirusGuard.exe

.DEFAULT\Software\SetID\Internal

Software\uTorrentPurchases\PurchasedKeys

TCan't parse webui description json: %S

tabs.bmp

toolbar.bmp

tstatus.bmp

VPAIDPlayer.swf

hXXp://update.utorrent.com/survey

<A HREF="%s">%s</A>

%s %d%%

%s %d %s

Failed to load skin: %s. SaveFile failed.

Failed to load skin: %s. Read from btresource failed.

%d (%d)

%d.%.3d

=.%%

id_%S

twindow.location="about:blank";

V. (%s)

/redirect.html#userinterface/preferences/general

/redirect.html#userinterface/preferences/uisettings

/redirect.html#userinterface/preferences/antivirus

/redirect.html#userinterface/preferences/directories

/redirect.html#userinterface/preferences/connection

/redirect.html#userinterface/preferences/bandwidth

/redirect.html#userinterface/preferences/bittorrent

/redirect.html#userinterface/preferences/transfercap

/redirect.html#userinterface/preferences/queueing

/redirect.html#userinterface/preferences/scheduler

/redirect.html#userinterface/preferences/uconnect

/redirect.html#userinterface/preferences/streaming

/redirect.html#userinterface/preferences/devices

/redirect.html#userinterface/preferences/paireddevices

/redirect.html#userinterface/preferences/label

/redirect.html#userinterface/preferences/advanced

/redirect.html#userinterface/preferences/advanced/uiextras

/redirect.html#userinterface/preferences/advanced/diskcache

/redirect.html#userinterface/preferences/webui

/redirect.html#userinterface/preferences/advanced/run_program

VhXXps://remote.utorrent.com

help.ico

%s, %d:00 - %d:59

hXXp://bit.ly/HTwxBj

"%s"%s

s%dx%.2d

@\\.\pipe\privateaccessvpn

V%s %d

%s %d

Tris: %d points [high score: %d]

%s (build %d)

V%s\%s\*.*

Vhttp:

hXXp://VVV.utorrent.com/faq.php

%.1f %s

yellow_check_8bit.ico

green_check_8bit.ico

red_cross_8bit.ico

\\.\X:

%s(%d). [%s] [%s]

W%s (%d)

10  %s

%s(%d). [%s]

App store install failed: %s

Got bogus main app. Update URL does not match download source.

%s != %s

%s\%S

%s\%s\%S

%s "%s"

W%sBunndleOfferManager.dll

9944A343-2613-4177-A30C-3D868D1D0D9F

C6D65593-16C7-44ED-BC08-B46F22EA7353

BunndleOfferManager.dll

%sADKAppsOfferManager.dll

Lflags.bmp

%d | %d

%d| %d

%S%S%S%S%S%S

(%d%%) %s

%dx%d

A: %S V: %S

&%d %s

hXXp://pairing:%H@127.0.0.1:%d/proxy?sid=%x&file=%d&token=%H&pairing=%H&service=STREAMING

L<a href="%s">%s</a>

.stepnumeral {

.stepcontent {

.stepheading {

.steptext {

.stepbox {

.devpointer {

.arrow {

.arrow-lblade-cover {

.arrow-lcutout {

.arrow-rblade-cover {

.arrow-rcutout {

.newdev-text {

.newdev-bevel {

.or-- {

|[%d Torrents]|

%s:\%s

%s (powered by %s)

Failed to post GUI Update message: %s

sFailed to load html resource %d

hXXp://pairing:%H@127.0.0.1:%d/fileserve?token=%H&pairing=%H

top: %d;

Device ID %s : %s

<html><body>Failed to load HTML resource %d</body></html>

$('body').ready(function() { devicehelper.initialize();

devicehelper.setClient("%s");

devicehelper.setText({

%s"%S":"%s"

notify.configure(%d,'%H'); devicehelper.setPort(%d); devicehelper.setPair('%H');

devicehelper.adddevice('%S', %d, '%d', '%s');

devicehelper.adddevice('devicesection', %d, '%d', '%s');

OCSetupHlp.dll

ADKAppsOfferManager.dll

<!DOCTYPE html> <html> <body style='padding: 16px 0px 0px 12px; margin: 0px'> <div id='errorBox' style='display: none; background: #f00'></div> <object id='player' height='30' width='40' classid='CLSID:6BF52A52-394A-11d3-B153-00C04F79FAA6'> <param name='enableErrorDialogs' value='0' /> <param name='autoStart' value='0' /> </object> <script language='javascript'> var player = document.getElementById('player'); var errorBox = document.getElementById('errorBox'); function clientSize() { var width, height; var adj_x = 12; var adj_y = 16; if(window.innerWidth || window.innerHeight) { return { width: window.innerWidth-adj_x, height: window.innerHeight-adj_y }; } var doc = window.document; var width = doc.documentElement.clientWidth || doc.body.clientWidth; var height = doc.documentElement.clientHeight || doc.body.clientHeight; return { width: width-adj_x, height: height-adj_y } } function resizediv() { var dim = clientSize(); player.style.height = dim.height   'px'; player.style.width = dim.width   'px'; errorBox.style.height = dim.height   'px'; errorBox.style.width = dim.width   'px'; } window.onresize = resizediv; document.body.style.overflow = 'hidden'; resizediv(); function playerError() { player.style.display = 'none'; errorBox.style.display = 'block'; errorBox.innerText = 'XXX An error occurred XXX'; } player.URL = '

'; player.controls.play(); </script> <script language='JScript' for='player' event='Error()'>playerError();</script> <script language='JScript' for='player' event='MediaError()'>playerError();</script> </body></html>

CLSID\{DC0C2640-1415-4644-875C-6F4D769839BA}

Z%s (%s:)

Zmscoree.dll

- floating point support not loaded

- CRT not initialized

- Attempt to initialize the CRT more than once.

2.cmd

portuguese-brazilian

USER32.DLL

window.onbeforeunload = null;

/cnid "%d" %S

hXXp://apps.bittorrent.com/cl_search/thanks.html

hXXp://apps.bittorrent.com/cl_search/thanksbundles.html

hXXp://featuredcontent.utorrent.com/

hXXp://featuredcontent.staging.utorrent.com

javascript:cbSslCertificatePop();

hXXp://VVV.facebook.com/plugins/like.php?

errorUrl

Script Error: line=%d char=%d code=%d message=%s url=%s

%cport=%d&pair=%H

%cport=%d

&frameaddr=%x

%clangs=%U

csrss.exe

smss.exe

svchost.exe

services.exe

explorer.exe

wininit.exe

lsass.exe

C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent

8892352461

Torrent 3.4.2 (build 37754) [32-bit]

Torrent 3.4.2

msctls_hotkey32

Remove it with Ad-Aware

Click (here) to download and install Ad-Aware Free Antivirus.
Update the definition files.
Run a full scan of your computer.

Manual removal*

Terminate malicious process(es) (How to End a Process With the Task Manager):

GoogleUpdate.exe:5112
GoogleUpdate.exe:1964
GoogleUpdate.exe:4740
GoogleUpdate.exe:1972
GoogleUpdate.exe:3968
GoogleUpdate.exe:816
GoogleUpdate.exe:4500
GoogleUpdateSetup.exe:3100
Yandex.exe:2084
syesubc3_p2v3.exe:3476
sender.exe:3624
GoogleUpdateComRegisterShell64.exe:4520
GoogleUpdateComRegisterShell64.exe:4184
GoogleUpdateComRegisterShell64.exe:5060
TPAutoConnSvc.exe:1844
SkypeSetupFull.exe:1892
RunDll32.exe:4076
YandexSearch.exe:1760
MsiExec.exe:3812
MsiExec.exe:3644
MsiExec.exe:4040
MsiExec.exe:3288
utt699.tmp.exe:3512
utt699.tmp.exe:3852
du73i.exe:1180
%original file name%.exe:1472
%original file name%.exe:1000
uTorrent.exe:3024
utt8112.tmp.exe:3708
utt8112.tmp.exe:3896
taskeng.exe:3696
Delete the original Trojan file.
Delete or disinfect the following files created/modified by the Trojan:

%Program Files% (x86)\Google\Update\1.3.25.11\goopdateres_fil.dll (78 bytes)
%Program Files% (x86)\Google\Update\1.3.25.11\goopdateres_da.dll (77 bytes)
%Program Files% (x86)\Google\Update\1.3.25.11\goopdateres_fr.dll (79 bytes)
%Program Files% (x86)\Google\Update\1.3.25.11\goopdateres_et.dll (77 bytes)
%Program Files% (x86)\Google\Update\1.3.25.11\goopdateres_tr.dll (77 bytes)
%Program Files% (x86)\Google\Update\1.3.25.11\GoogleUpdateHelper.msi (54 bytes)
%Program Files% (x86)\Google\Update\1.3.25.11\goopdateres_ja.dll (70 bytes)
%Program Files% (x86)\Google\Update\1.3.25.11\goopdateres_hr.dll (78 bytes)
%Program Files% (x86)\Google\Update\1.3.25.11\goopdateres_el.dll (79 bytes)
%Program Files% (x86)\Google\Update\1.3.25.11\goopdateres_zh-TW.dll (63 bytes)
%Program Files% (x86)\Google\Update\1.3.25.11\psmachine.dll (1954 bytes)
%Program Files% (x86)\Google\Update\1.3.25.11\goopdateres_es.dll (79 bytes)
%Program Files% (x86)\Google\Update\1.3.25.11\goopdateres_no.dll (77 bytes)
%Program Files% (x86)\Google\Update\1.3.25.11\GoogleUpdateComRegisterShell64.exe (1738 bytes)
C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job (898 bytes)
%Program Files% (x86)\Google\Update\1.3.25.11\goopdateres_te.dll (79 bytes)
%Program Files% (x86)\Google\Update\1.3.24.15 (28 bytes)
%Program Files% (x86)\Google\Update\1.3.25.11\goopdateres_ml.dll (80 bytes)
%Program Files% (x86)\Google\Update\1.3.25.11\goopdateres_sl.dll (78 bytes)
%Program Files% (x86)\Google\Update\1.3.25.11\goopdateres_bn.dll (78 bytes)
%Program Files% (x86)\Google\Update\1.3.25.11\goopdateres_hi.dll (77 bytes)
%Program Files% (x86)\Google\Update\1.3.25.11\goopdateres_en-GB.dll (72 bytes)
%Program Files% (x86)\Google\Update\1.3.25.11\goopdateres_sv.dll (77 bytes)
%Program Files% (x86)\Google\Update\1.3.25.11\goopdateres_kn.dll (79 bytes)
%Program Files% (x86)\Google\Update\1.3.25.11\goopdateres_ur.dll (77 bytes)
%Program Files% (x86)\Google\Update\1.3.25.11\GoogleCrashHandler64.exe (4210 bytes)
%Program Files% (x86)\Google\Update\1.3.25.11\psmachine_64.dll (1954 bytes)
%Program Files% (x86)\Google\Update\1.3.25.11\goopdateres_sk.dll (77 bytes)
%Program Files% (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (12490 bytes)
%Program Files% (x86)\Google\Update\1.3.25.11\psuser_64.dll (1954 bytes)
%Program Files% (x86)\Google\Update\1.3.25.11\goopdateres_ta.dll (79 bytes)
%Program Files% (x86)\Google\Update\1.3.25.11\goopdateres_pl.dll (78 bytes)
%Program Files% (x86)\Google\Update\1.3.25.11\goopdateres_fa.dll (72 bytes)
%Program Files% (x86)\Google\Update\1.3.25.11\goopdateres_nl.dll (78 bytes)
%Program Files% (x86)\Google\Update\1.3.25.11\goopdateres_es-419.dll (78 bytes)
%Program Files% (x86)\Google\Update\1.3.25.11\goopdate.dll (32380 bytes)
%Program Files% (x86)\Google\Update\1.3.25.11\goopdateres_vi.dll (77 bytes)
%Program Files% (x86)\Google\Update\1.3.25.11\GoogleUpdateSetup.exe (20458 bytes)
%Program Files% (x86)\Google\Update\1.3.25.11\goopdateres_sw.dll (79 bytes)
%Program Files% (x86)\Google\Update\1.3.25.11\goopdateres_it.dll (79 bytes)
%Program Files% (x86)\Google\Update\1.3.25.11\goopdateres_ca.dll (78 bytes)
%Program Files% (x86)\Google\Update\1.3.25.11\goopdateres_sr.dll (77 bytes)
%Program Files% (x86)\Google\Update\1.3.25.11\goopdateres_bg.dll (78 bytes)
%Program Files% (x86)\Google\Update\1.3.25.11\GoogleCrashHandler.exe (3778 bytes)
%Program Files% (x86)\Google\Update\1.3.25.11\GoogleUpdateOnDemand.exe (104 bytes)
%Program Files% (x86)\Google\Update\1.3.25.11\goopdateres_lt.dll (77 bytes)
%Program Files% (x86)\Google\Update\1.3.25.11\goopdateres_fi.dll (77 bytes)
%Program Files% (x86)\Google\Update\1.3.25.11\GoogleUpdate.exe (1738 bytes)
%Program Files% (x86)\GUME466.tmp\goopdateres_en.dll (36 bytes)
%Program Files% (x86)\Google\Update\1.3.25.11\goopdateres_is.dll (77 bytes)
%Program Files% (x86)\Google\Update\1.3.25.11\goopdateres_pt-BR.dll (77 bytes)
%Program Files% (x86)\Google\Update\1.3.25.11\goopdateres_ar.dll (71 bytes)
%Program Files% (x86)\Google\Update\1.3.25.11\goopdateres_cs.dll (77 bytes)
%Program Files% (x86)\Google\Update\1.3.25.11\goopdateres_mr.dll (78 bytes)
%Program Files% (x86)\Google\Update\1.3.25.11\goopdateres_gu.dll (79 bytes)
%Program Files% (x86)\GUME466.tmp\goopdate.dll (49 bytes)
%Program Files% (x86)\Google\Update\1.3.25.11\goopdateres_pt-PT.dll (78 bytes)
%Program Files% (x86)\Google\Update\1.3.25.11\goopdateres_zh-CN.dll (63 bytes)
%Program Files% (x86)\Google\Update\1.3.25.11\goopdateres_am.dll (72 bytes)
%Program Files% (x86)\Google\Update\1.3.25.11\goopdateres_de.dll (79 bytes)
%Program Files% (x86)\Google\Update\1.3.25.11\goopdateres_th.dll (72 bytes)
%Program Files% (x86)\Google\Update\1.3.25.11\goopdateres_ru.dll (77 bytes)
%Program Files% (x86)\Google\Update\1.3.25.11\goopdateres_uk.dll (77 bytes)
%Program Files% (x86)\Google\Update\1.3.25.11\goopdateres_iw.dll (71 bytes)
%Program Files% (x86)\Google\Update\1.3.25.11\goopdateres_id.dll (77 bytes)
%Program Files% (x86)\Google\Update\1.3.25.11\goopdateres_lv.dll (78 bytes)
%Program Files% (x86)\Google\Update\1.3.25.11\goopdateres_hu.dll (78 bytes)
%Program Files% (x86)\Google\Update\1.3.25.11\goopdateres_ro.dll (78 bytes)
%Program Files% (x86)\Google\Update\1.3.25.11\goopdateres_ko.dll (69 bytes)
%Program Files% (x86)\Google\Update\1.3.25.11\goopdateres_ms.dll (77 bytes)
%Program Files% (x86)\Google\Update\1.3.25.11\GoogleUpdateBroker.exe (104 bytes)
C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job (902 bytes)
%Program Files% (x86)\Google\Update\1.3.25.11\psuser.dll (1954 bytes)
%Program Files% (x86)\Google\Update\1.3.25.11\goopdateres_en.dll (72 bytes)
%Program Files% (x86)\Google\Update\Install\{C8166274-A579-42A7-AB8E-118DD62CB219}\GoogleUpdateSetup.exe (7725 bytes)
%Program Files% (x86)\Google\Update\Download\{430FD4D0-B729-4F61-AA34-91526481799D}\1.3.25.11\GoogleUpdateSetup.exe (6841 bytes)
%Program Files% (x86)\GUME466.tmp\goopdateres_id.dll (37 bytes)
%Program Files% (x86)\GUME466.tmp\goopdateres_kn.dll (39 bytes)
%Program Files% (x86)\GUME466.tmp\goopdateres_ta.dll (39 bytes)
%Program Files% (x86)\GUME466.tmp\goopdateres_pt-BR.dll (37 bytes)
%Program Files% (x86)\GUME466.tmp\goopdateres_pl.dll (38 bytes)
%Program Files% (x86)\GUME466.tmp\goopdateres_tr.dll (37 bytes)
%Program Files% (x86)\GUME466.tmp\goopdateres_fil.dll (38 bytes)
%Program Files% (x86)\GUME466.tmp\goopdateres_ur.dll (37 bytes)
%Program Files% (x86)\GUME466.tmp\goopdateres_fr.dll (39 bytes)
%Program Files% (x86)\GUME466.tmp\goopdateres_vi.dll (37 bytes)
%Program Files% (x86)\GUME466.tmp\goopdateres_ar.dll (35 bytes)
%Program Files% (x86)\GUME466.tmp\goopdateres_de.dll (39 bytes)
%Program Files% (x86)\GUME466.tmp\goopdateres_sk.dll (37 bytes)
%Program Files% (x86)\GUME466.tmp\GoogleUpdateBroker.exe (51 bytes)
%Program Files% (x86)\GUME466.tmp\goopdateres_lv.dll (38 bytes)
%Program Files% (x86)\GUME466.tmp\GoogleCrashHandler64.exe (550 bytes)
%Program Files% (x86)\GUME466.tmp\goopdateres_am.dll (36 bytes)
%Program Files% (x86)\GUME466.tmp\goopdateres_cs.dll (37 bytes)
%Program Files% (x86)\GUME466.tmp\goopdateres_zh-CN.dll (31 bytes)
%Program Files% (x86)\GUME466.tmp\goopdateres_sr.dll (37 bytes)
%Program Files% (x86)\GUME466.tmp\goopdateres_sv.dll (37 bytes)
%Program Files% (x86)\GUME466.tmp\goopdateres_te.dll (39 bytes)
%Program Files% (x86)\GUME466.tmp\goopdateres_zh-TW.dll (31 bytes)
%Program Files% (x86)\GUME466.tmp\GoogleUpdateComRegisterShell64.exe (114 bytes)
%Program Files% (x86)\GUME466.tmp\goopdateres_ko.dll (33 bytes)
%Program Files% (x86)\GUME466.tmp\GoogleUpdateHelper.msi (26 bytes)
%Program Files% (x86)\GUME466.tmp\GoogleCrashHandler.exe (230 bytes)
%Program Files% (x86)\GUME466.tmp\npGoogleUpdate3.dll (838 bytes)
%Program Files% (x86)\GUME466.tmp\goopdateres_da.dll (37 bytes)
%Program Files% (x86)\GUME466.tmp\goopdateres_et.dll (37 bytes)
%Program Files% (x86)\GUME466.tmp\goopdateres_hi.dll (37 bytes)
%Program Files% (x86)\GUME466.tmp\goopdateres_ro.dll (38 bytes)
%Program Files% (x86)\GUME466.tmp\goopdateres_iw.dll (35 bytes)
%Program Files% (x86)\GUME466.tmp\goopdateres_mr.dll (38 bytes)
%Program Files% (x86)\GUME466.tmp\goopdateres_bn.dll (38 bytes)
%Program Files% (x86)\GUME466.tmp\goopdateres_el.dll (39 bytes)
%Program Files% (x86)\GUME466.tmp\goopdateres_nl.dll (38 bytes)
%Program Files% (x86)\GUME466.tmp\goopdateres_ja.dll (34 bytes)
%Program Files% (x86)\GUME466.tmp\goopdateres_hr.dll (38 bytes)
%Program Files% (x86)\GUME466.tmp\goopdateres_hu.dll (38 bytes)
%Program Files% (x86)\GUME466.tmp\psuser.dll (166 bytes)
%Program Files% (x86)\GUME466.tmp\goopdateres_fi.dll (37 bytes)
%Program Files% (x86)\GUME466.tmp\goopdateres_th.dll (36 bytes)
%Program Files% (x86)\GUME466.tmp\goopdateres_en-GB.dll (36 bytes)
%Program Files% (x86)\GUTE467.tmp (6 bytes)
%Program Files% (x86)\GUME466.tmp\GoogleUpdateOnDemand.exe (51 bytes)
%Program Files% (x86)\GUME466.tmp\goopdateres_ru.dll (37 bytes)
%Program Files% (x86)\GUME466.tmp\goopdateres_gu.dll (39 bytes)
%Program Files% (x86)\GUME466.tmp\psmachine_64.dll (189 bytes)
%Program Files% (x86)\GUME466.tmp\goopdateres_ms.dll (37 bytes)
%Program Files% (x86)\GUME466.tmp\goopdateres_es.dll (39 bytes)
%Program Files% (x86)\GUME466.tmp\goopdateres_sl.dll (38 bytes)
%Program Files% (x86)\GUME466.tmp\goopdateres_bg.dll (38 bytes)
%Program Files% (x86)\GUME466.tmp\goopdateres_ml.dll (40 bytes)
%Program Files% (x86)\GUME466.tmp\GoogleUpdateSetup.exe (6841 bytes)
%Program Files% (x86)\GUME466.tmp\goopdateres_ca.dll (38 bytes)
%Program Files% (x86)\GUME466.tmp\goopdateres_sw.dll (39 bytes)
%Program Files% (x86)\GUME466.tmp\goopdateres_es-419.dll (38 bytes)
%Program Files% (x86)\GUME466.tmp\goopdateres_uk.dll (37 bytes)
%Program Files% (x86)\GUME466.tmp\goopdateres_it.dll (39 bytes)
%Program Files% (x86)\GUME466.tmp\goopdateres_lt.dll (37 bytes)
%Program Files% (x86)\GUME466.tmp\GoogleUpdate.exe (217 bytes)
%Program Files% (x86)\GUME466.tmp\psuser_64.dll (189 bytes)
%Program Files% (x86)\GUME466.tmp\goopdateres_no.dll (37 bytes)
%Program Files% (x86)\GUME466.tmp\goopdateres_is.dll (37 bytes)
%Program Files% (x86)\GUME466.tmp\goopdateres_fa.dll (36 bytes)
%Program Files% (x86)\GUME466.tmp\psmachine.dll (166 bytes)
%Program Files% (x86)\GUME466.tmp\goopdateres_pt-PT.dll (38 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Yandex.lnk (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\yapin\Yandex.website (493 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Yandex\yapin\Yandex.lnk (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Yandex.website (493 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\USU4CORO\SkypeSetupFull[1].exe (2470680 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsp87A.tmp\SkypeSetupFull.exe (2628850 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsp87A.tmp\inetc.dll (53 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\statisticsex.log (940 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\7396C420A8E1BC1DA97F1AF0D10BAD21 (592 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\8QF47THB.txt (128 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\696F3DE637E6DE85B458996D49D759AD (568 bytes)
C:\ProgramData\Skype\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}\Skype.msi (355060 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\OpenCandy\OpenCandy_AA4F1F00729C45A1B2127019AA750390\du73i.exe (7904 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\{97DA2459-9AC9-49B0-BE2B-6F1E7E24D829}\YandexSearch.msi (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\YandexSearch00000.log (107174 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\2.8.1.1418 (PARTNER)\MsiExec.exe@3812-3964-1.log (254 bytes)
C:\Windows\Installer\MSI7058.tmp (221 bytes)
C:\Windows\Installer\MSI1555.tmp (221 bytes)
C:\Windows\Installer\MSI6F8D.tmp (221 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\places.sqlite-wal (19187 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Google\Chrome\User Data\Default\Preferences (56 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Opera Software\Opera Stable\Bookmarks (2 bytes)
C:\Windows\Installer\MSI16AD.tmp (163 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Google\Chrome\User Data\Default\Favicons-journal (37926 bytes)
C:\Windows\Installer\MSI17D8.tmp (49 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Opera Software\Opera Stable x64\favorites.db-journal (5062 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Google\Chrome\User Data\Default\Top Sites-journal (5380 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\prefs.js (10 bytes)
C:\Users\"%CurrentUserName%"\Favorites\Links\Yandex.url (284 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\2.8.1.1418 (PARTNER)\MsiExec.exe@3812-3924-1.log (150 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Opera Software\Opera Stable x64\Web Data (609 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Chromium\User Data\Default\Top Sites-journal (5062 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Internet Explorer\Services\www.yandex.com_20150129095519.ico (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Google\Chrome\User Data\Default\Bookmarks (785 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Opera Software\Opera Stable\Preferences_20150129095514.backup (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Opera Software\Opera Stable\Favicons-journal (32780 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Chromium\User Data\Default\Web Data-journal (7534 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Opera Software\Opera Stable x64\Preferences_20150129095515.backup (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\2.8.1.1418 (PARTNER)\stdout.log (40 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Opera Software\Opera Stable\Web Data (609 bytes)
C:\Windows\Installer\MSI18F4.tmp (49 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\chromeappsstore.sqlite-journal (3302 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Google\Chrome\User Data\Default\History (4588 bytes)
C:\Windows\Installer\MSI175A.tmp (49 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\omni.ja_20150129095501.zip (44854 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Opera Software\Opera Stable x64\Web Data-journal (544 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Chromium\User Data\Default\Favicons (4725 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Internet Explorer\Services\www.yandex.com_20150129095521.ico (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\2.8.1.1418 (PARTNER)\browserconfig.properties (74 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Chromium\User Data\Default\History-journal (18998 bytes)
C:\Users\"%CurrentUserName%"\Favorites\Links\Mail.url (286 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\2.8.1.1418 (PARTNER)\Yandex.website (493 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\searchplugins\yandex.com-095516.xml (9 bytes)
C:\Windows\Installer\MSI16EC.tmp (49 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Yandex\ui (38 bytes)
C:\Windows\Installer\MSI74D0.tmp (49 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\2.8.1.1418 (PARTNER)\MsiExec.exe@3812-3740-1.log (322 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\prefs.js_20150129095516.backup (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Opera Software\Opera Stable\Web Data-journal (544 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Opera Software\Opera Stable x64\Favicons (5137 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Opera Software\Opera Stable x64\Bookmarks (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\2.8.1.1418 (PARTNER)\MsiExec.exe@3812-3944-1.log (250 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\vendor00000.xml (591 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Google\Chrome\User Data\Default\Preferences_20150129095505.backup (28 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\2.8.1.1418 (PARTNER)\region.properties (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Chromium\User Data\Default\Bookmarks (785 bytes)
C:\Windows\Installer\MSI1876.tmp (49 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Google\Chrome\User Data\Default\History-journal (14544 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\2.8.1.1418 (PARTNER)\MsiExec.exe@3812-3928-1.log (42672 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Chromium\User Data\Default\Preferences (732 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\etilqs_lsIrBiaBhaKc2dV (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Mozilla\Firefox\Profiles\zwvbr04l.default\thumbnails\061150f69be1b6d86425899640d8e6fa.png (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Internet Explorer\Services\mail.yandex.com_20150129095522.ico (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Chromium\User Data\First Run (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\2.8.1.1418 (PARTNER)\MsiExec.exe@3812-3940-1.log (258 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Opera Software\Opera Stable\favorites.db (523 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Opera Software\Opera Stable x64\Bookmarks_20150129095516.backup (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\sender.exe (308 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Opera Software\Opera Stable\favorites.db-journal (5062 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Opera Software\Opera Stable\Bookmarks_20150129095515.backup (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\backup00000.reg (2196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Chromium\User Data\Default\Favicons-journal (32780 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Chromium\User Data\Local State (69 bytes)
C:\Windows\Installer\MSI1827.tmp (49 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\2.8.1.1418 (PARTNER)\MsiExec.exe@3812-3708-1.log (252 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Internet Explorer\Services\www.yandex.com_20150129095522.ico (5 bytes)
C:\Windows\Installer\MSI7098.tmp (221 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Opera Software\Opera Stable x64\Favicons-journal (32780 bytes)
C:\Windows\Installer\MSI730B.tmp (49 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\2.8.1.1418 (PARTNER)\MsiExec.exe@3644-4048-1.log (674 bytes)
C:\Windows\Installer\MSIC172.tmp (167 bytes)
C:\Windows\Installer\MSIF7D0.tmp (167 bytes)
C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\7B8944BA8AD0EFDF0E01A43EF62BECD0_DBEBBB72D7CF896A67503824FF19F0BB (1 bytes)
C:\Windows\Installer\MSIF919.tmp (167 bytes)
C:\Windows\Installer\MSIF84E.tmp (155 bytes)
C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\7D266D9E1E69FA1EEFB9699B009B34C8_0A9BFDD75B598C2110CBF610C078E6E6 (1504 bytes)
C:\Windows\Installer\MSIF959.tmp (167 bytes)
C:\Windows\Installer\MSID62C.tmp (167 bytes)
C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\7D266D9E1E69FA1EEFB9699B009B34C8_0A9BFDD75B598C2110CBF610C078E6E6 (1 bytes)
C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\7B8944BA8AD0EFDF0E01A43EF62BECD0_DBEBBB72D7CF896A67503824FF19F0BB (1504 bytes)
C:\Windows\Installer\MSIB9E0.tmp (167 bytes)
C:\Windows\Installer\MSIB78C.tmp (167 bytes)
C:\ProgramData\Skype\SKYB8E3.tmp (5572 bytes)
C:\Windows\Installer\MSID521.tmp (167 bytes)
C:\Windows\Installer\MSIB877.tmp (167 bytes)
C:\Windows\Installer\MSIFB1F.tmp (167 bytes)
C:\Windows\Installer\MSIB8C6.tmp (167 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\7F4987FB1A6E43d69E3E94B29EB75926\YandexSearch.exe (1480 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\7B8944BA8AD0EFDF0E01A43EF62BECD0_84DF081C52E32C6CC02A8FC17AEFEC2C (1536 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\7D266D9E1E69FA1EEFB9699B009B34C8_0A9BFDD75B598C2110CBF610C078E6E6 (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\7D266D9E1E69FA1EEFB9699B009B34C8_0A9BFDD75B598C2110CBF610C078E6E6 (1212 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\7F4987FB1A6E43d69E3E94B29EB75926\seed.txt (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\USU4CORO\YandexSearch[1].exe (355409 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\SH2TVRCI\info[1].rss (827 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\7F4987FB1A6E43d69E3E94B29EB75926\downloader.log3512 (182503 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\7B8944BA8AD0EFDF0E01A43EF62BECD0_84DF081C52E32C6CC02A8FC17AEFEC2C (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\7F4987FB1A6E43d69E3E94B29EB75926\stat.log3852 (547 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\OpenCandy\OpenCandy_AA4F1F00729C45A1B2127019AA750390\syesubc3_p2v3.exe (4217 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\settings.dat.new (63 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\uttB809.tmp.new (59 bytes)
C:\ProgramData\Microsoft\Windows\Start Menu\Ã‚ÂµTorrent.lnk (953 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Ã‚ÂµTorrent.lnk (971 bytes)
%Program Files% (x86)\uTorrent\uTorrent.exe (800 bytes)
C:\Users\Public\Desktop\Ã‚ÂµTorrent.lnk (947 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\G44ROL1L\jquery-1.11.2[1].js (159892 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\7PG9FKKL.txt (1351 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\91ECFED5143F7F4F4576655D8EFAB51C_5876942B8A1533861E194CE520DB3C48 (1504 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\apps\D944B3378FAB35793B7951FA53E41B2AB9CC462B (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\7D1F03728133589A90656A87E482B21F (290 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\USU4CORO\base64[1].js (3646 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\WDUL1PG1\icon[2].ico (200 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\USU4CORO\nr-515.min[1].js (10314 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\G44ROL1L\index-edge[1].htm (467 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\utt4328.tmp.new (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\828298824EA5549947C17DDABF6871F5_4A500E9AA7C5573906560F21D53A5861 (1312 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\apps\72F0D3E2141065DACF6134D07A06A2DF20590748 (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\SH2TVRCI\index[2].htm (315 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\SMIBE11Y.txt (97 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\RB47CK0O.txt (95 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\G44ROL1L\bundle_tab[1].htm (183 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\FCD2CC3451EF5F3DB8D4B7DD511B2F77_DDE7C84CBB7658FC5D51C45EABF2444C (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\USU4CORO\i[1].gif (43 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\USU4CORO\e[3].htm (64 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\SH2TVRCI\analytics[1].js (18744 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\49514950C94E8026A2B06312597DFF49_F4692EBD578D04048E176E82BB8369BB (2464 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\8059E9A0D314877E40FE93D8CCFB3C69_6974D89D7560C032FD086BB9AE092DD4 (1448 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\8059E9A0D314877E40FE93D8CCFB3C69_8BB8535855D9B94D8D1B596BEE16137C (463 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\apps\player.btapp (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\G44ROL1L\ados[2].js (14332 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\G44ROL1L\base64[1].js (145 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\LLKSH714.txt (93 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\SH2TVRCI\icon[1].ico (200 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\1DAF2884EC4DFA96BA4A58D4DBC9C406 (804 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\WDUL1PG1\bench[1].js (25 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\7QN12N1J.txt (1415 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\4XVWA97G.txt (1416 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\23B523C9E7746F715D33C6527C18EB9D (878 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\USU4CORO\jquery-1.11.1.min[1].js (52776 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\G44ROL1L\event[1].gif (35 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\8059E9A0D314877E40FE93D8CCFB3C69_E1083B58096402790BB1984C8AAEEC87 (1432 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\apps\plus.btapp.new (765 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\utt4A88.tmp (731 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\WDUL1PG1\lpmg4HkjSKqwDPqtr2Ll_wallpaper_pretty-lights-bg[1].jpg (200 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\SBRD7EJ5.txt (625 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\WDUL1PG1\collect[1].gif (35 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\SH2TVRCI\fileserve[1].js (505 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\WDUL1PG1\fileserve[1].css (73 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\USU4CORO\jHy0rFKsTumpzJclwbA7_99_TAOR%20wallpaper%201440x900[1].jpg (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\G6O322HQ.txt (116 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\62DX2A9Y.txt (490 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\WDUL1PG1\34e5de599eb245f89dc65ea4e8e2c989[1].jpg (3436 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\USU4CORO\e[1].htm (64 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\SH2TVRCI\380d449ac02e4f07b48c7c4b1438be6b[1].jpg (2970 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\1DAF2884EC4DFA96BA4A58D4DBC9C406 (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\SH2TVRCI\zuc589RxQva9qDF8D6fc_bitT_backgroundimage_(1)[1].jpg (200 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\G44ROL1L\i[3].gif (43 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\EB2C4AB8B68FFA4B7733A9139239A396_D76DB901EE986B889F30D8CC06229E2D (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\G44ROL1L\bundles[2].json (695 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\USU4CORO\bench[1].js (25 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\USU4CORO\icon[1].ico (200 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\WDUL1PG1\a05ac8e903c14e74befdd8b8426a754e[1].jpg (4425 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\223DE96EE265046957A660ED7C9DD9E7_EFF9B9BA98DEAA773F261FA85A0B1771 (1688 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\G44ROL1L\fileserve[1].png (200 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\G44ROL1L\index-edge[2].htm (105 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\SH2TVRCI\ecommerce[1].js (25 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\D47DBD2F9E3365FBBE008D71FB06716F_835A2FD7EE5F1F37B7872C78D42A88BF (2716 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\USU4CORO\ados[1].js (15992 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\9M1O38A2.txt (92 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\WDUL1PG1\jquery-1.11.1.min[1].js (70796 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\USU4CORO\cnRshcjNSxiBLM99wbC0_wallpaper_the-crash-reel4[1].jpg (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\8890A77645B73478F5B1DED18ACBF795_1E5D470765E0BE1964814B1F5A3581DC (1592 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\USU4CORO\modernizr.c1f148ce451bd94fd43d6b446b4ca51e.gz[1].js (7309 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\SS6SC5J3.txt (116 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\A98UC8ER.txt (245 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\K3XICJ94.txt (247 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\828298824EA5549947C17DDABF6871F5_4A500E9AA7C5573906560F21D53A5861 (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\7D266D9E1E69FA1EEFB9699B009B34C8_8CA7164968F366C9A94AC8E71C4BDD9B (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\G44ROL1L\i[1].gif (43 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\EB2C4AB8B68FFA4B7733A9139239A396_D76DB901EE986B889F30D8CC06229E2D (1720 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\USU4CORO\bundle_tab[1].htm (3764 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\NEHWHHE0.txt (211 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\G44ROL1L\e[2].htm (64 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\0D6ED27B76F0582A8D2120DF24D1E180_B52DB0DD355A2D437E4D65686FF6F4AD (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\USU4CORO\alJuJmasSCGtAplXwgzD_background2[1].jpg (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\USU4CORO\i[2].gif (43 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\E5054B3FD90C2AE6E53B5EA495D10CC9_B12519B3E4D3C99979E3C33CFF793FC8 (471 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\23B523C9E7746F715D33C6527C18EB9D (876 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\4S2ZU7DS.txt (116 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\WDUL1PG1\AxXzhRFAQnGrDsoQwNt9_eggnogbtbg[1].jpg (584 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\apps\D944B3378FAB35793B7951FA53E41B2AB9CC462B\empty_movie.gif (282 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\USU4CORO\8b9486d826[1].js (25 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\WDUL1PG1\inclient_chevrons.dc38596ff0cf873301ca6c09376fcc99[1].png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\SH2TVRCI\icon[3].ico (200 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\JPRVYJ1V.txt (1416 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\SH2TVRCI\analytics[3].js (17192 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\SH2TVRCI\analytics[2].js (17192 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\ZEB48NYT.txt (1415 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\WDUL1PG1\e[1].htm (65 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\SH2TVRCI\i[1].gif (43 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\USU4CORO\fileserve[1].js (917 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\WDUL1PG1\e[2].htm (65 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\WDUL1PG1\icon[1].ico (200 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\SH2TVRCI\bundle_tab.a7a7abd57aa87ff2b00c2b74a0b6d1cf.gz[1].js (234890 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Internet Explorer\DOMStore\DRT4YCWO\bundles.bittorrent[1].xml (1780 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\FB788E090BC1F3AA2FBC9E8FB2859601 (822 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\apps\72F0D3E2141065DACF6134D07A06A2DF20590748\icon.bmp (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\apps\featuredContent.btapp.new (41 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\apps\72F0D3E2141065DACF6134D07A06A2DF20590748\index.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\2427C246DCF85A06DD675914EDA68038_EEE52A74DEE31B064E156E492FD05217 (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\C36HRQ9A.txt (130 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\apps\D944B3378FAB35793B7951FA53E41B2AB9CC462B\index.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\updates.dat (1158 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\G44ROL1L\e[1].htm (63 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Crypto\RSA\S-1-5-21-2858020935-2156992550-3658131804-1003\7caeededce1553090f0df0caf3b00dbd_c0322acd-5e5d-42f0-b163-c591ee6ff5b9 (80 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\G44ROL1L\i[2].gif (43 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\SH2TVRCI\aDT[1].js (49717 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\WDUL1PG1\jquery.min[1].js (48011 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\apps\72F0D3E2141065DACF6134D07A06A2DF20590748\btapp (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\G44ROL1L\fontawesome-webfont.7149833697a959306ec3012a8588dcfa[1].eot (22041 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\NZTBDB8O.txt (131 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\74BFD122C0875EC75DBE5C6DB4C59019 (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\8059E9A0D314877E40FE93D8CCFB3C69_8BB8535855D9B94D8D1B596BEE16137C (1432 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\7D1F03728133589A90656A87E482B21F (774 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\015JYUEX.txt (91 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\utt4A99.tmp (9835 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\G44ROL1L\ados[3].js (3910 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\apps\D944B3378FAB35793B7951FA53E41B2AB9CC462B\vid_thumb.jpg (23 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\apps\72F0D3E2141065DACF6134D07A06A2DF20590748\index.html (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\49514950C94E8026A2B06312597DFF49_F4692EBD578D04048E176E82BB8369BB (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\8059E9A0D314877E40FE93D8CCFB3C69_E1083B58096402790BB1984C8AAEEC87 (463 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\1A21JAPL.txt (819 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\FCD2CC3451EF5F3DB8D4B7DD511B2F77_DDE7C84CBB7658FC5D51C45EABF2444C (1544 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\IU3RAU2D.txt (93 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\USU4CORO\ados[2].js (4148 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\G44ROL1L\dSJYSyRlSBO6uf2DUVig_wallpaper_PWT-background_regular[1].jpg (200 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\D47DBD2F9E3365FBBE008D71FB06716F_835A2FD7EE5F1F37B7872C78D42A88BF (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\K88CNSUU.txt (116 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\G44ROL1L\jquery-1.11.2[2].js (141837 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\G44ROL1L\ados[1].js (14786 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\E5054B3FD90C2AE6E53B5EA495D10CC9_B12519B3E4D3C99979E3C33CFF793FC8 (1672 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\USU4CORO\ermTbT3RwG3fDTQDJ8Qw_TDI_SPITTA_01[1].jpg (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\0D6ED27B76F0582A8D2120DF24D1E180_B52DB0DD355A2D437E4D65686FF6F4AD (1448 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\SH2TVRCI\index[1].htm (315 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\USU4CORO\e[2].htm (65 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\apps\72F0D3E2141065DACF6134D07A06A2DF20590748\main.css (946 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\MOQ7E5EQ.txt (625 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\USU4CORO\collect[1].gif (35 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\WDUL1PG1\SpKeovSKKhpc05xbKpxA_wallpaper_act-of-killing[1].jpg (200 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\2427C246DCF85A06DD675914EDA68038_EEE52A74DEE31B064E156E492FD05217 (1480 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\G44ROL1L\base64[2].js (145 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\G44ROL1L\collect[1].gif (35 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\WDUL1PG1\E7iDd0h4StitPU8rOMMO_Diplo%20Bundle%20Background[1].jpg (200 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\G44ROL1L\bundles[1].json (761 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\8059E9A0D314877E40FE93D8CCFB3C69_6974D89D7560C032FD086BB9AE092DD4 (463 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\91ECFED5143F7F4F4576655D8EFAB51C_5876942B8A1533861E194CE520DB3C48 (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\dlimagecache\165F6EF40A81DD175FFAEA69E77ABFD30B27E71C (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\8890A77645B73478F5B1DED18ACBF795_1E5D470765E0BE1964814B1F5A3581DC (471 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\SH2TVRCI\icon[2].ico (200 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\utorrent.lng.new (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\955CAB6FF6A24D5820D50B5BA1CF79C7_0D0504E280D4BC90041F089A5D901106 (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\WDUL1PG1\fileserve[1].js (42281 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\TLUJZUVZ.txt (646 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\66XQBG1F.txt (92 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\74BFD122C0875EC75DBE5C6DB4C59019 (1104 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\apps\welcome-upsell.btapp (28 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\EDC238BFF48A31D55A97E1E93892934B_C20E0DA2D0F89FE526E1490F4A2EE5AB (1592 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\7D266D9E1E69FA1EEFB9699B009B34C8_8CA7164968F366C9A94AC8E71C4BDD9B (2716 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\WDUL1PG1\282332204[1].js (102510 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\YWL67B0B.txt (247 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\SH2TVRCI\7aea374f43834941bbb3fa6f934276d5[1].jpg (4392 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\WDUL1PG1\ados[1].js (11570 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\apps\D944B3378FAB35793B7951FA53E41B2AB9CC462B\x.png (265 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\apps\D944B3378FAB35793B7951FA53E41B2AB9CC462B\btapp (201 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\955CAB6FF6A24D5820D50B5BA1CF79C7_0D0504E280D4BC90041F089A5D901106 (1488 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\EDC238BFF48A31D55A97E1E93892934B_C20E0DA2D0F89FE526E1490F4A2EE5AB (471 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\223DE96EE265046957A660ED7C9DD9E7_EFF9B9BA98DEAA773F261FA85A0B1771 (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\FB788E090BC1F3AA2FBC9E8FB2859601 (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\SH2TVRCI\ados[1].js (11047 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\LQV6HNJ1.txt (284 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\SH2TVRCI\bundle_tab.ef32af05f3aa94062d4eab1263d94d8e.gz[1].css (29804 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\V2X1JOA9.txt (449 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\WDUL1PG1\base64[1].js (3646 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\apps\D944B3378FAB35793B7951FA53E41B2AB9CC462B\info_icon.png (250 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\apps\D944B3378FAB35793B7951FA53E41B2AB9CC462B\main.css (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\dht.dat.new (845 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\utt8112.tmp.exe (50 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\resume.dat.new (59 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\dlimagecache\BBEEC0395D21A2A7F91889D7C7509F3D5D46FC05 (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\rss.dat.new (141 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\dlimagecache\10E6FBE4D921B475FA5FEC6E9A535A540D6FEED1 (318 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\dlimagecache\2D78C93EC367E6C1D9894103FA04B3BE5B20A84E (741 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\57C8EDB95DF3F0AD4EE2DC2B8CFD4157 (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\utt8F38.tmp.bat (93 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\77EC63BDA74BD0D0E0426DC8F8008506 (56 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\utt82C6.tmp.new (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\Tar869F.tmp (2784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\BR37U05L.txt (93 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\Cab869E.tmp (56 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\57C8EDB95DF3F0AD4EE2DC2B8CFD4157 (378 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\77EC63BDA74BD0D0E0426DC8F8008506 (370 bytes)
C:\Users\"%CurrentUserName%"\Desktop\Ã‚ÂµTorrent.lnk (811 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\utt901F.tmp.new (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\maindoc.ico (63 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\toolbar_offer.benc (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\uttA2F6.tmp.new (24 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\utt699.tmp.exe (316 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\FJK2VIBX.txt (93 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\utt3D44.tmp.new (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\utt9C9E.tmp (603 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\toolbar.benc.new (61 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\updates\3.4.2_37754.exe (10815 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\uttA1CD.tmp.new (61 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Start Menu\Ã‚ÂµTorrent.lnk (791 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\uTorrent\uTorrent.exe (50 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Crypto\RSA\S-1-5-21-2858020935-2156992550-3658131804-1003\1f91d2d17ea675d4c2c3192e241743f9_c0322acd-5e5d-42f0-b163-c591ee6ff5b9 (105 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\capsLock.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\normal\msa-logos-135x25.png (727 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\white-on-black\exclamation_20x20.png (513 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\white-on-black\button-middle-35x35@2x.png (331 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\normal\back_20x20-inverted@2x.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\languages\uk.js (883 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\fonts\segoe-ui-semibold-arabic.eot (2071 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\fonts\segoe-ui-light-greek.eot (29 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\css\retina\login.css (9 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\languages\nl.js (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\fonts\segoe-ui-light-cyrillic.ttf (1927 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\49514950C94E8026A2B06312597DFF49_33A0493B3756EC93EB52782457685E27 (1360 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\backgroundNoCloud.png (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\languages\pt.js (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\normal\button-darker-right-35x35@2x.png (884 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\languages\da.js (1828 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\languages\tr.js (987 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\retina\caret_left@2x.png (588 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\black-on-white\skype-logo-136x60@2x.png (1416 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\languages\et.js (1259 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\black-on-white\capslock_20x20@2x.png (620 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\black-on-white\arrow_up_20x20@2x.png (578 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\black-on-white\arrow_up_20x20.png (436 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\normal\exclamation_20x20.png (720 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\connection.png (865 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\black-on-white\button-right-35x35.png (867 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\white-on-black\back_20x20-inverted@2x.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\css\platform\mac.css (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\black-on-white\logo-xbox-25x25.png (965 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\languages\pl.js (9 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\normal\skype-logo-136x60@2x.png (10 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\retina\messageTopShort@2x.png (374 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\black-on-white\exclamation_20x20.png (515 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\white-on-black\skype-logo-136x60.png (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\white-on-black\logo-win-25x25@2x.png (908 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\normal\loader_15fps.gif (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\white-on-black\logo-skype-25x25.png (822 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\white-on-black\capslock_20x20@2x.png (620 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\fonts\segoe-ui-semibold-greek.woff (1985 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\languages\no.js (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\fonts\segoe-ui-regular-latin.woff (2039 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\black-on-white\logo-win-25x25.png (533 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\49514950C94E8026A2B06312597DFF49_33A0493B3756EC93EB52782457685E27 (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\languages\lt.js (10 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\white-on-black\button-right-35x35@2x.png (743 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\languages\el.js (672 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\loader.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\normal\skype-logo-136x60.png (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\white-on-black\dropdown_32x32@2x.png (370 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\white-on-black\dropdown_hover_32x32.png (267 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\retina\msAccount@2x.png (97 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\languages\ru.js (1198 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\black-on-white\capslock_20x20.png (380 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\fonts\segoe-ui-semibold-hebrew.eot (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\white-on-black\back_20x20-inverted.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\fonts\segoe-ui-regular-greek.ttf (2955 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\fonts\segoe-ui-light-latin.eot (2286 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\black-on-white\caret_right.png (823 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\white-on-black\ticked_not_10x10.png (191 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\05EC48341C277FE5110E7DFAA91377DC_39AA32012A618D407F0206C60DD48EA1 (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\fonts\segoe-ui-regular-hebrew.woff (9 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\languages\cs.js (11 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\white-on-black\capslock_20x20.png (380 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\fonts\segoe-ui-semibold-greek.eot (1762 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\retina\messageTop@2x.png (344 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\retina\background@2x.png (1847 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\normal\logo-office-25x25.png (783 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\picture.jpg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\css\platform\win.css (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\languages\es.js (9 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\black-on-white\ticked_10x10@2x.png (345 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\normal\button-right-35x35@2x.png (759 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\loader.gif (1089 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\black-on-white\ticked_not_10x10@2x.png (201 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\css\platform\unix.css (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\retina\messageBottomShort@2x.png (391 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\white-on-black\ticked_not_10x10@2x.png (201 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\languages\fi.js (9 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\black-on-white\button-middle-35x35@2x.png (331 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\fonts\segoe-ui-light-latin.ttf (6401 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\normal\button-darker-left-35x35.png (545 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\icons.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\fonts\segoe-ui-light-hebrew.eot (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\fonts\segoe-ui-light-cyrillic.eot (1032 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\white-on-black\logo-office-25x25.png (722 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\messageTop.png (265 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\fonts\segoe-ui-semibold-latin.woff (3956 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\msAccountOverlay.png (93 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\languages\ar.js (639 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\normal\arrow_up_20x20_8bit.png (220 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\black-on-white\caret_left.png (1338 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\msDefaultPicture.png (585 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\languages\bg.js (131 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\black-on-white\msa-logos-135x25.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\retina\skype@2x.png (560 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\fonts\segoe-ui-regular-arabic.ttf (2820 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\languages\ko.js (13 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login.md5 (34 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\white-on-black\logo-skype-25x25@2x.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\fonts\segoe-ui-light-arabic.eot (894 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Skype\shared_dynco\dc.db (284502 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\white-on-black\button-right-35x35.png (469 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\black-on-white\logo-xbox-25x25@2x.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\normal\loader_30fps.gif (1168 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\fonts\segoe-ui-light-greek.ttf (3156 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\white-on-black\arrow_up_20x20@2x.png (578 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\normal\logo-cloud-35x25@2x.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\normal\ticked_not_10x10@2x.png (201 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\inputfields.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\normal\button-left-35x35@2x.png (792 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\white-on-black\logo-xbox-25x25.png (956 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\black-on-white\dropdown_hover_32x32.png (256 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\languages\it.js (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\28EVKXMOTDQHUGYKIM9N.temp (893 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\facebook.png (315 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\normal\back_20x20-inverted.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\normal\button-darker-left-35x35@2x.png (900 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\fonts\segoe-ui-regular-cyrillic.eot (1147 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\normal\dropdown_32x32.png (269 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\languages\de.js (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\white-on-black\skype-logo-136x60@2x.png (229 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\retina\backgroundNoCloud@2x.png (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\normal\button-right-35x35.png (475 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\normal\ticked_10x10@2x.png (423 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\fonts\segoe-ui-semibold-latin.eot (3130 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\black-on-white\button-left-35x35@2x.png (753 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\normal\button-darker-middle-35x35.png (233 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\fonts\segoe-ui-regular-greek.woff (244 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\normal\button-darker-right-35x35.png (542 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\fonts\segoe-ui-regular-hebrew.eot (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\normal\logo-skype-25x25.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\fonts\segoe-ui-regular-latin.ttf (4737 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\normal\caret_left.png (998 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\css\login.css (904 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\languages\zh-hant.js (970 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\buttons.png (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\retina\icons@2x.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\skypelogo.png (1431 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\white-on-black\logo-office-25x25@2x.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\PU3JPNR3N5BCSUI2KWGE.temp (893 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\black-on-white\logo-skype-25x25.png (815 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\white-on-black\arrow_up_20x20.png (436 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\languages\ja.js (1229 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\messageBottomShort.png (279 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\black-on-white\exclamation_20x20@2x.png (796 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\fonts\segoe-ui-semibold-cyrillic.woff (319 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\retina\skypeicon@2x.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\retina\msAccountOverlay@2x.png (97 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\black-on-white\logo-office-25x25@2x.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\retina\msAccountColour@2x.png (132 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\normal\logo-xbox-25x25@2x.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\black-on-white\button-middle-35x35.png (230 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\languages\he.js (751 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\normal\logo-win-25x25.png (558 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\skypeicon.png (618 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\capsLockShort.png (328 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\black-on-white\button-left-35x35.png (469 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\black-on-white\back_20x20-inverted.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\0V5X2A8W.txt (123 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\fonts\segoe-ui-light-cyrillic.woff (1080 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\normal\msa-logos-135x25@2x.png (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\languages\sl.js (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\languages\vi.js (14 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\languages\hu.js (159 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\index.html (18 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\AC9005F5466BD463DF06D711B370595F (1152 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\black-on-white\dropdown_hover_32x32@2x.png (375 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\fonts\segoe-ui-semibold-greek.ttf (1933 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\black-on-white\back_20x20-inverted@2x.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\languages\id.js (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\black-on-white\ticked_not_10x10.png (191 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\normal\logo-win-25x25@2x.png (924 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\fonts\segoe-ui-semibold-cyrillic.ttf (1253 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\fonts\segoe-ui-semibold-hebrew.ttf (16 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\black-on-white\logo-cloud-35x25.png (837 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\fonts\segoe-ui-regular-arabic.woff (2926 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\4309200C3DBAD0F6F0DFACE9165FD092 (944 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\4309200C3DBAD0F6F0DFACE9165FD092 (727 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\js\login.js (4750 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Skype\shared_httpfe\queue.db (9692 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\languages\fr.js (9 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\black-on-white\skype-logo-136x60.png (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\SPCU5V2V.txt (345 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\normal\ticked_10x10.png (284 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\messageTopShort.png (256 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\normal\capslock_20x20@2x.png (781 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\fonts\segoe-ui-regular-cyrillic.woff (356 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\white-on-black\ticked_10x10.png (256 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\normal\back_20x20@2x.png (685 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\languages\zh-hans.js (11 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\fonts\segoe-ui-semibold-hebrew.woff (756 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\checkbox.png (551 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\white-on-black\back_20x20@2x.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\white-on-black\logo-cloud-35x25.png (839 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\retina\msDefaultPicture@2x.png (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\retina\buttons@2x.png (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\fonts\segoe-ui-regular-latin.eot (2674 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\normal\logo-office-25x25@2x.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\msAccount.png (93 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\languages\en.js (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\black-on-white\button-right-35x35@2x.png (698 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\background.png (13 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\white-on-black\back_20x20.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\logoanim.gif (14 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\white-on-black\exclamation_20x20@2x.png (799 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\normal\dropdown_hover_32x32.png (270 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\retina\caret_right@2x.png (609 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\normal\arrow_up_20x20.png (514 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\retina\inputfields@2x.png (421 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\white-on-black\logo-win-25x25.png (519 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\skype.png (697 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\AC9005F5466BD463DF06D711B370595F (69 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\black-on-white\dropdown_32x32.png (291 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\white-on-black\msa-logos-135x25.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\normal\dropdown_hover_32x32@2x.png (380 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\MJN04TU0U01NBGN0OEQ8.temp (893 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\black-on-white\msa-logos-135x25@2x.png (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\normal\capslock_20x20.png (466 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Skype\shared.tmp (4541 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\languages\ro.js (9 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\05EC48341C277FE5110E7DFAA91377DC_39AA32012A618D407F0206C60DD48EA1 (1456 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\retina\plus@2x.png (905 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\black-on-white\logo-win-25x25@2x.png (911 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Skype\DataRv\offline-storage-ecs.data (24 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\fonts\segoe-ui-light-hebrew.ttf (1419 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\languages\sk.js (594 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\black-on-white\dropdown_32x32@2x.png (375 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\white-on-black\dropdown_hover_32x32@2x.png (581 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\normal\caret_right.png (995 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\fonts\segoe-ui-semibold-arabic.ttf (3456 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\fonts\segoe-ui-semibold-arabic.woff (2319 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\fonts\segoe-ui-regular-hebrew.ttf (1682 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\black-on-white\back_20x20.png (399 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\fonts\segoe-ui-regular-cyrillic.ttf (1786 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\white-on-black\dropdown_32x32.png (267 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\retina\messageBottom@2x.png (477 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\fonts\segoe-ui-regular-arabic.eot (518 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\SH2TVRCI\externalSettings[1].js (77 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\white-on-black\ticked_10x10@2x.png (345 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\black-on-white\ticked_10x10.png (257 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\msAccountColour.png (118 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\fonts\segoe-ui-light-hebrew.woff (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\fonts\segoe-ui-light-arabic.woff (2084 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\white-on-black\button-left-35x35.png (492 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\languages\pt-br.js (1506 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\retina\checkbox@2x.png (794 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\normal\button-middle-35x35@2x.png (334 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\black-on-white\logo-cloud-35x25@2x.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\fonts\segoe-ui-regular-greek.eot (1046 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\black-on-white\back_20x20@2x.png (582 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\languages\th.js (1890 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\1IXV46O4.txt (585 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\normal\logo-skype-25x25@2x.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\normal\dropdown_32x32@2x.png (379 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\white-on-black\logo-xbox-25x25@2x.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\white-on-black\logo-cloud-35x25@2x.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\messageBottom.png (301 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\white-on-black\msa-logos-135x25@2x.png (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\fonts\segoe-ui-semibold-latin.ttf (4318 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Skype\shared_httpfe\queue.db-journal (22756 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\normal\logo-cloud-35x25.png (924 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\normal\logo-xbox-25x25.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\languages\sr-latn.js (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\normal\exclamation_20x20@2x.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\normal\arrow_up_20x20@2x.png (792 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\normal\back_20x20.png (452 bytes)
%Program Files% (x86)\Skype\Updater\Updater.dll (102 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\white-on-black\button-left-35x35@2x.png (829 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\plus.png (605 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\black-on-white\logo-office-25x25.png (718 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\dropdown.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\normal\button-left-35x35.png (489 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\retina\loader@2x.png (9 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\fonts\segoe-ui-light-latin.woff (3762 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Skype\shared_dynco\dc.db-journal (443115 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\normal\ticked_not_10x10.png (191 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\GEO56IBYK7XULHGRZBX0.temp (893 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\languages\sv.js (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\retina\facebook@2x.png (630 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\black-on-white\logo-skype-25x25@2x.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\fonts\segoe-ui-light-arabic.ttf (3174 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\normal\button-darker-middle-35x35@2x.png (335 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Skype\DataRv\offline-storage.data (90586 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\languages\hr.js (9 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\normal\button-middle-35x35.png (233 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\languages\ca.js (9 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\fonts\segoe-ui-light-greek.woff (1120 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\white-on-black\button-middle-35x35.png (230 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\images\retina\dropdown@2x.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\fonts\segoe-ui-semibold-cyrillic.eot (1952 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Skype\Apps\login\languages\lv.js (114 bytes)
Delete the following value(s) in the autorun key (How to Work with System Registry):

[HKCU\Software\Microsoft\Windows\CurrentVersion\Run]
"Skype" = "%Program Files% (x86)\Skype\Phone\Skype.exe /minimized /regrun"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Run]
"uTorrent" = "%Program Files% (x86)\uTorrent\uTorrent.exe"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Run]
"uTorrent" = "C:\Users\"%CurrentUserName%"\AppData\Local\Temp\utt8112.tmp.exe /MINIMIZED"
Clean the Temporary Internet Files folder, which may contain infected files (How to clean Temporary Internet Files folder).
Reboot the computer.

*Manual removal may cause unexpected system behaviour and should be performed at your own risk.

Permalink

Back to the blog

e-mail

Google+

Twitter

Facebook

Trojan.Win32.SwrortProxy_bb2fcfa241

Our best antivirus yet!

Fresh new look. Faster scanning. Better protection.

Discover the new adaware antivirus 12

Our best antivirus yet

Trojan.Win32.SwrortProxy_bb2fcfa241

E-mail

Our best antivirus yet!

Fresh new look. Faster scanning. Better protection.

Discover the new adaware antivirus 12

Our best antivirus yet